ActivityWatch / aw-android

Cuándo se añadió cada estrella y fork, recopilado de GitHub y agrupado por día. El crecimiento acumulado se sitúa justo encima de las adiciones diarias que lo componen, de modo que ambos se leen en conjunto: la acumulación orgánica sostenida no se parece en nada a un pico abrupto y efímero. Cuando esa diferencia es medible, se informa como autenticidad del crecimiento.

Cada punto abarca 7 días.

Conjunto completo de dependencias resueltas según el grafo de dependencias de GitHub: 1 paquetes directos y 88 indirectos (transitivos). El cierre transitivo es completo cuando el repositorio incluye un lockfile.

Este repositorio no publica ningún paquete que el índice resuelva, así que se evaluó su propio grafo de dependencias — 89 paquetes, que incluyen también fijaciones de desarrollo y prueba que nunca se distribuyen: 7 tienen avisos conocidos, de los cuales 0 son directas.

Un aviso significa que la versión registrada en el grafo de dependencias cae dentro del rango afectado de un aviso. No se analiza la alcanzabilidad, y el grafo incluye fijaciones de desarrollo y prueba: un hallazgo puede referirse al utillaje y no al software distribuido.

{
  "data": {
    "repo": {
      "topics": [
        "android",
        "activitywatch",
        "rust"
      ],
      "is_fork": false,
      "size_kb": 1103,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "Ruby": 1865,
        "Shell": 2439,
        "Kotlin": 199731,
        "Python": 1526,
        "Makefile": 9189
      },
      "pushed_at": "2026-07-24T11:56:04Z",
      "created_at": "2018-12-16T13:35:14Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-24T11:56:27Z",
      "description": "ActivityWatch for Android, using aw-server-rust as backend.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MPL-2.0",
      "default_branch": "master",
      "license_spdx_raw": "MPL-2.0",
      "primary_language": "Kotlin",
      "significant_languages": [
        "Kotlin"
      ]
    },
    "owner": {
      "blog": "https://activitywatch.net",
      "name": "ActivityWatch",
      "type": "Organization",
      "login": "ActivityWatch",
      "company": null,
      "location": null,
      "followers": 961,
      "avatar_url": "https://avatars.githubusercontent.com/u/18249061?v=4",
      "created_at": "2016-04-03T18:45:53Z",
      "is_verified": null,
      "public_repos": 58,
      "account_age_days": 3764
    },
    "license": {
      "state": "standard",
      "spdx_id": "MPL-2.0",
      "raw_spdx": "MPL-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.14.0dev20260723",
          "kind": "other",
          "published_at": "2026-07-23T09:49:10Z"
        },
        {
          "tag": "v0.14.0dev20260722",
          "kind": "other",
          "published_at": "2026-07-23T09:28:35Z"
        },
        {
          "tag": "v0.14.0dev202607121",
          "kind": "other",
          "published_at": "2026-07-23T09:29:08Z"
        },
        {
          "tag": "v0.14.0dev20260712",
          "kind": "other",
          "published_at": "2026-07-12T12:24:58Z"
        },
        {
          "tag": "v0.12.1",
          "kind": "patch",
          "published_at": "2023-10-13T15:24:49Z"
        },
        {
          "tag": "v0.12.1b5",
          "kind": "other",
          "published_at": "2023-10-13T11:12:30Z"
        },
        {
          "tag": "v0.12.1b4",
          "kind": "other",
          "published_at": "2023-10-13T09:34:43Z"
        },
        {
          "tag": "v0.12.1b3",
          "kind": "other",
          "published_at": "2023-10-08T16:58:49Z"
        },
        {
          "tag": "v0.12.1b2",
          "kind": "other",
          "published_at": "2023-10-08T16:58:26Z"
        },
        {
          "tag": "v0.12.1b1",
          "kind": "other",
          "published_at": "2023-10-13T09:35:01Z"
        },
        {
          "tag": "v0.12.0",
          "kind": "minor",
          "published_at": "2023-09-26T17:38:47Z"
        },
        {
          "tag": "v0.10.0",
          "kind": "minor",
          "published_at": "2021-01-06T15:10:11Z"
        },
        {
          "tag": "v0.9.2",
          "kind": "patch",
          "published_at": "2020-07-29T07:10:32Z"
        },
        {
          "tag": "v0.9.1",
          "kind": "patch",
          "published_at": "2020-06-22T15:15:10Z"
        },
        {
          "tag": "v0.9.0",
          "kind": "minor",
          "published_at": "2020-05-05T15:14:09Z"
        },
        {
          "tag": "v0.4.13",
          "kind": "patch",
          "published_at": "2019-08-14T15:14:36Z"
        },
        {
          "tag": "v0.4.12",
          "kind": "patch",
          "published_at": "2019-08-13T11:54:39Z"
        },
        {
          "tag": "v0.4.11",
          "kind": "patch",
          "published_at": "2019-08-12T17:57:11Z"
        },
        {
          "tag": "v0.4.10",
          "kind": "patch",
          "published_at": "2019-07-03T15:02:45Z"
        },
        {
          "tag": "v0.4.9",
          "kind": "patch",
          "published_at": "2019-05-31T18:59:48Z"
        },
        {
          "tag": "v0.4.8",
          "kind": "patch",
          "published_at": "2019-04-18T15:18:17Z"
        },
        {
          "tag": "v0.4.7",
          "kind": "patch",
          "published_at": "2019-04-17T20:13:07Z"
        },
        {
          "tag": "v0.4.6",
          "kind": "patch",
          "published_at": "2019-04-17T14:20:06Z"
        },
        {
          "tag": "v0.4.5",
          "kind": "patch",
          "published_at": "2019-04-14T14:56:23Z"
        },
        {
          "tag": "v0.4.4",
          "kind": "patch",
          "published_at": "2019-04-12T18:51:57Z"
        },
        {
          "tag": "v0.4.3",
          "kind": "patch",
          "published_at": "2019-04-12T16:33:09Z"
        },
        {
          "tag": "v0.4.2",
          "kind": "patch",
          "published_at": "2019-04-04T17:17:35Z"
        },
        {
          "tag": "v0.4.1",
          "kind": "patch",
          "published_at": "2019-03-20T21:59:07Z"
        },
        {
          "tag": "v0.4.0",
          "kind": "minor",
          "published_at": "2019-03-15T20:07:38Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "31444445143ec32603680f67059d0485f1ef64aa",
          "body": "* feat: add POST_NOTIFICATIONS permission and runtime request\n\nAdds the POST_NOTIFICATIONS manifest permission required on Android 13+\n(API 33) for the foreground service notification to surface in the\nnotification drawer. Without this declaration and the accompanying\nruntime grant, the OS silently \n[…]\nonboarding)\nusing the ActivityResultContracts API. The request is a no-op on\nAndroid < 13 and on devices where the permission is already granted.\n\n* fix: avoid repeated notification permission prompts",
          "is_bot": false,
          "headline": "feat: add POST_NOTIFICATIONS permission and runtime request (#195)",
          "author_name": "Bob",
          "author_login": "TimeToBuildBob",
          "committed_at": "2026-07-24T11:56:04Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2dd4d5246846309752e88f110c024eb6e77317ae",
          "body": "…I (#194)\n\n* fix(fastlane): add changelog 36.txt and auto-generate in CI\n\n- Add fastlane/metadata/android/en-US/changelogs/36.txt for the v0.14.0 release\n  (fixes Play Store upload failure: 'Could not find changelog for 36')\n- Auto-generate changelog in release-fastlane CI job when no hand-written f\n[…]\now committed to\n  git by release.yml, so we just read from build.gradle (no Play Console\n  query in this job)\n- build.yml release-fastlane: remove Generate changelog step (file is\n  already committed)",
          "is_bot": false,
          "headline": "fix(fastlane): add changelog 36.txt and auto-generate changelogs in C…",
          "author_name": "Bob",
          "author_login": "TimeToBuildBob",
          "committed_at": "2026-07-23T19:03:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "749e059b249fab5411b10e34e6df7cb00134a6eb",
          "body": null,
          "is_bot": true,
          "headline": "chore: bump versionName to 0.14.0dev20260723",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-23T09:29:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "17b86e509687d232a88eab91eb57a8816841ded7",
          "body": null,
          "is_bot": false,
          "headline": "build(deps): updated aw-server-rust",
          "author_name": "Erik Bjäreholt",
          "author_login": "ErikBjare",
          "committed_at": "2026-07-22T20:40:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8e0f9d608ce1891d11cc62cf06ed51bcb568bff6",
          "body": null,
          "is_bot": true,
          "headline": "chore: bump versionName to 0.14.0dev20260722",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-22T14:09:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8eaebd72447add67f2c72a6bc92dd5a6a8691f51",
          "body": "…mand (#192)\n\nBackgroundService is started on BOOT_COMPLETED via SyncAlarmReceiver without\ngoing through MainActivity, so the API key was never written to config.toml\non cold boot. The server would start before the [auth] section existed,\nleaving the dashboard unauthenticated until the user opened the app manually.\n\nFix: call ensureDashboardApiKey(this) in onStartCommand before startServerTask()\nso the key is present regardless of how the service was started.",
          "is_bot": false,
          "headline": "fix(auth): call ensureDashboardApiKey in BackgroundService.onStartCom…",
          "author_name": "Bob",
          "author_login": "TimeToBuildBob",
          "committed_at": "2026-07-21T20:18:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a28b9d7b9a9d52bbf9f7c8314141406adb7b4005",
          "body": "* fix(auth): persist dashboard auth-disabled setting across restarts\n\nensureDashboardApiKey() treated an absent api_key as 'generate one', so\ndisabling auth in AuthSettingsActivity had no lasting effect — the next\napp restart or boot regenerated the key.\n\nFix: add dashboardAuthEnabled to AWPreferenc\n[…]\n) block\non both enable and disable paths. A coroutine cancellation between two\nstatements in the same withContext block cannot occur; the block either\ncompletes fully or is cancelled before it starts.",
          "is_bot": false,
          "headline": "fix(auth): persist auth-disabled setting across restarts (#193)",
          "author_name": "Bob",
          "author_login": "TimeToBuildBob",
          "committed_at": "2026-07-21T20:18:00Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6afd735b3b106eeb02c60af8e76c9ab8f0f9e3d3",
          "body": "* feat(auth): bootstrap android dashboard token\n\n* fix(auth): fix URL double-encoding and address Greptile P1/P2 findings\n\n- buildDashboardUrl: replace URI 5-arg constructor (which re-encodes %)\n  with direct string building from already-encoded components; fixes the\n  failing DashboardAuthTest.buil\n[…]\nwser: catch ActivityNotFoundException with a Snackbar\n  instead of crashing on kiosk/debloated devices with no browser installed\n- strings.xml: add no_browser_found string for the new Snackbar message",
          "is_bot": false,
          "headline": "feat(auth): bootstrap android dashboard token (#157)",
          "author_name": "Bob",
          "author_login": "TimeToBuildBob",
          "committed_at": "2026-07-21T18:35:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "920e35ed76e5b6af54b40a95da26877a96815860",
          "body": "… Play Store upload) (#190)\n\n* fix: remove FOREGROUND_SERVICE_DATA_SYNC permission + service type\n\nSync is disabled by default (#184) and not yet demonstrable, so\nthe Google Play Console FOREGROUND_SERVICE_DATA_SYNC declaration\n(which requires a video demo) was blocking the v0.14.0 Play Store upload\n[…]\nreview without a machine-readable rationale. The property documents\nAW's use case (local on-device HTTP server for the web UI) directly in\nthe manifest, aligned with the Play Console declaration form.",
          "is_bot": false,
          "headline": "fix: remove FOREGROUND_SERVICE_DATA_SYNC permission (unblocks v0.14.0…",
          "author_name": "Bob",
          "author_login": "TimeToBuildBob",
          "committed_at": "2026-07-13T20:04:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3e719ed559adba88ccb835df0a4cab8e321ab87b",
          "body": "…support (#187)\n\n* feat(watcher): multi-browser WebWatcher with Firefox Compose toolbar support\n\nRebases #151 (FractalMachinist) onto current master, targeting only the\nwatcher source files — no build-config or unrelated-file churn.\n\nChanges:\n- WebWatcher.kt: refactor using BrowserSessionTracker (ex\n[…]\nbrowserless emulators while still exercising the full flow on real devices\nand google_apis emulators where known browsers are present.\n\n---------\n\nCo-authored-by: Konrad Król <konrad.krol@incubly.com>",
          "is_bot": false,
          "headline": "feat(watcher): multi-browser WebWatcher with Firefox Compose toolbar …",
          "author_name": "Bob",
          "author_login": "TimeToBuildBob",
          "committed_at": "2026-07-12T21:23:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "49d9363463d8389708a6b4b3183020e3acb0f07f",
          "body": "…(#186)\n\n* fix: CSV/JSON export via WebAppInterface with FileProvider\n\nAdds a JavaScript bridge so the webui can trigger native file downloads\non Android. The original download-as-blob approach crashed because the\nAndroid WebView cannot initiate system downloads the same way a browser does.\n\nChanges\n[…]\nider in AndroidManifest.xml\n\nDepends on ActivityWatch/aw-webui#532 (webui side of the bridge).\n\nFixes #104\n\n* fix: harden downloadFile against path traversal, null extDir, write errors, missing viewer",
          "is_bot": false,
          "headline": "fix: CSV/JSON export via WebAppInterface + FileProvider (fixes #104) …",
          "author_name": "Bob",
          "author_login": "TimeToBuildBob",
          "committed_at": "2026-07-12T18:17:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6f9ca029c429eb92fc77217106564b880c249ebe",
          "body": null,
          "is_bot": true,
          "headline": "chore: bump versionName to 0.14.0dev202607121",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-12T17:44:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "812c25c36175b6c57ba7af0f543a2f9f26d1e7c8",
          "body": "* feat(sync): disable automatic sync by default\n\nAndroid sync silently no-ops for most users because the app-scoped data\ndirectory (Android/data/.../files/sync/) is inaccessible to Syncthing and\nother sync clients since Android 11 scoped storage restrictions. Running\nthe 15-minute scheduler in this \n[…]\n the pref), cancel the alarm via SyncScheduler.cancelAlarm()\ninstead of just skipping. Addresses Greptile P1: disabled sync left the\nwakeup alarm armed, causing 15-minute wake-ups that silently no-op.",
          "is_bot": false,
          "headline": "feat(sync): disable automatic sync by default (#184)",
          "author_name": "Bob",
          "author_login": "TimeToBuildBob",
          "committed_at": "2026-07-12T17:17:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "39e840fd4bc750cb585b6ec52b2024bfeaa9e566",
          "body": "…183)\n\n* fix: use Build.DEVICE instead of Build.MODEL for hostname fallback\n\nBuild.MODEL returns the OEM marketing name (e.g. 'Poco F8 Ultra') which\ncontains spaces that break hostname-based bucket matching in aw-webui and\naw-server. Build.DEVICE returns the device codename (e.g. 'poco_f8_ultra')\nwh\n[…]\nwhitespace-only DEVICE_NAME with takeIf so it\nfalls through to Build.DEVICE rather than resolving to empty string.\n\n* fix: filter blank DEVICE_NAME before falling back to Build.DEVICE in RustInterface",
          "is_bot": false,
          "headline": "fix: use Build.DEVICE instead of Build.MODEL for hostname fallback (#…",
          "author_name": "Bob",
          "author_login": "TimeToBuildBob",
          "committed_at": "2026-07-12T16:42:04Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "67b232631c909b33ff40ff27dc85efa3304ddc9d",
          "body": null,
          "is_bot": true,
          "headline": "chore: bump versionName to 0.14.0dev20260712",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-12T11:55:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e316adfc7fea02711237a654f5889bbb23ea7579",
          "body": "* build: bump targetSdkVersion/compileSdk to 35 (Android 15)\n\nGoogle Play now requires targetSdkVersion >= 35. The v0.14.0 release CI\nfailed with 'Target SDK of artifact is too low: 35'.\n\nChanges:\n- compileSdk 34 → 35\n- targetSdkVersion 34 → 35\n- Add values-v35/styles.xml: opt out of Android 15's ma\n[…]\nK 35)\n\ncompileSdk 35's updated platform nullability annotations mark\nPackageInfo.versionName as String? instead of String, which broke\nKotlin compilation of MainActivity.version after the SDK 35 bump.",
          "is_bot": false,
          "headline": "build: bump targetSdkVersion/compileSdk to 35 (Android 15) (#179)",
          "author_name": "Bob",
          "author_login": "TimeToBuildBob",
          "committed_at": "2026-07-12T11:50:58Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b6ccf636aaa87639abb7f6f120c099bb04515d9b",
          "body": "…le (#182)\n\nnowsprinting/check-version-format-action@v4 treats 0.x.x versions as\nnot stable (semver convention), but aw-android uses 0.x.x for production\nreleases. This caused SUPPLY_TRACK=internal for all releases, so Play\nStore uploads went to the internal track instead of production.\n\nReplace the is_stable check with a direct regex: X.Y.Z → production,\nany pre-release suffix (b, rc, dev, alpha, beta) → internal.",
          "is_bot": false,
          "headline": "fix(ci): use version regex for SUPPLY_TRACK instead of semver is_stab…",
          "author_name": "Bob",
          "author_login": "TimeToBuildBob",
          "committed_at": "2026-07-12T11:50:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "16b61ceab96af030263975cea7b902e5a9aea69f",
          "body": "Newer fastlane versions (2.236+) fail hard with exit code 1 if\nhttps://rubygems.org is not listed in the system gem sources. This\ncheck was not present in 2.216 (the version pinned in Gemfile.lock),\nbut the bundler cache can drift to a newer version between releases.\n\ngem sources --add is idempotent (exits 0 if already present), so this\nfix is safe to apply unconditionally.",
          "is_bot": false,
          "headline": "fix(ci): add rubygems.org source before fastlane release step (#180)",
          "author_name": "Bob",
          "author_login": "TimeToBuildBob",
          "committed_at": "2026-07-12T02:34:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3c10fe90cb3de6bf66bfbeed7024859e07b0dd5f",
          "body": "Allow versions like 0.14.0b1 (beta), 0.14.0rc1 (release candidate),\nand 0.14.0dev20260712 (dev build) in the workflow_dispatch trigger.\n\nThe existing build.yml already handles pre-release tags correctly:\n- check-version-format-action detects non-stable tags\n- Fastlane routes to Play Store internal t\n[…]\nml needed relaxing.\n\nUsage:\n  gh workflow run release.yml --repo ActivityWatch/aw-android -f version=0.14.0b1\n  gh workflow run release.yml --repo ActivityWatch/aw-android -f version=0.14.0dev20260712",
          "is_bot": false,
          "headline": "ci: support pre-release versions in Release workflow (#178)",
          "author_name": "Bob",
          "author_login": "TimeToBuildBob",
          "committed_at": "2026-07-12T02:33:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "eddd567428164abc1ce16b26da0632a8912cecc7",
          "body": "… (#177)\n\n* ci: add workflow_dispatch to Build + warn when RELEASE_PAT is missing\n\n- build.yml: add workflow_dispatch trigger so builds can be manually launched\n  on any ref (branch or tag) when the automatic push trigger fails.\n  Usage: gh workflow run build.yml --repo ActivityWatch/aw-android --re\n[…]\nnto the shell script text, since GitHub Actions substitutes\n${{ }} expressions as raw text before the shell runs — the manual\nbuild-trigger warning ran before the later version-format validation\nstep.",
          "is_bot": false,
          "headline": "ci: add workflow_dispatch to Build + warn when RELEASE_PAT is missing…",
          "author_name": "Bob",
          "author_login": "TimeToBuildBob",
          "committed_at": "2026-07-12T01:55:43Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "09f59e41368bcc5921e0aa52fac606aff2203b2c",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump aw-server-rust submodule",
          "author_name": "Erik Bjäreholt",
          "author_login": "ErikBjare",
          "committed_at": "2026-07-12T01:53:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8ae10968ce19d8df35de652c65c4467e8ef4dfdc",
          "body": null,
          "is_bot": true,
          "headline": "chore: bump versionName to 0.14.0",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-12T01:23:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "caf8365ca7bac4cf871c7187e775bd6b71a9dd81",
          "body": "This reverts commit d78c63715c98a2c712b207b0aa29169b3ca93313.",
          "is_bot": false,
          "headline": "fix: revert \"chore: replace the default android.jks.age\" (#175)",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-11T16:35:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "62b86708c055ca0da08a952a6e9489128adb4df9",
          "body": "…me JNI (#172)\n\n* fix(migration): handle plain-text success response from migrateHostname JNI\n\nThe native migrateHostname() returns a plain-text string on success\n(\"Migrated hostname for N bucket(s)\") but a JSON error object on failure\n({\"error\": \"...\"}). The Kotlin code was incorrectly trying to pa\n[…]\n raw result as fallback in error log\n\nWhen the JSON doesn't contain an 'error' key, optString('error', null)\nlogged '(null)'. Use result as fallback so the raw payload is always\nvisible for debugging.",
          "is_bot": false,
          "headline": "fix(migration): handle plain-text success response from migrateHostna…",
          "author_name": "Bob",
          "author_login": "TimeToBuildBob",
          "committed_at": "2026-07-11T13:50:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5d34795d6a929f8ca0861706875830e86e1b3d84",
          "body": "… builds (#173)\n\n* fix(ci): validate all jniLibs ABIs and exclude armeabi-v7a from debug builds\n\nTwo CI failures on master since 2026-07-02:\n\n1. `INSTALL_FAILED_NO_MATCHING_ABIS` in E2E tests: the actions/cache v3→v4\n   upgrade in PR #160 invalidated the jniLibs cache, forcing a fresh Rust\n   debug \n[…]\nture.\n\nNote: the `age: no identity matched any of the recipients` failure in the\n`build-aab` job is a separate signing-infrastructure issue not addressed here.\n\n* fix(ci): reuse jniLibs ELF validation",
          "is_bot": false,
          "headline": "fix(ci): validate all jniLibs ABIs and exclude armeabi-v7a from debug…",
          "author_name": "Bob",
          "author_login": "TimeToBuildBob",
          "committed_at": "2026-07-11T13:50:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c2c15575bf85b65c397493cfe3e12c6782ac18d3",
          "body": "…e 2nd) (#160)\n\n- checkout@v2/v3 → v4 (all jobs)\n- cache@v3 → v4 (build-rust, build-apk, test-e2e)\n- cache/restore@v3 → v4 (build-apk, test, test-e2e)\n- setup-java@v1 → v4 + distribution: temurin (build-apk, test, test-e2e)\n- android-actions/setup-android@v2 → v3 (all jobs)\n- Wandalen/wretry.action@master → v3.8.0_js_action (pinned)\n- dtolnay/rust-toolchain@stable → @1.79.0 (pin for time crate compat)\n- Remove unused NODE_VERSION env var\n\nCo-authored-by: TimeToBuildBob <bob@timetobuildbob.com>",
          "is_bot": false,
          "headline": "ci: upgrade deprecated GitHub Actions before Node.js 24 deadline (Jun…",
          "author_name": "Bob",
          "author_login": "TimeToBuildBob",
          "committed_at": "2026-07-02T17:01:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "584c002ea705a3ad6515960a0173932e33ead6d3",
          "body": null,
          "is_bot": false,
          "headline": "fix(activity): skip main startup during onboarding",
          "author_name": "Bob",
          "author_login": "TimeToBuildBob",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "510665b0513a4b5b1c30354c744a2f90d77dc97b",
          "body": null,
          "is_bot": false,
          "headline": "fix(web): guard WebWatcher bucket initialization",
          "author_name": "Bob",
          "author_login": "TimeToBuildBob",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0458ff8b0ca351b09b00b801aa5a19c67f5a5b5b",
          "body": null,
          "is_bot": false,
          "headline": "fix(media): handle bucket init failures",
          "author_name": "Bob",
          "author_login": "TimeToBuildBob",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c996d12e26859c46752bfb0e85ac2fad118326a9",
          "body": "RustInterface() loads libaw_server.so + calls initialize() via JNI, which\ncan take several seconds on slow/no-KVM emulators (CI).  Android's\nstartForegroundService() timer started ticking before onCreate() ran,\nso if native init took >5s the OS killed the process with\nRemoteServiceException: startForegroundService without startForeground.\n\nFix: call startForeground() first in onCreate(), then do native init.\nAlso guard onDestroy() with isInitialized in case onCreate() throws.",
          "is_bot": false,
          "headline": "fix(ci): call startForeground() before native init to avoid 5s ANR",
          "author_name": "Bob",
          "author_login": "TimeToBuildBob",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2de01f0348ee298db4cd5bfde2b62c0cd345b10f",
          "body": "This reverts commit 2a369d6c0d7471b25192845497209a360c5517a1.",
          "is_bot": false,
          "headline": "Revert \"fix(ci): avoid multi-line shell construct in e2e runner script\"",
          "author_name": "Bob",
          "author_login": "TimeToBuildBob",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "096ad260f6e4ce82701cc98caadb34175a1f85bc",
          "body": "…eout\n\nOn slow CI runners without KVM, onStartCommand() may not be invoked\nwithin Android's 5-second startForegroundService() deadline, causing\nRemoteServiceException and crashing the E2E ScreenshotTest.\n\nMoving startForeground() to onCreate() promotes the service to foreground\nimmediately upon creation, before the countdown begins.",
          "is_bot": false,
          "headline": "fix(service): call startForeground() in onCreate() to avoid 5s OS tim…",
          "author_name": "Bob",
          "author_login": "TimeToBuildBob",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "980e1d84c2a4d12a7d6b84abf77638e263ac321c",
          "body": "The reactivecircus/android-emulator-runner@v2 action's parseScript()\nsplits the input by newlines and runs each as a separate sh -c command.\nThe original script wrapped commands in a bash -c with if/fi block that\nfails when each line is a standalone invocation.\n\nReplace the multi-line if/fi with sin\n[…]\nine test && cmd || true\npatterns. Remove the unnecessary bash -o pipefail wrapper — the >-\nYAML folding already ensures the entire script runs as one sh -c call,\nso  stays in scope for the final exit.",
          "is_bot": false,
          "headline": "fix(ci): avoid multi-line shell construct in e2e runner script",
          "author_name": "Bob",
          "author_login": "TimeToBuildBob",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4e4465ddf4e01b673a6575f37d7798cbca522204",
          "body": null,
          "is_bot": false,
          "headline": "fix(ci): keep e2e runner script in one shell",
          "author_name": "Bob",
          "author_login": "TimeToBuildBob",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c19c92d91288788e6fd77753da65847b58e1d9f4",
          "body": null,
          "is_bot": false,
          "headline": "fix(ci): stabilize aw-android web watcher e2e",
          "author_name": "Bob",
          "author_login": "TimeToBuildBob",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ad935dfb6a8b0fa19bb5104032939516d31a685a",
          "body": "…r node\n\n- MediaWatcher.onCreate() constructed RustInterface and called createBucketHelper()\n  (blocking JNI/HTTP to a possibly-unstarted local server) on the\n  NotificationListenerService main thread, risking an ANR. Post it to the\n  handlerThread and mark ri @Volatile for safe cross-thread visibil\n[…]\nilityEvent used findWebView()'s returned node then dropped\n  it without recycle(), leaking one AccessibilityNodeInfo per event on API 26-32.\n  Recycle it unless it is the framework-owned event.source.",
          "is_bot": false,
          "headline": "fix: move MediaWatcher bucket init off main thread; recycle WebWatche…",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7410568b84b47f16ef7a15561f82c506d58b6eb5",
          "body": "…usage access\n\n- Alias UsageStatsWatcher's bucket_id/unlock_bucket_id to SessionEventWatcher's\n  SESSION_BUCKET_ID/UNLOCK_BUCKET_ID so the two watchers cannot drift to\n  different bucket names.\n- Skip EventParsingWorker cleanly (Result.success) when usage access is not\n  granted, instead of constructing RustInterface and querying with no data.",
          "is_bot": false,
          "headline": "refactor: dedupe bucket-id constants and guard EventParsingWorker on …",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "af2a3bed367d0328a2c23147f4f13b5c36c925ad",
          "body": "CategoryTimeWidgetProvider.schedulePeriodicUpdates() uses\nsetExactAndAllowWhileIdle(), which requires SCHEDULE_EXACT_ALARM on Android\n12+. Without the permission it always hits the SecurityException fallback and\nsilently downgrades the widget's 5-minute refresh to inexact (Doze-delayed)\nalarms. Restore the permission so exact scheduling works as intended.",
          "is_bot": false,
          "headline": "fix: restore SCHEDULE_EXACT_ALARM permission for widget updates",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5ae06e6b78360569a9f687d2ef4a172996687ab4",
          "body": null,
          "is_bot": false,
          "headline": "fix: handle alarm errors and test JNI artifact restore",
          "author_name": "Bob",
          "author_login": "TimeToBuildBob",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8114118d5eb1d4353c6a55ca0f916f342d0738d4",
          "body": "Strict RESUME->PAUSE pair-matching scanned forward past other apps' events,\nso a session absorbed time another app spent in the foreground when events\ninterleaved, inflating total screen time. Combined with the lastUpdated+1ms\nincremental cursor, a long session could also be dropped permanently.\n\nRe\n[…]\nown PAUSE or a\ndifferent app's RESUME. The trailing still-open session is not emitted; it is\ncaptured on a later run once its PAUSE (or next RESUME) arrives, so the cursor\ncannot duplicate or drop it.",
          "is_bot": false,
          "headline": "fix: prevent overlapping-session double-count in SessionParser",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a825e4f6ef5ec05ffa53c2618503eb7c2b08cfbe",
          "body": "Both alarm sites (SyncScheduler, UsageStatsWatcher) use setInexactRepeating,\nso the exact-alarm permission was never exercised. It is a Play Console\nsensitive permission that triggers a policy declaration requirement, so\nrequesting it needlessly risks release rejection.",
          "is_bot": false,
          "headline": "fix: drop unused SCHEDULE_EXACT_ALARM permission",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "94fdb201775abf221b9c794fdf145c0ecb9f126c",
          "body": "…n race\n\nonDestroy() runs on the main thread and clears activeControllers/activeCallbacks\nwhile pollActiveSessions() iterates activeControllers on handlerThread. Using\nplain mutableMapOf() can throw ConcurrentModificationException in the field.\n\nReplace all three maps with ConcurrentHashMap so both threads can access them\nwithout locking while preserving correct cleanup semantics in onDestroy.",
          "is_bot": false,
          "headline": "fix: use ConcurrentHashMap in MediaWatcher to prevent map-modificatio…",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ac37e1b425961e80f4d5d4f390b0f74bbe1b2045",
          "body": "The previous commit removed getTimelineForDay() from SessionEventWatcher\nbut left getTodayTimeline() in UsageStatsWatcher calling it, causing a\ncompilation error. getTodayTimeline() itself has no callers, so remove it.",
          "is_bot": false,
          "headline": "fix: remove getTodayTimeline() that called deleted getTimelineForDay()",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "89c1488ff6ea7b769c97d2ca56bd7fe06a650622",
          "body": "sendSessionEventsForDay, sendSessionEventsForPeriod, sendSessionEventsForLastDays,\nforceRefreshToday, insertSessionsAsEvents, getTimelineForDay, and\ngetSessionsSinceLastUpdate had no callers outside their own files and would\nproduce duplicate events if invoked more than once for the same date range.\n\nThe production data path is processEventsSinceLastUpdate() which uses a\npersistent cursor and ReentrantLock.tryLock() to prevent duplicates — the\nremoved helpers bypassed both guards.",
          "is_bot": false,
          "headline": "fix: remove bulk-import helpers with no deduplication guard",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "20f98ce963404abaa32047f89473df3d8dadddaf",
          "body": "Previously, cache-hit == 'true' guards meant a jniLibs cache miss caused\nthe 'Check that jniLibs present' and 'Test' steps to be silently skipped\nwhile the job reported success. This hid missing test coverage on PRs that\nbump the aw-server-rust submodule.\n\nFix: fail-on-cache-miss: true causes the cache/restore step itself to fail\non miss, so CI fails visibly rather than silently skipping unit tests.",
          "is_bot": false,
          "headline": "ci: fail hard on jniLibs cache miss instead of silently skipping tests",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3c4171d625dc32798d6fe3eb6f9c80f39abf2a30",
          "body": "… off main thread\n\nCategoryTimeWidgetWorker: dead code, never enqueued. Widget updates are driven\nby the self-rescheduling AlarmManager alarm in CategoryTimeWidgetProvider.\n\nSyncScheduler.start(): wrap SyncInterface construction in Dispatchers.IO to\navoid blocking the main thread with JNI calls (getDeviceName) and file I/O\n(XDG env var resolution, sync dir lookup) during cold starts.",
          "is_bot": false,
          "headline": "fix: remove dead CategoryTimeWidgetWorker and move SyncInterface init…",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d73a99a8e4f1af26d7fa588d49f29774a01c120d",
          "body": "… guard\n\nThe previous guard returned Result.retry() on empty getBucketsJSON(), which\non a fresh install (no buckets yet) meant the worker never progressed and the\nbucket was never created — background collection was permanently broken until\nthe user opened the app.\n\nFix: only retry on JSONException (non-JSON response = server not reachable).\nAn empty JSON object '{}' means the server IS up with no buckets yet — proceed\nand let processEventsSinceLastUpdate() create the aw-watcher-android bucket.",
          "is_bot": false,
          "headline": "fix: distinguish server-down from fresh-install in EventParsingWorker…",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6141493eb368004ac381bc381db90fe24b3f5897",
          "body": "optBoolean(\"success\", true) and catch { true } both silently treat\nnon-JSON or key-absent responses as successful migration, permanently\nblocking retries if the server wasn't ready on first launch.\n\nChange both to false so that:\n- JSON without a \"success\" key → retry next start\n- Non-JSON response (server error/not ready) → retry next start\n- JSON with \"success\": true → mark migrated (only explicit success counts)",
          "is_bot": false,
          "headline": "fix: use conservative defaults for hostname migration success detection",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cc56b401c55e48b9c0d99f26eaedf56b7874ed84",
          "body": "…uspend no-op\n\nRustInterface.test(): remove the debug method with hardcoded 2026-01-31\ntimestamps; it created a 'test' bucket on any call and was never called\nfrom production code.\n\ninsertEvent KDoc: rewrite to accurately describe the implementation\n(heartbeat with pulsetime=0) rather than implying a separate server endpoint.\n\nsendHeartbeatsSuspend(): add KDoc explaining the intentional legacy-mode\nno-op so callers on the non-session path know to use sendHeartbeats() instead.",
          "is_bot": false,
          "headline": "fix: remove test() debug method, clarify insertEvent KDoc, document s…",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "37c9a17768fe55f4a6621739d65fbf7f8759c5e8",
          "body": "…rver\n\nIf the aw-server is not running when the nightly WorkManager job fires,\nRustInterface.getEventsJSON() returns an empty JSONArray (silently swallowing\nthe error), causing getLastEventTime() to return null, the cursor to reset\nto epoch 0, and up to 30 days of UsageStats sessions to be re-insert\n[…]\nnceLastUpdate(). An empty bucket list or JSONException both\nindicate the server isn't ready; return Result.retry() so WorkManager\nreschedules the job rather than corrupting the bucket with duplicates.",
          "is_bot": false,
          "headline": "fix: guard EventParsingWorker against epoch-0 cursor reset on cold se…",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6a46f353f114a26a6c9ab180829a0fa8168c9fce",
          "body": "SyncScheduler.stop() was cancelling the AlarmManager fallback, which defeats\nits purpose on OEM devices that suppress START_STICKY restarts: if onDestroy()\nfires before the process dies, the alarm is gone and sync never recovers.\n\nRemove cancelAlarm() from stop() and delete the now-unused helper. The alarm\nis registered once on start() and lives until Android cancels it on app\nuninstall, ensuring SyncAlarmReceiver can always fire as a fallback.",
          "is_bot": false,
          "headline": "fix: keep AlarmManager fallback alarm alive when BackgroundService stops",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8ea1334e3a1e61596c6ab7557bbc4675d915c127",
          "body": "…thread, deprecate sendHeartbeats()\n\nbuild.gradle: add lifecycle-runtime-ktx:2.8.7 as an explicit dependency\n  (required for lifecycleScope extension used in MainActivity.onResume).\n\nSyncAlarmReceiver: move SyncInterface creation inside CoroutineScope(IO) so\n  the file-system operations in SyncInter\n[…]\ntsWatcher.sendHeartbeats(): mark @Deprecated with a ReplaceWith hint\n  pointing to sendHeartbeatsSuspend(); the function is a no-op in session\n  mode and callers should migrate to the suspend variant.",
          "is_bot": false,
          "headline": "fix: add lifecycle-runtime-ktx dep, move SyncInterface init off main …",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1e14f23dc48a5d7619dbc45634efcd15319e0d73",
          "body": "…races\n\nregisterCallback() and addOnActiveSessionsChangedListener() are now passed\nthe handlerThread handler so all mutations of activeControllers,\nactiveCallbacks, and lastEventKeys happen on a single thread — the same\nHandlerThread that runs the polling loop. This eliminates the\nConcurrentModificationException risk introduced when the polling was moved\noff the main thread.",
          "is_bot": false,
          "headline": "fix: pin all MediaWatcher callbacks to handlerThread to prevent data …",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "61bd673afac4edea27ce425ec2f69ab4be0535b5",
          "body": "Replace the fragile contains(\"error\") check with a proper JSON parse of\nthe native response. If the JSON has \"success\": false, retry on next\nstart. If the response is not valid JSON, treat it as success (native\nlib returned without signalling failure). This prevents a native response\nthat incidentally contains the word \"error\" from permanently blocking\nsetHostnameMigrated().",
          "is_bot": false,
          "headline": "fix: parse migrateHostname result as JSON instead of string-contains",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2ce803e23e4e709a0a77dc89dda6768bb5b48d7e",
          "body": "SyncScheduler.start() arms both a Handler chain (15 min) and an AlarmManager\nfallback (also 15 min). A slow initial sync can cause both to fire simultaneously,\ncalling syncBoth() on the same native library and sync directory from two threads.\n\nAdd a companion-object AtomicBoolean 'syncInFlight' shar\n[…]\nsyncBothAsync() uses compareAndSet to acquire it and\nclears it in the callback, so any concurrent entry — whether from the Handler\nchain, SyncAlarmReceiver, or a future caller — is skipped with a log.",
          "is_bot": false,
          "headline": "fix: prevent concurrent syncBoth() JNI calls via shared AtomicBoolean",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a9124a115a86d65a00cfedaecc67058789e08db2",
          "body": "Replace Handler(Looper.getMainLooper()) with a dedicated HandlerThread.\nheartbeatHelper() is a blocking JNI call; running it on the main looper\nrisks ANR during active media playback. The HandlerThread is quit safely\nin onDestroy() to avoid thread leaks.",
          "is_bot": false,
          "headline": "fix: move MediaWatcher polling and JNI heartbeat off main thread",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d2a295850bdae7af1e4499fa371c650d71997d2b",
          "body": "…32 leak)\n\nNodes obtained via getChild() must be recycled when no longer needed on\nAPI 26-32 (on 33+ recycle() is a no-op). Replace the lazy mapNotNull\nchain (which acquired nodes and never recycled null-returning branches)\nwith an explicit loop that:\n  - recycles child nodes whose subtrees contain no WebView\n  - recycles intermediate ancestors when the returned node is deeper",
          "is_bot": false,
          "headline": "fix: recycle AccessibilityNodeInfo in WebWatcher.findWebView (API 26-…",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7169f61563aad76e6ad172a9a55747e126ca1877",
          "body": "Android calls onUpdate for existing widget instances after device reboot.\nWithout calling schedulePeriodicUpdates() there, the 5-minute AlarmManager\nchain is never re-created and background widget refreshes stop permanently\nuntil the user removes and re-adds the widget.",
          "is_bot": false,
          "headline": "fix: restore widget periodic alarm in onUpdate (covers post-reboot case)",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fdf69433191e60f16cb71c89e98370b2bff11101",
          "body": "…t calc\n\nmigrateHostname() is a blocking JNI call that can connect to the local\naw-server. Running it on the main thread in onStartCommand risks ANR when\nthe server is already running. Move it to Dispatchers.IO via a coroutine.\n\nAlso fix scheduleEventParsing(): reset Calendar.MILLISECOND to 0 so the\ninitial delay to midnight is exact rather than off by up to 999ms.",
          "is_bot": false,
          "headline": "fix: run hostname migration off main thread to avoid ANR; fix midnigh…",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e9d7a4d02af49fdf875f594c6450abba02d23f86",
          "body": "…chable\n\nSyncScheduler.start() now also schedules a 15-minute inexact repeating\nAlarmManager alarm that fires SyncAlarmReceiver.SYNC_ALARM. This provides\na sync fallback when BackgroundService is killed by the OS; the Handler\nchain remains the primary path while the service is alive.\n\nSyncScheduler.stop() cancels the alarm to avoid sync after explicit stop.",
          "is_bot": false,
          "headline": "fix: wire AlarmManager fallback in SyncScheduler so SYNC_ALARM is rea…",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d6605c5380387781d51c22a7a80247444f63840f",
          "body": "SyncScheduler: move next-sync scheduling inside the syncBothAsync callback\nso the 15-minute timer starts only after the previous sync completes,\npreventing concurrent JNI calls to the native sync library.\n\nBackgroundService: only call setHostnameMigrated() when migrateHostname()\ndoes not return an error string, so a transient failure (server not yet\nready) does not permanently suppress the migration.",
          "is_bot": false,
          "headline": "fix: prevent concurrent syncs and unconditional hostname migration mark",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "76a22bd25c115f379a2662835e9864bac8d37c33",
          "body": "…armReceiver\n\nAlarmReceiver.LOG_DATA path now calls sendHeartbeatsSuspend() inside\ngoAsync() + CoroutineScope(Dispatchers.IO) so the hourly alarm-driven\nbackground collection works correctly in session mode.\n\nsendHeartbeats() is simplified to the legacy (non-session) path only,\nsince AlarmReceiver now uses the suspend API directly.",
          "is_bot": false,
          "headline": "fix: restore background collection for session mode via goAsync in Al…",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "345bcc71eef9a8dbe3af88e8a79627f3607cc1da",
          "body": "…BOOT_COMPLETED (greploop final+1)\n\n- Delete sendSessionEvents() (unmanaged CoroutineScope) from SessionEventWatcher\n- Switch MainActivity.onResume() from sendHeartbeats() to\n  lifecycleScope.launch { sendHeartbeatsSuspend() }, binding the\n  coroutine to the Activity's lifecycle so Android can cancel it cleanly\n- Remove BOOT_COMPLETED from SyncAlarmReceiver's intent-filter; AlarmReceiver\n  already starts BackgroundService on boot, preventing a duplicate start",
          "is_bot": false,
          "headline": "fix: bind session-event coroutine to Activity lifecycle; remove dual …",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "84e5c80fbafdc023a49ada89d916699d4b8b10b0",
          "body": "…ploop final)\n\nSYNC_ALARM: call goAsync() and finish pendingResult in the sync callback\n(and in catch blocks) so the process is not killed before the executor\nthread completes.\n\nBOOT_COMPLETED: replace SyncScheduler(context).start() — which posts a\n60s Handler.postDelayed that dies with the process — with\nstartForegroundService(BackgroundService). BackgroundService already owns\nthe SyncScheduler lifecycle and keeps the process alive as a foreground\nservice.",
          "is_bot": false,
          "headline": "fix: prevent async work from being orphaned in SyncAlarmReceiver (gre…",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2d33ddd4fdad12721d906b4967e85b064ec4d9a4",
          "body": "SyncAlarmReceiver handled BOOT_COMPLETED and SYNC_ALARM but was never\ndeclared in AndroidManifest.xml, so Android never delivered either\nbroadcast. Boot-persistence and alarm-triggered sync were silently\nnon-functional on all devices.",
          "is_bot": false,
          "headline": "fix: register SyncAlarmReceiver in manifest (greploop iteration 5)",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b46440cb1259f4acf355a28992d0ac14d4e21ebc",
          "body": "…greploop iteration 4)\n\nAndroid 14 (API 34) requires the foreground service type to be declared\nin both the manifest (already done: foregroundServiceType=dataSync) and\nthe startForeground() runtime call. The 2-arg call throws on API 34+.\nUse ServiceCompat.startForeground with FOREGROUND_SERVICE_TYPE_DATA_SYNC\nfor API 29+ and fall back to 0 on older versions.",
          "is_bot": false,
          "headline": "fix: pass foreground service type to startForeground on Android 14+ (…",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bf1d38a9dff1723fab41cfcab5493d6eda911f34",
          "body": "…ploop iteration 3)\n\nonResume and EventParsingWorker each create a new SessionEventWatcher,\nread the same cursor from the server, and insert the same sessions.\nAdded a companion-object ReentrantLock with tryLock so a concurrent\ncall skips immediately rather than queuing behind and then re-inserting\nthe same window of sessions.",
          "is_bot": false,
          "headline": "fix: prevent duplicate session insertion from concurrent callers (gre…",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "01b56331be434b863a72aeb93a5026d77cd2f5cb",
          "body": "…on 2)\n\nonUpdate called updateSingleWidget synchronously, which calls\nri.androidQuery() — a JNI call that makes a local HTTP request.\nWrap in goAsync() + IO coroutine, consistent with ACTION_REFRESH\nand ACTION_PERIODIC_UPDATE handlers in the same class.",
          "is_bot": false,
          "headline": "fix: dispatch onUpdate off main thread to avoid ANR (greploop iterati…",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "81204d93d02ac9c666974ba5f1fc2563ebe88351",
          "body": "- MainActivity: remove unused lateinit syncScheduler (BackgroundService\n  owns SyncScheduler now) and dead test comment\n- CategoryTimeWidgetProvider: move widget update loop inside try block\n  and guard pendingResult.finish() with finally so it always fires\n- CategoryTimeWidgetProvider: make ACTION_\n[…]\nant\n- SessionEventWatcher: replace misleading W-level log on empty bucket\n  (normal on first run) with a silent null return; keep the warning only\n  for the truly unexpected case of >1 events returned",
          "is_bot": false,
          "headline": "fix: address greptile review feedback (greploop iteration 1)",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e7f8556c5c174c131fbd2365a2d70bae79f9847c",
          "body": "BackgroundService: ExistingPeriodicWorkPolicy.UPDATE was resetting the\nnightly EventParsingWorker schedule on every app open. If the app was\nused after midnight the job would slip 24 hours. Changed to KEEP so the\nfirst-scheduled midnight alarm is never disturbed by subsequent starts.\n\nCategoryTimeWi\n[…]\n helpers) was unreachable — the Provider uses AlarmManager and\nCategoryTimeWidgetUpdater for all updates. Removed the dead 300-line\nblock; doWork() now delegates to CategoryTimeWidgetUpdater directly.",
          "is_bot": false,
          "headline": "fix: use KEEP policy for EventParsingWorker, remove dead widget code",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "baa2f033a055fe17c3b5cf5d664690de4fb2616f",
          "body": "…her-android\n\nThe test suffix caused all real user app-usage data to be stored under\na bucket name that queries and dashboards targeting aw-watcher-android\nwould never find.",
          "is_bot": false,
          "headline": "fix: rename production bucket from aw-watcher-android-test to aw-watc…",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fa39a201d2f0fade940d371274bb6c3765d31660",
          "body": "The 'tools' (Android SDK Tools) package was removed/corrupted upstream\nand now fails with 'Error on ZipFile unknown archive'. Only install\nplatform-tools which is what we actually need.",
          "is_bot": false,
          "headline": "fix(ci): skip deprecated 'tools' package in setup-android@v3",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e9224e5119e62ca75614ac41ed20a167c6164ec6",
          "body": "google_apis on API 29 triggers ShellCommandUnresponsiveException on the\nubicloud runner — the heavier system image causes ADB to become\nunresponsive during connectedDebugAndroidTest. The default target has no\nGoogle Play Services but is significantly more stable on CI.",
          "is_bot": false,
          "headline": "fix(ci): use default emulator target to avoid google_apis flakiness",
          "author_name": "Bob",
          "author_login": "TimeToBuildBob",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a92262a2301bf16f2b0361fdd93b6c39f30486bb",
          "body": "- remove signingConfig signingConfigs.debug from release build type\n  (debug-signed APKs are rejected by Play Store and F-Droid)\n- remove blank applicationIdSuffix from release block\n- fix widget refresh showing stale data: sendHeartbeats() fires a\n  fire-and-forget coroutine so the widget update was racing against\n  event insertion; add sendSessionEventsSuspend()/sendHeartbeatsSuspend()\n  and restructure ACTION_REFRESH to use goAsync() + await before\n  calling updateWidgetWithRefreshButton",
          "is_bot": false,
          "headline": "fix: address two greptile P1 findings",
          "author_name": "Bob",
          "author_login": "TimeToBuildBob",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4fbccb290abca4338d18f5ca25d3f14042fbbfa3",
          "body": null,
          "is_bot": false,
          "headline": "fix(ci): preinstall ndk before emulator runner",
          "author_name": "Bob",
          "author_login": "TimeToBuildBob",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5e783330d2dca10897407d93dea156e2c8bfe7e3",
          "body": null,
          "is_bot": false,
          "headline": "fix(sync): avoid replaying last session event",
          "author_name": "Bob",
          "author_login": "TimeToBuildBob",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "14d85c40196ad187ccc2c47a848e7e83ee4e6687",
          "body": null,
          "is_bot": false,
          "headline": "fix(ci): stop masking e2e failures",
          "author_name": "TimeToBuildBob",
          "author_login": "TimeToBuildBob",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "28a5d46352109b0be5171f4492e7245f3ad0f2ef",
          "body": null,
          "is_bot": false,
          "headline": "fix(sync): handle missing aw-sync library",
          "author_name": "Bob",
          "author_login": "TimeToBuildBob",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9263c4442c092dab35af175695575296fd7c335b",
          "body": "Fork PRs cannot access repository secrets (KEY_FASTLANE_API,\nKEY_ANDROID_JKS), which caused get-versionCode to always fail on\nexternal contributions.\n\nFix:\n- Add `if` conditions to Ruby/fastlane/age/update_version steps so they\n  only run on the main repo or tag/push triggers.\n- Move `Output version\n[…]\ne secrets wall. The versionCode/APK lane is silently skipped\nrather than failing loudly with credential errors.\n\nAddresses: https://github.com/ActivityWatch/aw-android/pull/139#issuecomment-4512051883",
          "is_bot": false,
          "headline": "ci: skip secrets-dependent steps on fork PRs",
          "author_name": "Bob",
          "author_login": "TimeToBuildBob",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1c05168990370897cbe1ab489c13ef1f41a90bdb",
          "body": null,
          "is_bot": false,
          "headline": "feat: migrate legacy db hostnames",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "824880c1e4a5841811e1a60aa31e51c6cf94c7e8",
          "body": null,
          "is_bot": false,
          "headline": "chore: linting diff",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cc4d966fb420591228a52bd8b1a31c8674a9d8cb",
          "body": null,
          "is_bot": false,
          "headline": "feat: unlock watcher",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a6a50bf529bdcac4a0a874f2ba5508b513831cc1",
          "body": null,
          "is_bot": false,
          "headline": "feat: update widget every 5 mins",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3f37a4eac295c8ccc4a19b31246e3281509b9453",
          "body": null,
          "is_bot": false,
          "headline": "feat: update widget every 15 mins",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "119ad2ecbf7cc3149eb412379981d3210e9188b8",
          "body": null,
          "is_bot": false,
          "headline": "chore: update settings.gradle",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dcdec24d6c388f142803a84b8632b860e5be952e",
          "body": null,
          "is_bot": false,
          "headline": "fix(ci): pass jniLibs via artifact upload/download instead of cache",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "899466a4aa69e6d2c31bc6869cb0f92c77117d29",
          "body": "…ore screenshot",
          "is_bot": false,
          "headline": "fix(ci): bypass onboarding, grant usage stats perm, unlock screen bef…",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "08042bc286d422836904fb8f5af7c345513b1506",
          "body": "…creenshot",
          "is_bot": false,
          "headline": "fix(ci): install apk explicitly and use monkey to launch app before s…",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1177a81497f9d36a6f0662f388961b9552693f8b",
          "body": null,
          "is_bot": false,
          "headline": "fix(ci): correct am start intent to use debug package + full class name",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "de605342ab7219cc54121548f559cb6599d965d7",
          "body": "…er script",
          "is_bot": false,
          "headline": "fix(ci): launch app, sleep 1s, screenshot and logcat in emulator-runn…",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ef22ce5a6bfb1e250089b6e8dc13b3406370ca7b",
          "body": "…id-emulator-runner@v2\n\nrefactor(ci): simplify test-e2e with api-level 29, google_apis, screenshot in script",
          "is_bot": false,
          "headline": "refactor(ci): replace manual emulator setup with reactivecircus/andro…",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c178744a0d8e80a066f7c261f2e1dee0aa37ab1c",
          "body": "…n cache restore steps",
          "is_bot": false,
          "headline": "fix(ci): restore missing path key and set fail-on-cache-miss: false i…",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "52533f57bff2723435a06e3f49eb269ac3db7c71",
          "body": null,
          "is_bot": false,
          "headline": "fix(ci): remove fail-on-cache-miss from cache restore",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0bedc25ce696a7ec9c9c01f92a8c0d998150b504",
          "body": "…android@v3",
          "is_bot": false,
          "headline": "fix(ci): update sdkmanager, avdmanager, and emulator paths for setup-…",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e92ad7ef6096438f0ed0b46532828243a3b8b301",
          "body": null,
          "is_bot": false,
          "headline": "feat: bump ci versions",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0ad7232981e06139080c599ca35936e80f8590c6",
          "body": null,
          "is_bot": false,
          "headline": "feat: media watcher",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c8b4ea0234b89c85daf7308abc558982de6b94f7",
          "body": "Streamline the widget code and improve color scheme for better readability.",
          "is_bot": false,
          "headline": "refactor: simplify widget styling and worker logic",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "778cca44e872f74b4692ea76c3f5e7703a5a9dd2",
          "body": null,
          "is_bot": false,
          "headline": "feat: add widget refresh animation",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4c482738213782ced23af04c9209799613f2d354",
          "body": null,
          "is_bot": false,
          "headline": "refactor: optimize widget layout for 4x1 size",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fee7803ab4ff1678176ac651d24f6e17baa0ff3a",
          "body": "Add CategoryTimeWidgetWorker to fetch and process data for widget display.",
          "is_bot": false,
          "headline": "feat: implement widget background worker",
          "author_name": "Brayo",
          "author_login": "0xbrayo",
          "committed_at": "2026-07-02T16:19:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 29,
      "commits_last_year": 129,
      "latest_release_at": "2026-07-23T09:49:10Z",
      "latest_release_tag": "v0.14.0dev20260723",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 21,
      "days_since_latest_release": 1,
      "mean_days_between_releases": 112.7
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 37,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": []
    },
    "popularity": {
      "forks": 51,
      "stars": 251,
      "watchers": 10,
      "fork_history": {
        "days": [
          {
            "date": "2018-12-17",
            "count": 1
          },
          {
            "date": "2019-11-05",
            "count": 1
          },
          {
            "date": "2020-02-27",
            "count": 1
          },
          {
            "date": "2020-03-05",
            "count": 1
          },
          {
            "date": "2020-06-14",
            "count": 1
          },
          {
            "date": "2020-06-22",
            "count": 1
          },
          {
            "date": "2020-08-15",
            "count": 1
          },
          {
            "date": "2020-11-02",
            "count": 1
          },
          {
            "date": "2020-12-11",
            "count": 1
          },
          {
            "date": "2021-04-19",
            "count": 1
          },
          {
            "date": "2021-06-21",
            "count": 2
          },
          {
            "date": "2022-02-19",
            "count": 1
          },
          {
            "date": "2022-03-04",
            "count": 1
          },
          {
            "date": "2022-10-28",
            "count": 1
          },
          {
            "date": "2023-08-20",
            "count": 1
          },
          {
            "date": "2023-08-25",
            "count": 1
          },
          {
            "date": "2023-09-16",
            "count": 1
          },
          {
            "date": "2023-11-15",
            "count": 1
          },
          {
            "date": "2023-12-28",
            "count": 1
          },
          {
            "date": "2024-02-19",
            "count": 1
          },
          {
            "date": "2024-03-19",
            "count": 1
          },
          {
            "date": "2024-03-21",
            "count": 1
          },
          {
            "date": "2024-09-10",
            "count": 1
          },
          {
            "date": "2024-09-24",
            "count": 1
          },
          {
            "date": "2025-04-15",
            "count": 1
          },
          {
            "date": "2025-04-26",
            "count": 1
          },
          {
            "date": "2025-06-23",
            "count": 1
          },
          {
            "date": "2025-10-01",
            "count": 1
          },
          {
            "date": "2025-11-19",
            "count": 1
          },
          {
            "date": "2025-12-04",
            "count": 1
          },
          {
            "date": "2025-12-22",
            "count": 1
          },
          {
            "date": "2026-01-06",
            "count": 1
          },
          {
            "date": "2026-02-01",
            "count": 1
          },
          {
            "date": "2026-02-03",
            "count": 1
          },
          {
            "date": "2026-02-21",
            "count": 1
          },
          {
            "date": "2026-02-22",
            "count": 1
          },
          {
            "date": "2026-03-25",
            "count": 1
          },
          {
            "date": "2026-03-26",
            "count": 1
          },
          {
            "date": "2026-05-02",
            "count": 1
          },
          {
            "date": "2026-05-06",
            "count": 1
          },
          {
            "date": "2026-05-17",
            "count": 1
          },
          {
            "date": "2026-06-06",
            "count": 1
          },
          {
            "date": "2026-07-03",
            "count": 1
          },
          {
            "date": "2026-07-13",
            "count": 1
          },
          {
            "date": "2026-07-15",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 46,
        "total_forks": 51
      },
      "star_history": null,
      "open_issues_and_prs": 75
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "build.gradle",
        "mobile/build.gradle"
      ],
      "largest_source_bytes": 13447,
      "source_files_sampled": 45,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "Gemfile",
        "build.gradle",
        "mobile/build.gradle"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "addressable",
            "direct": false,
            "version": "2.8.5",
            "severity": "high",
            "ecosystem": "rubygems",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-h27x-rffw-24p4"
            ],
            "fixed_version": "2.9.0",
            "advisory_count": 1,
            "oldest_advisory_days": 108
          },
          {
            "name": "faraday",
            "direct": false,
            "version": "1.10.3",
            "severity": "high",
            "ecosystem": "rubygems",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-33mh-2634-fwr2",
              "GHSA-98m9-hrrm-r99r"
            ],
            "fixed_version": "2.14.3",
            "advisory_count": 2,
            "oldest_advisory_days": 165
          },
          {
            "name": "jwt",
            "direct": false,
            "version": "2.7.1",
            "severity": "high",
            "ecosystem": "rubygems",
            "cvss_score": 7.4,
            "advisory_ids": [
              "GHSA-c32j-vqhx-rx3x"
            ],
            "fixed_version": "3.2.0",
            "advisory_count": 1,
            "oldest_advisory_days": 67
          },
          {
            "name": "rexml",
            "direct": false,
            "version": "3.2.6",
            "severity": "high",
            "ecosystem": "rubygems",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-2rxp-v6pw-ch6m",
              "GHSA-4xqq-m2hx-25v8",
              "GHSA-5866-49gr-22v4",
              "GHSA-r55c-59qm-vjw6",
              "GHSA-vg3r-rm7w-2xgh",
              "GHSA-vmwr-mc7x-5vc3"
            ],
            "fixed_version": "3.3.9",
            "advisory_count": 6,
            "oldest_advisory_days": 799
          },
          {
            "name": "webrick",
            "direct": false,
            "version": "1.8.1",
            "severity": "high",
            "ecosystem": "rubygems",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-6f62-3596-g6w7",
              "GHSA-r995-q44h-hr64"
            ],
            "fixed_version": "1.8.2",
            "advisory_count": 2,
            "oldest_advisory_days": 671
          },
          {
            "name": "aws-sdk-s3",
            "direct": false,
            "version": "1.135.0",
            "severity": "moderate",
            "ecosystem": "rubygems",
            "cvss_score": 6.5,
            "advisory_ids": [
              "GHSA-2xgq-q749-89fq"
            ],
            "fixed_version": "1.208.0",
            "advisory_count": 1,
            "oldest_advisory_days": 218
          },
          {
            "name": "excon",
            "direct": false,
            "version": "0.103.0",
            "severity": "moderate",
            "ecosystem": "rubygems",
            "cvss_score": 6.5,
            "advisory_ids": [
              "GHSA-48rx-c7pg-q66r"
            ],
            "fixed_version": "1.5.0",
            "advisory_count": 1,
            "oldest_advisory_days": 14
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "high": 5,
          "moderate": 2
        },
        "advisory_count": 14,
        "affected_count": 7,
        "assessed_count": 89,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "maven",
        "rubygems"
      ],
      "dependencies": [
        {
          "name": "fastlane",
          "manifest": "Gemfile",
          "ecosystem": "rubygems",
          "version_constraint": null
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "fastlane",
            "direct": true,
            "version": "2.216.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "addressable",
            "direct": false,
            "version": "2.8.5",
            "ecosystem": "rubygems"
          },
          {
            "name": "artifactory",
            "direct": false,
            "version": "3.0.15",
            "ecosystem": "rubygems"
          },
          {
            "name": "atomos",
            "direct": false,
            "version": "0.1.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "aws-eventstream",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "aws-partitions",
            "direct": false,
            "version": "1.828.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "aws-sdk-core",
            "direct": false,
            "version": "3.183.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "aws-sdk-kms",
            "direct": false,
            "version": "1.71.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "aws-sdk-s3",
            "direct": false,
            "version": "1.135.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "aws-sigv4",
            "direct": false,
            "version": "1.6.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "babosa",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "rubygems"
          },
          {
            "name": "CFPropertyList",
            "direct": false,
            "version": "3.0.6",
            "ecosystem": "rubygems"
          },
          {
            "name": "claide",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "colored",
            "direct": false,
            "version": "1.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "colored2",
            "direct": false,
            "version": "3.1.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "commander",
            "direct": false,
            "version": "4.6.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "declarative",
            "direct": false,
            "version": "0.0.20",
            "ecosystem": "rubygems"
          },
          {
            "name": "digest-crc",
            "direct": false,
            "version": "0.6.5",
            "ecosystem": "rubygems"
          },
          {
            "name": "domain_name",
            "direct": false,
            "version": "0.5.20190701",
            "ecosystem": "rubygems"
          },
          {
            "name": "dotenv",
            "direct": false,
            "version": "2.8.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "emoji_regex",
            "direct": false,
            "version": "3.2.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "excon",
            "direct": false,
            "version": "0.103.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "faraday",
            "direct": false,
            "version": "1.10.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "faraday-cookie_jar",
            "direct": false,
            "version": "0.0.7",
            "ecosystem": "rubygems"
          },
          {
            "name": "faraday-em_http",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "faraday-em_synchrony",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "faraday-excon",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "faraday-httpclient",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "faraday-multipart",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "rubygems"
          },
          {
            "name": "faraday-net_http",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "faraday-net_http_persistent",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "faraday-patron",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "faraday-rack",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "faraday-retry",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "faraday_middleware",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "fastimage",
            "direct": false,
            "version": "2.2.7",
            "ecosystem": "rubygems"
          },
          {
            "name": "fastlane-plugin-increment_version_code",
            "direct": false,
            "version": "0.4.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "gh_inspector",
            "direct": false,
            "version": "1.1.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "google-apis-androidpublisher_v3",
            "direct": false,
            "version": "0.50.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "google-apis-core",
            "direct": false,
            "version": "0.11.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "google-apis-iamcredentials_v1",
            "direct": false,
            "version": "0.17.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "google-apis-playcustomapp_v1",
            "direct": false,
            "version": "0.13.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "google-apis-storage_v1",
            "direct": false,
            "version": "0.19.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "google-cloud-core",
            "direct": false,
            "version": "1.6.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "google-cloud-env",
            "direct": false,
            "version": "1.6.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "google-cloud-errors",
            "direct": false,
            "version": "1.3.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "google-cloud-storage",
            "direct": false,
            "version": "1.44.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "googleauth",
            "direct": false,
            "version": "1.8.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "highline",
            "direct": false,
            "version": "2.0.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "http-cookie",
            "direct": false,
            "version": "1.0.5",
            "ecosystem": "rubygems"
          },
          {
            "name": "httpclient",
            "direct": false,
            "version": "2.8.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "jmespath",
            "direct": false,
            "version": "1.6.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "json",
            "direct": false,
            "version": "2.6.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "jwt",
            "direct": false,
            "version": "2.7.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "mini_magick",
            "direct": false,
            "version": "4.12.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "mini_mime",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "rubygems"
          },
          {
            "name": "multi_json",
            "direct": false,
            "version": "1.15.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "multipart-post",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "nanaimo",
            "direct": false,
            "version": "0.3.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "naturally",
            "direct": false,
            "version": "2.2.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "optparse",
            "direct": false,
            "version": "0.1.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "os",
            "direct": false,
            "version": "1.1.4",
            "ecosystem": "rubygems"
          },
          {
            "name": "plist",
            "direct": false,
            "version": "3.7.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "public_suffix",
            "direct": false,
            "version": "5.0.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "rake",
            "direct": false,
            "version": "13.0.6",
            "ecosystem": "rubygems"
          },
          {
            "name": "representable",
            "direct": false,
            "version": "3.2.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "retriable",
            "direct": false,
            "version": "3.1.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "rexml",
            "direct": false,
            "version": "3.2.6",
            "ecosystem": "rubygems"
          },
          {
            "name": "rouge",
            "direct": false,
            "version": "2.0.7",
            "ecosystem": "rubygems"
          },
          {
            "name": "ruby2_keywords",
            "direct": false,
            "version": "0.0.5",
            "ecosystem": "rubygems"
          },
          {
            "name": "rubyzip",
            "direct": false,
            "version": "2.3.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "security",
            "direct": false,
            "version": "0.1.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "signet",
            "direct": false,
            "version": "0.18.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "simctl",
            "direct": false,
            "version": "1.6.10",
            "ecosystem": "rubygems"
          },
          {
            "name": "terminal-notifier",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "terminal-table",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "trailblazer-option",
            "direct": false,
            "version": "0.1.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "tty-cursor",
            "direct": false,
            "version": "0.7.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "tty-screen",
            "direct": false,
            "version": "0.8.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "tty-spinner",
            "direct": false,
            "version": "0.9.3",
            "ecosystem": "rubygems"
          },
          {
            "name": "uber",
            "direct": false,
            "version": "0.1.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "unf",
            "direct": false,
            "version": "0.1.4",
            "ecosystem": "rubygems"
          },
          {
            "name": "unf_ext",
            "direct": false,
            "version": "0.0.8.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "unicode-display_width",
            "direct": false,
            "version": "2.4.2",
            "ecosystem": "rubygems"
          },
          {
            "name": "webrick",
            "direct": false,
            "version": "1.8.1",
            "ecosystem": "rubygems"
          },
          {
            "name": "word_wrap",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "xcodeproj",
            "direct": false,
            "version": "1.23.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "xcpretty",
            "direct": false,
            "version": "0.3.0",
            "ecosystem": "rubygems"
          },
          {
            "name": "xcpretty-travis-formatter",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "rubygems"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 89,
        "direct_count": 1,
        "indirect_count": 88
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 11,
        "merged_prs": 49,
        "open_issues": 64,
        "closed_ratio": 0.462,
        "closed_issues": 55,
        "closed_unmerged_prs": 21
      },
      "bus_factor": 1,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "ErikBjare",
          "commits": 233,
          "avatar_url": "https://avatars.githubusercontent.com/u/1405370?v=4"
        },
        {
          "type": "User",
          "login": "0xbrayo",
          "commits": 80,
          "avatar_url": "https://avatars.githubusercontent.com/u/62670517?v=4"
        },
        {
          "type": "User",
          "login": "TimeToBuildBob",
          "commits": 42,
          "avatar_url": "https://avatars.githubusercontent.com/u/189876176?v=4"
        },
        {
          "type": "User",
          "login": "nicolae-stroncea",
          "commits": 5,
          "avatar_url": "https://avatars.githubusercontent.com/u/39338488?v=4"
        },
        {
          "type": "User",
          "login": "konrad-krol-incubly",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/211458259?v=4"
        },
        {
          "type": "User",
          "login": "billangli",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/15698580?v=4"
        },
        {
          "type": "User",
          "login": "cosine0",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/14046775?v=4"
        },
        {
          "type": "User",
          "login": "miguelrochefort",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/1556332?v=4"
        },
        {
          "type": "User",
          "login": "harigl",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/17403364?v=4"
        }
      ],
      "contributors_sampled": 9,
      "top_contributor_share": 0.637
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "build.yml",
        "release.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "Gemfile.lock"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 9,
            "reason": "binaries present in source code",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "20 out of 20 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 7,
            "reason": "Found 20/27 approved changesets -- score normalized to 7",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 17 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "14 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "31444445143ec32603680f67059d0485f1ef64aa",
        "ran_at": "2026-07-25T03:51:43Z",
        "aggregate_score": 3.7,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-24T12:08:40Z",
      "oldest_open_prs": [
        {
          "number": 49,
          "created_at": "2020-07-16T08:30:33Z",
          "last_comment_at": "2023-09-24T18:31:10Z",
          "last_comment_author": "ErikBjare"
        },
        {
          "number": 63,
          "created_at": "2021-04-19T15:53:55Z",
          "last_comment_at": "2021-05-08T20:20:17Z",
          "last_comment_author": "kovasap"
        },
        {
          "number": 108,
          "created_at": "2024-01-05T16:16:43Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 118,
          "created_at": "2024-09-03T22:12:02Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 122,
          "created_at": "2024-09-24T22:14:10Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 137,
          "created_at": "2025-08-16T11:40:59Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 140,
          "created_at": "2025-11-04T13:26:46Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 144,
          "created_at": "2026-02-24T10:05:26Z",
          "last_comment_at": "2026-02-24T10:07:48Z",
          "last_comment_author": "greptile-apps"
        },
        {
          "number": 154,
          "created_at": "2026-05-17T09:13:07Z",
          "last_comment_at": "2026-05-17T09:17:20Z",
          "last_comment_author": "greptile-apps"
        },
        {
          "number": 198,
          "created_at": "2026-07-24T12:04:20Z",
          "last_comment_at": "2026-07-24T13:23:22Z",
          "last_comment_author": "TimeToBuildBob"
        },
        {
          "number": 199,
          "created_at": "2026-07-24T12:12:43Z",
          "last_comment_at": "2026-07-24T14:29:39Z",
          "last_comment_author": "TimeToBuildBob"
        }
      ],
      "last_merged_pr_at": "2026-07-24T11:56:05Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 5,
          "created_at": "2019-01-18T17:59:03Z",
          "last_comment_at": "2021-08-29T11:02:17Z",
          "last_comment_author": "ErikBjare"
        },
        {
          "number": 11,
          "created_at": "2019-03-09T19:54:05Z",
          "last_comment_at": "2020-01-03T12:25:10Z",
          "last_comment_author": "ErikBjare"
        },
        {
          "number": 26,
          "created_at": "2019-10-06T17:05:56Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 27,
          "created_at": "2019-10-06T17:13:13Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 28,
          "created_at": "2019-10-06T17:15:17Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 29,
          "created_at": "2020-01-26T18:58:56Z",
          "last_comment_at": "2020-06-27T19:45:13Z",
          "last_comment_author": "nicolae-stroncea"
        },
        {
          "number": 36,
          "created_at": "2020-05-16T13:10:21Z",
          "last_comment_at": "2020-05-16T16:38:26Z",
          "last_comment_author": "ErikBjare"
        },
        {
          "number": 37,
          "created_at": "2020-05-24T16:53:45Z",
          "last_comment_at": "2020-07-11T14:15:55Z",
          "last_comment_author": "nicolae-stroncea"
        },
        {
          "number": 39,
          "created_at": "2020-06-14T15:21:33Z",
          "last_comment_at": "2024-09-04T09:22:45Z",
          "last_comment_author": "0xbrayo"
        },
        {
          "number": 44,
          "created_at": "2020-06-30T19:50:12Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 47,
          "created_at": "2020-07-11T14:31:34Z",
          "last_comment_at": "2020-07-17T09:35:16Z",
          "last_comment_author": "ErikBjare"
        },
        {
          "number": 48,
          "created_at": "2020-07-11T14:33:48Z",
          "last_comment_at": "2020-09-26T15:53:14Z",
          "last_comment_author": "nicolae-stroncea"
        },
        {
          "number": 51,
          "created_at": "2020-08-16T21:56:09Z",
          "last_comment_at": "2020-08-17T15:15:50Z",
          "last_comment_author": "ErikBjare"
        },
        {
          "number": 52,
          "created_at": "2020-08-18T15:05:47Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 59,
          "created_at": "2021-02-04T21:44:42Z",
          "last_comment_at": "2021-02-07T23:06:33Z",
          "last_comment_author": "kovasap"
        },
        {
          "number": 61,
          "created_at": "2021-03-09T00:00:59Z",
          "last_comment_at": "2024-11-11T20:22:47Z",
          "last_comment_author": "IzzySoft"
        },
        {
          "number": 62,
          "created_at": "2021-04-19T02:31:50Z",
          "last_comment_at": "2026-02-12T19:47:49Z",
          "last_comment_author": "ErikBjare"
        },
        {
          "number": 64,
          "created_at": "2021-05-28T08:33:57Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 68,
          "created_at": "2021-11-30T13:15:39Z",
          "last_comment_at": "2022-10-11T23:03:03Z",
          "last_comment_author": null
        },
        {
          "number": 69,
          "created_at": "2021-12-10T12:36:15Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/ActivityWatch/aw-android",
    "host": "github.com",
    "name": "aw-android",
    "owner": "ActivityWatch"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 62,
      "inputs": {
        "security": 50,
        "vitality": 80,
        "community": 54,
        "governance": 57,
        "engineering": 65
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 80,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 78,
            "inputs": {
              "commits_last_year": 129,
              "human_commit_share": 0.95,
              "days_since_last_push": 0,
              "active_weeks_last_year": 21
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "21/52 weeks with commits",
                "points": 14.5,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 21
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "129 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 129
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "good",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 83,
            "inputs": {
              "releases_count": 29,
              "latest_release_tag": "v0.14.0dev20260723",
              "releases_from_tags": false,
              "days_since_latest_release": 1,
              "mean_days_between_releases": 112.7
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "29 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 29
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 1 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 1
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~112.7 days",
                "points": 19.8,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 112.7
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "maintained",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": null,
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": 0,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "last human commit 0 days ago",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_maintained",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "moderate",
        "name": "Community & Adoption",
        "value": 54,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "moderate",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 58,
            "inputs": {
              "forks": 51,
              "stars": 251,
              "watchers": 10,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "251 stars",
                "points": 38.9,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 251
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "51 forks",
                "points": 14.2,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 51
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "10 watchers",
                "points": 5.3,
                "status": "partial",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 10
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MPL-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MPL-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 57,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "at_risk",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 39,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 9,
              "top_contributor_share": 0.637
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 64% of commits",
                "points": 8.2,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 64
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "9 contributors",
                "points": 12.2,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 9
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 17 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "moderate",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 59,
            "inputs": {
              "merged_prs": 49,
              "open_issues": 64,
              "closed_issues": 55,
              "issue_closed_ratio": 0.462,
              "closed_unmerged_prs": 21
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "46% of issues closed",
                "points": 21.6,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 46
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "49/70 decided PRs merged",
                "points": 26.8,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 49,
                      "decided": 70
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 20/27 approved changesets -- score normalized to 7",
                "points": 10.5,
                "status": "partial",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 76,
            "inputs": {
              "followers": 961,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "ActivityWatch",
              "public_repos": 58,
              "account_age_days": 3764
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "961 followers of ActivityWatch",
                "points": 21.4,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 961,
                      "login": "ActivityWatch"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "58 public repos, account ~10 yr old",
                "points": 24.9,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 58
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 10
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 65,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "2 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "20 out of 20 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 60,
            "inputs": {
              "topics": [
                "android",
                "activitywatch",
                "rust"
              ],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "3 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 50,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 37,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 3.7
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "binaries present in source code",
                "points": 6.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "20 out of 20 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 20/27 approved changesets -- score normalized to 7",
                "points": 5.2,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 17 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "14 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 89 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 89
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 14,
              "affected_packages": 7,
              "assessed_packages": 89,
              "unassessed_packages": 0,
              "affected_by_severity": "high 5, moderate 2",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 89,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 10
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 60,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.989,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "94 of 95 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 94,
                      "sampled": 95
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 61,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "Gemfile.lock"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [
                "Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "build.gradle",
                "mobile/build.gradle"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Kotlin (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Kotlin"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Kotlin",
              "largest_source_bytes": 13447,
              "source_files_sampled": 45,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Kotlin (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Kotlin"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/45 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 45,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-25T03:52:02.780706Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/ActivityWatch/aw-android.svg",
  "full_name": "ActivityWatch/aw-android",
  "license_state": "standard",
  "license_spdx": "MPL-2.0"
}