Registro públicoModerado
Informe de salud del softwareesquema 0.27.0 · métricas 1.13.0 · 2026-07-26 03:40 UTC
Fishwaldo / alexactl
Fishwaldo/alexactl tiene un índice de salud de 52 sobre 100, lo que lo sitúa en la banda Moderado. Su puntuación más alta es AI Readiness (76/100) y la más baja, Community & Adoption (33/100). Se actualizó por última vez hace 6 días. Una sola persona concentra la mayor parte del trabajo reciente.
52
global / 100Índice de salud del software
Las métricas se agrupan en categorías ponderadas sobre una escala de 1 a 100. El resultado global parte de su media; cuando la evidencia pública activa la Política de Jurisdicciones de Alto Riesgo, la calificación se ajusta y recibe el límite 49 (En riesgo). Preparación para IA queda fuera.
52
Excelente85-100Ejemplar; cumple prácticamente todos los criterios evaluados
Bueno70-84Saludable; carencias menores
Moderado50-69Aceptable con carencias notables; se recomienda revisión
En riesgo30-49Debilidades significativas; su adopción exige cautela
Crítico1-29Problemas graves (proyecto abandonado, un solo mantenedor, sin higiene)
Perfil de puntuación
Cada eje es una categoría. La forma importa más que la media: un proyecto sano llena toda la figura, mientras que un perfil de picos y cráteres indica que la fortaleza en una dimensión enmascara el riesgo en otra.
Titularidad
Justin HammondCuenta personal
121 seguidores105 repositorios públicosdesde jun 2011Dynamx (Singapore) Pte Ltd
Este repositorio pertenece a una cuenta personal. Un proyecto con un único propietario conlleva más riesgo de continuidad que uno respaldado por una organización.
Ecosistemas de paquetes
| Registro | Paquete | Versión | Descargas / mes | Versiones | Última publicación |
|---|---|---|---|---|---|
| Go | github.com/Fishwaldo/alexactl | v0.1.0 | - | 1 | hace 6 días |
Métricas por categoría
Vitalidad
¿Está vivo el proyecto: se escribe código y se publican versiones?
62
Actividad de desarrollo
53Moderado
Cómo se puntúa
| 36/36 | Recencia de push — último push hace 6 días |
| 2.8/36 | Cadencia de commits — 4/52 semanas con commits |
| 14.6/18 | Volumen de commits — 41 commits en el último año |
| 0/10 | OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully |
Datos de entrada utilizados
| commits_last_year | 41 |
| human_commit_share | 0,878 |
| days_since_last_push | 6 |
| active_weeks_last_year | 4 |
Disciplina de publicación
76Bueno
Cómo se puntúa
| 27/27 | Publica versiones — 1 versiones publicadas |
| 36/36 | Recencia de las versiones — última versión hace 6 días |
| 12.6/27 | Cadencia de publicación — cadencia desconocida (una sola versión) |
| 0/10 | OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases. |
Datos de entrada utilizados
| releases_count | 1 |
| latest_release_tag | v0.1.0 |
| releases_from_tags | no |
| days_since_latest_release | 6 |
| mean_days_between_releases | — |
Comunidad y Adopción
¿Tiene el proyecto usuarios, descargas, atención y unas condiciones acogedoras para quienes contribuyen?
33
Popularidad y adopción
1Crítico
Cómo se puntúa
| 0/60 | Estrellas — 0 estrellas |
| 0/25 | Forks — 0 forks |
| 0/15 | Observadores — 0 observadores |
Datos de entrada utilizados
| forks | 0 |
| stars | 0 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Salud de la comunidad
70Bueno
Cómo se puntúa
| 22.5/22.5 | README |
| 22.5/22.5 | Licencia — licencia reconocida (MIT) |
| 18/18 | Guía CONTRIBUTING |
| 0/13.5 | Código de conducta |
| 0/7.2 | Plantilla de issues |
| 0/6.3 | Plantilla de PR |
Datos de entrada utilizados
| has_readme | sí |
| has_license | sí |
| has_contributing | sí |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Sostenibilidad y Gobernanza
¿Sobrevivirá el proyecto a sus personas: factor bus, capacidad de respuesta, quién lo respalda y mantenimiento del paquete?
53
Cómo se puntúa
| 9/54 | Factor bus — la mitad de los commits recae en 1 contribuyente(s) |
| 0/22.5 | Distribución de commits — el principal contribuyente firma el 100% de los commits |
| 1.4/13.5 | Amplitud de contribuyentes — 1 contribuyentes |
| 10/10 | OpenSSF Scorecard: Contributors — project has 3 contributing companies or organizations -- score normalized to 10 |
Datos de entrada utilizados
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
Capacidad de respuesta a issues y PR
60Moderado
Cómo se puntúa
| 0/46.8 | Resolución de issues — sin issues o sin datos |
| 31.9/38.3 | Aceptación de PR — 5/6 PR decididos fusionados |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/20 approved changesets -- score normalized to 0 |
Datos de entrada utilizados
| merged_prs | 5 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 1 |
Excluidos de la puntuación (sin datos o no aplicable): Resolución de issues. Los pesos restantes se han renormalizado.
Propiedad y custodia
62Moderado
Cómo se puntúa
| 10/30 | Respaldo de la propiedad — cuenta personal (usuario) |
| 0/20 | Dominio verificado — no aplicable a cuentas de usuario |
| 15/25 | Alcance del propietario — 121 seguidores de Fishwaldo |
| 25/25 | Trayectoria — 105 repos públicos, cuenta de ~15 años |
Datos de entrada utilizados
| followers | 121 |
| owner_type | User |
| is_verified | — |
| owner_login | Fishwaldo |
| public_repos | 105 |
| account_age_days | 5524 |
Excluidos de la puntuación (sin datos o no aplicable): Dominio verificado. Los pesos restantes se han renormalizado.
Mantenimiento de paquetes
84Bueno
Cómo se puntúa
| 25/25 | Publicado y resoluble — 1 paquete(s) en go |
| 35/35 | Recencia de publicación — última publicación hace 6 días |
| 4/20 | Historial de versiones — 1 versiones en el registro |
| 20/20 | No obsoleto — activo, ni obsoleto ni retirado |
Datos de entrada utilizados
| packages | github.com/Fishwaldo/alexactl |
| ecosystems | go |
| any_deprecated | no |
| min_days_since_publish | 6 |
Calidad de Ingeniería
¿Existen unas prácticas mínimas de ingeniería y documentación?
68
Prácticas de ingeniería
64Moderado
Cómo se puntúa
| 24/24 | Flujos de trabajo de CI — 2 flujo(s) de trabajo |
| 24/24 | Pruebas presentes |
| 16/16 | Configuración de linter — .golangci.yml |
| 0/9.6 | Hooks de pre-commit |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — 0 out of 5 merged PRs checked by a CI test -- score normalized to 0 |
Datos de entrada utilizados
| has_ci | sí |
| has_tests | sí |
| has_editorconfig | no |
| has_linter_config | sí |
| has_precommit_config | no |
Documentación
75Bueno
Cómo se puntúa
| 30/30 | README |
| 25/25 | Directorio de documentación |
| 0/15 | Sitio de documentación / página del proyecto |
| 0/10 | Descripción del repositorio |
| 10/10 | Topics — 2 topics |
| 10/10 | Wiki |
Datos de entrada utilizados
| topics | alexa, amazon |
| has_wiki | sí |
| homepage | — |
| has_readme | sí |
| has_docs_dir | sí |
| has_description | no |
Seguridad
¿Son sólidas las prácticas visibles de seguridad y de cadena de suministro, sin exposición jurisdiccional de alto riesgo sin resolver?
37
Postura de seguridad
37En riesgo
Cómo se puntúa
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — 0 out of 5 merged PRs checked by a CI test -- score normalized to 0 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/20 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 3 contributing companies or organizations -- score normalized to 10 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | Licencia — license file detected |
| 0/7.5 | Maintained — project was created within the last 90 days. Please review its contents carefully |
| 0/5 | Packaging — sin datos |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — Project has not signed or included provenance with any releases. |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 6.8/7.5 | Vulnerabilities — 1 existing vulnerabilities detected |
Datos de entrada utilizados
| source | openssf_scorecard |
| checks_evaluated | 17 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 1 |
| scorecard_aggregate | 3,7 |
Excluidos de la puntuación (sin datos o no aplicable): packaging. Los pesos restantes se han renormalizado.
Preparación para IA
¿Hasta qué punto está el repositorio preparado para desarrollarse y mantenerse con agentes de codificación de IA? Es una insignia independiente y experimental — peso 0,0, de modo que se presenta por separado y no afecta a la puntuación de salud global.
76
Contexto y guía para agentes
85Excelente
Cómo se puntúa
| 45/45 | Instrucciones para agentes — CLAUDE.md |
| 0/15 | Documentación legible por máquinas (llms.txt) |
| 40/40 | Historial de commits legible — 36 de 36 commits humanos declaran su intención (asunto estructurado o cuerpo explicativo) |
Datos de entrada utilizados
| has_llms_txt | no |
| legible_history_share | 1 |
| agent_instruction_files | CLAUDE.md |
| agent_instruction_max_bytes | 5187 |
Cómo se puntúa
| 12.6/18 | Arranque con un solo comando — go.mod (convención del toolchain, sin ejecutor de tareas) |
| 22/22 | Pruebas automatizadas |
| 11/11 | Configuración de lint / formato — .golangci.yml |
| 11/11 | Verificación estática de tipos — Go (tipado estático) |
| 10/10 | Entorno reproducible — lockfile |
| 0/10 | Práctica demostrada con agentes — ningún commit con autoría de agente entre los últimos 41 |
| 8/8 | Mantenimiento automatizado — 5 de los últimos 41 commits son actualizaciones automáticas de dependencias |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Datos de entrada utilizados
| has_nix | no |
| has_tests | sí |
| lockfiles | go.sum |
| has_dockerfile | no |
| typed_language | sí |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | sí |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | go.mod |
| dependency_bot_commit_share | 0,122 |
Legibilidad del código para modelos
100Excelente
Cómo se puntúa
| 45/45 | Código verificable por tipos — Go (tipado estático) |
| 54.7/55 | Tamaños de archivo manejables — 1/188 archivos fuente de más de 60 KB |
Datos de entrada utilizados
| primary_language | Go |
| largest_source_bytes | 710.141 |
| source_files_sampled | 188 |
| oversized_source_files | 1 |
Interfaces legibles por máquina
40En riesgo
Cómo se puntúa
| 40/40 | Esquema de API (OpenAPI/GraphQL/proto) — internal/alexagraphql/queries/endpoint_all_features.graphql, internal/alexagraphql/queries/endpoint_state.graphql, internal/alexagraphql/queries/list_endpoints.graphql, internal/alexagraphql/queries/set_endpoint_features.graphql, internal/alexagraphql/queries/set_endpoint_features_v2.graphql, internal/alexagraphql/schema/schema.graphql |
| 0/20 | Servidor MCP |
| 0/40 | Ejemplos ejecutables |
Datos de entrada utilizados
| example_dirs | — |
| has_mcp_signal | no |
| api_schema_files | internal/alexagraphql/queries/endpoint_all_features.graphql, internal/alexagraphql/queries/endpoint_state.graphql, internal/alexagraphql/queries/list_endpoints.graphql, internal/alexagraphql/queries/set_endpoint_features.graphql, internal/alexagraphql/queries/set_endpoint_features_v2.graphql, internal/alexagraphql/schema/schema.graphql |
Datos clave
0estrellas de GitHub
1contribuidores
41commits en los últimos 12 meses
6días desde el último push
1versiones publicadas
1factor bus
0issues abiertas
Goecosistemas de paquetes
Advertencias de recopilación de datos
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Más detalle
OpenSSF Scorecard 3.7 / 10
3.7agregado
Evaluación de seguridad independiente y agnóstica en cuanto a herramientas, procedente del proyecto de código abierto OpenSSF Scorecard. Cada comprobación premia una práctica de seguridad, no la herramienta de un proveedor concreto. Las comprobaciones que Scorecard no pudo determinar se marcan como n/d y se excluyen de la puntuación de seguridad (nunca se cuentan como cero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 0 | CI-Tests | 0 out of 5 merged PRs checked by a CI test -- score normalized to 0 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/20 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 3 contributing companies or organizations -- score normalized to 10 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 0 | Maintained | project was created within the last 90 days. Please review its contents carefully |
| n/d | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| 0 | Signed-Releases | Project has not signed or included provenance with any releases. |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 9 | Vulnerabilities | 1 existing vulnerabilities detected |
Dependencias directas 8
| Registro | Paquete | Restricción de versión | Manifiesto |
|---|---|---|---|
| Go | github.com/Khan/genqlient | v0.8.1 | go.mod |
| Go | github.com/PuerkitoBio/goquery | v1.12.0 | go.mod |
| Go | github.com/hashicorp/go-retryablehttp | v0.7.8 | go.mod |
| Go | github.com/spf13/cobra | v1.10.2 | go.mod |
| Go | github.com/spf13/viper | v1.21.0 | go.mod |
| Go | github.com/stretchr/testify | v1.11.1 | go.mod |
| Go | golang.org/x/sync | v0.22.0 | go.mod |
| Go | golang.org/x/text | v0.40.0 | go.mod |
Todas las dependencias no recopilado
No fue posible recopilar el conjunto de dependencias resuelto para este informe: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Informe JSON sin procesar legible por máquina
{
"data": {
"repo": {
"topics": [
"alexa",
"amazon"
],
"is_fork": false,
"size_kb": 601,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 888242
},
"pushed_at": "2026-07-19T08:50:08Z",
"created_at": "2026-07-19T07:16:36Z",
"owner_type": "User",
"updated_at": "2026-07-19T10:40:54Z",
"description": null,
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": null,
"name": "Justin Hammond",
"type": "User",
"login": "Fishwaldo",
"company": "Dynamx (Singapore) Pte Ltd",
"location": "127.0.0.1",
"followers": 121,
"avatar_url": "https://avatars.githubusercontent.com/u/842308?v=4",
"created_at": "2011-06-10T14:40:59Z",
"is_verified": null,
"public_repos": 105,
"account_age_days": 5524
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2026-07-19T08:09:39Z"
}
],
"recent_commits": [
{
"oid": "914ed50990d3e480853c56355e0c4e73ba5ed21a",
"body": "Sweep the CLI harness for consistency across all commands:\n\n- Standardize the enumerate verb on `list` (was `ls` on\n alarms/reminders/timers/lists) and the item-creation verb on `create`\n (was `add` on lists). No aliases.\n- Merge `devices unlock` into `devices lock <lock|unlock>` to match the\n po\n[…]\n`.\n- Rename the `volume` placeholder `<0..100>` to `<percent>`.\n- Route all command output through `cmd.OutOrStdout()` (diagnostics via\n `cmd.ErrOrStderr()`) instead of writing to os.Stdout directly.",
"is_bot": false,
"headline": "refactor(cli)!: unify command verbs, args, and output routing",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-07-19T08:50:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "437f12cd76f86af91a55249dbab8956b14d1bf8e",
"body": "Bump the go.mod go directive to 1.26.0 and the CI/release workflow Go\nversions to 1.26.x.\n\nThis also fixes the failing CI on main. The test matrix pinned 1.24.x,\nbelow go.mod's floor, so `go mod download` errored with \"go.mod requires\ngo >= 1.25.0\". And golangci-lint v2.1.6 (built with go1.24) refused to run\nagainst a newer go.mod target (\"the Go language version used to build\ngolangci-lint is lower than the targeted Go version\"); bump the pin to\nv2.12.2, which is built with go1.26.",
"is_bot": false,
"headline": "ci: bump Go to 1.26 and golangci-lint to v2.12.2",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-07-19T08:18:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "935f48c198196e77f8a5957686c6588edd0b8dc4",
"body": "…s/setup-go-7\n\nbuild(deps): bump actions/setup-go from 5 to 7",
"is_bot": false,
"headline": "Merge pull request #4 from Fishwaldo/dependabot/github_actions/action…",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-07-19T08:13:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a94886f8a1b377495329023a63ba33e6c39dd353",
"body": "Bumps [actions/setup-go](https://github.com/actions/setup-go) from 5 to 7.\n- [Release notes](https://github.com/actions/setup-go/releases)\n- [Commits](https://github.com/actions/setup-go/compare/v5...v7)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-go\n dependency-version: '7'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump actions/setup-go from 5 to 7",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-19T08:12:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f466ce710f73cb9b86b38b8ea82ff11cbfaa78d",
"body": "…/x/text-0.40.0\n\nbuild(deps): bump golang.org/x/text from 0.37.0 to 0.40.0",
"is_bot": false,
"headline": "Merge pull request #5 from Fishwaldo/dependabot/go_modules/golang.org…",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-07-19T08:11:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "01d45663e880befb1481f7c5ef2e88418a8e89c6",
"body": "…v/codecov-action-7\n\nbuild(deps): bump codecov/codecov-action from 5 to 7",
"is_bot": false,
"headline": "Merge pull request #3 from Fishwaldo/dependabot/github_actions/codeco…",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-07-19T08:11:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "745b18f12b6f7ce0425fe364a747241503e88625",
"body": "…ci/golangci-lint-action-9\n\nbuild(deps): bump golangci/golangci-lint-action from 7 to 9",
"is_bot": false,
"headline": "Merge pull request #2 from Fishwaldo/dependabot/github_actions/golang…",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-07-19T08:11:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "46cb4ff528ed1b4744653b41cb8878eca025ea43",
"body": "…s/checkout-7\n\nbuild(deps): bump actions/checkout from 4 to 7",
"is_bot": false,
"headline": "Merge pull request #1 from Fishwaldo/dependabot/github_actions/action…",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-07-19T08:10:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e8529e4a3b8f6a4d346088fded91325bd03cc421",
"body": "…jection\n\nVersion is no longer hard-coded in version.go: the Version const becomes a\nvar defaulting to \"dev\" and is injected at link time from the git tag by a\nnew release workflow (-ldflags -X ...Version=<version>). version.go is now\nthe single source of truth for the build version; UpstreamVersion\n[…]\n/darwin amd64/arm64 with the version injected and publish the binaries\nto a GitHub Release on tag push. Refresh README/CLAUDE docs to the 0.1.0\nMVP status and drop stale v1.0.0 API-surface references.",
"is_bot": false,
"headline": "chore(release)!: re-baseline to v0.1.0 MVP with build-time version in…",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-07-19T08:07:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "46fe7f36f92f92b92de1b146e7a70277e2f8485a",
"body": "Bumps [golang.org/x/text](https://github.com/golang/text) from 0.37.0 to 0.40.0.\n- [Release notes](https://github.com/golang/text/releases)\n- [Commits](https://github.com/golang/text/compare/v0.37.0...v0.40.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/text\n dependency-version: 0.40.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump golang.org/x/text from 0.37.0 to 0.40.0",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-19T07:17:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8beccb86894d8ae1640970d058f39db25a21b133",
"body": "Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 5 to 7.\n- [Release notes](https://github.com/codecov/codecov-action/releases)\n- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/codecov/codecov-action/compare/v\n[…]\npendency-name: codecov/codecov-action\n dependency-version: '7'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump codecov/codecov-action from 5 to 7",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-19T07:17:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0489dcab0e6eb18d9587b48e5cf75d3a7fa9cc1a",
"body": "Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 7 to 9.\n- [Release notes](https://github.com/golangci/golangci-lint-action/releases)\n- [Commits](https://github.com/golangci/golangci-lint-action/compare/v7...v9)\n\n---\nupdated-dependencies:\n- dependency-name: golangci/golangci-lint-action\n dependency-version: '9'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump golangci/golangci-lint-action from 7 to 9",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-19T07:17:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5772db3786b766647c947a5593362a05668b3def",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 7.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v4...v7)\n\n---\nupdated-dependenc\n[…]\n:\n- dependency-name: actions/checkout\n dependency-version: '7'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "build(deps): bump actions/checkout from 4 to 7",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-19T07:17:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9938b75285deea44b1cd1a3b36222a5fa7fdcf5d",
"body": "Port aioamazondevices v13.7.2 -> v14.2.0: push gateway host + ping\nreconnect, history recordType handling, non-US cookie scoping, retry\ntrim, device restart, communications service, and v2 ToDo lists API.",
"is_bot": false,
"headline": "Merge branch 'upstream-catchup-14.2.0'",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-07-12T01:03:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1329bfc3c4c6736b757921b1d8209a3f14634a37",
"body": "Catches this library up to upstream aioamazondevices v14.2.0.",
"is_bot": false,
"headline": "chore: bump Version to 0.11.0, UpstreamVersion to 14.2.0",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-07-11T16:58:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e52ac5a7321457cc9267dd39643ff7f798c697c",
"body": "Ports upstream #839. Replaces the deprecated v1 alexashoppinglists\nendpoints with alexashoppinglists/api/v2/lists (POST-fetch model,\nitemId/itemStatus/version). ListType is now SHOP/TODO/CUSTOM.\n\nBREAKING: List/ListItem field set and ListType values changed.",
"is_bot": false,
"headline": "feat(lists)!: migrate to the v2 ToDo lists API",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-07-11T16:55:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "32af010b6ace9a03b6b5615281fc852e31bf3779",
"body": "Ports upstream #506. New CommunicationsService (get + set) on the global\ncomms host, DropInStatus enum, Device.CommunicationSettings field, and\nan 'alexactl comms' command tree.",
"is_bot": false,
"headline": "feat(comms): add communications/announcement/drop-in preferences",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-07-11T16:25:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8892ced12bfa01c69a9a83b2425a6ef543a1bea6",
"body": "Ports upstream #950. New DevicesService.Restart POSTs the reboot\nendpoint with a bearer token; adds ErrCannotRestartDevice and an\n'alexactl devices restart --device' command.",
"is_bot": false,
"headline": "feat(devices): add Restart (device reboot)",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-07-11T12:35:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3ec3045b895e34c640a09882527200538e59a89e",
"body": "Ports upstream #929: 2 retries with 2s-5s backoff instead of 6 retries\nup to 21s, so throttled requests settle in seconds.",
"is_bot": false,
"headline": "fix(httpwrapper): trim retry budget to match upstream [0,2,5]",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-07-11T12:30:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e198a4f0fc4db2ccf0e8dadc345055003123c83",
"body": "Ports upstream #926. Global endpoints (api.amazon.com, the bob-dispatch\nAVS host, the comms host) live on amazon.com regardless of marketplace\nTLD; re-seed session cookies onto .amazon.com when domain != com.",
"is_bot": false,
"headline": "fix(httpwrapper): scope cookies to amazon.com for non-US accounts",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-07-11T12:23:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad9f6639419e4c6bccb2525805656bae5cfdb9e1",
"body": "Ports upstream #858. deviceInfo may now be a dict, a one-element\narray, or absent; records with no utteranceType fall back to\nrecordType then \"Unknown\"; empty intent defaults to \"Unknown\".\n\nBREAKING: VocalRecord.UtteranceType renamed to HistoryType.",
"is_bot": false,
"headline": "fix(history)!: handle recordType and array deviceInfo",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-07-11T12:07:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c6dbba8dbcc90ce336e4c6c2a7ba674a3251c5ad",
"body": "Ports upstream #899. A non-reauth ping error now closes the conn and\nreturns so streamLoop reconnects with backoff, instead of logging a\nwarning every pingInterval forever on a dead-but-not-EOF connection.",
"is_bot": false,
"headline": "fix(push): reconnect on ping failure instead of looping",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-07-11T09:59:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d604108c318b3f1e968d7eec86ad45ea29189cba",
"body": "Ports upstream #874 (v14.x) host change from\nalexa.{region}.gateway.devices.a2z.com to\nbob-dispatch-prod-{region}.amazon.com.",
"is_bot": false,
"headline": "fix(push): point AVS gateway at bob-dispatch host",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-07-11T09:23:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "674f109534ce1b7aef6ce97512fb7cd2cc1bc260",
"body": null,
"is_bot": false,
"headline": "chore: gitignore session backups and playwright MCP artifacts",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-05-30T17:52:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9c5d16133c190cdc547139e54e7255f3df459476",
"body": "- Replace the Apache-2.0 LICENSE with MIT (Copyright 2026 Justin Hammond).\n- Update the README license badge + section.\n- Reframe the project as heavily inspired by aioamazondevices (Apache-2.0)\n rather than a port (README, NOTICE, CONTRIBUTING, CLAUDE.md, version.go),\n and reword in-code provenan\n[…]\ndeled on\".\n- Add SPDX-FileCopyrightText / SPDX-License-Identifier: MIT headers to all\n hand-written .go files (generated files excluded).\n- Keep NOTICE attribution to the upstream Apache-2.0 project.",
"is_bot": false,
"headline": "chore: relicense to MIT and add SPDX headers",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-05-30T17:51:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2d7cd2c4745051c9a817514fcdbe4eb69b9db3b7",
"body": "…chema\n\nMove the introspected Alexa GraphQL SDL out of the untracked\ndocs/superpowers/research tree into internal/alexagraphql/schema/schema.graphql\nand point genqlient.yaml at it, so 'go generate' is reproducible from a\nfresh clone. Regeneration produces an identical generated.go.",
"is_bot": false,
"headline": "build(codegen): vendor genqlient schema under internal/alexagraphql/s…",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-05-30T17:35:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a85b8acdff3c9db7948936a5ad44fa70cd0d97d7",
"body": "Rewrite comments that referenced the development \"Phase N\" plans (now\nremoved from the repo) into self-contained descriptions of the actual\nbehavior, and drop pointers to the untracked docs/superpowers research\nfiles. Comment/help-text only; no code changes. Keeps generated.go in\nsync with its queries/*.graphql sources.",
"is_bot": false,
"headline": "docs: make godoc standalone — drop references to internal phase plans",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-05-30T17:30:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ae9cf8b5af9d261f6a978ec34944ee190a9b5b34",
"body": null,
"is_bot": false,
"headline": "chore: stop tracking CHANGELOG.md (kept local, gitignored)",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-05-30T17:03:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ff1af39c867b1713032a414d18ff89071d398ff6",
"body": "…mat section",
"is_bot": false,
"headline": "docs(claude): drop superpowers spec reference; add commit message for…",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-05-30T17:02:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56658af9a0299cfe492b97a083626c0749540085",
"body": null,
"is_bot": false,
"headline": "chore: stop tracking docs/superpowers (kept local, gitignored)",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-05-30T17:00:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "013bc3d5a5c96f7d67ddbf3c2a68f91f713d4fe0",
"body": "Rebrand the project to alexactl:\n- module path github.com/Fishwaldo/goamazondevices -> github.com/Fishwaldo/alexactl\n- root Go package amazondevices -> alexactl (API: alexactl.Client)\n- test CLI cmd/amazondevices-test -> cmd/alexactl (binary: alexactl)\n- log-prefix, header, and doc/spec/plan references updated accordingly\n\nUpstream aioamazondevices references are intentionally preserved.\nVersion constant bumped to 0.10.0; CHANGELOG [0.10.0] entry added.",
"is_bot": false,
"headline": "rename: goamazondevices -> alexactl; bump to v0.10.0",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-05-30T16:52:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "65de81ffa67b30bfcfa6afa15e1f505b95e7e8d2",
"body": "…ayloads\n\nMove the last commands off the legacy --serial flag onto --device (serial\nor friendly name, default-device fallback): speak, announce, volume,\ndnd set, routines call. media-state takes --device as a no-fallback filter.\n\nConvert required flag payloads to positional arguments:\n- speak <text>\n[…]\nand-text>\n- routines call <name>, skill launch <skill>, sound play <sound-id>\n- music <provider> <query>, dnd set <on|off>\n- alarms create <at>, timers create <duration>, reminders create <at> <label>",
"is_bot": false,
"headline": "feat(cli)!: finish --device migration; positional args for required p…",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-05-30T16:42:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "878939af08460dcad0f11c3d8b658d1bd714c76b",
"body": "Move default-device handling out of the library into the CLI: a Store for\nconfig get/set/unset (allowlisted) with session and cache-file persistence,\na serial-or-name resolver, and a unified --device flag across all\ndevice-targeting commands. Includes the breaking removal of library-side\ndefault-device handling.\n\nSquashed from the cli-config-default-device implementation plan.",
"is_bot": false,
"headline": "cli-config: config store + unified --device flag (v0.9.0)",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-05-30T15:50:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "600da7e8cffa363b9524a0afb69966ab308407e2",
"body": "Generic internal/cache engine: Cache[V] with singleflight loaders, TTL\nCacheClass tiers, file/memory persistence, and a Manager with\nRegister/Restore/Snapshot/InvalidateTag. Migrates devices.list,\nmedia.sounds, sequence.routines, history.csrf, and registers\nmusicProviders/deviceVolumes/mediaStates/dnd/lists/schedules/customerID\ncaches, plus a PushBridge that invalidates on push events.\n\nSquashed from the cache-service implementation plan.",
"is_bot": false,
"headline": "cache-service: internal/cache engine + service migrations (v0.8.0)",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-05-29T10:45:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "181a97d6f20a8707371db9b6569bdb0151cc77f4",
"body": "Replace the hardcoded SoundsList with a live Sounds(ctx) catalogue fetch\nbacked by a 1h TTL cache (WithSoundsTTL), validate PlaySound soundIDs\nagainst the catalogue, and add the sound-list CLI path.\n\nSquashed from the media-list-sounds implementation plan.",
"is_bot": false,
"headline": "media-list-sounds: MediaService.Sounds live catalogue (v0.7.0)",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-05-28T16:52:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "538e4d1804182aa181c7136bd77bef1f8f34d2c4",
"body": "AlarmsService, RemindersService, and TimersService over a shared\n/api/notifications fetcher split by kind, with typed Recurrence helpers,\nfull CRUD (Create/Update/Delete/Enable/Disable/Snooze/Acknowledge), CLI\nsubcommands, and removal of the legacy Notifications/Schedule surface.\n\nSquashed from the Phase 6 Schedules services implementation plan.",
"is_bot": false,
"headline": "Phase 6: Schedules services — Alarms, Reminders, Timers (v0.6.0)",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-05-28T16:19:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4e3c3df9ce1dd58376c733044b85e9b3da4fd50b",
"body": "ListsService with Get (parses both list types, sorts active-first),\nAddItem, Complete/Uncomplete, Delete, and Rename via PUT-echo, wired onto\nthe Client as a session consumer. Includes the lists CLI subcommands and\nwire-field/timestamp parser fixes.\n\nSquashed from the Phase 5 Lists service implementation plan.",
"is_bot": false,
"headline": "Phase 5: Lists service (v0.5.0)",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-05-28T13:39:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d92db142a12d0834d3c4fcd48c3afd0f25c0646d",
"body": "Phase 4-pre — typed GraphQL client via genqlient (ListEndpoints,\ngetEndpointState), retiring the hand-written GraphQL helpers.\nPhase 4a — smart-home discovery + read: Kind enum, endpoint-to-Device\nsurfacing, Inspect, and sensor property parsing.\nPhase 4b — write surface: setEndpointFeatures, typed P\n[…]\n Range/Toggle stubs.\n\nConcludes the pre-maintenance era with the v1.0.0 API freeze and the\nswitch of CLAUDE.md to maintenance phase.\n\nSquashed from the Phase 4-pre/4a/4b/4c/4d/4e implementation plans.",
"is_bot": false,
"headline": "Phase 4: smart-home device control (v0.4.0)",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-05-27T04:04:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dd6624cd5c549586441d355e08194ca5c05bd91d",
"body": "Phase 3a — push decoder layer: PushMessageType enum, PushEvent interface,\ntyped event structs, multipart AVS directives parser, and table-driven\ndecoder tests.\nPhase 3b — push runtime: PushService with single-shot directives stream,\nfan-out Subscribe, exponential-backoff reconnect, ping keepalive, reauth\nhandling, and CLI 'push tail'. Includes structured DEBUG body logging.\n\nSquashed from the Phase 3a/3b implementation plans.",
"is_bot": false,
"headline": "Phase 3: push event streaming (v0.3.0)",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-05-25T10:39:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e1a8302ebd6f3da91c0f97bc2fdf46162e9f1d8",
"body": "Phase 2a — DnDService and SensorsService with per-device sensor maps wired\ninto the Refresh pipeline.\nPhase 2b — NotificationsService (RFC 5545 recurrence) and HistoryService\n(Vocal with CSRF + bearer POST).\nPhase 2c — SequenceService (behaviors/preview batching, Routines) with\nSpeak/Announce/SetVolume refactored as Sequence facades, plus PlaySound,\nPlayMusic, Control, CallRoutine, InfoSkill, DeviceVolumes, MediaStates,\nand MusicProviders.\n\nSquashed from the Phase 2a/2b/2c implementation plans.",
"is_bot": false,
"headline": "Phase 2: DnD, Sensors, Notifications, History, Sequence + Media (v0.2.0)",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-05-25T05:40:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1816597ab93b41a7f6b7790160f31dd170c0c46a",
"body": "OAuth + form-scrape login with OTP, typed Session, device listing and\nenrichment via Nexus GraphQL, Speak/Announce/SetVolume media, and the\namazondevices-test CLI skeleton. Includes scrub log-redaction, transparent\n401 refresh, go-enum codegen, and post-release hardening fixes.\n\nSquashed from the Phase 1 implementation plan.",
"is_bot": false,
"headline": "Phase 1: core library foundation (v0.1.0)",
"author_name": "Justin Hammond",
"author_login": "Fishwaldo",
"committed_at": "2026-05-24T15:56:03Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 1,
"commits_last_year": 41,
"latest_release_at": "2026-07-19T08:09:39Z",
"latest_release_tag": "v0.1.0",
"releases_from_tags": false,
"days_since_last_push": 6,
"active_weeks_last_year": 4,
"days_since_latest_release": 6,
"mean_days_between_releases": null
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": false,
"has_contributing": true,
"health_percentage": 42,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/Fishwaldo/alexactl",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/Fishwaldo/alexactl",
"is_deprecated": false,
"latest_version": "v0.1.0",
"repository_url": "https://github.com/Fishwaldo/alexactl",
"versions_count": 1,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-19T08:07:33Z",
"latest_version_yanked": null,
"days_since_latest_publish": 6
}
]
},
"popularity": {
"forks": 0,
"stars": 0,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0,
"collected_at": null
},
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [
"internal/alexagraphql/queries/endpoint_all_features.graphql",
"internal/alexagraphql/queries/endpoint_state.graphql",
"internal/alexagraphql/queries/list_endpoints.graphql",
"internal/alexagraphql/queries/set_endpoint_features.graphql",
"internal/alexagraphql/queries/set_endpoint_features_v2.graphql",
"internal/alexagraphql/schema/schema.graphql"
],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 710141,
"source_files_sampled": 188,
"oversized_source_files": 1,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 5187
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/Khan/genqlient",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.8.1"
},
{
"name": "github.com/PuerkitoBio/goquery",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.12.0"
},
{
"name": "github.com/hashicorp/go-retryablehttp",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.7.8"
},
{
"name": "github.com/spf13/cobra",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.10.2"
},
{
"name": "github.com/spf13/viper",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.21.0"
},
{
"name": "github.com/stretchr/testify",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.1"
},
{
"name": "golang.org/x/sync",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.22.0"
},
{
"name": "golang.org/x/text",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.40.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 5,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 1
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "Fishwaldo",
"commits": 36,
"avatar_url": "https://avatars.githubusercontent.com/u/842308?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"release.yml"
],
"has_docs_dir": true,
"linter_configs": [
".golangci.yml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 0,
"reason": "0 out of 5 merged PRs checked by a CI test -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/20 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 3 contributing companies or organizations -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 9,
"reason": "1 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "914ed50990d3e480853c56355e0c4e73ba5ed21a",
"ran_at": "2026-07-26T03:40:15Z",
"aggregate_score": 3.7,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-19T18:23:17Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-19T08:13:10Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/Fishwaldo/alexactl",
"host": "github.com",
"name": "alexactl",
"owner": "Fishwaldo"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 52,
"inputs": {
"security": 37,
"vitality": 62,
"community": 33,
"governance": 53,
"engineering": 68
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 62,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 53,
"inputs": {
"commits_last_year": 41,
"human_commit_share": 0.878,
"days_since_last_push": 6,
"active_weeks_last_year": 4
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 6 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 6
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "4/52 weeks with commits",
"points": 2.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 4
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "41 commits in the last year",
"points": 14.6,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 41
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "good",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"releases_count": 1,
"latest_release_tag": "v0.1.0",
"releases_from_tags": false,
"days_since_latest_release": 6,
"mean_days_between_releases": null
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "1 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 1
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 6 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 6
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "cadence unknown (single release)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "release_cadence_unknown",
"params": {}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 33,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 0,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 53,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 3 contributing companies or organizations -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 60,
"inputs": {
"merged_prs": 5,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 1
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "5/6 decided PRs merged",
"points": 31.9,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 5,
"decided": 6
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/20 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 62,
"inputs": {
"followers": 121,
"owner_type": "User",
"is_verified": null,
"owner_login": "Fishwaldo",
"public_repos": 105,
"account_age_days": 5524
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "121 followers of Fishwaldo",
"points": 15,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 121,
"login": "Fishwaldo"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "105 public repos, account ~15 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 105
}
},
{
"code": "account_age_years",
"params": {
"years": 15
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "good",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"packages": [
"github.com/Fishwaldo/alexactl"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 6
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 6 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 6
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "1 published versions",
"points": 4,
"status": "partial",
"details": [
{
"code": "published_versions",
"params": {
"count": 1
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 68,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "2 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 2
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".golangci.yml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "0 out of 5 merged PRs checked by a CI test -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"topics": [
"alexa",
"amazon"
],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "2 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 2
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 37,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 37,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 3.7
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "0 out of 5 merged PRs checked by a CI test -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/20 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 3 contributing companies or organizations -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "1 existing vulnerabilities detected",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 2
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 76,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 5187
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "36 of 36 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 36,
"sampled": 36
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0.122
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "go.mod (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "go.mod"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".golangci.yml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 41",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 41
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "5 of the last 41 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 5,
"sampled": 41
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 710141,
"source_files_sampled": 188,
"oversized_source_files": 1
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "1/188 source files over 60KB",
"points": 54.7,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 188,
"oversized": 1
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [],
"has_mcp_signal": false,
"api_schema_files": [
"internal/alexagraphql/queries/endpoint_all_features.graphql",
"internal/alexagraphql/queries/endpoint_state.graphql",
"internal/alexagraphql/queries/list_endpoints.graphql",
"internal/alexagraphql/queries/set_endpoint_features.graphql",
"internal/alexagraphql/queries/set_endpoint_features_v2.graphql",
"internal/alexagraphql/schema/schema.graphql"
]
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": "internal/alexagraphql/queries/endpoint_all_features.graphql, internal/alexagraphql/queries/endpoint_state.graphql, internal/alexagraphql/queries/list_endpoints.graphql, internal/alexagraphql/queries/set_endpoint_features.graphql, internal/alexagraphql/queries/set_endpoint_features_v2.graphql, internal/alexagraphql/schema/schema.graphql",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "internal/alexagraphql/queries/endpoint_all_features.graphql, internal/alexagraphql/queries/endpoint_state.graphql, internal/alexagraphql/queries/list_endpoints.graphql, internal/alexagraphql/queries/set_endpoint_features.graphql, internal/alexagraphql/queries/set_endpoint_features_v2.graphql, internal/alexagraphql/schema/schema.graphql"
}
}
],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-26T03:40:23.054548Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/f/Fishwaldo/alexactl.svg",
"full_name": "Fishwaldo/alexactl",
"license_state": "standard",
"license_spdx": "MIT"
}Las puntuaciones son señales, no garantías. Reflejan prácticas públicamente visibles en GitHub; no son una auditoría de código ni una garantía de seguridad.
Los datos ausentes se excluyen y los pesos se renormalizan; nunca se puntúan como cero. La metodología es versionada y abierta: métricas v1.13.0, esquema v0.27.0 — metodología completa · wiki de métricas.
Cómo se sitúa un resultado dentro del registro general: estadísticas agregadas — Go.