InsForge / insta-cli

No fue posible recopilar el conjunto de dependencias resuelto para este informe: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

Instalar npm:insta@0.0.22 arrastra 1 paquetes, directos y transitivos: 0 tienen avisos conocidos, de los cuales 0 son dependencias directas.

Ningún aviso conocido afecta a las dependencias evaluadas.

Un aviso significa que la versión registrada en el grafo de dependencias cae dentro del rango afectado de un aviso. No se analiza la alcanzabilidad, y el grafo incluye fijaciones de desarrollo y prueba: un hallazgo puede referirse al utillaje y no al software distribuido.

{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 308,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "Shell": 10291,
        "JavaScript": 16821,
        "TypeScript": 169762
      },
      "pushed_at": "2026-07-27T15:36:05Z",
      "created_at": "2026-06-29T02:55:47Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-25T11:01:14Z",
      "description": null,
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "main",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "TypeScript",
      "significant_languages": [
        "TypeScript"
      ]
    },
    "owner": {
      "blog": "https://insforge.dev",
      "name": "InsForge",
      "type": "Organization",
      "login": "InsForge",
      "company": null,
      "location": "United States of America",
      "followers": 184,
      "avatar_url": "https://avatars.githubusercontent.com/u/198419463?v=4",
      "created_at": "2025-02-09T04:44:27Z",
      "is_verified": null,
      "public_repos": 29,
      "account_age_days": 533
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.0.22",
          "kind": "patch",
          "published_at": "2026-07-21T01:53:33Z"
        },
        {
          "tag": "v0.0.21",
          "kind": "patch",
          "published_at": "2026-07-17T15:06:48Z"
        },
        {
          "tag": "v0.0.20",
          "kind": "patch",
          "published_at": "2026-07-17T00:39:05Z"
        },
        {
          "tag": "v0.0.19",
          "kind": "patch",
          "published_at": "2026-07-15T15:36:59Z"
        },
        {
          "tag": "v0.0.18",
          "kind": "patch",
          "published_at": "2026-07-15T14:50:53Z"
        },
        {
          "tag": "v0.0.17",
          "kind": "patch",
          "published_at": "2026-07-15T14:24:36Z"
        },
        {
          "tag": "v0.0.16",
          "kind": "patch",
          "published_at": "2026-07-15T14:13:01Z"
        },
        {
          "tag": "v0.0.15",
          "kind": "patch",
          "published_at": "2026-07-15T13:29:11Z"
        },
        {
          "tag": "v0.0.14",
          "kind": "patch",
          "published_at": "2026-07-15T09:25:02Z"
        },
        {
          "tag": "v0.0.13",
          "kind": "patch",
          "published_at": "2026-07-15T01:52:59Z"
        },
        {
          "tag": "v0.0.12",
          "kind": "patch",
          "published_at": "2026-07-15T01:42:35Z"
        },
        {
          "tag": "v0.0.11",
          "kind": "patch",
          "published_at": "2026-07-12T10:53:34Z"
        },
        {
          "tag": "v0.0.10",
          "kind": "patch",
          "published_at": "2026-07-12T10:26:49Z"
        },
        {
          "tag": "v0.0.9",
          "kind": "patch",
          "published_at": "2026-07-12T10:08:40Z"
        },
        {
          "tag": "v0.0.8",
          "kind": "patch",
          "published_at": "2026-07-12T10:00:59Z"
        },
        {
          "tag": "v0.0.7",
          "kind": "patch",
          "published_at": "2026-07-12T09:32:38Z"
        },
        {
          "tag": "v0.0.6",
          "kind": "patch",
          "published_at": "2026-07-09T01:01:30Z"
        },
        {
          "tag": "v0.0.5",
          "kind": "patch",
          "published_at": "2026-07-04T19:22:16Z"
        },
        {
          "tag": "v0.0.4",
          "kind": "patch",
          "published_at": "2026-07-04T04:52:38Z"
        },
        {
          "tag": "v0.0.3",
          "kind": "patch",
          "published_at": "2026-07-03T18:40:58Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "f2dac1ce558652668ab38716ce6b37fb2a13e4b5",
          "body": "fix(observe): no-op the Claude hook when .insta/observe/hook.js is absent",
          "is_bot": false,
          "headline": "Merge pull request #40 from InsForge/fix/observe-hook-guard",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-25T11:00:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "653c2425ddc0e3eeede5e72dbc2c4f1bf837b3ec",
          "body": "insta logs --deploy (compute deploy events)",
          "is_bot": false,
          "headline": "Merge pull request #64 from InsForge/feat/compute-deploy-events",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-24T21:32:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6fcfd0bb5ac85bcb3a275aaceae3cd676b21f1e6",
          "body": null,
          "is_bot": false,
          "headline": "feat(logs): --deploy flag to fetch compute deploy events",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-24T20:39:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "658aac3809d61b0c005ddffb37e3e6b71f531eff",
          "body": "feat: add service rename command",
          "is_bot": false,
          "headline": "Merge pull request #62 from InsForge/feat/service-rename",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-21T00:13:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "95d960e280c5c0c9522fc4399828e15678189c14",
          "body": null,
          "is_bot": false,
          "headline": "Merge origin/main into feat/service-rename",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-21T00:12:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "98fe669a0970381b0cac0f10485e30ebddd9a9ac",
          "body": "feat: services add --region + insta regions",
          "is_bot": false,
          "headline": "Merge pull request #61 from InsForge/devel",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-21T00:11:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "432213df06fdab4614b9cbf39e169f8394342956",
          "body": "…--port)\n\nBoth PRs extended 'services add': #61 added --region + client-side region\nguard; #63 (on main) added --image/--port + servicesAddRequestBody.\nResolved by folding region into servicesAddRequestBody and the servicesAdd\nvalidation/output; dropped the now-redundant buildAddServiceBody + its test,\nmoved region coverage into test/services.test.ts.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Merge origin/main into devel: unify services add (--region + --image/…",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-21T00:09:16Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "fea548ec70c1b6e8bbe1749913a6e3144c588d15",
          "body": "services add compute --image/--port (create-with-image CLI)",
          "is_bot": false,
          "headline": "Merge pull request #63 from InsForge/feat/compute-service-image",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-21T00:02:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cd3f5fe318faa93a88eecbb49583a13b1d3bb7d9",
          "body": "… list\n\nservices add <compute> <name> now accepts --image <url> and --port <n>,\nforwarded to POST /projects/:id/services as image/port. Both are rejected\nclient-side for non-compute types (mirrors the existing --public/storage-only\ncheck), throwing before any network/config access. Extracted\nservice\n[…]\ned without mocking the API client.\n\nservices list now shows the running image (and port, if any) on compute\nrows via a new serviceListLine helper, extracted for the same reason\n(mirrors billingLines).",
          "is_bot": false,
          "headline": "feat(services): --image/--port on services add; show running image in…",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-20T23:51:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c7c3e68e73b9b2020306c19a8fd4bc1c5132b0ba",
          "body": null,
          "is_bot": false,
          "headline": "feat(services): add rename command",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-20T23:12:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "59362f4812c4389a6dc6bb9066dcb6b274dc64a5",
          "body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(cli): validate services-add flags before network/project resolution",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-20T22:49:47Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "02aee9f783dc30f12b85fdbffa5d7ba2a2e8ee23",
          "body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): services add --region + insta regions command",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-20T22:43:15Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "257311d3ebe342350f67b539202cadab7f0ada75",
          "body": "bump version to 0.0.22",
          "is_bot": false,
          "headline": "Merge pull request #60 from InsForge/devel",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-17T22:44:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f10b20c73f2c3cdfb774a5d4d099833580192ea1",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.0.22",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-17T22:42:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "da9944f8ef38d195f8f826aea9b8f35056bcd43f",
          "body": "Secret ⇄ service binding (CLI)",
          "is_bot": false,
          "headline": "Merge pull request #59 from InsForge/feat/secret-service-binding",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-17T22:35:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eafb706a3d8ce641e62ee5ce60be1ed6ae2d920f",
          "body": "… secrets\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(secrets): --service on set; grouped list; secrets tree; services…",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-17T21:25:22Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "975e08079a71e5347a81c4f1ece0a275cd4d2223",
          "body": "Co-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "bump version to 0.0.21 (#58)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-17T15:05:56Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "61ae3ab4d86a8d52944ea359b476b3b5066296f4",
          "body": "…setup agent (#57)\n\n* feat(setup): register the insta-cloud remote MCP server during `insta setup agent`\n\nRailway-parity: after the user-global skill install, setup now also registers\nhttps://mcp.instacloud.com/mcp with Claude Code (--transport http --scope user),\nauthenticated by a durable insta_ A\n[…]\n only when the table is\nabsent; idempotent re-runs report already-configured.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(setup): register the insta-cloud remote MCP server during insta …",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-17T15:01:28Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "af36fa32ed2dcfb79947edaa75678c7b4720f987",
          "body": "bump version to 0.0.20",
          "is_bot": false,
          "headline": "Merge pull request #56 from InsForge/devel",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-17T00:36:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1d6c6324014756d5ff262a24d1944061f7cc4d5e",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.0.20",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-17T00:30:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "26b590ff52266be3138432a5b9ff29df9ad19626",
          "body": "Branch-scoped services: --branch flags + insta branch merge",
          "is_bot": false,
          "headline": "Merge pull request #55 from InsForge/feat/branch-scoped-services",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-16T23:49:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8798a45e42f202e3ea7c13ef8bdf8c3d6e375233",
          "body": "- register --branch on compute start/stop/suspend/status (was consumed by\n  LifeOpts but never registered → \"unknown option\") and on services\n  scale/upgrade (now accept opts.branch ?? p.branch)\n- branchMerge: default target to opts.into ?? p.branch (drop hardcoded\n  'main'); guard the created/skipp\n[…]\nort q() from services.ts and reuse it in compute.ts\n\ntypecheck + build clean; 79 tests pass; --branch verified on compute + scale.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(cli): address PR #55 review feedback",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-16T23:48:17Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "814ed5166e9b1cea5f3a424af12515de3d2c64da",
          "body": "Resolve conflicts combining --branch/branch-merge with PR #54 (storage\n--public + services set-access):\n- servicesAdd carries both --branch and --public (POST body branch+public;\n  output shows branch + storage access label)\n- services add/list/remove keep --branch; add keeps --public; set-access\n  \n[…]\n public/private + stays branch-scoped\n- policy set description includes service.setAccess\n\ntypecheck + build clean; 79 tests pass.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Merge origin/main into feat/branch-scoped-services",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-16T23:44:00Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a686c857f134bf7a51a3f96d128fd58486d682a0",
          "body": "Structurally merges source's services into target (default: current\nbranch) via POST /projects/:id/branches/:branch/merge. Prints the\nplatform's per-item skip reason (exists|cap|secret-collision) instead\nof a generic message.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(branch): insta branch merge <source> --into <target>",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-16T22:47:51Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "223da153c9f8c26510693b45d9a34be388192840",
          "body": "…n current branch\n\nThreads --branch through `services add|list|remove` (default: current linked\nbranch), branch-scopes the GET /services list used by `services scale|upgrade`\nand by compute lifecycle (start/stop/suspend/status), so resolveServiceId /\nresolveComputeServiceId resolve against the right\n[…]\nnscoped list. deploy.ts already resolved its branch directly in the\nrequest body (no /services fetch to scope), so it's unchanged.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(services): --branch on add/list/remove; resolve compute/deploy o…",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-16T22:42:09Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9ad59d7c73962185f1e0f0459ea596715f8c88b1",
          "body": "feat(services): --public flag + services set-access command",
          "is_bot": false,
          "headline": "Merge pull request #54 from InsForge/feat/storage-public-bucket",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-16T18:40:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "855c81a9eb96a4d5f10091d9a8d3ad29320a8627",
          "body": "- `insta services add storage <name> --public` (storage only; rejected elsewhere)\n- `insta services set-access storage <name> public|private`\n- `services list` shows public/private for storage services\n- policy help lists the new service.setAccess action\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(services): --public on add + `services set-access` command",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-16T18:32:15Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "40dc5c7b0abfbbc62dfdfdf636d82beca2c491ba",
          "body": "…(#53)\n\nShips PR #52.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.0.19 (quiet per-project skill install in project create) …",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T15:36:07Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b6c23c7e30622fd786aa69b17ee4ed87044a4c72",
          "body": "…ck UI (#52)\n\ninsta project create shells npx skills add for the stack skills (insta,\nneon-postgres, tigris, better-auth) with stdio='inherit' — dumping the same\nclone-spinner/banner noise we already removed from insta setup agent. Run it\nsilent instead; the per-skill ✓/failed line is the clean outp\n[…]\n…\n  insta ✓\n  neon-postgres ✓\n  tigris ✓\n  better-auth ✓\n\n77/77 green.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(project create): don't stream the per-project skill install's cla…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T15:32:32Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c0bcd5fa123879ab87e0a691e2c8580ece377f87",
          "body": "…(#51)\n\nShips PR #50.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.0.18 (project create guides instead of inventing a name) …",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T14:49:24Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "3a79323f0c21c49bf3c63719de0fc069d8a85aeb",
          "body": "…ed project (#50)\n\nFollow-up to the no-prompt fix. Bare `insta project create` in a generic dir\n(~/projects, /tmp, the home dir) previously auto-generated a random name and\nprovisioned real postgres/storage/compute under it — surprising for a bare\ncommand. Now it guides instead:\n\n  name your project\n[…]\ns string|null (null = guide); removed the name generator. 77/77 green.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(project create): guide to name it instead of inventing a junk-nam…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T14:46:43Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "01887c81b3d78601ad215051b1c42ad8bc93ab9b",
          "body": "Ships PR #48: fresh installs default to the instacloud.com brand domain instead\nof the legacy beta-api.insta.insforge.dev host.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.0.17 (default cloud API = api.instacloud.com) (#49)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T14:23:47Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "7f8cec78ded3d0ab5f40815695ff0aa5f9c4eea2",
          "body": "…-api.insta.insforge.dev) (#48)\n\nOnboarding is agents.instacloud.com but the CLI's hardcoded DEFAULT_API still\npointed at the legacy beta host beta-api.insta.insforge.dev — so a fresh install\ntalked to an insforge.dev domain, not the instacloud.com brand. Verified same\nbackend: identical 401 {\"error\n[…]\nogin) or INSTA_API_URL\nstill wins, so existing logins are undisturbed.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(config): default cloud API to api.instacloud.com (not legacy beta…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T14:20:13Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "caf94eec4fc6a8ed60dcfc4ea7f1aefef00932c7",
          "body": "Ships PR #46: insta project create auto-generates a friendly name instead of\nhanging on an interactive prompt.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.0.16 (project create never prompts for a name) (#47)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T14:12:05Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "dfd013a602e5b6cfb564419c8b3d31d48ebbb490",
          "body": "…n the dir name is useless (#46)\n\n`insta project create` (no arg) dropped into an interactive `project name [projects]:`\nprompt — so `curl … | sh && insta project create` and any run from ~/projects just\nHANGS, with a nonsense default (the cwd basename 'projects'). Railway-grade onboarding\nshouldn't\n[…]\nme later if you want something specific. 77/77 tests green, tsc clean.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(project create): never block on a name prompt — auto-generate whe…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T14:09:24Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "398c5e49a0f23804c8c1396031ab83216f045975",
          "body": "… PATH warning) (#45)\n\nShips PR #44 in the binary: stdin='ignore' so the piped install script's\nGet-started guidance is no longer eaten; false 'another insta on PATH' warning\nsuppressed for our own symlink; '(~20s)' label dropped.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.0.15 (onboarding: guidance prints under curl|sh, no false…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T13:28:24Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "94901fc476738777bc3ac10178d779269f6426e0",
          "body": "…ipt; drop false PATH warning + '(~20s)' (#44)\n\nThree onboarding papercuts surfaced comparing `curl agents.instacloud.com | sh`\nto Railway's:\n\n1. The 'Get started' guidance never printed under `curl | sh`. `insta setup\n   agent` spawned `npx skills` with stdin='inherit'; since the piped install\n   s\n[…]\n now know InstaCloud — just ask them').\n\n75/75 tests green, tsc clean.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(onboarding): stop skill-install from eating the piped install scr…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T13:23:59Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "715fe33c5bda58b7d2b5d0302526c6f23c2d7d8b",
          "body": "Ships the captured-and-summarized skill-install output (PR #42) in the binary.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.0.14 (Railway-clean onboarding output) (#43)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T08:30:14Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "1568cc775c8f779cc5a6b7747200ec77fabdb210",
          "body": "…, don't stream it (#42)\n\n* fix(install): symlink into an on-PATH dir so `insta` runs immediately\n\nRoot cause of 'command not found: insta' after the one-liner: we installed\nonly to ~/.insta/bin (never on PATH), so the recommended\n'curl … | sh && insta project create' chain called insta in a shell w\n[…]\nreen.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(setup): Railway-clean onboarding output — summarize skill install…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T08:25:03Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "fa5bdadb7df39cd8ef28336f652b7b07ab5534bd",
          "body": "… (#41)\n\nRoot cause of 'command not found: insta' after the one-liner: we installed\nonly to ~/.insta/bin (never on PATH), so the recommended\n'curl … | sh && insta project create' chain called insta in a shell whose\nPATH the piped script can't change. Railway avoids this by installing where\nPATH alre\n[…]\n fresh install → 'command -v insta' resolves,\nv0.0.13, no manual step.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(install): symlink into an on-PATH dir so `insta` runs immediately…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T07:33:25Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "4a9875f1eb0391d1ed226c279c36305f73b42726",
          "body": "docs: AGENTS.md + CLAUDE.md; enrich developing-insta-cli",
          "is_bot": false,
          "headline": "Merge pull request #35 from InsForge/docs/claude-dev-skills",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-15T02:44:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9b6d7fe49ad48e8e36bca437efde0d2b961cc518",
          "body": "Split repo-local agent notes into AGENTS.md (read by Claude Code, Codex, and other AGENTS.md-aware tools); CLAUDE.md imports it via @AGENTS.md, matching the frontend/ convention. The developing-* skill stays in .claude/skills/ (Claude Code's skill dir); AGENTS.md points to the SKILL.md file so other agents can read it directly.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: move always-on notes to AGENTS.md; CLAUDE.md -> @AGENTS.md",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-15T02:01:21Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "4b52fd016e5b48057bb675b54492776722680e2f",
          "body": "…sent\n\n.claude/settings.json is often committed while ./.insta stays local-only,\nso a fresh clone (cloud code session, teammate checkout) gets the observe\nhook registered without the script. Every tool call then fails with\n'PostToolUse hook error: node:internal/modules/cjs/loader:1386'\n(MODULE_NOT_F\n[…]\n command on file existence so those\ncheckouts no-op instead of erroring.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_015PdkPrifSPAYEEX4QF89z4",
          "is_bot": false,
          "headline": "fix(observe): no-op the Claude hook when .insta/observe/hook.js is ab…",
          "author_name": "yaowenc2",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T01:57:00Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6b29c3bdb4fe5b58f4a282743707d10c0e949432",
          "body": "Claude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.0.13 — gzipped binaries (~20MB) + install progress (#39)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T01:51:54Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "689ce59c7e19d840046c4b692e3acfea946ed0cf",
          "body": "… (#38)\n\nBun --compile embeds the full runtime, so each binary is ~60MB — the\ndownload looked frozen and was slow. release.yml now gzips the unix\nbinaries (Bun compresses ~3×); install.sh fetches <asset>.gz and gunzips,\nwith a raw-binary fallback for older releases. Checksums cover the\nDECOMPRESSED \n[…]\nxe stays raw (manual download). Verified the gzip→verify flow\nlocally.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "perf(install): gzip binaries (~60MB → ~20MB) + progress already shown…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T01:51:03Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c9abc40a0dbfa97175e358a6e2a294a50460793b",
          "body": "install.sh downloaded the ~60MB Bun binary with 'curl -fsSL' (silent), so\nafter 'Installing insta…' it showed nothing for the whole download and read\nas a hang (user report). Now --progress-bar to a TTY (quiet when piped\nwithout one), and the message states the size.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(install): show download progress — 60MB binary looked frozen (#37)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T01:48:39Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d445b2f55e8ff12b07a8c34eb06d491dc7adc576",
          "body": "Ships: optional project-create name (paste-runnable one-liner, #34),\nnext-action Next: hints (#32), insta compute start/stop/suspend/status\nlifecycle commands, agents.instacloud.com canonical docs (#31).\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.0.12 (#36)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T01:41:45Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "7507d327ee47850be5a9798e3410679d1d90dec1",
          "body": "… paste-run (#34)\n\nThe console's empty-state onboarding recommended\n'curl … | sh && insta project create <app-name>', but the <app-name>\nplaceholder is unrunnable: zsh reads <…> as redirection → 'parse error\nnear \\n'. The RECOMMENDED command couldn't be pasted. Name is now\noptional: explicit arg win\n[…]\no 'insta project create'\nruns clean. TDD: slugify + resolver, 4 cases.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: insta project create name is optional — recommended one-liner is…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T01:26:50Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "51387c807574d813a2902f759189447c9133cbea",
          "body": "Add a repo-local CLAUDE.md (always-on rules + pointer to the skill) and\nfold a src/ architecture map + the cli-reference.md sync rule into the\nexisting developing-insta-cli skill.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: add CLAUDE.md; enrich developing-insta-cli with src/ architecture",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-15T01:17:45Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "4e2b6cd459be1955b7d5835bb928b8be6247d9ea",
          "body": "Devel",
          "is_bot": false,
          "headline": "Merge pull request #33 from InsForge/devel",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-14T21:12:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "80da15e6e619c6af9f17f771e7c69c9dc3b002ba",
          "body": "feat(nextactions): send Insta-Hints and render Next: affordance",
          "is_bot": false,
          "headline": "Merge pull request #32 from InsForge/feature/next-actions",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-14T21:01:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c6d4949add5963214965c066c317b93fd905c317",
          "body": null,
          "is_bot": false,
          "headline": "fix(nextactions): render metrics/logs hints with the compute target",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-14T18:45:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a985c4adb19b2941ab1d4bc5b8a3fb489f7b6906",
          "body": null,
          "is_bot": false,
          "headline": "feat(nextactions): send Insta-Hints and render Next: affordance",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-14T18:33:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dfbaf53ba796e5b1e9c9e3fe80dcd7ac378b5efd",
          "body": "CloudFront edge cache of agents.sh (rate-limit-proof vs raw.github);\nraw URL stays documented as the transparent fallback. Repo skill gains\nthe cache-invalidation note per its keep-true rule.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: agents.instacloud.com is the canonical onboarding one-liner (#31)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-14T01:02:15Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d2d2b8b62f6d7399958c805184218336908a14f7",
          "body": "Adds resolveComputeServiceId (services.ts) — resolve by name, or the\nsole compute service in the project when name is omitted — and four\nlifecycle subcommands wired into the existing `compute` group:\nstart/stop/suspend (mutating, via rawRequest + handleApproval, gated\nfor future-proofing) and status (plain read via request).",
          "is_bot": false,
          "headline": "feat(cli): insta compute start/stop/suspend/status",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-14T00:25:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "32d51663086bd702089cf0c8e8ad83234511af62",
          "body": "Claude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.0.11 — Railway-grade install moment (#30)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T10:52:38Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "04a65dff4afe60d60a0d2373c4c8ff6ce31b666e",
          "body": "install.sh: skips the download when the installed binary already matches\nthe latest release, warns when another insta shadows ours on PATH (with\nnpm-specific advice), and ends with the 3-command get-started (create →\ndeploy → branch = the isolated-clone wow). setup agent: filters the skills\ntool's e\n[…]\nred noise (real\nfailures still surface), summarizing what was skipped.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Railway-grade install moment (#29)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T10:51:25Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "1c7582f5bfe839e1f05a388e555905d74745bb27",
          "body": "Auto-link on first use, insta run (per-request secret injection),\nINSTA_PROJECT_ID linkless targeting, .env auto-gitignore.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.0.10 — the just-works release (#28)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T10:25:56Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "53831a7060094289ee85dfca8947f08763389c0c",
          "body": "…roring (#27)\n\nOne project → picked silently; several + TTY → one-keystroke picker;\nseveral + no TTY → actionable error (ids + INSTA_PROJECT_ID hint); zero →\npoints at project create. Choice persists to ./.insta/project.json so it\nhappens at most once per directory. Live-verified against insta-oss.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: auto-link — unlinked commands resolve the project instead of er…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T10:24:43Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "aa5ce0e11fc6a62af7fd3ef1e4a7e05eb3302bd6",
          "body": "…es .env (#26)\n\nThe Railway model: 'insta run -- <cmd>' fetches the branch bundle per\ninvocation and injects it into the child environment only — no .env on\ndisk, nothing committable, credentials live exactly as long as the\nprocess. And when 'insta secrets' does write an env file, it now\ngitignores what it wrote (git repos only, idempotent).\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: insta run — per-request secret injection; secrets auto-gitignor…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T10:18:17Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "8bfc5426ef38e413f4cc69de9166deab93c78bc2",
          "body": "…G_ID (#25)\n\nRailway-parity env resolution: target any project from anywhere with no\n.insta/project.json (CI, one-off commands, agents); env beats a link file.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: linkless targeting — INSTA_PROJECT_ID / INSTA_BRANCH / INSTA_OR…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T10:12:25Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "bc086ee7a2b43fc47dee0ecb3934a00b4bee90d0",
          "body": "Claude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.0.9 — link-once walk-up resolution (#24)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T10:07:49Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "0cd1e520de82b870aaa992da5f08c89ef47ed6e7",
          "body": "…n (#23)\n\nreadProject resolves the nearest ancestor link, so every command works\nfrom any subdirectory of a linked project; writeProject targets the found\nroot (branch switch in src/ no longer mints a nested link). Fresh links\nin unlinked trees still bind cwd.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: link once — git-style walk-up resolution for .insta/project.jso…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T10:06:37Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "674433d118e8efc3a87c80102ce8b5dbb3e4c85e",
          "body": "First fully-automated release: OIDC trusted publishing ships npm alongside\nthe binaries. Carries the agent one-liner, observe-hook fix, repo skill,\nand the auto-publish pipeline itself.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.0.8 (#22)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T10:00:03Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "160fcd575840bc587cccdbc24e0498cfcb78db3c",
          "body": "Swaps the NPM_TOKEN requirement for npm's Trusted Publisher flow: the\nworkflow identity (InsForge/insta-cli release.yml) is trusted directly\non npmjs.com. npm upgraded on the runner (OIDC exchange needs ≥11.5).\nSkill release section updated in the same PR per its keep-true rule.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: npm publish via OIDC trusted publishing (no token secret) (#21)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T09:57:19Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a8fb9c8b77a614ff01f445af4c002e3a0c50b6d4",
          "body": "publish-npm job in release.yml: gated on the binaries, tag pushes only,\ngranular NPM_TOKEN secret (bypasses interactive 2FA), --provenance\nattestation, and a clear error when the secret is missing. Skill updated\nin the same PR per its keep-this-skill-true rule.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: auto-publish npm on release tags (granular automation token) (#20)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T09:54:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "19b72b723faffe0f2b87f650b11c4515368f2bfb",
          "body": "Baseline-tested (agent without it guessed wrong on review flow, merge\ntype, bump-via-PR, and assumed npm publish might be in CI); with the\nskill a fresh agent answers both flows exactly. Includes the keep-this-\nskill-true rule: flow changes must update the skill in the same PR.\nGitignore: repo-owned skills tracked; installed skills stay ignored.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: repo skill — how agents develop and ship this CLI (#19)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T09:49:10Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5ac989de6fc76ce127b1ffeba7432d6f978c0b82",
          "body": "observe-hook fix (broken Claude Code config after every tool call), agent\none-liner (insta setup agent + agents.sh), INSTA_API_URL env precedence,\nEXPOSE-derived --port default, insta upgrade + autoupdate, test CI.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.0.7 (#18)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T09:31:43Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "3cde0e47f278d9f1ecd274d1f470f81e094896d3",
          "body": "…(#17)\n\nThe installer emitted command:'node' + an args array containing a\n${CLAUDE_PROJECT_DIR} template — Claude Code's hooks schema has no args\nfield and only shell-expands the command string, so node received the\ntemplate verbatim and threw MODULE_NOT_FOUND after EVERY tool call in\nevery linked p\n[…]\nker-based upsert), so 'insta observe install' heals\nexisting projects.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(observe): Claude Code hook must be a single shell-string command …",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T09:29:11Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "94d9c989c65c5cb827b95be2e0aaaecebd43da00",
          "body": "…nts.sh shim (#16)\n\nThe Railway onboarding pattern (curl agents.railway.com | sh): agents.sh pipes\ninstall.sh --agents -y, which installs the checksum-verified binary then runs\nthe new 'insta setup agent' — user-GLOBAL install of the insta skill for every\ncoding agent (the skill is pure product know\n[…]\nris/better-auth) intentionally stay per-project as the\nstack manifest.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: agent one-liner — insta setup agent + install.sh --agents + age…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T09:28:44Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "7332665b6391d898107cdb3e84c1db895684372f",
          "body": "…eploys (#11)\n\nDocs already call the port mismatch 'the #1 deploy mistake' — and it still\nhappened in live dogfooding (bare 'insta deploy .' with EXPOSE 3000 silently\nserviced 8080; every request refused). The Dockerfile states the truth, so\nread it: last EXPOSE wins, --port still overrides, prints what it picked.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(deploy): default --port from the Dockerfile's EXPOSE on source d…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-10T01:01:11Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5896746fbe51d22cf7357dedac816743e5fa46e6",
          "body": "Once any login wrote ~/.insta/config.json, the env var was silently\nignored (parsed.apiUrl always won). Found while driving the platform\ndev server with the stock CLI.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(config): INSTA_API_URL env var overrides the persisted apiUrl (#10)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-10T00:55:08Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "97799bc7b0f8867d2e7e6a6fa7bf787131fcd2ce",
          "body": "The repo had only release.yml — PRs merged with cubic review alone and the\ntest suite never ran in CI.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: run typecheck + the 33-test suite on every push/PR (#15)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-10T00:54:52Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "2869f5ed9bbb7b6531534ae117ee562114b36510",
          "body": "Devel",
          "is_bot": false,
          "headline": "Merge pull request #14 from InsForge/devel",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-09T01:00:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "131405de1989b364fbdf614873649e91a52fafb4",
          "body": "feat: insta billing uses /billing/overview (credits, forecast, breakdowns)",
          "is_bot": false,
          "headline": "Merge pull request #13 from InsForge/feat/billing-overview",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-09T00:57:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0a9f660a3cbee9a28764bcade1dea2c8d4e2e5e4",
          "body": null,
          "is_bot": false,
          "headline": "bump version",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-09T00:56:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "31bccea289699ffb13ea9e04f8bf3faac7010952",
          "body": "…t, breakdowns)\n\nRepoint 'insta billing' from /orgs/:id/billing to /orgs/:id/billing/overview and\nrender the richer payload: totals + credits + forecast + per-dimension and\nper-project breakdown. Adds a pure billingLines() (unit-tested) that reuses\ncycleLine + a newly-extracted pure dimensionLines() from metrics.ts (insta usage\noutput unchanged). --json still dumps the raw overview.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(billing): insta billing uses /billing/overview (credits, forecas…",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-09T00:51:09Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "2e7762067df80ab0dc6e1879170df0a4601f2b7f",
          "body": "feat(deploy): add --websocket flag",
          "is_bot": false,
          "headline": "Merge pull request #12 from InsForge/devel",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-08T04:40:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eaf9935161fb2a9c3e4dc0eccf17964f03f0d46e",
          "body": "Threads a --websocket boolean option through `insta deploy` into the\nplatform's POST /projects/:id/deploy request body, via a new pure\ndeployRequestBody() helper that's unit-tested. Only sent when set, so\nplain deploys are unchanged.",
          "is_bot": false,
          "headline": "feat(deploy): add --websocket flag",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-07T17:28:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ddaf2e367557a52df89c6ec4b66460215b93cb9d",
          "body": "Suppress repeated skills-CLI banner on install (+ version bump)",
          "is_bot": false,
          "headline": "Merge pull request #9 from InsForge/devel",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-04T20:46:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f2addaf050eed78896547d3e8acc48306cbca5b5",
          "body": null,
          "is_bot": false,
          "headline": "update version",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-04T19:05:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4a4f64c48632eaf90e43592a54f5e5221b81fd57",
          "body": "`npx skills add` prints a full-screen ASCII banner at the top of every\ninvocation, so installing the 4 related skill repos stacked 4 banners.\nInject AI_AGENT into the child env so the skills CLI enters agent mode and\nskips the banner (it's already non-interactive; this only quiets output).\nPreserve a caller's existing AI_AGENT rather than clobbering it.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(ensure-skills): suppress repeated skills-CLI banner during install",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-04T18:01:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "68e27a0db4f49293c3b7feb9575202bcbf29ef92",
          "body": "feat: insta upgrade + autoupdate (on by default while pre-1.0)",
          "is_bot": false,
          "headline": "Merge pull request #8 from InsForge/self-update",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-04T13:29:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "294b1ae126f0c7f358c4a3390b412f2ac0940738",
          "body": "Self-update, channel-aware: native binary re-runs the release installer into\nits own install dir (INSTA_INSTALL_DIR); npm runs npm i -g insta@latest;\nsource checkouts get a git-pull hint. A detached background check caches the\nregistry's latest version (24h TTL, ~/.insta/update-check.json); on start\n[…]\ne: nudge on stderr for normal commands,\nhelp entries, autoupdate status.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P",
          "is_bot": false,
          "headline": "feat: insta upgrade + autoupdate (on by default while pre-1.0)",
          "author_name": "Claude",
          "author_login": "claude",
          "committed_at": "2026-07-04T09:54:14Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "47bffff3f81d5a1d3c2ca1b317b597877730549a",
          "body": "Devel",
          "is_bot": false,
          "headline": "Merge pull request #7 from InsForge/devel",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-04T04:55:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a535e25fb55b8deb985c42396905b26c45827c0f",
          "body": null,
          "is_bot": false,
          "headline": "update version",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-04T04:49:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "acf01c84d633662861b7001897bb2e80fa1e4019",
          "body": "Add `insta secrets set <name> [value] [--branch]` and `secrets unset <name>\n[--branch]`, project-wide by default; value comes from the argument or stdin\n(keeps secrets out of shell history). Both are handleApproval-aware (202).\nExtend `policy set`'s help text with the secrets.write action.\n\nAlso fix\n[…]\ne parent group (secrets, billing) declares the\nsame flag name for its own default action — enable positional options so a\nflag written after the subcommand name binds to the subcommand, not the\ngroup.",
          "is_bot": false,
          "headline": "feat: insta secrets set/unset (user-managed secrets)",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-03T23:11:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3243be6609cd4c851aff18e982903bae86e9adcc",
          "body": "CLI: source-directory deploy · compute custom domains · auto-install skills",
          "is_bot": false,
          "headline": "Merge pull request #6 from InsForge/devel",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-03T18:37:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5681a64cb4dfc7bcb9d9c9e0c5bdeb5497bd6ca8",
          "body": "- Translate README fully to English (public-facing package)\n- Bump version 0.0.2 -> 0.0.3\n- Switch license MIT -> Apache-2.0, add LICENSE file\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Prep for public release: English README, v0.0.3, Apache-2.0",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-03T18:28:49Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d94a56ced708cec6b89c3a1339fc75ffad80bac3",
          "body": "- name insta-cli → insta; drop private:true (was blocking publish)\n- files → dist/**/*.js so the ~440MB bun binaries in dist/bin are not shipped\n- add engines(node>=18), prepublishOnly build, repo/homepage/bugs/keywords,\n  publishConfig.access=public, license\n- --version now reads the installed package.json (npm/node) instead of\n  reporting 0.0.0; standalone binary still uses INSTA_CLI_VERSION\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Publish as the 'insta' npm package",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-03T18:17:20Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "afe8c1560c789ebdfa0d3422bbe2509211b2affe",
          "body": "Default `insta usage` to whole-org usage (org of the linked project) with a\nper-project cost breakdown; `--proj [id]` shows one project — the linked one,\nor a given project id. Both over the current billing cycle.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "insta usage: show the org by default, --proj for a single project",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-03T18:10:03Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "57a05a532f06f09b544fc1db8faecc71e1c21a47",
          "body": "The usage window now defaults to the current billing cycle; show it as\n'billing cycle <start> → <end-1d>' (to is the exclusive next-cycle start).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "insta usage: label the window as the billing cycle (inclusive end date)",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-03T18:05:08Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c464fb4c9f3270a39083be811c6e2a40f934bbee",
          "body": "Render the customer-facing dimensions (cpu/memory/volume/egress/storage) the\nplatform now returns, with ram labelled 'memory'. Follows the platform\n/projects/:id/usage change to a { dimensions, totalCostUsd } response.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "insta usage: show the 5 billing dimensions, not raw provider meters",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-03T17:50:16Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "2305e97ba5b8ca87f59255832efc280503450fe9",
          "body": "`insta compute set-domain <host>` attaches a bring-your-own domain to a branch's\ncompute service and prints the DNS records to set in your own registrar;\n`check-domain` re-checks cert status, `remove-domain` detaches. Fly issues the\ncert + routes — the CLI just relays the platform's records/status.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Add `insta compute set-domain` for developer custom domains",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-03T04:49:46Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c4aa6ecf17785d986ac9a0a83f7f69ac8f46df41",
          "body": "deploy now takes either a prebuilt --image (unchanged) or a source directory\n(positional <dir>). Source mode: mint a short-lived app-scoped Fly deploy token\nfrom the platform (POST /deploy-token), build+push <dir> with flyctl's remote\nbuilder (`flyctl deploy --build-only --push`, token via FLY_API_T\n[…]\nld/push helper + ensureFlyctl) + tests. The CLI never\nholds a standing Fly credential — the platform mints a scoped, expiring one.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Support source-directory deploy: `insta deploy <dir>`",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-03T04:15:17Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "993bbb49777dd1e26b01fb8b10ee6ec299f1e659",
          "body": "Devel",
          "is_bot": false,
          "headline": "Merge pull request #5 from InsForge/devel",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-03T00:51:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "75a028b53f39f4d4064d670ee3c35fa944b8c0ab",
          "body": "`insta project create` and `insta project link` now also install the related\nagent skills into the linked directory (in addition to the observe hook), so a\ncoding agent has provider context out of the box. Runs `npx skills add`\n(vercel-labs/skills) fully non-interactively — agents pinned (-a claude-\n[…]\ne command. Installed dirs (.claude/skills, .agents/skills,\n.github/skills) are gitignored — regenerable agent context, not source.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Auto-install related agent skills on project create/link",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-03T00:28:46Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "32936582bce23782dfcda23f254cccc17766ab72",
          "body": null,
          "is_bot": false,
          "headline": "update default api url to staging",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-03T00:09:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "057a4be0b4b76fb00c1ef3b18ac535ba571ab695",
          "body": "insta services add/list/remove/scale/upgrade",
          "is_bot": false,
          "headline": "Merge pull request #4 from InsForge/feat/services-model",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-02T19:25:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1a25228ae95a4acbce4bcf444d24d9d85079846a",
          "body": null,
          "is_bot": false,
          "headline": "Merge remote-tracking branch 'origin/devel' into feat/services-model",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-02T19:20:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 20,
      "commits_last_year": 114,
      "latest_release_at": "2026-07-21T01:53:33Z",
      "latest_release_tag": "v0.0.22",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 4,
      "days_since_latest_release": 6,
      "mean_days_between_releases": 0.7
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": false,
      "has_contributing": false,
      "health_percentage": 25,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "insta",
          "exists": true,
          "license": "Apache-2.0",
          "keywords": [
            "insta",
            "insforge",
            "cli",
            "backend",
            "baas",
            "platform"
          ],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/insta",
          "is_deprecated": false,
          "latest_version": "0.0.22",
          "repository_url": "https://github.com/InsForge/insta-cli",
          "versions_count": 21,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 3,
          "monthly_downloads": 2912,
          "first_published_at": "2016-12-19T09:55:39.763000Z",
          "latest_published_at": "2026-07-21T01:53:59.839000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 6
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 1,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": null,
      "open_issues_and_prs": 1
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "tsconfig.json"
      ],
      "toolchain_manifests": [],
      "largest_source_bytes": 16790,
      "source_files_sampled": 50,
      "oversized_source_files": 0,
      "agent_instruction_files": [
        "AGENTS.md",
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 1248
    },
    "dependencies": {
      "manifests": [
        "package.json"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 1,
        "malicious_count": 0,
        "assessed_package": "npm:insta@0.0.22",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm"
      ],
      "dependencies": [
        {
          "name": "commander",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^12.1.0"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 1,
        "merged_prs": 64,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "jwfing",
          "commits": 71,
          "avatar_url": "https://avatars.githubusercontent.com/u/985038?v=4"
        },
        {
          "type": "User",
          "login": "tonychang04",
          "commits": 42,
          "avatar_url": "https://avatars.githubusercontent.com/u/26497075?v=4"
        },
        {
          "type": "User",
          "login": "claude",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/81847?v=4"
        }
      ],
      "contributors_sampled": 3,
      "top_contributor_share": 0.623
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "release.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "package-lock.json"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "15 out of 15 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 10,
            "reason": "all changesets reviewed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 6,
            "reason": "project has 2 contributing companies or organizations -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 3,
            "reason": "dependency not pinned by hash detected -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 4,
            "reason": "6 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "f2dac1ce558652668ab38716ce6b37fb2a13e4b5",
        "ran_at": "2026-07-27T20:39:12Z",
        "aggregate_score": 4.2,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-25T11:01:25Z",
      "oldest_open_prs": [
        {
          "number": 65,
          "created_at": "2026-07-27T15:22:09Z",
          "last_comment_at": "2026-07-27T15:36:25Z",
          "last_comment_author": "tonychang04"
        }
      ],
      "last_merged_pr_at": "2026-07-25T11:00:58Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/InsForge/insta-cli",
    "host": "github.com",
    "name": "insta-cli",
    "owner": "InsForge"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 58,
      "inputs": {
        "security": 54,
        "vitality": 70,
        "community": 32,
        "governance": 68,
        "engineering": 57
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 70,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 57,
            "inputs": {
              "commits_last_year": 114,
              "human_commit_share": 1,
              "days_since_last_push": 0,
              "active_weeks_last_year": 4
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "4/52 weeks with commits",
                "points": 2.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 4
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "114 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 114
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "releases_count": 20,
              "latest_release_tag": "v0.0.22",
              "releases_from_tags": false,
              "days_since_latest_release": 6,
              "mean_days_between_releases": 0.7
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "20 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 20
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 6 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 6
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~0.7 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 0.7
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 32,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 1,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "1 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 58,
            "inputs": {
              "packages": [
                "insta"
              ],
              "dependents": null,
              "ecosystems": "npm",
              "total_downloads": null,
              "monthly_downloads": 2912
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "2,912 downloads/month across npm",
                "points": 46.2,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 2912,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 68,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 28,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 3,
              "top_contributor_share": 0.623
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 62% of commits",
                "points": 8.5,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 62
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "3 contributors",
                "points": 4.1,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "excellent",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "merged_prs": 64,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "64/64 decided PRs merged",
                "points": 38.2,
                "status": "met",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 64,
                      "decided": 64
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "all changesets reviewed",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 60,
            "inputs": {
              "followers": 184,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "InsForge",
              "public_repos": 29,
              "account_age_days": 533
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "184 followers of InsForge",
                "points": 16.3,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 184,
                      "login": "InsForge"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "29 public repos, account ~1 yr old",
                "points": 13.7,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 29
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 1
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "insta"
              ],
              "ecosystems": "npm",
              "any_deprecated": false,
              "min_days_since_publish": 6
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 6 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 6
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "21 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 21
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 57,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "2 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "15 out of 15 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "at_risk",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 54,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 42,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 4.2
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "15 out of 15 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "all changesets reviewed",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 3",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "6 existing vulnerabilities detected",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:insta@0.0.22 runtime dependency closure — what installing the published package pulls in — 1 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "npm:insta@0.0.22",
                  "assessed": 1
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 0,
              "affected_packages": 0,
              "assessed_packages": 1,
              "unassessed_packages": 0,
              "affected_by_severity": "none",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "no indirect dependency carries a known advisory",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "no_indirect_advisories",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 1,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 4
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 74,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.92,
              "agent_instruction_files": [
                "AGENTS.md",
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 1248
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "AGENTS.md, CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "AGENTS.md, CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "92 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 92,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 56,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "package-lock.json"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [
                "tsconfig.json"
              ],
              "agent_commit_share": 0.62,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "62 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 62,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 3",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "TypeScript",
              "largest_source_bytes": 16790,
              "source_files_sampled": 50,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "TypeScript (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "TypeScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/50 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 50,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-27T20:39:32.931899Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/i/InsForge/insta-cli.svg",
  "full_name": "InsForge/insta-cli",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}