MarkAC007 / mcp-server-scf

Conjunto completo de dependencias resueltas según el grafo de dependencias de GitHub: 3 paquetes directos y 364 indirectos (transitivos). El cierre transitivo es completo cuando el repositorio incluye un lockfile.

Este repositorio no publica ningún paquete que el índice resuelva, así que se evaluó su propio grafo de dependencias — 367 paquetes, que incluyen también fijaciones de desarrollo y prueba que nunca se distribuyen: 6 tienen avisos conocidos, de los cuales 0 son directas.

Un aviso significa que la versión registrada en el grafo de dependencias cae dentro del rango afectado de un aviso. No se analiza la alcanzabilidad, y el grafo incluye fijaciones de desarrollo y prueba: un hallazgo puede referirse al utillaje y no al software distribuido.

{
  "data": {
    "repo": {
      "topics": [
        "ai-agent",
        "claude",
        "compliance",
        "fedramp",
        "grc",
        "iso-27001",
        "mcp",
        "model-context-protocol",
        "nist",
        "risk-management",
        "scf",
        "security",
        "soc-2"
      ],
      "is_fork": false,
      "size_kb": 1457,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "Shell": 3288,
        "Dockerfile": 492,
        "JavaScript": 2278,
        "TypeScript": 105357
      },
      "pushed_at": "2026-07-20T19:45:37Z",
      "created_at": "2026-02-19T10:59:36Z",
      "owner_type": "User",
      "updated_at": "2026-07-17T15:40:59Z",
      "description": "MCP server for SCF Controls Platform — security compliance controls, frameworks, evidence, and risk management for AI agents",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "TypeScript",
      "significant_languages": [
        "TypeScript"
      ]
    },
    "owner": {
      "blog": null,
      "name": "MarkAC",
      "type": "User",
      "login": "MarkAC007",
      "company": null,
      "location": "Scotland",
      "followers": 13,
      "avatar_url": "https://avatars.githubusercontent.com/u/56160609?v=4",
      "created_at": "2019-10-04T12:40:59Z",
      "is_verified": null,
      "public_repos": 26,
      "account_age_days": 2483
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v2.0.1",
          "kind": "patch",
          "published_at": "2026-07-17T15:41:51Z"
        },
        {
          "tag": "v2.0.0",
          "kind": "major",
          "published_at": "2026-07-17T07:53:12Z"
        },
        {
          "tag": "v1.6.3",
          "kind": "patch",
          "published_at": "2026-06-23T09:09:19Z"
        },
        {
          "tag": "v1.6.2",
          "kind": "patch",
          "published_at": "2026-06-23T09:07:28Z"
        },
        {
          "tag": "v1.6.1",
          "kind": "patch",
          "published_at": "2026-06-23T09:06:03Z"
        },
        {
          "tag": "v1.6.0",
          "kind": "minor",
          "published_at": "2026-06-23T07:57:32Z"
        },
        {
          "tag": "v1.5.2",
          "kind": "patch",
          "published_at": "2026-06-23T07:56:01Z"
        },
        {
          "tag": "v1.5.1",
          "kind": "patch",
          "published_at": "2026-06-23T07:54:29Z"
        },
        {
          "tag": "v1.5.0",
          "kind": "minor",
          "published_at": "2026-06-23T07:52:40Z"
        },
        {
          "tag": "v1.4.7",
          "kind": "patch",
          "published_at": "2026-06-23T07:40:15Z"
        },
        {
          "tag": "v1.4.6",
          "kind": "patch",
          "published_at": "2026-06-23T07:36:04Z"
        },
        {
          "tag": "v1.4.5",
          "kind": "patch",
          "published_at": "2026-06-23T07:32:42Z"
        },
        {
          "tag": "v1.4.4",
          "kind": "patch",
          "published_at": "2026-05-12T13:44:57Z"
        },
        {
          "tag": "v1.4.3",
          "kind": "patch",
          "published_at": "2026-05-12T13:43:04Z"
        },
        {
          "tag": "v1.4.2",
          "kind": "patch",
          "published_at": "2026-05-12T13:40:02Z"
        },
        {
          "tag": "v1.4.1",
          "kind": "patch",
          "published_at": "2026-05-12T13:38:25Z"
        },
        {
          "tag": "v1.4.0",
          "kind": "minor",
          "published_at": "2026-05-12T13:28:54Z"
        },
        {
          "tag": "v1.3.2",
          "kind": "patch",
          "published_at": "2026-05-12T13:24:31Z"
        },
        {
          "tag": "v1.3.1",
          "kind": "patch",
          "published_at": "2026-05-12T13:22:36Z"
        },
        {
          "tag": "v1.3.0",
          "kind": "minor",
          "published_at": "2026-05-12T13:15:37Z"
        },
        {
          "tag": "v1.2.0",
          "kind": "minor",
          "published_at": "2026-05-12T13:00:43Z"
        },
        {
          "tag": "v1.1.2",
          "kind": "patch",
          "published_at": "2026-05-12T12:45:18Z"
        },
        {
          "tag": "v1.1.1",
          "kind": "patch",
          "published_at": "2026-05-12T12:28:13Z"
        },
        {
          "tag": "v1.1.0",
          "kind": "minor",
          "published_at": "2026-05-12T12:15:12Z"
        },
        {
          "tag": "v1.0.12",
          "kind": "patch",
          "published_at": "2026-04-20T10:20:07Z"
        },
        {
          "tag": "v1.0.11",
          "kind": "patch",
          "published_at": "2026-04-19T07:33:47Z"
        },
        {
          "tag": "v1.0.10",
          "kind": "patch",
          "published_at": "2026-04-19T07:14:36Z"
        },
        {
          "tag": "v1.0.9",
          "kind": "patch",
          "published_at": "2026-04-19T06:59:44Z"
        },
        {
          "tag": "v1.0.8",
          "kind": "patch",
          "published_at": "2026-04-19T06:48:08Z"
        },
        {
          "tag": "v1.0.7",
          "kind": "patch",
          "published_at": "2026-04-19T06:30:47Z"
        },
        {
          "tag": "v1.0.6",
          "kind": "patch",
          "published_at": "2026-04-19T06:19:10Z"
        },
        {
          "tag": "v1.0.5",
          "kind": "patch",
          "published_at": "2026-04-19T06:08:46Z"
        },
        {
          "tag": "v1.0.4",
          "kind": "patch",
          "published_at": "2026-04-18T21:00:13Z"
        },
        {
          "tag": "v1.0.3",
          "kind": "patch",
          "published_at": "2026-04-18T20:36:29Z"
        },
        {
          "tag": "v1.0.2",
          "kind": "patch",
          "published_at": "2026-04-18T20:23:33Z"
        },
        {
          "tag": "v1.0.1",
          "kind": "patch",
          "published_at": "2026-04-18T20:02:19Z"
        },
        {
          "tag": "v1.0.0",
          "kind": "major",
          "published_at": "2026-04-18T19:14:15Z"
        },
        {
          "tag": "v0.7.1",
          "kind": "patch",
          "published_at": "2026-04-18T18:58:13Z"
        },
        {
          "tag": "v0.7.0",
          "kind": "minor",
          "published_at": "2026-04-18T18:24:41Z"
        },
        {
          "tag": "v0.6.0",
          "kind": "minor",
          "published_at": "2026-04-18T18:02:50Z"
        },
        {
          "tag": "v0.5.16",
          "kind": "patch",
          "published_at": "2026-04-18T17:43:19Z"
        },
        {
          "tag": "v0.5.15",
          "kind": "patch",
          "published_at": "2026-04-18T17:41:44Z"
        },
        {
          "tag": "v0.5.14",
          "kind": "patch",
          "published_at": "2026-04-18T17:34:33Z"
        },
        {
          "tag": "v0.5.13",
          "kind": "patch",
          "published_at": "2026-04-18T17:28:46Z"
        },
        {
          "tag": "v0.5.12",
          "kind": "patch",
          "published_at": "2026-04-18T17:15:56Z"
        },
        {
          "tag": "v0.5.11",
          "kind": "patch",
          "published_at": "2026-04-18T15:51:03Z"
        },
        {
          "tag": "v0.5.10",
          "kind": "patch",
          "published_at": "2026-04-18T15:31:06Z"
        },
        {
          "tag": "v0.5.9",
          "kind": "patch",
          "published_at": "2026-04-18T15:27:09Z"
        },
        {
          "tag": "v0.5.8",
          "kind": "patch",
          "published_at": "2026-04-18T15:23:53Z"
        },
        {
          "tag": "v0.5.7",
          "kind": "patch",
          "published_at": "2026-04-18T14:59:55Z"
        },
        {
          "tag": "v0.5.6",
          "kind": "patch",
          "published_at": "2026-04-18T14:44:24Z"
        },
        {
          "tag": "v0.5.4",
          "kind": "patch",
          "published_at": "2026-04-18T07:07:36Z"
        },
        {
          "tag": "v0.5.3",
          "kind": "patch",
          "published_at": "2026-04-14T16:12:55Z"
        },
        {
          "tag": "v0.5.2",
          "kind": "patch",
          "published_at": "2026-04-08T16:33:21Z"
        },
        {
          "tag": "v0.5.1",
          "kind": "patch",
          "published_at": "2026-04-01T14:18:25Z"
        },
        {
          "tag": "v0.5.0",
          "kind": "minor",
          "published_at": "2026-04-01T12:50:41Z"
        },
        {
          "tag": "v0.4.1",
          "kind": "patch",
          "published_at": "2026-03-30T20:50:07Z"
        },
        {
          "tag": "v0.4.0",
          "kind": "minor",
          "published_at": "2026-03-28T14:09:23Z"
        },
        {
          "tag": "v0.3.7",
          "kind": "patch",
          "published_at": "2026-03-27T18:19:08Z"
        },
        {
          "tag": "v0.3.6",
          "kind": "patch",
          "published_at": "2026-03-27T11:43:00Z"
        },
        {
          "tag": "v0.3.5",
          "kind": "patch",
          "published_at": "2026-03-26T22:43:57Z"
        },
        {
          "tag": "v0.3.4",
          "kind": "patch",
          "published_at": "2026-03-18T11:22:55Z"
        },
        {
          "tag": "v0.3.3",
          "kind": "patch",
          "published_at": "2026-03-17T18:54:48Z"
        },
        {
          "tag": "v0.3.2",
          "kind": "patch",
          "published_at": "2026-03-17T17:47:48Z"
        },
        {
          "tag": "v0.3.1",
          "kind": "patch",
          "published_at": "2026-03-04T08:31:25Z"
        },
        {
          "tag": "v0.3.0",
          "kind": "minor",
          "published_at": "2026-02-28T19:58:45Z"
        },
        {
          "tag": "v0.2.2",
          "kind": "patch",
          "published_at": "2026-02-20T15:20:06Z"
        },
        {
          "tag": "v0.2.1",
          "kind": "patch",
          "published_at": "2026-02-19T21:51:54Z"
        },
        {
          "tag": "v0.2.0",
          "kind": "minor",
          "published_at": "2026-02-19T16:54:35Z"
        },
        {
          "tag": "v0.1.7",
          "kind": "patch",
          "published_at": "2026-02-19T13:53:35Z"
        },
        {
          "tag": "v0.1.5",
          "kind": "patch",
          "published_at": "2026-02-19T13:05:08Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "36551612d1a62c01086b9ea16d7df1b0bfc8e181",
          "body": "…e tools (#186)\n\n* fix: surface 403 detail, self-heal stale org_id, add evidence guidance tools\n\n- errors.ts: pass the platform's 403 detail through to the caller with a\n  recovery hint pointing at scf_list_organizations (previously replaced\n  with a generic message, so callers could not self-correc\n[…]\n tool documentation\n- two new tool descriptions trimmed to the 200-char limit\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: surface 403 detail, self-heal stale org_id, add evidence guidanc…",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-07-17T15:40:40Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5196eb078dff83512ffbb02426bbf37f63849d2d",
          "body": "…0) (#184)\n\nBREAKING: SCF_API_URL is now required — the hosted SaaS default\n(uk.scfcontrolsplatform.app) is decommissioned; the platform is\nself-hosted only. BREAKING: scf_trigger_dpsia removed, replaced by\nscf_trigger_vendor_assessment on the new assessments endpoint.\n\n- Vendors 7→11 tools: new ven\n[…]\niption plan\n- Docs, README (83 tools), server.json, mcpb manifest, smithery.yaml\n  all updated for self-hosted setup; Cursor deeplink re-encoded\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat!: sync with self-hosted platform API; require SCF_API_URL (v1.7.…",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-07-17T07:52:20Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f9433b8a84e7b4957b9add0d0736bf8cde7099d7",
          "body": "* chore(release): bump package.json + server.json to v1.6.3\n\n* ci: re-trigger required checks on release PR\n\nRelease PR opened by github-actions bot with GITHUB_TOKEN doesn't trigger\nCI (recursion guard). Empty commit under user token fires pull_request\nsynchronize so required checks run and the PR can merge.\n\n---------\n\nCo-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>\nCo-authored-by: Mark <mark@almeida-cardy.org>",
          "is_bot": true,
          "headline": "chore(release): bump to v1.6.3 (#174)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-23T09:11:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a3d484fb1abdd8339ffe69ae1f16b9f6ed81e5f4",
          "body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.2 to 7.0.0.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/de0fac2e4500dabe0009e67\n[…]\nemver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: MarkAC <mark@almeida-cardy.org>",
          "is_bot": true,
          "headline": "ci: bump actions/checkout from 6.0.2 to 7.0.0 (#159)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-23T09:08:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "de26594cccb15cc660095207791f54b389d58124",
          "body": "Bumps [gitleaks/gitleaks-action](https://github.com/gitleaks/gitleaks-action) from 2.3.9 to 3.0.0.\n- [Release notes](https://github.com/gitleaks/gitleaks-action/releases)\n- [Commits](https://github.com/gitleaks/gitleaks-action/compare/ff98106e4c7b2bc287b24eaf42907196329070c7...e0c47f4f8be36e29cdc102\n[…]\nemver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: MarkAC <mark@almeida-cardy.org>",
          "is_bot": true,
          "headline": "ci: bump gitleaks/gitleaks-action from 2.3.9 to 3.0.0 (#152)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-23T09:06:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6e3b6f4f5ac6c132ea5f7ae8e8fb3cbba6229ff7",
          "body": "Bumps [lint-staged](https://github.com/lint-staged/lint-staged) from 16.4.0 to 17.0.5.\n- [Release notes](https://github.com/lint-staged/lint-staged/releases)\n- [Changelog](https://github.com/lint-staged/lint-staged/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/lint-staged/lint-staged/compar\n[…]\nemver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: MarkAC <mark@almeida-cardy.org>",
          "is_bot": true,
          "headline": "deps: bump lint-staged from 16.4.0 to 17.0.5 (#146)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-23T09:05:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4451fd121ec41dd4c0d048a04f2c4b0961cad991",
          "body": "* chore(release): bump package.json + server.json to v1.6.0\n\n* ci: re-trigger required checks on release PR\n\nRelease PRs are opened by the github-actions bot with GITHUB_TOKEN, which\ndoes not trigger workflow runs (recursion guard), so required checks never\nreport and the PR stays BLOCKED. Empty com\n[…]\n_request synchronize event so CI runs and the PR can merge.\n\n---------\n\nCo-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>\nCo-authored-by: Mark <mark@almeida-cardy.org>",
          "is_bot": true,
          "headline": "chore(release): bump to v1.6.0 (#171)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-23T08:56:09Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d34371787c2e4ca87be1b345653fe3b0642618b5",
          "body": "…es (#161)\n\nBumps the dev-dependencies group with 5 updates in the / directory:\n\n| Package | From | To |\n| --- | --- | --- |\n| [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8) | `4.1.6` | `4.1.9` |\n| [eslint](https://github.com/eslint/eslint) | `10.3.0` | `1\n[…]\nependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: MarkAC <mark@almeida-cardy.org>",
          "is_bot": true,
          "headline": "deps: bump the dev-dependencies group across 1 directory with 6 updat…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-23T07:56:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d08831f8335935cf3e07c4ad652b3f7f23b41e24",
          "body": "Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 3.0.0 to 3.0.1.\n- [Release notes](https://github.com/softprops/action-gh-release/releases)\n- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/so\n[…]\nemver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: MarkAC <mark@almeida-cardy.org>",
          "is_bot": true,
          "headline": "ci: bump softprops/action-gh-release from 3.0.0 to 3.0.1 (#160)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-23T07:55:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "054974f01e99f305989e32f994e8c95823355412",
          "body": "Bumps [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) from 1.0.120 to 1.0.153.\n- [Release notes](https://github.com/anthropics/claude-code-action/releases)\n- [Commits](https://github.com/anthropics/claude-code-action/compare/dde2242db6af13460b916652159b6ba19a598f30.\n[…]\nemver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: MarkAC <mark@almeida-cardy.org>",
          "is_bot": true,
          "headline": "ci: bump anthropics/claude-code-action from 1.0.120 to 1.0.153 (#158)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-23T07:53:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5b3dff68911cfe53fd71402a9973ecaf12523318",
          "body": "Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.4 to 4.36.2.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/6\n[…]\nemver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: MarkAC <mark@almeida-cardy.org>",
          "is_bot": true,
          "headline": "ci: bump github/codeql-action from 4.35.4 to 4.36.2 (#155)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-06-23T07:51:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a6203c04d98d1978440a501cd0c8e10a915b79bb",
          "body": "* docs(readme): link the now open-source platform core\n\nThe SCF Controls Platform core is published under AGPL-3.0 at\nscf-controls-platform-oss. Add an intro callout and a Links entry so\nREADME consumers can find the self-hostable core.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropi\n[…]\n-Session: https://claude.ai/code/session_01LWWJa6LZMrt8p7JmRBDRCb\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nCo-authored-by: mac864776-pixel <mac864776@gmail.com>",
          "is_bot": false,
          "headline": "docs(readme): link the now open-source platform core (#162)",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-06-23T07:39:31Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e35f5ce20fd07dfe04bb18d9d39db68b265a018c",
          "body": "…(#163)\n\n- auto-release: replace `npx --yes semver` (unpinned remote fetch at\n  release time) with `sort -V`, a coreutils builtin. Removes a\n  supply-chain risk and the OpenSSF Pinned-Dependencies ding; no new dep.\n- scorecard: add workflow_dispatch so the scan can be refreshed on demand\n  (e.g. aft\n[…]\nepo went public) instead of waiting for the Monday cron.\n\n\nClaude-Session: https://claude.ai/code/session_01LWWJa6LZMrt8p7JmRBDRCb\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(ci): drop unpinned npx semver; add scorecard on-demand trigger …",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-06-23T07:35:15Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "4b73c8f0c4cf344ed3afc59a7aa60e2b8d20e64a",
          "body": "… (#164)\n\nnpm audit --audit-level=high (CI gate) was failing on 7 high advisories:\n- tmp <0.2.6 path traversal (GHSA-ph9p) — propagated through\n  external-editor -> @inquirer/{editor,prompts} -> @anthropic-ai/mcpb (5 of 7)\n- hono <=4.12.24 (multiple) via @modelcontextprotocol/sdk (prod tree)\n- vite \n[…]\n gate exits 0, build + tsc + 37 tests + format all pass.\n\n\nClaude-Session: https://claude.ai/code/session_01LWWJa6LZMrt8p7JmRBDRCb\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(deps): patch high-severity advisories via cooldown-safe overrides…",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-06-23T07:31:55Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f01e92a68e7df7dae9a9de8e4317c8328e9a0210",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(release): bump package.json + server.json to v1.4.4 (#142)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-05-12T19:15:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ddccc2eeaf94fbfcf2a98b5cb2d42f511c4c9d60",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>\nCo-authored-by: MarkAC <mark@almeida-cardy.org>",
          "is_bot": true,
          "headline": "chore(release): bump package.json + server.json to v1.4.3 (#141)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-05-12T13:46:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2da23241fd2abbd1bb143c3a7121c858bed7c962",
          "body": "Bumps [@eslint/js](https://github.com/eslint/eslint/tree/HEAD/packages/js) from 9.39.4 to 10.0.1.\n- [Release notes](https://github.com/eslint/eslint/releases)\n- [Commits](https://github.com/eslint/eslint/commits/v10.0.1/packages/js)\n\n---\nupdated-dependencies:\n- dependency-name: \"@eslint/js\"\n  depend\n[…]\nemver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: MarkAC <mark@almeida-cardy.org>",
          "is_bot": true,
          "headline": "deps: bump @eslint/js from 9.39.4 to 10.0.1 (#122)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-12T13:44:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "921287bfe1ca4494d52359440192d914f2169729",
          "body": "Bumps [eslint](https://github.com/eslint/eslint) from 9.39.4 to 10.2.1.\n- [Release notes](https://github.com/eslint/eslint/releases)\n- [Commits](https://github.com/eslint/eslint/compare/v9.39.4...v10.2.1)\n\n---\nupdated-dependencies:\n- dependency-name: eslint\n  dependency-version: 10.2.1\n  dependency-\n[…]\nrect:development\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps: bump eslint from 9.39.4 to 10.2.1 (#121)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-12T13:42:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5cd16bbe986cb427b8c5f4f6e83af2f3ae9b371b",
          "body": "Bumps [github/codeql-action](https://github.com/github/codeql-action) from 4.35.2 to 4.35.4.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/9\n[…]\nemver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: MarkAC <mark@almeida-cardy.org>",
          "is_bot": true,
          "headline": "ci: bump github/codeql-action from 4.35.2 to 4.35.4 (#126)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-12T13:39:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6930ef8c45d9807bb502982033b846d1da7ef813",
          "body": "Bumps [anthropics/claude-code-action](https://github.com/anthropics/claude-code-action) from 1.0.101 to 1.0.120.\n- [Release notes](https://github.com/anthropics/claude-code-action/releases)\n- [Commits](https://github.com/anthropics/claude-code-action/compare/38ec876110f9fbf8b950c79f534430740c3ac009.\n[…]\nemver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: MarkAC <mark@almeida-cardy.org>",
          "is_bot": true,
          "headline": "ci: bump anthropics/claude-code-action from 1.0.101 to 1.0.120 (#124)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-12T13:37:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "72eb4fbff100ae2ab47032ea0c91a0a2333c0e8d",
          "body": "…es (#127)\n\nBumps the dev-dependencies group with 2 updates in the / directory: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) and [typescript-eslint](https://github.com/typescript-eslint/typescript-eslint/tree/HEAD/packages/typescript-eslint).\n\n\nUpdates `@typ\n[…]\non-update:semver-minor\n  dependency-group: dev-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps: bump the dev-dependencies group across 1 directory with 2 updat…",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-12T13:28:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e7203c633bd35b6b24be4a29b16560a095c6c290",
          "body": "Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4.6.2 to 7.0.1.\n- [Release notes](https://github.com/actions/upload-artifact/releases)\n- [Commits](https://github.com/actions/upload-artifact/compare/ea165f8d65b6e75b540449e92b4886f43607fa02...043fb46d1a93c77aae656e7c1c\n[…]\nemver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: MarkAC <mark@almeida-cardy.org>",
          "is_bot": true,
          "headline": "ci: bump actions/upload-artifact from 4.6.2 to 7.0.1 (#117)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-12T13:23:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5d636df0fe4521d0a6f989fe220b13fb4bedb808",
          "body": "…132)\n\nCombined bump of both vitest and @vitest/coverage-v8 in a single PR,\nresolving the circular peer-dep conflict that blocked dependabot's\nsplit PRs (#119 and #120).\n\nvitest 4 has documented breaking changes (snapshot format, mock API\nrenames, fakeTimers behaviour) but verification confirms this\n[…]\n\n- npx tsc --noEmit: clean\n- npm audit --audit-level=high: 0 vulnerabilities\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\nCo-authored-by: mac864776-pixel <mac864776@gmail.com>",
          "is_bot": false,
          "headline": "chore(deps): bump vitest + @vitest/coverage-v8 from 3.2.4 to 4.1.6 (#…",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-05-12T13:21:41Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0250c030867b9108bacabfd0bf0c9e0d097fef58",
          "body": "* feat(tools): add control-composite read tools — get + list (M3)\n\nWraps the two public M3 endpoints from scf-controls-platform epic #569:\n\n- `scf_get_control_assessment_composite(org_id, scf_id)`\n  → GET /organizations/{org_id}/controls/{scf_id}/assessment-composite\n  Returns the rolled-up assessme\n[…]\nnning\ntests myself before declaring #128 healthy.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(tools): add control-composite read tools — get + list (M3) (#128)",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-05-12T13:14:47Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5aa3a8af12e79cfa6d4844b0571733f29704f047",
          "body": "Bumps [zod](https://github.com/colinhacks/zod) from 4.3.6 to 4.4.3.\n- [Release notes](https://github.com/colinhacks/zod/releases)\n- [Commits](https://github.com/colinhacks/zod/compare/v4.3.6...v4.4.3)\n\n---\nupdated-dependencies:\n- dependency-name: zod\n  dependency-version: 4.4.3\n  dependency-type: di\n[…]\nemver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: MarkAC <mark@almeida-cardy.org>",
          "is_bot": true,
          "headline": "deps: bump zod from 4.3.6 to 4.4.3 (#125)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-12T12:59:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1658391d8e54e1ca7d2ed5b77147977bd4a860d7",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>\nCo-authored-by: MarkAC <mark@almeida-cardy.org>",
          "is_bot": true,
          "headline": "chore(release): bump package.json + server.json to v1.1.1 (#131)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-05-12T12:58:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dfd86a578bfe1a33bca80fc3277da155f2cd0d59",
          "body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 4.3.1 to 6.0.2.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/34e114876b0b11c390a5638\n[…]\nemver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: MarkAC <mark@almeida-cardy.org>",
          "is_bot": true,
          "headline": "ci: bump actions/checkout from 4.3.1 to 6.0.2 (#116)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-12T12:44:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d76cadce9558571704a3dcb27701ad0bd88e758f",
          "body": "…-rate-limit advisories (#129)\n\nResolves the npm-audit hard-gate added in #113 by running `npm audit fix`\n(no --force). Only `package-lock.json` changes — transitive bumps only,\nno direct-dep version-range edits in package.json.\n\nVulns resolved (pre-fix: 1 high + 3 moderate; post-fix: 0):\n- fast-uri\n[…]\nation: npm ci, npm run build, npm test (37/37) all clean.\nPre-existing lint errors on main are unrelated and unchanged by this PR.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(deps): npm audit fix — resolve fast-uri/hono/ip-address/express…",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-05-12T12:27:23Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "762c92272b7f3b1a56182c3792c8c2a5f84cd566",
          "body": "Bumps [actions/setup-node](https://github.com/actions/setup-node) from 6.3.0 to 6.4.0.\n- [Release notes](https://github.com/actions/setup-node/releases)\n- [Commits](https://github.com/actions/setup-node/compare/53b83947a5a98c8d113130e565377fae1a50d02f...48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e)\n\n---\n[…]\nirect:production\n  update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "ci: bump actions/setup-node from 6.3.0 to 6.4.0 (#115)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-05-12T12:14:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b0fc7ca5e183d9ca1ce4e0e6ae59a351c697304f",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(release): bump package.json + server.json to v1.0.12 (#114)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-04-20T10:29:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "206bdad0790d975a26cbfd0e4354b887b8d2e97e",
          "body": "Three low-effort fixes to move the Scorecard score off 6.6/10:\n\n1. CODEOWNERS — add @mac864776-pixel as second reviewer on every\n   pull request, alongside @MarkAC007. Satisfies the Scorecard\n   Code-Review check once branch protection requires Code Owner\n   review on main (configured separately via\n[…]\nrified on v1.0.11 via\ndeps.dev SLSA attestation) — this PR covers the parallel GitHub\nRelease asset channel that Scorecard checks.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(security): Tier-1 OpenSSF Scorecard improvements (#113)",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-04-20T10:19:13Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ad34045c25e3bec5b22ae06e704786a4192892a1",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(release): bump package.json + server.json to v1.0.11 (#112)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-04-19T07:38:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b55bf144262ff0430c443f478fa9557563ba162a",
          "body": "The previous jq filter returned every version of the server and took\n`head -n 1`, which gave us whatever the registry search ranked first —\nin practice, the oldest publish. After v1.0.10 was published to the\nregistry, the health check still reported `0.5.12` because that entry\ncame back earlier in t\n[…]\nest`\nflag that the registry attaches to the current version.\n\nVerified locally: filter returns `1.0.10` against the live registry.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci(health-check): pick MCP Registry entry with isLatest=true (#111)",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-04-19T07:33:00Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "fd0e6619f1bac7aac17e678dc5ab7bf3794a41d7",
          "body": "Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(release): bump package.json + server.json to v1.0.10 (#110)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-04-19T07:19:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b5424e593d14419fb92ba4d9c5954a2babb11b81",
          "body": "Adds `actions: write` to the release job (fixes the HTTP 403 we saw\nwhen auto-release tried to dispatch ci.yml against the v1.0.9 bump\nbranch) and a new \"Publish to MCP Registry (DNS-auth)\" step so the\nregistry entry for app.scfcontrolsplatform/mcp-server-scf stays in\nlockstep with npm.\n\nGuarded by MCP_REGISTRY_KEY secret — step no-ops cleanly if not set,\nso this PR can ship before the DNS/secret setup is done Jeff-side.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: auto-publish to MCP Registry + fix actions:write for dispatch (#109)",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-04-19T07:13:55Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "8c85391e9eba6efdac1bd5c9b650bf2f20d94197",
          "body": "…s (#107)\n\nField-testing #105 just now exposed one last gap: PR #106\n(\"chore(release): bump to v1.0.8\") was opened correctly by\nauto-release.yml, but sat at mergeable_state=\"blocked\" forever\nbecause the required status checks (build (20)/(22), SAST, CodeQL,\nSecret Detection) never fired.\n\nRoot cause\n[…]\n normally)\n\nNo src/ or test changes. yaml parses clean; build, lint (0 errors,\n2 pre-existing warnings), vitest (37/37) all green.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: explicit workflow_dispatch so auto-release can kick CI on bump PR…",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-04-19T06:59:07Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d44c44b4cfae7e2178349f8b80f8864dcc4c1b73",
          "body": "…04) (#105)\n\nRoot cause of the server.json / package.json drift surfaced in #100:\nauto-release.yml tries to push the version-bump commit straight to\nmain, and branch protection rejects it (GH006: Protected branch\nupdate failed). The warning fires, the release continues, but main's\nsource-of-truth fi\n[…]\n on next run.\n\nNo src/ or test changes. yaml parses clean; build, lint (0 errors),\nformat:check, vitest (37/37) all green locally.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci(auto-release): sync main via PR instead of blocked push (closes #1…",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-04-19T06:47:25Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ca9ce6623a10b7d85d8c33d2ca90dd678313305f",
          "body": "…100) (#103)\n\nTwo surgical additions to close the release-health-check issue:\n\n1. auto-release.yml now bumps server.json alongside package.json in\n   the release-prep commit. Uses jq to patch both the top-level\n   .version and any .packages[] entry with registryType \"npm\" in\n   lockstep with the rec\n[…]\nn both files),\njq transformation produces the expected output against current\nserver.json, build/lint/test/format:check all green.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: sync server.json on release + weekly drift health check (closes #…",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-04-19T06:30:06Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ed66c6c2325b67c6f9c8aa26e4b071e28e3bdd9e",
          "body": "…rt (#102)\n\nCloses #75, #76, #77, #78.\n\n#75 — FUNDING.yml\n  Add .github/FUNDING.yml pointing to the MarkAC007 GitHub Sponsors\n  profile. Uncontroversial default for a solo-maintainer public repo;\n  remove or edit if sponsor routing shouldn't land here.\n\n#76 — CODEOWNERS\n  Add .github/CODEOWNERS with\n[…]\n-up.\n\nVerified locally: build, tsc --noEmit, lint (0 errors), format:check,\nvitest (37/37), README tool-count invariant (72 = 72).\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: polish batch — FUNDING, CODEOWNERS, badges, Inspector quicksta…",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-04-19T06:18:31Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8884e5f0107ac7e976566d8d1e28016e1b8f929d",
          "body": "TypeScript 6 no longer implicitly includes @types/* packages. Add an\nexplicit \"types\": [\"node\"] entry to tsconfig.json so process.* and\nnode:* imports in src/ still resolve under 6.x, and bump the devDep\npin from ^5.7.0 to ^6.0.3.\n\nCompatibility check:\n- typescript-eslint 8.58.2 peerDep is typescrip\n[…]\n npm run lint (0 errors,\n2 pre-existing warnings), npm run format:check, npm test (37/37),\nnpm audit --audit-level=high (0 vulns).\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(deps): migrate to TypeScript 6.0 (closes #90) (#101)",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-04-19T06:08:03Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0d2697700e6721a138665633dfe5c9cd0aa24d85",
          "body": "…erts (#99)\n\nClose the open Scorecard + Dependabot + code-scanning findings from\nhttps://scorecard.dev/viewer/?uri=github.com/MarkAC007/mcp-server-scf\nand GitHub Security tab. All surgical — no component removal or rewrite.\n\nFixes:\n\n- Dangerous-Workflow (score 0 → expected 10): auto-release.yml pass\n[…]\nvitest 3.2.4;\n`npm audit` reports 0 vulnerabilities; `npm run build:mcpb` produces a\nvalid .mcpb bundle via the local mcpb binary.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(security): fix Dangerous-Workflow, tighten tokens, close CVE al…",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-04-18T20:59:27Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a90504b158f49527d0c09cf1fa1bc5a3d8bbefba",
          "body": "- Align @modelcontextprotocol/sdk range to ^1.29.0 (lockfile already\n  hoisted via #45; this declares the floor). Transitive tree now\n  resolves hono@4.12.14, @hono/node-server@1.19.14, express-rate-limit@8.3.2\n  -- all patched. npm audit --audit-level=high exits 0.\n- Add publishConfig.provenance so\n[…]\nocket.dev GitHub App is already installed (Socket Security: Project\nReport check is passing on PRs under the ComplianceGenie org).\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(security): harden supply chain to improve Socket.dev scores (#98)",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-04-18T20:35:48Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6ad3d40b8a0484330ba9b53f0b3dfb901eb3cb09",
          "body": "* docs(tools): rewrite all 72 tool descriptions for agent tool-selection (#74)\n\nSweep every `server.tool(name, description, ...)` across the 8 domain files and\nrewrite descriptions to match Anthropic's tool-description guidance while the\nagent is \"read-cold\" (no prior context):\n\n- Front-load the act\n[…]\nbehaviour change to the Cursor or Smithery flows.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(readme): remove broken Claude Desktop install deeplink (#97)",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-04-18T20:22:53Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "892e10ad9b4e297f07815a2b48df7d217b31fe5d",
          "body": "…n (#74) (#95)\n\nSweep every `server.tool(name, description, ...)` across the 8 domain files and\nrewrite descriptions to match Anthropic's tool-description guidance while the\nagent is \"read-cold\" (no prior context):\n\n- Front-load the action verb so the agent sees what the tool does first.\n- Flag side\n[…]\ne out the v1.0.0 CHANGELOG section (was still labelled [Unreleased])\n  and add a fresh Unreleased entry for this pass.\n\nCloses #74\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(tools): rewrite all 72 tool descriptions for agent tool-selectio…",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-04-18T20:01:39Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b13b537437764bd7383c5893df0bec59480af0f0",
          "body": "Closes #62.\n\nRenames every tool registration in src/tools/*.ts to gain the scf_\nprefix — e.g., list_controls -> scf_list_controls, create_vendor ->\nscf_create_vendor. Parameters, return shapes, handlers, and HTTP\nendpoints are unchanged; only the tool names visible to MCP clients.\n\nPer-user directio\n[…]\nified locally: format, lint (0 errors, 2 pre-existing warnings),\ntsc, 29/29 vitest, build, build:mcpb (3.4 MB bundle still valid).\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat!: prefix all 72 tools with scf_ (v1.0 breaking) (#94)",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-04-18T19:13:37Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ed30327f0dff8999bdcfdc5e2b7e4bd7e91aa9fd",
          "body": "The platform currently runs only in the UK. Drop all copy that implies\na US endpoint at scfcontrolsplatform.com is selectable as SCF_API_URL —\nthat domain is the marketing/signup site, not a regional API host.\n\n- mcpb/manifest.json: Platform URL description no longer mentions US\n- smithery.yaml: rem\n[…]\nting links to https://scfcontrolsplatform.com are kept — that's\nthe public website and signup origin, not a regional API endpoint.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: remove references to a non-existent US region (#93)",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-04-18T18:57:28Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5c796fd9d912f9e8e1048b72489b29a5d8d2cb93",
          "body": "….6.0) (#92)\n\nCloses #59 — adds a signed-ready Claude Desktop Extension bundle path:\n- mcpb/manifest.json (v0.2) with scf_ API key + UK-default Platform URL\n- scripts/build-mcpb.sh stages server build + prod-only node_modules,\n  syncs version from package.json, validates + packs via @anthropic-ai/mc\n[…]\nencoded for uk.* hostname\n\neslint.config.js now ignores dist/ so the build staging directory\ndoesn't fail lint on transient files.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(mcpb): .mcpb Desktop Extension bundle + UK rename (Batch F of v0…",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-04-18T18:24:01Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3ed59e6c8f984995e7a6ce3a67ef91f8690efcb4",
          "body": "…of v0.6.0) (#91)\n\n* feat(brand): README hero banner, social preview, and 512 logo (Batch G of v0.6.0)\n\nAdds the brand asset pack under docs/assets/ and heroes the banner at the\ntop of the README. Dark-premium composition: navy gradient, ComplianceGenie\ngenie-lamp mark left, SCF Controls Platform wo\n[…]\norical\nrelease notes and deliberately left alone.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(brand): README hero banner + social preview + 512 logo (Batch G …",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-04-18T18:02:16Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "546a886a13e9dcd6075198c2f7b24768f1cf6e3b",
          "body": "Bumps [@modelcontextprotocol/sdk](https://github.com/modelcontextprotocol/typescript-sdk) from 1.27.1 to 1.29.0.\n- [Release notes](https://github.com/modelcontextprotocol/typescript-sdk/releases)\n- [Commits](https://github.com/modelcontextprotocol/typescript-sdk/compare/v1.27.1...v1.29.0)\n\n---\nupdat\n[…]\nemver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: MarkAC <mark@almeida-cardy.org>",
          "is_bot": true,
          "headline": "deps: bump @modelcontextprotocol/sdk from 1.27.1 to 1.29.0 (#45)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-18T17:42:41Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3268566a1babb1588559bee72230df3bddde4015",
          "body": "Bumps the dev-dependencies group with 1 update: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node).\n\n\nUpdates `@types/node` from 25.3.3 to 25.5.0\n- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)\n- [Commits](https://github.com/Definite\n[…]\non-update:semver-minor\n  dependency-group: dev-dependencies\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "deps: bump @types/node in the dev-dependencies group (#38)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-18T17:41:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c3b837b1186b9e1a2bf30e671f13f52215cd77f7",
          "body": "… (#89)\n\n`git describe --tags --abbrev=0` returns the nearest tag reachable from\nHEAD via commit ancestry, not the highest semver tag. When release tags\nare scattered across branches or an older tag is \"closer\" by graph\ndistance, this returns a stale tag and the downstream version-bump math\nsilently\n[…]\n-abbrev=0       → v0.1.7  (stale ancestor, wrong)\n  git tag --list ... --sort=-v:refname  → v0.5.13 (correct highest)\n\nCloses #88.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(ci): use highest semver tag in auto-release.yml, not git describe…",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-04-18T17:34:02Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "97442c8421d22637a98d4ec102000569157d8e1d",
          "body": "…#87)\n\nBatch E (#86) merged and the Auto Release workflow published v0.5.12 to\nnpm with the new mcpName, but two drift issues remained on main:\n\n- The workflow's \"commit package.json bump back to main\" step was blocked\n  by branch protection, so main's package.json still said 0.5.0 while npm\n  was a\n[…]\nlculation\nbug in .github/workflows/auto-release.yml so future releases bump from\nthe highest semver tag, not the nearest ancestor.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: sync package.json + server.json to v0.5.12 after release drift (…",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-04-18T17:28:08Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f82d4920c73697267a2c2d852321f7cf12f7dd24",
          "body": "….6.0) (#86)\n\n* feat: add server.json, one-click installs, Smithery polish (Batch E of v0.6.0)\n\nThree discoverability improvements for the v0.6.0 milestone:\n\nserver.json (MCP registry manifest)\n- Schema-validated against\n  https://static.modelcontextprotocol.io/schemas/2025-07-09/server.schema.json\n\n[…]\nked until the next npm release ships the mcpName.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: server.json, one-click installs, Smithery polish (Batch E of v0…",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-04-18T17:15:28Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "16e8b1083f2d29f68f5b844a6d9d61525249c82e",
          "body": "…6.0) (#85)\n\nREADME trims from 687 → 198 lines by moving the Tools section and the\nbulk of the deep configuration detail into a per-domain docs/ folder.\nAll tool parameter tables are now sourced directly from the Zod schemas\nin src/tools/*.ts, filling the 20+ tool-doc gap the old README had\n(notably\n[…]\nift check still\npasses, and links into the new docs from a trouble-shooting pointer at\nthe top of the hero.\n\nCloses #56\nCloses #55\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: split README into docs/ and add troubleshooting (Batch D of v0.…",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-04-18T15:50:30Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "001cdef5c2336d2c1b75114cbbd903468130205a",
          "body": "Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2 to 3.\n- [Release notes](https://github.com/softprops/action-gh-release/releases)\n- [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/softprops/\n[…]\nirect:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "ci: bump softprops/action-gh-release from 2 to 3 (#49)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-04-18T15:30:37Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d63472af37b8e60d7c455fd11165a89e57ba0f8f",
          "body": "The per-PR automated Claude Code Review action was running on every\nPR open/push. It is no longer wanted — the @claude mention-triggered\nworkflow (`.github/workflows/claude.yml`) remains in place for\non-demand review.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: remove auto claude-code-review workflow (#84)",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-04-18T15:26:38Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "9d5b1dc4001c0f6010d316935e0a600254aaaaf1",
          "body": "Ships the community-health files required to raise GitHub's repo health\nscore and channel security reports away from public issues.\n\n- CODE_OF_CONDUCT.md: Contributor Covenant 2.1, reports routed to\n  GitHub Security Advisories (same intake as SECURITY.md).\n- .github/ISSUE_TEMPLATE/bug.yml: structur\n[…]\nwith the two-step release\n  flow documented in CONTRIBUTING.md.\n- README.md + CONTRIBUTING.md link the CoC.\n\nCloses #70\nCloses #71\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: add CoC and .github templates (Batch C of v0.6.0) (#83)",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-04-18T15:23:16Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f2fc738ff7735d751014706a56d0c38db7b21cdd",
          "body": "* new logos\n\n* test: vitest suite + declare MCP capabilities explicitly\n\nBatch B of v0.6.0. Closes #54 and #66.\n\n- src/index.ts: McpServer now constructed with an explicit\n  { capabilities: { tools: {} } } block so clients get the\n  capability without relying on SDK inference. Closes #54.\n- vitest +\n[…]\ncally across 3 files in ~830ms.\n\nCloses #54, #66.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test: vitest suite + explicit MCP capabilities (Batch B of v0.6.0) (#82)",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-04-18T14:59:24Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a0f1a20a9b16d4e74140446dd1c7f70df4da522f",
          "body": "… v0.6.0) (#81)\n\n* chore: wire up ESLint 9, Prettier 3, and husky pre-commit hook\n\nShips the code-quality toolchain promised by CONTRIBUTING.md but\npreviously not actually installed or enforced:\n\n- ESLint 9 flat config (eslint.config.js) with typescript-eslint\n  recommended rules, eslint-config-pret\n[…]\nts with || echo, and new 'Check formatting' step.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: wire up ESLint 9, Prettier 3, and husky pre-commit (Batch A of…",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-04-18T14:43:52Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5b175edb2589c2e751e73c3a5b96f9eab4979741",
          "body": "* fix: correct version drift, tool count, and brand lead (P0 audit fixes)\n\n- Server handshake now reads name/version from package.json via\n  createRequire (was hardcoded 0.1.0 while package.json was 0.5.0)\n- README tool count and domain table corrected: 38 → 67 tools,\n  7 → 8 domains (Webhooks row a\n[…]\ns, and correcting the CHANGELOG entry.\n\nRefs #64.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: P0 audit fixes (version drift, tool count, brand lead) (#80)",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-04-18T14:21:32Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ec081877ee9fae066ce27fcb6dd344aede482cdb",
          "body": "…#52)\n\nWraps the new windowed multi-artifact evidence assessment endpoints from\nscf-controls-platform #568 (M1a). These let an AI agent trigger, list,\nfetch, bulk-trigger, and summarise portfolio-level assessments that score\nall files in a frequency-derived time window against the union of\nrequired \n[…]\nsult() error handling, JSON content\nblock return. No changes to src/index.ts — evidence tools already\nregistered. No version bump.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(evidence): add 5 windowed-assessment MCP tools (platform #568) (…",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-04-18T07:07:05Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2bfb19f5f75c3b332e2f14ecc6e4f5c49d27b1ef",
          "body": "Wraps the multi-axis capability-theme endpoints shipped in scf-controls-platform\n#549 Phase 1, enabling KSI-first workflows for MCP consumers.\n\n- get_capability_theme_scorecard: per-theme IC/Maturity/EC/EQ + composite KPS bands\n- get_capability_theme: single KSI with full posture + multi-axis scores\n[…]\nposture: per-theme evidence quality rollup\n\nNo backend changes — all four endpoints already live in production.\n\nCloses issue #50.\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(capabilities): add 4 KSI scoring + theme drill-down tools (#51)",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-04-14T16:12:24Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2e83824d39edf7a561d31accf9c419d25bba376c",
          "body": "The update_evidence MCP tool used PATCH which returns 404 for evidence\nitems that don't have an existing tracking record in the database.\nThis prevented updating evidence items that hadn't been manually\nactivated via the UI first.\n\nSwitch to POST which hits the platform's upsert endpoint — creates\nthe tracking record if it doesn't exist, updates if it does.\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: use POST upsert for update_evidence instead of PATCH (#48)",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-04-08T16:32:47Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ee5da22ede42a4fe8b084f2c9483e0c196185d62",
          "body": "Expose 4 new tools for the AI-powered evidence artifact assessment\npipeline: trigger_evidence_assessment, get_evidence_assessment,\nbulk_assess_evidence, and get_evidence_assessment_summary. These\ncall the platform REST API endpoints added in the recent Celery\nassessment refactor.\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: add AI evidence assessment MCP tools (#47)",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-04-01T14:17:51Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "134d0690845fdbff9a2b719f3049a1b774a89a41",
          "body": "Add 3 new MCP tools to expose the SCF Controls Platform's evidence\nvalidation engine: get_evidence_validation, revalidate_evidence_file,\nand get_evidence_validation_summary. Bump version to 0.5.0.\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: add evidence validation tools (Issue #218) (#46)",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-04-01T12:50:12Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "25c7df5d1078fffbc3190136c9e09454b3effb89",
          "body": "Add 7 new tools for managing custom organization-defined risks and\ntheir manual control mappings via the SCF Controls Platform API:\n\n- list_custom_risks, create_custom_risk, update_custom_risk, delete_custom_risk\n- list_custom_risk_controls, add_custom_risk_control, remove_custom_risk_control\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: add custom risk and control mapping MCP tools (#44)",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-03-30T20:49:34Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c17ff5202829f1d5c4874a7c6d295604e4f1c792",
          "body": "Root cause: create_evidence sent wrong field names (title/description/\nevidence_type) instead of evidence_id/is_tracked/method_of_collection.\nAPI client also omitted Content-Type and body for mutation requests\nwithout explicit body, causing FastAPI 422 \"body missing\" errors.\n\n- create_evidence: rewr\n[…]\n batch_update_evidence: already existed, now works with backend\n  endpoint added in scf-controls-platform PR #483\n- Bump to v0.4.0\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: resolve create_evidence 422 and enable batch_update_evidence (#43)",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-03-28T14:08:51Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5858aa55bfb4730207f4ca1934d31a1b1cf1c1d8",
          "body": "* fix: pass required body fields in trigger_dpsia MCP tool\n\nThe API requires services_used in the POST body but the tool was sending\nan empty body, causing a 422 error. Now accepts optional services_used,\nassessment_type, and data_role params, auto-deriving services_used from\nthe vendor description \n[…]\nnce-tracking/batch endpoint (always returned 405)\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: resolve 422/405 errors in DPSIA, evidence, and research tools (#42)",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-03-27T18:18:39Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b3ff8ef1c73d4fb4b386bbe1384ff268cc857792",
          "body": "The API requires services_used in the POST body but the tool was sending\nan empty body, causing a 422 error. Now accepts optional services_used,\nassessment_type, and data_role params, auto-deriving services_used from\nthe vendor description if omitted.\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: pass required body fields in trigger_dpsia MCP tool (#41)",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-03-27T11:42:28Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "227e4ed73c813e2b5362cb530a3ebd2a752d0d28",
          "body": "…serialization (#40)\n\nAdd MCP endpoints for updating evidence tracking fields (is_tracked,\nsystem_id, owner, frequency, etc.) both individually and in batch.\nFix API error handler to JSON.stringify object error bodies instead of\nsilently coercing to [object Object].\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: add update_evidence and batch_update_evidence tools, fix error …",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-03-26T22:43:25Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a865b249c548a94182fbec2453829d90f0a75c31",
          "body": "Adds two new tools for accessing evidence file metadata and download\nURLs via the SCF Controls Platform API. Complements the webhook inbox\nby making ingested evidence files accessible through MCP.\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: add list_evidence_files and get_evidence_file MCP tools (#37)",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-03-18T11:22:29Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "94d77fc704ef10cbe158aa3f1af76d49c200189b",
          "body": "Add 6 new MCP tools for managing webhook endpoints used by the\nevidence inbox ingestion system: create_webhook, list_webhooks,\nget_webhook, delete_webhook, rotate_webhook_secret, and\nlist_webhook_deliveries.\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: add webhook endpoint management tools (#36)",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-03-17T18:54:15Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "eded2ddc56872b08a128a210a45c800d171aa748",
          "body": "The list_scoped_controls tool incorrectly typed scope_status as\nImplementationStatus (not_started, in_progress, etc.) when the platform\nAPI expects scoping values (in_scope, out_of_scope, all). This caused\nscope_status filtering to silently fail, returning all 1,451 controls\nregardless of filter val\n[…]\ntform API)\n- Bump @modelcontextprotocol/sdk from 1.26.0 to 1.27.1\n- Bump @types/node from 25.3.0 to 25.3.3\n\nCloses #33, closes #32\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: correct scope_status filter type and bump dependencies (#35)",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-03-17T17:47:13Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8584f26bce6db8641ef97b971f74bbc021a9281c",
          "body": "- Extract MaturityLevel const in scoped-controls.ts (was inlined twice)\n- Extract SystemType const in capabilities.ts (was inlined twice)\n- Fix list_vendors status filter missing \"prospect\" value (inconsistent with create/update)\n\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor: extract duplicate inline enum constants (#34)",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-03-04T08:30:55Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c9c153136d21b13eabc15e4b3415f4415f569a3a",
          "body": "…— v0.3.0 (#31)\n\n- Fix #28: maturity_level now validated as enum [\"L0\"...\"L5\"] in both\n  update_scoped_control and batch_update_controls. Bare numeric strings\n  (e.g. \"4\") are rejected at the Zod layer with a descriptive error.\n\n- Fix #30a: add `status` field to create_vendor (enum: prospect/active/\n[…]\ndd update_system tool — PATCH system records with any subset\n  of: name, description, system_type, status, vendor, category\n\nCloses #28, #30.\n\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: fix maturity_level validation (#28) and add update tools (#30) …",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-02-28T19:58:13Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e82314ff9869af002f556ca92cfcebf51178158e",
          "body": "* \"Claude PR Assistant workflow\"\n\n* \"Claude Code Review workflow\"",
          "is_bot": false,
          "headline": "Add Claude Code GitHub Workflow (#29)",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-02-20T15:19:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b34e166345003c0c5208628903fafa17f060563f",
          "body": "Root cause: version reconciliation only checked git tags and\npackage.json, but npm registry could already have a higher version\n(e.g., 0.2.0 published but no v0.2.0 tag). This caused the workflow\nto pick the npm version as \"highest\" then fail trying to re-publish it.\n\nFixes:\n- Reconcile step now che\n[…]\n auto-bumps patch from it\n- Added pre-publish guard that skips npm publish if version exists\n- Updated summary to show when publish was skipped\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: prevent duplicate npm publish when version already exists (#27)",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-02-19T21:51:26Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2b73992d409875030049977fa7712308d12d17d5",
          "body": "…#26)\n\n- Document all 38 tools across 7 domains with complete parameter tables\n- Update platform URL to scfcontrolsplatform.com (landing page)\n- Credit ComplianceGenie.io as maintainer throughout\n- Add overview section with domain summary table\n- Add security section covering provenance, SAST, and s\n[…]\nExpand example prompts with DPSIA and batch operations\n- Update package.json homepage to landing page\n- Follow MCP community README conventions\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: overhaul README with full tool reference and updated branding (…",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-02-19T21:41:13Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "61f490b408918119e19d96e64120d527ea152f46",
          "body": "The auto-release workflow now compares the calculated version (from tags)\nwith package.json and uses whichever is higher. Also adds tag existence\ncheck to prevent duplicate tag errors on re-runs.\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(ci): reconcile version with package.json before release (#25)",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-02-19T16:54:05Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "39d5690189699de2f3bd72041071f2095c500c80",
          "body": "All catalog tools were missing /catalog/ prefix, causing 404s.\nEvidence, capabilities, audit log, vendor triggers, and scoped controls\nall had wrong API paths. Pagination standardized to limit/offset.\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: correct all API endpoint paths — 15 broken tools now working (#24)",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-02-19T16:45:43Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ab5f37d533f94149e7d2c5e2786f51b8550a107d",
          "body": "Remove version-bump.yml and npm-publish.yml. Add auto-release.yml that\ntriggers on PR merge: auto-bumps version (labels/conventional commits),\ntags, builds, publishes to npm with provenance, and creates GitHub Release.\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: replace manual release workflows with auto-release (#23)",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-02-19T15:18:46Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "0ee1d91d3c83c466eedeaaaaf6f2ffbd8184e22d",
          "body": "The correct env var for job summaries is GITHUB_STEP_SUMMARY.\nGITHUB_SUMMARY doesn't exist, causing the Summary step to fail.\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: use GITHUB_STEP_SUMMARY instead of GITHUB_SUMMARY (#21)",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-02-19T13:56:29Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "164c51b3f22f93dd58e05fc3a8b17fb821280f68",
          "body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
          "is_bot": false,
          "headline": "chore: release v0.1.7 (#20)",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-02-19T13:52:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aa3e0eb87c8e3fa79d5e91a401bac18c5a12d40c",
          "body": "Branch protection blocks GITHUB_TOKEN from pushing directly to main.\nRewrite version-bump workflow to create a release branch + PR.\nUpdate npm-publish to auto-detect version from package.json,\ncreate tags if missing, and generate GitHub Releases.\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: version-bump creates PR instead of direct push (#19)",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-02-19T13:49:37Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "1988f3a9ad6d0bdaeb27fb49d8d09d43d6cced94",
          "body": "feat: split release into version-bump + npm-publish workflows",
          "is_bot": false,
          "headline": "Merge pull request #18 from MarkAC007/feature/split-release-workflows",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-02-19T13:34:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "062c3f3aa8f6df21892dd148e540d38ca995396c",
          "body": "Replace monolithic release.yml with two decoupled workflows:\n\n- version-bump.yml: workflow_dispatch to bump version, tag, and\n  create GitHub Release (patch/minor/major + changelog input)\n- npm-publish.yml: workflow_dispatch to publish a specific tag to\n  npm via OIDC trusted publishing with provenance\n\nThis gives explicit control over when packages hit npm — version\nbumps happen immediately, publishing is a separate manual step.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: split release into version-bump and npm-publish workflows",
          "author_name": "Mark",
          "author_login": "MarkAC007",
          "committed_at": "2026-02-19T13:30:36Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "113fb2e7cb1be87de1d471992c324e9736eca9a1",
          "body": "fix: align write tools with platform API contract",
          "is_bot": false,
          "headline": "Merge pull request #17 from MarkAC007/fix/write-endpoint-alignment",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-02-19T13:25:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d268d3ce4d355099a1c201d2a7fffa9be44c4246",
          "body": "- ImplementationStatus enum: UPPERCASE → lowercase (not_started, in_progress, etc.)\n- update/get_scoped_control: use scf_id (e.g., \"AST-01\") instead of UUID\n- batch_update_controls: expand schema from 4 to 11 fields per platform update\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: align write tools with platform API contract (closes #9)",
          "author_name": "Mark",
          "author_login": "MarkAC007",
          "committed_at": "2026-02-19T13:22:39Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a27c9703ade0cd6e884db995b38bc9edbbea1138",
          "body": "deps: bump zod from 3.25.76 to 4.3.6",
          "is_bot": false,
          "headline": "Merge pull request #6 from MarkAC007/dependabot/npm_and_yarn/zod-4.3.6",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-02-19T13:16:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b258b12eb9c89768da228f68d4ad03b363ebf2ba",
          "body": "…de-25.3.0\n\ndeps: bump @types/node from 22.19.11 to 25.3.0",
          "is_bot": false,
          "headline": "Merge pull request #5 from MarkAC007/dependabot/npm_and_yarn/types/no…",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-02-19T13:16:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8371cd97bdc0e800f4206fbfe695278366c475db",
          "body": "Bumps [zod](https://github.com/colinhacks/zod) from 3.25.76 to 4.3.6.\n- [Release notes](https://github.com/colinhacks/zod/releases)\n- [Commits](https://github.com/colinhacks/zod/compare/v3.25.76...v4.3.6)\n\n---\nupdated-dependencies:\n- dependency-name: zod\n  dependency-version: 4.3.6\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "deps: bump zod from 3.25.76 to 4.3.6",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-19T13:13:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "88f13d7a11d9da3a2160cee0a17692ea11f6f23e",
          "body": "Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 22.19.11 to 25.3.0.\n- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)\n- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)\n\n---\nupdated-de\n[…]\n\n- dependency-name: \"@types/node\"\n  dependency-version: 25.3.0\n  dependency-type: direct:development\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "deps: bump @types/node from 22.19.11 to 25.3.0",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-19T13:13:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "34cb78aee951579ab79cc369d8bedf2e624eb1af",
          "body": "…/codeql-action-4\n\nci: bump github/codeql-action from 3 to 4",
          "is_bot": false,
          "headline": "Merge pull request #3 from MarkAC007/dependabot/github_actions/github…",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-02-19T13:10:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9612f632d87311685bc22ffd33f62a96933f366c",
          "body": "Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3 to 4.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/v3...v4)\n\n-\n[…]\ndependency-name: github/codeql-action\n  dependency-version: '4'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "ci: bump github/codeql-action from 3 to 4",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-19T13:08:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2379b88024f6599e0503c10175380d7389c77f7a",
          "body": "…s/setup-node-6\n\nci: bump actions/setup-node from 4 to 6",
          "is_bot": false,
          "headline": "Merge pull request #2 from MarkAC007/dependabot/github_actions/action…",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-02-19T13:07:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ccb4cffcc7f98b5c7fe40c5774c3767c2195f749",
          "body": "Bumps [actions/setup-node](https://github.com/actions/setup-node) from 4 to 6.\n- [Release notes](https://github.com/actions/setup-node/releases)\n- [Commits](https://github.com/actions/setup-node/compare/v4...v6)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-node\n  dependency-version: '6'\n  dependency-type: direct:production\n  update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "ci: bump actions/setup-node from 4 to 6",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-02-19T13:05:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "76cebdb06ab80a9a57453ddc99f18e4bf5be046d",
          "body": "fix: restore registry-url + release v0.1.5",
          "is_bot": false,
          "headline": "Merge pull request #16 from MarkAC007/fix/restore-registry-url",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-02-19T13:04:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4b65b729347f15a0b91e0711b16876a3607de877",
          "body": "Root cause was case-sensitive owner matching on npm trusted publisher\n(markac007 vs MarkAC007). Restored registry-url for proper OIDC flow.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: restore registry-url and bump to v0.1.5",
          "author_name": "Mark",
          "author_login": "MarkAC007",
          "committed_at": "2026-02-19T13:02:34Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5ce3a167615dbe97df0d1cbb5cc9a976dff7777c",
          "body": "chore: release v0.1.4",
          "is_bot": false,
          "headline": "Merge pull request #15 from MarkAC007/release/v0.1.4",
          "author_name": "MarkAC",
          "author_login": "MarkAC007",
          "committed_at": "2026-02-19T12:51:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4315941ee90b9ee49184cd3658cd943007e7b568",
          "body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: bump version to 0.1.4",
          "author_name": "Mark",
          "author_login": "MarkAC007",
          "committed_at": "2026-02-19T12:49:51Z",
          "body_truncated": false,
          "is_coding_agent": true
        }
      ],
      "releases_count": 71,
      "commits_last_year": 122,
      "latest_release_at": "2026-07-17T15:41:51Z",
      "latest_release_tag": "v2.0.1",
      "releases_from_tags": false,
      "days_since_last_push": 2,
      "active_weeks_last_year": 12,
      "days_since_latest_release": 5,
      "mean_days_between_releases": 2.7
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 100,
      "has_issue_template": false,
      "has_code_of_conduct": true,
      "has_pull_request_template": true
    },
    "ecosystem": {
      "packages": [
        {
          "name": "mcp-server-scf",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "mcp",
            "model-context-protocol",
            "compliance",
            "security",
            "scf",
            "grc",
            "nist",
            "iso-27001",
            "soc-2",
            "fedramp",
            "risk-management",
            "controls",
            "audit",
            "ai-agent",
            "claude"
          ],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/mcp-server-scf",
          "is_deprecated": false,
          "latest_version": "2.0.1",
          "repository_url": "https://github.com/MarkAC007/mcp-server-scf",
          "versions_count": 74,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 3562,
          "first_published_at": "2026-02-19T11:48:26.943000Z",
          "latest_published_at": "2026-07-17T15:41:15.283000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 5
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 1,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": null,
      "open_issues_and_prs": 12
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": true,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "tsconfig.json"
      ],
      "toolchain_manifests": [],
      "largest_source_bytes": 26943,
      "source_files_sampled": 16,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "package.json"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "brace-expansion",
            "direct": false,
            "version": "5.0.6",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-3jxr-9vmj-r5cp"
            ],
            "fixed_version": "5.0.7",
            "advisory_count": 1,
            "oldest_advisory_days": 1
          },
          {
            "name": "fast-uri",
            "direct": false,
            "version": "3.1.2",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-4c8g-83qw-93j6",
              "GHSA-v2hh-gcrm-f6hx"
            ],
            "fixed_version": "4.1.1",
            "advisory_count": 2,
            "oldest_advisory_days": 1
          },
          {
            "name": "@hono/node-server",
            "direct": false,
            "version": "1.19.14",
            "severity": "moderate",
            "ecosystem": "npm",
            "cvss_score": 5.9,
            "advisory_ids": [
              "GHSA-frvp-7c67-39w9"
            ],
            "fixed_version": "2.0.5",
            "advisory_count": 1,
            "oldest_advisory_days": 1
          },
          {
            "name": "hono",
            "direct": false,
            "version": "4.12.25",
            "severity": "moderate",
            "ecosystem": "npm",
            "cvss_score": 6.5,
            "advisory_ids": [
              "GHSA-hvrm-45r6-mjfj",
              "GHSA-w62v-xxxg-mg59",
              "GHSA-xgm2-5f3f-mvvc"
            ],
            "fixed_version": "4.12.27",
            "advisory_count": 3,
            "oldest_advisory_days": 1
          },
          {
            "name": "qs",
            "direct": false,
            "version": "6.15.1",
            "severity": "moderate",
            "ecosystem": "npm",
            "cvss_score": 5.3,
            "advisory_ids": [
              "GHSA-q8mj-m7cp-5q26"
            ],
            "fixed_version": "6.15.2",
            "advisory_count": 1,
            "oldest_advisory_days": 61
          },
          {
            "name": "body-parser",
            "direct": false,
            "version": "2.2.2",
            "severity": "low",
            "ecosystem": "npm",
            "cvss_score": 3.7,
            "advisory_ids": [
              "GHSA-v422-hmwv-36x6"
            ],
            "fixed_version": "2.3.0",
            "advisory_count": 1,
            "oldest_advisory_days": 1
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "low": 1,
          "high": 2,
          "moderate": 3
        },
        "advisory_count": 9,
        "affected_count": 6,
        "assessed_count": 367,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm"
      ],
      "dependencies": [
        {
          "name": "@modelcontextprotocol/sdk",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.29.0"
        },
        {
          "name": "zod",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^4.3.6"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "@modelcontextprotocol/sdk",
            "direct": true,
            "version": "1.29.0",
            "ecosystem": "npm"
          },
          {
            "name": "zod",
            "direct": true,
            "version": "3.25.76",
            "ecosystem": "npm"
          },
          {
            "name": "zod",
            "direct": true,
            "version": "4.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "@anthropic-ai/mcpb",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/helper-string-parser",
            "direct": false,
            "version": "7.27.1",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/helper-validator-identifier",
            "direct": false,
            "version": "7.28.5",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/parser",
            "direct": false,
            "version": "7.29.3",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/types",
            "direct": false,
            "version": "7.29.0",
            "ecosystem": "npm"
          },
          {
            "name": "@bcoe/v8-coverage",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@emnapi/core",
            "direct": false,
            "version": "1.10.0",
            "ecosystem": "npm"
          },
          {
            "name": "@emnapi/runtime",
            "direct": false,
            "version": "1.10.0",
            "ecosystem": "npm"
          },
          {
            "name": "@emnapi/wasi-threads",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/aix-ppc64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-arm",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/darwin-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/darwin-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/freebsd-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/freebsd-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-arm",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-ia32",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-loong64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-mips64el",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-ppc64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-riscv64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-s390x",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/netbsd-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/netbsd-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openbsd-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openbsd-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openharmony-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/sunos-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-ia32",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint-community/eslint-utils",
            "direct": false,
            "version": "4.9.1",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint-community/regexpp",
            "direct": false,
            "version": "4.12.2",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint/config-array",
            "direct": false,
            "version": "0.23.5",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint/config-helpers",
            "direct": false,
            "version": "0.6.0",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint/core",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint/js",
            "direct": false,
            "version": "10.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint/object-schema",
            "direct": false,
            "version": "3.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "@eslint/plugin-kit",
            "direct": false,
            "version": "0.7.2",
            "ecosystem": "npm"
          },
          {
            "name": "@hono/node-server",
            "direct": false,
            "version": "1.19.14",
            "ecosystem": "npm"
          },
          {
            "name": "@humanfs/core",
            "direct": false,
            "version": "0.19.2",
            "ecosystem": "npm"
          },
          {
            "name": "@humanfs/node",
            "direct": false,
            "version": "0.16.8",
            "ecosystem": "npm"
          },
          {
            "name": "@humanfs/types",
            "direct": false,
            "version": "0.15.0",
            "ecosystem": "npm"
          },
          {
            "name": "@humanwhocodes/module-importer",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@humanwhocodes/retry",
            "direct": false,
            "version": "0.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "@inquirer/checkbox",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@inquirer/confirm",
            "direct": false,
            "version": "4.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@inquirer/core",
            "direct": false,
            "version": "9.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "@inquirer/editor",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@inquirer/expand",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@inquirer/figures",
            "direct": false,
            "version": "1.0.15",
            "ecosystem": "npm"
          },
          {
            "name": "@inquirer/input",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@inquirer/number",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@inquirer/password",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@inquirer/prompts",
            "direct": false,
            "version": "6.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@inquirer/rawlist",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@inquirer/search",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@inquirer/select",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@inquirer/type",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/resolve-uri",
            "direct": false,
            "version": "3.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/sourcemap-codec",
            "direct": false,
            "version": "1.5.5",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/trace-mapping",
            "direct": false,
            "version": "0.3.31",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/wasm-runtime",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@oxc-project/types",
            "direct": false,
            "version": "0.133.0",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-android-arm64",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-darwin-arm64",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-darwin-x64",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-freebsd-x64",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-arm-gnueabihf",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-arm64-gnu",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-arm64-musl",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-ppc64-gnu",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-s390x-gnu",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-x64-gnu",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-x64-musl",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-openharmony-arm64",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-wasm32-wasi",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-win32-arm64-msvc",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-win32-x64-msvc",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/pluginutils",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@standard-schema/spec",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "@tybys/wasm-util",
            "direct": false,
            "version": "0.10.3",
            "ecosystem": "npm"
          },
          {
            "name": "@types/chai",
            "direct": false,
            "version": "5.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "@types/deep-eql",
            "direct": false,
            "version": "4.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@types/esrecurse",
            "direct": false,
            "version": "4.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "@types/estree",
            "direct": false,
            "version": "1.0.9",
            "ecosystem": "npm"
          },
          {
            "name": "@types/json-schema",
            "direct": false,
            "version": "7.0.15",
            "ecosystem": "npm"
          },
          {
            "name": "@types/mute-stream",
            "direct": false,
            "version": "0.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "@types/node",
            "direct": false,
            "version": "22.19.19",
            "ecosystem": "npm"
          },
          {
            "name": "@types/node",
            "direct": false,
            "version": "25.7.0",
            "ecosystem": "npm"
          },
          {
            "name": "@types/wrap-ansi",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript-eslint/eslint-plugin",
            "direct": false,
            "version": "8.62.0",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript-eslint/parser",
            "direct": false,
            "version": "8.62.0",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript-eslint/project-service",
            "direct": false,
            "version": "8.62.0",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript-eslint/scope-manager",
            "direct": false,
            "version": "8.62.0",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript-eslint/tsconfig-utils",
            "direct": false,
            "version": "8.62.0",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript-eslint/type-utils",
            "direct": false,
            "version": "8.62.0",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript-eslint/types",
            "direct": false,
            "version": "8.62.0",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript-eslint/typescript-estree",
            "direct": false,
            "version": "8.62.0",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript-eslint/utils",
            "direct": false,
            "version": "8.62.0",
            "ecosystem": "npm"
          },
          {
            "name": "@typescript-eslint/visitor-keys",
            "direct": false,
            "version": "8.62.0",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/coverage-v8",
            "direct": false,
            "version": "4.1.9",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/expect",
            "direct": false,
            "version": "4.1.9",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/mocker",
            "direct": false,
            "version": "4.1.9",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/pretty-format",
            "direct": false,
            "version": "4.1.9",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/runner",
            "direct": false,
            "version": "4.1.9",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/snapshot",
            "direct": false,
            "version": "4.1.9",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/spy",
            "direct": false,
            "version": "4.1.9",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/utils",
            "direct": false,
            "version": "4.1.9",
            "ecosystem": "npm"
          },
          {
            "name": "accepts",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "acorn",
            "direct": false,
            "version": "8.16.0",
            "ecosystem": "npm"
          },
          {
            "name": "acorn-jsx",
            "direct": false,
            "version": "5.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "ajv",
            "direct": false,
            "version": "6.15.0",
            "ecosystem": "npm"
          },
          {
            "name": "ajv",
            "direct": false,
            "version": "8.20.0",
            "ecosystem": "npm"
          },
          {
            "name": "ajv-formats",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-escapes",
            "direct": false,
            "version": "4.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-escapes",
            "direct": false,
            "version": "7.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-regex",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-regex",
            "direct": false,
            "version": "6.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-styles",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-styles",
            "direct": false,
            "version": "6.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "assertion-error",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "ast-v8-to-istanbul",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "balanced-match",
            "direct": false,
            "version": "4.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "body-parser",
            "direct": false,
            "version": "2.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "brace-expansion",
            "direct": false,
            "version": "5.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "bytes",
            "direct": false,
            "version": "3.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "call-bind-apply-helpers",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "call-bound",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "chai",
            "direct": false,
            "version": "6.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "chardet",
            "direct": false,
            "version": "0.7.0",
            "ecosystem": "npm"
          },
          {
            "name": "cli-cursor",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "cli-truncate",
            "direct": false,
            "version": "5.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "cli-width",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "color-convert",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "color-name",
            "direct": false,
            "version": "1.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "commander",
            "direct": false,
            "version": "13.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "content-disposition",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "content-type",
            "direct": false,
            "version": "1.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "convert-source-map",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "cookie",
            "direct": false,
            "version": "0.7.2",
            "ecosystem": "npm"
          },
          {
            "name": "cookie-signature",
            "direct": false,
            "version": "1.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "cors",
            "direct": false,
            "version": "2.8.6",
            "ecosystem": "npm"
          },
          {
            "name": "cross-spawn",
            "direct": false,
            "version": "7.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "debug",
            "direct": false,
            "version": "4.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "deep-is",
            "direct": false,
            "version": "0.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "depd",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "detect-libc",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "dunder-proto",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "ee-first",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "emoji-regex",
            "direct": false,
            "version": "10.6.0",
            "ecosystem": "npm"
          },
          {
            "name": "emoji-regex",
            "direct": false,
            "version": "8.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "encodeurl",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "environment",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "es-define-property",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "es-errors",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "es-module-lexer",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "es-object-atoms",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "esbuild",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "escape-html",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "escape-string-regexp",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "eslint",
            "direct": false,
            "version": "10.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "eslint-config-prettier",
            "direct": false,
            "version": "10.1.8",
            "ecosystem": "npm"
          },
          {
            "name": "eslint-scope",
            "direct": false,
            "version": "9.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "eslint-visitor-keys",
            "direct": false,
            "version": "3.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "eslint-visitor-keys",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "espree",
            "direct": false,
            "version": "11.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "esquery",
            "direct": false,
            "version": "1.7.0",
            "ecosystem": "npm"
          },
          {
            "name": "esrecurse",
            "direct": false,
            "version": "4.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "estraverse",
            "direct": false,
            "version": "5.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "estree-walker",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "esutils",
            "direct": false,
            "version": "2.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "etag",
            "direct": false,
            "version": "1.8.1",
            "ecosystem": "npm"
          },
          {
            "name": "eventemitter3",
            "direct": false,
            "version": "5.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "eventsource",
            "direct": false,
            "version": "3.0.7",
            "ecosystem": "npm"
          },
          {
            "name": "eventsource-parser",
            "direct": false,
            "version": "3.0.8",
            "ecosystem": "npm"
          },
          {
            "name": "expect-type",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "express",
            "direct": false,
            "version": "5.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "express-rate-limit",
            "direct": false,
            "version": "8.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "external-editor",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "fast-deep-equal",
            "direct": false,
            "version": "3.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "fast-json-stable-stringify",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "fast-levenshtein",
            "direct": false,
            "version": "2.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "fast-uri",
            "direct": false,
            "version": "3.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "fdir",
            "direct": false,
            "version": "6.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "fflate",
            "direct": false,
            "version": "0.8.2",
            "ecosystem": "npm"
          },
          {
            "name": "file-entry-cache",
            "direct": false,
            "version": "8.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "finalhandler",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "find-up",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "flat-cache",
            "direct": false,
            "version": "4.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "flatted",
            "direct": false,
            "version": "3.4.2",
            "ecosystem": "npm"
          },
          {
            "name": "flora-colossus",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "forwarded",
            "direct": false,
            "version": "0.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "fresh",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "fs-extra",
            "direct": false,
            "version": "10.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "fsevents",
            "direct": false,
            "version": "2.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "function-bind",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "galactus",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "get-east-asian-width",
            "direct": false,
            "version": "1.6.0",
            "ecosystem": "npm"
          },
          {
            "name": "get-intrinsic",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "get-proto",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "glob-parent",
            "direct": false,
            "version": "6.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "gopd",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "graceful-fs",
            "direct": false,
            "version": "4.2.11",
            "ecosystem": "npm"
          },
          {
            "name": "has-flag",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "has-symbols",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "hasown",
            "direct": false,
            "version": "2.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "hono",
            "direct": false,
            "version": "4.12.25",
            "ecosystem": "npm"
          },
          {
            "name": "html-escaper",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "http-errors",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "husky",
            "direct": false,
            "version": "9.1.7",
            "ecosystem": "npm"
          },
          {
            "name": "iconv-lite",
            "direct": false,
            "version": "0.4.24",
            "ecosystem": "npm"
          },
          {
            "name": "iconv-lite",
            "direct": false,
            "version": "0.7.2",
            "ecosystem": "npm"
          },
          {
            "name": "ignore",
            "direct": false,
            "version": "5.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "ignore",
            "direct": false,
            "version": "7.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "imurmurhash",
            "direct": false,
            "version": "0.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "inherits",
            "direct": false,
            "version": "2.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "ip-address",
            "direct": false,
            "version": "10.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "ipaddr.js",
            "direct": false,
            "version": "1.9.1",
            "ecosystem": "npm"
          },
          {
            "name": "is-extglob",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "is-fullwidth-code-point",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-fullwidth-code-point",
            "direct": false,
            "version": "5.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-glob",
            "direct": false,
            "version": "4.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "is-promise",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "isexe",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "istanbul-lib-coverage",
            "direct": false,
            "version": "3.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "istanbul-lib-report",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "istanbul-reports",
            "direct": false,
            "version": "3.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "jose",
            "direct": false,
            "version": "6.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "js-tokens",
            "direct": false,
            "version": "10.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "json-buffer",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "json-schema-traverse",
            "direct": false,
            "version": "0.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "json-schema-traverse",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "json-schema-typed",
            "direct": false,
            "version": "8.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "json-stable-stringify-without-jsonify",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "jsonfile",
            "direct": false,
            "version": "6.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "keyv",
            "direct": false,
            "version": "4.5.4",
            "ecosystem": "npm"
          },
          {
            "name": "levn",
            "direct": false,
            "version": "0.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-android-arm64",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-darwin-arm64",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-darwin-x64",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-freebsd-x64",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-arm-gnueabihf",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-arm64-gnu",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-arm64-musl",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-x64-gnu",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-x64-musl",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-win32-arm64-msvc",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-win32-x64-msvc",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lint-staged",
            "direct": false,
            "version": "17.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "listr2",
            "direct": false,
            "version": "10.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "locate-path",
            "direct": false,
            "version": "6.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "log-update",
            "direct": false,
            "version": "6.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "magic-string",
            "direct": false,
            "version": "0.30.21",
            "ecosystem": "npm"
          },
          {
            "name": "magicast",
            "direct": false,
            "version": "0.5.2",
            "ecosystem": "npm"
          },
          {
            "name": "make-dir",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "math-intrinsics",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "media-typer",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "merge-descriptors",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "mime-db",
            "direct": false,
            "version": "1.54.0",
            "ecosystem": "npm"
          },
          {
            "name": "mime-types",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "mimic-function",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "minimatch",
            "direct": false,
            "version": "10.2.5",
            "ecosystem": "npm"
          },
          {
            "name": "ms",
            "direct": false,
            "version": "2.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "mute-stream",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "nanoid",
            "direct": false,
            "version": "3.3.15",
            "ecosystem": "npm"
          },
          {
            "name": "natural-compare",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "negotiator",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "node-forge",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "object-assign",
            "direct": false,
            "version": "4.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "object-inspect",
            "direct": false,
            "version": "1.13.4",
            "ecosystem": "npm"
          },
          {
            "name": "obug",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "on-finished",
            "direct": false,
            "version": "2.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "once",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "onetime",
            "direct": false,
            "version": "7.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "optionator",
            "direct": false,
            "version": "0.9.4",
            "ecosystem": "npm"
          },
          {
            "name": "p-limit",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "p-locate",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "parseurl",
            "direct": false,
            "version": "1.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "path-exists",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "path-key",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "path-to-regexp",
            "direct": false,
            "version": "8.4.2",
            "ecosystem": "npm"
          },
          {
            "name": "pathe",
            "direct": false,
            "version": "2.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "picocolors",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "picomatch",
            "direct": false,
            "version": "4.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "pkce-challenge",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "postcss",
            "direct": false,
            "version": "8.5.15",
            "ecosystem": "npm"
          },
          {
            "name": "prelude-ls",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "prettier",
            "direct": false,
            "version": "3.8.4",
            "ecosystem": "npm"
          },
          {
            "name": "pretty-bytes",
            "direct": false,
            "version": "5.6.0",
            "ecosystem": "npm"
          },
          {
            "name": "proxy-addr",
            "direct": false,
            "version": "2.0.7",
            "ecosystem": "npm"
          },
          {
            "name": "punycode",
            "direct": false,
            "version": "2.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "qs",
            "direct": false,
            "version": "6.15.1",
            "ecosystem": "npm"
          },
          {
            "name": "range-parser",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "raw-body",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "require-from-string",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "restore-cursor",
            "direct": false,
            "version": "5.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "rfdc",
            "direct": false,
            "version": "1.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "rolldown",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "router",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "safer-buffer",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "semver",
            "direct": false,
            "version": "7.8.0",
            "ecosystem": "npm"
          },
          {
            "name": "send",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "serve-static",
            "direct": false,
            "version": "2.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "setprototypeof",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "shebang-command",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "shebang-regex",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "side-channel",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "side-channel-list",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "side-channel-map",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "side-channel-weakmap",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "siginfo",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "signal-exit",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "slice-ansi",
            "direct": false,
            "version": "7.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "slice-ansi",
            "direct": false,
            "version": "8.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "source-map-js",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "stackback",
            "direct": false,
            "version": "0.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "statuses",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "std-env",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "string-argv",
            "direct": false,
            "version": "0.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "string-width",
            "direct": false,
            "version": "4.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "string-width",
            "direct": false,
            "version": "7.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "string-width",
            "direct": false,
            "version": "8.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "strip-ansi",
            "direct": false,
            "version": "6.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "strip-ansi",
            "direct": false,
            "version": "7.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "supports-color",
            "direct": false,
            "version": "7.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "tinybench",
            "direct": false,
            "version": "2.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "tinyexec",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "tinyglobby",
            "direct": false,
            "version": "0.2.17",
            "ecosystem": "npm"
          },
          {
            "name": "tinyrainbow",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "tmp",
            "direct": false,
            "version": "0.2.7",
            "ecosystem": "npm"
          },
          {
            "name": "toidentifier",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "ts-api-utils",
            "direct": false,
            "version": "2.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "tslib",
            "direct": false,
            "version": "2.8.1",
            "ecosystem": "npm"
          },
          {
            "name": "tsx",
            "direct": false,
            "version": "4.22.4",
            "ecosystem": "npm"
          },
          {
            "name": "type-check",
            "direct": false,
            "version": "0.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "type-fest",
            "direct": false,
            "version": "0.21.3",
            "ecosystem": "npm"
          },
          {
            "name": "type-is",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "typescript",
            "direct": false,
            "version": "6.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "typescript-eslint",
            "direct": false,
            "version": "8.62.0",
            "ecosystem": "npm"
          },
          {
            "name": "undici-types",
            "direct": false,
            "version": "6.21.0",
            "ecosystem": "npm"
          },
          {
            "name": "undici-types",
            "direct": false,
            "version": "7.21.0",
            "ecosystem": "npm"
          },
          {
            "name": "universalify",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "unpipe",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "uri-js",
            "direct": false,
            "version": "4.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "vary",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "vite",
            "direct": false,
            "version": "8.0.16",
            "ecosystem": "npm"
          },
          {
            "name": "vitest",
            "direct": false,
            "version": "4.1.9",
            "ecosystem": "npm"
          },
          {
            "name": "which",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "why-is-node-running",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "word-wrap",
            "direct": false,
            "version": "1.2.5",
            "ecosystem": "npm"
          },
          {
            "name": "wrap-ansi",
            "direct": false,
            "version": "10.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "wrap-ansi",
            "direct": false,
            "version": "6.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "wrap-ansi",
            "direct": false,
            "version": "9.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "wrappy",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "yaml",
            "direct": false,
            "version": "2.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "yocto-queue",
            "direct": false,
            "version": "0.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "yoctocolors-cjs",
            "direct": false,
            "version": "2.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "zod-to-json-schema",
            "direct": false,
            "version": "3.25.2",
            "ecosystem": "npm"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 367,
        "direct_count": 3,
        "indirect_count": 364
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 9,
        "merged_prs": 100,
        "open_issues": 3,
        "closed_ratio": 0.914,
        "closed_issues": 32,
        "closed_unmerged_prs": 43
      },
      "bus_factor": 1,
      "bot_contributors": 2,
      "top_contributors": [
        {
          "type": "User",
          "login": "MarkAC007",
          "commits": 91,
          "avatar_url": "https://avatars.githubusercontent.com/u/56160609?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "auto-release.yml",
        "ci.yml",
        "claude.yml",
        "release-health-check.yml",
        "scorecard.yml",
        "security.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        "eslint.config.js"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "package-lock.json"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 5,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 6,
            "reason": "Found 5/8 approved changesets -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 0,
            "reason": "project has 0 contributing companies or organizations -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "29 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 9,
            "reason": "dependency not pinned by hash detected -- score normalized to 9",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 10,
            "reason": "SAST tool is run on all commits",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 10,
            "reason": "GitHub workflow tokens follow principle of least privilege",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 1,
            "reason": "9 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "36551612d1a62c01086b9ea16d7df1b0bfc8e181",
        "ran_at": "2026-07-22T20:43:41Z",
        "aggregate_score": 7,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-20T19:45:37Z",
      "oldest_open_prs": [
        {
          "number": 176,
          "created_at": "2026-06-29T19:44:04Z",
          "last_comment_at": "2026-06-29T19:44:05Z",
          "last_comment_author": "dependabot"
        },
        {
          "number": 178,
          "created_at": "2026-06-29T19:44:56Z",
          "last_comment_at": "2026-07-17T07:53:47Z",
          "last_comment_author": "MarkAC007"
        },
        {
          "number": 179,
          "created_at": "2026-07-06T19:44:27Z",
          "last_comment_at": "2026-07-06T19:44:27Z",
          "last_comment_author": "dependabot"
        },
        {
          "number": 180,
          "created_at": "2026-07-06T19:44:33Z",
          "last_comment_at": "2026-07-06T19:44:34Z",
          "last_comment_author": "dependabot"
        },
        {
          "number": 181,
          "created_at": "2026-07-06T19:44:41Z",
          "last_comment_at": "2026-07-06T19:44:42Z",
          "last_comment_author": "dependabot"
        },
        {
          "number": 182,
          "created_at": "2026-07-06T19:44:49Z",
          "last_comment_at": "2026-07-06T19:44:50Z",
          "last_comment_author": "dependabot"
        },
        {
          "number": 183,
          "created_at": "2026-07-06T19:45:15Z",
          "last_comment_at": "2026-07-06T19:45:52Z",
          "last_comment_author": "socket-security"
        },
        {
          "number": 185,
          "created_at": "2026-07-17T07:53:17Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 187,
          "created_at": "2026-07-17T15:41:54Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-07-17T15:40:40Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 63,
          "created_at": "2026-04-18T07:49:52Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 72,
          "created_at": "2026-04-18T07:52:55Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 73,
          "created_at": "2026-04-18T07:52:56Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/MarkAC007/mcp-server-scf",
    "host": "github.com",
    "name": "mcp-server-scf",
    "owner": "MarkAC007"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 68,
      "inputs": {
        "security": 76,
        "vitality": 79,
        "community": 47,
        "governance": 55,
        "engineering": 84
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 79,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 72,
            "inputs": {
              "commits_last_year": 122,
              "human_commit_share": 0.69,
              "days_since_last_push": 2,
              "active_weeks_last_year": 12
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 2 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 2
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "12/52 weeks with commits",
                "points": 8.3,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 12
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "122 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 122
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "29 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "releases_count": 71,
              "latest_release_tag": "v2.0.1",
              "releases_from_tags": false,
              "days_since_latest_release": 5,
              "mean_days_between_releases": 2.7
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "71 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 71
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~2.7 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 2.7
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 47,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 1,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "1 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "excellent",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 92,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": true,
              "has_pull_request_template": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 13.5,
                "status": "met",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 6.3,
                "status": "met",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 59,
            "inputs": {
              "packages": [
                "mcp-server-scf"
              ],
              "dependents": null,
              "ecosystems": "npm",
              "total_downloads": null,
              "monthly_downloads": 3562
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "3,562 downloads/month across npm",
                "points": 47.4,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 3562,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 55,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 10,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 78,
            "inputs": {
              "merged_prs": 100,
              "open_issues": 3,
              "closed_issues": 32,
              "issue_closed_ratio": 0.914,
              "closed_unmerged_prs": 43
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "91% of issues closed",
                "points": 42.7,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 91
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "100/143 decided PRs merged",
                "points": 26.7,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 100,
                      "decided": 143
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 5/8 approved changesets -- score normalized to 6",
                "points": 9,
                "status": "partial",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 51,
            "inputs": {
              "followers": 13,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "MarkAC007",
              "public_repos": 26,
              "account_age_days": 2483
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "13 followers of MarkAC007",
                "points": 8.2,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 13,
                      "login": "MarkAC007"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "26 public repos, account ~6 yr old",
                "points": 22.4,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 26
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 6
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "mcp-server-scf"
              ],
              "ecosystems": "npm",
              "any_deprecated": false,
              "min_days_since_publish": 5
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 5 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "74 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 74
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 84,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "6 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 6
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": "eslint.config.js",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "eslint.config.js"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "excellent",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "topics": [
                "ai-agent",
                "claude",
                "compliance",
                "fedramp",
                "grc",
                "iso-27001",
                "mcp",
                "model-context-protocol",
                "nist",
                "risk-management",
                "scf",
                "security",
                "soc-2"
              ],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "13 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 13
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "good",
        "name": "Security",
        "value": 76,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "good",
            "name": "Security posture",
            "note": null,
            "notes": [],
            "value": 70,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 18,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 0,
              "scorecard_aggregate": 7
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 3.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 5/8 approved changesets -- score normalized to 6",
                "points": 4.5,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "29 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 9",
                "points": 4.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is run on all commits",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "GitHub workflow tokens follow principle of least privilege",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "9 existing vulnerabilities detected",
                "points": 0.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 367 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 367
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 9,
              "affected_packages": 6,
              "assessed_packages": 367,
              "unassessed_packages": 0,
              "affected_by_severity": "high 2, moderate 3, low 1",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 367,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 2
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 62,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "69 of 69 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 69,
                      "sampled": 69
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 81,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "package-lock.json"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [
                "tsconfig.json"
              ],
              "agent_commit_share": 0.59,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0.23
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": "eslint.config.js",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "eslint.config.js"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "59 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 59,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "23 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 23,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 9",
                "points": 9,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "TypeScript",
              "largest_source_bytes": 26943,
              "source_files_sampled": 16,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "TypeScript (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "TypeScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/16 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 16,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "critical",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 20,
            "inputs": {
              "example_dirs": [],
              "has_mcp_signal": true,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "deps.dev does not index npm:mcp-server-scf@2.0.1; advisories assessed against the repository dependency graph instead"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-22T20:44:00.438531Z",
  "schema_version": "0.26.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/m/MarkAC007/mcp-server-scf.svg",
  "full_name": "MarkAC007/mcp-server-scf",
  "license_state": "standard",
  "license_spdx": "MIT"
}