abpai / harness-doctor

No fue posible recopilar el conjunto de dependencias resuelto para este informe: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

Instalar npm:@andypai/harness-doctor@2.0.0 arrastra 130 paquetes, directos y transitivos: 0 tienen avisos conocidos, de los cuales 0 son dependencias directas.

Ningún aviso conocido afecta a las dependencias evaluadas.

Un aviso significa que la versión registrada en el grafo de dependencias cae dentro del rango afectado de un aviso. No se analiza la alcanzabilidad, y el grafo incluye fijaciones de desarrollo y prueba: un hallazgo puede referirse al utillaje y no al software distribuido.

{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 22636,
      "has_wiki": true,
      "homepage": "https://abpai.github.io/harness-doctor/",
      "languages": {
        "CSS": 11863,
        "HTML": 13103,
        "Shell": 1441,
        "Python": 12297,
        "JavaScript": 11462,
        "TypeScript": 1299036
      },
      "pushed_at": "2026-07-18T04:44:03Z",
      "created_at": "2026-06-03T03:50:34Z",
      "owner_type": "User",
      "updated_at": "2026-07-18T04:43:27Z",
      "description": "Framework-agnostic agent-harness doctor: deterministic checks for good agent-harness practices",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "TypeScript",
      "significant_languages": [
        "TypeScript"
      ]
    },
    "owner": {
      "blog": "https://andyp.ai",
      "name": "Andy Pai",
      "type": "User",
      "login": "abpai",
      "company": null,
      "location": "Dorado, PR",
      "followers": 38,
      "avatar_url": "https://avatars.githubusercontent.com/u/4070686?v=4",
      "created_at": "2013-04-05T16:18:46Z",
      "is_verified": null,
      "public_repos": 30,
      "account_age_days": 4856
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "@andypai/harness-doctor@2.0.0",
          "kind": "other",
          "published_at": "2026-07-18T04:44:04Z"
        },
        {
          "tag": "@andypai/harness-doctor@1.0.0",
          "kind": "other",
          "published_at": "2026-07-13T00:34:33Z"
        },
        {
          "tag": "@andypai/harness-doctor@0.3.0",
          "kind": "other",
          "published_at": "2026-07-07T01:55:47Z"
        },
        {
          "tag": "@andypai/harness-doctor@0.2.0",
          "kind": "other",
          "published_at": "2026-06-10T19:52:09Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "683f4e96740e043358b3246dad9fa50333c0b41b",
          "body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: version packages (#24)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-18T04:43:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c4df6a7476cd5936087437bcae574df06afb1292",
          "body": "* feat: migrate dead-code checks to knip\n\n* feat: rename dead-code rules to knip",
          "is_bot": false,
          "headline": "feat: migrate dead-code checks to Knip (#23)",
          "author_name": "Andy Pai",
          "author_login": "abpai",
          "committed_at": "2026-07-18T04:12:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a65d6e77ee804cda83d6d39c48e804657b51d28e",
          "body": null,
          "is_bot": true,
          "headline": "chore: version packages",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-13T00:33:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6fcacfa9c48262b62d5991605abd769409a7a244",
          "body": "* make Bun the required runtime\n\n* fix(core): resolve deslop worker specifier without import.meta.resolve\n\nUnder Bun on Windows, `import.meta.resolve(\"deslop-js\")` throws\n`ENOENT while resolving package` for dependencies in the hoisted store,\nfailing all five dead-code checks in CI (including the th\n[…]\nore\nreliably on every platform. Injected workers now skip resolution\nentirely, and the real worker still imports the ESM entry.\n\nClaude-Session: https://claude.ai/code/session_017mZ6a7nNYq177oaRQwD1Dz",
          "is_bot": false,
          "headline": "Make Bun the required runtime (#22)",
          "author_name": "Andy Pai",
          "author_login": "abpai",
          "committed_at": "2026-07-10T23:09:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6d4eb028f911a73b6b84461ba4fe386bfbd36347",
          "body": "Cross-validated follow-ups to #18/#19: GFM escaped-pipe cell parsing,\nabutting-table and fenced-code-block table detection, emphasis-tolerant\nheaders, monolith exemption for baseline artifacts, coverage errors\npreserved when the ledger is malformed, orphan detection for empty\ninventories, ledger tes\n[…]\nn catalog listing\nfor behavior-baseline-artifacts-exist, recipe docs for the behavior\nrules, and an accurate engines.bun floor.\n\nClaude-Session: https://claude.ai/code/session_01XWAFf7hCAgWVKXAux7XqRr",
          "is_bot": false,
          "headline": "Harden behavior-baseline checks and parsing (#21)",
          "author_name": "Andy Pai",
          "author_login": "abpai",
          "committed_at": "2026-07-10T05:07:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3633d9a6f27f9577bd067ab59cc3b277e4cc7c83",
          "body": null,
          "is_bot": false,
          "headline": "Migrate repository from pnpm to Bun (#19)",
          "author_name": "Andy Pai",
          "author_login": "abpai",
          "committed_at": "2026-07-10T03:50:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "297e5023fb94ad90d03fdc456ce1b6c8b34c0ed7",
          "body": "* Add behavior baseline artifact checks\n\n* Harden behavior baseline checks",
          "is_bot": false,
          "headline": "Add behavior baseline artifact checks (#18)",
          "author_name": "Andy Pai",
          "author_login": "abpai",
          "committed_at": "2026-07-10T03:21:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "83e233831e6b56cd6583f3d9d018c6cf8fdf8775",
          "body": "Release @andypai/harness-doctor 0.3.0 with grader sufficiency and Phase 4 signals/proof-menu verification changes.",
          "is_bot": true,
          "headline": "chore: release harness-doctor 0.3.0",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-07T01:55:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9d302930417aae6fe87912006825c74b0a9a4989",
          "body": "Adds execution-free signals-menu discovery plus static SPEC_CONTRACT proof-menu verification against the constrained proof-row format. Verified by green GitHub checks and local pinned-pnpm build/typecheck/test/lint.",
          "is_bot": false,
          "headline": "feat(core): signals-menu discovery and proof-menu verification",
          "author_name": "Andy Pai",
          "author_login": "abpai",
          "committed_at": "2026-07-07T01:54:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a985708a43fece642c33f8ef85c4cfdf5816475a",
          "body": "* feat(core): Phase 1 — kill scanner first-run noise\n\nMake docs-structure Markdown scanning ignore the same throwaway trees the\nsource/dead-code paths already skip: it now uses a .gitignore-aware matcher,\nskips shared IGNORED_DIRECTORIES (adds .scratch, .understand), and skips nested\ngit checkouts/w\n[…]\n was reported\n  missing because Dirent.isFile() is false for symlinks.\n- README config example imports from @andypai/harness-doctor/api (was the\n  unscoped harness-doctor/api, which does not resolve).",
          "is_bot": false,
          "headline": "feat(core): Phase 1 — kill scanner first-run noise (#15)",
          "author_name": "Andy Pai",
          "author_login": "abpai",
          "committed_at": "2026-07-06T20:39:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b91a9e768b8392a27ee30ca5c90bf81d8792defb",
          "body": "Add `docs-structure/spec-contract-declares-grader-sufficiency`: under the docs\ncontract (`docsContract: true`), the SPEC_CONTRACT.md proof menu must declare a\n`Sufficiency` column (`auto` / `human-gate`) so intake can tell when a passing\nauto-grader is sufficient for \"done\" versus when a change need\n[…]\n-sufficiency glossary entry.\n\nReviewed via codex (read-only) — APPROVE after tightening detection to the\nproof-menu header row.\n\nClaude-Session: https://claude.ai/code/session_01QSvkVBNSu9gGmGiENLveHY",
          "is_bot": false,
          "headline": "feat(core): opt-in spec-contract-declares-grader-sufficiency check (#14)",
          "author_name": "Andy Pai",
          "author_login": "abpai",
          "committed_at": "2026-06-26T00:45:24Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0c9847eb74abdad673b7282cdc7dc5d68df8cdad",
          "body": "- Generate a 1200x630 Open Graph / Twitter card (site/og-image.png) that\n  matches the landing page's dark, health-themed palette, and wire it up\n  via og:image / twitter:image meta tags so shared links render a rich\n  card instead of a bare summary.\n- Add scripts/gen-og-image.py so the card is reproducible (Pillow).\n- Add a Website link (alongside npm and Docs) to the top of the README.\n\nhttps://claude.ai/code/session_01AjqHPnnY6tPUTUrMkPkQHf\n\nCo-authored-by: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Add social preview image and link the website from the README (#13)",
          "author_name": "Andy Pai",
          "author_login": "abpai",
          "committed_at": "2026-06-10T23:51:24Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b3f4a13ad17bf25d72f0cab87995973df26707ea",
          "body": "* Add GitHub Pages landing site and deploy workflow\n\nAdd a self-contained marketing/landing page under site/ (static HTML, CSS,\nand a small copy-to-clipboard script — no build step) and a GitHub Actions\nworkflow that publishes it to GitHub Pages on pushes to main.\n\nhttps://claude.ai/code/session_01A\n[…]\nlidate the build cache when the config changes. Point the\ninput at the new filename.\n\nhttps://claude.ai/code/session_01AjqHPnnY6tPUTUrMkPkQHf\n\n---------\n\nCo-authored-by: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Add GitHub Pages landing site (#11)",
          "author_name": "Andy Pai",
          "author_login": "abpai",
          "committed_at": "2026-06-10T23:07:45Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d3860565f85815045ffe966b5526ec69f9bac532",
          "body": "…#10)\n\n* ci: automate npm releases with Changesets\n\nAdds a Release workflow that runs the Changesets action on pushes to main:\npending changesets open a 'Version Packages' PR; merging it publishes to npm\nand tags the release. Wires the existing root version/release scripts (which\nalready wrap 'chang\n[…]\nand rely on the id-token grant. npm mints a short-lived token per\nrun and auto-generates provenance attestations. Requires a Trusted Publisher\nfor release.yml configured on npmjs.com (no repo secret).",
          "is_bot": false,
          "headline": "ci: automate npm releases with Changesets + OIDC trusted publishing (…",
          "author_name": "Andy Pai",
          "author_login": "abpai",
          "committed_at": "2026-06-10T19:51:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ab60dbad4a914924c73fbb8a1fab22b5fae5b80d",
          "body": "Reconciles the release metadata for 0.2.0 and fixes two legacy-config\nfootguns surfaced by review of the doctor.config.* → harness.config.*\nrename.\n\nRelease prep:\n- Remove the dangling .changeset (no changesets automation here — releases\n  are manual); fold its notes into a 0.2.0 CHANGELOG entry cov\n[…]\negression tests for module-config migration, non-JSON legacy\ndetection/warning, and the rules-writer migrate-before-edit path.\nVerified: typecheck, lint (0 errors), build, 450+369 tests, format:check.",
          "is_bot": false,
          "headline": "chore: prepare 0.2.0 release; harden legacy-config migration (#9)",
          "author_name": "Andy Pai",
          "author_login": "abpai",
          "committed_at": "2026-06-10T19:20:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d6edce96743949ec5f7327ab05ba16786c372413",
          "body": "The harness docs contract now recommends nested AGENTS.md grounding files\n(folder-scoped what/why/data-model/key-files context), each with a sibling\nCLAUDE.md shim. The shim drift check only ran at the repo root, so a nested\nfree-standing CLAUDE.md beside a nested AGENTS.md — the same\ncompeting-instructions bug — went undetected. Check every directory where\nthe pair coexists; a CLAUDE.md without a sibling AGENTS.md stays unflagged.\n\nBumps @andypai/harness-doctor to 0.2.0.",
          "is_bot": false,
          "headline": "feat: extend claude-shim-imports-agents to nested directories (#8)",
          "author_name": "Andy Pai",
          "author_login": "abpai",
          "committed_at": "2026-06-10T19:10:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dba4382c79d6a76856a476768f4dfe0009e96b2d",
          "body": "* chore: drop Sentry subsystem and rename config to harness.config.*\n\nRemoves the Sentry crash-reporting / telemetry / tracing subsystem and\nclears remaining react-doctor fork residue.\n\nSentry removal:\n- Delete the instrument/tracer/scrubber/metric/report-error modules and\n  their tests; rewrite app\n[…]\n4+core tests,\nformat:check. QA'd against investing-terminal (1048 files): legacy warning\nfires, harness.config.json is read after rename.\n\n* chore: refresh pnpm-lock.yaml after dropping @sentry/* deps",
          "is_bot": false,
          "headline": "chore: drop Sentry subsystem and rename config to harness.config.* (#7)",
          "author_name": "Andy Pai",
          "author_login": "abpai",
          "committed_at": "2026-06-10T18:46:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "06d817351c815ed5a176b7746c394557f95e274c",
          "body": "chore(release): @andypai/harness-doctor@0.1.0",
          "is_bot": false,
          "headline": "Merge pull request #6 from abpai/release/harness-doctor-0.1.0",
          "author_name": "Andy Pai",
          "author_login": "abpai",
          "committed_at": "2026-06-10T17:12:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "04a568428e1e09fa9a33197e8dcd2f6775b81f9a",
          "body": "First published release. Reset the never-published package version line to\na clean 0.1.0 (internal churn had reached 0.2.18 pre-publish), consolidate\nthe pending changesets into an initial-release CHANGELOG entry, and align\nthe private core/api workspace packages to 0.1.0.",
          "is_bot": false,
          "headline": "chore(release): @andypai/harness-doctor@0.1.0",
          "author_name": "Andy Pai",
          "author_login": "abpai",
          "committed_at": "2026-06-10T17:08:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bf02d966165fbb0857666ab24b8e673e0aae56dc",
          "body": "feat!: drop the React lint rule stack — framework-agnostic readiness scanner",
          "is_bot": false,
          "headline": "Merge pull request #5 from abpai/codex/drop-react-lint-stack",
          "author_name": "Andy Pai",
          "author_login": "abpai",
          "committed_at": "2026-06-10T17:03:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fd0970665d79ebcee06f33386eaf2d6b28abee03",
          "body": "The react-lint-stack refactor removed --lint/--no-lint/--no-parallel from\nCommander but left them in the stripUnknownCliFlags allow-list, so they\nsurvived the pre-parse strip and reached Commander, which rejected them\nwith \"unknown option\" — defeating the util's purpose (graceful tolerance\nof stale flags). Prune them from the allow-list so old invocations degrade\ngracefully, drop the dead --no-lint from the TTY smoke, and add a\nregression test. Pairs with the JSON-smoke fix in the prior commit.",
          "is_bot": false,
          "headline": "fix(cli): strip removed lint-stack flags instead of crashing on them",
          "author_name": "Andy Pai",
          "author_login": "abpai",
          "committed_at": "2026-06-10T15:51:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6ef269a42810995c1147fee665a51a1379bd2fc7",
          "body": "The react-lint-stack refactor removed the CLI's --no-lint option, but\nscripts/smoke-json-report.ts still passed it, so the CLI exited with\n\"unknown option '--no-lint'\" and empty stdout — failing the JSON smoke\non the one leg (ubuntu/22.18.0) that runs it. Use the still-valid\n--no-score --no-dead-code flags.",
          "is_bot": false,
          "headline": "fix(ci): drop removed --no-lint flag from JSON smoke test",
          "author_name": "Andy Pai",
          "author_login": "abpai",
          "committed_at": "2026-06-10T15:43:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9528278b42c4cd1e71096588472c3c4f732a1f1d",
          "body": "Add deterministic docs contract checks",
          "is_bot": false,
          "headline": "Merge pull request #4 from abpai/codex/harness-docs-contract-doctor",
          "author_name": "Andy Pai",
          "author_login": "abpai",
          "committed_at": "2026-06-10T15:15:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0a5840781cfc9faf12533b5549ec98983a21373a",
          "body": "…work-agnostic readiness scanner\n\nRemoved:\n- packages/oxlint-plugin-harness-doctor and packages/eslint-plugin-harness-doctor (every React/JSX AST rule)\n- the oxlint runner in core (runners/oxlint, run-oxlint, Linter service, batching, node-version gating, .oxlintrc adoption)\n- React/Tailwind/Zod/Exp\n[…]\n GitHub action, Sentry/telemetry wiring\n\nVerified: pnpm install/build pass; 881 tests green (core 366, cli 501, api 14); typecheck and lint clean; changeset status bumps @andypai/harness-doctor minor.",
          "is_bot": false,
          "headline": "feat!: drop the React lint rule stack — harness-doctor is now a frame…",
          "author_name": "Andy Pai",
          "author_login": "abpai",
          "committed_at": "2026-06-10T04:51:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e5bf4f00322e155e2247a8c31dd725564c2a414d",
          "body": null,
          "is_bot": false,
          "headline": "style: apply vp fmt to recent edits",
          "author_name": "Andy Pai",
          "author_login": "abpai",
          "committed_at": "2026-06-10T03:57:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "76e8a45a545fac6b98284641c90c95320d4edf52",
          "body": "…onor IGNORED_DIRECTORIES\n\n- agents-md-within-byte-budget now judges the heaviest root→leaf AGENTS.md\n  chain (Codex's project_doc_max_bytes applies per chain, not repo-wide),\n  and points the diagnostic at the heaviest file on the offending chain\n- listMarkdownFiles skips the shared IGNORED_DIRECTO\n[…]\nand shared by the byte-budget and link checks\n- checkTodoSpecSections is driven by the exported\n  TODO_SPEC_REQUIRED_SECTIONS constant (now label+aliases pairs) instead of\n  a divergent hardcoded copy",
          "is_bot": false,
          "headline": "fix(core): model the AGENTS.md byte budget per Codex loading chain; h…",
          "author_name": "Andy Pai",
          "author_login": "abpai",
          "committed_at": "2026-06-10T03:51:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "938c41911ffd4330f15e3ff7d19ac70ad7e2de74",
          "body": "Rename the npm package harness-doctor -> @andypai/harness-doctor: manifest\nname (+ publishConfig access public), changesets (pending changesets and\nfixed group), turbo filters, action.yml install spec, installer templates\n(npx/pnpm-dlx commands, devDependency name, git hook, agent hooks, doctor\nscri\n[…]\nADMEs, and tests.\n\nUnchanged on purpose: the harness-doctor bin/CLI name, the\nplugin/rule-namespace identifier, Sentry release prefix, config-dir names,\nand the abpai/harness-doctor GitHub action ref.",
          "is_bot": false,
          "headline": "feat!: publish the CLI as @andypai/harness-doctor",
          "author_name": "Andy Pai",
          "author_login": "abpai",
          "committed_at": "2026-06-10T03:15:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "693810cf122c57a41c9bea36dd6990e6569e9cad",
          "body": "…fork\n\nThe website package was removed in the harness-doctor refactor but stayed\nin the ignore list, which made every changesets command fail config\nvalidation — pending changesets could not version or release. Changelog\nrepo also still pointed at millionco.",
          "is_bot": false,
          "headline": "fix(changesets): drop stale website ignore, point changelog at abpai …",
          "author_name": "Andy Pai",
          "author_login": "abpai",
          "committed_at": "2026-06-10T03:05:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "45ac0859be084d1561c424c0e3c442b533708c13",
          "body": null,
          "is_bot": false,
          "headline": "chore: add minor changeset for docs-contract checks",
          "author_name": "Andy Pai",
          "author_login": "abpai",
          "committed_at": "2026-06-10T03:04:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4c448a069554dd4d27d7e21db4f6aae53f954080",
          "body": "New rules: spec-contract-exists + spec-contract-has-required-sections\n(docs/SPEC_CONTRACT.md with quality bar / proof menu / escalation\nboundaries), engineering-docs-exist (commands.md + testing.md under\ndocsContract), no-structure-md (non-canonical structure map, disableable),\nagents-md-within-byte\n[…]\nemoved from the\nbanned-path list (existing maintained ADR conventions are preserved).\n\nDogfood: this repo and the clean fixture gain docs/SPEC_CONTRACT.md;\nfix recipes updated for the new rule family.",
          "is_bot": false,
          "headline": "feat(docs-structure): align checks with harness skill v1.1.0 contract",
          "author_name": "Andy Pai",
          "author_login": "abpai",
          "committed_at": "2026-06-10T00:10:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "62d3b0978a624d6e085e180b5ad03bb808cd82e6",
          "body": null,
          "is_bot": false,
          "headline": "Add deterministic docs contract checks",
          "author_name": "Andy Pai",
          "author_login": "abpai",
          "committed_at": "2026-06-08T19:53:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9c3eeac3ac021f27a24cc1fb034c8aaf0c461592",
          "body": "fix(ci): format drift + drop npm publish workflows",
          "is_bot": false,
          "headline": "Merge pull request #3 from abpai/fix/ci",
          "author_name": "Andy Pai",
          "author_login": "abpai",
          "committed_at": "2026-06-03T14:07:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1654d153f13eb3646d6b87fb8e36c02709454545",
          "body": "Two pre-existing failures, both inherited from the public react-doctor\nrepo and unrelated to the merged PRs:\n\n- 24 source/doc/test files had drifted out of `vp fmt` format, failing\n  the `format:check` gate in ci.yml. Reformatted the whole tree.\n- publish-any-commit.yml and publish.yml publish to pu\n[…]\nm auth. Removed both. Re-add release infra when the package\n  is actually published.\n\nRemaining CI (ci.yml, code-quality.yml, harness-doctor.yml) is green:\nformat/typecheck/lint/test all pass locally.",
          "is_bot": false,
          "headline": "fix(ci): format drift + drop npm publish workflows",
          "author_name": "Andy Pai",
          "author_login": "abpai",
          "committed_at": "2026-06-03T14:06:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5337589c4532a1707d457c10af00c4cdc85fc0f1",
          "body": "docs: rewrite README and guides for humans; fix broken links",
          "is_bot": false,
          "headline": "Merge pull request #2 from abpai/docs/rewrite-for-humans",
          "author_name": "Andy Pai",
          "author_login": "abpai",
          "committed_at": "2026-06-03T14:03:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eff897d3311d74ea11f45ff1f18468badce7265e",
          "body": "chore: remove dead code + dead exports left by the react-doctor strip",
          "is_bot": false,
          "headline": "Merge pull request #1 from abpai/chore/remove-strip-orphans",
          "author_name": "Andy Pai",
          "author_login": "abpai",
          "committed_at": "2026-06-03T14:03:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d93f73959614481c1699ac79ccff2a9e538f42f1",
          "body": "The README's logo and badges pointed at assets and an npm package that the\nstrip removed or never published, and every docs link pointed at a\n`harness.doctor` site that doesn't exist. The guides were accurate but read\nlike reference cards.\n\nREADME:\n- drop the broken <picture> logo (assets/ was delet\n[…]\nerify loop (pnpm gen is a plugin-package script)\n\nDogfooded: the repo root passes every docs-structure check, and all docs stay\nunder the monolith line limit (AGENTS.md 75/150, longest guide 214/400).",
          "is_bot": false,
          "headline": "docs: rewrite README and guides for humans; fix broken links",
          "author_name": "Andy Pai",
          "author_login": "abpai",
          "committed_at": "2026-06-03T13:35:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "36998f77e4bd167e64f72eff04351eb93a88890b",
          "body": "Quality pass over the code surviving the react-doctor strip (no behaviour\nchange; build/typecheck/test/lint green):\n\n- constants/style.ts: remove 5 unused style/motion/blur constants left from\n  deleted design rules; keep MOTION_LIBRARY_PACKAGES (public API).\n- get-harness-doctor-setting.ts: remove \n[…]\nis-react-native-file/classify-package-platform)\nis threaded through rules.ts, capabilities, and project-info — generalizing it\naway is a larger framework-agnostic refactor, out of scope for this pass.",
          "is_bot": false,
          "headline": "refactor: drop dead exports left in live files after the strip",
          "author_name": "Andy Pai",
          "author_login": "abpai",
          "committed_at": "2026-06-03T05:57:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f0392dd2b4f7f9fd07576b522047c33e6af385f9",
          "body": "The strip kept the oxlint plugin's shared constants/ and utils/ libraries\nand a few core files even though the ~100 rules that consumed them were\ndeleted, leaving only the security/no-eval template rule. A knip pass\n(entries: package exports, bin, tests, build configs) plus per-file import\nverificat\n[…]\nde-of-type) is fully preserved.\nNo package.json dependency removals here: knip's unused-dependency hits\n(oxlint, deslop-js, jiti, ...) are loaded dynamically at runtime and need\nseparate verification.",
          "is_bot": false,
          "headline": "chore: remove dead code orphaned by the react-doctor strip",
          "author_name": "Andy Pai",
          "author_login": "abpai",
          "committed_at": "2026-06-03T05:48:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f368ca730512c7fe1c3923f26ac13c34fe4b430f",
          "body": "The strip left isAnalyzableProject gating on reactVersion/preactVersion, so\nharness-doctor refused to scan any repo without React (\"No React dependency\nfound\") — defeating the framework-agnostic premise and preventing the\ndocs-structure checks from ever running on a non-React project.\n\nBroaden the g\n[…]\ncated unit test and update the api\ndiagnose tests to the framework-agnostic contract (non-React projects now\ndiagnose successfully; batch-failure coverage uses a project with no\npackage.json instead).",
          "is_bot": false,
          "headline": "fix(core): make project analyzability framework-agnostic",
          "author_name": "Andy Pai",
          "author_login": "abpai",
          "committed_at": "2026-06-03T05:12:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "eba37e2f20415a78789297868c312cc09c0916f3",
          "body": null,
          "is_bot": false,
          "headline": "feat(checks): add docs-structure progressive-disclosure rule group",
          "author_name": "Andy Pai",
          "author_login": "abpai",
          "committed_at": "2026-06-03T05:01:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f427b4d6a7da94a712f78e270f1d2c98d6d05401",
          "body": "…boilerplate",
          "is_bot": false,
          "headline": "refactor!: strip react-doctor into framework-agnostic harness-doctor …",
          "author_name": "Andy Pai",
          "author_login": "abpai",
          "committed_at": "2026-06-03T04:48:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "86911770da7999cbdab0fe89a498ee0e92a53c0e",
          "body": "…d focus",
          "is_bot": false,
          "headline": "fix(cli): refine warning display in diagnostics to improve clarity an…",
          "author_name": "Nisarg Patel",
          "author_login": "NisargIO",
          "committed_at": "2026-06-03T00:51:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "19b39c0e0d92ba67e94230a1d8e106f394cf825d",
          "body": "Co-authored-by: Cursor Agent <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "chore: bump deslop-js to 0.0.15 (#659)",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-06-03T00:23:01Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d594f69f26efaab9b2d0a78140ff97a3ff497ab0",
          "body": "…ror (#655)\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(cli): treat an unreadable --changed-files-from file as a clean er…",
          "author_name": "Ray Arayilakath",
          "author_login": "rayhanadev",
          "committed_at": "2026-06-02T22:19:09Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "eab6dc27477998c31bfa6fc100c50b33af449795",
          "body": "… (#654)\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(core): skip un-enumerable directories during subproject discovery…",
          "author_name": "Ray Arayilakath",
          "author_login": "rayhanadev",
          "committed_at": "2026-06-02T22:18:57Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "f375dbb24f9c3e62f737b7bcbc97cca57f42e6dd",
          "body": "Co-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "chore(skills): add /ship release pipeline skill (#651)",
          "author_name": "Ray Arayilakath",
          "author_login": "rayhanadev",
          "committed_at": "2026-06-02T19:47:18Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "3cc997108be438d0fc13b00529159c88984ed36a",
          "body": "…ve prompts (#650)\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(cli): exit cleanly on terminal hangup (read EIO) during interacti…",
          "author_name": "Ray Arayilakath",
          "author_login": "rayhanadev",
          "committed_at": "2026-06-02T19:40:14Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "0a36216c120af92d56cf232dea15e746a9668608",
          "body": "Co-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "style(readme): apply formatter to CI Action SHA-pin snippet",
          "author_name": "Rayhan Noufal Arayilakath",
          "author_login": "rayhanadev",
          "committed_at": "2026-06-02T19:27:44Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "caf46a775abadcc1d85fcef574bbfe5a2931bad2",
          "body": "The composite Action is versioned independently from the npm packages via\nv-prefixed semver tags (vX.Y.Z) plus a floating major (vN), distinct from\nthe Changesets `<pkg>@X.Y.Z` tags. Documents the bump rules, the signed-tag\ngotcha, and the release/floating-major commands.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "docs(agents): document GitHub Action versioning scheme",
          "author_name": "Rayhan Noufal Arayilakath",
          "author_login": "rayhanadev",
          "committed_at": "2026-06-02T19:20:38Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5c49fa2b8e3ad2cf77a2daa3c2280eb13bcffbc5",
          "body": "…#299)\n\nReplace the mutable `millionco/react-doctor@main` reference in the GitHub\nActions example with the `@v1` floating release tag, and add a note on\npinning to a full commit SHA for hardened CI (the example grants\n`pull-requests: write`). Avoids running whatever `main` points at runtime.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "docs(readme): pin CI Action example to @v1 + SHA-pin guidance (issue …",
          "author_name": "Rayhan Noufal Arayilakath",
          "author_login": "rayhanadev",
          "committed_at": "2026-06-02T19:20:37Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "8d13ba3f84d0a41d3fed2af1e5a82d9c14de5b67",
          "body": null,
          "is_bot": true,
          "headline": "chore: version packages (#641)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-02T06:19:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4aadaabfd488055a4323cc8b7f816c75601e40f1",
          "body": "…i) (#645)",
          "is_bot": false,
          "headline": "fix(react-native): stop false-positives on Expo Universal UI (@expo/u…",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-06-02T06:18:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0c8b797d18d7d8d0b347fbea0da111b38075eb5d",
          "body": "Co-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(cli): degrade git current-branch read when git is unavailable (#643)",
          "author_name": "Ray Arayilakath",
          "author_login": "rayhanadev",
          "committed_at": "2026-06-02T00:32:01Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "2aa96f39b56555722b7121569a5bbd9caa10dc44",
          "body": "…crashes (#642)\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(cli): treat expected user/CLI errors as clean errors, not Sentry …",
          "author_name": "Ray Arayilakath",
          "author_login": "rayhanadev",
          "committed_at": "2026-06-02T00:09:07Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5614b3220bbf1a881a90388d9140d7bfeb54dbff",
          "body": null,
          "is_bot": true,
          "headline": "chore: version packages (#639)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-01T22:21:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b336f54d664bf49e0c7b9575b7dcd374eebfd9c6",
          "body": null,
          "is_bot": false,
          "headline": "feat(cli): reveal category breakdown one issue at a time (#640)",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-06-01T22:21:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ec5d58cf8315774869fc7c9e93e058c631000376",
          "body": "`canAnimateOnboarding` only excluded CI, so a git hook invoked by an\ninteractive `git commit` (real inherited TTY, `GIT_DIR` set) would play\nthe score-bar count-up and onboarding pacing, emitting cursor escapes\ninto hook output (issue #293). Add `isGitHookEnvironment()` and gate it\nout, while keeping the deliberate coding-agent real-TTY animation.",
          "is_bot": false,
          "headline": "fix(cli): never animate the score header / onboarding inside git hooks",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-06-01T21:25:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "114893e07d83d143aa3cdddc9fb178137b786f47",
          "body": "Co-authored-by: Rayhan Noufal Arayilakath <me@rayhanadev.com>",
          "is_bot": false,
          "headline": "New onboarding 2 ray backup (#638)",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-06-01T21:20:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2d1ab245f0cbaa87529067e6e3ed9ac08362d1fc",
          "body": null,
          "is_bot": true,
          "headline": "chore: version packages (#632)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-01T17:44:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8162bfb7ca0948b137dd75a22776e55cab99b740",
          "body": null,
          "is_bot": false,
          "headline": "feat(cli): redesign scan summary, footer, and verbose warnings (#637)",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-06-01T17:26:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bf4c21e45d690353f5a1e8937dfa5769768c67d0",
          "body": null,
          "is_bot": false,
          "headline": "Update README.md",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-06-01T16:31:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bd8298d6cf3484ef7f2898fe981442706ffea3ce",
          "body": "Co-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat(cli): lint in parallel by default, with serial fallback (#635)",
          "author_name": "Ray Arayilakath",
          "author_login": "rayhanadev",
          "committed_at": "2026-06-01T15:50:59Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "520b0a9235d37074821c12fd73455d8462128a75",
          "body": "…errors (#633)\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(cli): accept commit ranges in --diff; render bad values as clean …",
          "author_name": "Ray Arayilakath",
          "author_login": "rayhanadev",
          "committed_at": "2026-06-01T13:23:44Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "17e722ee074d10a5c4082b9f0a6b40ccaf3bed3b",
          "body": "…ons) (#634)\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat(cli): add anonymized Sentry usage metrics (counters + distributi…",
          "author_name": "Ray Arayilakath",
          "author_login": "rayhanadev",
          "committed_at": "2026-06-01T13:23:12Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "3fae9ddd88291f5a7236e36aa54b05fa45f370f4",
          "body": "…s clean errors\"\n\nThis reverts commit 01ec05c06ea15b1ee2f24ca777e653bf1b3bd526.",
          "is_bot": false,
          "headline": "Revert \"fix(cli): accept commit ranges in --diff; render bad values a…",
          "author_name": "Rayhan Noufal Arayilakath",
          "author_login": "rayhanadev",
          "committed_at": "2026-06-01T12:45:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "01ec05c06ea15b1ee2f24ca777e653bf1b3bd526",
          "body": "…errors\n\n`--diff` now accepts git's own range syntax: two-dot `A..B` (diff A\ndirectly against B) and three-dot `A...B` (diff from the merge-base of A\nand B to B). Each endpoint is individually validated against the\nanti-injection guard, so a range can't smuggle a `--upload-pack=`-style\noption past i\n[…]\nDiffInfo now propagates the tagged ReactDoctorError so the CLI\ndispatches on reason._tag via the new isUserInputError classifier.\n\nFixes REACT-DOCTOR-9\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(cli): accept commit ranges in --diff; render bad values as clean …",
          "author_name": "Rayhan Noufal Arayilakath",
          "author_login": "rayhanadev",
          "committed_at": "2026-06-01T12:42:22Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "66f9d649e737fcaecc6b84cca944ee6612e18d1a",
          "body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore: version packages (#603)",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-01T11:44:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "05d7bba5c4e033c64b10c7be775844190b4bed17",
          "body": "* docs(readme): update readme\n\n* use \"taste\"",
          "is_bot": false,
          "headline": "docs(readme): update readme (#631)",
          "author_name": "Ray Arayilakath",
          "author_login": "rayhanadev",
          "committed_at": "2026-06-01T11:33:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "89215753d35abfe32fe7128fbc778ced453863b4",
          "body": null,
          "is_bot": false,
          "headline": "fix: remove unnecessary docs",
          "author_name": "Rayhan Noufal Arayilakath",
          "author_login": "rayhanadev",
          "committed_at": "2026-06-01T11:24:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bdb9e36b0e8f27e04104f676bffd8c6091b65cc5",
          "body": "Co-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat: add 10 React Native & Expo diagnostic rules (#625)",
          "author_name": "Ray Arayilakath",
          "author_login": "rayhanadev",
          "committed_at": "2026-06-01T11:23:41Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "75c1f99e062a8fc3e5e4ba294208dbc56bca5f6f",
          "body": "…ndency (#630)\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(oxlint-plugin-react-doctor): declare oxc-parser as a runtime depe…",
          "author_name": "Ray Arayilakath",
          "author_login": "rayhanadev",
          "committed_at": "2026-06-01T11:02:17Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "e9e71bbc2f98e7175136918b1a3de134e9d7cb87",
          "body": "…mization, crash refs (#628)\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat(cli): deepen sentry observability -- source maps, tracing, anony…",
          "author_name": "Ray Arayilakath",
          "author_login": "rayhanadev",
          "committed_at": "2026-06-01T10:19:25Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "cfeea7f7e9901319b0d667e574e969c7568b5e3b",
          "body": "Downgrade the four `minor` changesets (CLI color/version/help,\nexperimental parallel lint workers, Sentry crash reporting, and\nwarnings-shown-by-default) to `patch` so the next release is a single\npatch bump.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "chore(changeset): mark pending changesets as patch",
          "author_name": "Rayhan Noufal Arayilakath",
          "author_login": "rayhanadev",
          "committed_at": "2026-06-01T10:09:13Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "59762666d839ed09d6fbece1eaa22c6e9e91aaaf",
          "body": null,
          "is_bot": false,
          "headline": "fix: its a patch its okay we can breathe",
          "author_name": "Ray Arayilakath",
          "author_login": "rayhanadev",
          "committed_at": "2026-06-01T10:04:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9777f1ac453d8211e90c66852e0527a0ec386bc6",
          "body": "…#617)\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat(cli): add `rules` management commands and doctor-explain skill (…",
          "author_name": "Ray Arayilakath",
          "author_login": "rayhanadev",
          "committed_at": "2026-06-01T09:55:47Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "0938376e9c60dcc52fdf4691c15db49feb603033",
          "body": "Show \"warning\"-severity diagnostics by default again — a scan that reports only errors is too low a bar for a health check. Warnings reach every surface (CLI, PR comment, score, --fail-on); opt out with --no-warnings or \"warnings\": false. Per-rule / per-category severity overrides still win.\n\nCLI ou\n[…]\ns every rule-list surface (category breakdown, top errors, warnings roll-up, verbose detail, agent handoff, on-disk dump); shared warning-header and site-badge helpers remove the duplicated rendering.",
          "is_bot": false,
          "headline": "feat(cli): show warnings by default again (--no-warnings to hide) (#622)",
          "author_name": "Nisarg Patel",
          "author_login": "NisargIO",
          "committed_at": "2026-06-01T09:23:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b9e9bcbc08985f4bd77df1f354713d2cdbdaf2ec",
          "body": "Co-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat(cli): align CLI with clig.dev and 12-factor guidelines (#623)",
          "author_name": "Ray Arayilakath",
          "author_login": "rayhanadev",
          "committed_at": "2026-06-01T08:46:26Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "24425b113adcd965545b8c790af85c13a0d86c86",
          "body": "* feat(cli): add Sentry crash reporting\n\nCapture uncaught CLI errors via @sentry/node, flushed before the process\nexits and enriched with a run-context snapshot (version, node/platform/\narch, invocation command/argv, cwd, CI provider, coding agent,\ninteractivity, JSON mode). Initialized as the first\n[…]\nent derive from detectCodingAgent.\nBehavior is unchanged (env-detection tests still green).\n\nCo-authored-by: Cursor <cursoragent@cursor.com>\n\n---------\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat(cli): add Sentry crash reporting (#621)",
          "author_name": "Nisarg Patel",
          "author_login": "NisargIO",
          "committed_at": "2026-06-01T04:51:18Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5fc6a9faa79568a5eaab67508e57376dfb95c68d",
          "body": null,
          "is_bot": false,
          "headline": "Add Discord link to CLI error help (#620)",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-06-01T03:32:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b3c3aa94018bfde765431f6a5612435c621eb925",
          "body": null,
          "is_bot": false,
          "headline": "chore: codebase audit cleanup (dead code, dedup, CI/config fixes) (#619)",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-06-01T02:36:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f1913f27f5b0ae895119dc9b73102bdebc7bbc14",
          "body": "…618)\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "chore(skills): add truffler symbol-search tooling and deslop skill (#…",
          "author_name": "Ray Arayilakath",
          "author_login": "rayhanadev",
          "committed_at": "2026-06-01T01:45:11Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "bb15252940bbd598846d7f7018df3fb86f11ea9f",
          "body": "…cans (#616)\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat(cli): add --experimental-parallel flag for multi-worker oxlint s…",
          "author_name": "Ray Arayilakath",
          "author_login": "rayhanadev",
          "committed_at": "2026-06-01T00:49:56Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "4bc8a73d247d9b8378616e738780af3794f0b97f",
          "body": "…iagnostics) (#583)",
          "is_bot": false,
          "headline": "feat(core): port expo-doctor checks (Expo detection + project-level d…",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-06-01T00:30:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "daef23ceff93634ffdb34c8e22e41610a07a596b",
          "body": "…#614)",
          "is_bot": false,
          "headline": "fix: cut false positives and gate rules by library + React Compiler (…",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-06-01T00:25:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "09fe1ff55f5efa4d069c3c57c9d3134c46a9cfb3",
          "body": "* Fix CLI multi-project wrapper scans\n\nCo-authored-by: Aiden Bai <aidenybai@users.noreply.github.com>\n\n* Tighten ambiguous scan target handling\n\nCo-authored-by: Aiden Bai <aidenybai@users.noreply.github.com>\n\n* Refactor resolveDiagnoseTarget to accept options for ambiguous handling\n\n- Introduced Res\n[…]\nor cleaner code.\n\n---------\n\nCo-authored-by: Cursor Agent <cursoragent@cursor.com>\nCo-authored-by: Aiden Bai <aidenybai@users.noreply.github.com>\nCo-authored-by: Nisarg Patel <awesomenisarg@gmail.com>",
          "is_bot": false,
          "headline": "fix(#591): CLI multi-project wrapper scans (#592)",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-31T23:45:13Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8b313badda74de19ba56a242d965c54399d39b9c",
          "body": "…links (#615)\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix: dead-code false positives on symlinked roots and 404 fix-recipe …",
          "author_name": "Ray Arayilakath",
          "author_login": "rayhanadev",
          "committed_at": "2026-05-31T22:32:56Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "6448d5bfe1a920003a0d74d4080351d973dcbc0b",
          "body": "…ect-rule blowup (#613)\n\nascend() re-descended the same definition subtrees on every recursion step,\nso the seven State & Effects rules (led by no-pass-data-to-parent) blew up\nsuperlinearly on large effect-heavy components — re-walking and re-scoping\nidentical bodies across recursion, across effects\n[…]\ntch from ~13.5s to ~2.5s — with byte-identical diagnostics\n(verified by a SHA-256 fingerprint over every diagnostic before/after).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "perf(oxlint-plugin): memoize getDownstreamRefs to fix superlinear eff…",
          "author_name": "Nisarg Patel",
          "author_login": "NisargIO",
          "committed_at": "2026-05-31T10:20:00Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9fc6f62940321beb129757a4eec4fd48ba45528e",
          "body": "Tell the handed-off agent to verify each fix against the canonical recipe\nand re-run the scan (don't assume), and add a section instructing it to\nexplain in plain language what each issue is, why it matters, and how\nsevere it is in human terms.",
          "is_bot": false,
          "headline": "feat: handoff prompt verifies fixes and educates the user",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-31T09:25:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6e59f10ef8b2173f0c98a653b13702d84f6471e7",
          "body": null,
          "is_bot": false,
          "headline": "feat: new onboarding (#596)",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-31T09:24:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b612664043a9be414166e3c6a69b355e39a8dcf4",
          "body": "…e (#611)\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(action): degrade to full-project scan when PR files are unreadabl…",
          "author_name": "Ray Arayilakath",
          "author_login": "rayhanadev",
          "committed_at": "2026-05-31T07:04:46Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "3ceb7480c1f1b61a45a728274940f9e3de74a462",
          "body": "…ent-code (#612)\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(oxlint-plugin): allowlist public client keys in no-secrets-in-cli…",
          "author_name": "Ray Arayilakath",
          "author_login": "rayhanadev",
          "committed_at": "2026-05-31T07:03:36Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c2198ed6751cf233f368a1c774f1d136bbcf0471",
          "body": "* feat: order the diagnostics dump by rule priority\n\nUsers report that `npx react-doctor` prints a large, undifferentiated dump and\nthey don't know what to tackle first. The score API now returns an intrinsic\npriority/tier per rule; surface it so the dump leads with what's most worth\nfixing instead \n[…]\nes are now `readonly` to match the\ndecoded shape.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: order the diagnostics dump by rule priority (#590)",
          "author_name": "Nisarg Patel",
          "author_login": "NisargIO",
          "committed_at": "2026-05-31T05:49:53Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ac3ca1ab122baec2fa16ff23b9fc3e1f97ceb988",
          "body": null,
          "is_bot": false,
          "headline": "Add enterprise hint for missing scores (#608)",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-31T02:37:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fe01e573a91a36316c858ad1e7c12a5fe18c1039",
          "body": "Co-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(core): redact secrets and PII from diagnostic output (#606)",
          "author_name": "Ray Arayilakath",
          "author_login": "rayhanadev",
          "committed_at": "2026-05-31T02:26:55Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5dff3b5a5da033e0ae4cd5dd432a74d36ca7d143",
          "body": "… hang (#599) (#607)\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(core): always clear oxlint batch progress interval to prevent CLI…",
          "author_name": "Ray Arayilakath",
          "author_login": "rayhanadev",
          "committed_at": "2026-05-31T00:02:05Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "52ecf12d646cd568e0ef927d9a1f17b899de490a",
          "body": "Co-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat(action): add non-blocking input for advisory CI runs (#604)",
          "author_name": "Ray Arayilakath",
          "author_login": "rayhanadev",
          "committed_at": "2026-05-30T23:36:54Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "4861f37a55eb12909c7faca170ec5c9fd636f9a9",
          "body": "Co-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "chore(deps): bump deslop-js to 0.0.14 (#605)",
          "author_name": "Ray Arayilakath",
          "author_login": "rayhanadev",
          "committed_at": "2026-05-30T23:18:59Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "9b64d9810626fcd26f4fff649e03f981ede6be4c",
          "body": null,
          "is_bot": false,
          "headline": "Update config.json",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-30T22:48:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5f7cc7c36ed62b0c2264916f2aeb694e5713e821",
          "body": "Co-authored-by: materwelonDhruv <materwelondhruv@gmail.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: publish JSON Schema for react-doctor.config.json (#601)",
          "author_name": "Ray Arayilakath",
          "author_login": "rayhanadev",
          "committed_at": "2026-05-30T22:27:08Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "7b4ddf7ea764b4d9f7be867082cabf4c64b956a4",
          "body": null,
          "is_bot": false,
          "headline": "update logo",
          "author_name": "Ben MacLaurin",
          "author_login": "ben-million",
          "committed_at": "2026-05-30T21:36:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 4,
      "commits_last_year": 711,
      "latest_release_at": "2026-07-18T04:44:04Z",
      "latest_release_tag": "@andypai/harness-doctor@2.0.0",
      "releases_from_tags": false,
      "days_since_last_push": 5,
      "active_weeks_last_year": 18,
      "days_since_latest_release": 5,
      "mean_days_between_releases": 12.5
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 42,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "@andypai/harness-doctor",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "agents",
            "agents-md",
            "ai-agents",
            "diagnostics",
            "docs-contract",
            "documentation",
            "harness",
            "readiness",
            "scanner",
            "supply-chain",
            "typescript"
          ],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@andypai/harness-doctor",
          "is_deprecated": false,
          "latest_version": "2.0.0",
          "repository_url": "https://github.com/abpai/harness-doctor",
          "versions_count": 5,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 6723,
          "first_published_at": "2026-06-10T17:21:32.028000Z",
          "latest_published_at": "2026-07-18T04:44:02.155000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 5
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 0,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0,
        "collected_at": null
      },
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "packages/core/tests/fixtures/signals-menu/basic/Makefile",
        "packages/core/tests/fixtures/signals-menu/basic/justfile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "packages/api/tsconfig.json",
        "packages/core/tests/fixtures/basic-react/tsconfig.json",
        "packages/core/tests/fixtures/mixed-rn-web-monorepo/tsconfig.json",
        "packages/core/tests/fixtures/nextjs-app/tsconfig.json",
        "packages/core/tests/fixtures/tanstack-start-app/tsconfig.json",
        "packages/core/tsconfig.json",
        "packages/harness-doctor/tsconfig.json",
        "tsconfig.json"
      ],
      "toolchain_manifests": [],
      "largest_source_bytes": 79743,
      "source_files_sampled": 361,
      "oversized_source_files": 2,
      "agent_instruction_files": [
        "AGENTS.md",
        "packages/core/tests/fixtures/docs-structure-clean/AGENTS.md"
      ],
      "agent_instruction_max_bytes": 3922
    },
    "dependencies": {
      "manifests": [
        "package.json"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 130,
        "malicious_count": 0,
        "assessed_package": "npm:@andypai/harness-doctor@2.0.0",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm"
      ],
      "dependencies": [
        {
          "name": "@harness-doctor/core",
          "manifest": "packages/api/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "effect",
          "manifest": "packages/api/package.json",
          "ecosystem": "npm",
          "version_constraint": "4.0.0-beta.70"
        },
        {
          "name": "@effect/platform-bun",
          "manifest": "packages/core/package.json",
          "ecosystem": "npm",
          "version_constraint": "4.0.0-beta.70"
        },
        {
          "name": "confbox",
          "manifest": "packages/core/package.json",
          "ecosystem": "npm",
          "version_constraint": "^0.2.4"
        },
        {
          "name": "effect",
          "manifest": "packages/core/package.json",
          "ecosystem": "npm",
          "version_constraint": "4.0.0-beta.70"
        },
        {
          "name": "jiti",
          "manifest": "packages/core/package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.7.0"
        },
        {
          "name": "knip",
          "manifest": "packages/core/package.json",
          "ecosystem": "npm",
          "version_constraint": "6.26.0"
        },
        {
          "name": "picocolors",
          "manifest": "packages/core/package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.1.1"
        },
        {
          "name": "picomatch",
          "manifest": "packages/core/package.json",
          "ecosystem": "npm",
          "version_constraint": "^4.0.4"
        },
        {
          "name": "typescript",
          "manifest": "packages/core/package.json",
          "ecosystem": "npm",
          "version_constraint": "^6.0.3"
        },
        {
          "name": "@babel/code-frame",
          "manifest": "packages/harness-doctor/package.json",
          "ecosystem": "npm",
          "version_constraint": "^7.29.0"
        },
        {
          "name": "@effect/platform-bun",
          "manifest": "packages/harness-doctor/package.json",
          "ecosystem": "npm",
          "version_constraint": "4.0.0-beta.70"
        },
        {
          "name": "agent-install",
          "manifest": "packages/harness-doctor/package.json",
          "ecosystem": "npm",
          "version_constraint": "0.0.5"
        },
        {
          "name": "conf",
          "manifest": "packages/harness-doctor/package.json",
          "ecosystem": "npm",
          "version_constraint": "^15.1.0"
        },
        {
          "name": "confbox",
          "manifest": "packages/harness-doctor/package.json",
          "ecosystem": "npm",
          "version_constraint": "^0.2.4"
        },
        {
          "name": "effect",
          "manifest": "packages/harness-doctor/package.json",
          "ecosystem": "npm",
          "version_constraint": "4.0.0-beta.70"
        },
        {
          "name": "is-unicode-supported",
          "manifest": "packages/harness-doctor/package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.1.0"
        },
        {
          "name": "jiti",
          "manifest": "packages/harness-doctor/package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.7.0"
        },
        {
          "name": "knip",
          "manifest": "packages/harness-doctor/package.json",
          "ecosystem": "npm",
          "version_constraint": "6.26.0"
        },
        {
          "name": "magicast",
          "manifest": "packages/harness-doctor/package.json",
          "ecosystem": "npm",
          "version_constraint": "^0.5.3"
        },
        {
          "name": "prompts",
          "manifest": "packages/harness-doctor/package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.4.2"
        },
        {
          "name": "typescript",
          "manifest": "packages/harness-doctor/package.json",
          "ecosystem": "npm",
          "version_constraint": ">=5.0.4 <7"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 24,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 2,
      "top_contributors": [
        {
          "type": "User",
          "login": "aidenybai",
          "commits": 471,
          "avatar_url": "https://avatars.githubusercontent.com/u/38025074?v=4"
        },
        {
          "type": "User",
          "login": "cursoragent",
          "commits": 81,
          "avatar_url": "https://avatars.githubusercontent.com/u/199161495?v=4"
        },
        {
          "type": "User",
          "login": "rayhanadev",
          "commits": 65,
          "avatar_url": "https://avatars.githubusercontent.com/u/72509475?v=4"
        },
        {
          "type": "User",
          "login": "abpai",
          "commits": 38,
          "avatar_url": "https://avatars.githubusercontent.com/u/4070686?v=4"
        },
        {
          "type": "User",
          "login": "NisargIO",
          "commits": 18,
          "avatar_url": "https://avatars.githubusercontent.com/u/17689267?v=4"
        },
        {
          "type": "User",
          "login": "ben-million",
          "commits": 14,
          "avatar_url": "https://avatars.githubusercontent.com/u/210088851?v=4"
        },
        {
          "type": "User",
          "login": "Akshay090",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/28626499?v=4"
        },
        {
          "type": "User",
          "login": "ankushdharkar",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/1935403?v=4"
        },
        {
          "type": "User",
          "login": "athul-binu",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/76248875?v=4"
        },
        {
          "type": "User",
          "login": "ovflowd",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/12037269?v=4"
        }
      ],
      "contributors_sampled": 13,
      "top_contributor_share": 0.679
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "code-quality.yml",
        "harness-doctor.yml",
        "pages.yml",
        "release.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "pnpm-lock.yaml",
        "yarn.lock"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 9,
            "reason": "18 out of 20 merged PRs checked by a CI test -- score normalized to 9",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/17 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 8 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 9,
            "reason": "1 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "683f4e96740e043358b3246dad9fa50333c0b41b",
        "ran_at": "2026-07-23T13:21:34Z",
        "aggregate_score": 3.4,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-18T04:43:53Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-07-18T04:43:23Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/abpai/harness-doctor",
    "host": "github.com",
    "name": "harness-doctor",
    "owner": "abpai"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 62,
      "inputs": {
        "security": 47,
        "vitality": 80,
        "community": 34,
        "governance": 64,
        "engineering": 76
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 80,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 66,
            "inputs": {
              "commits_last_year": 711,
              "human_commit_share": 0.93,
              "days_since_last_push": 5,
              "active_weeks_last_year": 18
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "18/52 weeks with commits",
                "points": 12.5,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 18
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "711 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 711
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "releases_count": 4,
              "latest_release_tag": "@andypai/harness-doctor@2.0.0",
              "releases_from_tags": false,
              "days_since_latest_release": 5,
              "mean_days_between_releases": 12.5
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "4 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~12.5 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 12.5
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 34,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 0,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 64,
            "inputs": {
              "packages": [
                "@andypai/harness-doctor"
              ],
              "dependents": null,
              "ecosystems": "npm",
              "total_downloads": null,
              "monthly_downloads": 6723
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "6,723 downloads/month across npm",
                "points": 51,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 6723,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 64,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "at_risk",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 13,
              "top_contributor_share": 0.679
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 68% of commits",
                "points": 7.2,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 68
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "13 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 13
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 8 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 72,
            "inputs": {
              "merged_prs": 24,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "24/24 decided PRs merged",
                "points": 38.2,
                "status": "met",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 24,
                      "decided": 24
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/17 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 55,
            "inputs": {
              "followers": 38,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "abpai",
              "public_repos": 30,
              "account_age_days": 4856
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "38 followers of abpai",
                "points": 11.4,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 38,
                      "login": "abpai"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "30 public repos, account ~13 yr old",
                "points": 22.9,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 30
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 13
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "@andypai/harness-doctor"
              ],
              "ecosystems": "npm",
              "any_deprecated": false,
              "min_days_since_publish": 5
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 5 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "5 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 76,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 66,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "5 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "18 out of 20 merged PRs checked by a CI test -- score normalized to 9",
                "points": 18,
                "status": "partial",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "excellent",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": "https://abpai.github.io/harness-doctor/",
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://abpai.github.io/harness-doctor/",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 47,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 34,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 3.4
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "18 out of 20 merged PRs checked by a CI test -- score normalized to 9",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/17 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 8 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "1 existing vulnerabilities detected",
                "points": 6.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:@andypai/harness-doctor@2.0.0 runtime dependency closure — what installing the published package pulls in — 130 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "npm:@andypai/harness-doctor@2.0.0",
                  "assessed": 130
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 0,
              "affected_packages": 0,
              "assessed_packages": 130,
              "unassessed_packages": 0,
              "affected_by_severity": "none",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "no indirect dependency carries a known advisory",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "no_indirect_advisories",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 130,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 14
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 81,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.946,
              "agent_instruction_files": [
                "AGENTS.md",
                "packages/core/tests/fixtures/docs-structure-clean/AGENTS.md"
              ],
              "agent_instruction_max_bytes": 3922
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "AGENTS.md, packages/core/tests/fixtures/docs-structure-clean/AGENTS.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "AGENTS.md, packages/core/tests/fixtures/docs-structure-clean/AGENTS.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "88 of 93 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 88,
                      "sampled": 93
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 71,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "pnpm-lock.yaml",
                "yarn.lock"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [
                "packages/core/tests/fixtures/signals-menu/basic/Makefile",
                "packages/core/tests/fixtures/signals-menu/basic/justfile"
              ],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [
                "packages/api/tsconfig.json",
                "packages/core/tests/fixtures/basic-react/tsconfig.json",
                "packages/core/tests/fixtures/mixed-rn-web-monorepo/tsconfig.json",
                "packages/core/tests/fixtures/nextjs-app/tsconfig.json",
                "packages/core/tests/fixtures/tanstack-start-app/tsconfig.json",
                "packages/core/tsconfig.json",
                "packages/harness-doctor/tsconfig.json",
                "tsconfig.json"
              ],
              "agent_commit_share": 0.36,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "packages/core/tests/fixtures/signals-menu/basic/Makefile, packages/core/tests/fixtures/signals-menu/basic/justfile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "packages/core/tests/fixtures/signals-menu/basic/Makefile, packages/core/tests/fixtures/signals-menu/basic/justfile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "packages/api/tsconfig.json, packages/core/tests/fixtures/basic-react/tsconfig.json, packages/core/tests/fixtures/mixed-rn-web-monorepo/tsconfig.json, packages/core/tests/fixtures/nextjs-app/tsconfig.json, packages/core/tests/fixtures/tanstack-start-app/tsconfig.json, packages/core/tsconfig.json, packages/harness-doctor/tsconfig.json, tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "packages/api/tsconfig.json, packages/core/tests/fixtures/basic-react/tsconfig.json, packages/core/tests/fixtures/mixed-rn-web-monorepo/tsconfig.json, packages/core/tests/fixtures/nextjs-app/tsconfig.json, packages/core/tests/fixtures/tanstack-start-app/tsconfig.json, packages/core/tsconfig.json, packages/harness-doctor/tsconfig.json, tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "36 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 36,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "TypeScript",
              "largest_source_bytes": 79743,
              "source_files_sampled": 361,
              "oversized_source_files": 2
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "TypeScript (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "TypeScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "2/361 source files over 60KB",
                "points": 54.7,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 361,
                      "oversized": 2
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-23T13:21:55.421221Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/abpai/harness-doctor.svg",
  "full_name": "abpai/harness-doctor",
  "license_state": "standard",
  "license_spdx": "MIT"
}