Registro públicoModerado
Informe de salud del softwareesquema 0.26.0 · métricas 1.13.0 · 2026-07-22 10:36 UTC
adapt-security / adapt-authoring-core
Core module of the Adapt authoring tool
adapt-security/adapt-authoring-core tiene un índice de salud de 62 sobre 100, lo que lo sitúa en la banda Moderado. Su puntuación más alta es Vitality (91/100) y la más baja, Community & Adoption (33/100). Se actualizó por última vez hace 4 días. Una sola persona concentra la mayor parte del trabajo reciente.
62
global / 100Índice de salud del software
Las métricas se agrupan en categorías ponderadas sobre una escala de 1 a 100. El resultado global parte de su media; cuando la evidencia pública activa la Política de Jurisdicciones de Alto Riesgo, la calificación se ajusta y recibe el límite 49 (En riesgo). Preparación para IA queda fuera.
62
Excelente85-100Ejemplar; cumple prácticamente todos los criterios evaluados
Bueno70-84Saludable; carencias menores
Moderado50-69Aceptable con carencias notables; se recomienda revisión
En riesgo30-49Debilidades significativas; su adopción exige cautela
Crítico1-29Problemas graves (proyecto abandonado, un solo mantenedor, sin higiene)
Perfil de puntuación
Cada eje es una categoría. La forma importa más que la media: un proyecto sano llena toda la figura, mientras que un perfil de picos y cráteres indica que la fortaleza en una dimensión enmascara el riesgo en otra.
Titularidad
Adapt NXTOrganización
18 seguidores45 repositorios públicosdesde jul 2017
Este repositorio está respaldado por una organización: una custodia compartida y responsable que puede sobrevivir a cualquier mantenedor individual.
Ecosistemas de paquetes
| Registro | Paquete | Versión | Descargas / mes | Versiones | Última publicación |
|---|---|---|---|---|---|
| npm | adapt-authoring-core | 3.5.0 | 3371 | 52 | hace 4 días |
Métricas por categoría
Vitalidad
¿Está vivo el proyecto: se escribe código y se publican versiones?
91
Actividad de desarrollo
85Excelente
Cómo se puntúa
| 36/36 | Recencia de push — último push hace 4 días |
| 20.8/36 | Cadencia de commits — 30/52 semanas con commits |
| 18/18 | Volumen de commits — 257 commits en el último año |
| 10/10 | OpenSSF Scorecard: Maintained — 30 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10 |
Datos de entrada utilizados
| commits_last_year | 257 |
| human_commit_share | 0,98 |
| days_since_last_push | 4 |
| active_weeks_last_year | 30 |
Disciplina de publicación
100Excelente
Cómo se puntúa
| 27/27 | Publica versiones — 50 versiones publicadas |
| 36/36 | Recencia de las versiones — última versión hace 4 días |
| 27/27 | Cadencia de publicación — una versión cada ~12,9 días |
| 0/10 | OpenSSF Scorecard: Signed-Releases — sin datos |
Datos de entrada utilizados
| releases_count | 50 |
| latest_release_tag | v3.5.0 |
| releases_from_tags | no |
| days_since_latest_release | 4 |
| mean_days_between_releases | 12,9 |
Excluidos de la puntuación (sin datos o no aplicable): OpenSSF Scorecard: Signed-Releases. Los pesos restantes se han renormalizado.
Comunidad y Adopción
¿Tiene el proyecto usuarios, descargas, atención y unas condiciones acogedoras para quienes contribuyen?
33
Popularidad y adopción
1Crítico
Cómo se puntúa
| 0/60 | Estrellas — 0 estrellas |
| 0/25 | Forks — 1 forks |
| 0/15 | Observadores — 0 observadores |
Datos de entrada utilizados
| forks | 1 |
| stars | 0 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Salud de la comunidad
52Moderado
Cómo se puntúa
| 22.5/22.5 | README |
| 0/22.5 | Licencia — no se detectó ningún archivo de licencia |
| 18/18 | Guía CONTRIBUTING |
| 0/13.5 | Código de conducta |
| 0/7.2 | Plantilla de issues |
| 6.3/6.3 | Plantilla de PR |
Datos de entrada utilizados
| has_readme | sí |
| has_license | no |
| has_contributing | sí |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | sí |
Adopción en el ecosistema (descargas)
59Moderado
Cómo se puntúa
| 47/80 | Descargas mensuales — 3371 descargas/mes en npm |
| 0/20 | Dependientes en el registro — no lo informa este ecosistema |
Datos de entrada utilizados
| packages | adapt-authoring-core |
| dependents | — |
| ecosystems | npm |
| total_downloads | — |
| monthly_downloads | 3371 |
Excluidos de la puntuación (sin datos o no aplicable): Dependientes en el registro. Los pesos restantes se han renormalizado.
Sostenibilidad y Gobernanza
¿Sobrevivirá el proyecto a sus personas: factor bus, capacidad de respuesta, quién lo respalda y mantenimiento del paquete?
63
Cómo se puntúa
| 9/54 | Factor bus — la mitad de los commits recae en 1 contribuyente(s) |
| 1.5/22.5 | Distribución de commits — el principal contribuyente firma el 93% de los commits |
| 8.1/13.5 | Amplitud de contribuyentes — 6 contribuyentes |
| 10/10 | OpenSSF Scorecard: Contributors — project has 4 contributing companies or organizations |
Datos de entrada utilizados
| bus_factor | 1 |
| contributors_sampled | 6 |
| top_contributor_share | 0,933 |
Cómo se puntúa
| 46.8/46.8 | Resolución de issues — 100% de issues cerradas |
| 26.1/38.3 | Aceptación de PR — 58/85 PR decididos fusionados |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/26 approved changesets -- score normalized to 0 |
Datos de entrada utilizados
| merged_prs | 58 |
| open_issues | 0 |
| closed_issues | 49 |
| issue_closed_ratio | 1 |
| closed_unmerged_prs | 27 |
Propiedad y custodia
63Moderado
Cómo se puntúa
| 30/30 | Respaldo de la propiedad — propiedad de una organización |
| 0/20 | Dominio verificado |
| 9.2/25 | Alcance del propietario — 18 seguidores de adapt-security |
| 24.1/25 | Trayectoria — 45 repos públicos, cuenta de ~9 años |
Datos de entrada utilizados
| followers | 18 |
| owner_type | Organization |
| is_verified | — |
| owner_login | adapt-security |
| public_repos | 45 |
| account_age_days | 3303 |
Mantenimiento de paquetes
100Excelente
Cómo se puntúa
| 25/25 | Publicado y resoluble — 1 paquete(s) en npm |
| 35/35 | Recencia de publicación — última publicación hace 4 días |
| 20/20 | Historial de versiones — 52 versiones en el registro |
| 20/20 | No obsoleto — activo, ni obsoleto ni retirado |
Datos de entrada utilizados
| packages | adapt-authoring-core |
| ecosystems | npm |
| any_deprecated | no |
| min_days_since_publish | 4 |
Calidad de Ingeniería
¿Existen unas prácticas mínimas de ingeniería y documentación?
67
Prácticas de ingeniería
68Moderado
Cómo se puntúa
| 24/24 | Flujos de trabajo de CI — 4 flujo(s) de trabajo |
| 24/24 | Pruebas presentes |
| 0/16 | Configuración de linter |
| 0/9.6 | Hooks de pre-commit |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 11 out of 11 merged PRs checked by a CI test -- score normalized to 10 |
Datos de entrada utilizados
| has_ci | sí |
| has_tests | sí |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Documentación
65Moderado
Cómo se puntúa
| 30/30 | README |
| 25/25 | Directorio de documentación |
| 0/15 | Sitio de documentación / página del proyecto |
| 10/10 | Descripción del repositorio |
| 0/10 | Topics |
| 0/10 | Wiki |
Datos de entrada utilizados
| topics | — |
| has_wiki | no |
| homepage | — |
| has_readme | sí |
| has_docs_dir | sí |
| has_description | sí |
Seguridad
¿Son sólidas las prácticas visibles de seguridad y de cadena de suministro, sin exposición jurisdiccional de alto riesgo sin resolver?
49
Postura de seguridad
49En riesgo
Cómo se puntúa
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 2.5/2.5 | CI-Tests — 11 out of 11 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/26 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 4 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 0/2.5 | Licencia — license file not detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — sin datos |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — sin datos |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Datos de entrada utilizados
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 4,9 |
Excluidos de la puntuación (sin datos o no aplicable): packaging, signed_releases. Los pesos restantes se han renormalizado.
Preparación para IA
¿Hasta qué punto está el repositorio preparado para desarrollarse y mantenerse con agentes de codificación de IA? Es una insignia independiente y experimental — peso 0,0, de modo que se presenta por separado y no afecta a la puntuación de salud global.
37
Contexto y guía para agentes
34En riesgo
Cómo se puntúa
| 0/45 | Instrucciones para agentes — sin CLAUDE.md / AGENTS.md / reglas de editor |
| 0/15 | Documentación legible por máquinas (llms.txt) |
| 33.7/40 | Historial de commits legible — 62 de 98 commits humanos declaran su intención (asunto estructurado o cuerpo explicativo) |
Datos de entrada utilizados
| has_llms_txt | no |
| legible_history_share | 0,633 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Cómo se puntúa
| 0/18 | Arranque con un solo comando |
| 22/22 | Pruebas automatizadas |
| 0/11 | Configuración de lint / formato |
| 0/11 | Verificación estática de tipos |
| 0/10 | Entorno reproducible |
| 10/10 | Práctica demostrada con agentes — 35 de los últimos 100 commits con autoría o crédito de agente |
| 0/8 | Mantenimiento automatizado — no se observan actualizaciones automáticas de dependencias |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Datos de entrada utilizados
| has_nix | no |
| has_tests | sí |
| lockfiles | — |
| has_dockerfile | no |
| typed_language | no |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | — |
| agent_commit_share | 0,35 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
Legibilidad del código para modelos
55Moderado
Cómo se puntúa
| 0/45 | Código verificable por tipos — JavaScript sin configuración de verificación de tipos |
| 55/55 | Tamaños de archivo manejables — 0/59 archivos fuente de más de 60 KB |
Datos de entrada utilizados
| primary_language | JavaScript |
| largest_source_bytes | 23.632 |
| source_files_sampled | 59 |
| oversized_source_files | 0 |
Datos clave
0estrellas de GitHub
6contribuidores
257commits en los últimos 12 meses
4días desde el último push
50versiones publicadas
1factor bus
0issues abiertas
npmecosistemas de paquetes
Advertencias de recopilación de datos
- deps.dev does not index npm:adapt-authoring-core@3.5.0; advisories assessed against the repository dependency graph instead
- No resolved dependencies carried a version and a supported ecosystem
Más detalle
OpenSSF Scorecard 4.9 / 10
4.9agregado
Evaluación de seguridad independiente y agnóstica en cuanto a herramientas, procedente del proyecto de código abierto OpenSSF Scorecard. Cada comprobación premia una práctica de seguridad, no la herramienta de un proveedor concreto. Las comprobaciones que Scorecard no pudo determinar se marcan como n/d y se excluyen de la puntuación de seguridad (nunca se cuentan como cero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 10 | CI-Tests | 11 out of 11 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/26 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 4 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 0 | License | license file not detected |
| 10 | Maintained | 30 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10 |
| n/d | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| n/d | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
Dependencias directas 4
| Registro | Paquete | Restricción de versión | Manifiesto |
|---|---|---|---|
| npm | adapt-authoring-migrations | ^2.0.0 | package.json |
| npm | adapt-schemas | ^3.1.0 | package.json |
| npm | chalk | ^5.4.1 | package.json |
| npm | glob | ^13.0.0 | package.json |
Todas las dependencias 7
Conjunto completo de dependencias resueltas según el grafo de dependencias de GitHub: 4 paquetes directos y 3 indirectos (transitivos). El cierre transitivo es completo cuando el repositorio incluye un lockfile.
| Registro | Paquete | Versión | Relación |
|---|---|---|---|
| npm | adapt-authoring-migrations | ^2.0.0 | directa |
| npm | adapt-schemas | ^3.1.0 | directa |
| npm | chalk | ^5.4.1 | directa |
| npm | glob | ^13.0.0 | directa |
| npm | @adaptlearning/semantic-release-config | ^1.0.0 | indirecta |
| npm | fs-extra | ^11.3.4 | indirecta |
| npm | standard | ^17.1.0 | indirecta |
Avisos de dependencias sin evaluar
El cotejo de avisos no pudo ejecutarse para este informe: No resolved dependencies carried a version and a supported ecosystem
Informe JSON sin procesar legible por máquina
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 801,
"has_wiki": false,
"homepage": null,
"languages": {
"JavaScript": 165078
},
"pushed_at": "2026-07-17T11:06:40Z",
"created_at": "2018-04-28T19:19:58Z",
"owner_type": "Organization",
"updated_at": "2026-07-17T11:06:47Z",
"description": "Core module of the Adapt authoring tool",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "master",
"license_spdx_raw": null,
"primary_language": "JavaScript",
"significant_languages": [
"JavaScript"
]
},
"owner": {
"blog": "https://adaptlearning.org/",
"name": "Adapt NXT",
"type": "Organization",
"login": "adapt-security",
"company": null,
"location": "Worldwide",
"followers": 18,
"avatar_url": "https://avatars.githubusercontent.com/u/29925287?v=4",
"created_at": "2017-07-05T16:03:21Z",
"is_verified": null,
"public_repos": 45,
"account_age_days": 3303
},
"license": {
"state": "absent",
"spdx_id": null,
"raw_spdx": null,
"file_present": false,
"scorecard_found": false,
"profile_has_license": false
},
"activity": {
"releases": [
{
"tag": "v3.5.0",
"kind": "minor",
"published_at": "2026-07-17T11:06:45Z"
},
{
"tag": "v3.4.0",
"kind": "minor",
"published_at": "2026-07-08T14:02:41Z"
},
{
"tag": "v3.3.0",
"kind": "minor",
"published_at": "2026-07-06T20:13:47Z"
},
{
"tag": "v3.2.1",
"kind": "patch",
"published_at": "2026-07-01T23:11:25Z"
},
{
"tag": "v3.2.0",
"kind": "minor",
"published_at": "2026-06-24T13:09:10Z"
},
{
"tag": "v3.1.0",
"kind": "minor",
"published_at": "2026-06-20T14:12:41Z"
},
{
"tag": "v3.0.2",
"kind": "patch",
"published_at": "2026-05-21T12:29:20Z"
},
{
"tag": "v3.0.1",
"kind": "patch",
"published_at": "2026-05-09T12:18:02Z"
},
{
"tag": "v3.0.0",
"kind": "major",
"published_at": "2026-05-08T15:49:09Z"
},
{
"tag": "v2.5.0",
"kind": "minor",
"published_at": "2026-03-23T18:34:27Z"
},
{
"tag": "v2.4.3",
"kind": "patch",
"published_at": "2026-03-10T11:07:22Z"
},
{
"tag": "v2.4.2",
"kind": "patch",
"published_at": "2026-03-10T00:41:48Z"
},
{
"tag": "v2.4.1",
"kind": "patch",
"published_at": "2026-03-10T00:22:13Z"
},
{
"tag": "v2.4.0",
"kind": "minor",
"published_at": "2026-03-09T21:07:59Z"
},
{
"tag": "v2.3.1",
"kind": "patch",
"published_at": "2026-03-06T14:53:27Z"
},
{
"tag": "v2.3.0",
"kind": "minor",
"published_at": "2026-03-03T22:48:52Z"
},
{
"tag": "v2.2.4",
"kind": "patch",
"published_at": "2026-02-27T18:52:16Z"
},
{
"tag": "v2.2.3",
"kind": "patch",
"published_at": "2026-02-27T17:03:39Z"
},
{
"tag": "v2.2.2",
"kind": "patch",
"published_at": "2026-02-27T16:54:46Z"
},
{
"tag": "v2.2.1",
"kind": "patch",
"published_at": "2026-02-26T18:26:58Z"
},
{
"tag": "v2.2.0",
"kind": "minor",
"published_at": "2026-02-25T23:11:43Z"
},
{
"tag": "v2.1.4",
"kind": "patch",
"published_at": "2026-02-25T12:23:19Z"
},
{
"tag": "v2.1.3",
"kind": "patch",
"published_at": "2026-02-25T10:13:17Z"
},
{
"tag": "v2.1.2",
"kind": "patch",
"published_at": "2026-02-24T17:18:56Z"
},
{
"tag": "v2.1.0",
"kind": "minor",
"published_at": "2026-02-22T19:32:21Z"
},
{
"tag": "v2.0.0",
"kind": "major",
"published_at": "2026-02-21T15:11:42Z"
},
{
"tag": "v1.9.2",
"kind": "patch",
"published_at": "2026-02-20T23:23:14Z"
},
{
"tag": "v1.9.1",
"kind": "patch",
"published_at": "2026-02-20T21:59:58Z"
},
{
"tag": "v1.9.0",
"kind": "minor",
"published_at": "2026-02-20T02:48:49Z"
},
{
"tag": "v1.8.0",
"kind": "minor",
"published_at": "2026-02-19T23:46:50Z"
},
{
"tag": "v1.7.0",
"kind": "minor",
"published_at": "2026-02-10T15:47:48Z"
},
{
"tag": "v1.6.0",
"kind": "minor",
"published_at": "2026-02-10T01:38:37Z"
},
{
"tag": "v1.5.0",
"kind": "minor",
"published_at": "2026-02-02T14:30:55Z"
},
{
"tag": "v1.4.3",
"kind": "patch",
"published_at": "2026-01-31T12:38:30Z"
},
{
"tag": "v1.4.2",
"kind": "patch",
"published_at": "2026-01-31T12:24:41Z"
},
{
"tag": "v1.4.1",
"kind": "patch",
"published_at": "2026-01-31T11:38:44Z"
},
{
"tag": "v1.4.0",
"kind": "minor",
"published_at": "2026-01-31T11:34:13Z"
},
{
"tag": "v1.3.8",
"kind": "patch",
"published_at": "2026-01-31T11:27:28Z"
},
{
"tag": "v1.3.7",
"kind": "patch",
"published_at": "2026-01-31T11:17:17Z"
},
{
"tag": "v1.3.6",
"kind": "patch",
"published_at": "2026-01-29T19:15:19Z"
},
{
"tag": "v1.3.5",
"kind": "patch",
"published_at": "2026-01-23T19:25:26Z"
},
{
"tag": "v1.3.4",
"kind": "patch",
"published_at": "2026-01-23T17:04:15Z"
},
{
"tag": "v1.3.3",
"kind": "patch",
"published_at": "2026-01-23T15:18:35Z"
},
{
"tag": "v1.3.2",
"kind": "patch",
"published_at": "2026-01-23T01:43:04Z"
},
{
"tag": "v1.3.1",
"kind": "patch",
"published_at": "2026-01-22T12:48:47Z"
},
{
"tag": "v1.3.0",
"kind": "minor",
"published_at": "2026-01-15T10:11:53Z"
},
{
"tag": "v1.2.0",
"kind": "minor",
"published_at": "2026-01-15T09:59:37Z"
},
{
"tag": "v1.1.0",
"kind": "minor",
"published_at": "2025-11-21T15:17:39Z"
},
{
"tag": "v1.0.1",
"kind": "patch",
"published_at": "2025-11-21T15:16:49Z"
},
{
"tag": "v1.0.0",
"kind": "major",
"published_at": "2025-09-01T12:53:40Z"
}
],
"recent_commits": [
{
"oid": "1b499540b6e932412f28890e897e1d959696cb18",
"body": "# [3.5.0](https://github.com/adapt-security/adapt-authoring-core/compare/v3.4.0...v3.5.0) (2026-07-17)\n\n### Chore\n\n* remove orphaned deprecated conf migration maps (fixes #130) (#131) ([a0c5401](https://github.com/adapt-security/adapt-authoring-core/commit/a0c5401a939c7834a8c1da2d5ddd41f14b3b35b1)),\n[…]\nt/84ad0ab567b812a37fe963baf3a5b223ba5e3055)), closes [#132](https://github.com/adapt-security/adapt-authoring-core/issues/132) [#133](https://github.com/adapt-security/adapt-authoring-core/issues/133)",
"is_bot": false,
"headline": "Chore(release): 3.5.0 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-07-17T11:06:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "84ad0ab567b812a37fe963baf3a5b223ba5e3055",
"body": null,
"is_bot": false,
"headline": "Update: expose ordered, authoritative Logger.levels (fixes #132) (#133)",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-07-17T11:06:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f5ca0e4260e9a1eb0dfa7e6c05c4ff1ec3c0f07",
"body": "…s #134) (#135)",
"is_bot": false,
"headline": "New: add language-string declaration and startup coverage check (fixe…",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-07-17T11:05:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "589fe8d03db38cea6f431a7c6a221e705c476a5e",
"body": null,
"is_bot": false,
"headline": "Chore: replace legacy new.yml with direct add-to-project workflow",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-07-09T12:35:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a0c5401a939c7834a8c1da2d5ddd41f14b3b35b1",
"body": "…131)",
"is_bot": false,
"headline": "Chore: remove orphaned deprecated conf migration maps (fixes #130) (#…",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-07-08T16:14:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f0b29b0e0f9873ac841b1d309d1d8e95976cfd05",
"body": "# [3.4.0](https://github.com/adapt-security/adapt-authoring-core/compare/v3.3.0...v3.4.0) (2026-07-08)\n\n### Chore\n\n* trigger add-to-project on reopened issues and PRs ([ad92ca4](https://github.com/adapt-security/adapt-authoring-core/commit/ad92ca463c2dd966f6812db3152d25e7291450fe))\n\n### Docs\n\n* add \n[…]\nt/ad68e418a08d42860a749ce0ab05078be698426c)), closes [#128](https://github.com/adapt-security/adapt-authoring-core/issues/128) [#129](https://github.com/adapt-security/adapt-authoring-core/issues/129)",
"is_bot": false,
"headline": "Chore(release): 3.4.0 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-07-08T14:02:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ad68e418a08d42860a749ce0ab05078be698426c",
"body": null,
"is_bot": false,
"headline": "New: add favicon branding config key (fixes #128) (#129)",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-07-08T14:01:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9d7db642397eda07144197871b75bddee7cb63b2",
"body": null,
"is_bot": false,
"headline": "Docs: document CI workflows for new modules (fixes #126) (#127)",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-07-07T20:59:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad92ca463c2dd966f6812db3152d25e7291450fe",
"body": "[skip ci]",
"is_bot": false,
"headline": "Chore: trigger add-to-project on reopened issues and PRs",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-07-07T16:04:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7b828d278170f8ea78c975ad96e5521c68e3f9c5",
"body": null,
"is_bot": false,
"headline": "Docs: add cross-platform path and jsdoc type-syntax rules",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-07-07T10:35:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "89712b1f2aa0ad11011d324616cd922f2be5bac7",
"body": "# [3.3.0](https://github.com/adapt-security/adapt-authoring-core/compare/v3.2.1...v3.3.0) (2026-07-06)\n\n### Update\n\n* add loginBackground branding config key (refs #124) ([dff141f](https://github.com/adapt-security/adapt-authoring-core/commit/dff141f4169f2f8502131f2d04936068508f7304)), closes [#124]\n[…]\n4) ([70898df](https://github.com/adapt-security/adapt-authoring-core/commit/70898df379d40a3b0ef05898ce7c2f94213aeb3d)), closes [#124](https://github.com/adapt-security/adapt-authoring-core/issues/124)",
"is_bot": false,
"headline": "Chore(release): 3.3.0 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-07-06T20:13:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dff141f4169f2f8502131f2d04936068508f7304",
"body": null,
"is_bot": false,
"headline": "Update: add loginBackground branding config key (refs #124)",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-07-06T20:12:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "70898df379d40a3b0ef05898ce7c2f94213aeb3d",
"body": null,
"is_bot": false,
"headline": "Update: add projectPlaceholder branding config key (fixes #124)",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-07-06T20:12:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b0162bc597788b718c932db260fc4003d69ccd82",
"body": "## [3.2.1](https://github.com/adapt-security/adapt-authoring-core/compare/v3.2.0...v3.2.1) (2026-07-01)\n\n### Docs\n\n* Add README ([d189574](https://github.com/adapt-security/adapt-authoring-core/commit/d1895748c5a4718589639681de52ac08867d1153))\n\n### Fix\n\n* Resolve module-discovery glob safely on Wind\n[…]\n2) ([6eefcbd](https://github.com/adapt-security/adapt-authoring-core/commit/6eefcbdc73ce613a57d22a8a5789a2d4f1e9dff3)), closes [#122](https://github.com/adapt-security/adapt-authoring-core/issues/122)",
"is_bot": false,
"headline": "Chore(release): 3.2.1 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-07-01T23:11:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "91bf6c43212239801301e1ebf2d5c2cf0ffe26c4",
"body": null,
"is_bot": false,
"headline": "Fix: Resolve module-discovery glob safely on Windows (refs #122)",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-07-01T23:10:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6eefcbdc73ce613a57d22a8a5789a2d4f1e9dff3",
"body": null,
"is_bot": false,
"headline": "Fix: Use file URL for config import on Windows (fixes #122)",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-07-01T23:10:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d1895748c5a4718589639681de52ac08867d1153",
"body": null,
"is_bot": false,
"headline": "Docs: Add README",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-06-30T16:55:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "52421ce262e632288b0bac23823d61737cbfc801",
"body": "# [3.2.0](https://github.com/adapt-security/adapt-authoring-core/compare/v3.1.0...v3.2.0) (2026-06-24)\n\n### Docs\n\n* file env/workflow/tests/error-handling guides into their manual sections ([ca6a70e](https://github.com/adapt-security/adapt-authoring-core/commit/ca6a70e56edde83738c0491d8957cb66ac143d\n[…]\ncc1f77899))\n\n### Update\n\n* Extract toShortName to single-source module display names ([8312d13](https://github.com/adapt-security/adapt-authoring-core/commit/8312d13b057b24cd98baf5f96027988c50ca54a8))",
"is_bot": false,
"headline": "Chore(release): 3.2.0 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-06-24T13:09:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8312d13b057b24cd98baf5f96027988c50ca54a8",
"body": null,
"is_bot": false,
"headline": "Update: Extract toShortName to single-source module display names",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-06-24T13:08:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a9fa965c19a44094e00887a9cae03e2cc1f77899",
"body": null,
"is_bot": false,
"headline": "New: Add isModuleAvailable probe for optional dependencies",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-06-24T13:08:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ca6a70e56edde83738c0491d8957cb66ac143d98",
"body": "… sections",
"is_bot": false,
"headline": "Docs: file env/workflow/tests/error-handling guides into their manual…",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-06-22T20:50:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c857680d2ac723dfc8729ec5b9fc274dbe2c6beb",
"body": "# [3.1.0](https://github.com/adapt-security/adapt-authoring-core/compare/v3.0.2...v3.1.0) (2026-06-20)\n\n### Docs\n\n* Add module conventions (linting, testing, workflow, docs) ([eec899c](https://github.com/adapt-security/adapt-authoring-core/commit/eec899c3f5255cfc50c56b0e7ec6440e25c16880))\n* Add modu\n[…]\nt/7383fbc56f7e6eff1d9b7aec92c977d61eb2fc8b)), closes [#118](https://github.com/adapt-security/adapt-authoring-core/issues/118) [#119](https://github.com/adapt-security/adapt-authoring-core/issues/119)",
"is_bot": false,
"headline": "Chore(release): 3.1.0 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-06-20T14:12:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7383fbc56f7e6eff1d9b7aec92c977d61eb2fc8b",
"body": null,
"is_bot": false,
"headline": "New: Add app-level branding config to core (fixes #118) (#119)",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-06-20T14:12:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f03413edf112b7e79f355215857f19b0fc3e505",
"body": "…#117)",
"is_bot": false,
"headline": "Docs: Add module conventions to writing-a-module guide (fixes #116) (…",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-06-19T14:51:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eec899c3f5255cfc50c56b0e7ec6440e25c16880",
"body": null,
"is_bot": false,
"headline": "Docs: Add module conventions (linting, testing, workflow, docs)",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-06-18T14:20:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13a666e18d7efe47e6c4063ba968be9bdc99cc5c",
"body": "## [3.0.2](https://github.com/adapt-security/adapt-authoring-core/compare/v3.0.1...v3.0.2) (2026-05-21)\n\n### Fix\n\n* Harden DependencyLoader against duplicate-core and orphan timers ([5faa8d3](https://github.com/adapt-security/adapt-authoring-core/commit/5faa8d348695c2a0d9e2eeaeb4a18e5fc70b657f))",
"is_bot": false,
"headline": "Chore(release): 3.0.2 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-05-21T12:29:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5faa8d348695c2a0d9e2eeaeb4a18e5fc70b657f",
"body": "- Sort comparator no longer non-transitive when two paths both end with\n the core segment; falls through to length compare so the top-level\n node_modules copy of adapt-authoring-core wins over a nested duplicate\n (which otherwise loaded a stale errors registry and produced\n \"Cannot read properti\n[…]\n\n- The load-timeout setTimeout in loadModule is now cleared once\n onReady resolves, preventing an orphan timer from firing later and\n throwing because errors.DEP_TIMEOUT could no longer be resolved.",
"is_bot": false,
"headline": "Fix: Harden DependencyLoader against duplicate-core and orphan timers",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-05-21T11:14:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f0c015c3a7f01196ce7fb3b4761bc4be1dba5455",
"body": "## [3.0.1](https://github.com/adapt-security/adapt-authoring-core/compare/v3.0.0...v3.0.1) (2026-05-09)\n\n### Fix\n\n* Correct adapt-authoring-migrations range from ^v2.0.0 to ^2.0.0 ([b0f19f2](https://github.com/adapt-security/adapt-authoring-core/commit/b0f19f2d734936eed24bf4c8c7e47326e2445f48))",
"is_bot": false,
"headline": "Chore(release): 3.0.1 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-05-09T12:17:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b0f19f2d734936eed24bf4c8c7e47326e2445f48",
"body": null,
"is_bot": false,
"headline": "Fix: Correct adapt-authoring-migrations range from ^v2.0.0 to ^2.0.0",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-05-09T12:17:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "421b75158bf5a66ae4ff763df59f9ebb74182195",
"body": "# [3.0.0](https://github.com/adapt-security/adapt-authoring-core/compare/v2.5.0...v3.0.0) (2026-05-08)\n\n### Breaking\n\n* Replace essential module system with isFatal errors and core libraries (fixes #111) (#112) ([cec4506](https://github.com/adapt-security/adapt-authoring-core/commit/cec4506ae3a8fd6d\n[…]\n6161177aea25125b3f5993d6281da3d41c9c))\n* Use replace/remove DSL in config migrations ([77da6e2](https://github.com/adapt-security/adapt-authoring-core/commit/77da6e2a8de99f2d10dde6a367fc3e0a63aaf96c))",
"is_bot": false,
"headline": "Chore(release): 3.0.0 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-05-08T15:49:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "35d25c4c1cddaf99f89bdafeaa1a40c2520362ca",
"body": null,
"is_bot": false,
"headline": "Fix: Bump adapt-authoring-migrations to v2.0.0",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-05-08T15:48:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0bf09ef534a21d0404ff0a0258c945ad5aed0347",
"body": null,
"is_bot": false,
"headline": "Fix: Add packages:write permission to release workflow",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-05-08T14:19:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cec4506ae3a8fd6d7b9324670c14e8a52f13b396",
"body": "…e libraries (fixes #111) (#112)",
"is_bot": false,
"headline": "Breaking: Replace essential module system with isFatal errors and cor…",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-05-08T13:37:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b5f3032a0ff0356fed27d556a1781103ef2c95d3",
"body": "Previously Lang.translate would always recurse into error.${key.code}\nwhen translating an Error, which produces \"error.undefined\" in logs and\nswallows the underlying message for plain (non-AdaptError) Errors.",
"is_bot": false,
"headline": "Fix: fall back to message when translating Error without code",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-04-29T14:20:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "86ff492ac8c8fea278b167f171c0c264cea83c67",
"body": null,
"is_bot": false,
"headline": "New: support id-wide and line-level log filters (fixes #115)",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-04-27T19:27:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4e4fa073cb7cfbd87dad5870565acbb9b58440bc",
"body": "Exposes cache observability for T4 validation. Logs at verbose level\n('verbose.datacache') so they're silent in production by default.\nHits/misses counters let unit tests assert on cache behaviour without\nlog spying. Adds DataCache#get() tests covering hit, miss, expiry,\ndisabled-cache, and distinct-query cases.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add hits/misses counters and verbose logging to DataCache",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-04-23T12:10:15Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "decd8099f08aacce6838a985f55517bf215dee55",
"body": "Calls setReady with the error before process.exit(1) so that onReady\nlisteners (e.g. tests) receive the rejection before the process dies.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Handle fatal startup errors with setReady before exit",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-28T17:45:51Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "60659e6f1dfe75197176023b9316e508448c93c2",
"body": "Moves the NODE_ENV default from bin/start.js into core so all consumers get it automatically.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Default NODE_ENV to production in App constructor",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-28T17:26:05Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a708bf9264c672377ce8b57051874da8149b18bd",
"body": "…ries' into feature/isfatal-and-absorb-libraries\n\nCo-authored-by: taylortom <1059083+taylortom@users.noreply.github.com>",
"is_bot": true,
"headline": "Merge remote-tracking branch 'origin/feature/isfatal-and-absorb-libra…",
"author_name": "copilot-swe-agent[bot]",
"author_login": "Copilot",
"committed_at": "2026-03-27T20:58:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1c1d17732166635cf2fdfc24dff58a9fc2af81c7",
"body": "Agent-Logs-Url: https://github.com/adapt-security/adapt-authoring-core/sessions/772703ac-791f-4bfa-9beb-854b2c913014\n\nCo-authored-by: taylortom <1059083+taylortom@users.noreply.github.com>",
"is_bot": true,
"headline": "Fix: Correct doc issues in error-handling.md and errors.js plugin",
"author_name": "copilot-swe-agent[bot]",
"author_login": "Copilot",
"committed_at": "2026-03-27T20:57:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9548d74f5e2f4dae56202b7f63aabe7ad06dff12",
"body": "- Fix waitForModule to only reject for the specific waited-for module\n- Fix dataToMd recursive accumulator duplication in docs plugin\n- Add defaults to Config/Lang/Errors constructors for test compatibility\n- Add .catch() on Logger logHook to prevent unhandled promise rejections\n- Fix error-handling\n[…]\ntead of non-existent .load()\n- Clean up unused imports in Config tests\n- Add fs-extra as devDependency\n- Fix lint issues in App.js\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix: Address PR review feedback",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-27T20:56:50Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "5ec967f2733c4de2199c04a2cb9b262e13cacc94",
"body": "Load lang phrases from lang/<language>/<namespace>.json instead of\nlang/<language>.<namespace>.json. Plain lang/<language>.json files\nstill work for simple cases.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Refactor: Use subdirectory structure for lang files",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-27T19:48:32Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "9ddbd177bc4c5560467b7800a9cf23ff021afd77",
"body": "Previously, when any module failed to load, the moduleLoadedHook\nfired with (error, undefined), causing every pending waitForModule\npromise to reject — even for unrelated modules. This led to\nmisleading errors (e.g. reporting mongodb as failed when ui was\nthe actual failure).\n\nNow the failed module name is passed through the hook, and\nwaitForModule only rejects if the specific module being waited\nfor is the one that failed.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix: Prevent unrelated module failures from cascading via waitForModule",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-27T18:37:34Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "34e07d446cb618fb6dd76d06779fc2df378c0355",
"body": "Use [v].flat() to handle both scalar and array values in a single\ncode path.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Refactor: Normalise substituteData to avoid array branching",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-27T18:05:09Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "329001e5ea5997c483a8cde2f99d2384973a8add",
"body": null,
"is_bot": false,
"headline": "Remove unnecessary blank lines in Lang.js",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-27T18:02:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b3dddcf65db8fa130156d4ff02a5b6b2db8ce75",
"body": "Only used in one place, no need for a separate static method.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Refactor: Inline storeStrings into loadPhrases",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-27T18:01:43Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "9605f9ef5e3f27de29284a10e5227bb58cf7e4fb",
"body": "- Remove logWarn param from instance translate/translateError signatures\n to match how callers actually use them (lang, key, data)\n- Store defaultLang from config rather than requiring it per-call\n- Merge translateError into translate (handles Error keys inline)\n- Extract substituteData for readability\n- Remove static translate/translateError (instance methods are the API)\n- Pass defaultLang config value from App\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix: Simplify Lang translate API and restore missing functionality",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-27T17:58:38Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "fc3a1e0926d86bb05900fb0e1982b2ce5f4b2c47",
"body": "Config schemas lack $id, causing AJV \"already exists\" collisions\nwhen multiple schemas compile into the same validator instance.\nAdds a temporary workaround to set $id from the module name until\nconfig schemas define their own. Also logs non-file-not-found schema\nerrors instead of swallowing them silently.\n\nSee https://github.com/adapt-security/adapt-authoring-jsonschema/issues/66\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix: Set $id on config schemas and log schema errors",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-27T15:38:07Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "255892333a028e24296e96ea312edab8e2f829ed",
"body": "Move instance variable definitions into init() to fix race condition where\nsuper() triggers init() before constructor body runs. Make Config, Errors,\nand Lang use consistent constructor patterns with shared options object.\nConvert Errors and Lang to synchronous. Use log function instead of logger\ninstance across all libraries.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Refactor bootstrap libraries for consistency and fix init race condition",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-27T12:59:32Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2823e33ae15b53096b33aebdcc09f728b9a790c3",
"body": "All App tests rely on App.instance which triggers a real boot,\nmaking them integration tests rather than unit tests.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Update: Move App tests to integration test repo",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-27T11:28:53Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "adb6d47fac37a4e2cd3a852d169ee30d4be5420b",
"body": "- Add adapt-authoring-migrations as dependency, static import\n- Remove tests for removed methods (logError, getConfig,\n getPhrasesForLang, colourise, getDateStamp, setReady/_isStarting)\n- Update DependencyLoader tests to use AdaptError codes\n- Update Config storeUserSettings test for new signature\n- Update getArgs tests for util.parseArgs shape\n- Fix lint: remove padded block in DependencyLoader\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix: Update tests and deps for refactored code",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-27T11:28:01Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "79150540a22758709179090052157697c1df044c",
"body": "- Replace lodash _.isFunction with typeof check\n- Replace lodash _.cloneDeep with native structuredClone\n- Replace minimist with native util.parseArgs\n- fs-extra was already unused after readJson util was added\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Update: Remove fs-extra, lodash, and minimist dependencies",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-27T10:42:04Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a1157b11631eecb468d06a63f8e203d8f002d168",
"body": "Replace plain Error throws in DependencyLoader with AdaptError\ndefinitions: DEP_ALREADY_LOADED, DEP_FAILED, DEP_INVALID_EXPORT,\nDEP_MISSING, DEP_NO_ONREADY, DEP_TIMEOUT.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "New: Add error definitions for dependency loading",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-27T10:38:25Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "8f3faa6aa86ef4d4b4989e98ea1305ce2d012c2e",
"body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Update: Remove DependencyLoader.getConfig, use app.getConfig",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-27T10:34:25Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ed6654e89eff2c162f7b3eee463148c6f0455b9a",
"body": "- Replace lodash _.isFunction with typeof checks\n- Replace fs-extra with core readJson util\n- Combine two sorts in loadConfigs into one\n- Use Object.fromEntries for init times\n- Lazy-create DependencyError in waitForModule\n- Remove eslint directive and cosmetic cleanup\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Update: Streamline DependencyLoader",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-27T10:33:05Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "fd5c11876a4969c2cb192d7496b7e9c04d8ff18d",
"body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Update: Remove logError, use log('error', ...) directly",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-27T10:29:57Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "bcb16d3070690e5348402fa05ea4cb25a7ed7a42",
"body": "- Use instanceof Error instead of constructor name string check\n- Use fs.readFile with utf8 encoding directly\n- Remove getPhrasesForLang (callers can use phrases[lang] directly)\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Update: Streamline Lang internals",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-27T10:27:52Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "390e0dc656490a1684b9c312217cf25e16d3e1b1",
"body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Update: Inline runMigrations into init(), use static import",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-27T10:19:00Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "62ea7f659219a876dcf9846ef5c80ef6b513aeaf",
"body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Update: Pass configFilePath to migrations, let it read the file",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-27T10:16:40Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "b35bbffe1bc5485a2ff1af57cacbff9f8bb561d6",
"body": "Config file path is now determined once in App.init() and shared\nwith both the migrations runner and Config.load(). Config.load()\naccepts a named options object instead of positional params.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Update: Calculate config file path in App, pass to Config and migrations",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-27T10:15:07Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "8af4108a16b83e16dd7d87d7da8b2a3f9cdd4ab7",
"body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Update: Use Error cause option parameter",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-27T10:06:08Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "bf636e7dd9f8fb88f315c3f76211bb46087f013b",
"body": "start() was only called from init() and added no value as a\nseparate method.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Update: Merge start() into init()",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-27T10:01:44Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "cd84b9e50af2ec40dcb6ceba8267bfd6e62d644d",
"body": "- Move app, args, dependencyloader setup to constructor\n- Inline loadLibraries into start()\n- Move verbose DIR/GIT logs to end of start()\n- Simplify init() to just error handling and failed module reporting\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Update: Restructure App init/start lifecycle",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-27T09:59:17Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "0675effbd7d926b0cb8972a8250e60a28c1875b0",
"body": "rootDir is determined by cwd/ROOT_DIR env var at construction time.\nAllowing config to override it after the fact is circular — config,\ndependencies, and metadata have already been loaded using the\noriginal rootDir by this point.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Update: Remove config override of rootDir",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-27T09:55:41Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "c461f62ce2ba10d05bb602bded424b0138853269",
"body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Update: Move config file path log into Config.load()",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-27T09:51:35Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1172817d456a28a5e198adfcbe17f6d174114761",
"body": "The _isReady check is sufficient to guard against double-start.\nThe setReady override was only resetting _isStarting.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Update: Remove redundant _isStarting flag and setReady override",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-27T09:47:39Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "b05d15aa27ed48624807b8bdad61e28af23bf78c",
"body": "Merge load() into loadModules() by defaulting the modules parameter\nto all configured dependencies. App.start() now calls loadModules()\ndirectly.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Update: Remove redundant DependencyLoader.load() wrapper",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-27T09:38:43Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "26a88b11fc024c2a9fb61dd6663a2b0ec951b5a1",
"body": "- Simplify getModuleOverrides with filter/startsWith\n- Inline colourise and getDateStamp into log method\n- Merge early returns in log method\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Update: Streamline Logger internals",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-27T09:30:27Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "de655db20e14f84552de584c3a3871380affdb4c",
"body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Update: Simplify Logger constructor with static level colour map",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-27T09:27:39Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f6126161177aea25125b3f5993d6281da3d41c9c",
"body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Update: Use getConfig() for core config access in App",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-27T09:24:17Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "7979b165e1d75718bf240e46f46f5460cb4ee41c",
"body": "Create Logger with defaults at the start of App.start(), before\nloadConfigs/migrations/loadLibraries. Config and migrations now\nuse the logger instead of raw console.log + chalk. Logger is\nreconfigured with user settings once Config is loaded.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Update: Initialise Logger early so all boot phases can use it",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-27T09:22:01Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "7e52b4041e021537c96071e517fd1fc9d6b311ae",
"body": "- Call runMigrations() in App.start() between loadConfigs() and\n loadLibraries(), so config migrations run before schema validation\n- Fix Schemas().init() not being called in Config.storeSchemaSettings(),\n which caused all schema defaults to be silently skipped\n- Improve config validation error formatting with chalk colours\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix: Run migrations at boot, fix schema defaults, improve config errors",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-27T00:45:41Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "45ac51c2830376681f7761b2a10a846618aceb8d",
"body": "Adds resolveDirectory() to Config which handles $ROOT, $DATA, $TEMP\nvariable substitution. This was previously done by jsonschema's\nisDirectory keyword, but config now loads before jsonschema.\nJsonSchemaModule's isDirectory keyword now delegates to this method.",
"is_bot": false,
"headline": "Fix: Resolve directory path variables in Config",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-26T18:18:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e8a7c563b67674afa15dede4866675b221d67e6f",
"body": null,
"is_bot": false,
"headline": "Fix: Remove blank line padding in test block",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-26T16:47:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b21ccacd3a0655785122c9d7ec94ef1840c4cc48",
"body": null,
"is_bot": false,
"headline": "Docs: Add developer workflow guide (#108)",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-26T16:40:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "77da6e2a8de99f2d10dde6a367fc3e0a63aaf96c",
"body": null,
"is_bot": false,
"headline": "Update: Use replace/remove DSL in config migrations",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-26T15:23:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "917c49bd0fb091d3df46ac90a19fa6c5ce645dc5",
"body": null,
"is_bot": false,
"headline": "Simplify config migration",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-26T15:09:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0db6a9db0668578850e5f9c314a295dee250d00e",
"body": null,
"is_bot": false,
"headline": "Update: Simplify config migrations to use where/mutate DSL",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-26T15:00:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "54bbd5887fc1f2de2d9d3a2d87076d3a24b20bd5",
"body": "Migrates config keys from their old module sections to adapt-authoring-core:\n- adapt-authoring-logger.levels → adapt-authoring-core.logLevels\n- adapt-authoring-logger.showTimestamp → adapt-authoring-core.showLogTimestamp\n- adapt-authoring-logger.mute → removed\n- adapt-authoring-logger.dateFormat → removed\n- adapt-authoring-lang.defaultLang → adapt-authoring-core.defaultLang",
"is_bot": false,
"headline": "New: Add config migrations for absorbed logger and lang modules",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-26T14:48:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6da2b2faa30c8f4fc66c20a5fd3fac7659f1ceb0",
"body": "Config deprecation warnings are superseded by the migrations module's\nnew conf migration type, which can actually rewrite config files\nrather than just warning about stale keys.",
"is_bot": false,
"headline": "Update: Remove checkDeprecatedConfig in favour of migrations module",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-26T14:28:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a7b4c592a727cb555d3449738661788c76b96fc3",
"body": null,
"is_bot": false,
"headline": "Chore: Merge docs and doc plugins from config and errors modules",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-26T13:28:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a8a982643412e8704e476de859fda7a5ca94cd50",
"body": "…rs this",
"is_bot": false,
"headline": "Update: Remove _fatal from deprecated config — schema validation cove…",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-26T12:56:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b18db7e3f8c532e63fa3bd7218ac99f45e823d99",
"body": "Modules can define conf/deprecated.json to map old config keys to new\nones. Supports _module (check a different module section) and _fatal\n(throw instead of warn). Core includes deprecation files for absorbed\nlogger and lang modules.",
"is_bot": false,
"headline": "New: Generic deprecated config key detection via conf/deprecated*.json",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-26T12:53:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "18f646f78882c3928fc7fbcc88b728893c6b71f2",
"body": null,
"is_bot": false,
"headline": "Update: Rename logger config keys to logLevels and showLogTimestamp",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-26T12:32:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce1f3e1b9b397f704593b173057e36fc87ff0a6f",
"body": "Empty loggerLevels array now implies mute. Removes loggerMute and\nloggerDateFormat config options. Timestamps always use ISO format.",
"is_bot": false,
"headline": "Update: Simplify logger config — remove mute and dateFormat options",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-26T12:30:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d76ecd5b045cdc2dfa9fe4506ce888924fce54e4",
"body": "Merges all error JSON and config schema properties from the absorbed\nmodules (errors, config, lang, logger) into core. Logger config keys\nuse loggerX prefix (e.g. loggerLevels, loggerMute). Lang defaultLang\nincluded as-is.",
"is_bot": false,
"headline": "Update: Merge error definitions and config schemas from absorbed modules",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-26T12:26:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ff188765ca5e6bbeaf62950a0413a7e137d89ad",
"body": "…p libraries\n\nAbsorbs config, logger, errors, and lang into core as bootstrap libraries\nloaded before any modules initialise. Replaces the two-phase essential/\nnon-essential loading with single-pass loading where any error can be\nmarked isFatal in its JSON definition to halt the app. waitForModule\nhandles all load ordering.",
"is_bot": false,
"headline": "New: Replace essential module system with isFatal errors and bootstra…",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-26T12:19:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e8db778648e37462b1c577b869f2d4ff2d547aa3",
"body": null,
"is_bot": false,
"headline": "Chore: Use shared semantic-release config",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-26T12:00:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "66068f1af0c8c52dc8e235ed83dd5c19c778b700",
"body": "# [2.5.0](https://github.com/adapt-security/adapt-authoring-core/compare/v2.4.3...v2.5.0) (2026-03-23)\n\n### New\n\n* Move DataCache from api to core for wider reuse ([d7bf11e](https://github.com/adapt-security/adapt-authoring-core/commit/d7bf11e695af62c381e48bdcb1e5eb3af104a2cc))",
"is_bot": false,
"headline": "chore(release): 2.5.0 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-03-23T18:34:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d7bf11e695af62c381e48bdcb1e5eb3af104a2cc",
"body": null,
"is_bot": false,
"headline": "New: Move DataCache from api to core for wider reuse",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-23T18:33:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3dfec8bd54db665d77c0eda710cd468980593f7f",
"body": null,
"is_bot": false,
"headline": "Delete package-lock.json",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-14T12:25:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f34c98377e728d08d3b6c14a113b79abecd775c",
"body": "## [2.4.3](https://github.com/adapt-security/adapt-authoring-core/compare/v2.4.2...v2.4.3) (2026-03-10)\n\n### Fix\n\n* Sort dependency list alphabetically in licensing docs ([42b7b27](https://github.com/adapt-security/adapt-authoring-core/commit/42b7b27ba8639aa3b6c0eee9b39faefe72f7ea85))",
"is_bot": false,
"headline": "chore(release): 2.4.3 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-03-10T11:07:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "42b7b27ba8639aa3b6c0eee9b39faefe72f7ea85",
"body": null,
"is_bot": false,
"headline": "Fix: Sort dependency list alphabetically in licensing docs",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-10T11:06:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8bf56ea30fcbdc93a48fb6e630c6b422875fb8b5",
"body": null,
"is_bot": false,
"headline": "Reorder workflows array in getWorkflowBadges",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-10T10:21:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eb7206b93297e95649287563f7a2addcd9306754",
"body": "## [2.4.2](https://github.com/adapt-security/adapt-authoring-core/compare/v2.4.1...v2.4.2) (2026-03-10)\n\n### Fix\n\n* Left-align status badges in core modules docs table ([37bba4f](https://github.com/adapt-security/adapt-authoring-core/commit/37bba4f92f0014acac6bac00fd1509e3ff8323b1))",
"is_bot": false,
"headline": "chore(release): 2.4.2 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-03-10T00:41:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "37bba4f92f0014acac6bac00fd1509e3ff8323b1",
"body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix: Left-align status badges in core modules docs table",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-10T00:41:16Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "46dba9871fa8c81a32e7831ffaedfbc502323400",
"body": "## [2.4.1](https://github.com/adapt-security/adapt-authoring-core/compare/v2.4.0...v2.4.1) (2026-03-10)\n\n### Fix\n\n* Use original scoped package name for dynamic imports (fixes #104) ([c3f86b5](https://github.com/adapt-security/adapt-authoring-core/commit/c3f86b540967e3d26bab622e718eea2bde78c90d)), closes [#104](https://github.com/adapt-security/adapt-authoring-core/issues/104)",
"is_bot": false,
"headline": "chore(release): 2.4.1 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-03-10T00:22:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c3f86b540967e3d26bab622e718eea2bde78c90d",
"body": null,
"is_bot": false,
"headline": "Fix: Use original scoped package name for dynamic imports (fixes #104)",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-10T00:21:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe864b078e3976dffa226a802ebcd88c1a5cade6",
"body": "# [2.4.0](https://github.com/adapt-security/adapt-authoring-core/compare/v2.3.1...v2.4.0) (2026-03-09)\n\n### Fix\n\n* Strip npm scope from package names in DependencyLoader (fixes #104) ([63edc49](https://github.com/adapt-security/adapt-authoring-core/commit/63edc49d0f51ceb3a8bcc8207f9115ca2859a0e2)), \n[…]\nhoring-core/issues/104)\n\n### Update\n\n* Add releases workflow badge to generated docs ([7262ed0](https://github.com/adapt-security/adapt-authoring-core/commit/7262ed0bd9fbc23b143e912eae9a32454c926aa1))",
"is_bot": false,
"headline": "chore(release): 2.4.0 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-03-09T21:07:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7262ed0bd9fbc23b143e912eae9a32454c926aa1",
"body": null,
"is_bot": false,
"headline": "Update: Add releases workflow badge to generated docs",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-09T21:07:28Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 50,
"commits_last_year": 257,
"latest_release_at": "2026-07-17T11:06:45Z",
"latest_release_tag": "v3.5.0",
"releases_from_tags": false,
"days_since_last_push": 4,
"active_weeks_last_year": 30,
"days_since_latest_release": 4,
"mean_days_between_releases": 12.9
},
"community": {
"has_readme": true,
"has_license": false,
"has_description": true,
"has_contributing": true,
"health_percentage": 50,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "adapt-authoring-core",
"exists": true,
"license": "GPL-3.0",
"keywords": [],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/adapt-authoring-core",
"is_deprecated": false,
"latest_version": "3.5.0",
"repository_url": "https://github.com/adapt-security/adapt-authoring-core",
"versions_count": 52,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 2,
"monthly_downloads": 3371,
"first_published_at": "2025-08-26T13:27:04.192000Z",
"latest_published_at": "2026-07-17T11:06:43.872000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 4
}
]
},
"popularity": {
"forks": 1,
"stars": 0,
"watchers": 0,
"fork_history": {
"days": [
{
"date": "2020-01-14",
"count": 1
}
],
"complete": true,
"collected": 1,
"total_forks": 1
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0
},
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 23632,
"source_files_sampled": 59,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": "No resolved dependencies carried a version and a supported ecosystem",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 7,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "adapt-authoring-migrations",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^2.0.0"
},
{
"name": "adapt-schemas",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^3.1.0"
},
{
"name": "chalk",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^5.4.1"
},
{
"name": "glob",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^13.0.0"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "adapt-authoring-migrations",
"direct": true,
"version": "^2.0.0",
"ecosystem": "npm"
},
{
"name": "adapt-schemas",
"direct": true,
"version": "^3.1.0",
"ecosystem": "npm"
},
{
"name": "chalk",
"direct": true,
"version": "^5.4.1",
"ecosystem": "npm"
},
{
"name": "glob",
"direct": true,
"version": "^13.0.0",
"ecosystem": "npm"
},
{
"name": "@adaptlearning/semantic-release-config",
"direct": false,
"version": "^1.0.0",
"ecosystem": "npm"
},
{
"name": "fs-extra",
"direct": false,
"version": "^11.3.4",
"ecosystem": "npm"
},
{
"name": "standard",
"direct": false,
"version": "^17.1.0",
"ecosystem": "npm"
}
],
"collected": true,
"truncated": false,
"total_count": 7,
"direct_count": 4,
"indirect_count": 3
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 58,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 49,
"closed_unmerged_prs": 27
},
"bus_factor": 1,
"bot_contributors": 2,
"top_contributors": [
{
"type": "User",
"login": "taylortom",
"commits": 756,
"avatar_url": "https://avatars.githubusercontent.com/u/1059083?v=4"
},
{
"type": "User",
"login": "semantic-release-bot",
"commits": 48,
"avatar_url": "https://avatars.githubusercontent.com/u/32174276?v=4"
},
{
"type": "User",
"login": "tomgreenfield",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/922987?v=4"
},
{
"type": "User",
"login": "joe-allen-89",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/85872286?v=4"
},
{
"type": "User",
"login": "chris-steele",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/1228225?v=4"
},
{
"type": "User",
"login": "iklemm",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/25085323?v=4"
}
],
"contributors_sampled": 6,
"top_contributor_share": 0.933
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"addtoproject.yml",
"releases.yml",
"standardjs.yml",
"tests.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "11 out of 11 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/26 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 4 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 0,
"reason": "license file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "1b499540b6e932412f28890e897e1d959696cb18",
"ran_at": "2026-07-22T10:35:59Z",
"aggregate_score": 4.9,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": null,
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-17T11:06:05Z",
"ci_last_conclusion": null,
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/adapt-security/adapt-authoring-core",
"host": "github.com",
"name": "adapt-authoring-core",
"owner": "adapt-security"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 62,
"inputs": {
"security": 49,
"vitality": 91,
"community": 33,
"governance": 63,
"engineering": 67
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 91,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"commits_last_year": 257,
"human_commit_share": 0.98,
"days_since_last_push": 4,
"active_weeks_last_year": 30
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 4 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 4
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "30/52 weeks with commits",
"points": 20.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 30
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "257 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 257
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 50,
"latest_release_tag": "v3.5.0",
"releases_from_tags": false,
"days_since_latest_release": 4,
"mean_days_between_releases": 12.9
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "50 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 50
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 4 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 4
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~12.9 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 12.9
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 4,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 4 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 4
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 33,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 1,
"stars": 0,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "1 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 1
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 52,
"inputs": {
"has_readme": true,
"has_license": false,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "no license file detected",
"points": 0,
"status": "missed",
"details": [
{
"code": "license_absent",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 59,
"inputs": {
"packages": [
"adapt-authoring-core"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 3371
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "3,371 downloads/month across npm",
"points": 47,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 3371,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 63,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 29,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 6,
"top_contributor_share": 0.933
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 93% of commits",
"points": 1.5,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 93
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "6 contributors",
"points": 8.1,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 6
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 4 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 73,
"inputs": {
"merged_prs": 58,
"open_issues": 0,
"closed_issues": 49,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 27
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 46.8,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "58/85 decided PRs merged",
"points": 26.1,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 58,
"decided": 85
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/26 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 63,
"inputs": {
"followers": 18,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "adapt-security",
"public_repos": 45,
"account_age_days": 3303
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "18 followers of adapt-security",
"points": 9.2,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 18,
"login": "adapt-security"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "45 public repos, account ~9 yr old",
"points": 24.1,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 45
}
},
{
"code": "account_age_years",
"params": {
"years": 9
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"adapt-authoring-core"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 4
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 4 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 4
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "52 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 52
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 67,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "4 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 4
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "11 out of 11 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 49,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 49,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 4.9
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "11 out of 11 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/26 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 4 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 10 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 8
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "at_risk",
"name": "AI Readiness",
"value": 37,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 34,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.633,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "62 of 98 human commits state their intent (structured subject or explanatory body)",
"points": 33.7,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 62,
"sampled": 98
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 32,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0.35,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "35 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 35,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"primary_language": "JavaScript",
"largest_source_bytes": 23632,
"source_files_sampled": 59,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "JavaScript without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "JavaScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/59 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 59,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"deps.dev does not index npm:adapt-authoring-core@3.5.0; advisories assessed against the repository dependency graph instead",
"No resolved dependencies carried a version and a supported ecosystem"
],
"report_type": "repository",
"generated_at": "2026-07-22T10:36:14.108400Z",
"schema_version": "0.26.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/adapt-security/adapt-authoring-core.svg",
"full_name": "adapt-security/adapt-authoring-core",
"license_state": "absent",
"license_spdx": null
}Las puntuaciones son señales, no garantías. Reflejan prácticas públicamente visibles en GitHub; no son una auditoría de código ni una garantía de seguridad.
Los datos ausentes se excluyen y los pesos se renormalizan; nunca se puntúan como cero. La metodología es versionada y abierta: métricas v1.13.0, esquema v0.26.0 — metodología completa · wiki de métricas.
Cómo se sitúa un resultado dentro del registro general: estadísticas agregadas — npm.