Registro público
Informe de salud del softwareesquema 0.27.0 · métricas 1.13.0 · 2026-07-29 00:50 UTC

akomyagin / gitl

AI-powered git history CLI + GitHub Action: PR risk-scored reviews, changelogs, multi-repo digests

GoMIT★ 0 estrellas⑂ 0 forksdesde jul 2026Ver en GitHub ↗

akomyagin/gitl tiene un índice de salud de 53 sobre 100, lo que lo sitúa en la banda Moderado. Su puntuación más alta es Vitality (74/100) y la más baja, Community & Adoption (30/100). Se actualizó por última vez hace 2 días. Una sola persona concentra la mayor parte del trabajo reciente.

53
global / 100
Moderado

Índice de salud del software

Las métricas se agrupan en categorías ponderadas sobre una escala de 1 a 100. El resultado global parte de su media; cuando la evidencia pública activa la Política de Jurisdicciones de Alto Riesgo, la calificación se ajusta y recibe el límite 49 (En riesgo). Preparación para IA queda fuera.

53
Excelente85-100Ejemplar; cumple prácticamente todos los criterios evaluados
Bueno70-84Saludable; carencias menores
Moderado50-69Aceptable con carencias notables; se recomienda revisión
En riesgo30-49Debilidades significativas; su adopción exige cautela
Crítico1-29Problemas graves (proyecto abandonado, un solo mantenedor, sin higiene)
VitalidadComunidad yAdopciónSostenibilidady GobernanzaCalidad deIngenieríaSeguridadPreparaciónpara IA

Perfil de puntuación

Cada eje es una categoría. La forma importa más que la media: un proyecto sano llena toda la figura, mientras que un perfil de picos y cráteres indica que la fortaleza en una dimensión enmascara el riesgo en otra.

Titularidad

akomyaginCuenta personal
4 seguidores24 repositorios públicosdesde oct 2013

Este repositorio pertenece a una cuenta personal. Un proyecto con un único propietario conlleva más riesgo de continuidad que uno respaldado por una organización.

Ecosistemas de paquetes

RegistroPaqueteVersiónDescargas / mesVersionesÚltima publicaciónEtiquetas
Gogithub.com/akomyagin/gitlv0.6.2-15hace 2 días—
npmgitl-cli0.6.26617hace 2 díasgitaicode-reviewchangelogclillm

Métricas por categoría

Vitalidad

¿Está vivo el proyecto: se escribe código y se publican versiones?

74Bueno · 22% del índice global

Actividad de desarrollo

57Moderado
Cómo se puntúa
36/36Recencia de push — último push hace 2 días
2.8/36Cadencia de commits — 4/52 semanas con commits
18/18Volumen de commits — 179 commits en el último año
0/10OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully
Datos de entrada utilizados
commits_last_year179
human_commit_share1
days_since_last_push2
active_weeks_last_year4

Disciplina de publicación

100Excelente
Cómo se puntúa
27/27Publica versiones — 15 versiones publicadas
36/36Recencia de las versiones — última versión hace 2 días
27/27Cadencia de publicación — una versión cada ~0,7 días
10/10OpenSSF Scorecard: Signed-Releases — 5 out of the last 5 releases have a total of 10 signed artifacts.
Datos de entrada utilizados
releases_count15
latest_release_tagv0.6.2
releases_from_tagsno
days_since_latest_release2
mean_days_between_releases0,7

Comunidad y Adopción

¿Tiene el proyecto usuarios, descargas, atención y unas condiciones acogedoras para quienes contribuyen?

30En riesgo · 18% del índice global

Popularidad y adopción

1Crítico
Cómo se puntúa
0/60Estrellas — 0 estrellas
0/25Forks — 0 forks
0/15Observadores — 0 observadores
Datos de entrada utilizados
forks0
stars0
watchers0
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history

Salud de la comunidad

50Moderado
Cómo se puntúa
22.5/22.5README
22.5/22.5Licencia — licencia reconocida (MIT)
0/18Guía CONTRIBUTING
0/13.5Código de conducta
0/7.2Plantilla de issues
0/6.3Plantilla de PR
Datos de entrada utilizados
has_readmesí
has_licensesí
has_contributingno
has_issue_templateno
has_code_of_conductno
has_pull_request_templateno

Adopción en el ecosistema (descargas)

47En riesgo
Cómo se puntúa
37.6/80Descargas mensuales — 661 descargas/mes en go, npm
0/20Dependientes en el registro — no lo informa este ecosistema
Datos de entrada utilizados
packagesgithub.com/akomyagin/gitl, gitl-cli
dependents—
ecosystemsgo, npm
total_downloads—
monthly_downloads661
Excluidos de la puntuación (sin datos o no aplicable): Dependientes en el registro. Los pesos restantes se han renormalizado.

Sostenibilidad y Gobernanza

¿Sobrevivirá el proyecto a sus personas: factor bus, capacidad de respuesta, quién lo respalda y mantenimiento del paquete?

52Moderado · 24% del índice global

Resiliencia de mantenedores (factor bus)

10Crítico
Cómo se puntúa
9/54Factor bus — la mitad de los commits recae en 1 contribuyente(s)
0/22.5Distribución de commits — el principal contribuyente firma el 100% de los commits
1.4/13.5Amplitud de contribuyentes — 1 contribuyentes
0/10OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0
Datos de entrada utilizados
bus_factor1
contributors_sampled1
top_contributor_share1

Capacidad de respuesta a issues y PR

71Bueno
Cómo se puntúa
0/46.8Resolución de issues — sin issues o sin datos
37.8/38.3Aceptación de PR — 81/82 PR decididos fusionados
0/15OpenSSF Scorecard: Code-Review — Found 0/19 approved changesets -- score normalized to 0
Datos de entrada utilizados
merged_prs81
open_issues0
closed_issues0
issue_closed_ratio—
closed_unmerged_prs1
Excluidos de la puntuación (sin datos o no aplicable): Resolución de issues. Los pesos restantes se han renormalizado.

Propiedad y custodia

47En riesgo
Cómo se puntúa
10/30Respaldo de la propiedad — cuenta personal (usuario)
0/20Dominio verificado — no aplicable a cuentas de usuario
5/25Alcance del propietario — 4 seguidores de akomyagin
22.2/25Trayectoria — 24 repos públicos, cuenta de ~12 años
Datos de entrada utilizados
followers4
owner_typeUser
is_verified—
owner_loginakomyagin
public_repos24
account_age_days4661
Excluidos de la puntuación (sin datos o no aplicable): Dominio verificado. Los pesos restantes se han renormalizado.

Mantenimiento de paquetes

100Excelente
Cómo se puntúa
25/25Publicado y resoluble — 2 paquete(s) en go, npm
35/35Recencia de publicación — última publicación hace 2 días
20/20Historial de versiones — 15 versiones en el registro
20/20No obsoleto — activo, ni obsoleto ni retirado
Datos de entrada utilizados
packagesgithub.com/akomyagin/gitl, gitl-cli
ecosystemsgo, npm
any_deprecatedno
min_days_since_publish2

Calidad de Ingeniería

¿Existen unas prácticas mínimas de ingeniería y documentación?

61Moderado · 20% del índice global

Prácticas de ingeniería

68Moderado
Cómo se puntúa
24/24Flujos de trabajo de CI — 3 flujo(s) de trabajo
24/24Pruebas presentes
0/16Configuración de linter
0/9.6Hooks de pre-commit
0/6.4.editorconfig
20/20OpenSSF Scorecard: CI-Tests — 19 out of 19 merged PRs checked by a CI test -- score normalized to 10
Datos de entrada utilizados
has_cisí
has_testssí
has_editorconfigno
has_linter_configno
has_precommit_configno

Documentación

50Moderado
Cómo se puntúa
30/30README
0/25Directorio de documentación
0/15Sitio de documentación / página del proyecto
10/10Descripción del repositorio
0/10Topics
10/10Wiki
Datos de entrada utilizados
topics—
has_wikisí
homepage—
has_readmesí
has_docs_dirno
has_descriptionsí

Seguridad

¿Son sólidas las prácticas visibles de seguridad y de cadena de suministro, sin exposición jurisdiccional de alto riesgo sin resolver?

41En riesgo · 16% del índice global

Postura de seguridad

41En riesgo
Cómo se puntúa
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — branch protection not enabled on development/release branches
2.5/2.5CI-Tests — 19 out of 19 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 0/19 approved changesets -- score normalized to 0
0/2.5Contributors — project has 0 contributing companies or organizations -- score normalized to 0
10/10Dangerous-Workflow — no dangerous workflow patterns detected
0/7.5Dependency-Update-Tool — no update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5Licencia — license file detected
0/7.5Maintained — project was created within the last 90 days. Please review its contents carefully
5/5Packaging — packaging workflow detected
2/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 4
0/5SAST — SAST tool is not run on all commits -- score normalized to 0
0/5Security-Policy — security policy file not detected
7.5/7.5Signed-Releases — 5 out of the last 5 releases have a total of 10 signed artifacts.
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
6/7.5Vulnerabilities — 2 existing vulnerabilities detected
Datos de entrada utilizados
sourceopenssf_scorecard
checks_evaluated18
scorecard_versionv5.5.0
checks_inconclusive0
scorecard_aggregate4,1

Preparación para IA

¿Hasta qué punto está el repositorio preparado para desarrollarse y mantenerse con agentes de codificación de IA? Es una insignia independiente y experimental — peso 0,0, de modo que se presenta por separado y no afecta a la puntuación de salud global.

65Moderado · 0% del índice global

Contexto y guía para agentes

40En riesgo
Cómo se puntúa
0/45Instrucciones para agentes — sin CLAUDE.md / AGENTS.md / reglas de editor
0/15Documentación legible por máquinas (llms.txt)
40/40Historial de commits legible — 100 de 100 commits humanos declaran su intención (asunto estructurado o cuerpo explicativo)
Datos de entrada utilizados
has_llms_txtno
legible_history_share1
agent_instruction_files—
agent_instruction_max_bytes—

Bucle de verificación (compilación / pruebas / verificación de tipos)

70Bueno
Cómo se puntúa
12.6/18Arranque con un solo comando — go.mod (convención del toolchain, sin ejecutor de tareas)
22/22Pruebas automatizadas
0/11Configuración de lint / formato
11/11Verificación estática de tipos — Go (tipado estático)
10/10Entorno reproducible — Dockerfile, lockfile
10/10Práctica demostrada con agentes — 57 de los últimos 100 commits con autoría o crédito de agente
0/8Mantenimiento automatizado — no se observan actualizaciones automáticas de dependencias
4/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 4
Datos de entrada utilizados
has_nixno
has_testssí
lockfilesgo.sum
has_dockerfilesí
typed_languagesí
bootstrap_files—
has_devcontainerno
has_linter_configno
typecheck_configs—
agent_commit_share0,57
toolchain_manifestsgo.mod
dependency_bot_commit_share0

Legibilidad del código para modelos

100Excelente
Cómo se puntúa
45/45Código verificable por tipos — Go (tipado estático)
55/55Tamaños de archivo manejables — 0/103 archivos fuente de más de 60 KB
Datos de entrada utilizados
primary_languageGo
largest_source_bytes35.732
source_files_sampled103
oversized_source_files0

Datos clave

0estrellas de GitHub
1contribuidores
179commits en los últimos 12 meses
2días desde el último push
15versiones publicadas
1factor bus
0issues abiertas
Go, npmecosistemas de paquetes

Advertencias de recopilación de datos

  • GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

Más detalle

OpenSSF Scorecard 4.1 / 10
4.1agregado

Evaluación de seguridad independiente y agnóstica en cuanto a herramientas, procedente del proyecto de código abierto OpenSSF Scorecard. Cada comprobación premia una práctica de seguridad, no la herramienta de un proveedor concreto. Las comprobaciones que Scorecard no pudo determinar se marcan como n/d y se excluyen de la puntuación de seguridad (nunca se cuentan como cero).Scorecard v5.5.0 · 2026-07-29 00:50 UTC

10Binary-Artifactsno binaries found in the repo
0Branch-Protectionbranch protection not enabled on development/release branches
10CI-Tests19 out of 19 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 0/19 approved changesets -- score normalized to 0
0Contributorsproject has 0 contributing companies or organizations -- score normalized to 0
10Dangerous-Workflowno dangerous workflow patterns detected
0Dependency-Update-Toolno update tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
0Maintainedproject was created within the last 90 days. Please review its contents carefully
10Packagingpackaging workflow detected
4Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 4
0SASTSAST tool is not run on all commits -- score normalized to 0
0Security-Policysecurity policy file not detected
10Signed-Releases5 out of the last 5 releases have a total of 10 signed artifacts.
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
8Vulnerabilities2 existing vulnerabilities detected
Dependencias directas 9
RegistroPaqueteRestricción de versiónManifiesto
Gogithub.com/charmbracelet/bubbleteav1.2.4go.mod
Gogithub.com/charmbracelet/lipglossv1.0.0go.mod
Gogithub.com/creack/ptyv1.1.24go.mod
Gogithub.com/muesli/termenvv0.16.0go.mod
Gogithub.com/spf13/cobrav1.8.1go.mod
Gogithub.com/spf13/pflagv1.0.5go.mod
Gogithub.com/spf13/viperv1.19.0go.mod
Gogolang.org/x/syncv0.9.0go.mod
Gogolang.org/x/termv0.18.0go.mod
Todas las dependencias no recopilado

No fue posible recopilar el conjunto de dependencias resuelto para este informe: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

Informe JSON sin procesar legible por máquina
{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 931,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "Go": 827964,
        "Shell": 20422,
        "Dockerfile": 4395,
        "JavaScript": 8917,
        "Go Template": 2718
      },
      "pushed_at": "2026-07-26T09:19:04Z",
      "created_at": "2026-07-05T14:51:50Z",
      "owner_type": "User",
      "updated_at": "2026-07-26T09:18:53Z",
      "description": "AI-powered git history CLI + GitHub Action: PR risk-scored reviews, changelogs, multi-repo digests",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "master",
      "license_spdx_raw": "MIT",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": null,
      "name": null,
      "type": "User",
      "login": "akomyagin",
      "company": null,
      "location": null,
      "followers": 4,
      "avatar_url": "https://avatars.githubusercontent.com/u/5756595?v=4",
      "created_at": "2013-10-23T13:31:54Z",
      "is_verified": null,
      "public_repos": 24,
      "account_age_days": 4661
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.6.2",
          "kind": "patch",
          "published_at": "2026-07-26T09:20:34Z"
        },
        {
          "tag": "v0.6.1",
          "kind": "patch",
          "published_at": "2026-07-26T06:56:42Z"
        },
        {
          "tag": "v0.6.0",
          "kind": "minor",
          "published_at": "2026-07-25T23:05:21Z"
        },
        {
          "tag": "v0.5.2",
          "kind": "patch",
          "published_at": "2026-07-21T15:08:18Z"
        },
        {
          "tag": "v0.5.1",
          "kind": "patch",
          "published_at": "2026-07-21T13:43:11Z"
        },
        {
          "tag": "v0.5.0",
          "kind": "minor",
          "published_at": "2026-07-21T12:25:33Z"
        },
        {
          "tag": "v0.4.3",
          "kind": "patch",
          "published_at": "2026-07-21T08:12:08Z"
        },
        {
          "tag": "v0.4.2",
          "kind": "patch",
          "published_at": "2026-07-21T07:33:01Z"
        },
        {
          "tag": "v0.4.1",
          "kind": "patch",
          "published_at": "2026-07-21T03:42:02Z"
        },
        {
          "tag": "v0.4.0",
          "kind": "minor",
          "published_at": "2026-07-20T10:59:15Z"
        },
        {
          "tag": "v0.3.1",
          "kind": "patch",
          "published_at": "2026-07-07T13:12:22Z"
        },
        {
          "tag": "v0.3.0",
          "kind": "minor",
          "published_at": "2026-07-07T12:44:10Z"
        },
        {
          "tag": "v0.2.1",
          "kind": "patch",
          "published_at": "2026-07-07T11:11:55Z"
        },
        {
          "tag": "v0.2.0",
          "kind": "minor",
          "published_at": "2026-07-07T07:19:15Z"
        },
        {
          "tag": "v0.1.0",
          "kind": "minor",
          "published_at": "2026-07-06T21:50:30Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "f72072e99f4de17fdc904a41e1e3e3eba25ea3ad",
          "body": "chore(release): бампнуть версию-пины v0.6.1 → v0.6.2",
          "is_bot": false,
          "headline": "Merge pull request #82 from akomyagin/release/v0.6.2",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-26T09:18:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9599b4b203556efb8966fdf4e3e7eafab21c9ad0",
          "body": "Patch-релиз: 12 correctness-багов + 2 cleanup-находки из полного\ncode-review кодовой базы (PR #78–81). Функциональных новых фич нет —\nтолько фиксы (провайдер-consistency, llmcache-корректность,\nchangelog/SSH-URL regex-баги, RepoKey/эпилог cleanup).\n\nСинхронизированы все три version-pin инварианта, к\n[…]\n_version.default,\nbitbucket-pipe/pipe.yml image tag. Плюс README.md/README_RU.md\nпримеры использования и .gitea/.gitlab-ci-selftest.yml ссылки.\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): бампнуть версию-пины v0.6.1 → v0.6.2",
          "author_name": "Aleksey Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-26T09:15:48Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c299931b99d334c1a2cac2ffbca45ce532332a07",
          "body": "…pilogue\n\nrefactor(gitlog,cli,riskhistory): единый нормализатор remote-URL + эпилог runReview",
          "is_bot": false,
          "headline": "Merge pull request #81 from akomyagin/refactor/repokey-dedup-review-e…",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-26T09:10:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d66c8f237fbacc01454b44e3cf29ba084db01e1f",
          "body": "Разрешение конфликта в internal/cli/prresolve.go: PR #80 (SSH-port\nregex, sshSchemeRemotePattern/sshSCPRemotePattern) и эта ветка (вынос\nregex-парсинга в internal/gitlog/remote.go) оба меняли один и тот же\nкод. Итог: internal/gitlog/remote.go теперь несёт split-паттерны с\nподдержкой порта вместо исх\n[…]\nДобавлены тест-кейсы на SSH-URL с портом в internal/gitlog/remote_test.go\n(TestParseRemoteURL) — это теперь каноническое место для этой логики.\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Merge origin/master into refactor/repokey-dedup-review-epilogue",
          "author_name": "Aleksey Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-26T09:07:41Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "71f53b1fe2e456053c66ddb458b7b976cc0e3bb7",
          "body": "fix(gitlog,cli): детект BREAKING-CHANGE-футера и ssh://-remote с портом",
          "is_bot": false,
          "headline": "Merge pull request #80 from akomyagin/fix/changelog-breaking-ssh-port",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-26T09:03:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e76ffa0577854a79fd43466d2d338554455dc2ac",
          "body": "fix(llm): 3 provider-consistency bugs found by full-codebase review",
          "is_bot": false,
          "headline": "Merge pull request #79 from akomyagin/fix/llm-provider-consistency",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-26T09:03:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f5610926be57646f29759ebe52c4167e78eba0ba",
          "body": "fix(llmcache): 5 correctness bugs found by full-codebase review",
          "is_bot": false,
          "headline": "Merge pull request #78 from akomyagin/fix/llmcache-correctness-batch",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-26T09:03:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f3e1d22c8e43c64cceac9eebd7846c6a636c44d5",
          "body": "…Review\n\nДве cleanup-находки:\n\n1. Общий канонический парсер remote-URL — internal/gitlog/remote.go\n   (ParseRemoteURL, https + ssh scp-like формы). prresolve.go\n   (remoteURLMatchesRepo) и riskhistory.RepoKey переведены на него:\n   RepoKey теперь выдаёт канонический ключ host/owner/repo (lowercase,\n\n[…]\nh/mixed-case инвариантности; новый TestParseRemoteURL;\nTestRemoteURLMatchesRepo зелёный без изменения ожиданий\n(регресс-контроль рефакторинга).\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(gitlog): единый парсер remote-URL + консолидация эпилога run…",
          "author_name": "Aleksey Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-26T08:34:23Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "394f383f9c0180598c1758c24a5182fa3f435002",
          "body": "Два независимых точечных regex-фикса:\n\n1. internal/gitlog/changelog.go — breakingChangeRe теперь принимает\n   \"BREAKING-CHANGE:\" (дефис) как синоним \"BREAKING CHANGE:\" (пробел)\n   согласно Conventional Commits v1.0.0; underscore-вариант по-прежнему\n   не матчится.\n\n2. internal/cli/prresolve.go — ssh\n[…]\nены табличные тесты: TestBreakingFooterSeparators и новые строки\nв TestRemoteURLMatchesRepo (ssh:// с явным портом, GHE-хост, негативный\nкейс).\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(gitlog,cli): детект BREAKING-CHANGE-футера и ssh://-remote с портом",
          "author_name": "Aleksey Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-26T08:33:47Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c5bf8666020c9feca7442307323e6fb72f9bb26f",
          "body": "Confirmed by an independent Opus verify agent during a whole-codebase\n/code-review (v0.6.1).\n\n1. Пустой content от OpenAI-совместимого ответа (openai/ollama/\n   azure_openai) трактовался как успех — Anthropic/Gemini/streaming\n   уже ловят это как ошибку. Тихий провал провайдера мог пройти\n   --fail-\n[…]\n разбиению по SSE-дельтам\n   через hold-back буфер), после чего гейтит остаток потока в\n   терминал, не трогая buf (сырой текст для ParseRisk).\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(llm): 3 provider-consistency bugs found by full-codebase review",
          "author_name": "Aleksey Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-26T08:25:43Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d6860249f1fe0bd5528cc66b02f58e084cfa89f0",
          "body": "Confirmed by 3 independent Opus verify agents during a whole-codebase\n/code-review (v0.6.1). Все пять — внутренние детали Cache-интерфейса,\nпубличная сигнатура (Get/Put) не тронута.\n\n1. cache.remote.timeout_ms: 0 не валидировался — http.Client{Timeout:\n   0} + context.Background() в remoteCache дава\n[…]\nmplete() больше не\n   пишет кэш сам; вызывающий код (runReview буферизованная ветка,\n   RunReviewCore) вызывает storeCache явно, после рендера.\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(llmcache): 5 correctness bugs found by full-codebase review",
          "author_name": "Aleksey Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-26T08:20:37Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "730e6a7ba0d70c21c8cd9fc8940304bdd881e3d5",
          "body": "Patch-релиз: только housekeeping из PR #76 — GitLab-зеркало для\nci/comment.sh (вариант б), OCI-метки в bitbucket-pipe/Dockerfile,\nCI-проверка синхронизации версии Go в 4 местах, актуализация\nустаревших комментариев (GitLab trust-note, Bitbucket Docker Hub\npublish note). Функциональных изменений Go-к\n[…]\n_version.default,\nbitbucket-pipe/pipe.yml image tag. Плюс README.md/README_RU.md\nпримеры использования и .gitea/.gitlab-ci-selftest.yml ссылки.\n\nCo-authored-by: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): бампнуть версию-пины v0.6.0 → v0.6.1 (#77)",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-26T06:54:47Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "013f88e337e53ed3ed9db35e4dc4341d37510fa9",
          "body": "Три housekeeping-находки из POST_MVP_PLAN.md §1a:\n\n- templates/gitl-review.yml: fetch ci/comment.sh переключён с\n  raw.githubusercontent.com на GitLab-зеркало gitlab.com/alkom68/gitl\n  (то же зеркало, что gitlab-mirror job пушит на каждый релизный тег)\n  — вариант (б). Trust-note переписан: убрано ф\n[…]\nckerfile — ARG передекларирован\nпосле второго FROM (не переживает смену стейджа), значения реально\nприходят из docker-publish job'а build-args.\n\nCo-authored-by: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: GitLab-зеркало для ci/comment.sh, OCI-метки, sync версии Go (#76)",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-26T06:40:28Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b4f340240f04123632662655c5c4550bd91dce27",
          "body": "Minor-релиз: четыре новые опциональные фичи (provider/model/base-url\ninputs для Action, PR description risk-сводка, pre-commit hook,\nshared remote LLM cache, risk-trend в digest) плюс три фикса\n(stream-фоллбэк warning, защита --name-status от спецсимволов).\n\nСинхронизированы все три version-pin инва\n[…]\nADME_RU.md примеры использования и\n.gitea/.gitlab-ci-selftest.yml ссылки. Исторические заметки\n(\"published since v0.5.2\") намеренно не тронуты.\n\nCo-authored-by: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): бампнуть версию-пины v0.5.2 → v0.6.0 (#75)",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-25T23:03:17Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "fad04de5cf5ca142fdddafc25f2d240d74040dc7",
          "body": "…-only) (#74)\n\nНовый пакет internal/riskhistory — локальный append-only JSONL-лог\nrisk-результатов: review пишет (три успешных пути: warm-cache,\nstreaming, buffered — включая cache-хиты, без --dry-run), digest\nчитает и агрегирует в \"Risk trend (last N days)\" секцию per-repo.\nНикакого RiskStore-интер\n[…]\nir — без этого\nмногие существующие тесты runReview протекали тестовыми записями в\nреальный ~/.local/share/gitl/risk-history.jsonl разработчика.\n\nCo-authored-by: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(digest): risk-trend секция из локальной истории ревью (v1, local…",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-25T22:52:33Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "22501dd518da3063595be9de7beccdbc673d385e",
          "body": "internal/llmcache раньше был единственной дисковой реализацией без\nинтерфейса. Вводим Cache interface ровно сейчас — сработало правило\n\"интерфейс на вторую реализацию, не на первую\": реальная вторая\nреализация (remote) добавляется в этом же PR. Прежний тип Cache\nпереименован в diskCache (disk.go), с\n[…]\nне фейлят ревью. Bearer-токен — только из env, названного в\nконфиге (cache.remote.token_env), никогда не в конфиг-файле, никогда\nне логируется.\n\nCo-authored-by: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(llmcache): опциональный shared remote HTTP KV кэш для CI (L2) (#73)",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-25T22:48:12Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9a1027edc214a1676982c048915fb21acf2a106d",
          "body": "`--staged` уже полностью работает, но не хватало turnkey-обёртки для\nлокальной установки. Новый .pre-commit-hooks.yaml (language: golang —\nframework сам соберёт и закэширует бинарник) плюс документация в\nREADME/README_RU: framework-путь и raw .git/hooks/pre-commit сниппет.\n\nОба пути offline и non-bl\n[…]\names: false —\nкритично, иначе framework передаст изменённые файлы как позиционные\nаргументы, что столкнётся с позиционным аргументом диапазона.\n\nCo-authored-by: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: добавить pre-commit framework хук для gitl review --staged (#72)",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-25T22:47:22Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a4f891c0eb5d019b81ef24c2392551a49a04d0e0",
          "body": "update-pr-description: true (дефолт false) поддерживает компактный\nrisk-summary блок в конце PR description, ограниченный парой маркеров\n<!-- gitl-review-summary -->/<!-- /gitl-review-summary -->, обновляемый\nна каждом запуске. Вся логика в shell (ci/comment.sh + action.yml +\nновый ci/pr-summary-mer\n[…]\nтело PR, не комментарий), новых прав не требует.\nОбновление — после публикации комментария, до exit; ошибка PATCH —\nwarn-and-continue, не гейт.\n\nCo-authored-by: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(action): опциональная risk-сводка в описании PR (GitHub-only) (#71)",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-25T22:42:37Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "055b79c06f63d4ab77426b5d741667c6b9377062",
          "body": "…#70)\n\nПредложенная в ROADMAP двухпроцессная схема (metadata + отдельный\n`--name-status -z`) сознательно отклонена — откатила бы оптимизацию\nPR #63 (сокращение git-сабпроцессов) ради Low-severity бага. Вместо\nэтого: Log/LogSince остаются одним git-процессом, но теперь с\n`-c core.quotepath=false` (ка\n[…]\nйлов в Log/LogSince шли в\ngit-quoted octal-виде без декодирования — теперь чистый UTF-8\n(улучшение digest/review листингов для не-ASCII путей).\n\nCo-authored-by: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(gitlog): защитный парсинг --name-status от спецсимволов в путях (…",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-25T21:11:06Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "092ae7be0620cf1e4a287472d9308bfbebb1ef48",
          "body": "fix(cli): предупреждение при молчаливом фоллбэке на буферизованный вывод",
          "is_bot": false,
          "headline": "Merge pull request #69 from akomyagin/fix/stream-fallback-warning",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-25T20:44:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1b47597a9f5ab1820f8027d227758bdb3373d36c",
          "body": "feat(action): provider/model/base-url inputs для GitHub Action",
          "is_bot": false,
          "headline": "Merge pull request #68 from akomyagin/fix/action-provider-inputs",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-25T20:44:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b3088b7ecc463b886d825e6ae15ab57628e4d0df",
          "body": "anthropic/gemini не реализуют llm.Streamer (только OpenAI-совместимый\nClient умеет стримить) — раньше при ожидаемом стриминге (TTY,\noutput.stream=true) фоллбэк на буферизованный вывод был полностью\nмолчаливым. Полный SSE-стриминг для этих провайдеров сознательно не\nреализуем (решение по этому v0.6.0-кандидату) — только точечный\nslog.Warn (не Info: дефолтный уровень логгера — Warn, Info был бы не\nвиден без --verbose).\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(cli): предупреждать при молчаливом фоллбэке на буферизованный вывод",
          "author_name": "Aleksey Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-25T20:39:50Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5610b8b66182be89e6782a52f1d54b058158997b",
          "body": "Нативные Anthropic/Gemini провайдеры уже полностью реализованы в CLI\n(internal/cli/review.go newNetworkClient), но были недоступны из\naction.yml — теперь прокидываются через GITL_LLM_PROVIDER/MODEL/BASE_URL\nenv (пустой input = unset, конфиг-приоритет не ломается). Работает и на\nGitea Actions (общий шаг). Документация в README/README_RU (EN/RU\nпаритет), позитивный тест на wiring в action_yaml_test.go.\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(action): добавить provider/model/base-url inputs в GitHub Action",
          "author_name": "Aleksey Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-25T20:04:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "1d9b1e9bc890e900d3c24a6108df45d153d8856a",
          "body": "fix(ci): ретрай go install при propagation delay sum.golang.org",
          "is_bot": false,
          "headline": "Merge pull request #67 from akomyagin/fix/go-install-sumdb-flake",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-25T19:37:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2aa585362ea5853489ea372f9c7858afa0d8c63a",
          "body": "Action self-test падал весь день на go install github.com/akomyagin/gitl/\ncmd/gitl@<SHA> (фолбэк-путь для веток/SHA, не тегов) с\n\"reading https://sum.golang.org/...: 500 Internal Server Error\" —\nпричина не в коде gitl (первый же PR сегодня, чисто doc-фикс, падал\nтак же), а в том, что go install резо\n[…]\nся как была). Одинаковая\nлогика в action.yml и templates/gitl-review.yml (вынесена в функцию\ngo_install_with_retry, т.к. там два места вызова).\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(ci): ретрай go install при propagation delay sum.golang.org",
          "author_name": "Aleksey Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-25T19:35:05Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "13eb80d41409982e3e0b5ef1f6e8f041bf63d7a8",
          "body": "fix(quality): скачивать релизный бинарь в CI вместо go install",
          "is_bot": false,
          "headline": "Merge pull request #66 from akomyagin/fix/ci-prebuilt-binaries",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-25T19:20:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1719a8e7501326cd70bfdce2cf5ca523b51eff1b",
          "body": "Пакет 6 (последний) quality-аудита gitl (независимое ревью Opus —\nвердикт SHIP, эмпирически перепроверено на реальном v0.5.2). Самый\nширокий по влиянию пакет серии — меняет рантайм-поведение CI у всех\nпотребителей action.yml/templates/gitl-review.yml.\n\naction.yml и templates/gitl-review.yml компилир\n[…]\n прежний go install,\nне жёсткий отказ. Ветки/SHA и Windows-раннеры всегда идут через\ngo install — action-selftest.yml (пин на SHA) не затронут.\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(quality): скачивать релизный бинарь в CI вместо go install",
          "author_name": "Aleksey Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-25T19:20:16Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "320a820f1b2cc3487b1f9640abc572ea7e25c59e",
          "body": "fix(ci): объединить push в gitlab-mirror, -race в CI, fail-fast секрет",
          "is_bot": false,
          "headline": "Merge pull request #65 from akomyagin/fix/release-ci-workflows",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-25T19:11:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c64e69aff37d0a3c9f9a97a6aa5fb09f969acbca",
          "body": "Пакет 5 quality-аудита gitl (независимое ревью Opus — вердикт SHIP,\nэмпирически перепроверена force-семантика на реальных bare-репо).\nТри находки в CI-пайплайне:\n\n- ci.yml: go test ./... → go test -race ./... — worker-pool digest\n  (internal/gitlog) конкурентен, суит маленький, накладные расходы\n  r\n[…]\nter expansion,\n  жёстко предполагающим именно эту форму. Теперь некорректная форма\n  падает явной ошибкой до push, а не мусорным токеном после.\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(ci): объединить push в gitlab-mirror, -race в CI, fail-fast секрет",
          "author_name": "Aleksey Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-25T19:10:52Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b8388c669f7c19f665d785453da124592dbb5342",
          "body": "fix(quality): синхронизировать jq risk-header и PATCH-тело в comment-пайплайне",
          "is_bot": false,
          "headline": "Merge pull request #64 from akomyagin/fix/ci-comment-consistency",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-25T19:04:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8ecd880f8381c5fde41a77a518fccf4f416fec06",
          "body": "…пайплайне\n\nПакет 4 quality-аудита gitl (независимое ревью Opus — вердикт SHIP).\nДве находки в sticky-comment пайплайне:\n\n- ci/comment.sh: jq-рендер risk-заголовка всегда вставлял \" — \" перед\n  summary, давая повисший разделитель \"**Risk:** HIGH — \" при пустом\n  summary (легитимно достижимо — ParseR\n[…]\n  использует: jq -Rs '{body: .}' + --input, без типизации и потери\n  переводов строк. POST-путь (--body-file) не тронут — он и так\n  корректен.\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(quality): синхронизировать jq risk-header и PATCH-тело в comment-…",
          "author_name": "Aleksey Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-25T19:04:07Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "89eb89cf4afeb92180f78f0e7e6d35bfea10eccc",
          "body": "fix(quality): сократить число git-сабпроцессов в digest/review",
          "is_bot": false,
          "headline": "Merge pull request #63 from akomyagin/fix/git-subprocess-efficiency",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-25T18:59:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "beb20bc1a672c4e95c83b20788e09f8f964da245",
          "body": "Пакет 3 quality-аудита gitl (независимое ревью Opus — вердикт SHIP,\nдополнительно -race -count=5 на самом рискованном пакете серии).\nЧетыре находки об эффективности git-вызовов:\n\n- digest: per-commit git show (1+N сабпроцессов на репо) заменён на\n  единственный дополнительный git log --numstat (2 са\n[…]\n refspec одним git fetch)\n  — prSource собирает список отсутствующих ref'ов и делает один\n  комбинированный fetch вместо двух последовательных.\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(quality): сократить число git-сабпроцессов в digest/review",
          "author_name": "Aleksey Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-25T18:58:50Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "bddb82cb54ff9978313146bc60fed9afd5f6b3d8",
          "body": "fix(quality): согласовать JSON-артефакты — category и files_changed",
          "is_bot": false,
          "headline": "Merge pull request #62 from akomyagin/fix/json-artifact-consistency",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-25T18:43:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "94c47571e12e4cde53de5f5b7a22dba6900d2caf",
          "body": "Пакет 2 quality-аудита gitl (независимое ревью Opus — вердикт SHIP).\nДве находки о внутренней согласованности --format=json контракта:\n\n- breaking_changes[].category в AI-changelog пустел, если набор хэшей\n  breaking-записи не совпадал ДОСЛОВНО (как склеенная строка) с\n  набором категории — хотя мно\n[…]\nчёт по метаданным\n  для metadata-only review диапазона (реальный, достижимый кейс —\n  полностью исключённый диапазон коммитов без --staged/pr).\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(quality): согласовать JSON-артефакты — category и files_changed",
          "author_name": "Aleksey Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-25T18:43:27Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d8bc8327801d2048b4834ce6efddeaf4cf3eb89a",
          "body": "fix(quality): пакет из 8 находок дедупа/качества",
          "is_bot": false,
          "headline": "Merge pull request #61 from akomyagin/fix/quality-dedup-pass",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-25T18:31:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4d3bdc657302649b2adff3381229d4a467c1c6fe",
          "body": "Пакет 1 quality-аудита gitl (независимое ревью Opus — вердикт SHIP).\nМелкие независимые находки, не security-критичные:\n\n- llm.Client.Stream дублировал тело finishWithRisk — теперь вызывает\n  общий хелпер, как остальные три сетевых клиента.\n- gitlog.Source интерфейс с нулём потребителей (все места б\n[…]\nap статусов файлов\n  (в рамках самого offline.go — HeuristicRisk/review.go оставлены\n  нетронутыми по плану, там DiffLineStats не дублируется).\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(quality): пакет из 8 находок дедупа/качества",
          "author_name": "Aleksey Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-25T18:31:06Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8bad30f680d863b2471ece306800bb1811c91e92",
          "body": "fix(ci): не маскировать сбой хэш-шага, проверять version-pin GitLab-компонента",
          "is_bot": false,
          "headline": "Merge pull request #60 from akomyagin/fix/release-pipeline-guards",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-25T10:37:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9c0b2128aa6e2c054043a204de92fd9e400d2f03",
          "body": "…омпонента\n\nБатч 6 (последний) из аудита gitl v0.5.2. Две находки, только\n.github/workflows/release.yml:\n\n- Шаг \"Compute artifact hashes\" не имел set -euo pipefail — сбой\n  sha256sum (например, из-за неожиданно пустого glob-паттерна)\n  маскировался: echo в $GITHUB_OUTPUT всё равно завершался успешно\n[…]\nв реального файла (awk отдаёт v0.5.2,\nсовпадает с текущим тегом) и полного прогона скрипта с разными\nтегами (успех/явная ошибка). YAML валиден.\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(ci): не маскировать сбой хэш-шага, проверять version-pin GitLab-к…",
          "author_name": "Aleksey Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-25T10:36:50Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "33001c9dfeb867ef02addd2c4a9b78e3b3bdbd53",
          "body": "fix: FuncMap при валидации шаблонов + отдельный ключ для changelog --ai",
          "is_bot": false,
          "headline": "Merge pull request #59 from akomyagin/fix/prompt-template-scoping",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-25T10:33:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e84b5be572bacae4566187e68511e7ddeebc71d5",
          "body": "Батч 5 из аудита gitl v0.5.2 (независимое ревью Opus — вердикт SHIP).\nДве находки, общий корень — prompt.system_template_file:\n\n- Валидация в config.Load парсила system-шаблон БЕЗ FuncMap, который\n  реально регистрируется при исполнении (render.TemplateFuncs()) —\n  шаблон с настоящей зарегистрирован\n[…]\nе offline-гейтом; review\nпродолжает читать только старый ключ. README/README_RU\nдокументируют оба ключа с точным списком полей каждого шаблона.\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: FuncMap при валидации шаблонов + отдельный ключ для changelog --ai",
          "author_name": "Aleksey Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-25T10:33:20Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8088b5d862370e73f7caacca4aed5490b0515987",
          "body": "fix: находить .gitl.yaml в корне git-репозитория, не только в cwd",
          "is_bot": false,
          "headline": "Merge pull request #58 from akomyagin/fix/repo-config-discovery",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-25T10:22:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d02ba8b5fd86a87a64d3f2ebf24b8982478d7279",
          "body": "Батч 4 из аудита gitl v0.5.2 (независимое ревью Opus — вердикт SHIP).\n\nLoad() искал repo-level .gitl.yaml только в текущей директории — запуск\ngitl из подкаталога (обычный воркфлоу, все git-вызовы под капотом и так\nработают из любого сабдира) полностью и молча пропускал командную\nполитику из корнево\n[…]\ns\nотносительно директории того файла (корень или cwd), который\nреально объявил этот ключ — с учётом wholesale-замены списков в\nviper при мерже.\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: находить .gitl.yaml в корне git-репозитория, не только в cwd",
          "author_name": "Aleksey Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-25T10:22:15Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c627618b3e1d51ba1a1225ab0d6cbe6a012fba24",
          "body": "fix(security): заякорить парсинг diff-заголовков, поддержать quoted-пути",
          "is_bot": false,
          "headline": "Merge pull request #57 from akomyagin/fix/diff-header-anchoring",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-25T10:09:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5060f532b32fb843bb2031f1bc55f105bf9c05a6",
          "body": "Батч 3 из аудита gitl v0.5.2 (независимое ревью Opus — вердикт SHIP).\nДве находки, общий корень — незаякоренный на начало строки парсинг\nunified diff (подстрока \"diff --git \", префиксы \"+++\"/\"---\"):\n\n- filterDiffByGlobs (единственный механизм exclude_globs — удержания\n  файлов, потенциально с секрет\n[…]\nреальный вектор утечки (маркер был в contents сохраняемого файла, а не\nисключённого) — добавлен корректный тест на найденный реальный сценарий.\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(security): заякорить парсинг diff-заголовков, поддержать quoted-пути",
          "author_name": "Aleksey Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-25T10:09:11Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "4f2bc0f05d3dc304cc56d9db7a5e1e4b10b8bd3e",
          "body": "fix(security): устранить обход анти-injection фильтров в стриминге",
          "is_bot": false,
          "headline": "Merge pull request #56 from akomyagin/fix/stream-hardening",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-25T09:51:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7a23357cf6ce6d97c7e6c409f26ad270ea31f459",
          "body": "Батч 2 из аудита gitl v0.5.2 (независимое ревью Opus — вердикт SHIP).\nТри находки:\n\n- internal/llm/stream.go: sanitizingWriter был stateless между\n  вызовами Write — многобайтовый UTF-8 control-символ (например CSI,\n  0xC2 0x9B), разрезанный границей SSE-чанка, проходил нефильтрованным\n  и обходил а\n[…]\n весь TTL.\n  Теперь обе ситуации возвращают ошибку; storeCache дополнительно не\n  пишет в кэш пустые/whitespace-only ответы независимо от пути.\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(security): устранить обход анти-injection фильтров в стриминге",
          "author_name": "Aleksey Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-25T09:51:34Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "492835961c4f12eca64df1eecd5ba92655ef6f03",
          "body": "fix(security): устранить утечку API-ключей и Ollama/Azure-баги провайдеров",
          "is_bot": false,
          "headline": "Merge pull request #55 from akomyagin/fix/provider-endpoint-key-safety",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-25T09:30:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d5174883e412a4f22066bfae86aaea4117b7ddc3",
          "body": "…деров\n\nБатч 1 из аудита gitl v0.5.2 (10 finder-агентов на Fable5, план на\nFable5, независимое ревью Opus — вердикт SHIP). Пять находок:\n\n- config.go: безусловный дефолт llm.base_url на api.openai.com\n  подавлял собственные нативные дефолты Anthropic/Gemini-клиентов —\n  ключ реально утекал на api.op\n[…]\npoint/\n  deployment/temperature/max_tokens — коллизии между разными\n  эндпоинтами/параметрами отдавали чужой закэшированный ответ как\n  свежий.\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(security): устранить утечку API-ключей и Ollama/Azure-баги провай…",
          "author_name": "Aleksey Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-25T09:30:28Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "76da42b7d1012195063e3d9bf027c50c1904b582",
          "body": "docs: устранить дрейф README после релиза v0.5.2",
          "is_bot": false,
          "headline": "Merge pull request #54 from akomyagin/docs/audit-readme-fixes",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-25T09:17:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "437a6ef9806cd446f630a3d446e2237f1a430e8a",
          "body": "code-docs-audit (Fable5) нашёл, что README/README_RU всё ещё\nописывали GitLab CI/CD Catalog как «planned, not done yet» и\nDocker-образ как «not published yet» — обе публикации фактически\nуже состоялись в рамках v0.5.2 (PR #51-53). Также actualized\nversion headers, мёртвая ссылка в ROADMAP.md, восстановлен EN/RU-\nпаритет, задокументирован механизм отключения стриминга при\noutput.template_file.\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: устранить дрейф README после релиза v0.5.2",
          "author_name": "Aleksey Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-25T09:17:17Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a5722487df84a01cbe2fd6bad28d0f28fd352f7e",
          "body": "chore(release): бампнуть версию-пины v0.5.1 → v0.5.2",
          "is_bot": false,
          "headline": "Merge pull request #53 from akomyagin/release/v0.5.2",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T15:06:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c892f079e4df822970588b4f886f4f3b34110b87",
          "body": "Новый тег нужен, чтобы docker-publish подхватил переименование образа\nв alkom68/gitl-review-pipe (#52) — контент старого тега v0.5.1 заморожен\nи рефикс туда не попал.\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): бампнуть версию-пины v0.5.1 → v0.5.2",
          "author_name": "Alexander Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T15:06:38Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "1b12a13a91173538ff9739e5de1ac2b229f73734",
          "body": "fix(docker): переименовать образ в alkom68/gitl-review-pipe",
          "is_bot": false,
          "headline": "Merge pull request #52 from akomyagin/fix/dockerhub-namespace",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T15:04:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5f792a194efafb7b2ddda085c9e7d1ace6213593",
          "body": "docker-publish упал на v0.5.1 с \"denied: requested access to the\nresource is denied\" — namespace akomyagin принадлежит GitHub-организации/\nusername, а реальный логин на Docker Hub — alkom68 (как и на GitLab).\nПереименовано везде: bitbucket-pipe/Dockerfile, bitbucket-pipe/pipe.yml\n(image:), release.yml (IMAGE=, version-pin проверка, DOCKERHUB warning),\nREADME/README_RU.\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(docker): переименовать образ akomyagin/ → alkom68/gitl-review-pipe",
          "author_name": "Alexander Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T15:00:27Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "536599a39b9835e445fd2ac21fb6b4ee252347de",
          "body": "feat(release): автосоздание GitLab Release в gitlab-mirror",
          "is_bot": false,
          "headline": "Merge pull request #51 from akomyagin/feat/gitlab-auto-release",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T14:16:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "022d4e82e7d32b6362886bb26b4363e552a8d881",
          "body": "CI/CD Catalog листит Release-объекты проекта, а не просто git-теги —\npush-шаг зеркалирует тег, но не создаёт сам Release (это выяснилось\nтолько после ручной публикации v0.5.1: пришлось руками создавать Release\nчерез UI, чтобы компонент появился в Catalog). Новый шаг вызывает GitLab\nReleases API (POS\n[…]\nscription корректно на\nмногострочном юникоде, секрет нигде не эхуется/не логируется, 409-код\nподтверждён по GitLab API как ожидаемый для дубля.\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(release): автосоздание GitLab Release в gitlab-mirror",
          "author_name": "Alexander Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T14:15:50Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "59f5cc46f80ba4fe5d00dc78e448c72356ccef34",
          "body": "chore(release): бампнуть версию до v0.5.1",
          "is_bot": false,
          "headline": "Merge pull request #50 from akomyagin/chore/bump-v0.5.1",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T13:41:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e13405b3901c15207dd21f6a33d98fd6603889e7",
          "body": "Синхронизация version-pin инварианта (§12.2) перед тегом: все ссылки на\nv0.5.0 (action.yml, templates/gitl-review.yml, bitbucket-pipe/pipe.yml,\n.gitea/workflows/gitl-review.yml, .gitlab-ci-selftest.yml, README/README_RU).\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): бампнуть версию до v0.5.1",
          "author_name": "Alexander Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T13:41:22Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "f55f9cf9a92de73ae58a9e561b3bfba2e81b4d05",
          "body": "feat(release): job gitlab-mirror — push-зеркало для CI/CD Catalog",
          "is_bot": false,
          "headline": "Merge pull request #49 from akomyagin/feat/gitlab-mirror-push",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T13:38:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fa3ca24971d9e437b83b24fd41660141423268ab",
          "body": "templates/gitl-review.yml (GitLab CI/CD component) можно опубликовать в\nCatalog только из реального GitLab-проекта — канонический дом репозитория\nна GitHub, поэтому нужно зеркало. Новый job на каждый релизный тег пушит\nmaster + тег в GitLab-проект (URL с встроенными кредами в GITLAB_MIRROR_URL,\ngrac\n[…]\n (которое тоже работает). fetch-depth:0\nподтверждён необходимым (иначе первый пуш в свежий GitLab-репо унёс бы\nтолько один коммит без истории).\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(release): job gitlab-mirror — push-зеркало для CI/CD Catalog",
          "author_name": "Alexander Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T13:38:37Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5e9f3c8d681c6b0c914fa69c16f4ad3df7b117f6",
          "body": "fix: пакет из 6 находок аудита CI-интеграций",
          "is_bot": false,
          "headline": "Merge pull request #48 from akomyagin/fix/ci-audit-batch",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T13:10:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f937379fd90b7347b9308ea0bfb3d761ff2a2131",
          "body": "…ease.yml)\n\nСвежий аудит четырёх параллельных CI-обёрток (не повторный — первый проход\nпосле волны Gitea/GitLab/Bitbucket). Пять реальных фиксов + одна находка\nпризнана ложным срабатыванием:\n\n1. (H1) action.yml: fail-fast проверка непустоты GITL_BASE_SHA/HEAD_SHA/\n   PR_NUMBER до вызова gitl review \n[…]\nаметры валидны для\nконкретного эндпоинта, awk устойчив к порче структуры, semver-логика\nкорректна на граничных случаях). Критичных находок нет.\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: пакет из 6 находок аудита CI-интеграций (GitHub/Gitea/GitLab/rel…",
          "author_name": "Alexander Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T13:10:10Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ad1beae43f2be7ff46b19a419a2a00f123fd7aa5",
          "body": "fix: пакет из 8 находок глубокого аудита кода",
          "is_bot": false,
          "headline": "Merge pull request #47 from akomyagin/fix/code-audit-go-batch",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T13:04:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f646eb5ba204c282ee124c4d18baf70f53d2df53",
          "body": "…tui)\n\nСвежий аудит после волны MCP-сервер+мультиплатформенность CI (не повторная\nпроверка — первый проход по новому коду). Восемь фиксов:\n\n1. Doc-комментарий MissingRequiredCategories врал про порядок (\"preserving\n   input order\" при реальной sort.Strings) — исправлен на честный.\n2. Комментарий про\n[…]\naderStyle/errStyle.\n\nНезависимое ревью: критичных находок нет, только 2 информационных nit'а\nвне скоупа. go build/vet/test -race — все зелёные.\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: пакет из 8 находок глубокого аудита кода (llm/cli/config/gitlog/…",
          "author_name": "Alexander Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T13:04:19Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "7342c640b2ff457029ae6681314f089d4e7b93d0",
          "body": "chore(release): бампнуть версию до v0.5.0",
          "is_bot": false,
          "headline": "Merge pull request #46 from akomyagin/chore/bump-v0.5.0",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T12:23:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9f8d6a2798e92f6100592aad5c93e71141e6806c",
          "body": "Синхронизация version-pin инварианта (§12.2) перед тегом: action.yml\ngitl-version.default, README/README_RU (статус-строка, все примеры\nuses:/remote:/pipe:/docker build), templates/gitl-review.yml,\nbitbucket-pipe/pipe.yml (image tag), .gitea/workflows/gitl-review.yml,\n.gitlab-ci-selftest.yml.\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): бампнуть версию до v0.5.0",
          "author_name": "Alexander Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T12:23:41Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "98e6c3eaa2577d551ff4a8fdf368444c8b3bf583",
          "body": "feat(ci): Bitbucket Pipe для gitl-review",
          "is_bot": false,
          "headline": "Merge pull request #45 from akomyagin/feat/bitbucket-pipe",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T12:10:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1045e2036703b3142950fd780c9db3881e46b6ce",
          "body": "Разрешён конфликт в README.md/README_RU.md: обе ветки независимо\nдобавили новый раздел перед ## License (Bitbucket Pipelines vs MCP\nserver) — сохранены оба, порядок: Bitbucket Pipelines, затем MCP server.",
          "is_bot": false,
          "headline": "Merge branch 'master' into feat/bitbucket-pipe",
          "author_name": "Alexander Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T12:09:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cbf5ca7e514834a57fed0c70dada036b34b13dfe",
          "body": "Третий и последний шаг мультиплатформенности (после Gitea, GitLab):\nbitbucket-pipe/Dockerfile (multi-stage, alpine, встраивает gitl-бинарь +\nci/comment.sh — не скачивается по сети, в отличие от GitLab-пути),\npipe.sh (entrypoint: диапазон из BITBUCKET_PR_DESTINATION_COMMIT..\nBITBUCKET_COMMIT, sticky-\n[…]\nrimental. Независимое\nревью нашло только один опциональный пункт (.dockerignore — контекст сборки\nвключал .git/docs без надобности) — добавлен.\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(ci): Bitbucket Pipe для gitl-review",
          "author_name": "Alexander Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T12:07:49Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "58ca6ea72425c545d3735ca59fae461968af26dd",
          "body": "docs: раздел про MCP-сервер в README/README_RU",
          "is_bot": false,
          "headline": "Merge pull request #44 from akomyagin/docs/mcp-server",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T12:02:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "423eecef44f5d21b5d35fd7e8fe426fd292b02d5",
          "body": "Описание tools gitl_review/gitl_digest, JSON-конфиг для Claude Desktop/\nCursor/Windsurf, path-scope digest --repos, отсутствие --fail-on/стриминга\nв MCP-режиме.\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: раздел про MCP-сервер (gitl mcp) в README/README_RU",
          "author_name": "Alexander Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T12:02:32Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "bb010a4305ed23c1071e70732dc58a1f9e9ac3d1",
          "body": "test(mcp): e2e-тест полного MCP-протокола через реальный процесс gitl mcp",
          "is_bot": false,
          "headline": "Merge pull request #43 from akomyagin/feat/mcp-e2e",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T11:59:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6e5b8fd14c2883bd374b2ad7e435ab06950d162e",
          "body": "… mcp\n\nКомпилирует бинарь gitl один раз (sync.Once) и гоняет настоящий JSON-RPC\nцикл через exec.Command(bin, \"mcp\") с пайпами на stdin/stdout — не мокает\nтранспорт, ловит интеграционные баги вида \"протокол сломан на границе\nпроцесса\", которые юнит-тесты хендлеров/транспорта по отдельности не видят.\n\n[…]\nст\nпоймал реальный сетевой вызов и упал; с изоляцией — все 7 сценариев зелёные\nдаже при отравленном хосте. Багов в продуктовом коде не найдено.\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test(mcp): e2e-тест полного MCP-протокола через реальный процесс gitl…",
          "author_name": "Alexander Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T11:59:26Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a50206f64b39ec0d0a184f73fa8e4a449a9b2664",
          "body": "feat(ci): GitLab CI/CD component для gitl-review",
          "is_bot": false,
          "headline": "Merge pull request #42 from akomyagin/feat/gitlab-ci",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T11:49:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d06aa629823351e479e9302c25f9e3c8104a884d",
          "body": "Второй шаг мультиплатформенности (после Gitea): templates/gitl-review.yml\n(spec:+inputs:, диапазон из CI_MERGE_REQUEST_DIFF_BASE_SHA..CI_COMMIT_SHA,\nsticky MR-комментарий через Notes API вместо gh) + .gitlab-ci-selftest.yml.\n\nREST API-часть (list/POST/PUT notes, sticky-detection) прогнана end-to-end\n[…]\nая граница, что у\ngo install ...@${GITL_VERSION} строкой выше), структурное устранение —\nпубликация в Catalog (запланировано, задача отдельно).\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(ci): GitLab CI/CD component для gitl-review",
          "author_name": "Alexander Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T11:49:23Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "124c47ac08a02e2cd5bcdaefe00e8efcffbf0261",
          "body": "feat(mcp): зарегистрировать tools gitl_review/gitl_digest + команда gitl mcp",
          "is_bot": false,
          "headline": "Merge pull request #41 from akomyagin/feat/mcp-tools",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T11:40:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b2b7882a53bb536f8c8f74609a7851b8b9312207",
          "body": "…itl mcp\n\ninternal/cli/mcp.go связывает MCP-транспорт (internal/mcpserver, R2) с\ncmd-free ядром review/digest (RunReviewCore/RunDigestCore, R1). Tools:\ngitl_review (range/pr/staged, provider/model/base_url оверрайды per-call,\n--fail-on не гейтит — risk возвращается в JSON, стриминг структурно\nнедост\n[…]\nходок; закрыт один мелкий\nрассинхрон (JSON Schema \"default\" для digest.days теперь sprintf'ится\nиз defaultDigestDays, а не дублируется руками).\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(mcp): зарегистрировать tools gitl_review/gitl_digest + команда g…",
          "author_name": "Alexander Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T11:39:36Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "817473f14f9ebafa8f09010a32bbdf6873cfbb68",
          "body": "feat(mcp): MCP stdio transport-слой (internal/mcpserver)",
          "is_bot": false,
          "headline": "Merge pull request #40 from akomyagin/feat/mcp-transport",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T11:24:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6da21f205e141b6c16f56e270fa3a9fad6745e9a",
          "body": "JSON-RPC 2.0 поверх stdio по образцу проверенного в проде транспорта\naiMCPGate: newline-framing (32 MiB буфер, ErrStream-латч на fatal-ошибках),\ninitialize/tools-list/tools-call диспетчеризация, RegisterTool для будущей\nрегистрации gitl_review/gitl_digest поверх RunReviewCore/RunDigestCore\n(следующи\n[…]\nику в\nisError:true результат вместо краха процесса (критично для следующего PR,\nгде handler'ы будут вызывать реальный код с шелл-аутами в git).\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(mcp): MCP stdio transport-слой (internal/mcpserver)",
          "author_name": "Alexander Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T11:23:56Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "720f6b1e23eb478d4b539ced9db44752f60061b3",
          "body": "feat(ci): поддержка Gitea Actions в action.yml",
          "is_bot": false,
          "headline": "Merge pull request #39 from akomyagin/feat/gitea-support",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T11:09:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9bf83bafee0c7ed010bbe5b7982bf4fcc806cdbc",
          "body": "При GITEA_ACTIONS=true sticky-комментарий постится через прямой curl\nк Gitea REST API вместо gh (который не умеет в Gitea). Платформа\nопределяется рантайм-переменной act_runner, без новых обязательных\ninput'ов — GitHub-путь не затронут.\n\nREST API-часть (list/POST/PATCH/sticky-detection) прогнана end\n[…]\nере — сверено только с\nисходниками Gitea/act_runner/act-форка, помечено как experimental в\nREADME/README_RU до первого подтверждённого прогона.\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(ci): поддержка Gitea Actions в action.yml",
          "author_name": "Alexander Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T11:08:47Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c2ebb177740520c0577cea10c6c6782118b3559e",
          "body": "refactor(cli): извлечь cmd-free ядро review/digest",
          "is_bot": false,
          "headline": "Merge pull request #38 from akomyagin/feat/mcp-core-refactor",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T11:01:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "942461e4fd0d1b4f0ec4cb333e5a2d9efbb4f3bc",
          "body": "…DigestCore)\n\nПодготовка к будущему MCP-серверу (R2-R5): review.go/digest.go теперь\nтонкие cobra-адаптеры поверх RunReviewCore/RunDigestCore, не завязанных\nна *cobra.Command. Заодно унифицирована трижды продублированная логика\n--fail-on (gateFailOn) и дедуп repo-paths логики digest (normalizeRepoPat\n[…]\nyte-for-byte\nидентичность на всех проверенных путях (кэш/--dry-run/streaming/--staged/\npr/N/--fail-on/кастомные шаблоны/digest.repos priority).\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(cli): извлечь cmd-free ядро review/digest (RunReviewCore/Run…",
          "author_name": "Alexander Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T11:01:06Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "fe81aea33d002f208bc12097761edf897b3bf078",
          "body": "refactor(ci): вынести рендер sticky-комментария в ci/comment.sh",
          "is_bot": false,
          "headline": "Merge pull request #37 from akomyagin/feat/ci-comment-dedup",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T10:51:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "52c71850bb0aa222d72b86919104597a53bee483",
          "body": "Общая логика сборки comment.md из review.json (включая fallback при\nошибке gitl) вынесена из инлайн-bash action.yml в переиспользуемый\nплатформо-нейтральный ci/comment.sh — фундамент для будущих\nGitea/GitLab/Bitbucket-обёрток. Поведение action.yml не изменилось\n(проверено байт-в-байт на успешном и fallback-путях).\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(ci): вынести рендер sticky-комментария в ci/comment.sh",
          "author_name": "Alexander Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T10:51:06Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "223e8afb8b86fcfe49d6fe817d0d4853f518d532",
          "body": "docs: убрать «not yet published» — gitl-cli@0.4.3 в npm",
          "is_bot": false,
          "headline": "Merge pull request #36 from akomyagin/docs/npm-published",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T08:59:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7a2f82f80973bb15a0e8fea41c5efddef261434f",
          "body": "NPM_TOKEN добавлен, npm-publish job перезапущен вручную для существующего\nрелиза v0.4.3 (без нового тега); registry.npmjs.org/gitl-cli подтверждает\n0.4.3 как latest, npx gitl-cli@0.4.3 проверен end-to-end.\n\nCo-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: убрать «not yet published» — gitl-cli@0.4.3 опубликован в npm",
          "author_name": "Alexander Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T08:58:50Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "169a8a6e5bce9020a113dd04edd407fdb62842ae",
          "body": "Патч-релиз: 6 low-severity фиксов повторного глубокого аудита (PR #35) —\nUTF-8-safe усечение error-сообщений, симметрия обработки пустых путей в\ndigest.repos, защита llmcache от паники на коротком ключе, env-дефолты\nдля policy.*-списков, атомарная распаковка npm-обёртки, документация\nrepo-config trust boundary.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): бампнуть версию до v0.4.3",
          "author_name": "Alexander Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T08:10:31Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c28dbf3114f17ffb4d0af0eebc65dc089bbfadfa",
          "body": "fix: пакет из 6 low-severity находок повторного глубокого аудита",
          "is_bot": false,
          "headline": "Merge pull request #35 from akomyagin/fix/audit-followups-batch",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T08:09:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8dd5d4cc12727c4f2d0461a7d0d3be3d51e1d9d6",
          "body": "Все шесть — изолированные, независимые правки, найденные четырьмя\nпараллельными Opus-аудитами по границам пакетов (internal/llm,\ninternal/cli+npm, internal/gitlog+config, render/prompt/llmcache/tui/cmd)\nпосле серии security-фиксов v0.4.0→v0.4.2:\n\n1. internal/llm/client.go: extractErrorMessage теперь\n[…]\nтор доказал нетавтологичность\nдля находок №2 и №3 временным откатом (паника slice bounds на находке\n№3, неверное поведение вместо ошибки на находке №2).\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: пакет из 6 low-severity находок повторного глубокого аудита",
          "author_name": "Alexander Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T08:08:21Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "13acf22bc203cbc57adea258a29e74d8a807eddd",
          "body": "Повторный /code-docs-audit нашёл: README.md/README_RU.md/npm/README.md\nпредставляли npx gitl-cli/npm install -g gitl-cli как уже рабочие\nкоманды, хотя реестр npm ещё не содержит пакет (npm-publish в release.yml\nмягко скипается без NPM_TOKEN — подтверждено: registry.npmjs.org/gitl-cli\nотдаёт 404). До\n[…]\naction.yml/npm/ в структурную таблицу CLAUDE.md) — в гитигнорируемых\ndocs/*.md и CLAUDE.md, правки уже на диске, в git не попадают по\nконвенции проекта.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: не выдавать npm-пакет за уже опубликованный",
          "author_name": "Alexander Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T07:44:38Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0038fb7b6d6cd84d855f5c42c3a4ca8895f607c4",
          "body": "Единственное функциональное изменение с v0.4.1 — npm-дистрибуция\n(gitl-cli, PR #34). action.yml gitl-version.default и README/README_RU\nstatus-строки + пример workflow синхронизированы с тегом.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): бампнуть версию до v0.4.2",
          "author_name": "Alexander Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T07:31:20Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5f0407d9d9b1e612b4d4f5adfa405fc3033b91a9",
          "body": "feat(dist): npm-обёртка gitl-cli — установка без Go-тулчейна",
          "is_bot": false,
          "headline": "Merge pull request #34 from akomyagin/feat/npm-wrapper",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T07:30:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b602378a8e40d41dc8b5192fa55b9d53e6d72550",
          "body": "npx gitl-cli review HEAD~5..HEAD / npm install -g gitl-cli — скачивает\nподходящий платформенный бинарник с GitHub Releases, сверяет его SHA256\nпротив checksums.txt того же релиза, распаковывает системным tar. Пакет\nне содержит собственного кода: только тонкий postinstall-загрузчик\n(install.js) и exe\n[…]\n-подпись checksums.txt (граница доверия —\nвладелец GitHub Releases, не криптоподпись); осознанный trade-off,\nидентичный aiMCPGate, вне скоупа этой фичи.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(dist): npm-обёртка gitl-cli — установка без Go-тулчейна",
          "author_name": "Alexander Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T07:29:36Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "229206821fef801708d5eac208b6debffe59ba63",
          "body": "docs/PLAN.md §7a указывал «см. статус в README», но в README не было ни\nодного упоминания Marketplace — притом что публикация уже реально сделана\n(подтверждено: на странице репозитория есть блок «Use this GitHub action...\nView on Marketplace»). Добавлена явная ссылка в разделе GitHub Action обоих\nRE\n[…]\nс переведён в «Готово», добавлен пункт про npm-обёртку (v0.4.2, в\nработе).\n\nНайдено при сравнении каналов дистрибуции с другим pet-проектом (aiMCPGate).\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: закрыть висящую ссылку на статус GitHub Marketplace",
          "author_name": "Alexander Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T07:21:35Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "08adabf3c9f2564c85dd776f54d3eecd812ac08a",
          "body": "Патч-релиз: единственное изменение с v0.4.0 — исправление тег-пина\nSLSA-генератора (PR #33), делающее SLSA provenance реально проверяемой\n(v0.4.0's provenance была сгенерирована с уже сломанным SHA-пином и не\nможет быть исправлена задним числом — нужен новый релизный прогон).\n\naction.yml gitl-version.default и README/README_RU status-строки +\nпример workflow синхронизированы с тегом, как того требует инвариант\n§12.2 TECHNICAL_PLAN.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): бампнуть версию до v0.4.1",
          "author_name": "Alexander Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T03:40:26Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "e646322aa8c00e3074ac95b2f4d8c6cee6959bea",
          "body": "fix(release): вернуть тег-пин для SLSA-генератора вместо SHA",
          "is_bot": false,
          "headline": "Merge pull request #33 from akomyagin/fix/slsa-generator-tag-pin",
          "author_name": "akomyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T03:39:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "697d3737ee8583dfda3234ed3d5a787634c114f9",
          "body": ".github/workflows/release.yml пинил slsa-framework/slsa-github-generator's\ngenerator_generic_slsa3.yml по commit SHA (@f7dd8c54... # v2.1.0) — это\nломает раздел 3 VERIFY.md (проверку SLSA provenance): slsa-verifier\nрезолвит доверенного билдера по тегу, поэтому SHA-пин делает\n`slsa-verifier verify-ar\n[…]\nverifier против свежих provenance-артефактов) — после мержа будет\nвыпущен v0.4.1, и slsa-verifier verify-artifact прогнан против него для\nподтверждения.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(release): вернуть тег-пин для SLSA-генератора вместо SHA",
          "author_name": "Alexander Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-21T03:38:51Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a1b26c191ec361cef8890661d93bdf5f407b1967",
          "body": "action.yml gitl-version.default и README/README_RU status-строки +\nпример workflow — синхронизированы с новым релизным тегом, как того\nтребует инвариант §12.2 TECHNICAL_PLAN (default Action-версии должен\nсовпадать с последним выпущенным тегом, не опережать main).\n\nВолна v0.4/v0.5 (--staged, review p\n[…]\n\nDoS через инъекцию разделителей в git log, недетерминированность\ndigest, GHE-поддержка в review pr/N — PR #26-32) — 31 коммит с\nпоследнего тега v0.3.1.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): бампнуть версию до v0.4.0",
          "author_name": "Alexander Komyagin",
          "author_login": "akomyagin",
          "committed_at": "2026-07-20T10:57:21Z",
          "body_truncated": true,
          "is_coding_agent": true
        }
      ],
      "releases_count": 15,
      "commits_last_year": 179,
      "latest_release_at": "2026-07-26T09:20:34Z",
      "latest_release_tag": "v0.6.2",
      "releases_from_tags": false,
      "days_since_last_push": 2,
      "active_weeks_last_year": 4,
      "days_since_latest_release": 2,
      "mean_days_between_releases": 0.7
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 42,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/akomyagin/gitl",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/akomyagin/gitl",
          "is_deprecated": false,
          "latest_version": "v0.6.2",
          "repository_url": "https://github.com/akomyagin/gitl",
          "versions_count": 15,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-26T09:18:31Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 2
        },
        {
          "name": "gitl-cli",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "git",
            "ai",
            "code-review",
            "changelog",
            "cli",
            "llm"
          ],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/gitl-cli",
          "is_deprecated": false,
          "latest_version": "0.6.2",
          "repository_url": "https://github.com/akomyagin/gitl",
          "versions_count": 7,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 661,
          "first_published_at": "2026-07-21T08:29:43.128000Z",
          "latest_published_at": "2026-07-26T09:20:49.009000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 2
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 0,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0,
        "collected_at": null
      },
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 35732,
      "source_files_sampled": 103,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "go.mod",
        "npm/package.json"
      ],
      "advisories": {
        "error": null,
        "scope": null,
        "source": null,
        "findings": [],
        "collected": false,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 0,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "go",
        "npm"
      ],
      "dependencies": [
        {
          "name": "github.com/charmbracelet/bubbletea",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.2.4"
        },
        {
          "name": "github.com/charmbracelet/lipgloss",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.0"
        },
        {
          "name": "github.com/creack/pty",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.24"
        },
        {
          "name": "github.com/muesli/termenv",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.16.0"
        },
        {
          "name": "github.com/spf13/cobra",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.8.1"
        },
        {
          "name": "github.com/spf13/pflag",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.5"
        },
        {
          "name": "github.com/spf13/viper",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.19.0"
        },
        {
          "name": "golang.org/x/sync",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.9.0"
        },
        {
          "name": "golang.org/x/term",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.18.0"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 81,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 1
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "akomyagin",
          "commits": 179,
          "avatar_url": "https://avatars.githubusercontent.com/u/5756595?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "action-selftest.yml",
        "ci.yml",
        "release.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "19 out of 19 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/19 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 0,
            "reason": "project has 0 contributing companies or organizations -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 4,
            "reason": "dependency not pinned by hash detected -- score normalized to 4",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 10,
            "reason": "5 out of the last 5 releases have a total of 10 signed artifacts.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 8,
            "reason": "2 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "f72072e99f4de17fdc904a41e1e3e3eba25ea3ad",
        "ran_at": "2026-07-29T00:50:40Z",
        "aggregate_score": 4.1,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-26T09:22:46Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-07-26T09:18:31Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/akomyagin/gitl",
    "host": "github.com",
    "name": "gitl",
    "owner": "akomyagin"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 53,
      "inputs": {
        "security": 41,
        "vitality": 74,
        "community": 30,
        "governance": 52,
        "engineering": 61
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 74,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 57,
            "inputs": {
              "commits_last_year": 179,
              "human_commit_share": 1,
              "days_since_last_push": 2,
              "active_weeks_last_year": 4
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 2 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 2
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "4/52 weeks with commits",
                "points": 2.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 4
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "179 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 179
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "releases_count": 15,
              "latest_release_tag": "v0.6.2",
              "releases_from_tags": false,
              "days_since_latest_release": 2,
              "mean_days_between_releases": 0.7
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "15 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 15
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 2 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 2
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~0.7 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 0.7
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "5 out of the last 5 releases have a total of 10 signed artifacts.",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 30,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 0,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "at_risk",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 47,
            "inputs": {
              "packages": [
                "github.com/akomyagin/gitl",
                "gitl-cli"
              ],
              "dependents": null,
              "ecosystems": "go, npm",
              "total_downloads": null,
              "monthly_downloads": 661
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "661 downloads/month across go, npm",
                "points": 37.6,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 661,
                      "ecosystems": "go, npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 52,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 10,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 71,
            "inputs": {
              "merged_prs": 81,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 1
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "81/82 decided PRs merged",
                "points": 37.8,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 81,
                      "decided": 82
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/19 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "at_risk",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 47,
            "inputs": {
              "followers": 4,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "akomyagin",
              "public_repos": 24,
              "account_age_days": 4661
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "4 followers of akomyagin",
                "points": 5,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 4,
                      "login": "akomyagin"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "24 public repos, account ~12 yr old",
                "points": 22.2,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 24
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 12
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/akomyagin/gitl",
                "gitl-cli"
              ],
              "ecosystems": "go, npm",
              "any_deprecated": false,
              "min_days_since_publish": 2
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "2 package(s) on go, npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 2,
                      "ecosystems": "go, npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 2 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 2
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "15 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 15
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 61,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "3 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "19 out of 19 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 41,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": null,
            "notes": [],
            "value": 41,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 18,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 0,
              "scorecard_aggregate": 4.1
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "19 out of 19 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/19 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 4",
                "points": 2,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "5 out of the last 5 releases have a total of 10 signed artifacts.",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "2 existing vulnerabilities detected",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 65,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "100 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 100,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 70,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0.57,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "go.mod (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "go.mod"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "57 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 57,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 4",
                "points": 4,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 35732,
              "source_files_sampled": 103,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/103 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 103,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-29T00:50:55.320748Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/akomyagin/gitl.svg",
  "full_name": "akomyagin/gitl",
  "license_state": "standard",
  "license_spdx": "MIT"
}

Registros relacionados

Repositorios inspeccionados que comparten etiquetas de catálogo o ecosistemas con akomyagin/gitl. Leer en paralelo →

93deepset-ai/haystackOpen-source AI orchestration framework for building context-engineered, production-ready LLM applications. Design modular pipelines and agent workflows with explicit control over retrieval, routing, memory, and generation. Built for scalable agents, RAG, multimodal applications, semantic search, and conversational systems.Excelente88mui/mui-xMUI X: Build complex and data-rich applications using a growing list of advanced React components, like the Data Grid, Date and Time Pickers, Charts, and more!Excelente88cli/cliGitHub’s official command line toolExcelente87OpenHands/OpenHands🙌 OpenHands: AI-Driven DevelopmentExcelente87langgenius/difyProduction-ready platform for agentic workflow development.Excelente87n8n-io/n8nFair-code workflow automation platform with native AI capabilities. Combine visual building with custom code, self-host or cloud, 400+ integrations.Excelente

Las puntuaciones son señales, no garantías. Reflejan prácticas públicamente visibles en GitHub; no son una auditoría de código ni una garantía de seguridad.

Los datos ausentes se excluyen y los pesos se renormalizan; nunca se puntúan como cero. La metodología es versionada y abierta: métricas v1.13.0, esquema v0.27.0 — metodología completa · wiki de métricas.

Cómo se sitúa un resultado dentro del registro general: estadísticas agregadas — Go, npm.