Registro públicoEn riesgo
Informe de salud del softwareesquema 0.27.0 · métricas 1.13.0 · 2026-07-23 16:49 UTC
cartanova-ai / qgrid
Qgrid (Quota-Grid)
cartanova-ai/qgrid tiene un índice de salud de 44 sobre 100, lo que lo sitúa en la banda En riesgo. Su puntuación más alta es Engineering Quality (55/100) y la más baja, Community & Adoption (25/100). Se actualizó por última vez hace 5 días. Una sola persona concentra la mayor parte del trabajo reciente.
44
global / 100Índice de salud del software
Las métricas se agrupan en categorías ponderadas sobre una escala de 1 a 100. El resultado global parte de su media; cuando la evidencia pública activa la Política de Jurisdicciones de Alto Riesgo, la calificación se ajusta y recibe el límite 49 (En riesgo). Preparación para IA queda fuera.
44
Excelente85-100Ejemplar; cumple prácticamente todos los criterios evaluados
Bueno70-84Saludable; carencias menores
Moderado50-69Aceptable con carencias notables; se recomienda revisión
En riesgo30-49Debilidades significativas; su adopción exige cautela
Crítico1-29Problemas graves (proyecto abandonado, un solo mantenedor, sin higiene)
Perfil de puntuación
Cada eje es una categoría. La forma importa más que la media: un proyecto sano llena toda la figura, mientras que un perfil de picos y cráteres indica que la fortaleza en una dimensión enmascara el riesgo en otra.
Titularidad
CartaNovaOrganización
4 seguidores9 repositorios públicosdesde oct 2025
Este repositorio está respaldado por una organización: una custodia compartida y responsable que puede sobrevivir a cualquier mantenedor individual.
Ecosistemas de paquetes
| Registro | Paquete | Versión | Descargas / mes | Versiones | Última publicación |
|---|---|---|---|---|---|
| npm | @cartanova/qgrid-cli | 2.4.8 | 3336 | 57 | hace 5 días |
| npm | @cartanova/qgrid-sdk⚠ Package no longer supported. Contact Support at https://www.npmjs.com/support for more info. | 1.9.0 | 89 | 17 | hace 71 días |
| npm | @cartanova/qgrid-ai-sdk | 2.4.8 | 2965 | 26 | hace 5 días |
Métricas por categoría
Vitalidad
¿Está vivo el proyecto: se escribe código y se publican versiones?
46
Actividad de desarrollo
76Bueno
Cómo se puntúa
| 36/36 | Recencia de push — último push hace 5 días |
| 11.8/36 | Cadencia de commits — 17/52 semanas con commits |
| 18/18 | Volumen de commits — 472 commits en el último año |
| 10/10 | OpenSSF Scorecard: Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
Datos de entrada utilizados
| commits_last_year | 472 |
| human_commit_share | 1 |
| days_since_last_push | 5 |
| active_weeks_last_year | 17 |
Disciplina de publicación
1Crítico
Cómo se puntúa
| 0/27 | Publica versiones — sin versiones publicadas |
| 0/36 | Recencia de las versiones — sin versiones |
| 0/27 | Cadencia de publicación — sin versiones |
| 0/10 | OpenSSF Scorecard: Signed-Releases — sin datos |
Datos de entrada utilizados
| releases_count | 0 |
Excluidos de la puntuación (sin datos o no aplicable): OpenSSF Scorecard: Signed-Releases. Los pesos restantes se han renormalizado.
Comunidad y Adopción
¿Tiene el proyecto usuarios, descargas, atención y unas condiciones acogedoras para quienes contribuyen?
25
Popularidad y adopción
1Crítico
Cómo se puntúa
| 0/60 | Estrellas — 0 estrellas |
| 0/25 | Forks — 1 forks |
| 0/15 | Observadores — 0 observadores |
Datos de entrada utilizados
| forks | 1 |
| stars | 0 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Salud de la comunidad
25Crítico
Cómo se puntúa
| 22.5/22.5 | README |
| 0/22.5 | Licencia — no se detectó ningún archivo de licencia |
| 0/18 | Guía CONTRIBUTING |
| 0/13.5 | Código de conducta |
| 0/7.2 | Plantilla de issues |
| 0/6.3 | Plantilla de PR |
Datos de entrada utilizados
| has_readme | sí |
| has_license | no |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Adopción en el ecosistema (descargas)
63Moderado
Cómo se puntúa
| 50.7/80 | Descargas mensuales — 6390 descargas/mes en npm |
| 0/20 | Dependientes en el registro — no lo informa este ecosistema |
Datos de entrada utilizados
| packages | @cartanova/qgrid-cli, @cartanova/qgrid-sdk, @cartanova/qgrid-ai-sdk |
| dependents | — |
| ecosystems | npm |
| total_downloads | — |
| monthly_downloads | 6390 |
Excluidos de la puntuación (sin datos o no aplicable): Dependientes en el registro. Los pesos restantes se han renormalizado.
Sostenibilidad y Gobernanza
¿Sobrevivirá el proyecto a sus personas: factor bus, capacidad de respuesta, quién lo respalda y mantenimiento del paquete?
49
Cómo se puntúa
| 9/54 | Factor bus — la mitad de los commits recae en 1 contribuyente(s) |
| 0.5/22.5 | Distribución de commits — el principal contribuyente firma el 98% de los commits |
| 4.1/13.5 | Amplitud de contribuyentes — 3 contribuyentes |
| 0/10 | OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
Datos de entrada utilizados
| bus_factor | 1 |
| contributors_sampled | 3 |
| top_contributor_share | 0,977 |
Cómo se puntúa
| 0/46.8 | Resolución de issues — sin issues o sin datos |
| 38.2/38.3 | Aceptación de PR — 6/6 PR decididos fusionados |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 1/30 approved changesets -- score normalized to 0 |
Datos de entrada utilizados
| merged_prs | 6 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 0 |
Excluidos de la puntuación (sin datos o no aplicable): Resolución de issues. Los pesos restantes se han renormalizado.
Propiedad y custodia
44En riesgo
Cómo se puntúa
| 30/30 | Respaldo de la propiedad — propiedad de una organización |
| 0/20 | Dominio verificado |
| 5/25 | Alcance del propietario — 4 seguidores de cartanova-ai |
| 8.8/25 | Trayectoria — 9 repos públicos, cuenta de ~0 años |
Datos de entrada utilizados
| followers | 4 |
| owner_type | Organization |
| is_verified | — |
| owner_login | cartanova-ai |
| public_repos | 9 |
| account_age_days | 269 |
Mantenimiento de paquetes
80Bueno
Cómo se puntúa
| 25/25 | Publicado y resoluble — 3 paquete(s) en npm |
| 35/35 | Recencia de publicación — última publicación hace 5 días |
| 20/20 | Historial de versiones — 57 versiones en el registro |
| 0/20 | No obsoleto — @cartanova/qgrid-sdk: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info. |
Datos de entrada utilizados
| packages | @cartanova/qgrid-cli, @cartanova/qgrid-sdk, @cartanova/qgrid-ai-sdk |
| ecosystems | npm |
| any_deprecated | sí |
| min_days_since_publish | 5 |
Calidad de Ingeniería
¿Existen unas prácticas mínimas de ingeniería y documentación?
55
Prácticas de ingeniería
48En riesgo
Cómo se puntúa
| 24/24 | Flujos de trabajo de CI — 1 flujo(s) de trabajo |
| 24/24 | Pruebas presentes |
| 0/16 | Configuración de linter |
| 0/9.6 | Hooks de pre-commit |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — 0 out of 1 merged PRs checked by a CI test -- score normalized to 0 |
Datos de entrada utilizados
| has_ci | sí |
| has_tests | sí |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Documentación
65Moderado
Cómo se puntúa
| 30/30 | README |
| 25/25 | Directorio de documentación |
| 0/15 | Sitio de documentación / página del proyecto |
| 10/10 | Descripción del repositorio |
| 0/10 | Topics |
| 0/10 | Wiki |
Datos de entrada utilizados
| topics | — |
| has_wiki | no |
| homepage | — |
| has_readme | sí |
| has_docs_dir | sí |
| has_description | sí |
Seguridad
¿Son sólidas las prácticas visibles de seguridad y de cadena de suministro, sin exposición jurisdiccional de alto riesgo sin resolver?
40
Postura de seguridad
38En riesgo
Cómo se puntúa
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — 0 out of 1 merged PRs checked by a CI test -- score normalized to 0 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 1/30 approved changesets -- score normalized to 0 |
| 0/2.5 | Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 0/2.5 | Licencia — license file not detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 5/5 | Packaging — packaging workflow detected |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — sin datos |
| 7.5/7.5 | Token-Permissions — GitHub workflow tokens follow principle of least privilege |
| 0/7.5 | Vulnerabilities — 87 existing vulnerabilities detected |
Datos de entrada utilizados
| source | openssf_scorecard |
| checks_evaluated | 17 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 1 |
| scorecard_aggregate | 3,8 |
Excluidos de la puntuación (sin datos o no aplicable): signed_releases. Los pesos restantes se han renormalizado.
Avisos de dependencias
46En riesgo
Cómo se puntúa
| 12.6/35 | Dependencias directas libres de avisos conocidos — 2 afectados: fastify 4.29.1 (high 7.5), @anthropic-ai/sdk 0.81.0 (moderate 4.4) |
| 4.9/25 | Dependencias indirectas libres de avisos conocidos — 3 afectados: @fastify/middie 8.3.3 (critical 9.1), fast-uri 2.4.3 (high 7.5), vite 8.0.5 (high 7.5) |
| 28.3/40 | Sin avisos pendientes — 2 paquete(s) con avisos sin atender más allá de 90 días; el más antiguo publicado hace 184 días |
Datos de entrada utilizados
| source | osv |
| advisories | 12 |
| affected_packages | 5 |
| assessed_packages | 649 |
| unassessed_packages | 0 |
| affected_by_severity | critical 1, high 3, moderate 1 |
| direct_affected_packages | 2 |
Se cotejó el cierre de dependencias en tiempo de ejecución de npm:@cartanova/qgrid-cli@2.4.8 —lo que arrastra la instalación del paquete publicado—: 649 paquetes. No se analiza la alcanzabilidad.
Preparación para IA
¿Hasta qué punto está el repositorio preparado para desarrollarse y mantenerse con agentes de codificación de IA? Es una insignia independiente y experimental — peso 0,0, de modo que se presenta por separado y no afecta a la puntuación de salud global.
54
Contexto y guía para agentes
40En riesgo
Cómo se puntúa
| 0/45 | Instrucciones para agentes — sin CLAUDE.md / AGENTS.md / reglas de editor |
| 0/15 | Documentación legible por máquinas (llms.txt) |
| 39.5/40 | Historial de commits legible — 74 de 100 commits humanos declaran su intención (asunto estructurado o cuerpo explicativo) |
Datos de entrada utilizados
| has_llms_txt | no |
| legible_history_share | 0,74 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Cómo se puntúa
| 0/18 | Arranque con un solo comando |
| 22/22 | Pruebas automatizadas |
| 0/11 | Configuración de lint / formato |
| 11/11 | Verificación estática de tipos — packages/ai-sdk/tsconfig.json, packages/api/tsconfig.json, packages/cli/tsconfig.json, packages/sdk/tsconfig.json, packages/web/tsconfig.json |
| 10/10 | Entorno reproducible — lockfile |
| 4/10 | Práctica demostrada con agentes — 2 de los últimos 100 commits con autoría o crédito de agente |
| 0/8 | Mantenimiento automatizado — no se observan actualizaciones automáticas de dependencias |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Datos de entrada utilizados
| has_nix | no |
| has_tests | sí |
| lockfiles | pnpm-lock.yaml |
| has_dockerfile | no |
| typed_language | sí |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | packages/ai-sdk/tsconfig.json, packages/api/tsconfig.json, packages/cli/tsconfig.json, packages/sdk/tsconfig.json, packages/web/tsconfig.json |
| agent_commit_share | 0,02 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
Legibilidad del código para modelos
100Excelente
Cómo se puntúa
| 45/45 | Código verificable por tipos — TypeScript (tipado estático) |
| 55/55 | Tamaños de archivo manejables — 0/695 archivos fuente de más de 60 KB |
Datos de entrada utilizados
| primary_language | TypeScript |
| largest_source_bytes | 41.943 |
| source_files_sampled | 695 |
| oversized_source_files | 0 |
Datos clave
0estrellas de GitHub
3contribuidores
472commits en los últimos 12 meses
5días desde el último push
0versiones publicadas
1factor bus
0issues abiertas
npmecosistemas de paquetes
Advertencias de recopilación de datos
- Could not fetch npm package 'qgrid-api' from its registry
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Más detalle
OpenSSF Scorecard 3.8 / 10
3.8agregado
Evaluación de seguridad independiente y agnóstica en cuanto a herramientas, procedente del proyecto de código abierto OpenSSF Scorecard. Cada comprobación premia una práctica de seguridad, no la herramienta de un proveedor concreto. Las comprobaciones que Scorecard no pudo determinar se marcan como n/d y se excluyen de la puntuación de seguridad (nunca se cuentan como cero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 0 | CI-Tests | 0 out of 1 merged PRs checked by a CI test -- score normalized to 0 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 1/30 approved changesets -- score normalized to 0 |
| 0 | Contributors | project has 0 contributing companies or organizations -- score normalized to 0 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 0 | License | license file not detected |
| 10 | Maintained | 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 10 | Packaging | packaging workflow detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| n/d | Signed-Releases | no releases found |
| 10 | Token-Permissions | GitHub workflow tokens follow principle of least privilege |
| 0 | Vulnerabilities | 87 existing vulnerabilities detected |
Dependencias directas 72
| Registro | Paquete | Restricción de versión | Manifiesto |
|---|---|---|---|
| npm | @ai-sdk/anthropic | ^3.0.0 | packages/api/package.json |
| npm | @ai-sdk/openai | ^3.0.0 | packages/api/package.json |
| npm | @ai-sdk/provider | ^3.0.0 | packages/api/package.json |
| npm | @ai-sdk/provider-utils | ^4.0.0 | packages/api/package.json |
| npm | @anthropic-ai/sdk | ^0.81.0 | packages/api/package.json |
| npm | @better-auth/passkey | catalog: | packages/api/package.json |
| npm | @better-auth/sso | catalog: | packages/api/package.json |
| npm | @logtape/logtape | 2.0.0 | packages/api/package.json |
| npm | @logtape/pretty | 2.0.0 | packages/api/package.json |
| npm | @logtape/redaction | 2.0.0 | packages/api/package.json |
| npm | @oxc-project/runtime | ^0.79.0 | packages/api/package.json |
| npm | ai | ^6.0.1 | packages/api/package.json |
| npm | bcrypt | ^6.0.0 | packages/api/package.json |
| npm | better-auth | ^1.6.0 | packages/api/package.json |
| npm | chalk | ^4.1.2 | packages/api/package.json |
| npm | date-fns | ^4.1.0 | packages/api/package.json |
| npm | dotenv | ^16 | packages/api/package.json |
| npm | knex | ^3.1.0 | packages/api/package.json |
| npm | pg | ^8.16.3 | packages/api/package.json |
| npm | radashi | ^12.2.0 | packages/api/package.json |
| npm | sonamu | ^0.9.9 | packages/api/package.json |
| npm | zod | ^4.3.6 | packages/api/package.json |
| npm | @ai-sdk/anthropic | ^3.0.0 | packages/cli/package.json |
| npm | @ai-sdk/openai | ^3.0.0 | packages/cli/package.json |
| npm | @ai-sdk/provider | ^3.0.0 | packages/cli/package.json |
| npm | @ai-sdk/provider-utils | ^4.0.0 | packages/cli/package.json |
| npm | @anthropic-ai/sdk | ^0.81.0 | packages/cli/package.json |
| npm | @better-auth/passkey | ~1.6.0 | packages/cli/package.json |
| npm | @better-auth/sso | ~1.6.0 | packages/cli/package.json |
| npm | @logtape/logtape | 2.0.0 | packages/cli/package.json |
| npm | @logtape/pretty | 2.0.0 | packages/cli/package.json |
| npm | @logtape/redaction | 2.0.0 | packages/cli/package.json |
| npm | @oxc-project/runtime | ^0.79.0 | packages/cli/package.json |
| npm | ai | ^6.0.1 | packages/cli/package.json |
| npm | bcrypt | ^6.0.0 | packages/cli/package.json |
| npm | better-auth | ^1.6.0 | packages/cli/package.json |
| npm | chalk | ^4.1.2 | packages/cli/package.json |
| npm | commander | ^13.0.0 | packages/cli/package.json |
| npm | date-fns | ^4.1.0 | packages/cli/package.json |
| npm | dotenv | ^16 | packages/cli/package.json |
| npm | fastify | ^4 | packages/cli/package.json |
| npm | ioredis | ^5.8.2 | packages/cli/package.json |
| npm | knex | ^3.1.0 | packages/cli/package.json |
| npm | pg | ^8.16.3 | packages/cli/package.json |
| npm | radashi | ^12.2.0 | packages/cli/package.json |
| npm | sonamu | 0.9.9 | packages/cli/package.json |
| npm | typescript | 5.9.3 | packages/cli/package.json |
| npm | zod | ^4.3.6 | packages/cli/package.json |
| npm | @dnd-kit/core | catalog: | packages/web/package.json |
| npm | @dnd-kit/sortable | catalog: | packages/web/package.json |
| npm | @dnd-kit/utilities | catalog: | packages/web/package.json |
| npm | @sonamu-kit/react-components | ^0.4.0 | packages/web/package.json |
| npm | @tailwindcss/typography | catalog: | packages/web/package.json |
| npm | @tanstack/react-query | ^5.90.12 | packages/web/package.json |
| npm | @tanstack/react-router | 1.143.11 | packages/web/package.json |
| npm | @tanstack/react-virtual | ^3.14.6 | packages/web/package.json |
| npm | @uiw/react-json-view | catalog: | packages/web/package.json |
| npm | axios | ^1.13.2 | packages/web/package.json |
| npm | better-auth | ~1.4.18 | packages/web/package.json |
| npm | clsx | ^2.1.1 | packages/web/package.json |
| npm | dotenv | ^16 | packages/web/package.json |
| npm | eventsource | ^4.1.0 | packages/web/package.json |
| npm | jotai | ^2.14.0 | packages/web/package.json |
| npm | qs | ^6.14.1 | packages/web/package.json |
| npm | radashi | ^12.2.0 | packages/web/package.json |
| npm | react | ^19.2.3 | packages/web/package.json |
| npm | react-day-picker | ^8.10.1 | packages/web/package.json |
| npm | react-dom | ^19.2.3 | packages/web/package.json |
| npm | react-markdown | catalog: | packages/web/package.json |
| npm | remark-gfm | ^4.0.1 | packages/web/package.json |
| npm | tailwind-merge | ^3.4.0 | packages/web/package.json |
| npm | zod | ^4.3.6 | packages/web/package.json |
Todas las dependencias no recopilado
No fue posible recopilar el conjunto de dependencias resuelto para este informe: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Avisos de dependencias 5
Instalar npm:@cartanova/qgrid-cli@2.4.8 arrastra 649 paquetes, directos y transitivos: 5 tienen avisos conocidos, de los cuales 2 son dependencias directas.
| Paquete | Versión | Relación | Gravedad | Avisos | Corregido en |
|---|---|---|---|---|---|
| @fastify/middie | 8.3.3 | indirecta | crítica | 4 | 9.3.2 |
| fastify | 4.29.1 | directa | alta | 3 | 5.8.3 |
| fast-uri | 2.4.3 | indirecta | alta | 2 | 3.1.2 |
| vite | 8.0.5 | indirecta | alta | 2 | 8.0.16 |
| @anthropic-ai/sdk | 0.81.0 | directa | moderada | 1 | 0.91.1 |
Un aviso significa que la versión registrada en el grafo de dependencias cae dentro del rango afectado de un aviso. No se analiza la alcanzabilidad, y el grafo incluye fijaciones de desarrollo y prueba: un hallazgo puede referirse al utillaje y no al software distribuido.
Informe JSON sin procesar legible por máquina
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 1650,
"has_wiki": false,
"homepage": null,
"languages": {
"CSS": 5313,
"HTML": 364,
"Shell": 498,
"JavaScript": 12414,
"TypeScript": 1269037
},
"pushed_at": "2026-07-18T09:30:26Z",
"created_at": "2026-03-30T05:16:43Z",
"owner_type": "Organization",
"updated_at": "2026-07-18T09:30:36Z",
"description": "Qgrid (Quota-Grid)",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "main",
"license_spdx_raw": null,
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript"
]
},
"owner": {
"blog": "https://www.cartanova.ai",
"name": "CartaNova",
"type": "Organization",
"login": "cartanova-ai",
"company": null,
"location": "Korea, South",
"followers": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/240428536?v=4",
"created_at": "2025-10-27T06:28:45Z",
"is_verified": null,
"public_repos": 9,
"account_age_days": 269
},
"license": {
"state": "absent",
"spdx_id": null,
"raw_spdx": null,
"file_present": false,
"scorecard_found": false,
"profile_has_license": false
},
"activity": {
"releases": [],
"recent_commits": [
{
"oid": "16690ea6d8f99de1fef090ce8567d7d0a1e6c528",
"body": null,
"is_bot": false,
"headline": "chore: release 2.4.8",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-18T09:30:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2872f9368bd016e81a4920f3bd1b67f9fd561fb3",
"body": null,
"is_bot": false,
"headline": "chore(sonamu): fallback 관측 계약 산출물 동기화",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-18T09:26:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d537669ad669a150f9b22e1127f7e578b2ad8ad9",
"body": null,
"is_bot": false,
"headline": "docs(qgrid): Fable fallback과 Sonamu workflow 명문화",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-18T09:24:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2a634f2d09674baffd8b861ff91cda71957ee3c3",
"body": null,
"is_bot": false,
"headline": "[ai-sdk] feat: Fable fallback metadata 공개",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-18T09:23:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2632e6284e38055d6b2776f32940cd35cb44c796",
"body": null,
"is_bot": false,
"headline": "[api/web] feat: 모델 fallback과 비용 출처 로그 저장",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-18T09:23:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "42d5b42da3bdffd4b377a2724c0c2078491a1239",
"body": null,
"is_bot": false,
"headline": "[api] feat: Fable refusal fallback 관측 정보 전파",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-18T09:23:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "731afabc71c4333ae619ccc9825e9415833cd800",
"body": null,
"is_bot": false,
"headline": "[api] fix: 공식 모델 가격과 캐시 TTL 과금 동기화",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-18T09:22:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d460c7a51e93ffd99a3344e538e00a8dc04dfaf4",
"body": null,
"is_bot": false,
"headline": "[api] feat: Claude Fable 5 런타임 지원",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-18T09:22:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b6def2d83bc25c105cbd7367381a56e08e02a7f2",
"body": "Claude-Session: https://claude.ai/code/session_019ULc1eTanPUh8XSwd3RsY6",
"is_bot": false,
"headline": "chore: release 2.4.7",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-16T06:16:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5e2ecc34245b7de3619b4a0bda2e6ac1ca50be0c",
"body": null,
"is_bot": false,
"headline": "chore: release 2.4.6",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-16T06:08:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b89ed5868eed6e8043c609b197aa16c43e0c1fb2",
"body": "Claude-Session: https://claude.ai/code/session_019ULc1eTanPUh8XSwd3RsY6",
"is_bot": false,
"headline": "[api/web] fix: 토큰 영역을 openai/anthropic 그룹으로 분리, 강조 제거",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-16T06:06:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d19c7c498b716ac12c95a16ddf34696431d1ea40",
"body": "Claude-Session: https://claude.ai/code/session_019ULc1eTanPUh8XSwd3RsY6",
"is_bot": false,
"headline": "[web] fix: 토큰별 워커 카운트를 전용 칩 영역으로 분리",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-16T05:59:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1498d29ab65254e6e09e1553a63e29c41307efc5",
"body": "Claude-Session: https://claude.ai/code/session_019ULc1eTanPUh8XSwd3RsY6",
"is_bot": false,
"headline": "[api/web] feat: server logs에 토큰별 워커 수 표시",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-16T05:54:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5207d397a40ebb3d96f8d4025724dbad03c0d216",
"body": "Claude-Session: https://claude.ai/code/session_019ULc1eTanPUh8XSwd3RsY6",
"is_bot": false,
"headline": "[api/web] feat: server logs 정보 스트립에 라이브 워커·큐 카운트 추가",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-16T05:46:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "050ac70d5af9188952c0f6543e49d98f84271b0f",
"body": "Claude-Session: https://claude.ai/code/session_019ULc1eTanPUh8XSwd3RsY6",
"is_bot": false,
"headline": "docs: HOST 노출 주의와 Monit 어휘 반영",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-16T05:41:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "62c999a451a2165c25e8e7b2d4e03f2109a446c8",
"body": "Claude-Session: https://claude.ai/code/session_019ULc1eTanPUh8XSwd3RsY6",
"is_bot": false,
"headline": "[web] feat: server logs 탭 — 정보 스트립과 scaling 필터로 개편",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-16T05:41:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fccb47fcb4617877d6d16323f5b594fd1cced55a",
"body": "Claude-Session: https://claude.ai/code/session_019ULc1eTanPUh8XSwd3RsY6",
"is_bot": false,
"headline": "[api] feat: monit 서버 정보 API 추가",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-16T05:41:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "028f34b040aaf916c3863e2497b5090fb535484c",
"body": "Claude-Session: https://claude.ai/code/session_019ULc1eTanPUh8XSwd3RsY6",
"is_bot": false,
"headline": "[web] feat: monit 탭 — 터미널풍 라이브 로그 뷰어 추가",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-16T05:22:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9370ce6cf557667d0fce4c794b218908f3d14829",
"body": "Claude-Session: https://claude.ai/code/session_019ULc1eTanPUh8XSwd3RsY6",
"is_bot": false,
"headline": "[api] chore: monit 클라이언트를 생성",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-16T05:18:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e926ef8cd802f6b5838c3a6e200d384a8476827b",
"body": "Claude-Session: https://claude.ai/code/session_019ULc1eTanPUh8XSwd3RsY6",
"is_bot": false,
"headline": "[api] feat: monit 로그 조회 API 추가",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-16T05:17:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6c83a4dfcd4ac5aeed8b15cc174d303d5306ec3c",
"body": "Claude-Session: https://claude.ai/code/session_019ULc1eTanPUh8XSwd3RsY6",
"is_bot": false,
"headline": "[api] feat: monit 로그 ring buffer와 logtape sink 추가",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-16T05:15:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "521c7a4e05a24cfd8063326f47404af2e9347fd6",
"body": null,
"is_bot": false,
"headline": "chore: codex Fast mode 관련 qgrid skills 문서 갱신",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-16T02:19:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b88c8cbdd734ff0a27b591ef7d1ebb76a324e50a",
"body": null,
"is_bot": false,
"headline": "chore: release 2.4.5",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-15T07:56:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3cbed14fd94f212c09255cb6ab96961093df8fba",
"body": "별도 운영 설정 없이 token당 5개 worker로 시작해 최대 15개까지 확장하도록 기본값을 설정한다. 명시적인 비활성화 경로는 장애 대응용으로 유지한다.",
"is_bot": false,
"headline": "[api] fix: OpenAI autoscaling을 기본 동작으로 적용",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-15T07:54:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "45b22b0020b15b346ff0655002c04868ec6ace93",
"body": null,
"is_bot": false,
"headline": "[api] test: WPT 15 자동 확장 시나리오 검증",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-15T07:52:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "764919b041fbb428c82c84723b02822b60d8e996",
"body": null,
"is_bot": false,
"headline": "fix: sonamu lockfile 갱신",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-15T07:51:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dba3ed657cb6840bb28fc5ba9fd65f823a1e2eec",
"body": "OpenAI rate-limit 응답의 windowDurationMins를 대시보드까지 전달해 primary window를 고정 5시간으로 잘못 표시하지 않도록 한다.",
"is_bot": false,
"headline": "[web] fix: 실제 quota window 기간을 표시",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-15T07:49:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "663f4354b9e4590d3ed9eb5e36194de56b9fa2ba",
"body": "대기 요청이 생기면 토큰별 워커를 단계적으로 확장하고, 유휴 상태에서는 사용 가능한 워커만 최소 풀까지 축소한다. 예상 RSS와 호스트 가용 메모리 제한을 적용하며 기존 고정 풀 동작은 기본값으로 유지한다.",
"is_bot": false,
"headline": "[api] feat: OpenAI 워커 풀을 부하에 따라 자동 조절",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-15T07:30:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c51ffe88c615afaec3cb5fdc1360647ad3916e58",
"body": null,
"is_bot": false,
"headline": "chore: release 2.4.4",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-11T05:04:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "97da08257dcf8a58fc0d1c582aa2e519769fda5d",
"body": "스무스 가중 라운드 로빈 추가",
"is_bot": false,
"headline": "Merge pull request #6 from cartanova-ai/feat/weighted-routing",
"author_name": "동 선 (DongSeon Yoo)",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-11T05:00:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "adac1ac060285b38c64860cf7f0a18ff5f067033",
"body": null,
"is_bot": false,
"headline": "[cli] docs: qgrid 스킬에 가중 토큰 라우팅 반영",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-11T04:54:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5fcfd885fa78d5a5c028d2930191f4088a329f4",
"body": "- schema 준비 전 요청을 받지 않도록 server 생성 전에 migration을 완료\n- 신규 설치를 막던 중복 인덱스 migration을 대칭 no-op으로 변경\n- migration 실패를 정상 종료로 숨기지 않도록 startup을 code 1로 중단\n\nAssisted-by: Codex:gpt-5.6-sol\nSigned-off-by: Haze Lee <hazelee@realignist.me>",
"is_bot": false,
"headline": "[api] fix: 필수 마이그레이션을 listen 전에 안전하게 적용",
"author_name": "Haze Lee",
"author_login": "Nebu1eto",
"committed_at": "2026-07-11T01:29:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "84b6410ff0de89894edd410854451e748b2abf6a",
"body": "- dashboard에서 키별 weight를 바로 조정하도록 숫자 입력과 저장 상태를 추가\n- sibling 설정의 stale 값을 보내지 않도록 필드별 partial mutation을 사용\n\nAssisted-by: Codex:gpt-5.6-sol\nSigned-off-by: Haze Lee <hazelee@realignist.me>",
"is_bot": false,
"headline": "[web] feat: 다른 토큰 설정을 덮지 않고 가중치 수정",
"author_name": "Haze Lee",
"author_login": "Nebu1eto",
"committed_at": "2026-07-10T07:27:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f313c27e8327ddc7f5fc9c9890fc06a41889721",
"body": "- weight 변경도 dispatcher에 반영하도록 token notification 처리를 확장\n- notification과 reconcile의 경합을 막도록 모든 cache 갱신을 직렬화\n- 구버전 trigger와 충돌하지 않도록 boot trigger의 감시 컬럼을 고정\n\nAssisted-by: Codex:gpt-5.6-sol\nSigned-off-by: Haze Lee <hazelee@realignist.me>",
"is_bot": false,
"headline": "[api] feat: 토큰 가중치 변경을 순서대로 전파",
"author_name": "Haze Lee",
"author_login": "Nebu1eto",
"committed_at": "2026-07-10T07:27:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6c9f246e9bae7022c1184f5ea52c1172b50ca48a",
"body": "- cold worker와 대기열 요청을 같은 비율로 분산하도록 가중 선택기를 적용\n- quota 제외와 worker 재생성에도 공정성을 유지하도록 상태 전이를 보강\n\nAssisted-by: Codex:gpt-5.6-sol\nSigned-off-by: Haze Lee <hazelee@realignist.me>",
"is_bot": false,
"headline": "[api] feat: OpenAI 요청을 토큰 가중치로 라우팅",
"author_name": "Haze Lee",
"author_login": "Nebu1eto",
"committed_at": "2026-07-10T07:27:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b8e55c839ebced676e0c3678ea794e20545d38b",
"body": "- fresh-spawn 요청을 설정 비율대로 분산하도록 Anthropic 선택기를 교체\n- token 추가와 갱신에도 누적 상태를 보존하도록 가중치 상태를 동기화\n\nAssisted-by: Codex:gpt-5.6-sol\nSigned-off-by: Haze Lee <hazelee@realignist.me>",
"is_bot": false,
"headline": "[api] feat: Anthropic 요청을 토큰 가중치로 라우팅",
"author_name": "Haze Lee",
"author_login": "Nebu1eto",
"committed_at": "2026-07-10T07:27:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f9f7493242a2fa348b71d9b6989a38117df5977d",
"body": "- 기존 키의 동작을 유지하도록 양의 정수 weight와 기본값 1을 schema에 추가\n- 동시에 수정한 설정을 보존하도록 전달된 token 필드만 단일 query로 갱신\n- weight 변경을 독립적으로 알리도록 versioned DB trigger를 migration에 포함\n\nAssisted-by: Codex:gpt-5.6-sol\nSigned-off-by: Haze Lee <hazelee@realignist.me>",
"is_bot": false,
"headline": "[api] feat: 토큰 가중치를 원자적으로 저장하고 수정",
"author_name": "Haze Lee",
"author_login": "Nebu1eto",
"committed_at": "2026-07-10T07:27:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "22e73c7858cf9eea7bb470c81c69cfb45939dafc",
"body": "- 작은 정수 상태만으로 비율과 공정성을 유지하도록 공용 가중 선택기를 구현\n- 상태 갱신과 후보 제외 동작을 고정하도록 결정적 단위 테스트를 추가\n\nAssisted-by: Codex:gpt-5.6-sol\nSigned-off-by: Haze Lee <hazelee@realignist.me>",
"is_bot": false,
"headline": "[api] feat: smooth weighted round robin 선택기 추가",
"author_name": "Haze Lee",
"author_login": "Nebu1eto",
"committed_at": "2026-07-10T07:26:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "52f99177e41751584ac75f278e75a12a9b0be26f",
"body": "- 동시 Vitest 실행이 충돌하지 않도록 실행별 worker DB 이름을 분리\n- setup 실패에도 계획한 DB를 모두 정리하도록 cleanup 오류를 집계\n\nAssisted-by: Codex:gpt-5.6-sol\nSigned-off-by: Haze Lee <hazelee@realignist.me>",
"is_bot": false,
"headline": "[api] test: 병렬 테스트 DB 실행 단위 격리",
"author_name": "Haze Lee",
"author_login": "Nebu1eto",
"committed_at": "2026-07-10T07:26:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0f4a4f5dcec3513dd48d382658cda46d39c8e597",
"body": "- 이후 기능 diff가 포맷 변경과 섞이지 않도록 기존 코드 형식을 정리\n\nAssisted-by: Codex:gpt-5.6-sol\nSigned-off-by: Haze Lee <hazelee@realignist.me>",
"is_bot": false,
"headline": "[api] chore: 포맷 기준선 정리",
"author_name": "Haze Lee",
"author_login": "Nebu1eto",
"committed_at": "2026-07-10T07:26:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b3d3bebbf81186cb75cfb3f776e6d9e1389c468f",
"body": "- 합의한 가중치 규칙과 호환성 조건을 추적하도록 요구사항을 문서화\n- 구현 순서와 검증 범위를 일관되게 적용하도록 작업 계획을 문서화\n\nAssisted-by: Codex:gpt-5.6-sol\nSigned-off-by: Haze Lee <hazelee@realignist.me>",
"is_bot": false,
"headline": "[*] docs: 가중 토큰 라우팅 설계와 구현 계획 정리",
"author_name": "Haze Lee",
"author_login": "Nebu1eto",
"committed_at": "2026-07-10T07:26:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c161c7611b5122d43faf5e52b729dc097be88931",
"body": null,
"is_bot": false,
"headline": "chore: release 2.4.3",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-10T06:49:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d601efb717a9ed50c4364374f62abe64ad8c990c",
"body": null,
"is_bot": false,
"headline": "fix: sonamu lock 갱신",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-10T06:48:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a88d682a16ea66656ba60740337fced4fd515aad",
"body": "feat: GPT-5.6 Sol/Terra/Luna 모델 지원 추가",
"is_bot": false,
"headline": "Merge pull request #5 from cartanova-ai/codex/gpt-5-6-models",
"author_name": "동 선 (DongSeon Yoo)",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-10T06:40:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dc0b85a792ce79ee842ba01333d21f321201049f",
"body": null,
"is_bot": false,
"headline": "feat: GPT-5.6 Sol/Terra/Luna 모델 지원 추가",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-10T05:56:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8b636074e9314eab1144566a6ea8a56f2d0a9af2",
"body": null,
"is_bot": false,
"headline": "Codex worker 번들 스킬 비활성화",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-09T09:41:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91e00b4bf8987481405af0e40b1ab049c5b78670",
"body": "qgrid 관점에서 이미지가 reference 용도인지 알 필요가 없다. 일반 \"image input\"으로 문구 통일.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor(ai-sdk): 이미지 입력 에러 문구에서 \"reference\" 제거",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-09T09:10:50Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "bbd18109e41e75c51427ea8f88500b99237e16fd",
"body": "로컬 서버 전제로 이미지 reference JSON 인라인 한도를 완화.\n- 서버 Fastify bodyLimit 10MiB (sonamu.config.ts). multipart 30MiB는 별도 경로라 유지.\n- ai-sdk data-URL 가드 900k → 9M자, 라벨 \"9M\". 서버보다 낮게 둬 413 전에 SDK가 잡음.\n- oversized guard 테스트를 새 한도에 맞게 갱신.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(ai-sdk): 이미지 reference 입력 용량 한도 상향 (GEN-172)",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-09T09:10:32Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "45ad789e678483f20f8a45c1f97ff4b262771d92",
"body": null,
"is_bot": false,
"headline": "chore: release 2.4.2",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-07T17:05:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe817932a7b10e65107e193bb9dc85f8a168281b",
"body": "같은 qgrid model 인스턴스에서 여러 tool-call run이 동시에 열릴 때 단일 clientRun 상태가 덮여 request log가 running으로 남던 문제를 막는다. tool result의 callId로 pending run registry를 매칭해 각 runContext에 정확히 follow-up을 붙인다.",
"is_bot": false,
"headline": "fix(ai-sdk): 병렬 tool-call run 매칭 보존",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-07T15:54:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e7389c6987c08ccfc8834057846c5b8d3e30d45a",
"body": null,
"is_bot": false,
"headline": "chore: release 2.4.1",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-07T15:31:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b3dacb8f9ed2c8f6721a488385aa6e9979f88c2f",
"body": "README와 qgrid skill 문서에 image_generation reference input, request-log 저장 방식, smoke 검증 포인트를 반영한다. CLI postinstall은 qgrid 소스 체크아웃에서는 tracked skill mirror를 건드리지 않고, 소비 프로젝트 local install에서는 기존처럼 symlink를 생성하도록 구분한다.",
"is_bot": false,
"headline": "docs(qgrid): reference 이미지 입력 계약 정리",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-07T15:29:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a234f75e8fc5b400988dc6df751fb187ba6b61a",
"body": "이미지 생성 요청의 첫 image_generation step에서 inputImages를 읽어 user prompt 아래에 reference preview를 렌더링한다. 상세 tool args에서는 data URL과 base64 payload를 마스킹해 로그 화면이 과도하게 커지지 않게 한다.",
"is_bot": false,
"headline": "feat(qgrid/web): request log input 이미지 표시",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-07T15:29:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1bae5db607f0df28ec52fab89dc467b545a6cb91",
"body": "AI SDK image/file parts를 Codex image_generation input으로 전달하고, 서버 요청 로그의 image_generation tool_args에 inputImages를 저장한다. 멀티 이미지 출력에서는 첫 tool step에만 reference input을 남겨 로그 중복을 피한다.",
"is_bot": false,
"headline": "feat(qgrid): 이미지 생성 reference input 로깅",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-07T15:28:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a32a4928cac8de3a499091815f5ae746c9245a7",
"body": null,
"is_bot": false,
"headline": "chore: release 2.4.0",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-06T14:08:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4677cfc29d34d23216743f07990070038efe9c2a",
"body": null,
"is_bot": false,
"headline": "fix(cli): install exact self-update version",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-06T14:06:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb44a1d00669e296ec5cfec30429dc74b31b308b",
"body": null,
"is_bot": false,
"headline": "chore: pnpm version올리면서 생기는 placeholder 처리",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-06T13:51:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "880600f2904288a73b6c135fbdfc66436399ef0e",
"body": null,
"is_bot": false,
"headline": "chore: release 2.3.9",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-06T13:46:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c646fc272bbae880cf0d2062bb497538e6e30e3",
"body": "- providerOptions.openai → providerOptions.qgrid 오류 문서 교정 (effort/verbosity 등 실제 키 반영)\n- 미문서 기능 추가: sessionKey prompt cache, image generation, quota threshold, 1M context, QGRID_PROJECT_NAME\n- 루트 \"How it differs\"를 듀얼 런타임(codex app-server + Claude Code stream-json) 서사로 재작성, 만료된 제한 예정 문구 제거\n- 지원 모델 목록\n[…]\n일치 (claude-sonnet-5, opus-4-8, codex-spark)\n- Anthropic structured output 특성 명시: 사후 검증 + 재시도 기본 차단(1회 시도) + 명시적 에러\n- ai-sdk/cli README를 en(기본)/ko로 분리, 상단 언어 라우트 추가, package.json files에 README.ko.md 포함",
"is_bot": false,
"headline": "docs(qgrid): README 전면 최신화 및 en/ko 분리",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-06T13:44:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1a47f923d727d34714917d4fc0b8a526ea035a6b",
"body": null,
"is_bot": false,
"headline": "chore: align pnpm package manager version",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-06T13:44:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8cf5c7fcb77887025b6ff8bdfce7028b33d390bf",
"body": null,
"is_bot": false,
"headline": "feat(cli): sync qgrid skills on install",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-06T13:44:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0bcce667d78884117cfacee12149e4233d1b130d",
"body": null,
"is_bot": false,
"headline": "fix(qgrid/api): 중복 request log step 인덱스 마이그레이션 제거",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-06T07:00:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "62c9af4be045be007f160d108e1248bc005d90ad",
"body": null,
"is_bot": false,
"headline": "release 2.3.8",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-06T06:54:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8fcfc9d21dc9687ef1a73b41b4727347ccf0522f",
"body": null,
"is_bot": false,
"headline": "fix(qgrid/web): icon 타입 선언 로드",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-06T06:54:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8ace128518b48c7f1b9f6f795ea67f81c7eff1dd",
"body": null,
"is_bot": false,
"headline": "docs(qgrid): document Codex image skill behavior",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-06T06:52:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ae013648cd8a468a9b3d33ddced7f12741eaab7a",
"body": null,
"is_bot": false,
"headline": "docs(qgrid): 이미지 비용 추정 근거 정리",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-06T06:47:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ee63793e49a4095cf37ad9e49fc2d92f515c29a3",
"body": null,
"is_bot": false,
"headline": "feat(qgrid/ai-sdk): 이미지 생성 옵션 노출",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-06T06:46:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "88f87308021e6ff44250f8b7c260c197520032b1",
"body": null,
"is_bot": false,
"headline": "feat(qgrid/api): 이미지 응답 로그와 비용 추정",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-06T06:46:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e7b60f9e0472b5eea142e8ed4c05e03261e28e6b",
"body": null,
"is_bot": false,
"headline": "feat(qgrid/api): 이미지 생성 경로 옵션 배선",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-06T06:45:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bff45e135a2028e32f6584857cc8249eb648cc8d",
"body": null,
"is_bot": false,
"headline": "feat(qgrid): 이미지 생성 추정비용 (from openai) 컬럼 추가",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-06T06:44:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "976ac57f43c0afb1fc8f0cda5199a938c8cec421",
"body": null,
"is_bot": false,
"headline": "docs(qgrid): capture skill decision rationale",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-06T05:54:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3c32135d450081a8bfd5f402cc72740dce643468",
"body": "Read the CLI package version at web build time and display it in the sidebar instead of a hardcoded value.\n\nAlso clarify that QGRID_PROJECT_NAME is the recommended default for request-log project labels, while project_name is only the DB/Sonamu field name.",
"is_bot": false,
"headline": "fix(qgrid/web): sync dashboard version with CLI package",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-06T03:19:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1ca3a7d48b8f5958ef2643428fb8365bc32b7497",
"body": null,
"is_bot": false,
"headline": "chore(qgrid): add qgrid skills",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-06T02:15:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6fa3a2d6a2ab7f42ddd355d799f069fdb5b7ac59",
"body": "- 이미지 요청은 항상 cold thread(R8): acquireReuseWorker 가 재사용 좌표가\n 있어도 null 반환.\n- non-stream 전용(R2): generateStream 진입에서 이미지 플래그 명시적 거부.\n- Anthropic 라우팅에 이미지 플래그 도달 시 조용한 폴백 대신 명시적 미지원 에러.",
"is_bot": false,
"headline": "feat(qgrid/api): 이미지 요청 라우팅 배선 (U4)",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-05T04:52:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f038bf755144257c430c0ee3896846404e4b5068",
"body": "worker 에 checkImageGenerationSupport 추가 — capability(provider) +\n적용 모델 멀티모달 여부를 spawn당 캐시로 검증. dispatcher.executeTurn 은\n이미지 요청 시 turn 전 게이트 검증(불충족→gate 에러), 이미지 0개면\nimageAttempted 로 not_called(재시도 무익)/incomplete(재시도 후보) 분류.\nGenerateRequest.imageGeneration + GenerateResult.images 공통 타입 확장\n(costUsd optional 선례). ImageGenerationError 로 구분자 전달.",
"is_bot": false,
"headline": "feat(qgrid/api): 이미지 게이트 사전검증 + 실패 분류 (U3)",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-05T04:49:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38b245b982d43b24dec64e10ee61456bc4792be2",
"body": "turn notification 소비부(non-stream/stream)에서 imageGeneration item 을\n캡처한다. 완성 판정은 item.result 의 PNG 시그니처로(status 문자열 비의존 —\n실측상 완료 시에도 status='generating'), item.id 로 dedup 해 배열 누적.\nitem/started 또는 result 있는 completed 로 imageAttempted 를 기록해\n이미지 0개 실패의 재시도 가능/무익을 구분(U3 입력). turn 실패 시 부분\n이미지 폐기. codex-rpc NotificationMap 에 item/started 추가.",
"is_bot": false,
"headline": "feat(qgrid/api): imageGeneration item 캡처 + TurnResult.images (U2)",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-05T04:42:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e9b952472806fbfe859a84e6d482d8b66e74c35f",
"body": "이미지 플래그 요청에 대해 codex 내장 image_generation tool 이 켜진\nephemeral thread 를 생성한다. 전역 config 는 image_generation=false 유지,\nthread config override(dotted 키)로만 활성화 + baseInstructions 를\n이미지 허용 문구로 교체. 플래그 없는 요청은 tool 구성 무변화.",
"is_bot": false,
"headline": "feat(qgrid/api): per-thread image_generation 활성화 (U1)",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-05T04:37:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f8d1d831fdb91d965aaa86bc3b4f6eb65845b2b",
"body": null,
"is_bot": false,
"headline": "[qgrid/api] sonamu lockfile 갱신",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-01T03:27:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d7864c4d9eae789352b14b4ed74159feeae71d5",
"body": null,
"is_bot": false,
"headline": "release 2.3.7",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-01T03:26:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e3cc99fade19110b04fdf1d2aca1fce864585b9a",
"body": "… usage rpc call 호출이 불가능해서)",
"is_bot": false,
"headline": "[qgrid/api] fix: inactive openai 토큰이면 worker를 찾지않게 변경 (inactivate토큰에서…",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-01T03:25:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a236c308bc159d56362d02dcc34f9eba90ec047f",
"body": null,
"is_bot": false,
"headline": "release 2.3.6",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-01T02:56:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "844e81d9161e3c847459ff40495c94b9ba7a90c0",
"body": null,
"is_bot": false,
"headline": "feat(qgrid/cli): cli 실행시 cc, codex 최신의존성확인",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-01T02:56:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7a8f86caee31ec8050eda65850495a435aa931ca",
"body": null,
"is_bot": false,
"headline": "feat(qgrid/cli): add sonnet-5 model",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-01T02:49:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d533436a57a1e205e7457dc917b2c52eaa0aea05",
"body": null,
"is_bot": false,
"headline": "chore: 불필요한 dockerfile 삭제",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-01T02:47:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2d22f93e1aed24ebe34741012fcd509938c2501",
"body": null,
"is_bot": false,
"headline": "chore: pnpm format",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-01T02:34:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1814bb2b4e573f34d40eacc9704ee23a0816c3d3",
"body": null,
"is_bot": false,
"headline": "chore: add oxfmt & oxlint ignore",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-01T02:30:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56b7640c0fe2c955cc29d1a5c1d8ded784c05ce2",
"body": null,
"is_bot": false,
"headline": "fix: default token quota threshold",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-01T02:21:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d86f95ca8ae07b0085a0cdc32040d6496443032",
"body": null,
"is_bot": false,
"headline": "fix: clarify quota threshold errors",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-01T02:15:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a6f7e9016d3e2cd07209093dc73999529de5d98",
"body": null,
"is_bot": false,
"headline": "feat: add request log ttft",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-07-01T02:09:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5da005141e87ce2d344416e3bdec859752e55116",
"body": null,
"is_bot": false,
"headline": "feat(qgrid): add quota threshold UI",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-06-30T15:53:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af48af2fff5ac7d24b66e4e8f15ddd1ec7907b5b",
"body": null,
"is_bot": false,
"headline": "feat(qgrid): add quota threshold backend",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-06-30T15:53:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e3956505dfc497a6c00fbe264d67aba3bec3e09c",
"body": null,
"is_bot": false,
"headline": "release 2.3.5",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-06-29T13:35:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f01d1f40579ba53ea9932b79a4b5c9d03ff3832b",
"body": null,
"is_bot": false,
"headline": "[qgrid/api] CC사용 시 -p로 넘기는 linux argv 인자 계산해서 --system-prompt로 넘기게 변경",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-06-29T13:34:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "19527eb25cd0785d71c5e124742bd771b783f9cb",
"body": null,
"is_bot": false,
"headline": "release 2.3.4",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-06-29T08:50:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7fa4f8d3bd032925ee25a4f4540994fe70039f40",
"body": "constrained decoding(OpenAI) vs tool+사후검증(Anthropic/CC)의 차이와, 그래서\nAnthropic route 에서 schema required 가 load-bearing 하다는 점을 도메인 어휘로 기록.\n\nRefs: SON-495\nClaude-Session: https://claude.ai/code/session_01N19aLVMq6XxS48o9wHYWnp",
"is_bot": false,
"headline": "docs: add \"Structured output enforcement\" to CONCEPTS.md",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-06-29T08:44:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6d5ccb6b7a76d8d1f5864c9afb050aa40d8603c",
"body": "…rate output\n\nstructured stream 의 비정상 케이스를 정직하게 처리한다.\n\n- retry 고정: spawn 시 MAX_STRUCTURED_OUTPUT_RETRIES=1 (1번만 시도, 재시도 없음).\n 스트림에서 재시도는 시간 2배라 금물. CC 의 0 은 \"시도조차 안 함\"이라 1 로 클램프.\n- 비정상 종료는 에러로: subtype != \"success\"(error_max_structured_output_retries 등)는\n 보존 출력 유무와 무관하게 isError=true. 모델이 가끔 내는 pla\n[…]\ntput 은 graceful error 가 best practice.\n- 진단: isError 메시지에 subtype/terminal_reason 을 노출(stream-json-adapter 가 보존).\n\nRefs: SON-495\nClaude-Session: https://claude.ai/code/session_01N19aLVMq6XxS48o9wHYWnp",
"is_bot": false,
"headline": "fix(qgrid/api): fix structured retry to 1 and fail honestly on degene…",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-06-29T08:43:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4efcaa431e9d106e4fd38f23708a6c02ce02bd51",
"body": "CC --json-schema 는 constrained decoding 이 아니라 합성 StructuredOutput 도구 +\n사후 AJV 검증이라, schema 의 required 가 모델 행동을 좌우한다. required 를 빼면\n모델이 그 필드를 키째 생략한다(실측: loose schema audio 333/365 누락, required\n유지 0 누락). 누락을 받아주려던 anthropic 전용 optionalize 단계가 오히려 누락을\n유발했으므로 제거하고, 모든 provider 가 strictify(required 유지)로\n[…]\ntputSchema / optionalizeJsonSchema 삭제\n- buildProviderOutputSchema no-op 래퍼 제거, 호출부가 buildStrictOutputSchema 직접 호출\n\nRefs: SON-495\nClaude-Session: https://claude.ai/code/session_01N19aLVMq6XxS48o9wHYWnp",
"is_bot": false,
"headline": "fix(qgrid/api): keep schema required for anthropic structured output",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-06-29T08:43:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f29d020185519dc32aebabfef989e0dc1d347aa5",
"body": "…s.qgrid\n\nprovider options를 providerOptions.openai → providerOptions.qgrid 로 통합한다.\n호출자는 provider별 분기 없이 effort/verbosity/reasoningSummary/serviceTier/\nsessionKey 를 qgrid 네임스페이스 하나로 넘기고, qgrid가 각 model route에 맞게\n적용한다. anthropic route는 cold-only라 sessionKey thread 재사용을 하지 않는다\n(reusableSessionKey).\n\n인라인 상수(server URL, effort 기본값, thread TTL, 경고 문구 등)를 qgrid.constant.ts\n로 분리하고 logger.ts의 중복 DEFAULT_SERVER_URL 도 그쪽으로 통합한다.\n\nClaude-Session: https://claude.ai/code/session_01N19aLVMq6XxS48o9wHYWnp",
"is_bot": false,
"headline": "feat(qgrid/ai-sdk): consolidate provider options under providerOption…",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-06-29T08:43:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a202e0479736c820076b1f7b84da28134e960f11",
"body": null,
"is_bot": false,
"headline": "chore: release 2.3.3",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-06-24T10:28:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4f9af23f0b7bf41609e2099095f0b27574ade5ce",
"body": null,
"is_bot": false,
"headline": "feat(qgrid/api): simplify anthropic provider routing",
"author_name": "DongSeonYoo",
"author_login": "DongSeonYoo",
"committed_at": "2026-06-24T09:54:27Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 0,
"commits_last_year": 472,
"latest_release_at": null,
"latest_release_tag": null,
"releases_from_tags": false,
"days_since_last_push": 5,
"active_weeks_last_year": 17,
"days_since_latest_release": null,
"mean_days_between_releases": null
},
"community": {
"has_readme": true,
"has_license": false,
"has_description": true,
"has_contributing": false,
"health_percentage": 25,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "@cartanova/qgrid-cli",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@cartanova/qgrid-cli",
"is_deprecated": false,
"latest_version": "2.4.8",
"repository_url": "https://github.com/cartanova-ai/qgrid",
"versions_count": 57,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 3336,
"first_published_at": "2026-04-13T05:10:07.374000Z",
"latest_published_at": "2026-07-18T09:31:43.431000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
},
{
"name": "@cartanova/qgrid-sdk",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@cartanova/qgrid-sdk",
"is_deprecated": true,
"latest_version": "1.9.0",
"repository_url": "https://github.com/cartanova-ai/qgrid",
"versions_count": 17,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": "Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.",
"maintainers_count": 1,
"monthly_downloads": 89,
"first_published_at": "2026-04-13T05:21:38.142000Z",
"latest_published_at": "2026-05-13T15:20:29.065000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 71
},
{
"name": "@cartanova/qgrid-ai-sdk",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@cartanova/qgrid-ai-sdk",
"is_deprecated": false,
"latest_version": "2.4.8",
"repository_url": "https://github.com/cartanova-ai/qgrid",
"versions_count": 26,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 2965,
"first_published_at": "2026-05-28T03:10:16.752000Z",
"latest_published_at": "2026-07-18T09:31:18.241000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
}
]
},
"popularity": {
"forks": 1,
"stars": 0,
"watchers": 0,
"fork_history": {
"days": [
{
"date": "2026-05-28",
"count": 1
}
],
"complete": true,
"collected": 1,
"total_forks": 1
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0,
"collected_at": null
},
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"packages/ai-sdk/tsconfig.json",
"packages/api/tsconfig.json",
"packages/cli/tsconfig.json",
"packages/sdk/tsconfig.json",
"packages/web/tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 41943,
"source_files_sampled": 695,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [
{
"name": "@fastify/middie",
"direct": false,
"version": "8.3.3",
"severity": "critical",
"ecosystem": "npm",
"cvss_score": 9.1,
"advisory_ids": [
"GHSA-72c6-fx6q-fr5w",
"GHSA-8p85-9qpw-fwgw",
"GHSA-cxrg-g7r8-w69p",
"GHSA-v9ww-2j6r-98q6"
],
"fixed_version": "9.3.2",
"advisory_count": 4,
"oldest_advisory_days": 184
},
{
"name": "fastify",
"direct": true,
"version": "4.29.1",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-444r-cwp2-x5xf",
"GHSA-jx2c-rxcm-jvmq",
"GHSA-mrq3-vjjr-p77c"
],
"fixed_version": "5.8.3",
"advisory_count": 3,
"oldest_advisory_days": 170
},
{
"name": "fast-uri",
"direct": false,
"version": "2.4.3",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-q3j6-qgpj-74h6",
"GHSA-v39h-62p7-jpjc"
],
"fixed_version": "3.1.2",
"advisory_count": 2,
"oldest_advisory_days": 75
},
{
"name": "vite",
"direct": false,
"version": "8.0.5",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-fx2h-pf6j-xcff",
"GHSA-v6wh-96g9-6wx3"
],
"fixed_version": "8.0.16",
"advisory_count": 2,
"oldest_advisory_days": 37
},
{
"name": "@anthropic-ai/sdk",
"direct": true,
"version": "0.81.0",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 4.4,
"advisory_ids": [
"GHSA-p7fg-763f-g4gf"
],
"fixed_version": "0.91.1",
"advisory_count": 1,
"oldest_advisory_days": 84
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"high": 3,
"critical": 1,
"moderate": 1
},
"advisory_count": 12,
"affected_count": 5,
"assessed_count": 649,
"malicious_count": 0,
"assessed_package": "npm:@cartanova/qgrid-cli@2.4.8",
"unassessed_count": 0,
"direct_affected_count": 2
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "@ai-sdk/anthropic",
"manifest": "packages/api/package.json",
"ecosystem": "npm",
"version_constraint": "^3.0.0"
},
{
"name": "@ai-sdk/openai",
"manifest": "packages/api/package.json",
"ecosystem": "npm",
"version_constraint": "^3.0.0"
},
{
"name": "@ai-sdk/provider",
"manifest": "packages/api/package.json",
"ecosystem": "npm",
"version_constraint": "^3.0.0"
},
{
"name": "@ai-sdk/provider-utils",
"manifest": "packages/api/package.json",
"ecosystem": "npm",
"version_constraint": "^4.0.0"
},
{
"name": "@anthropic-ai/sdk",
"manifest": "packages/api/package.json",
"ecosystem": "npm",
"version_constraint": "^0.81.0"
},
{
"name": "@better-auth/passkey",
"manifest": "packages/api/package.json",
"ecosystem": "npm",
"version_constraint": "catalog:"
},
{
"name": "@better-auth/sso",
"manifest": "packages/api/package.json",
"ecosystem": "npm",
"version_constraint": "catalog:"
},
{
"name": "@logtape/logtape",
"manifest": "packages/api/package.json",
"ecosystem": "npm",
"version_constraint": "2.0.0"
},
{
"name": "@logtape/pretty",
"manifest": "packages/api/package.json",
"ecosystem": "npm",
"version_constraint": "2.0.0"
},
{
"name": "@logtape/redaction",
"manifest": "packages/api/package.json",
"ecosystem": "npm",
"version_constraint": "2.0.0"
},
{
"name": "@oxc-project/runtime",
"manifest": "packages/api/package.json",
"ecosystem": "npm",
"version_constraint": "^0.79.0"
},
{
"name": "ai",
"manifest": "packages/api/package.json",
"ecosystem": "npm",
"version_constraint": "^6.0.1"
},
{
"name": "bcrypt",
"manifest": "packages/api/package.json",
"ecosystem": "npm",
"version_constraint": "^6.0.0"
},
{
"name": "better-auth",
"manifest": "packages/api/package.json",
"ecosystem": "npm",
"version_constraint": "^1.6.0"
},
{
"name": "chalk",
"manifest": "packages/api/package.json",
"ecosystem": "npm",
"version_constraint": "^4.1.2"
},
{
"name": "date-fns",
"manifest": "packages/api/package.json",
"ecosystem": "npm",
"version_constraint": "^4.1.0"
},
{
"name": "dotenv",
"manifest": "packages/api/package.json",
"ecosystem": "npm",
"version_constraint": "^16"
},
{
"name": "knex",
"manifest": "packages/api/package.json",
"ecosystem": "npm",
"version_constraint": "^3.1.0"
},
{
"name": "pg",
"manifest": "packages/api/package.json",
"ecosystem": "npm",
"version_constraint": "^8.16.3"
},
{
"name": "radashi",
"manifest": "packages/api/package.json",
"ecosystem": "npm",
"version_constraint": "^12.2.0"
},
{
"name": "sonamu",
"manifest": "packages/api/package.json",
"ecosystem": "npm",
"version_constraint": "^0.9.9"
},
{
"name": "zod",
"manifest": "packages/api/package.json",
"ecosystem": "npm",
"version_constraint": "^4.3.6"
},
{
"name": "@ai-sdk/anthropic",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^3.0.0"
},
{
"name": "@ai-sdk/openai",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^3.0.0"
},
{
"name": "@ai-sdk/provider",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^3.0.0"
},
{
"name": "@ai-sdk/provider-utils",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^4.0.0"
},
{
"name": "@anthropic-ai/sdk",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^0.81.0"
},
{
"name": "@better-auth/passkey",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "~1.6.0"
},
{
"name": "@better-auth/sso",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "~1.6.0"
},
{
"name": "@logtape/logtape",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "2.0.0"
},
{
"name": "@logtape/pretty",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "2.0.0"
},
{
"name": "@logtape/redaction",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "2.0.0"
},
{
"name": "@oxc-project/runtime",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^0.79.0"
},
{
"name": "ai",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^6.0.1"
},
{
"name": "bcrypt",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^6.0.0"
},
{
"name": "better-auth",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^1.6.0"
},
{
"name": "chalk",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^4.1.2"
},
{
"name": "commander",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^13.0.0"
},
{
"name": "date-fns",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^4.1.0"
},
{
"name": "dotenv",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^16"
},
{
"name": "fastify",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^4"
},
{
"name": "ioredis",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^5.8.2"
},
{
"name": "knex",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^3.1.0"
},
{
"name": "pg",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^8.16.3"
},
{
"name": "radashi",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^12.2.0"
},
{
"name": "sonamu",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "0.9.9"
},
{
"name": "typescript",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "5.9.3"
},
{
"name": "zod",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^4.3.6"
},
{
"name": "@dnd-kit/core",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "catalog:"
},
{
"name": "@dnd-kit/sortable",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "catalog:"
},
{
"name": "@dnd-kit/utilities",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "catalog:"
},
{
"name": "@sonamu-kit/react-components",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "^0.4.0"
},
{
"name": "@tailwindcss/typography",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "catalog:"
},
{
"name": "@tanstack/react-query",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "^5.90.12"
},
{
"name": "@tanstack/react-router",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "1.143.11"
},
{
"name": "@tanstack/react-virtual",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "^3.14.6"
},
{
"name": "@uiw/react-json-view",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "catalog:"
},
{
"name": "axios",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "^1.13.2"
},
{
"name": "better-auth",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "~1.4.18"
},
{
"name": "clsx",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "^2.1.1"
},
{
"name": "dotenv",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "^16"
},
{
"name": "eventsource",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "^4.1.0"
},
{
"name": "jotai",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "^2.14.0"
},
{
"name": "qs",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "^6.14.1"
},
{
"name": "radashi",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "^12.2.0"
},
{
"name": "react",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "^19.2.3"
},
{
"name": "react-day-picker",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "^8.10.1"
},
{
"name": "react-dom",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "^19.2.3"
},
{
"name": "react-markdown",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "catalog:"
},
{
"name": "remark-gfm",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "^4.0.1"
},
{
"name": "tailwind-merge",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "^3.4.0"
},
{
"name": "zod",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "^4.3.6"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 6,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "DongSeonYoo",
"commits": 461,
"avatar_url": "https://avatars.githubusercontent.com/u/65344293?v=4"
},
{
"type": "User",
"login": "Nebu1eto",
"commits": 10,
"avatar_url": "https://avatars.githubusercontent.com/u/1115741?v=4"
},
{
"type": "User",
"login": "potados99",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/35878712?v=4"
}
],
"contributors_sampled": 3,
"top_contributor_share": 0.977
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"build-and-publish.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"pnpm-lock.yaml"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 0,
"reason": "0 out of 1 merged PRs checked by a CI test -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 1/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 0,
"reason": "license file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 10,
"reason": "GitHub workflow tokens follow principle of least privilege",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "87 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "16690ea6d8f99de1fef090ce8567d7d0a1e6c528",
"ran_at": "2026-07-23T16:49:24Z",
"aggregate_score": 3.8,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-18T09:31:47Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-11T05:00:19Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/cartanova-ai/qgrid",
"host": "github.com",
"name": "qgrid",
"owner": "cartanova-ai"
},
"metrics": {
"overall": {
"key": "overall",
"band": "at_risk",
"name": "Overall health",
"note": null,
"notes": [],
"value": 44,
"inputs": {
"security": 40,
"vitality": 46,
"community": 25,
"governance": 49,
"engineering": 55
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "at_risk",
"name": "Vitality",
"value": 46,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"commits_last_year": 472,
"human_commit_share": 1,
"days_since_last_push": 5,
"active_weeks_last_year": 17
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 5 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 5
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "17/52 weeks with commits",
"points": 11.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 17
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "472 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 472
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "critical",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"releases_count": 0
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "no releases published",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases_published",
"params": {}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "no releases",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases",
"params": {}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "no releases",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases",
"params": {}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 25,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 1,
"stars": 0,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "1 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 1
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "critical",
"name": "Community health",
"note": null,
"notes": [],
"value": 25,
"inputs": {
"has_readme": true,
"has_license": false,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "no license file detected",
"points": 0,
"status": "missed",
"details": [
{
"code": "license_absent",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 63,
"inputs": {
"packages": [
"@cartanova/qgrid-cli",
"@cartanova/qgrid-sdk",
"@cartanova/qgrid-ai-sdk"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 6390
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "6,390 downloads/month across npm",
"points": 50.7,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 6390,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 49,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 14,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 3,
"top_contributor_share": 0.977
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 98% of commits",
"points": 0.5,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 98
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "3 contributors",
"points": 4.1,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 3
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 72,
"inputs": {
"merged_prs": 6,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "6/6 decided PRs merged",
"points": 38.2,
"status": "met",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 6,
"decided": 6
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 1/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 44,
"inputs": {
"followers": 4,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "cartanova-ai",
"public_repos": 9,
"account_age_days": 269
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "4 followers of cartanova-ai",
"points": 5,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 4,
"login": "cartanova-ai"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "9 public repos, account ~0 yr old",
"points": 8.8,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 9
}
},
{
"code": "account_age_years",
"params": {
"years": 0
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "good",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"packages": [
"@cartanova/qgrid-cli",
"@cartanova/qgrid-sdk",
"@cartanova/qgrid-ai-sdk"
],
"ecosystems": "npm",
"any_deprecated": true,
"min_days_since_publish": 5
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "3 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 3,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 5 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 5
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "57 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 57
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "@cartanova/qgrid-sdk: Package no longer supported. Contact Support at https://www.npmjs.com/support for more info.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 55,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "at_risk",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 48,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "0 out of 1 merged PRs checked by a CI test -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 40,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 38,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 3.8
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "0 out of 1 merged PRs checked by a CI test -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 1/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "GitHub workflow tokens follow principle of least privilege",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "87 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "at_risk",
"name": "Dependency advisories",
"note": "Matched the npm:@cartanova/qgrid-cli@2.4.8 runtime dependency closure — what installing the published package pulls in — 649 packages. Reachability is not analyzed.",
"notes": [
{
"code": "advisories_scope_published",
"params": {
"package": "npm:@cartanova/qgrid-cli@2.4.8",
"assessed": 649
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 46,
"inputs": {
"source": "osv",
"advisories": 12,
"affected_packages": 5,
"assessed_packages": 649,
"unassessed_packages": 0,
"affected_by_severity": "critical 1, high 3, moderate 1",
"direct_affected_packages": 2
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "2 affected: fastify 4.29.1 (high 7.5), @anthropic-ai/sdk 0.81.0 (moderate 4.4)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 2,
"packages": "fastify 4.29.1 (high 7.5), @anthropic-ai/sdk 0.81.0 (moderate 4.4)"
}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "3 affected: @fastify/middie 8.3.3 (critical 9.1), fast-uri 2.4.3 (high 7.5), vite 8.0.5 (high 7.5)",
"points": 4.9,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 3,
"packages": "@fastify/middie 8.3.3 (critical 9.1), fast-uri 2.4.3 (high 7.5), vite 8.0.5 (high 7.5)"
}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "2 advisory-carrying package(s) unaddressed past 90 days; oldest published 184 days ago",
"points": 28.3,
"status": "partial",
"details": [
{
"code": "advisories_stale",
"params": {
"days": 90,
"count": 2,
"oldest": 184
}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 649,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 7
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 54,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.74,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "74 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 39.5,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 74,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 47,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"pnpm-lock.yaml"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
"packages/ai-sdk/tsconfig.json",
"packages/api/tsconfig.json",
"packages/cli/tsconfig.json",
"packages/sdk/tsconfig.json",
"packages/web/tsconfig.json"
],
"agent_commit_share": 0.02,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "packages/ai-sdk/tsconfig.json, packages/api/tsconfig.json, packages/cli/tsconfig.json, packages/sdk/tsconfig.json, packages/web/tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "packages/ai-sdk/tsconfig.json, packages/api/tsconfig.json, packages/cli/tsconfig.json, packages/sdk/tsconfig.json, packages/web/tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "2 of the last 100 commits agent-authored or agent-credited",
"points": 4,
"status": "partial",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 2,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 41943,
"source_files_sampled": 695,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/695 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 695,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Could not fetch npm package 'qgrid-api' from its registry",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-23T16:49:32.346655Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/c/cartanova-ai/qgrid.svg",
"full_name": "cartanova-ai/qgrid",
"license_state": "absent",
"license_spdx": null
}Las puntuaciones son señales, no garantías. Reflejan prácticas públicamente visibles en GitHub; no son una auditoría de código ni una garantía de seguridad.
Los datos ausentes se excluyen y los pesos se renormalizan; nunca se puntúan como cero. La metodología es versionada y abierta: métricas v1.13.0, esquema v0.27.0 — metodología completa · wiki de métricas.
Cómo se sitúa un resultado dentro del registro general: estadísticas agregadas — npm.