drolosoft/immich-photo-manager tiene un índice de salud de 61 sobre 100, lo que lo sitúa en la banda Moderado. Su puntuación más alta es Vitality (82/100) y la más baja, Community & Adoption (40/100). Se actualizó por última vez hace 3 días. Una sola persona concentra la mayor parte del trabajo reciente.
61
global / 100
Moderado
Índice de salud del software
Las métricas se agrupan en categorías ponderadas sobre una escala de 1 a 100. El resultado global parte de su media; cuando la evidencia pública activa la Política de Jurisdicciones de Alto Riesgo, la calificación se ajusta y recibe el límite 49 (En riesgo). Preparación para IA queda fuera.
61
Excelente85-100Ejemplar; cumple prácticamente todos los criterios evaluados
Bueno70-84Saludable; carencias menores
Moderado50-69Aceptable con carencias notables; se recomienda revisión
En riesgo30-49Debilidades significativas; su adopción exige cautela
Crítico1-29Problemas graves (proyecto abandonado, un solo mantenedor, sin higiene)
Perfil de puntuación
Cada eje es una categoría. La forma importa más que la media: un proyecto sano llena toda la figura, mientras que un perfil de picos y cráteres indica que la fortaleza en una dimensión enmascara el riesgo en otra.
Dependencias directas libres de avisos conocidos — ninguna dependencia directa tiene un aviso conocido
25/25
Dependencias indirectas libres de avisos conocidos — ninguna dependencia indirecta tiene un aviso conocido
0/40
Sin avisos pendientes — ningún aviso tiene fecha de publicación
Datos de entrada utilizados
source
osv
advisories
0
affected_packages
0
assessed_packages
29
unassessed_packages
0
affected_by_severity
none
direct_affected_packages
0
Excluidos de la puntuación (sin datos o no aplicable): Sin avisos pendientes. Los pesos restantes se han renormalizado. Se cotejó el cierre de dependencias en tiempo de ejecución de pypi:immich-photo-manager@1.3.0 —lo que arrastra la instalación del paquete publicado—: 29 paquetes. No se analiza la alcanzabilidad.
¿Hasta qué punto está el repositorio preparado para desarrollarse y mantenerse con agentes de codificación de IA? Es una insignia independiente y experimental — peso 0,0, de modo que se presenta por separado y no afecta a la puntuación de salud global.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Más detalle
Historial de estrellas y forks 0 ★ / 8 ⇿
0Estrellas
8Forks
5Versiones
Cuándo se añadió cada estrella y fork, recopilado de GitHub y agrupado por día. El crecimiento acumulado se sitúa justo encima de las adiciones diarias que lo componen, de modo que ambos se leen en conjunto: la acumulación orgánica sostenida no se parece en nada a un pico abrupto y efímero. Cuando esa diferencia es medible, se informa como autenticidad del crecimiento.
Mayor 1Menor 3Parche 1
OpenSSF Scorecard 4.5 / 10
4.5agregado
Evaluación de seguridad independiente y agnóstica en cuanto a herramientas, procedente del proyecto de código abierto OpenSSF Scorecard. Cada comprobación premia una práctica de seguridad, no la herramienta de un proveedor concreto. Las comprobaciones que Scorecard no pudo determinar se marcan como n/d y se excluyen de la puntuación de seguridad (nunca se cuentan como cero).Scorecard v5.5.0 · 2026-07-26 22:51 UTC
No fue posible recopilar el conjunto de dependencias resuelto para este informe: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Avisos de dependencias 0
Instalar pypi:immich-photo-manager@1.3.0 arrastra 29 paquetes, directos y transitivos: 0 tienen avisos conocidos, de los cuales 0 son dependencias directas.
Ningún aviso conocido afecta a las dependencias evaluadas.
Un aviso significa que la versión registrada en el grafo de dependencias cae dentro del rango afectado de un aviso. No se analiza la alcanzabilidad, y el grafo incluye fijaciones de desarrollo y prueba: un hallazgo puede referirse al utillaje y no al software distribuido.
Informe JSON sin procesar legible por máquina
{
"data": {
"repo": {
"topics": [
"albums",
"claude",
"claude-plugin",
"cleanup",
"duplicates",
"gallery",
"geolocation",
"immich",
"mcp",
"mcp-server",
"metadata",
"photo-management",
"photos",
"self-hosted",
"immich-plugin",
"python"
],
"is_fork": false,
"size_kb": 15696,
"has_wiki": true,
"homepage": "https://drolosoft.com/immich-photo-manager.html?lang=en",
"languages": {
"HTML": 562101,
"Shell": 6221,
"Python": 112969,
"JavaScript": 8301
},
"pushed_at": "2026-07-23T12:50:28Z",
"created_at": "2026-03-22T17:26:10Z",
"owner_type": "Organization",
"updated_at": "2026-07-25T06:47:59Z",
"description": "📸🧹🗺️ MCP server for intelligent photo management with Immich — search, curate geographic albums, clean up libraries, and publish galleries",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "HTML",
"significant_languages": [
"HTML",
"Python"
]
},
"owner": {
"blog": "https://drolosoft.com",
"name": "Drolosoft",
"type": "Organization",
"login": "drolosoft",
"company": "Drolosoft",
"location": "Canary Islands, Spain",
"followers": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/270151826?v=4",
"created_at": "2026-03-22T15:31:58Z",
"is_verified": null,
"public_repos": 11,
"account_age_days": 126
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v1.3.1",
"kind": "patch",
"published_at": "2026-07-15T23:00:35Z"
},
{
"tag": "v1.3.0",
"kind": "minor",
"published_at": "2026-05-18T08:31:36Z"
},
{
"tag": "v1.2.0",
"kind": "minor",
"published_at": "2026-04-26T19:25:20Z"
},
{
"tag": "v1.1.0",
"kind": "minor",
"published_at": "2026-04-16T12:19:58Z"
},
{
"tag": "v1.0.0",
"kind": "major",
"published_at": "2026-04-14T18:06:32Z"
}
],
"recent_commits": [
{
"oid": "07688a73c1b98e447a3086558251bed02258beb3",
"body": "Whole-tree `ruff check .` is now clean. Split one-line imports, drop\nunused imports, remove f-prefixes on placeholder-less strings, and\nnarrow two bare `except:` clauses to the exceptions actually raised\n(subprocess.TimeoutExpired; json/KeyError/TypeError on album parsing).\nNo behavior change — helper scripts are lint-only touched.",
"is_bot": false,
"headline": "chore: fix ruff lint errors in root and scripts helpers (#7)",
"author_name": "Juan Andrés Moreno Rubio",
"author_login": "juanatsap",
"committed_at": "2026-07-23T12:50:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6ab4636036829c1514d446ba1e1d7532f50c2a6a",
"body": "The HTTP-mode Host allowlist (MCP_ALLOWED_HOSTS) passes transport_security\nto FastMCP, an argument only present since mcp 1.9. The old >=1.0.0 floor\nlet pip resolve an older mcp that crashes with TypeError at startup.",
"is_bot": false,
"headline": "chore: require mcp>=1.9 for transport_security support (#6)",
"author_name": "Juan Andrés Moreno Rubio",
"author_login": "juanatsap",
"committed_at": "2026-07-23T12:39:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ff5cea31a5477ed2ca5420efad45d1bb35d2f4c0",
"body": "* Updated claude plugin install instructions\n\n* Added setup script to setup doc",
"is_bot": false,
"headline": "Updated claude plugin install instructions (#5)",
"author_name": "Tom Clancy",
"author_login": "tclancy",
"committed_at": "2026-07-23T12:28:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e5c1bdfa601af13837e86231f444b0e5ffb16513",
"body": "… mode (#4)\n\nIn HTTP mode behind a reverse proxy, every MCP request fails with\n421 Misdirected Request (\"Invalid Host header: <domain>\"): the MCP\nPython SDK auto-enables DNS-rebinding protection when the bind host is\nlocalhost, accepting only 127.0.0.1/localhost/[::1] Host headers, and\nthe FastMCP c\n[…]\nalhost defaults)\nallowed, and matching https:// origins allowed. Unset, behavior is\nunchanged.\n\nCo-authored-by: bradhgq <bradhuang0723@gmail.com>\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: MCP_ALLOWED_HOSTS env var to allow proxied Host headers in HTTP…",
"author_name": "brad",
"author_login": "bradhgq",
"committed_at": "2026-07-23T12:28:41Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f3dde09a5d6013744113885598478bb531533f1b",
"body": null,
"is_bot": false,
"headline": "chore: drop unused import; ignore .venv",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-07-20T11:53:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a6806b9c53478bcec0e5ad97000212cf5204a75",
"body": "The release workflow re-runs the suite, builds, refuses to ship an sdist\ncontaining anything beyond package sources, publishes to PyPI via OIDC\ntrusted publishing, and attaches artifacts to the GitHub release.",
"is_bot": false,
"headline": "ci: lint+test on push/PR, gated trusted-publisher release on tags",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-07-20T11:51:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b8947512d3ea915859d0efce1413a7dde6d863f3",
"body": "The URL and API key were interpolated into python3 -c source and a JSON\nheredoc — a quote in either could execute arbitrary Python and corrupted\nevery generated config. All values now reach Python via environment\nvariables with the source in quoted heredocs; the key is read without\necho, and the final connection test no longer aborts the setup under\nset -e on machines without httpx.",
"is_bot": false,
"headline": "security: setup-mcp.sh treats user input as data, never code",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-07-20T11:51:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6003a945067196a80b855ed933d7a6afa5d284c0",
"body": "- update_credentials constructed ImmichClient() through env vars, but an\n existing config.json takes precedence over env — so any second rotation\n validated and hot-swapped the OLD credentials while reporting success.\n ImmichClient now accepts explicit base_url/api_key that bypass the\n override,\n[…]\ns no edits).\n- The startup connectivity warning printed to stdout, which carries\n JSON-RPC under the stdio transport; diagnostics now go to stderr.\n\nEach fix landed against a failing regression test.",
"is_bot": false,
"headline": "fix: credential rotation, edit-preserving rotation, stderr diagnostics",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-07-20T11:51:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d562c88cf96d967f579659cc05ec9b1bbf42cb2c",
"body": "The suite mocks HTTP with respx and stubs the client — no Immich\ninstance needed, so it runs anywhere including CI.",
"is_bot": false,
"headline": "test: offline pytest scaffolding and dev dependencies",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-07-20T11:51:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ebdd39c693e4fac4e21105d5b9f39769ad41a89d",
"body": "Skills documented capabilities the MCP layer never had: GPS radius\nsearch params, asset-search-by-person, dimension-based screenshot\nfiltering, a dryRun flag, and eleven immich_*-prefixed tool names.\nEvery strategy is rewritten around what the 50 tools actually do:\ncity/country text search, CLIP queries, client-side filtering of\nget_map_markers output, taken_after/taken_before windows,\ndelete_assets(force=False) trash semantics, and the real\nmerge_people(person_id, merge_ids) signature.",
"is_bot": false,
"headline": "docs: align skills, commands, and references with real tool capabilities",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-07-12T16:02:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "85f1fbe2e5ae5d2059aa052726570d03abc468ca",
"body": null,
"is_bot": false,
"headline": "docs: add CHANGELOG",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-07-12T15:54:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "727b813b84fae671fcd4716649c8b11cbac43b62",
"body": "env= replaced the whole environment (no PATH), so the child python3\nresolved to whatever the OS found first, never the interpreter running\nthe test.",
"is_bot": false,
"headline": "fix: test-mcp.py inherits the environment and uses sys.executable",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-07-12T15:54:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5713c840d9b7facc189028134e1b3c7e449ff3f7",
"body": null,
"is_bot": false,
"headline": "chore: remove internal maintenance files from the repo",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-07-12T15:54:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "12e8d741571bb404296b55281a662cf6735fe439",
"body": "plugin.json/marketplace.json said 1.2.0/36 tools, SECURITY.md supported\n1.0.x, install guide showed 1.1.0, README badge linked v1.0.0.",
"is_bot": false,
"headline": "chore: sync versions and counts — one version, 50 tools, 12 skills",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-07-12T15:54:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d9c6e17c7783739fbc391fd7c7fb8eb8a5356965",
"body": "The 1.3.0 sdist was built from the full working tree. Hatchling now\nonly-includes src/immich_mcp_server + README/LICENSE/SECURITY, and the\npackage exposes __version__.",
"is_bot": false,
"headline": "security: restrict sdist to package sources; bump to 1.3.1",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-07-12T15:54:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d28482f0132da4bef336c8cd306821db9ecb6a73",
"body": null,
"is_bot": false,
"headline": "chore: add superpowers, outputs, settings to gitignore",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-20T13:05:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb3b4c49563d666b4361ca0f4a6eb56a8a220cdb",
"body": "- Add upper bounds on deps: httpx<1.0, mcp<2.0, uvicorn<1.0\n (prevents broken future releases from auto-installing)\n- Change HTTP default host from 0.0.0.0 to 127.0.0.1\n (prevents unauthenticated network exposure; set MCP_HOST=0.0.0.0\n explicitly if you need remote access)",
"is_bot": false,
"headline": "security: cap dependency versions + bind HTTP to localhost by default",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-20T11:23:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de697d8eb6854ed22270b18c4dde6480d53280de",
"body": "The uvx PR (#3) changed MCP_TRANSPORT default from http to stdio.\nThis breaks existing systemd/launchd/Docker deployments that rely\non the http default.\n\nFix: two entry points, one shared implementation.\n- uvx console script (main) → defaults to stdio\n- python -m invocation (__main__) → defaults to http (backward compat)\n- MCP_TRANSPORT env var overrides both, as before.\n\nAlso updates pyproject.toml version from 1.1.0 to 1.3.0.",
"is_bot": false,
"headline": "fix: preserve backward compat for existing deployments",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-20T11:20:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "41d00def97b2e171a8ec3b2ce981334e46b2a91c",
"body": "Add uvx entry point for MCP server",
"is_bot": false,
"headline": "Merge pull request #3 from kirel/codex-uvx-mcp-server",
"author_name": "Juan Andrés Moreno Rubio",
"author_login": "juanatsap",
"committed_at": "2026-05-20T11:13:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5a46b7ca7f598e78c21787220973e57557da7354",
"body": null,
"is_bot": false,
"headline": "Add uvx entry point for MCP server",
"author_name": "Daniel Kirsch",
"author_login": "kirel",
"committed_at": "2026-05-19T21:10:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6132abb6fcb7cf6910e9d52b419653975b588c7e",
"body": null,
"is_bot": false,
"headline": "docs: rename to 🦙 Glama Score",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-19T06:11:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "35b8992023f07a6ef0c2d41512416e4659c6ca3a",
"body": null,
"is_bot": false,
"headline": "docs: add Glama section with card badge before Contributing",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-19T06:09:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b96bea648d4665d2644c6afb90b333f94dbe926",
"body": null,
"is_bot": false,
"headline": "docs: move Glama card badge below tagline, keep score badge in top row",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-19T06:05:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ca84062ecb7d4159036cca3fb9d0d00e07474596",
"body": null,
"is_bot": false,
"headline": "docs: remove macOS/Linux badges — covered by Glama card",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-18T14:45:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a4deab2ce034ccf269e9baec2f0a67a8f3adaf88",
"body": null,
"is_bot": false,
"headline": "docs: add Glama card badge to README",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-18T14:43:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b633f71f1fe7c4fd0dab013fc3b1a3691de38812",
"body": null,
"is_bot": false,
"headline": "docs: add macOS + Linux badges",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-17T14:38:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c54694ef8ff3d1fff36082753122f8ab4d9775c",
"body": null,
"is_bot": false,
"headline": "docs: improve all 50 tool descriptions for Glama TDQS score",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-17T13:48:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e3c0c18d2dbcc89bfad0789b95ba13e6eb0c0f1f",
"body": "…n, error handling, dedup collision",
"is_bot": false,
"headline": "fix: QA audit — Linux compat, symlink security, empty input validatio…",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-17T13:17:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2561afcb681b18c675506e617ff8e4c1a2745031",
"body": null,
"is_bot": false,
"headline": "assets: new brain+photos icon",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-17T11:56:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a30b6a0d6a927d3c535b1240e448285c3786010",
"body": "… on Immich v2.7",
"is_bot": false,
"headline": "fix: list_assets uses POST /search/metadata — GET /assets returns 404…",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-17T11:06:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c78d2fb94a21252d63006f2f8ced1e068a25383",
"body": null,
"is_bot": false,
"headline": "docs: update tool count to 50, add tags/upload/shared link documentation",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-17T11:01:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4030f7dc1bf28299ac4e201f5c80ddea6185d59a",
"body": null,
"is_bot": false,
"headline": "feat: add shared link get/update/delete — full CRUD",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-17T10:59:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1bb1422dfb9b328555b721dcabef7f69b254790b",
"body": null,
"is_bot": false,
"headline": "feat: add list_assets — filter by favorites, archived, trashed, type",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-17T10:58:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "57ded29cb189c85bc75ed833fa128fdf357ac329",
"body": null,
"is_bot": false,
"headline": "feat: add upload_asset — 25MB limit, extension filter, optional album",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-17T10:57:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38b77e4ca2d63e6135184244522904051f03a105",
"body": null,
"is_bot": false,
"headline": "feat: add tags — 7 client methods + 7 MCP tools",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-17T10:56:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "317ae25c82ce765b68212865a53fdd088ccbbbc3",
"body": "- README: add bulk rotation to Highlights and comparison table\n- README: update tool count (36 → 38) and skill count (11 → 12)\n- SKILLS.md: add Rotate Photos as skill #12 with workflow and behavior docs",
"is_bot": false,
"headline": "docs: add bulk rotation to README, SKILLS.md, and comparison table",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-07T17:40:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7ad77ac328e8c5e31cc1b3989a3e08ac80569b3d",
"body": "Two new MCP tools: rotate_assets and revert_asset_edits.\n\n- Rotate by album or asset IDs (90/180/270 degrees)\n- Non-destructive: uses Immich edits API, originals untouched\n- Rotation accumulates across calls (90+90=180, 360=reverted)\n- Thumbnails served rotated via ?edited=true\n- Revert removes all edits cleanly (isEdited returns to false)\n- New skill: rotate-photos with full workflow documentation\n- MCP-TOOLS.md updated (36 → 38 tools)",
"is_bot": false,
"headline": "feat: add bulk photo rotation and revert tools",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-07T17:21:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "492afc4b03097948a1b353804de8d00fd4133d00",
"body": "marketplace.json, GETTING-STARTED.md, and demo-script.md still\nreferenced the pre-v1.2.0 count of 22 tools. Updated to 36 to\nmatch the actual tool count after people, trash, and duplicate\ntools were added.",
"is_bot": false,
"headline": "docs: update stale tool counts from 22 to 36 for v1.2.0",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-05-06T18:44:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d2cd2c264536a8737625ef0878813ba9eb2ac3d",
"body": null,
"is_bot": false,
"headline": "docs: update 3 skills to use v1.2.0 people, trash & duplicate tools",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-19T18:52:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "40caf115eaedc8b415db764add07ae8dd4a79d5f",
"body": null,
"is_bot": false,
"headline": "docs: add 14 new tools to MCP-TOOLS.md reference",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-19T18:50:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7b5d957d7fac9ab0acb50e670c39bb6e2c035a98",
"body": null,
"is_bot": false,
"headline": "docs: update README for v1.2.0 (36 tools, new capability groups)",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-19T18:49:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "62bb9e33fcd64b9fc9ca80efe51331d36612a11a",
"body": null,
"is_bot": false,
"headline": "chore: bump version to v1.2.0",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-19T18:43:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e1189a4920b368c5b5b40644b36e536969de903",
"body": null,
"is_bot": false,
"headline": "feat: add duplicate detection tools (2 tools)",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-19T18:43:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d261aaedc9e4ef0a983ba25c97477ce87d439c93",
"body": "Add delete_assets, empty_trash, restore_trash, and restore_assets — client methods and MCP tools for trash management.",
"is_bot": false,
"headline": "feat: add trash & deletion tools (4 tools)",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-19T18:42:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0fd93b417a2aa226c4b6408bcb3a80824e7eae0f",
"body": null,
"is_bot": false,
"headline": "feat(tools): add people & faces MCP tools (8 tools)",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-19T18:41:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bebde5e7b1fd66fe36b9ec809024af17ec7f9347",
"body": null,
"is_bot": false,
"headline": "feat(client): add people & faces API methods",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-19T18:39:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "20980f19e3fe5bcaa9784e6d05de8452f1b170ee",
"body": "Prove immich-photo-manager works with any MCP client, not just Claude.\nAdd end-to-end test script, demo transcript, and README section showing\nGemma 4 (local) managing Immich photos via MCP — zero cloud dependency.",
"is_bot": false,
"headline": "docs: add MCP multi-client demo with Gemma 4 + LM Studio",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-18T20:55:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad50438544fae917e6b6b1a1db0db9f4e729f932",
"body": "It's a plain terminal conversation, not markdown.",
"is_bot": false,
"headline": "docs: rename Claude Code transcript from .md to .txt",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-16T15:51:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b0951bd6f62fb79fee4df34ca066f597ba211736",
"body": "Show that the plugin works from the terminal too — not just the\ndesktop app. Adds screenshot, conversation transcript, and a new\n\"Works in Claude Code\" subsection after Quick Start.",
"is_bot": false,
"headline": "docs: add Claude Code demo and README section",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-16T15:45:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bd9752f5d292e49fbb7d0ab6acb1702e829d3aaf",
"body": "Updated 15 files: WORKFLOW.md, PLUGIN-INSTALL-GUIDE.md, demo-script.md,\nand all 10 skill SKILL.md frontmatter versions. Zero v1.0.0 references\nremain in the project.",
"is_bot": false,
"headline": "chore: bump all version references to v1.1.0",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-16T14:47:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5db0a0bfee231d1e7b8a8ec8540062033855e60c",
"body": "New doc/demos/ folder with step-by-step use cases:\n01-GPS neighbor inference, 02-geographic albums, 03-duplicate detection,\n04-library health, 05-natural language search, 06-screenshot cleanup,\n07-midnight timestamps, 08-interactive gallery, 09-auto album curator,\n10-people report. Each shows actual MCP calls on a live library.",
"is_bot": false,
"headline": "docs: add 10 demo walkthroughs with real MCP tool calls",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-16T14:40:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec76cd66ba94ad5b79e31718bb24ff18aacc4f4c",
"body": null,
"is_bot": false,
"headline": "docs: add GPS neighbor inference walkthrough with real MCP calls",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-16T14:36:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5944464ef3493bfdd0e2c1a4c60e50a170fbda42",
"body": null,
"is_bot": false,
"headline": "chore: bump plugin to v1.1.0 — 22 tools, metadata repair",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-16T13:27:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5fa5c309d54fa50722b075ad78ad53fbc0855d07",
"body": "Root cause found: exiftool fails on external library paths with emojis,\nnot an API or plugin issue. Verified working on Immich upload directory.\nRestored full metadata repair claims with known-limitation note about\nexternal libraries with special characters in paths.",
"is_bot": false,
"headline": "docs: restore metadata repair as verified feature",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-16T13:09:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1b0019d5b3aa7b6df46178498ad145d9857fa699",
"body": "…xperimental\n\nEXIF-level writes (GPS, dates, description, rating) via update_asset_metadata\ndon't persist reliably on all Immich servers. Asset-level fields (isFavorite)\nwork. Updated all docs to reflect what's verified vs experimental.\n\n- README: metadata repair → metadata analysis, removed comparison table row\n- MCP-TOOLS: marked EXIF fields as experimental with server version note\n- SKILL.md: added fallback to curl scripts when EXIF writes don't persist",
"is_bot": false,
"headline": "docs: honest metadata capabilities — analysis verified, EXIF writes e…",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-16T12:59:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd8e95510d9504eaa5ae9e90965b12d6fb53873a",
"body": "Add update_asset_metadata MCP tool (22nd tool) that writes dates, GPS\ncoordinates, description, favorites, and ratings back to Immich via\nPUT /assets/{id}. The metadata-fixer skill can now apply fixes directly\ninstead of generating external scripts.\n\nUpdated all docs to reflect 22 tools and highlighted metadata repair\nas a first-class feature in README.",
"is_bot": false,
"headline": "feat: add update_asset_metadata tool — metadata repair is now native",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-16T12:19:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0591effeccae03e73107e6f07a66029e7f6c734b",
"body": "Restructured to match cmux-resurrect pattern:\n- Move \"What It Does\" above Quick Start (show before install)\n- Replace 5 exhaustive tables with focused highlights + doc links\n- Add 6 screenshots from demo animation (programmatic capture)\n- Add screenshot capture script (scripts/capture-screenshots.js)\n- Add data privacy line (\"photos never leave your server\")\n- Trim comparison table, rewrite intro for benefits not specs",
"is_bot": false,
"headline": "docs: rewrite README — shorter, visual, compelling (278→121 lines)",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-15T14:06:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "21b1eede073645eaa4f41759704ed2025dbb5b4e",
"body": null,
"is_bot": false,
"headline": "docs: add Glama score badge and GitHub release badge to README",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-14T18:11:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5ed802908c71c4ea0beaf7f6d3b6ae5d88d0c83",
"body": null,
"is_bot": false,
"headline": "chore: add personal maintainer to glama.json for ownership claim",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-14T17:26:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "30abd992041ed0bcdff40b583b40788870a71ad0",
"body": "Register with Glama (glama.ai) MCP server directory.\nGlama crawls GitHub repos with this file and indexes\nthem within ~24h.",
"is_bot": false,
"headline": "chore: add glama.json for MCP server registry discovery",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-11T20:09:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "27e12a1058b9252c0fd790e3bed157c3e57eb92f",
"body": "Add .plugin-scanner.toml to exclude standalone scripts/ from scan.\nUse placeholder format that avoids false positive secret detection\nin setup command doc. Scanner: 84 → 100 (A - Excellent).",
"is_bot": false,
"headline": "security: achieve 100/100 plugin scanner score",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-11T19:49:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "695e7ab6a73256edb020d93bff3ab8c74a432be4",
"body": "Re-recorded demo GIF and added MP4. Resolved merge conflicts\nwith upstream security changes (kept remote versions).\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: update demo to show /setup-immich-photo-manager and 21 tools",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-11T19:42:00Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a2e35971999de31acca6abe99bc2b162a2de4e4f",
"body": "…secrets\n\nAdd responsible disclosure policy. Replace execSync string interpolation\nwith execFileSync argument arrays in record-demo.js. Normalize API key\nplaceholders to uppercase YOUR-API-KEY-HERE to avoid secret scanner\nfalse positives. Plugin scanner score: 66 → 84 (B).",
"is_bot": false,
"headline": "security: add SECURITY.md, fix shell injection, sanitize placeholder …",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-11T19:38:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8af98065922059823d117994f327e29d110732e9",
"body": "Fix marketplace.json to match Claude Code validation schema: add\n$schema, top-level name/owner, object-type author and source fields.\nUpdate README install commands (claude plugin install, not /plugin).\nAdd doc/PLUGIN-INSTALL-GUIDE.md documenting all errors encountered\nand their fixes for future reference.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: correct marketplace schema + add plugin install guide",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-11T18:57:21Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "42f1ddba570aa6c00097bd587101e6aa1b8810a2",
"body": "…onalism",
"is_bot": false,
"headline": "style: remove emojis from plugin description for marketplace professi…",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-11T02:26:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dcdd14a1ad1a9ddca68877281b3c2a8cae859e20",
"body": null,
"is_bot": false,
"headline": "docs: fix view mode count to 4 (no compact mode in template)",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-11T02:16:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0f64c056dd98641f6727f1bc8c22674fb5fa2f49",
"body": "…marketplace",
"is_bot": false,
"headline": "fix: use CLAUDE_PLUGIN_ROOT per official docs, github source type in …",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-11T02:11:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6547e2ec34ed07604b338e8e80a363a724f99337",
"body": "…posure",
"is_bot": false,
"headline": "security: mask API key in get_connection_info, remove api_key_full ex…",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-11T01:50:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91b888771eaec0bc9dcc084160a191a8ff3b34cc",
"body": "CRITICAL fixes:\n\n- Remove legacy Go implementation (main.go, immich.go, go.mod, go.sum, 9.8MB binary)\n\n- Remove run-mcp-server.sh (referenced Go binary)\n\n- Fix tool count: plugin.json 19>21, marketplace.json 16>21\n\n- Fix tool names in album-manager (immich_* > canonical short names)\n\n- Replace ./imm\n[…]\no 4 command frontmatters\n\n- Use relative path for demo.gif in README\n\n- Deduplicate CORS section in setup command (reference doc/CORS-SETUP.md)\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: pre-submission cleanup for Anthropic plugin directory",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-11T01:38:57Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "83132eeaede03fbc32099507ca32c538393143bf",
"body": "- Remove personal URL (gallery.txeo.club) from auto-album-curator and travel-map\n\n- Remove hardcoded credentials from test-mcp.py, use placeholders\n\n- Fix album-manager: 4>5 view modes, dual>triple theme support\n\n- Remove stale shared-link reference from setup command\n\n- Remove Strategy 3 internal label from photo-search heading\n\n- Delete stale commit-docs.sh script\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: fix inconsistencies across skills, commands, and test script",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-11T01:23:09Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d77344ce18fd26b91522abb93caa4bcb2acfdb16",
"body": "…earch\n\n- Created doc/CORS-SETUP.md with Nginx/Caddy/Traefik CORS configuration\n- Removed Strategy 2 (Shared Links) from photo-search skill — it created\n public links as a side effect and added complexity without clear benefit\n- Simplified strategy decision flow: base64 is always the default\n- Upda\n[…]\nnew standalone guide\n- Added CORS Setup Guide to README documentation table\n- Removed internal strategy labels from user-facing output guidance\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: add CORS setup guide, remove shared links strategy from photo-s…",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-11T00:52:22Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a05617ca3b581b8ef439d6229159e45597dd11e7",
"body": "- Fix view modes count: 4 → 5 (Detail, Icon, List, Masonry, Gallery)\n- Fix theme count: \"dark/light\" → 3 themes (Light, System, Dark)\n- Fix MCP tools count in GETTING-STARTED: 19 → 21\n- Clarify CORS statement in ARCHITECTURE: doesn't help in Cowork sandbox\n but does enable direct URL loading in regular browsers\n- Remove stale _run-once-makedirs-fix.sh script\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: fix inconsistencies in README, ARCHITECTURE, and GETTING-STARTED",
"author_name": "Juan",
"author_login": "txeo",
"committed_at": "2026-04-10T22:59:15Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "158c749cc2f5e4cae608f711d88f5e2109d5ed2c",
"body": "…ill docs\n\nReplaced all instances of personal Immich URL with your-immich-server.com\nto ensure clean experience for new users installing the plugin.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "security: replace hardcoded server URL with generic placeholder in sk…",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-10T21:24:20Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "5397a80c35178ea48447b61c43fa10ccc0c53cf4",
"body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: remove WEB-FIXES-TODO from repo, moved to Desktop",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-10T20:26:44Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ae8853b112c1bf3ca53769ed532aac95141226dd",
"body": "…xes TODO\n\nThe MCP server is Python/stdio, not Go/HTTP. README and MCP-TOOLS.md\nstill referenced Go, Streamable HTTP, mcp-go, and port 8626.\nUpdated to reflect the actual Python implementation with stdio transport.\n\nAlso corrected tool count from 16 to 21 (added Thumbnails and Config\ncategories), re\n[…]\n stale Go Report Card badge, and added Python 3.10+\nas a prerequisite.\n\ndoc/WEB-FIXES-TODO.md lists equivalent changes needed on drolosoft.com.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: fix Go→Python architecture, update tool count to 21, add web fi…",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-10T20:20:37Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "1d1385fbc53f52fdc500eec771f5714fbdc5d2e3",
"body": "The Cowork viewer runs in an about: sandbox that blocks all external\nnetwork requests. This doc explains why base64 data URIs are the only\nviable approach for embedding thumbnails, with full data flow diagrams,\nperformance characteristics, and the fallback direct-API workflow.\n\nAlso adds troubleshoo\n[…]\n'\nissue (ping is a public endpoint), cross-references between docs, and\ncorrects the MCP-TOOLS architecture section to reflect stdio transport.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: add ARCHITECTURE.md explaining base64 thumbnail delivery in Cowork",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-10T19:31:53Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ecd862b20ffe9794fe6224b94c002ed06098cd6e",
"body": "- SKILL.md v1.2.0: document three thumbnail strategies (base64 default,\n shared links for albums, CORS-enabled direct URLs as ideal)\n- Add strategy decision flow for choosing the right approach\n- Updated generation workflow example to show shared link path\n- setup command: add Post-Install CORS Configuration section with\n Nginx, Caddy, and Traefik examples\n- Explain security considerations for Access-Control-Allow-Origin\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: thumbnail delivery strategies and CORS post-install guide",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-09T22:35:44Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f2dfd27bd1a4b20b0bddef9115c494ec7030a7d9",
"body": "Prevents accidental commit of persisted credentials (config.json\nwith API keys) from the cache directory.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: add .mcpb-cache/ to .gitignore",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-09T13:22:42Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "5881ed9e93cb4bea6f29e3734b39ccb73bae4fab",
"body": "_find_cache_dir now accepts the env var path even when the directory\nhasn't been created yet. save_config calls os.makedirs(exist_ok=True)\nso credentials persist on first use without manual directory creation.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: create .mcpb-cache dir on save_config if it doesn't exist",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-09T12:55:10Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "8c6e852df7d1cccb15c492d48f79fb66e1b4137c",
"body": "Cowork mounts remote plugin configs as read-only, so users cannot update\ntheir Immich API key without reinstalling the plugin. This adds a\ncredentials override mechanism using the writable .mcpb-cache directory:\n\n- ImmichClient now checks .mcpb-cache/config.json before env vars\n- New update_credenti\n[…]\naps creds\n- mcp.json exposes IMMICH_CACHE_DIR for reliable cache dir discovery\n- Setup skill updated to use update_credentials for key rotation\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add update_credentials MCP tool for in-session API key rotation",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-09T11:27:57Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "080d8df7801709332ad019a943896f1a01379a1a",
"body": "Cowork sandbox:\n- Viewer runs at about: protocol, blocks ALL external requests\n- Only data: URIs (base64) work for images\n\nTemplate (viewer-template.html):\n- Reverted from URL-based to base64 embedded thumbnails\n- Removed fetchThumb(), thumbUrl(), thumbCache, API_KEY\n- loadPage(): first page immedia\n[…]\ns):\n- Documented base64 approach with get_thumbnails_batch\n- size=thumbnail (250px, ~18KB avg), limit ~50 photos\n- Renamed /setup to /setup-immich-photo-manager to avoid\n collision with other plugins",
"is_bot": false,
"headline": "fix: base64 thumbnails, lazy loading, pagination, rename setup command",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-09T09:57:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9da24bc09973765a2a23af591bfbede784279f95",
"body": "Cowork sandbox discovery:\n- Cowork viewer runs at about: protocol with origin: null\n- ALL external network requests are blocked (fetch, img src, etc.)\n- Only data: URIs (base64) work for images\n- URL-based approach (fetch + x-api-key) does NOT work in Cowork\n\nTemplate changes (viewer-template.html):\n[…]\nthumbnail (250px, ~18KB avg)\n- Limit galleries to ~50 photos (~0.9MB HTML)\n- Removed all references to fetch(), API_KEY, URL-based loading\n- Updated generation workflow to include thumbnail fetch step",
"is_bot": false,
"headline": "fix: revert to base64 thumbnails + fix lazy loading & pagination",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-09T09:39:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "33a96deb6a511292fa82444bb2deb9cbe88abc5f",
"body": "New MCP tool:\n- get_thumbnails_batch: fetch base64 thumbnails by asset ID list without\n requiring an album (19th tool). Used by search workflow to avoid creating\n temporary albums.\n\nSearch workflow redesign (photo-search SKILL.md):\n- NEVER create temporary albums during search\n- Find real user-cre\n[…]\noto-search + album-manager):\n- Documented {{PHOTO_ENTRIES}} placeholder format\n- Documented .flat() pattern and parseInt fallbacks\n- Added EXIF location quirks (Tikal=Flores, Lanzarote=municipalities)",
"is_bot": false,
"headline": "feat: add get_thumbnails_batch + harden template against JS injection",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-08T22:14:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "07e9673370f9f26cd4284f12e9fa69b804e82532",
"body": "New MCP tool:\n- get_thumbnails_batch: fetch base64 thumbnails by asset ID list without\n requiring an album (19th tool). Used by search workflow to avoid creating\n temporary albums.\n\nSearch workflow redesign (photo-search SKILL.md):\n- NEVER create temporary albums during search\n- Find real user-cre\n[…]\nALBUM_TOTAL: already had parseInt (confirmed)\n- ALBUMS_JSON: already had safe parser with try/catch (confirmed)\n\nUpdated SKILL.md docs with relaxed placeholder rules reflecting the\ndefensive template.",
"is_bot": false,
"headline": "feat: add get_thumbnails_batch + harden template against JS injection",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-08T21:11:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7c8a6ff4ff45c00c3c7effa3a2793a0e2716e498",
"body": "- Added get_thumbnails_batch to immich_client.py and server.py (19th MCP tool)\n Fetches base64 thumbnails by asset ID list without requiring an album.\n- Rewrote photo-search SKILL.md: NEVER create temporary albums during search.\n New workflow: search -> find real albums -> use get_album_thumbnails\n[…]\nted Albums = real albums only.\n- Updated album-manager SKILL.md: clarified Related Albums must be real,\n user-created albums. Never fabricate album entries.\n- Updated plugin.json: 18 -> 19 MCP tools.",
"is_bot": false,
"headline": "feat: add get_thumbnails_batch tool + rewrite search workflow",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-08T20:04:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f774d173a675993a578047d28776b89b40b5e255",
"body": "New MCP tools:\n- get_asset_thumbnail: base64 thumbnail for a single asset\n- get_album_thumbnails: batch thumbnails for an album (gallery pipeline)\n\nTemplate fixes (viewer-template.html):\n- ALBUM_TOTAL: wrapped in parseInt() — no longer breaks on non-numeric values\n- ALBUMS_JSON: accepts both array a\n[…]\n plain integers for JS values)\n- Clarified ALBUMS_JSON format (array or single object, quoted keys)\n- Updated plugin description: 16 → 18 tools\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: thumbnail tools + safe template placeholders",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-08T19:35:44Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "8b66bbad23024cc08f7134f47f0924f679c94689",
"body": "- viewer-template.html: wrap ALBUM_TOTAL in parseInt() so non-numeric\n values like '200+' no longer break the gallery JS\n- server.py + immich_client.py: add get_asset_thumbnail and\n get_album_thumbnails tools (18 tools total)\n- SKILL.md (photo-search, album-manager): add placeholder rules section\n\n[…]\nCOUNT/ALBUM_TOTAL must be plain ints\n- plugin.json: update description (16 → 18 tools)\n- build-plugin.sh: new script to rebuild the .plugin zip\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: safe ALBUM_TOTAL parsing + add thumbnail MCP tools",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-08T19:21:21Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "fa645d2af7e43adc34c882225553d96be1270875",
"body": "These two tools were referenced by the photo-search and album-manager\nskills but were missing from the server. They enable the HTML gallery\ngeneration pipeline by returning base64-encoded thumbnails.\n\nAlso adds build-plugin.sh for rebuilding the Cowork .plugin file and\nupdates the plugin description (16 → 18 tools).\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add get_asset_thumbnail and get_album_thumbnails MCP tools",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-08T17:04:38Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "9c42350a566486c74126b3d4f760d152eaa31a37",
"body": null,
"is_bot": false,
"headline": "feat: setup-mcp.sh auto-allows immich MCP tools in Claude permissions",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-08T14:35:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "47f1db7af1ab7b5316b20d3b87a9441180c4cb98",
"body": "…ailable\n\nReturns a helpful JSON error message with setup instructions instead of\npropagating a raw 500 Internal Server Error when the Immich machine\nlearning service is not running or Smart Search (CLIP) is disabled.\nAlso documents the ML requirement in README.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: graceful error handling for search_smart when ML service is unav…",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-08T14:30:09Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "510ad76f2f74cab5f07412bd5909c9c8af8a3972",
"body": "…rk + connection test",
"is_bot": false,
"headline": "feat: setup-mcp.sh now configures Claude Desktop + Claude Code + Cowo…",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-08T14:08:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "69b65c6c192ec7960736f6101795d5933d7ae53b",
"body": null,
"is_bot": false,
"headline": "fix: restore execute permission on setup-mcp.sh",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-08T14:00:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1bdb702922bbae7328ba8e9dc7260c437d03aac7",
"body": "…d of manual warning",
"is_bot": false,
"headline": "fix: setup-mcp.sh auto-merges into existing ~/.claude/mcp.json instea…",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-08T13:58:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "42df4e84460dcd7d40834a6786375b95a0423b9d",
"body": "…ence\n\n- plugin.json: mcpServers now points to .claude-plugin/mcp.json\n- Fix tool count from 19 to 16 across all docs and configs\n- README: rewrite Quick Start with correct claude plugin commands and setup-mcp.sh\n- README: update architecture diagram from Go HTTP to Python stdio\n- GETTING-STARTED: rewrite for Python MCP server with setup-mcp.sh workflow\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: update README, GETTING-STARTED, fix tool count and plugin refer…",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-08T12:25:26Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d020030c3c53e6859a82ec39106a240bf40823f3",
"body": "…json\n\n- Fix setup-mcp.sh: all escaped $ replaced with proper $ (was syntax error)\n- Add src/requirements.txt with mcp and httpx deps\n- Remove .mcp.json from git tracking (user-generated, contains API keys)\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: critical audit fixes - setup script, requirements, untrack .mcp.…",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-08T12:19:19Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "9c110e84b697ef258cfdea246df54aadef247b41",
"body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "rename marketplace to drolosoft-marketplace",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-07T23:22:35Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "305cb6ec804c314314dbe294088a320017f1e4a1",
"body": "- .claude-plugin/mcp.json: replaced cwd with PYTHONPATH env var (cwd not supported by Claude Code)\n- .mcp.json.example: updated to PYTHONPATH-based stdio config template\n- scripts/setup-mcp.sh: interactive setup script for first-time users\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: use PYTHONPATH instead of cwd for MCP config, add setup script",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-07T19:34:26Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f5c7b7edcf120167fdd927deb4a1f3ca7bd5d321",
"body": "…e URL\n\n- Change .claude-plugin/mcp.json from HTTP to stdio transport (Claude Code\n silently ignores HTTP-based MCP configs, causing tools to not appear)\n- Replace local file:// source URL in marketplace.json with GitHub URL\n- Normalize .mcp.json with relative cwd and consistent placeholders",
"is_bot": false,
"headline": "fix: use stdio transport in bundled MCP config, fix marketplace sourc…",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-05T05:46:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e18a5de95c2c495571a5359d6840bf40f51962ee",
"body": "- Add Context type hint to all ctx parameters so FastMCP injects context\n automatically instead of exposing it as a required tool input\n- Support dual transport: stdio (for Cowork cloud) and HTTP (for local dev)\n via MCP_TRANSPORT env var\n- Update .mcp.json to use stdio subprocess config\n- Preserve HTTP config as .mcp.http.json.example",
"is_bot": false,
"headline": "feat: add stdio transport for Cowork compatibility",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-05T05:31:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "775df6888cfa6fdad5b5a6402d703ac8cf7a3876",
"body": "…Code",
"is_bot": false,
"headline": "fix: remove unrecognized icon key, fix marketplace schema for Claude …",
"author_name": "juanatsap",
"author_login": "juanatsap",
"committed_at": "2026-04-05T04:47:08Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 5,
"commits_last_year": 134,
"latest_release_at": "2026-07-15T23:00:35Z",
"latest_release_tag": "v1.3.1",
"releases_from_tags": false,
"days_since_last_push": 3,
"active_weeks_last_year": 9,
"days_since_latest_release": 10,
"mean_days_between_releases": 23.1
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 62,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "immich-photo-manager",
"exists": true,
"license": "MIT",
"keywords": [
"immich",
"mcp",
"photo-management",
"photos",
"Development Status :: 4 - Beta",
"Intended Audience :: End Users/Desktop",
"License :: OSI Approved :: MIT License",
"Programming Language :: Python :: 3",
"Programming Language :: Python :: 3.10",
"Programming Language :: Python :: 3.11",
"Programming Language :: Python :: 3.12",
"Programming Language :: Python :: 3.13"
],
"ecosystem": "pypi",
"matches_repo": true,
"registry_url": "https://pypi.org/project/immich-photo-manager/",
"is_deprecated": false,
"latest_version": "1.3.0",
"repository_url": "https://github.com/drolosoft/immich-photo-manager",
"versions_count": 1,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": "2026-05-20T12:03:59.050514Z",
"latest_published_at": "2026-05-20T12:04:05.450561Z",
"latest_version_yanked": null,
"days_since_latest_publish": 67
}
]
},
"popularity": {
"forks": 8,
"stars": 32,
"watchers": 1,
"fork_history": {
"days": [
{
"date": "2026-04-11",
"count": 1
},
{
"date": "2026-04-17",
"count": 1
},
{
"date": "2026-05-09",
"count": 1
},
{
"date": "2026-05-19",
"count": 1
},
{
"date": "2026-05-25",
"count": 1
},
{
"date": "2026-06-21",
"count": 1
},
{
"date": "2026-07-16",
"count": 1
},
{
"date": "2026-07-18",
"count": 1
}
],
"complete": true,
"collected": 8,
"total_forks": 8
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"demos"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": true,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 53318,
"source_files_sampled": 17,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"pyproject.toml",
"src/requirements.txt"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 29,
"malicious_count": 0,
"assessed_package": "pypi:immich-photo-manager@1.3.0",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"pypi"
],
"dependencies": [
{
"name": "httpx",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.24.0,<1.0"
},
{
"name": "mcp",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=1.9.0,<2.0"
},
{
"name": "uvicorn",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.24.0,<1.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 5,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 1
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "txeo",
"commits": 64,
"avatar_url": "https://avatars.githubusercontent.com/u/2773272?v=4"
},
{
"type": "User",
"login": "juanatsap",
"commits": 50,
"avatar_url": "https://avatars.githubusercontent.com/u/56647674?v=4"
},
{
"type": "User",
"login": "kirel",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/9124?v=4"
},
{
"type": "User",
"login": "tclancy",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/67803?v=4"
},
{
"type": "User",
"login": "bradhgq",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/21327628?v=4"
}
],
"contributors_sampled": 5,
"top_contributor_share": 0.547
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"release.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 5,
"reason": "2 out of 4 merged PRs checked by a CI test -- score normalized to 5",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 2/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "07688a73c1b98e447a3086558251bed02258beb3",
"ran_at": "2026-07-26T22:51:41Z",
"aggregate_score": 4.5,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-23T12:50:52Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-23T12:50:25Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/drolosoft/immich-photo-manager",
"host": "github.com",
"name": "immich-photo-manager",
"owner": "drolosoft"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 61,
"inputs": {
"security": 56,
"vitality": 82,
"community": 40,
"governance": 51,
"engineering": 75
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 82,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"commits_last_year": 134,
"human_commit_share": 1,
"days_since_last_push": 3,
"active_weeks_last_year": 9
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 3 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 3
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "9/52 weeks with commits",
"points": 6.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 9
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "134 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 134
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 5,
"latest_release_tag": "v1.3.1",
"releases_from_tags": false,
"days_since_latest_release": 10,
"mean_days_between_releases": 23.1
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "5 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 5
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 10 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 10
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~23.1 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 23.1
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 40,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 31,
"inputs": {
"forks": 8,
"stars": 32,
"watchers": 1,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "32 stars",
"points": 24.2,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 32
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "8 forks",
"points": 7,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 8
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "1 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 1
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 51,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 29,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 5,
"top_contributor_share": 0.547
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 55% of commits",
"points": 10.2,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 55
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "5 contributors",
"points": 6.8,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 5
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 60,
"inputs": {
"merged_prs": 5,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 1
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "5/6 decided PRs merged",
"points": 31.9,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 5,
"decided": 6
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 2/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 41,
"inputs": {
"followers": 1,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "drolosoft",
"public_repos": 11,
"account_age_days": 126
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "1 followers of drolosoft",
"points": 2.2,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 1,
"login": "drolosoft"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "11 public repos, account ~0 yr old",
"points": 8.5,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 11
}
},
{
"code": "account_age_years",
"params": {
"years": 0
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "good",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"packages": [
"immich-photo-manager"
],
"ecosystems": "pypi",
"any_deprecated": false,
"min_days_since_publish": 67
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on pypi",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "pypi"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 67 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 67
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "1 published versions",
"points": 4,
"status": "partial",
"details": [
{
"code": "published_versions",
"params": {
"count": 1
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 75,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 58,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "2 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 2
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "2 out of 4 merged PRs checked by a CI test -- score normalized to 5",
"points": 10,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"topics": [
"albums",
"claude",
"claude-plugin",
"cleanup",
"duplicates",
"gallery",
"geolocation",
"immich",
"mcp",
"mcp-server",
"metadata",
"photo-management",
"photos",
"self-hosted",
"immich-plugin",
"python"
],
"has_wiki": true,
"homepage": "https://drolosoft.com/immich-photo-manager.html?lang=en",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://drolosoft.com/immich-photo-manager.html?lang=en",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "16 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 16
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 56,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 45,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 4.5
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "2 out of 4 merged PRs checked by a CI test -- score normalized to 5",
"points": 1.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 2/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the pypi:immich-photo-manager@1.3.0 runtime dependency closure — what installing the published package pulls in — 29 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "pypi:immich-photo-manager@1.3.0",
"assessed": 29
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 29,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 29,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 6
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "at_risk",
"name": "AI Readiness",
"value": 42,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.98,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "98 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 98,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 32,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0.23,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "23 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 23,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"primary_language": "HTML",
"largest_source_bytes": 53318,
"source_files_sampled": 17,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "HTML without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "HTML"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/17 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 17,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "moderate",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"example_dirs": [
"demos"
],
"has_mcp_signal": true,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 20,
"status": "met",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "demos",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "demos"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-26T22:51:50.575652Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/d/drolosoft/immich-photo-manager.svg",
"full_name": "drolosoft/immich-photo-manager",
"license_state": "standard",
"license_spdx": "MIT"
}
Registros relacionados
Repositorios inspeccionados que comparten etiquetas de catálogo o ecosistemas con drolosoft/immich-photo-manager. Leer en paralelo →
Las puntuaciones son señales, no garantías. Reflejan prácticas públicamente visibles en GitHub; no son una auditoría de código ni una garantía de seguridad.
Los datos ausentes se excluyen y los pesos se renormalizan; nunca se puntúan como cero. La metodología es versionada y abierta: métricas v1.13.0, esquema v0.27.0 — metodología completa · wiki de métricas.
