Registro públicoModerado
Informe de salud del softwareesquema 0.27.0 · métricas 1.13.0 · 2026-07-24 14:54 UTC
exploreomni / cli
Omni CLI
exploreomni/cli tiene un índice de salud de 58 sobre 100, lo que lo sitúa en la banda Moderado. Su puntuación más alta es Vitality (79/100) y la más baja, Community & Adoption (39/100). Se actualizó por última vez hace 7 días. Una sola persona concentra la mayor parte del trabajo reciente.
58
global / 100Índice de salud del software
Las métricas se agrupan en categorías ponderadas sobre una escala de 1 a 100. El resultado global parte de su media; cuando la evidencia pública activa la Política de Jurisdicciones de Alto Riesgo, la calificación se ajusta y recibe el límite 49 (En riesgo). Preparación para IA queda fuera.
58
Excelente85-100Ejemplar; cumple prácticamente todos los criterios evaluados
Bueno70-84Saludable; carencias menores
Moderado50-69Aceptable con carencias notables; se recomienda revisión
En riesgo30-49Debilidades significativas; su adopción exige cautela
Crítico1-29Problemas graves (proyecto abandonado, un solo mantenedor, sin higiene)
Perfil de puntuación
Cada eje es una categoría. La forma importa más que la media: un proyecto sano llena toda la figura, mientras que un perfil de picos y cráteres indica que la fortaleza en una dimensión enmascara el riesgo en otra.
Titularidad
Omni AnalyticsOrganización
45 seguidores26 repositorios públicosdesde feb 2022
Este repositorio está respaldado por una organización: una custodia compartida y responsable que puede sobrevivir a cualquier mantenedor individual.
Métricas por categoría
Vitalidad
¿Está vivo el proyecto: se escribe código y se publican versiones?
79
Actividad de desarrollo
72Bueno
Cómo se puntúa
| 36/36 | Recencia de push — último push hace 7 días |
| 10.4/36 | Cadencia de commits — 15/52 semanas con commits |
| 15.8/18 | Volumen de commits — 56 commits en el último año |
| 10/10 | OpenSSF Scorecard: Maintained — 15 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
Datos de entrada utilizados
| commits_last_year | 56 |
| human_commit_share | 1 |
| days_since_last_push | 7 |
| active_weeks_last_year | 15 |
Disciplina de publicación
90Excelente
Cómo se puntúa
| 27/27 | Publica versiones — 16 versiones publicadas |
| 36/36 | Recencia de las versiones — última versión hace 7 días |
| 27/27 | Cadencia de publicación — una versión cada ~9,3 días |
| 0/10 | OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases. |
Datos de entrada utilizados
| releases_count | 16 |
| latest_release_tag | v1.1.1 |
| releases_from_tags | no |
| days_since_latest_release | 7 |
| mean_days_between_releases | 9,3 |
Comunidad y Adopción
¿Tiene el proyecto usuarios, descargas, atención y unas condiciones acogedoras para quienes contribuyen?
39
Popularidad y adopción
29Crítico
Cómo se puntúa
| 29.4/60 | Estrellas — 66 estrellas |
| 0/25 | Forks — 1 forks |
| 0/15 | Observadores — 0 observadores |
Datos de entrada utilizados
| forks | 1 |
| stars | 66 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Salud de la comunidad
50Moderado
Cómo se puntúa
| 22.5/22.5 | README |
| 22.5/22.5 | Licencia — licencia reconocida (MIT) |
| 0/18 | Guía CONTRIBUTING |
| 0/13.5 | Código de conducta |
| 0/7.2 | Plantilla de issues |
| 0/6.3 | Plantilla de PR |
Datos de entrada utilizados
| has_readme | sí |
| has_license | sí |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Sostenibilidad y Gobernanza
¿Sobrevivirá el proyecto a sus personas: factor bus, capacidad de respuesta, quién lo respalda y mantenimiento del paquete?
50
Resiliencia de mantenedores (factor bus)
30En riesgo
Cómo se puntúa
| 9/54 | Factor bus — la mitad de los commits recae en 1 contribuyente(s) |
| 6/22.5 | Distribución de commits — el principal contribuyente firma el 73% de los commits |
| 9.5/13.5 | Amplitud de contribuyentes — 7 contribuyentes |
| 6/10 | OpenSSF Scorecard: Contributors — project has 2 contributing companies or organizations -- score normalized to 6 |
Datos de entrada utilizados
| bus_factor | 1 |
| contributors_sampled | 7 |
| top_contributor_share | 0,732 |
Capacidad de respuesta a issues y PR
62Moderado
Cómo se puntúa
| 20.1/46.8 | Resolución de issues — 43% de issues cerradas |
| 33.1/38.3 | Aceptación de PR — 39/45 PR decididos fusionados |
| 9/15 | OpenSSF Scorecard: Code-Review — Found 18/30 approved changesets -- score normalized to 6 |
Datos de entrada utilizados
| merged_prs | 39 |
| open_issues | 12 |
| closed_issues | 9 |
| issue_closed_ratio | 0,429 |
| closed_unmerged_prs | 6 |
Propiedad y custodia
61Moderado
Cómo se puntúa
| 30/30 | Respaldo de la propiedad — propiedad de una organización |
| 0/20 | Dominio verificado |
| 12/25 | Alcance del propietario — 45 seguidores de exploreomni |
| 19.2/25 | Trayectoria — 26 repos públicos, cuenta de ~4 años |
Datos de entrada utilizados
| followers | 45 |
| owner_type | Organization |
| is_verified | — |
| owner_login | exploreomni |
| public_repos | 26 |
| account_age_days | 1608 |
Calidad de Ingeniería
¿Existen unas prácticas mínimas de ingeniería y documentación?
61
Prácticas de ingeniería
68Moderado
Cómo se puntúa
| 24/24 | Flujos de trabajo de CI — 5 flujo(s) de trabajo |
| 24/24 | Pruebas presentes |
| 0/16 | Configuración de linter |
| 0/9.6 | Hooks de pre-commit |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 |
Datos de entrada utilizados
| has_ci | sí |
| has_tests | sí |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Documentación
50Moderado
Cómo se puntúa
| 30/30 | README |
| 0/25 | Directorio de documentación |
| 0/15 | Sitio de documentación / página del proyecto |
| 10/10 | Descripción del repositorio |
| 0/10 | Topics |
| 10/10 | Wiki |
Datos de entrada utilizados
| topics | — |
| has_wiki | sí |
| homepage | — |
| has_readme | sí |
| has_docs_dir | no |
| has_description | sí |
Seguridad
¿Son sólidas las prácticas visibles de seguridad y de cadena de suministro, sin exposición jurisdiccional de alto riesgo sin resolver?
59
Postura de seguridad
49En riesgo
Cómo se puntúa
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — sin datos |
| 2.5/2.5 | CI-Tests — 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 4.5/7.5 | Code-Review — Found 18/30 approved changesets -- score normalized to 6 |
| 1.5/2.5 | Contributors — project has 2 contributing companies or organizations -- score normalized to 6 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | Licencia — license file detected |
| 7.5/7.5 | Maintained — 15 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 5/5 | Packaging — packaging workflow detected |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — Project has not signed or included provenance with any releases. |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 6.8/7.5 | Vulnerabilities — 1 existing vulnerabilities detected |
Datos de entrada utilizados
| source | openssf_scorecard |
| checks_evaluated | 17 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 1 |
| scorecard_aggregate | 4,9 |
Excluidos de la puntuación (sin datos o no aplicable): branch_protection. Los pesos restantes se han renormalizado.
Avisos de dependencias
100Excelente
Cómo se puntúa
| 35/35 | Dependencias directas libres de avisos conocidos — ninguna dependencia directa tiene un aviso conocido |
| 0/25 | Dependencias indirectas libres de avisos conocidos — el conjunto transitivo no es separable de las dependencias de desarrollo y prueba en este alcance |
| 0/40 | Sin avisos pendientes — ningún aviso tiene fecha de publicación |
Datos de entrada utilizados
| source | osv |
| advisories | 1 |
| affected_packages | 1 |
| assessed_packages | 28 |
| unassessed_packages | 0 |
| affected_by_severity | unknown 1 |
| direct_affected_packages | 0 |
Excluidos de la puntuación (sin datos o no aplicable): Dependencias indirectas libres de avisos conocidos, Sin avisos pendientes. Los pesos restantes se han renormalizado. Se cotejaron 28 dependencias resueltas con OSV. Este repositorio no publica ningún paquete que el índice resuelva, por lo que se evaluó en su lugar el grafo de dependencias del repositorio. Ese grafo mezcla fijaciones de desarrollo y prueba con las dependencias distribuidas, de modo que solo se puntúan las dependencias declaradas en tiempo de ejecución; los hallazgos transitivos se informan como contexto y quedan excluidos de la puntuación. No se analiza la alcanzabilidad.
Preparación para IA
¿Hasta qué punto está el repositorio preparado para desarrollarse y mantenerse con agentes de codificación de IA? Es una insignia independiente y experimental — peso 0,0, de modo que se presenta por separado y no afecta a la puntuación de salud global.
75
Contexto y guía para agentes
85Excelente
Cómo se puntúa
| 45/45 | Instrucciones para agentes — CLAUDE.md |
| 0/15 | Documentación legible por máquinas (llms.txt) |
| 40/40 | Historial de commits legible — 54 de 56 commits humanos declaran su intención (asunto estructurado o cuerpo explicativo) |
Datos de entrada utilizados
| has_llms_txt | no |
| legible_history_share | 0,964 |
| agent_instruction_files | CLAUDE.md |
| agent_instruction_max_bytes | 2566 |
Cómo se puntúa
| 18/18 | Arranque con un solo comando — Makefile |
| 22/22 | Pruebas automatizadas |
| 0/11 | Configuración de lint / formato |
| 11/11 | Verificación estática de tipos — Go (tipado estático) |
| 10/10 | Entorno reproducible — lockfile |
| 10/10 | Práctica demostrada con agentes — 50 de los últimos 56 commits con autoría o crédito de agente |
| 0/8 | Mantenimiento automatizado — no se observan actualizaciones automáticas de dependencias |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Datos de entrada utilizados
| has_nix | no |
| has_tests | sí |
| lockfiles | go.sum |
| has_dockerfile | no |
| typed_language | sí |
| bootstrap_files | Makefile |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | — |
| agent_commit_share | 0,893 |
| toolchain_manifests | go.mod |
| dependency_bot_commit_share | 0 |
Legibilidad del código para modelos
100Excelente
Cómo se puntúa
| 45/45 | Código verificable por tipos — Go (tipado estático) |
| 55/55 | Tamaños de archivo manejables — 0/28 archivos fuente de más de 60 KB |
Datos de entrada utilizados
| primary_language | Go |
| largest_source_bytes | 27.631 |
| source_files_sampled | 28 |
| oversized_source_files | 0 |
Interfaces legibles por máquina
40En riesgo
Cómo se puntúa
| 40/40 | Esquema de API (OpenAPI/GraphQL/proto) — api/openapi.json, cmd/omni/openapi.json |
| 0/20 | Servidor MCP |
| 0/40 | Ejemplos ejecutables |
Datos de entrada utilizados
| example_dirs | — |
| has_mcp_signal | no |
| api_schema_files | api/openapi.json, cmd/omni/openapi.json |
Datos clave
66estrellas de GitHub
7contribuidores
56commits en los últimos 12 meses
7días desde el último push
16versiones publicadas
1factor bus
12issues abiertas
Goecosistemas de paquetes
Advertencias de recopilación de datos
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- Could not fetch go package 'github.com/exploreomni/omni-cli' from its registry
Más detalle
OpenSSF Scorecard 4.9 / 10
4.9agregado
Evaluación de seguridad independiente y agnóstica en cuanto a herramientas, procedente del proyecto de código abierto OpenSSF Scorecard. Cada comprobación premia una práctica de seguridad, no la herramienta de un proveedor concreto. Las comprobaciones que Scorecard no pudo determinar se marcan como n/d y se excluyen de la puntuación de seguridad (nunca se cuentan como cero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| n/d | Branch-Protection | internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md |
| 10 | CI-Tests | 30 out of 30 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 6 | Code-Review | Found 18/30 approved changesets -- score normalized to 6 |
| 6 | Contributors | project has 2 contributing companies or organizations -- score normalized to 6 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 15 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 10 | Packaging | packaging workflow detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| 0 | Signed-Releases | Project has not signed or included provenance with any releases. |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 9 | Vulnerabilities | 1 existing vulnerabilities detected |
Dependencias directas 7
| Registro | Paquete | Restricción de versión | Manifiesto |
|---|---|---|---|
| Go | github.com/briandowns/spinner | v1.23.2 | go.mod |
| Go | github.com/charmbracelet/lipgloss | v1.1.0 | go.mod |
| Go | github.com/pb33f/libopenapi | v0.34.4 | go.mod |
| Go | github.com/spf13/cobra | v1.10.2 | go.mod |
| Go | go.yaml.in/yaml/v4 | v4.0.0-rc.4 | go.mod |
| Go | golang.org/x/oauth2 | v0.36.0 | go.mod |
| Go | golang.org/x/term | v0.41.0 | go.mod |
Todas las dependencias 28
Conjunto completo de dependencias resueltas según el grafo de dependencias de GitHub: 7 paquetes directos y 21 indirectos (transitivos). El cierre transitivo es completo cuando el repositorio incluye un lockfile.
| Registro | Paquete | Versión | Relación |
|---|---|---|---|
| Go | github.com/briandowns/spinner | v1.23.2 | directa |
| Go | github.com/charmbracelet/lipgloss | v1.1.0 | directa |
| Go | github.com/pb33f/libopenapi | v0.34.4 | directa |
| Go | github.com/spf13/cobra | v1.10.2 | directa |
| Go | go.yaml.in/yaml/v4 | v4.0.0-rc.4 | directa |
| Go | golang.org/x/oauth2 | v0.36.0 | directa |
| Go | golang.org/x/term | v0.41.0 | directa |
| Go | github.com/aymanbagabas/go-osc52/v2 | v2.0.1 | indirecta |
| Go | github.com/bahlo/generic-list-go | v0.2.0 | indirecta |
| Go | github.com/buger/jsonparser | v1.1.2 | indirecta |
| Go | github.com/charmbracelet/colorprofile | v0.2.3-0.20250311203215-f60798e515dc | indirecta |
| Go | github.com/charmbracelet/x/ansi | v0.8.0 | indirecta |
| Go | github.com/charmbracelet/x/cellbuf | v0.0.13-0.20250311204145-2c3ea96c31dd | indirecta |
| Go | github.com/charmbracelet/x/term | v0.2.1 | indirecta |
| Go | github.com/fatih/color | v1.7.0 | indirecta |
| Go | github.com/inconshreveable/mousetrap | v1.1.0 | indirecta |
| Go | github.com/lucasb-eyer/go-colorful | v1.2.0 | indirecta |
| Go | github.com/mattn/go-colorable | v0.1.2 | indirecta |
| Go | github.com/mattn/go-isatty | v0.0.20 | indirecta |
| Go | github.com/mattn/go-runewidth | v0.0.16 | indirecta |
| Go | github.com/muesli/termenv | v0.16.0 | indirecta |
| Go | github.com/pb33f/jsonpath | v0.8.2 | indirecta |
| Go | github.com/pb33f/ordered-map/v2 | v2.3.1 | indirecta |
| Go | github.com/rivo/uniseg | v0.4.7 | indirecta |
| Go | github.com/spf13/pflag | v1.0.9 | indirecta |
| Go | github.com/xo/terminfo | v0.0.0-20220910002029-abceb7e1c41e | indirecta |
| Go | golang.org/x/sync | v0.20.0 | indirecta |
| Go | golang.org/x/sys | v0.42.0 | indirecta |
Avisos de dependencias 1
Este repositorio no publica ningún paquete que el índice resuelva, así que se evaluó su propio grafo de dependencias — 28 paquetes, que incluyen también fijaciones de desarrollo y prueba que nunca se distribuyen: 1 tienen avisos conocidos, de los cuales 0 son directas.
| Paquete | Versión | Relación | Gravedad | Avisos | Corregido en |
|---|---|---|---|---|---|
| golang.org/x/sys | v0.42.0 | indirecta | desconocida | 1 | 0.44.0 |
Un aviso significa que la versión registrada en el grafo de dependencias cae dentro del rango afectado de un aviso. No se analiza la alcanzabilidad, y el grafo incluye fijaciones de desarrollo y prueba: un hallazgo puede referirse al utillaje y no al software distribuido.
Informe JSON sin procesar legible por máquina
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 520,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 255754,
"Shell": 7059,
"Makefile": 1401
},
"pushed_at": "2026-07-16T17:42:57Z",
"created_at": "2026-03-09T05:21:58Z",
"owner_type": "Organization",
"updated_at": "2026-07-17T21:17:31Z",
"description": "Omni CLI",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": null,
"name": "Omni Analytics",
"type": "Organization",
"login": "exploreomni",
"company": null,
"location": null,
"followers": 45,
"avatar_url": "https://avatars.githubusercontent.com/u/100505341?v=4",
"created_at": "2022-02-27T05:52:10Z",
"is_verified": null,
"public_repos": 26,
"account_age_days": 1608
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v1.1.1",
"kind": "patch",
"published_at": "2026-07-16T17:47:16Z"
},
{
"tag": "v1.1.0",
"kind": "minor",
"published_at": "2026-07-08T15:27:20Z"
},
{
"tag": "v1.0.8",
"kind": "patch",
"published_at": "2026-06-30T14:16:51Z"
},
{
"tag": "v1.0.7",
"kind": "patch",
"published_at": "2026-06-26T14:09:58Z"
},
{
"tag": "v1.0.6",
"kind": "patch",
"published_at": "2026-06-15T15:09:17Z"
},
{
"tag": "v1.0.5",
"kind": "patch",
"published_at": "2026-06-04T16:41:25Z"
},
{
"tag": "v1.0.4",
"kind": "patch",
"published_at": "2026-05-04T23:06:49Z"
},
{
"tag": "v1.0.3",
"kind": "patch",
"published_at": "2026-04-28T23:17:23Z"
},
{
"tag": "v1.0.2",
"kind": "patch",
"published_at": "2026-04-27T16:57:45Z"
},
{
"tag": "v1.0.1",
"kind": "patch",
"published_at": "2026-04-24T05:04:50Z"
},
{
"tag": "v1.0.0",
"kind": "major",
"published_at": "2026-04-21T21:24:09Z"
},
{
"tag": "v0.1.4",
"kind": "patch",
"published_at": "2026-04-16T00:22:12Z"
},
{
"tag": "v0.1.3",
"kind": "patch",
"published_at": "2026-04-07T05:12:07Z"
},
{
"tag": "v0.1.2",
"kind": "patch",
"published_at": "2026-04-02T00:27:26Z"
},
{
"tag": "v0.1.1",
"kind": "patch",
"published_at": "2026-04-01T22:42:04Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2026-04-01T21:46:18Z"
}
],
"recent_commits": [
{
"oid": "d88376f06b353c804aa8a8eab0fc26a19c01e2ee",
"body": "… sync (#69)\n\nNew operations:\n- aiCreditControlsUsersList / aiCreditControlsUsersUpdate — list and bulk-set\n individual users' AI credit limits (GET/PATCH /api/v1/ai/credit-controls/users)\n- documentsV2RemoveDashboard — remove a dashboard from a draft, leaving a\n workbook-only document (DELETE /ap\n[…]\n{modelId}/dbt-sync)\n\nRemoved upstream:\n- connectionEnvironmentsList (GET /api/v1/connection-environments); the\n create/update/delete operations remain.\n\nCo-authored-by: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "sync spec: add per-user AI credit limits, document dashboard ops, dbt…",
"author_name": "Dan Spangenberger",
"author_login": "dspangen",
"committed_at": "2026-07-16T17:32:22Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "00f633f668ca9c3ea13eb5d854de5c8004d7cbea",
"body": "Routines can now deliver through Slack in addition to email. The\ndestination response shape moved from an email-only object to a union:\n- RoutineEmailDestination -> RoutineDestinationResponse (oneOf email | slack)\n- new RoutineSlackDestination schema (single channel or DM recipient)\n- routine-create\n[…]\nby the full sync:\n- new documentsUpgradeLayout operation: POST /api/v1/documents/{identifier}/upgrade\n (documents upgrade-layout)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "sync spec: add Slack destinations to AI routines (#68)",
"author_name": "Corey Ruderman",
"author_login": "cmruderman",
"committed_at": "2026-07-08T15:22:24Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c1861a967948cd0a2c365f7b3d68dca4f2d11042",
"body": "`--schema` rendered fields shaped like `allOf: [{$ref: X}, {description}]`\nas an empty object whenever X resolved to a non-object. The simplify\nwalker (and gatherObject, backing synth) only harvested `properties` and\n`required` from allOf members, so an array/scalar/union ref contributed\nnothing and\n[…]\ne is\nnothing to gather as an object. Object composition is unchanged.\n\n\nClaude-Session: https://claude.ai/code/session_01QTR4rqVdV8J4DneRMEJK7B\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(schema): expand typed refs wrapped in a describe()-allOf (#67)",
"author_name": "Dan Spangenberger",
"author_login": "dspangen",
"committed_at": "2026-06-30T14:10:52Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b5cd01f8a53a9acb014f707210fab3a1d0d3a0cd",
"body": "* feat(openapi): add --schema flag to inspect request body shapes\n\nEvery generated command that takes a request body now accepts --schema,\nwhich prints the body's resolved JSON schema (types, descriptions, enums,\nformats, required fields) plus a filled-in example, then exits without\nmaking an API ca\n[…]\ngs.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01H8ndoDtArqEjtDRjzjEJGE\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(openapi): add --schema flag to inspect request body shapes (#66)",
"author_name": "Dan Spangenberger",
"author_login": "dspangen",
"committed_at": "2026-06-26T13:48:34Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "02d0006fe79d1f9006add8e00bd999747ef04067",
"body": "PR #63 added an --api-key flag for non-interactive setup. Accepting a\nsecret on the command line leaks it into shell history and process\nlistings (and from there into anything scraping them, including agentic\ntooling). Drop the flag and always read the key from a hidden prompt.\n\nThe non-secret --nam\n[…]\nnteractively.\n\nRemoves the two tests that exercised the deleted flag.\n\n\nClaude-Session: https://claude.ai/code/session_01EfZEjYSR3cRVTHgifwJYjK\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(config): remove --api-key flag from `omni config init` (#65)",
"author_name": "Dan Spangenberger",
"author_login": "dspangen",
"committed_at": "2026-06-26T13:48:07Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d015b5cbaf25c1dd25d4168c7d139517799fe839",
"body": "…hoami (#64)\n\nSyncs the embedded OpenAPI spec from exploreomni/omni@main. New command\ngroups and operations surfaced by the generator:\n\n- ai-routines: full CRUD plus trigger (routine-create, routine-get,\n routine-update, routine-delete, routines-list, routine-trigger)\n- ai-model-suggestions: model-\n[…]\n whoami: current identity and permissions\n\nSide-effect change pulled in by the full sync:\n- documents v2-get and v2-get-draft gain a --pretty query flag\n\nCo-authored-by: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "sync spec: add AI routines, model suggestions, credit controls, and w…",
"author_name": "Dan Spangenberger",
"author_login": "dspangen",
"committed_at": "2026-06-26T13:47:23Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ccfa63ffbebd5343daf257483b626c4cd5f01dab",
"body": "…#59)\n\nIssue #45 reported `omni config use Playground Org-scoped` failing with a\ncryptic \"accepts 1 arg(s), received 2\". The root cause is shell tokenization\n— the name needs quoting — but the CLI made it worse two ways: an opaque\nerror, and no in-CLI way to manage profiles (the reporter had to sudo\n[…]\ne validation on save: spaced/parenthesized names are allowed;\nquoting them at the shell is the user's responsibility.\n\nCloses #45.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(config): add profile list/rename/delete and clearer arg errors (…",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-06-23T06:14:56Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "605af48e9e5b80356b8ca1819dd0bbefc530dbda",
"body": "* feat: add flags to `omni config init` for non-interactive setup\n\n--name, --endpoint, --auth, and --api-key each skip their interactive\nprompt, so OAuth profiles can be created with a single command:\n\n omni config init --name prod --endpoint https://myorg.omni.co --auth oauth\n\n--api-key alone impl\n[…]\ndomain is on the\nendpoint allowlist — so copied examples now pass validation.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add flags to `omni config init` for non-interactive setup (#63)",
"author_name": "Dan Spangenberger",
"author_login": "dspangen",
"committed_at": "2026-06-16T15:30:46Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "e291711ec32bf9825fac99f59418047c81649289",
"body": "* feat: add v2 documents commands\n\nSync the OpenAPI spec to pull in the v2 documents API, which is now GA\n— no experimental flags. These auto-generate as `omni documents\nv2-create`, `v2-get`, `v2-get-draft`, `v2-patch-draft`,\n`v2-patch-draft-by-identifier`, and `v2-publish-draft`. Upstream\nreplaced \n[…]\nrmats the\nembedded JSON; no other operations or params were added or removed.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add v2 documents commands (#62)",
"author_name": "Dan Spangenberger",
"author_login": "dspangen",
"committed_at": "2026-06-15T14:58:28Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "72fc1fb06fed062b97c2b7a3d0a6deb76b7d3a26",
"body": "…#60)\n\n* feat: add `omni users set-attributes` to edit user attribute values\n\nAdds a hand-written convenience command that sets Omni user attribute\nvalues on an existing user via SCIM PATCH, so callers never hand-craft\nthe SCIM envelope. The target user may be given as a SCIM user ID or an\nemail add\n[…]\nrsist on re-GET,\nwith other attributes untouched.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add `omni users set-attributes` to edit user attribute values (…",
"author_name": "Dan Spangenberger",
"author_login": "dspangen",
"committed_at": "2026-06-01T21:48:44Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "37f1049a9c4b41ed885c8a9e2645b820d0f0417a",
"body": "Adds POST /api/v1/models/{modelId}/git/commit (modelsCommit) which pushes\nbranch model contents to git, creating a new branch + PR if one does not\nexist or updating the existing PR otherwise. Surfaces as `omni models commit`.\n\nSide-effect changes pulled in by the full sync:\n- New api-keys CRUD: GET/\n[…]\nysGet,\n apiKeysUpdate, apiKeysDelete) — surfaces as `omni api-tokens\n api-keys-{get,update,delete}`.\n- Visualization type enum gains \"app\".\n\nFixes #53\n\nCo-authored-by: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "sync spec: add models commit endpoint for git PR push (#54)",
"author_name": "Jade",
"author_login": "jade-omni",
"committed_at": "2026-05-04T23:00:52Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "92591ae41fde0263714afc9792d9b8eaa901fc32",
"body": null,
"is_bot": false,
"headline": "auto mode default (#50)",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-04-28T23:17:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "08627f1cb6ea1909978be0d857fcf99b3370979b",
"body": "* feat: add /release-cli slash command\n\nCuts a release by tagging main and pushing the tag. Defaults to a\npatch bump from the latest tag; accepts patch/minor/major or a literal\nversion like v2.2.0. Pre-flight gates require a clean tree on main\neven with origin/main, and the confirmation message is t\n[…]\nrints the commands that would run, and skips the\ntag/push without prompting for confirmation.\n\nCo-Authored-By: Claude <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add /release-cli slash command (#49)",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-04-28T23:10:25Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "829530b03cbb89e064ad9f7e2d0fce9adfea7188",
"body": "* sync spec: add fullyResolved param to model yaml GET/POST\n\nPicks up the fullyResolved query/body param on modelsYamlGet and\nmodelsYamlCreate (only valid with mode=combined). Also pulls in\nmodelsUpdate (PATCH /api/v1/models/{modelId}) for renames, the\nfolder_paths content-validator param, and the c\n[…]\n\njust drives it. DEVELOPMENT.md updated to match.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "sync spec: add fullyResolved param to model yaml GET/POST (#47) (#48)",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-04-28T22:53:28Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "5d38fee10502ce9036b4c4e0d5e873a688bad3c3",
"body": "* Add OAuth 2.1 browser-based login support\n\nImplement PKCE-based OAuth authorization code flow so users can\nauthenticate via browser instead of manually managing API keys.\n\n- Add `config login` and `config logout` commands\n- Update `config init` to offer OAuth as an auth method choice\n- Auto-refres\n[…]\nkens.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\nCo-authored-by: Nathan Agrin <nate@omni.co>",
"is_bot": false,
"headline": "Add OAuth 2.1 browser-based login (#25)",
"author_name": "Jamie Davidson",
"author_login": "jdavidson",
"committed_at": "2026-04-26T17:06:43Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "85ea550516382e506d506060a12108106735f7ea",
"body": "… (#46)\n\nPicks up modelsGetSchemas (GET /api/v1/models/{modelId}/schemas) and the\nincludeSchemas query param on yaml-get so agent skills can do scoped,\nlazy-load schema discovery without falling back to curl. Also pulls in\napi-tokens and models dbt-exposures as a side effect of the full sync.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "sync spec: add models get-schemas and yaml-get --includeschemas (#44)…",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-04-24T04:18:11Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "97af19ad284979f847cd63bbf5b960b5ec21bd9c",
"body": "* docs: clarify publishing steps vs homebrew setup in DEVELOPMENT.md\n\nSeparate the one-time homebrew setup prerequisites from the repeatable\npublish steps, and move the rollout plan into a dedicated section.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>\n\n* docs: remove redundant git pul\n[…]\nanthropic.com>\n\n* docs: remove Testing the Homebrew Tap Locally section\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: clarify publishing steps vs homebrew setup (#40)",
"author_name": "Ernesto Ongaro",
"author_login": "ernestoongaro",
"committed_at": "2026-04-21T21:38:09Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7a2522fd609063e6ee6c308df65dc1fd404d0809",
"body": null,
"is_bot": false,
"headline": "SQL > OmniSQL (#41)",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-04-21T21:36:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d8c7c391d8c31839a7e812802e40b3a693dc3c59",
"body": "…ll (#38)\n\nCobra already auto-registers `omni completion <shell>` and it works\nagainst the dynamically-generated OpenAPI command tree. Add a README\nsection so users can discover and install it.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: document shell completion install for bash, zsh, fish, powershe…",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-04-21T21:16:34Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "eb460d1259f1e40d08721f61a9a97b4490a60939",
"body": "* Add output format resolver with flag/env/config precedence\n\nIntroduces FormatAuto/FormatJSON/FormatHuman constants and a\nResolveOutputFormat helper that picks an effective format from\n--format flag, OMNI_OUTPUT_FORMAT env, the config file's\ndefaultOutputFormat field, or auto(TTY). This is the foun\n[…]\ninting at the query plan…\"\nand \"summoning rows…\".\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add human-readable output format (#37)",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-04-21T21:15:57Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "0de6c87449416275e79cc40ff108368709b961ba",
"body": "* Add tap-based Homebrew rollout\n\n* Add local Homebrew validation flow\n\n* Revise Homebrew installation instructions in README\n\nUpdated Homebrew installation instructions for clarity and removed outdated information.\n\n* Update DEVELOPMENT.md\n\n* Address review feedback: move script to bin/, consolidat\n[…]\ncs/2026-04-01-release-strategy-design.md (superseded by DEVELOPMENT.md)\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Issue 31 homebrew install (#32)",
"author_name": "Ernesto Ongaro",
"author_login": "ernestoongaro",
"committed_at": "2026-04-16T00:15:08Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "1e2c4a1336aa0bf176890714db134e26fda733b9",
"body": "Dispatches cli-docs-update events to exploreomni/mintlify-omni when\nmarkdown files change on main or a release is published, enabling\nautomated downstream documentation sync.\n\nCo-authored-by: Jack Sweeney <jack@omni.co>\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add docs notification workflow for mintlify-omni (#30)",
"author_name": "Jack Sweeney",
"author_login": "jacksweeney5",
"committed_at": "2026-04-09T23:03:57Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "8c55564d2e1f3f2d7bd19777f76e4201ab1651b2",
"body": "* Add workflow to notify omni-agent-skills on PR merge\n\nFires a repository_dispatch event to omni-agent-skills when a PR\nmerges to main, so skill docs can be automatically updated to\nreflect CLI changes.\n\nRequires SKILLS_REPO_TOKEN secret with repo scope on omni-agent-skills.\n\nCo-Authored-By: Claude\n[…]\ndata.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Jack Sweeney <jack@omni.co>\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add downstream notification for omni-agent-skills (#29)",
"author_name": "Jack Sweeney",
"author_login": "jacksweeney5",
"committed_at": "2026-04-09T22:59:14Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "54c103e3c3817cdf3294a331793ca31f5f82edc0",
"body": "* feat: add default params for commands previously required --body\n\nSeveral commands required the --body <json formatted payload> type arguments to be successful.\n\nThis change allows those commands to take bare arguments as good defaults. For example:\n\n`omni ai search-docs \"How do you add formats to\n[…]\nst file easier to navigate for non-Go developers.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add default params for commands previously required --body (#26)",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-04-07T00:28:46Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7ccd66284be3c1b876e0a26a83428cf5c8e6f3e3",
"body": "The dashboards command group has no `list` subcommand. Replace with\n`omni documents list` which is valid.\n\nFixes #23\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix invalid `omni dashboards list` example in README (#24)",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-04-02T19:58:23Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "852a699e7a66c90ad32496b66e64d38d64fe9ab4",
"body": "* Add omni models create-branch command for easy branch creation\n\nBranch creation was hidden inside the generic `omni models create` command,\nrequiring users to manually construct JSON with modelKind=BRANCH. This adds\na dedicated `create-branch` subcommand with a positional model-id arg and\n--name f\n[…]\nejection, and command attachment to models group.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add omni models create-branch command (#17)",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-04-02T00:23:05Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7be8c8903e2a82b2244d0bf7e16577dbf7e27434",
"body": "* Agent friendly plan\n\n* Add security audit report for open-source readiness\n\nComprehensive audit covering secrets in git history, code-level\nvulnerabilities, and repo hygiene. Two blocking issues identified:\nmissing LICENSE file and no HTTPS enforcement on the API base URL.\n\nCo-Authored-By: Claude \n[…]\nno hyphen)\n- Add missing `unstable` command group\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add omni agent-help command for AI agent onboarding (#16)",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-04-01T22:31:48Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "89a2557fac168a64566f6f5cc29b46cec1b69b6b",
"body": "* Add development guide with release publishing instructions\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n* Remove unnecessary build internals from dev docs\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n* Move development guide to repo root\n\nCo-Auth\n[…]\nolicy wording: review before requesting PR review\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add development guide with release instructions (#15)",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-04-01T22:00:59Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3106d683f7b631b0d5f9eb7f72afa5bc160ca5c7",
"body": "Document the three install methods (install script, GitHub releases,\nbuild from source) and update Quick Start examples to use `omni`\ninstead of `./bin/omni`.\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add installation docs to README (#14)",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-04-01T21:49:35Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "9ab1729e50ed1725de66c373bfdf63d94944af65",
"body": "…ipt (#13)\n\nSet up automated cross-platform binary releases triggered by semver tag\npushes. GoReleaser builds for macOS/Linux/Windows, generates checksums,\nand publishes to GitHub Releases. Includes a curl-friendly install script\nand a debug.ReadBuildInfo() fallback so `go install` users see the correct\nversion.\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add release pipeline with GoReleaser, GitHub Actions, and install scr…",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-04-01T21:40:53Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d56ee89ba5d4147e570fabf1c97b8d96cc735a0a",
"body": "* Ignore .claude/plans dir\n\n* Remove OMNI_API_KEY env var, standardize on OMNI_API_TOKEN\n\nOMNI_API_KEY was a legacy alias kept for backwards compat. Consolidate\non OMNI_API_TOKEN as the single env var for authentication. Also clarify\nin README that tokens can be org-wide or personal access tokens (PATs).\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Remove OMNI_API_KEY, standardize on OMNI_API_TOKEN (#12)",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-04-01T21:08:58Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "6166e784490bf45296b09d405c67ee1df3d21590",
"body": "* Remove unused org ID fields and --org flag\n\nThe org ID fields (OrganizationID, OrganizationShortID) were stored in\nconfig but never sent in API requests — the base URL already identifies\nthe org. Removes the --org flag, OMNI_ORG_ID env var, and org ID prompts\nfrom config init.\n\nCo-Authored-By: Cla\n[…]\n.md with base URL resolution and insecure env var\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Simplify config: remove unused org fields and legacy migration (#11)",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-04-01T17:40:29Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c221cd6943ae25d5f82078f8c4a5394bfc3e7599",
"body": "* Add MIT license\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n* Fix API key handling in config commands\n\n- Fix panic when redacting short API keys in `config show`: keys\n shorter than 12 characters are now fully redacted as \"****\" instead\n of causing an index-out-of-rang\n[…]\n are rejected, inputs within limit\n pass through\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Security hardening for open-source readiness (#10)",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-04-01T16:09:35Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "39e3768f45c1f6f027a08c2061cd7d23e7010c68",
"body": "* Delete the TS variant of the CLI\n\n* Remove Node/TS entries from .gitignore\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n* Clean up settings.json: remove TS/Node permissions and broken hooks\n\nRemoved yarn, gradle, node, npx tsc permissions that were carried over\nfrom anoth\n[…]\nush command to use make build/test instead of npm\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Delete legacy TypeScript CLI and clean up remnants (#9)",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-03-31T22:42:57Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ccc23c9599d50ddcbef545f0b95b5d69ef57b3f5",
"body": "CLI tools like gh, docker, and kubectl use ~/.config/<app> on macOS/Linux\nrather than the platform-native ~/Library/Application Support. This aligns\nomni-cli with that convention.\n\nConfig dir resolution: OMNI_CONFIG_DIR > XDG_CONFIG_HOME > ~/.config (Unix)\nor %AppData% (Windows). Includes one-time migration from the legacy path.\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: use XDG-style config paths instead of os.UserConfigDir() (#8)",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-03-31T22:28:47Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "43451c080c71e50357de0b0ef64d99ffacc0355f",
"body": "* feat: add test coverage with OpenAPI spec coverage reporter\n\nAdd tests across all packages (openapi, config, auth, output) with a\nspec coverage reporter that verifies all 139 API operations generate\nand execute as CLI commands. Refactor output package to accept io.Writer\nfor testability.\n\nCo-Autho\n[…]\n/test.yml to run tests on PRs\nand pushes to main.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add test coverage with OpenAPI spec coverage reporter (#7)",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-03-31T21:32:34Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6b5db352a590d6a213a768b6d0e856d5539a8377",
"body": "…c (#4)\n\n* refactor: move TypeScript CLI source to ts/ directory\n\nPreserve the existing TypeScript CLI in a ts/ subdirectory to make room\nfor the Go rewrite. No code changes — pure file moves.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n* feat: initialize Go module and add\n[…]\npiles the code, so go build was duplicating work.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: rewrite CLI in Go with auto-generated commands from OpenAPI spe…",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-03-31T21:05:29Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c2c697db9535a0e84f7bf51cd8fb2adf865dc2e3",
"body": null,
"is_bot": false,
"headline": "Ignore worktrees created by claude (#5)",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-03-31T18:04:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9e53aa4c834a9a156e91b442f9beea9a325a7d37",
"body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: remove settings.local.json from repo and add to .gitignore",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-03-21T23:09:29Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "609fbd56560ddd10474775afe7fcf3f493250a48",
"body": null,
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/main'",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-03-21T23:07:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dda1187e8ad0527812f4189f383959f975146030",
"body": null,
"is_bot": false,
"headline": "claude settings",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-03-21T23:06:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad887691f9de896b7189b240efc1f3b120615a3c",
"body": "Add Biome linter and formatter",
"is_bot": false,
"headline": "Merge pull request #2 from exploreomni/nate/linter-formater",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-03-20T16:43:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "79ef85b8e73c53f36b835122027fb8de922f43b8",
"body": "Use a useRef to hold the latest fetcher, avoiding infinite refetching\nwhen callers pass inline arrow functions. Restore reloadKey as the\neffect dependency so reload() triggers a refetch again.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: stabilize useAsyncData reload and prevent infinite refetch",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-03-20T16:42:51Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "04a4850a3249e0d9453a7ff230abf4aecd25e7df",
"body": "Split into lint:biome and lint:ts sub-commands, with the top-level lint\ncommand calling both. Simplify CI workflow to use the unified command.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Unify lint command to run both Biome and TypeScript checks",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-03-18T16:52:54Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "fa7fb0038695dd3f30d6eea459e3a5e6ea218b1e",
"body": "Run Biome check and TypeScript type checking on all PRs targeting main.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add GitHub Actions workflow to lint PRs",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-03-18T16:20:35Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "62baeace24184298daba6e88f508c9ceff66eb4f",
"body": "- Use dot notation for bracket-accessed string literals (auth.ts)\n- Prefix unused variables with underscore (schedule delete/pause/list)\n- Remove unused import (recipients.execute.ts)\n- Add missing useEffect dependency (schedule list)\n- Wrap bulkActions in useMemo to fix exhaustive-deps (ScheduleListView)\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix lint issues flagged by Biome",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-03-18T16:17:00Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "43caff7674aaba5d3dc3e0b2b7478298d8529c85",
"body": "Apply Biome's auto-formatter across all source files: consistent import\nordering, whitespace normalization, and trailing comma style alignment.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Format codebase with Biome",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-03-18T16:16:46Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d7dd2a6fd4c23cf8fbcaab384c58aea22af74dcf",
"body": "Replace Prettier with Biome, a single Rust-based tool that handles both\nlinting and formatting. Configure to match existing code style (no semis,\nsingle quotes, trailing commas). Add lint, lint:fix, and format scripts.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add Biome for linting and formatting",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-03-18T16:16:26Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ce47ce0f619b9e94523ef6fd7d5ecfbf20af00ff",
"body": "README.md and CLAUDE.md adapted for standalone project — install/run\ninstructions updated from yarn workspace to npm/npx tsx, monorepo\npath references removed.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add documentation",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-03-09T05:19:48Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2ffa75cd4f1178aac912b210bd5540a0b33e971f",
"body": "Interactive terminal UI built with Ink/React. Includes router,\ntheme, shell layout, sidebar, reusable components (RetroFrame,\nSelectableList, ActionBar, ConfirmDialog, ToastMessage), hooks\n(useAsyncData, useBulkAction, useTerminalSize), and all 8 views.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add TUI framework and views",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-03-09T05:18:21Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "5da90daa81b13146cbac134a1f7f1116a2381def",
"body": "Needed for TypeScript type checking (was provided transitively in monorepo).\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add @types/node dev dependency",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-03-09T05:18:04Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "8905ecb681ec496d232ab40b1986f020c75b2fcb",
"body": "CLI command implementations (config, model, query, schedule, user),\nmain entry point (bin/omni.ts), and package exports (src/index.ts).\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add CLI commands and entry point",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-03-09T05:17:29Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "3c67c48c40eb0dea9b72de95a3ee4679a9b3714a",
"body": "Reusable Ink components (Spinner, Table, StatusMessage) used by both\nCLI commands and TUI views.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add shared components",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-03-09T05:17:22Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "0a6aead40c5dde3f77e9ca20bc0520aef7a55e67",
"body": "Profile/auth management (config-manager, auth, schema) and output\nformatting (mode resolution, POSIX rendering, shared flags). Both\nare leaf dependencies with no internal imports beyond each other.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add config and output modules",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-03-09T05:17:17Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f089a283acbaebc8efc288705e006680649619da",
"body": "HTTP client, Zod response schemas, and endpoint wrappers for models,\nschedules, users, and query. This is the leaf dependency everything\nelse builds on.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add API client layer",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-03-09T05:17:10Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "dfb5202b8b64e4194271dfa4975574571757b9cc",
"body": "Standalone project foundation for omni-cli extracted from monorepo.\nIncludes package.json (deps as-is minus @typescript/native-preview),\ninlined tsconfig.json (from 3-level extends chain), prettier config,\nand vitest config.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Initialize project scaffolding",
"author_name": "Nathan Agrin",
"author_login": "n8agrin",
"committed_at": "2026-03-09T05:17:01Z",
"body_truncated": false,
"is_coding_agent": true
}
],
"releases_count": 16,
"commits_last_year": 56,
"latest_release_at": "2026-07-16T17:47:16Z",
"latest_release_tag": "v1.1.1",
"releases_from_tags": false,
"days_since_last_push": 7,
"active_weeks_last_year": 15,
"days_since_latest_release": 7,
"mean_days_between_releases": 9.3
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 37,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": []
},
"popularity": {
"forks": 1,
"stars": 66,
"watchers": 0,
"fork_history": {
"days": [
{
"date": "2026-04-14",
"count": 1
}
],
"complete": true,
"collected": 1,
"total_forks": 1
},
"star_history": null,
"open_issues_and_prs": 15
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [
"api/openapi.json",
"cmd/omni/openapi.json"
],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 27631,
"source_files_sampled": 28,
"oversized_source_files": 0,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 2566
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "golang.org/x/sys",
"direct": false,
"version": "v0.42.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5024"
],
"fixed_version": "0.44.0",
"advisory_count": 1,
"oldest_advisory_days": 62
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"unknown": 1
},
"advisory_count": 1,
"affected_count": 1,
"assessed_count": 28,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/briandowns/spinner",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.23.2"
},
{
"name": "github.com/charmbracelet/lipgloss",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.0"
},
{
"name": "github.com/pb33f/libopenapi",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.34.4"
},
{
"name": "github.com/spf13/cobra",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.10.2"
},
{
"name": "go.yaml.in/yaml/v4",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v4.0.0-rc.4"
},
{
"name": "golang.org/x/oauth2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.36.0"
},
{
"name": "golang.org/x/term",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.41.0"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "github.com/briandowns/spinner",
"direct": true,
"version": "v1.23.2",
"ecosystem": "go"
},
{
"name": "github.com/charmbracelet/lipgloss",
"direct": true,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/pb33f/libopenapi",
"direct": true,
"version": "v0.34.4",
"ecosystem": "go"
},
{
"name": "github.com/spf13/cobra",
"direct": true,
"version": "v1.10.2",
"ecosystem": "go"
},
{
"name": "go.yaml.in/yaml/v4",
"direct": true,
"version": "v4.0.0-rc.4",
"ecosystem": "go"
},
{
"name": "golang.org/x/oauth2",
"direct": true,
"version": "v0.36.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/term",
"direct": true,
"version": "v0.41.0",
"ecosystem": "go"
},
{
"name": "github.com/aymanbagabas/go-osc52/v2",
"direct": false,
"version": "v2.0.1",
"ecosystem": "go"
},
{
"name": "github.com/bahlo/generic-list-go",
"direct": false,
"version": "v0.2.0",
"ecosystem": "go"
},
{
"name": "github.com/buger/jsonparser",
"direct": false,
"version": "v1.1.2",
"ecosystem": "go"
},
{
"name": "github.com/charmbracelet/colorprofile",
"direct": false,
"version": "v0.2.3-0.20250311203215-f60798e515dc",
"ecosystem": "go"
},
{
"name": "github.com/charmbracelet/x/ansi",
"direct": false,
"version": "v0.8.0",
"ecosystem": "go"
},
{
"name": "github.com/charmbracelet/x/cellbuf",
"direct": false,
"version": "v0.0.13-0.20250311204145-2c3ea96c31dd",
"ecosystem": "go"
},
{
"name": "github.com/charmbracelet/x/term",
"direct": false,
"version": "v0.2.1",
"ecosystem": "go"
},
{
"name": "github.com/fatih/color",
"direct": false,
"version": "v1.7.0",
"ecosystem": "go"
},
{
"name": "github.com/inconshreveable/mousetrap",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/lucasb-eyer/go-colorful",
"direct": false,
"version": "v1.2.0",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-colorable",
"direct": false,
"version": "v0.1.2",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-isatty",
"direct": false,
"version": "v0.0.20",
"ecosystem": "go"
},
{
"name": "github.com/mattn/go-runewidth",
"direct": false,
"version": "v0.0.16",
"ecosystem": "go"
},
{
"name": "github.com/muesli/termenv",
"direct": false,
"version": "v0.16.0",
"ecosystem": "go"
},
{
"name": "github.com/pb33f/jsonpath",
"direct": false,
"version": "v0.8.2",
"ecosystem": "go"
},
{
"name": "github.com/pb33f/ordered-map/v2",
"direct": false,
"version": "v2.3.1",
"ecosystem": "go"
},
{
"name": "github.com/rivo/uniseg",
"direct": false,
"version": "v0.4.7",
"ecosystem": "go"
},
{
"name": "github.com/spf13/pflag",
"direct": false,
"version": "v1.0.9",
"ecosystem": "go"
},
{
"name": "github.com/xo/terminfo",
"direct": false,
"version": "v0.0.0-20220910002029-abceb7e1c41e",
"ecosystem": "go"
},
{
"name": "golang.org/x/sync",
"direct": false,
"version": "v0.20.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sys",
"direct": false,
"version": "v0.42.0",
"ecosystem": "go"
}
],
"collected": true,
"truncated": false,
"total_count": 28,
"direct_count": 7,
"indirect_count": 21
}
},
"maintainership": {
"issues": {
"open_prs": 3,
"merged_prs": 39,
"open_issues": 12,
"closed_ratio": 0.429,
"closed_issues": 9,
"closed_unmerged_prs": 6
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "n8agrin",
"commits": 41,
"avatar_url": "https://avatars.githubusercontent.com/u/6043?v=4"
},
{
"type": "User",
"login": "dspangen",
"commits": 8,
"avatar_url": "https://avatars.githubusercontent.com/u/1711045?v=4"
},
{
"type": "User",
"login": "ernestoongaro",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/47784?v=4"
},
{
"type": "User",
"login": "jacksweeney5",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/137210764?v=4"
},
{
"type": "User",
"login": "cmruderman",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/16789028?v=4"
},
{
"type": "User",
"login": "jade-omni",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/190530676?v=4"
},
{
"type": "User",
"login": "jdavidson",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/475941?v=4"
}
],
"contributors_sampled": 7,
"top_contributor_share": 0.732
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"lint.yml",
"notify-docs.yml",
"notify-downstream.yml",
"release.yml",
"test.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 6,
"reason": "Found 18/30 approved changesets -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 6,
"reason": "project has 2 contributing companies or organizations -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "15 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 9,
"reason": "1 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "d88376f06b353c804aa8a8eab0fc26a19c01e2ee",
"ran_at": "2026-07-24T14:54:30Z",
"aggregate_score": 4.9,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-16T17:47:22Z",
"oldest_open_prs": [
{
"number": 55,
"created_at": "2026-05-11T09:55:24Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 56,
"created_at": "2026-05-12T16:15:38Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 57,
"created_at": "2026-05-12T17:08:04Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-16T17:32:23Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 19,
"created_at": "2026-04-02T08:09:51Z",
"last_comment_at": "2026-04-02T20:04:41Z",
"last_comment_author": "n8agrin"
},
{
"number": 20,
"created_at": "2026-04-02T08:10:57Z",
"last_comment_at": "2026-04-02T20:01:25Z",
"last_comment_author": "n8agrin"
},
{
"number": 21,
"created_at": "2026-04-02T08:12:16Z",
"last_comment_at": "2026-04-02T19:59:50Z",
"last_comment_author": "n8agrin"
},
{
"number": 22,
"created_at": "2026-04-02T08:15:21Z",
"last_comment_at": "2026-04-02T19:59:17Z",
"last_comment_author": "n8agrin"
},
{
"number": 28,
"created_at": "2026-04-06T23:56:19Z",
"last_comment_at": "2026-04-08T01:34:38Z",
"last_comment_author": "jacksweeney5"
},
{
"number": 33,
"created_at": "2026-04-15T18:46:11Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 35,
"created_at": "2026-04-15T18:46:34Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 36,
"created_at": "2026-04-16T00:36:39Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 51,
"created_at": "2026-05-03T18:55:27Z",
"last_comment_at": "2026-05-04T23:05:09Z",
"last_comment_author": "n8agrin"
},
{
"number": 52,
"created_at": "2026-05-03T18:55:35Z",
"last_comment_at": "2026-05-04T23:04:06Z",
"last_comment_author": "n8agrin"
},
{
"number": 58,
"created_at": "2026-05-12T23:23:07Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 61,
"created_at": "2026-06-05T16:40:22Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/exploreomni/cli",
"host": "github.com",
"name": "cli",
"owner": "exploreomni"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 58,
"inputs": {
"security": 59,
"vitality": 79,
"community": 39,
"governance": 50,
"engineering": 61
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 79,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"commits_last_year": 56,
"human_commit_share": 1,
"days_since_last_push": 7,
"active_weeks_last_year": 15
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 7 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 7
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "15/52 weeks with commits",
"points": 10.4,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 15
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "56 commits in the last year",
"points": 15.8,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 56
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "15 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 16,
"latest_release_tag": "v1.1.1",
"releases_from_tags": false,
"days_since_latest_release": 7,
"mean_days_between_releases": 9.3
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "16 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 16
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 7 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 7
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~9.3 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 9.3
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 39,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 29,
"inputs": {
"forks": 1,
"stars": 66,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "66 stars",
"points": 29.4,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 66
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "1 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 1
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 50,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 30,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 7,
"top_contributor_share": 0.732
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 73% of commits",
"points": 6,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 73
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "7 contributors",
"points": 9.5,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 7
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 6,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 62,
"inputs": {
"merged_prs": 39,
"open_issues": 12,
"closed_issues": 9,
"issue_closed_ratio": 0.429,
"closed_unmerged_prs": 6
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "43% of issues closed",
"points": 20.1,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 43
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "39/45 decided PRs merged",
"points": 33.1,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 39,
"decided": 45
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 18/30 approved changesets -- score normalized to 6",
"points": 9,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 61,
"inputs": {
"followers": 45,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "exploreomni",
"public_repos": 26,
"account_age_days": 1608
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "45 followers of exploreomni",
"points": 12,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 45,
"login": "exploreomni"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "26 public repos, account ~4 yr old",
"points": 19.2,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 26
}
},
{
"code": "account_age_years",
"params": {
"years": 4
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 61,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "5 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 5
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 59,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 49,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 4.9
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 18/30 approved changesets -- score normalized to 6",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "15 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "1 existing vulnerabilities detected",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 28 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories",
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 28
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 1,
"affected_packages": 1,
"assessed_packages": 28,
"unassessed_packages": 0,
"affected_by_severity": "unknown 1",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 28,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 4
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 75,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.964,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 2566
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "54 of 56 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 54,
"sampled": 56
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 71,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0.893,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "50 of the last 56 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 50,
"sampled": 56
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 27631,
"source_files_sampled": 28,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/28 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 28,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [],
"has_mcp_signal": false,
"api_schema_files": [
"api/openapi.json",
"cmd/omni/openapi.json"
]
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": "api/openapi.json, cmd/omni/openapi.json",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "api/openapi.json, cmd/omni/openapi.json"
}
}
],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"Could not fetch go package 'github.com/exploreomni/omni-cli' from its registry"
],
"report_type": "repository",
"generated_at": "2026-07-24T14:54:50.750011Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/e/exploreomni/cli.svg",
"full_name": "exploreomni/cli",
"license_state": "standard",
"license_spdx": "MIT"
}Las puntuaciones son señales, no garantías. Reflejan prácticas públicamente visibles en GitHub; no son una auditoría de código ni una garantía de seguridad.
Los datos ausentes se excluyen y los pesos se renormalizan; nunca se puntúan como cero. La metodología es versionada y abierta: métricas v1.13.0, esquema v0.27.0 — metodología completa · wiki de métricas.
Cómo se sitúa un resultado dentro del registro general: estadísticas agregadas.