Registro público
Informe de salud del softwareesquema 0.27.0 · métricas 1.13.0 · 2026-07-25 00:04 UTC

getmaat / maat

Keep docs and AI-agent instructions in sync. Scaffold docs-as-code, generate agent files, and fail CI when docs drift.

GoApache-2.0★ 4 estrellas⑂ 0 forksdesde jul 2026Ver en GitHub ↗

getmaat/maat tiene un índice de salud de 57 sobre 100, lo que lo sitúa en la banda Moderado. Su puntuación más alta es AI Readiness (84/100) y la más baja, Security (39/100). Se actualizó por última vez hace 2 días. Una sola persona concentra la mayor parte del trabajo reciente.

57
global / 100
Moderado

Índice de salud del software

Las métricas se agrupan en categorías ponderadas sobre una escala de 1 a 100. El resultado global parte de su media; cuando la evidencia pública activa la Política de Jurisdicciones de Alto Riesgo, la calificación se ajusta y recibe el límite 49 (En riesgo). Preparación para IA queda fuera.

57
Excelente85-100Ejemplar; cumple prácticamente todos los criterios evaluados
Bueno70-84Saludable; carencias menores
Moderado50-69Aceptable con carencias notables; se recomienda revisión
En riesgo30-49Debilidades significativas; su adopción exige cautela
Crítico1-29Problemas graves (proyecto abandonado, un solo mantenedor, sin higiene)
VitalidadComunidad yAdopciónSostenibilidady GobernanzaCalidad deIngenieríaSeguridadPreparaciónpara IA

Perfil de puntuación

Cada eje es una categoría. La forma importa más que la media: un proyecto sano llena toda la figura, mientras que un perfil de picos y cráteres indica que la fortaleza en una dimensión enmascara el riesgo en otra.

Titularidad

Get Ma'atOrganización
0 seguidores2 repositorios públicosdesde jul 2026

Este repositorio está respaldado por una organización: una custodia compartida y responsable que puede sobrevivir a cualquier mantenedor individual.

Ecosistemas de paquetes

RegistroPaqueteVersiónDescargas / mesVersionesÚltima publicación
Gogithub.com/getmaat/maatv0.6.0-6hace 2 días

Métricas por categoría

Vitalidad

¿Está vivo el proyecto: se escribe código y se publican versiones?

67Moderado · 22% del índice global
Cómo se puntúa
36/36Recencia de push — último push hace 2 días
2.1/36Cadencia de commits — 3/52 semanas con commits
14.3/18Volumen de commits — 38 commits en el último año
0/10OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully
Datos de entrada utilizados
commits_last_year38
human_commit_share0,974
days_since_last_push2
active_weeks_last_year3
Cómo se puntúa
27/27Publica versiones — 6 versiones publicadas
36/36Recencia de las versiones — última versión hace 2 días
27/27Cadencia de publicación — una versión cada ~3,8 días
0/10OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases.
Datos de entrada utilizados
releases_count6
latest_release_tagv0.6.0
releases_from_tagsno
days_since_latest_release2
mean_days_between_releases3,8

Comunidad y Adopción

¿Tiene el proyecto usuarios, descargas, atención y unas condiciones acogedoras para quienes contribuyen?

47En riesgo · 18% del índice global
Cómo se puntúa
7.7/60Estrellas — 4 estrellas
0/25Forks — 0 forks
0/15Observadores — 0 observadores
Datos de entrada utilizados
forks0
stars4
watchers0
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
Cómo se puntúa
22.5/22.5README
22.5/22.5Licencia — licencia reconocida (Apache-2.0)
18/18Guía CONTRIBUTING
13.5/13.5Código de conducta
0/7.2Plantilla de issues
6.3/6.3Plantilla de PR
Datos de entrada utilizados
has_readme
has_license
has_contributing
has_issue_templateno
has_code_of_conduct
has_pull_request_template

Sostenibilidad y Gobernanza

¿Sobrevivirá el proyecto a sus personas: factor bus, capacidad de respuesta, quién lo respalda y mantenimiento del paquete?

50Moderado · 24% del índice global
Cómo se puntúa
9/54Factor bus — la mitad de los commits recae en 1 contribuyente(s)
0/22.5Distribución de commits — el principal contribuyente firma el 100% de los commits
1.4/13.5Amplitud de contribuyentes — 1 contribuyentes
0/10OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0
Datos de entrada utilizados
bus_factor1
contributors_sampled1
top_contributor_share1
Cómo se puntúa
0/46.8Resolución de issues — sin issues o sin datos
38.2/38.3Aceptación de PR — 4/4 PR decididos fusionados
0/15OpenSSF Scorecard: Code-Review — Found 0/25 approved changesets -- score normalized to 0
Datos de entrada utilizados
merged_prs4
open_issues0
closed_issues0
issue_closed_ratio
closed_unmerged_prs0
Excluidos de la puntuación (sin datos o no aplicable): Resolución de issues. Los pesos restantes se han renormalizado.
Cómo se puntúa
30/30Respaldo de la propiedad — propiedad de una organización
0/20Dominio verificado
0/25Alcance del propietario — 0 seguidores de getmaat
3.6/25Trayectoria — 2 repos públicos, cuenta de ~0 años
Datos de entrada utilizados
followers0
owner_typeOrganization
is_verified
owner_logingetmaat
public_repos2
account_age_days19
Cómo se puntúa
25/25Publicado y resoluble — 1 paquete(s) en go
35/35Recencia de publicación — última publicación hace 2 días
20/20Historial de versiones — 6 versiones en el registro
20/20No obsoleto — activo, ni obsoleto ni retirado
Datos de entrada utilizados
packagesgithub.com/getmaat/maat
ecosystemsgo
any_deprecatedno
min_days_since_publish2

Calidad de Ingeniería

¿Existen unas prácticas mínimas de ingeniería y documentación?

80Bueno · 20% del índice global
Cómo se puntúa
24/24Flujos de trabajo de CI — 3 flujo(s) de trabajo
24/24Pruebas presentes
16/16Configuración de linter — .golangci.yml
0/9.6Hooks de pre-commit
0/6.4.editorconfig
20/20OpenSSF Scorecard: CI-Tests — 4 out of 4 merged PRs checked by a CI test -- score normalized to 10
Datos de entrada utilizados
has_ci
has_tests
has_editorconfigno
has_linter_config
has_precommit_configno
Cómo se puntúa
30/30README
25/25Directorio de documentación
0/15Sitio de documentación / página del proyecto
10/10Descripción del repositorio
10/10Topics — 9 topics
0/10Wiki
Datos de entrada utilizados
topicsagents-md, ai-agents, cli, developer-tools, devtools, documentation, documentation-as-code, golang, llm
has_wikino
homepage
has_readme
has_docs_dir
has_description

Seguridad

¿Son sólidas las prácticas visibles de seguridad y de cadena de suministro, sin exposición jurisdiccional de alto riesgo sin resolver?

39En riesgo · 16% del índice global
Cómo se puntúa
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — sin datos
2.5/2.5CI-Tests — 4 out of 4 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 0/25 approved changesets -- score normalized to 0
0/2.5Contributors — project has 0 contributing companies or organizations -- score normalized to 0
10/10Dangerous-Workflow — no dangerous workflow patterns detected
0/7.5Dependency-Update-Tool — no update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5Licencia — license file detected
0/7.5Maintained — project was created within the last 90 days. Please review its contents carefully
5/5Packaging — packaging workflow detected
0/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
0/5SAST — SAST tool is not run on all commits -- score normalized to 0
5/5Security-Policy — security policy file detected
0/7.5Signed-Releases — Project has not signed or included provenance with any releases.
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
6/7.5Vulnerabilities — 2 existing vulnerabilities detected
Datos de entrada utilizados
sourceopenssf_scorecard
checks_evaluated17
scorecard_versionv5.5.0
checks_inconclusive1
scorecard_aggregate3,9
Excluidos de la puntuación (sin datos o no aplicable): branch_protection. Los pesos restantes se han renormalizado.

Preparación para IA

¿Hasta qué punto está el repositorio preparado para desarrollarse y mantenerse con agentes de codificación de IA? Es una insignia independiente y experimental — peso 0,0, de modo que se presenta por separado y no afecta a la puntuación de salud global.

84Bueno · 0% del índice global
Cómo se puntúa
45/45Instrucciones para agentes — .cursor/rules/maat.mdc, .github/copilot-instructions.md, AGENTS.md, CLAUDE.md, GEMINI.md, internal/maat/templates/AGENTS.md
15/15Documentación legible por máquinas (llms.txt) — llms.txt presente
40/40Historial de commits legible — 34 de 37 commits humanos declaran su intención (asunto estructurado o cuerpo explicativo)
Datos de entrada utilizados
has_llms_txt
legible_history_share0,919
agent_instruction_files.cursor/rules/maat.mdc, .github/copilot-instructions.md, AGENTS.md, CLAUDE.md, GEMINI.md, internal/maat/templates/AGENTS.md
agent_instruction_max_bytes6025
Cómo se puntúa
12.6/18Arranque con un solo comando — go.mod (convención del toolchain, sin ejecutor de tareas)
22/22Pruebas automatizadas
11/11Configuración de lint / formato — .golangci.yml
11/11Verificación estática de tipos — Go (tipado estático)
10/10Entorno reproducible — lockfile
0/10Práctica demostrada con agentes — ningún commit con autoría de agente entre los últimos 38
0/8Mantenimiento automatizado — no se observan actualizaciones automáticas de dependencias
0/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
Datos de entrada utilizados
has_nixno
has_tests
lockfilesgo.sum
has_dockerfileno
typed_language
bootstrap_files
has_devcontainerno
has_linter_config
typecheck_configs
agent_commit_share0
toolchain_manifestsgo.mod
dependency_bot_commit_share0
Cómo se puntúa
45/45Código verificable por tipos — Go (tipado estático)
55/55Tamaños de archivo manejables — 0/20 archivos fuente de más de 60 KB
Datos de entrada utilizados
primary_languageGo
largest_source_bytes14.912
source_files_sampled20
oversized_source_files0

Datos clave

4estrellas de GitHub
1contribuidores
38commits en los últimos 12 meses
2días desde el último push
6versiones publicadas
1factor bus
0issues abiertas
Goecosistemas de paquetes

Advertencias de recopilación de datos

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
  • GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

Más detalle

OpenSSF Scorecard 3.9 / 10
3.9agregado

Evaluación de seguridad independiente y agnóstica en cuanto a herramientas, procedente del proyecto de código abierto OpenSSF Scorecard. Cada comprobación premia una práctica de seguridad, no la herramienta de un proveedor concreto. Las comprobaciones que Scorecard no pudo determinar se marcan como n/d y se excluyen de la puntuación de seguridad (nunca se cuentan como cero).Scorecard v5.5.0 · 2026-07-25 00:04 UTC

10Binary-Artifactsno binaries found in the repo
n/dBranch-Protectioninternal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
10CI-Tests4 out of 4 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 0/25 approved changesets -- score normalized to 0
0Contributorsproject has 0 contributing companies or organizations -- score normalized to 0
10Dangerous-Workflowno dangerous workflow patterns detected
0Dependency-Update-Toolno update tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
0Maintainedproject was created within the last 90 days. Please review its contents carefully
10Packagingpackaging workflow detected
0Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 0
0SASTSAST tool is not run on all commits -- score normalized to 0
10Security-Policysecurity policy file detected
0Signed-ReleasesProject has not signed or included provenance with any releases.
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
8Vulnerabilities2 existing vulnerabilities detected
Dependencias directas 4
RegistroPaqueteRestricción de versiónManifiesto
Gogithub.com/charmbracelet/huhv1.0.0go.mod
Gogithub.com/charmbracelet/lipglossv1.1.0go.mod
Gogithub.com/mattn/go-isattyv0.0.23go.mod
Gogithub.com/muesli/termenvv0.16.0go.mod
Todas las dependencias no recopilado

No fue posible recopilar el conjunto de dependencias resuelto para este informe: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

Informe JSON sin procesar legible por máquina
{
  "data": {
    "repo": {
      "topics": [
        "agents-md",
        "ai-agents",
        "cli",
        "developer-tools",
        "devtools",
        "documentation",
        "documentation-as-code",
        "golang",
        "llm"
      ],
      "is_fork": false,
      "size_kb": 672,
      "has_wiki": false,
      "homepage": null,
      "languages": {
        "Go": 118434,
        "Shell": 8845
      },
      "pushed_at": "2026-07-22T13:17:02Z",
      "created_at": "2026-07-02T18:13:42Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-22T13:15:40Z",
      "description": "Keep docs and AI-agent instructions in sync. Scaffold docs-as-code, generate agent files, and fail CI when docs drift.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "main",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": null,
      "name": "Get Ma'at",
      "type": "Organization",
      "login": "getmaat",
      "company": null,
      "location": null,
      "followers": 0,
      "avatar_url": "https://avatars.githubusercontent.com/u/300208850?v=4",
      "created_at": "2026-07-05T18:49:47Z",
      "is_verified": null,
      "public_repos": 2,
      "account_age_days": 19
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.6.0",
          "kind": "minor",
          "published_at": "2026-07-22T13:18:10Z"
        },
        {
          "tag": "v0.5.0",
          "kind": "minor",
          "published_at": "2026-07-22T08:47:48Z"
        },
        {
          "tag": "v0.4.0",
          "kind": "minor",
          "published_at": "2026-07-07T09:48:32Z"
        },
        {
          "tag": "v0.3.0",
          "kind": "minor",
          "published_at": "2026-07-06T08:27:02Z"
        },
        {
          "tag": "v0.2.0",
          "kind": "minor",
          "published_at": "2026-07-03T14:14:36Z"
        },
        {
          "tag": "v0.1.0",
          "kind": "minor",
          "published_at": "2026-07-03T10:43:10Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "6d6746127708213828b9e2bfae137e34e5ec8115",
          "body": "Add --agents (comma list, \"all\", or \"\" for none) and an interactive\nmulti-select page in the init wizard, so init only writes the adapter\nfiles (CLAUDE.md, .hermes.md, .cursor/rules/..., etc.) a team actually\nuses instead of always generating all six. This mostly reuses the\nexisting adapters: config\n[…]\n never rewrites an existing .maat.yml (same as any other\nscaffold file) — if a newly chosen agent isn't already in its adapters:\nlist, init prints the exact line to add and tells you to run maat sync.",
          "is_bot": false,
          "headline": "feat(init): let users choose which agent adapters to scaffold",
          "author_name": "Ümit Cebi",
          "author_login": "UemitCebi",
          "committed_at": "2026-07-22T13:11:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e1bd408cfecdccccb5e84c8cce71ecdccfaab3e3",
          "body": "Style init/sync/check's output with Lip Gloss and prompt interactively for\ninit's name/summary via Huh when run with no flags in a real terminal. Both\nare gated on TTY/color-detection seams so CI, --format=github, and every\nexisting test keep their exact byte-for-byte plain-text output.\n\nThis is the\n[…]\nth\nADR 0011 distinguishing build-time-only deps (fine, per ADR 0005's own\nreasoning) from runtime deps (still forbidden), plus updates to every doc\nthat asserted \"zero-dependency\" without that nuance.",
          "is_bot": false,
          "headline": "feat(cli): add Lip Gloss styling and a Huh init wizard",
          "author_name": "Ümit Cebi",
          "author_login": "UemitCebi",
          "committed_at": "2026-07-22T09:49:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "69762f10989af6bf3251d8e8e032bbc3c5b8f6e9",
          "body": "…copy\n\ntemplates/adr.md duplicated docs/decisions/_template.md, which is the copy\nthe update protocol actually points to. Drop it and move templates/module.md\nto .maat/templates/_module.md, alongside .maat/skills/, so init no longer\nscaffolds a root-level templates/ folder. Both hand-copy templates now share\nthe leading-underscore naming convention. See ADR 0010.",
          "is_bot": false,
          "headline": "feat(init): move scaffold templates under .maat/, drop redundant ADR …",
          "author_name": "Ümit Cebi",
          "author_login": "UemitCebi",
          "committed_at": "2026-07-22T08:44:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1520057ed6f49b28132dabd2040e065bc97e7a7b",
          "body": null,
          "is_bot": false,
          "headline": "feat(readme): add light mode logo support",
          "author_name": "Ümit Cebi",
          "author_login": "UemitCebi",
          "committed_at": "2026-07-08T08:34:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ae977712927583c97423ebdcfa45b2fe6340de27",
          "body": null,
          "is_bot": false,
          "headline": "update logo size",
          "author_name": "Ümit Cebi",
          "author_login": "UemitCebi",
          "committed_at": "2026-07-08T08:29:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6596d392d9c84e717bef1fdf5d9b7a3f4280e1a6",
          "body": null,
          "is_bot": false,
          "headline": "add logo file",
          "author_name": "Ümit Cebi",
          "author_login": "UemitCebi",
          "committed_at": "2026-07-08T08:27:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "afa3a4432019f3a57be6ba317967cdd542032d93",
          "body": null,
          "is_bot": false,
          "headline": "docs: update readme with detailed overview and usage instructions",
          "author_name": "Ümit Cebi",
          "author_login": "UemitCebi",
          "committed_at": "2026-07-08T08:26:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "684a6e7433516799b861417d9090c771775e2820",
          "body": "feat: inject Ma'at's maintenance contract into brownfield AGENTS.md",
          "is_bot": false,
          "headline": "Merge pull request #4 from getmaat/worktree-brownfield-contract-block",
          "author_name": "Ümit Cebi",
          "author_login": "UemitCebi",
          "committed_at": "2026-07-07T09:46:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "37e395e579c252fbfdf41f191c329b5e82245f8f",
          "body": "Adopting Ma'at in an existing repo skipped AGENTS.md (ADR 0008,\nnon-destructive), which also skipped the documentation update\nprotocol — the contract that makes Ma'at work. A brownfield repo was\nleft knowing where the retrospect skill lives but never learning the\nsync/check habit.\n\nMa'at already spl\n[…]\n+gen contract injection\n- docs: ADR 0009, index, model-generate, deployment, cli reference\n- tests: greenfield placement, brownfield non-destructive injection,\n  idempotency, docs_dir parameterization",
          "is_bot": false,
          "headline": "feat: inject Ma'at's maintenance contract into brownfield AGENTS.md",
          "author_name": "Ümit Cebi",
          "author_login": "UemitCebi",
          "committed_at": "2026-07-07T09:26:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "eb05b674f25cba3a6dbb7610442964e6bc48571e",
          "body": "The Marketplace listing renderer strips apostrophes outright rather\nthan escaping them — \"Ma'at\" and \"repository's\" were rendering as\n\"Ma at\" and \"repository s\" in both the listing card and the About\nsection. Reworded the top-level description and the version input's\ndescription to avoid apostrophes entirely.",
          "is_bot": false,
          "headline": "fix: remove apostrophes from the Action's Marketplace-visible text",
          "author_name": "Ümit Cebi",
          "author_login": "UemitCebi",
          "committed_at": "2026-07-06T10:27:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dd93253c5bbb6c3e91a19082c423931f75350553",
          "body": "\"Ma'at check\" produced the Marketplace slug ma-at-check and, more\nimportantly, doesn't match a plain \"maat\" search — the apostrophe\nsplits it into a separate token. Rename to \"maat check\" so it's\nfindable under the name people actually type.",
          "is_bot": false,
          "headline": "fix: drop the apostrophe from the Action's Marketplace name",
          "author_name": "Ümit Cebi",
          "author_login": "UemitCebi",
          "committed_at": "2026-07-06T10:14:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "90da372cf5016847b3ab08aafdba343ef933101f",
          "body": "v0.3.0's release notes included raw \"Merge pull request #N ...\" lines\nalongside real changes — noise with no value to someone reading\nrelease notes. Filter them out like the existing docs:/test:/chore:\nexclusions.",
          "is_bot": false,
          "headline": "ci: exclude merge commits from release changelogs",
          "author_name": "Ümit Cebi",
          "author_login": "UemitCebi",
          "committed_at": "2026-07-06T09:56:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bc1c0c5003fb4a8a62e8d6bc1619e78f3104fdaf",
          "body": "golangci-lint-action@v6's \"latest\" still resolves to a v1.x binary,\nwhich rejects our v2-schema .golangci.yml (config verify fails before\nany linting runs). v8 supports pinning an actual v2 release. Also pin\nthe version explicitly, and note the v1/v2 schema mismatch in the\ntesting guide.",
          "is_bot": false,
          "headline": "ci: fix lint job — pin golangci-lint-action to v8 for v2 config support",
          "author_name": "Ümit Cebi",
          "author_login": "UemitCebi",
          "committed_at": "2026-07-06T09:49:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f86e9e7bd2c628af01b4b34fb9ba9462227a21d7",
          "body": "goreportcard.com has been sunset; its own shutdown notice points users\nat golangci-lint instead, which is already the CI lint gate here.",
          "is_bot": false,
          "headline": "docs: remove Go Report Card badge",
          "author_name": "Ümit Cebi",
          "author_login": "UemitCebi",
          "committed_at": "2026-07-06T09:42:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b9040ce9be0eb88565c5b75aeef37a7e56068bd5",
          "body": "Recorded with vhs: maat init scaffolding a fresh repo, then maat check\nvalidating it clean.",
          "is_bot": false,
          "headline": "docs: add terminal demo GIF to README",
          "author_name": "Ümit Cebi",
          "author_login": "UemitCebi",
          "committed_at": "2026-07-06T09:27:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "22640ac94daa8afde973f8994ad1f67a8ed69349",
          "body": "Adds CI/release/Go-report-card/license badges, an Install section\n(Homebrew, install script, go install), and a Contributing section\npointing at the new CONTRIBUTING.md.",
          "is_bot": false,
          "headline": "docs: add README badges, install instructions, and contributing pointer",
          "author_name": "Ümit Cebi",
          "author_login": "UemitCebi",
          "committed_at": "2026-07-06T09:27:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3b5d53c5b4a7b6287d25c68c9df79d9b8ca48379",
          "body": "Bug report and feature request issue forms, a security-advisory\ncontact link, and a PR template that checklists the docs-update\nprotocol from AGENTS.md.",
          "is_bot": false,
          "headline": "chore: add GitHub issue and PR templates",
          "author_name": "Ümit Cebi",
          "author_login": "UemitCebi",
          "committed_at": "2026-07-06T09:26:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ee007e09e939483b8b6f4986484d58eb13970d0b",
          "body": "Points contributors at AGENTS.md's docs update protocol, the dev setup\nin docs/guides/development.md, and the coding conventions, so the\nexpectations for a pull request are discoverable from the repo root.",
          "is_bot": false,
          "headline": "docs: add CONTRIBUTING.md",
          "author_name": "Ümit Cebi",
          "author_login": "UemitCebi",
          "committed_at": "2026-07-06T09:26:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "936787d368e639fe7e066dc14ee9c5f7a6fe3db0",
          "body": "Adopts the Contributor Covenant and documents how to report\nvulnerabilities privately via GitHub's advisory flow (now enabled on\nthe repo), ahead of opening the project up for outside contributions.",
          "is_bot": false,
          "headline": "docs: add CODE_OF_CONDUCT.md and SECURITY.md",
          "author_name": "Ümit Cebi",
          "author_login": "UemitCebi",
          "committed_at": "2026-07-06T09:26:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d70f98c66fbb37049546be6a79e6dfc9c61109c5",
          "body": "The Ma'at workflow only ever built the binary and ran `maat check` —\ngo test ./... was never actually invoked in CI. Split the workflow into\nthree independent jobs (check, test, lint), add a golangci-lint config,\nand update AGENTS.md and the development/testing guides to describe the\nnew gates, per the docs update protocol.",
          "is_bot": false,
          "headline": "ci: run go test and golangci-lint on every pull request",
          "author_name": "Ümit Cebi",
          "author_login": "UemitCebi",
          "committed_at": "2026-07-06T09:25:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eb6551107822e2390e6e3ea4ca37bc11cc69c688",
          "body": "Removes a dead type, two staticcheck nits, and annotates two\nintentional-but-flagged unparam cases, so the CLI package starts clean\nahead of wiring golangci-lint into CI.",
          "is_bot": false,
          "headline": "fix: clean up golangci-lint findings in internal/maat",
          "author_name": "Ümit Cebi",
          "author_login": "UemitCebi",
          "committed_at": "2026-07-06T09:25:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "872a3cd9e94ffbf7becdc06fefb85df7718b25ed",
          "body": "ci: split Homebrew tap update into its own re-runnable job",
          "is_bot": false,
          "headline": "Merge pull request #3 from getmaat/fix/split-homebrew-tap-job",
          "author_name": "Ümit Cebi",
          "author_login": "UemitCebi",
          "committed_at": "2026-07-06T08:45:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c9c1400e0fd21f2d62a24fb45372a9895d73128f",
          "body": "The tap update was a step inside the goreleaser job, running after\nGoReleaser published. If it failed (as it did on the getmaat org move\nwhen the transferred token lacked push access), it could not be cleanly\nre-run: rerunning the job made GoReleaser error with 422 already_exists\non duplicate asset \n[…]\nxt back from the published Release instead of local dist/, so\ngh run rerun --failed re-runs only the tap job against the existing\nrelease. Documents the token-identity gotcha in the development guide.",
          "is_bot": false,
          "headline": "ci: split Homebrew tap update into its own re-runnable job",
          "author_name": "Ümit Cebi",
          "author_login": "UemitCebi",
          "committed_at": "2026-07-06T08:44:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b56e6ef81974f5e323c6db4810489c3220ba0ba6",
          "body": "chore: rename owner UemitCebi -> getmaat org [HOLD: do not merge until repo transfer]",
          "is_bot": false,
          "headline": "Merge pull request #2 from getmaat/chore/org-rename-getmaat",
          "author_name": "Ümit Cebi",
          "author_login": "UemitCebi",
          "committed_at": "2026-07-06T08:22:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d09bb7c1285d3a26dcbe1bd59743038a84c9b315",
          "body": null,
          "is_bot": true,
          "headline": "Rename GitHub owner handle UemitCebi -> getmaat org",
          "author_name": "copilot-swe-agent[bot]",
          "author_login": "Copilot",
          "committed_at": "2026-07-06T07:54:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "78289688071e04ef0799612fd7172c1fd32aa3c0",
          "body": "Managed agent skills + brownfield adoption (ADR 0007/0008)",
          "is_bot": false,
          "headline": "Merge pull request #1 from UemitCebi/dev",
          "author_name": "Ümit Cebi",
          "author_login": "UemitCebi",
          "committed_at": "2026-07-06T07:49:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cd6af1e353342935e362c1bdfaf8746a1b797178",
          "body": "- .maat/skills/ as canonical skill location, generated from embedded templates; retrospect skill is the first one\n- AGENTS.md gains a managed skills discovery block (spliced)\n- Vendor fan-out: byte-identical copies into .claude/skills/ via a new skillsDir field on adapter targets\n- Skills ride the e\n[…]\n (dev builds stamp 'dev' to avoid drift thrash)\n- init prints brownfield next-steps guidance when files are skipped\n- Tests: skill scaffolding, drift+resync, user skills untouched, brownfield epilogue",
          "is_bot": false,
          "headline": "Ship managed agent skills and brownfield init guidance (ADR 0007/0008)",
          "author_name": "Ümit Cebi",
          "author_login": "UemitCebi",
          "committed_at": "2026-07-03T15:30:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3247db1eba42a1ecaf454166b444c822d52d1718",
          "body": "…doption, BYO-agent retrospect)",
          "is_bot": false,
          "headline": "Add ADR 0007 (skills as managed artifacts) and ADR 0008 (brownfield a…",
          "author_name": "Ümit Cebi",
          "author_login": "UemitCebi",
          "committed_at": "2026-07-03T15:18:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "94643c2a08e2d1ba0757e82c12482ee8804f46b4",
          "body": "Follow-up to the distribution model: adopt exact-tag pinning (option A in\nADR 0006's spirit) instead of a moving @v1 major pointer, and back the\nscaffolding with tests.\n\nWhy: release.yml triggers on `push: tags: v*`, so a moving `v1` Action\npointer would collide with the semver release trigger — pus\n[…]\nalignment (was committed unformatted).\n\nVerified: gofmt/vet clean; go test green incl. the new scaffold tests;\nsync + check green; released 0.2.0 satisfies ~> 0.1 (exit 0) and 1.0.0\ndoes not (exit 2).",
          "is_bot": false,
          "headline": "Pin distribution refs to exact release tags",
          "author_name": "Ümit Cebi",
          "author_login": "UemitCebi",
          "committed_at": "2026-07-03T14:03:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e460daa8fa1b1cc683c3283351a9e7449cca41dd",
          "body": "Close the gap ADR 0005 left between \"runs frictionlessly\" and\n\"obtainable frictionlessly,\" and stop version skew from thrashing the\ndrift check. Implements a three-layer model (see ADR 0006).\n\n1. CI is the authority\n   - action.yml: composite Action (uses: UemitCebi/maat@v1)\n   - .github/workflows/m\n[…]\nevelopment, and cli references updated; llms.txt + nav regenerated.\n\nVerified: go test / vet clean; sync + check green (23 docs); a released\n0.1.5 binary passes and a 1.0.0 binary refuses with exit 2.",
          "is_bot": false,
          "headline": "Add distribution model and maat_version pinning",
          "author_name": "Ümit Cebi",
          "author_login": "UemitCebi",
          "committed_at": "2026-07-03T13:33:19Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2e8fe8326fe96f1f5f275b10d6ea2670fe5bfacd",
          "body": "…liner",
          "is_bot": false,
          "headline": "docs: clarify tap-trust only affects short-name install, not the one-…",
          "author_name": "Ümit Cebi",
          "author_login": "UemitCebi",
          "committed_at": "2026-07-03T12:14:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "64c4ccbfa919cdd8f656d7f633a8d365b163ddb8",
          "body": null,
          "is_bot": false,
          "headline": "docs: note Homebrew Tap Trust step for first-time installs",
          "author_name": "Ümit Cebi",
          "author_login": "UemitCebi",
          "committed_at": "2026-07-03T12:02:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "23373e4a510bc90422cbea0a4f529ff1b0411c21",
          "body": "Distribute maat through UemitCebi/homebrew-tap so users can:\n\n    brew install UemitCebi/tap/maat\n\nThe tap holds a cross-platform formula (macOS + Linuxbrew) rather than a\nCask. This is deliberate: GoReleaser's `brews:` block is deprecated in\nfavor of `homebrew_casks:`, but a Cask is macOS-only and \n[…]\ne Homebrew channel + related_code\n\nVerified: render output is byte-identical to the hand-authored formula\nalready live in the tap; brew install/test/style/audit all pass;\ncheck + sync + go test green.",
          "is_bot": false,
          "headline": "Add Homebrew distribution via personal tap",
          "author_name": "Ümit Cebi",
          "author_login": "UemitCebi",
          "committed_at": "2026-07-03T11:31:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "407b3638c5c9f7f6a3e6d552917424e11090b1c0",
          "body": "Set up the release layer so pushing a semver tag publishes cross-platform\nbinaries and makes `go install github.com/UemitCebi/maat@latest` resolve.\n\n- .goreleaser.yaml: cross-compile linux/darwin/windows on amd64/arm64,\n  build tar.gz/zip archives + checksums.txt, publish a GitHub Release.\n  Validat\n[…]\nse files as related_code so the staleness check tracks them.\n- .gitignore: ignore GoReleaser's /dist/.\n- util.go: fix a lingering historical path (retired Python impl was under\n  codedoc/, not maat/).",
          "is_bot": false,
          "headline": "Add release pipeline: GoReleaser + tag-triggered binaries",
          "author_name": "Ümit Cebi",
          "author_login": "UemitCebi",
          "committed_at": "2026-07-03T08:32:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c5bfbf2c6a70a26890324d773576af5377d7ccf7",
          "body": "Rebrand the project and tool from `codedoc`/`CodeDoc` to `maat`/`Ma'at`\nend-to-end, restructure for clean distribution, and switch the license.\n\nStructure & distribution:\n- Module path: bare `module codedoc` → `github.com/UemitCebi/maat`, so\n  `go install github.com/UemitCebi/maat@latest` resolves.\n\n[…]\no port was checked against.\n\nVerified: go build/vet/test all pass; `maat sync` reports no changes;\n`maat check` reports 22 docs, 0 errors, 0 warnings; `go install .`\nproduces a runnable `maat` binary.",
          "is_bot": false,
          "headline": "Rename CodeDoc → Ma'at; relicense MIT → Apache-2.0",
          "author_name": "Ümit Cebi",
          "author_login": "UemitCebi",
          "committed_at": "2026-07-03T05:33:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "89a3a704750d2a0d55744720c7be47f66ef91fe2",
          "body": "Port the init/sync/check CLI from Python to Go, distributed as a single\nstatic binary with no runtime dependencies (ADR 0005, supersedes 0002).\nBehavior is locked by 20 conformance tests (byte-identical scaffolding and\ngenerated output vs the Python reference).\n\nMigrate the repository's own document\n[…]\n). This\nkeeps 'codedoc check' genuinely green rather than falsely passing on mtime.\n\nDelete the retired Python implementation (codedoc/, tests/, pyproject.toml);\ngit history preserves it as reference.",
          "is_bot": false,
          "headline": "Rewrite CodeDoc CLI in Go; migrate docs to describe Go implementation",
          "author_name": "Ümit Cebi",
          "author_login": "UemitCebi",
          "committed_at": "2026-07-02T18:10:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ae09ed5ab8879519ce646ef182c8fef9c0d72384",
          "body": "_template.md and other _-prefixed files are treated as partials: skipped\nby DocsModel.scan so they stay off llms.txt/index nav and out of\nvalidation, while remaining valid link targets on disk. Docs (module +\nconventions) updated per the update protocol; 3 tests added.",
          "is_bot": false,
          "headline": "Exclude underscore-prefixed templates/partials from docs scan",
          "author_name": "Ümit Cebi",
          "author_login": "UemitCebi",
          "committed_at": "2026-07-02T16:20:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e7adb4139a696797817b1bd82879c6d32d449847",
          "body": "Documentation-as-code for humans and AI agents:\n- Zero-dependency stdlib CLI: init scaffolds, sync generates derived files,\n  check validates (the CI gate)\n- AGENTS.md as single source of truth; adapters for Claude/Copilot/Cursor/\n  Windsurf/Gemini/Hermes generated and drift-checked\n- Staleness detection via related_code front-matter timestamps\n- Repo dogfoods itself: 22 docs, 4 ADRs, all green\n- 16 pytest end-to-end tests",
          "is_bot": false,
          "headline": "Initial CodeDoc framework: CLI (init/sync/check), dogfooded docs, tests",
          "author_name": "Ümit Cebi",
          "author_login": "UemitCebi",
          "committed_at": "2026-07-02T16:19:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 6,
      "commits_last_year": 38,
      "latest_release_at": "2026-07-22T13:18:10Z",
      "latest_release_tag": "v0.6.0",
      "releases_from_tags": false,
      "days_since_last_push": 2,
      "active_weeks_last_year": 3,
      "days_since_latest_release": 2,
      "mean_days_between_releases": 3.8
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 87,
      "has_issue_template": false,
      "has_code_of_conduct": true,
      "has_pull_request_template": true
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/getmaat/maat",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/getmaat/maat",
          "is_deprecated": false,
          "latest_version": "v0.6.0",
          "repository_url": "https://github.com/getmaat/maat",
          "versions_count": 6,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-22T13:11:01Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 2
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 4,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": null,
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": true,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 14912,
      "source_files_sampled": 20,
      "oversized_source_files": 0,
      "agent_instruction_files": [
        ".cursor/rules/maat.mdc",
        ".github/copilot-instructions.md",
        "AGENTS.md",
        "CLAUDE.md",
        "GEMINI.md",
        "internal/maat/templates/AGENTS.md"
      ],
      "agent_instruction_max_bytes": 6025
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": null,
        "source": null,
        "findings": [],
        "collected": false,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 0,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "github.com/charmbracelet/huh",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.0"
        },
        {
          "name": "github.com/charmbracelet/lipgloss",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.0"
        },
        {
          "name": "github.com/mattn/go-isatty",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.23"
        },
        {
          "name": "github.com/muesli/termenv",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.16.0"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 4,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "UemitCebi",
          "commits": 37,
          "avatar_url": "https://avatars.githubusercontent.com/u/78206455?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "maat-check.yml",
        "maat.yml",
        "release.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        ".golangci.yml"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "4 out of 4 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/25 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 0,
            "reason": "project has 0 contributing companies or organizations -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 8,
            "reason": "2 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "6d6746127708213828b9e2bfae137e34e5ec8115",
        "ran_at": "2026-07-25T00:04:43Z",
        "aggregate_score": 3.9,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-22T13:18:21Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-07-07T09:46:05Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/getmaat/maat",
    "host": "github.com",
    "name": "maat",
    "owner": "getmaat"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 57,
      "inputs": {
        "security": 39,
        "vitality": 67,
        "community": 47,
        "governance": 50,
        "engineering": 80
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "moderate",
        "name": "Vitality",
        "value": 67,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 52,
            "inputs": {
              "commits_last_year": 38,
              "human_commit_share": 0.974,
              "days_since_last_push": 2,
              "active_weeks_last_year": 3
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 2 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 2
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "3/52 weeks with commits",
                "points": 2.1,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 3
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "38 commits in the last year",
                "points": 14.3,
                "status": "partial",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 38
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "releases_count": 6,
              "latest_release_tag": "v0.6.0",
              "releases_from_tags": false,
              "days_since_latest_release": 2,
              "mean_days_between_releases": 3.8
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "6 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 6
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 2 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 2
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~3.8 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 3.8
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 47,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 8,
            "inputs": {
              "forks": 0,
              "stars": 4,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "4 stars",
                "points": 7.7,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "excellent",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 92,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": true,
              "has_pull_request_template": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 13.5,
                "status": "met",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 6.3,
                "status": "met",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 50,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 10,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 72,
            "inputs": {
              "merged_prs": 4,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "4/4 decided PRs merged",
                "points": 38.2,
                "status": "met",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 4,
                      "decided": 4
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/25 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "at_risk",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 34,
            "inputs": {
              "followers": 0,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "getmaat",
              "public_repos": 2,
              "account_age_days": 19
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "0 followers of getmaat",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 0,
                      "login": "getmaat"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "2 public repos, account ~0 yr old",
                "points": 3.6,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 2
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 0
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/getmaat/maat"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 2
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 2 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 2
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "6 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 6
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 80,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "3 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "4 out of 4 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "good",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "topics": [
                "agents-md",
                "ai-agents",
                "cli",
                "developer-tools",
                "devtools",
                "documentation",
                "documentation-as-code",
                "golang",
                "llm"
              ],
              "has_wiki": false,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "9 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 9
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 39,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 39,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 3.9
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "4 out of 4 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/25 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "2 existing vulnerabilities detected",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 84,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "has_llms_txt": true,
              "legible_history_share": 0.919,
              "agent_instruction_files": [
                ".cursor/rules/maat.mdc",
                ".github/copilot-instructions.md",
                "AGENTS.md",
                "CLAUDE.md",
                "GEMINI.md",
                "internal/maat/templates/AGENTS.md"
              ],
              "agent_instruction_max_bytes": 6025
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": ".cursor/rules/maat.mdc, .github/copilot-instructions.md, AGENTS.md, CLAUDE.md, GEMINI.md, internal/maat/templates/AGENTS.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".cursor/rules/maat.mdc, .github/copilot-instructions.md, AGENTS.md, CLAUDE.md, GEMINI.md, internal/maat/templates/AGENTS.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": "llms.txt present",
                "points": 15,
                "status": "met",
                "details": [
                  {
                    "code": "llms_txt_present",
                    "params": {}
                  }
                ],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "34 of 37 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 34,
                      "sampled": 37
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 67,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "go.mod (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "go.mod"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 38",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 38
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 14912,
              "source_files_sampled": 20,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/20 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 20,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-25T00:04:51.292849Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/g/getmaat/maat.svg",
  "full_name": "getmaat/maat",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}

Las puntuaciones son señales, no garantías. Reflejan prácticas públicamente visibles en GitHub; no son una auditoría de código ni una garantía de seguridad.

Los datos ausentes se excluyen y los pesos se renormalizan; nunca se puntúan como cero. La metodología es versionada y abierta: métricas v1.13.0, esquema v0.27.0 — metodología completa · wiki de métricas.

Cómo se sitúa un resultado dentro del registro general: estadísticas agregadasGo.