GoApache-2.0★ 3 estrellas⑂ 3 forksdesde abr 2026Ver en GitHub ↗
gnoverse/gno-mcp tiene un índice de salud de 58 sobre 100, lo que lo sitúa en la banda Moderado. Su puntuación más alta es Vitality (79/100) y la más baja, Community & Adoption (27/100). Se actualizó por última vez hace 2 días. Una sola persona concentra la mayor parte del trabajo reciente.
58
global / 100
Moderado
Índice de salud del software
Las métricas se agrupan en categorías ponderadas sobre una escala de 1 a 100. El resultado global parte de su media; cuando la evidencia pública activa la Política de Jurisdicciones de Alto Riesgo, la calificación se ajusta y recibe el límite 49 (En riesgo). Preparación para IA queda fuera.
58
Excelente85-100Ejemplar; cumple prácticamente todos los criterios evaluados
Bueno70-84Saludable; carencias menores
Moderado50-69Aceptable con carencias notables; se recomienda revisión
En riesgo30-49Debilidades significativas; su adopción exige cautela
Crítico1-29Problemas graves (proyecto abandonado, un solo mantenedor, sin higiene)
Perfil de puntuación
Cada eje es una categoría. La forma importa más que la media: un proyecto sano llena toda la figura, mientras que un perfil de picos y cráteres indica que la fortaleza en una dimensión enmascara el riesgo en otra.
Dependencias indirectas libres de avisos conocidos — el conjunto transitivo no es separable de las dependencias de desarrollo y prueba en este alcance
40/40
Sin avisos pendientes — ningún aviso lleva público más de 90 días
Datos de entrada utilizados
source
osv
advisories
4
affected_packages
3
assessed_packages
108
unassessed_packages
0
affected_by_severity
critical 1, unknown 2
direct_affected_packages
1
Excluidos de la puntuación (sin datos o no aplicable): Dependencias indirectas libres de avisos conocidos. Los pesos restantes se han renormalizado. Se cotejaron 108 dependencias resueltas con OSV. Este repositorio no publica ningún paquete que el índice resuelva, por lo que se evaluó en su lugar el grafo de dependencias del repositorio. Ese grafo mezcla fijaciones de desarrollo y prueba con las dependencias distribuidas, de modo que solo se puntúan las dependencias declaradas en tiempo de ejecución; los hallazgos transitivos se informan como contexto y quedan excluidos de la puntuación. No se analiza la alcanzabilidad.
¿Hasta qué punto está el repositorio preparado para desarrollarse y mantenerse con agentes de codificación de IA? Es una insignia independiente y experimental — peso 0,0, de modo que se presenta por separado y no afecta a la puntuación de salud global.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Could not fetch npm package 'gnomcp' from its registry
Más detalle
Historial de estrellas y forks 0 ★ / 3 ⇿
0Estrellas
3Forks
11Versiones
Cuándo se añadió cada estrella y fork, recopilado de GitHub y agrupado por día. El crecimiento acumulado se sitúa justo encima de las adiciones diarias que lo componen, de modo que ambos se leen en conjunto: la acumulación orgánica sostenida no se parece en nada a un pico abrupto y efímero. Cuando esa diferencia es medible, se informa como autenticidad del crecimiento.
Mayor 0Menor 9Parche 2
OpenSSF Scorecard 5.9 / 10
5.9agregado
Evaluación de seguridad independiente y agnóstica en cuanto a herramientas, procedente del proyecto de código abierto OpenSSF Scorecard. Cada comprobación premia una práctica de seguridad, no la herramienta de un proveedor concreto. Las comprobaciones que Scorecard no pudo determinar se marcan como n/d y se excluyen de la puntuación de seguridad (nunca se cuentan como cero).Scorecard v5.5.0 · 2026-07-29 13:47 UTC
Conjunto completo de dependencias resueltas según el grafo de dependencias de GitHub: 15 paquetes directos y 93 indirectos (transitivos). El cierre transitivo es completo cuando el repositorio incluye un lockfile.
Este repositorio no publica ningún paquete que el índice resuelva, así que se evaluó su propio grafo de dependencias — 108 paquetes, que incluyen también fijaciones de desarrollo y prueba que nunca se distribuyen: 3 tienen avisos conocidos, de los cuales 1 son directas.
Paquete
Versión
Relación
Gravedad
Avisos
Corregido en
google.golang.org/grpc
v1.81.1
indirecta
crítica
2
1.82.1
golang.org/x/crypto
v0.53.0
directa
desconocida
1
—
github.com/klauspost/compress
v1.18.6
indirecta
desconocida
1
1.18.7
Un aviso significa que la versión registrada en el grafo de dependencias cae dentro del rango afectado de un aviso. No se analiza la alcanzabilidad, y el grafo incluye fijaciones de desarrollo y prueba: un hallazgo puede referirse al utillaje y no al software distribuido.
Informe JSON sin procesar legible por máquina
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 6738,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 971233,
"CSS": 21262,
"HTML": 21530,
"Shell": 28081,
"Makefile": 6659,
"Dockerfile": 10196,
"JavaScript": 4014
},
"pushed_at": "2026-07-27T11:08:56Z",
"created_at": "2026-04-18T23:33:24Z",
"owner_type": "Organization",
"updated_at": "2026-07-23T15:42:34Z",
"description": null,
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "https://gno.land",
"name": "Gnoverse 🧙",
"type": "Organization",
"login": "gnoverse",
"company": null,
"location": null,
"followers": 35,
"avatar_url": "https://avatars.githubusercontent.com/u/183854854?v=4",
"created_at": "2024-10-04T16:47:47Z",
"is_verified": null,
"public_repos": 37,
"account_age_days": 662
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.9.0",
"kind": "minor",
"published_at": "2026-07-22T20:19:35Z"
},
{
"tag": "v0.8.2",
"kind": "patch",
"published_at": "2026-07-17T14:02:51Z"
},
{
"tag": "v0.8.1",
"kind": "patch",
"published_at": "2026-07-17T06:38:09Z"
},
{
"tag": "v0.8.0",
"kind": "minor",
"published_at": "2026-06-25T06:30:44Z"
},
{
"tag": "v0.7.0",
"kind": "minor",
"published_at": "2026-06-22T10:29:03Z"
},
{
"tag": "v0.6.0",
"kind": "minor",
"published_at": "2026-06-19T13:18:34Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2026-06-17T21:23:42Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2026-06-17T18:52:45Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2026-06-17T17:47:56Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2026-06-13T22:06:28Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2026-06-12T16:03:21Z"
}
],
"recent_commits": [
{
"oid": "ef19be44acdb1109ada2fa4e19e7472ab98a7a23",
"body": null,
"is_bot": false,
"headline": "feat(site): Simple Analytics — pageviews + install-copy event (#61)",
"author_name": "Guilhem Fanton",
"author_login": "gfanton",
"committed_at": "2026-07-23T15:42:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9812994e5310750df9a3dfc9f7dbfa366b9ce5b2",
"body": "* feat(site): benefit-led hero, use-case section, sessions pre-release note\n\nHero leads with the trust benefit (readable-source auditing) instead\nof the mechanism; the mechanism moves to the sub line. A use-cases\nsection follows the hero: four plain-language scenarios, each tagged\nwith where it runs\n[…]\nfeat(site): accurate counts, deduped copy, unscoped pre-release chip\n\n* feat(site): hero closes on \"with your AI agent\"\n\n* feat(site): hero tool-catalog button stays on page; nav matches section names",
"is_bot": false,
"headline": "feat(site): lead the landing copy with what you can do (#60)",
"author_name": "Guilhem Fanton",
"author_login": "gfanton",
"committed_at": "2026-07-23T15:01:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cca127a47ed38eb6ca6cba6e56c8a67046a814fa",
"body": "GitHub mark in the header pill; footer icon row for GitHub, Discord,\nX, and Telegram (the gno.land community channels). Inline SVGs from\nsimple-icons (CC0), colored via currentColor so both themes work; the\nredundant GitHub text link leaves the footer.",
"is_bot": false,
"headline": "feat(site): social icons in header and footer (#58)",
"author_name": "Guilhem Fanton",
"author_login": "gfanton",
"committed_at": "2026-07-22T21:26:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1ec95a6af12e8b56aa6c4810e666cd827f325f55",
"body": "… skills (#57)\n\n* fix(install): register the MCP server on Codex and OpenCode, not just skills\n\nCodex and OpenCode installs delivered the gno skill but not the\nserver: wire_codex() printed a pointer instead of running the stable\n'codex mcp add', the Codex plugin manifest had no mcpServers entry,\nand\n[…]\ne file when resolving the gnomcp binary\n\nA directory or non-executable named gnomcp on PATH registered an\nunspawnable MCP server instead of falling through to the next\ncandidate or staying skill-only.",
"is_bot": false,
"headline": "fix(install): register the MCP server on Codex and OpenCode, not just…",
"author_name": "Guilhem Fanton",
"author_login": "gfanton",
"committed_at": "2026-07-22T21:06:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "db1fffd4e90d0e5661deb301b831425cb153795d",
"body": "Staged reveal on load (frame, copy, terminal, stats), with the\nterminal replay starting after the entrance; reduced motion shows\neverything instantly. The hero install command gets a read-it-first\nlink to scripts/install.sh. Headings drop their terminal periods.",
"is_bot": false,
"headline": "feat(site): hero entrance, script link, heading punctuation (#56)",
"author_name": "Guilhem Fanton",
"author_login": "gfanton",
"committed_at": "2026-07-22T20:25:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "09adcf4a62e2d50d1fe7ddffa9f03328bb4bbc9d",
"body": null,
"is_bot": false,
"headline": "chore(release): bump to 0.9.0 (#55)",
"author_name": "Guilhem Fanton",
"author_login": "gfanton",
"committed_at": "2026-07-22T20:14:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "772a22c83c0483b5542068f733d2b231b4bd3713",
"body": "…ual-testnet skill refs (#53)\n\nThe builtin testnet profile now targets topaz-1. Codenamed testnets ended\nthe test<N> pattern, so the writable-chain gate is a release-time testnet\nname list (testnetChainNames = {test, topaz}, bare or hyphenated forms),\nnot a regex. The playground simnet chain-id move\n[…]\nce + multichain + readonly_chains\nADRs, security.md, gnomcp.md, README, SKILL.md router (plus a stale\ncold-start tool count in tool_surface.md).\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: default to topaz-1, sunset profile labels + gno_profile_list, d…",
"author_name": "Guilhem Fanton",
"author_login": "gfanton",
"committed_at": "2026-07-22T20:04:18Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "fc270d423e3bc8430e4d6792e9ba63551dff3b1e",
"body": "Static landing page for gnomcp: plain HTML/CSS/JS plus Geist woff2\nfonts, no build step. Root netlify.toml publishes site/ via Netlify's\ngit integration; its ignore script skips deploys unless site/ or the\nconfig changed. Same-origin-only CSP, immutable caching for the fonts.",
"is_bot": false,
"headline": "feat(site): promo landing page + Netlify deploy config (#54)",
"author_name": "Guilhem Fanton",
"author_login": "gfanton",
"committed_at": "2026-07-22T19:20:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b73bad9f3d361182d0562563df1a60ca24d32e0",
"body": "…hat they use (#51)\n\n## What\n\nWrites price their gas fee from the gas they actually reserve, and sessions are fee-aware end to end.\n\n- Every VM write dry-runs at a 1B measuring ceiling, broadcasts at `measured × 1.5` (floored at `DefaultGasWanted`, back to 10M), and prices the fee for that gas; bank\n[…]\nchain-side to the ugnot.\n\n## Follow-ups\n\n- `spend_remaining` on session write results (today: `gno_auth_status`).\n- gnoclient-native session signing (`Signer.GetMaster`) to replace `signTxForSession`.",
"is_bot": false,
"headline": "fix(session): fee-aware sessions + gas/fee decoupling — writes cost w…",
"author_name": "Guilhem Fanton",
"author_login": "gfanton",
"committed_at": "2026-07-22T12:32:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ba1b72b01322d468a5135bd27c7d3a7ca1e7273f",
"body": "…uthoritative (#49)\n\nThe faucet refused any -chain-id not matching test<N>/test-<N>, coupling\nthe binary to a chain naming convention: renaming testnets would force a\nfaucet release just to update the pattern. Drop it — deploying the faucet\nis already an explicit operator act (chain-id + RPC + funde\n[…]\nns: a fund request must\nname the configured chain-id exactly (403 chain_mismatch). Removes\nErrChainRefused and the chain_refused metric outcome.\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(faucet): drop chain-id naming scheme — operator's -chain-id is a…",
"author_name": "Guilhem Fanton",
"author_login": "gfanton",
"committed_at": "2026-07-20T09:50:13Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "53613256892f757488b882d70bae8d862b08a2ca",
"body": null,
"is_bot": false,
"headline": "chore(release): bump to 0.8.2 (#48)",
"author_name": "Guilhem Fanton",
"author_login": "gfanton",
"committed_at": "2026-07-17T13:58:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "83cbdf982acb3500779a684651cebf2a69e542cd",
"body": "* feat: auto-expand short deploy_path to address-based namespace\n\nWhen gno_addpkg receives a deploy_path without \"/\" (e.g. \"hello\"),\nexpand it to \"gno.land/r/<agent_address>/<name>\". This address-based\npath is always authorized (no namespace registration required) and\ngnoweb-compatible (hex address,\n[…]\nledger.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>\nCo-authored-by: gfanton <8671905+gfanton@users.noreply.github.com>",
"is_bot": false,
"headline": "feat: address-first deploy path expansion in gno_addpkg (#29)",
"author_name": "moul",
"author_login": "moul",
"committed_at": "2026-07-17T12:29:31Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "891dba09304ad1175978f63be3ec51c2a6b9e94c",
"body": "… (#30)\n\nAdds a read/write tool pair for the chain CLA deploy gate: gno_cla_info reports {enabled, hash, cla_url} (URL inside the untrusted envelope), gno_cla_sign broadcasts Sign(hash) with the agent key. The user-consent flow lives in the server instructions, the cla_unsigned recovery hint, and gn\n[…]\nenforced e2e-clagate image.\n\nCo-authored-by: moul <94029+moul@users.noreply.github.com>\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add gno_cla_info/gno_cla_sign — CLA flow with user confirmation…",
"author_name": "moul",
"author_login": "moul",
"committed_at": "2026-07-17T09:59:26Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "fb341ba63665eed43731e90f89b74769afdf8503",
"body": "* chore(github): add bug report issue template\n\nYAML issue form with required-field validation: version, install\nmethod, environment, repro steps, expected vs actual, and logs in a\ncollapsed details block. config.yml routes gno language/VM/chain bugs\nupstream to gnolang/gno and questions to docs.\n\nC\n[…]\nly@anthropic.com>\n\n* chore(github): explain how to reveal hidden tool calls in the Logs field\n\nCo-Authored-By: Claude <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(github): add bug report issue template (#47)",
"author_name": "Guilhem Fanton",
"author_login": "gfanton",
"committed_at": "2026-07-17T08:32:32Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "59bf7961a9cf77f6c91790232613b102ddd09042",
"body": null,
"is_bot": false,
"headline": "chore(release): bump to 0.8.1 (#46)",
"author_name": "Guilhem Fanton",
"author_login": "gfanton",
"committed_at": "2026-07-17T06:33:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ea8429447168d72240850239fdce7299e05a2bbd",
"body": "Stopgap for the out-of-gas wall on heavier txs (name registration via\nr/sys/namereg burns ~27M gas, over the 10M ceiling — #28) until #31\nsettles on the full fix.\n\nBecause the ante requires GasFee >= GasWanted x minGasPrice, the derived\nDefaultGasFeeUgnot rises with the ceiling: every write's fee fl\n[…]\n simnet CLA-flow bound and\nthe gnokey.md / ADR fee math are reconciled to the new floor.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(chain): bump DefaultGasWanted to 200M (#45)",
"author_name": "Guilhem Fanton",
"author_login": "gfanton",
"committed_at": "2026-07-17T06:29:19Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "75ca6007e7566d69c5110edad5ac510dadcad30d",
"body": "Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 4.1.0 to 4.2.0.\n- [Release notes](https://github.com/docker/setup-buildx-action/releases)\n- [Commits](https://github.com/docker/setup-buildx-action/compare/d7f5e7f509e45cec5c76c4d5afdd7de93d0b3df5...bb05f3f5519dd8\n[…]\nirect:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump docker/setup-buildx-action from 4.1.0 to 4.2.0 (#38)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-16T11:06:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e7f537c1c4057a85326ed250e3e32bcb119aebcf",
"body": "* chore(deps): bump Go to 1.26.5\n\nClears GO-2026-5856 (crypto/tls ECH pre-shared-key identity leak,\nfixed in go1.26.5) from the vuln job. GO-2026-5932 (x/crypto/openpgp\ndeprecation, reached via gno tm2 key armor) remains — no fixed\nrelease exists upstream.\n\n* ci: gate govulncheck through an advisory\n[…]\nories.\n\nIgnores GO-2026-5932 (x/crypto/openpgp deprecation, no fixed release):\nreached via gno's tm2 key armoring, which uses only the ASCII armor\ncodec — actionable upstream in gnolang/gno, not here.",
"is_bot": false,
"headline": "chore(deps): bump Go to 1.26.5 (#44)",
"author_name": "Guilhem Fanton",
"author_login": "gfanton",
"committed_at": "2026-07-16T10:23:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fe9ce850c1d6c0b876a8377a01d303cb6649e866",
"body": "Bumps [docker/login-action](https://github.com/docker/login-action) from 4.2.0 to 4.4.0.\n- [Release notes](https://github.com/docker/login-action/releases)\n- [Commits](https://github.com/docker/login-action/compare/650006c6eb7dba73a995cc03b0b2d7f5ca915bee...af1e73f918a031802d376d3c8bbc3fe56130a9b0)\n\n[…]\nirect:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump docker/login-action from 4.2.0 to 4.4.0 (#37)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-15T12:13:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7d984af77f2d3124473be53a562129616eea79cc",
"body": "Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 7.2.2 to 7.2.3.\n- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)\n- [Commits](https://github.com/goreleaser/goreleaser-action/compare/5daf1e915a5f0af01ddbcd89a43b8061ff4f1a89...f06c13\n[…]\nirect:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump goreleaser/goreleaser-action from 7.2.2 to 7.2.3 (#39)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-15T12:12:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "31689dde6f34cdb867e64f38482433a4ee4e2eab",
"body": "Bumps [docker/setup-qemu-action](https://github.com/docker/setup-qemu-action) from 4.1.0 to 4.2.0.\n- [Release notes](https://github.com/docker/setup-qemu-action/releases)\n- [Commits](https://github.com/docker/setup-qemu-action/compare/06116385d9baf250c9f4dcb4858b16962ea869c3...96fe6ef7f33517b61c61be\n[…]\nirect:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump docker/setup-qemu-action from 4.1.0 to 4.2.0 (#40)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-15T12:12:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7593a32aec420de95221d5a6b7e2adb5e2c237df",
"body": "… (#35)\n\nBumps [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance) from 4.1.0 to 4.1.1.\n- [Release notes](https://github.com/actions/attest-build-provenance/releases)\n- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md)\n- [Commits](\n[…]\nirect:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump actions/attest-build-provenance from 4.1.0 to 4.1.1…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-15T12:03:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5d360a18bb414ddeae669a29a3f05e41f2c4884b",
"body": "* docs(gno-skill): align interrealm current-realm guidance\n\n* docs(gno-skill): clarify interrealm source nuance\n\n* docs(gno-skill): clarify forwarded cur stays current",
"is_bot": false,
"headline": "docs(gno-skill): align interrealm v2 current-realm guidance (#27)",
"author_name": "Junghoon Ban",
"author_login": "junghoon-vans",
"committed_at": "2026-07-08T08:06:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "abcfe7a4d412ed0c2766319cddf0566361e8f0fb",
"body": "…g on the harness (#26)\n\nBroaden the skill description to trigger on any harness work (authoring/editing\nscenarios, changing the driver), document the expectation in the playground README\nand root AGENTS.md, and add a playground/AGENTS.md for when cwd is the harness. Note\nin the README that scenario\n[…]\nia @-import. .gitignore re-includes\nthe symlinks over the machine-global .claude / CLAUDE.md ignores (keeping local\nsettings.json and agent-memory out).\n\nCo-authored-by: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(playground): always load the playground-driver skill when workin…",
"author_name": "Guilhem Fanton",
"author_login": "gfanton",
"committed_at": "2026-06-25T08:04:31Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "298478ad2eaad41abb84582a030181b440d9f5df",
"body": null,
"is_bot": false,
"headline": "chore(release): bump to 0.8.0 (#25)",
"author_name": "Guilhem Fanton",
"author_login": "gfanton",
"committed_at": "2026-06-25T06:26:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "890eb3da8b8102bc9eb7cd4ef4997835fe4990af",
"body": "…(#22)\n\nOriginCaller/CurrentRealm/PreviousRealm/OriginSend live in chain/runtime/unsafe\non test13/master (interrealm Phase 3, gnolang/gno#5669), not chain/runtime or\nchain/banker. The skill emitted runtime.*/banker.* selectors that do not compile\nagainst the target chain. Sweep every reference to un\n[…]\nncLitExpr/SwitchClauseStmt\n- security: seal bypass-test path -> examples/quarantined/...\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(gno-skill): fix stdlib refs for test13 + broader accuracy sweep …",
"author_name": "Guilhem Fanton",
"author_login": "gfanton",
"committed_at": "2026-06-24T16:21:35Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "5d326409b20a2a0b493a911913f243c07d44f3a5",
"body": "Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6.4.0 to 6.5.0.\n- [Release notes](https://github.com/actions/setup-go/releases)\n- [Commits](https://github.com/actions/setup-go/compare/4a3601121dd01d1626a1e23e37211e3254c1c06c...924ae3a1cded613372ab5595356fb5720e22ba16)\n\n---\nupdated\n[…]\nirect:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump actions/setup-go from 6.4.0 to 6.5.0 (#24)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-24T15:50:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "622ef2239da1b258505ff48aae7a327f6fcbec51",
"body": "Refresh every dependency Dependabot tracks (gomod + github-actions):\n\n- gnolang/gno -> latest master (v1.1.0 is older in commit history); ignore gno\n in dependabot.yml since its master pseudo-version sorts below the release tags\n- modelcontextprotocol/go-sdk 1.4.1 -> 1.6.1, plus go get -u of indire\n[…]\npin GORELEASER_CURRENT_TAG to\nthe latest gnomcp semver tag so the agentfaucet/v… prefixed tag stops poisoning\nthe snapshot docker build.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)",
"is_bot": false,
"headline": "chore(deps): bump go modules and pinned actions to latest (#23)",
"author_name": "Guilhem Fanton",
"author_login": "gfanton",
"committed_at": "2026-06-24T15:42:47Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "0ef9de11f1fa9d866253881067a7a8d1b4b37f86",
"body": "Surface the recurring Gno realm vulnerability families (from the upstream\naudit-pattern harness) into the gno skill, verified against gnolang/gno master:\n\n- SKILL.md: security trigger quick-check table (8 pattern families)\n- patterns.md: security fixture reference with before/after examples for\n au\n[…]\nealms.md: recommend own-address namespace (r/<agent-address>/*) as the\n agent deploy default\n\nAPIs use the released-API forms (banker.OriginSend, runtime.OriginCaller) to\nmatch the rest of the skill.",
"is_bot": false,
"headline": "feat(gno-skill): integrate audit security patterns from gnolang/gno",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-23T11:45:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d6f5d94e6a3fad2cb18937b88b0dc60f108f6ded",
"body": "A successful gno_addpkg deploy reported the tx hash and height but never the\ngnoweb URL where the new realm is viewable, so an agent had to guess the host\nand got the testnet wrong. The result now includes a \"View:\" line and a\ngnoweb_url structured field, derived from the profile.\n\nAdd Profile.Realm\n[…]\nback, unspecified, private, and link-local addresses and\nbare dotless hostnames.\n\nCo-Authored-By: Claude <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01YM21kyp3EkeKa1GEX6hwyk",
"is_bot": false,
"headline": "feat(addpkg): surface the deployed realm's gnoweb URL",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-23T09:04:13Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "00f82b116c49a4c062c6d45c1ab9dcdf3e6eca18",
"body": "agentfaucet's clean version is supplied via GORELEASER_CURRENT_TAG (its real\ntag is prefixed, agentfaucet/v…). goreleaser's git-state validate resolved the\nbare v<version> to a same-numbered gnomcp tag on a different commit and aborted\nthe release. Skip validate for the agentfaucet path; gnomcp keeps it.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci(release): skip goreleaser validate for agentfaucet",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-22T10:42:21Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "573cb3d45ebc903055668e1c07b7b47b5f75d079",
"body": "Co-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(release): bump to 0.7.0",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-22T10:06:19Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "4acec56a568b70938f7c2d42269380a4af0a231a",
"body": "Per-address faucet limit discovery:\n- GET /limits publishes the faucet's per-address policy; POST /fund 429s carry\n a Retry-After header and a structured body that names only the per-address\n cooldown (other limits stay generic so anti-abuse internals are not disclosed).\n- clientfaucet fetches /li\n[…]\nacking\n and the key-delete sweep reserve; the gnokey command echo shows it. The\n agentfaucet -gas-fee flag is dropped (priced live; -gas-wanted kept).\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(faucet+gas): per-address limit discovery + chain-priced gas fees",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-22T10:04:58Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "50027c8e39579a81863562bdb950b570311a6bfd",
"body": "…tion-order\n\nGno's VM backs each map with an insertion-ordered linked list (iteration)\nplus a Go map (O(1) lookup); range walks the list, never the Go map. So map\niteration is deterministic insertion order — it cannot diverge across nodes\nand is not a consensus-halt risk. The skill carried the Go-ma\n[…]\nfoot-guns (math.MinInt/MaxInt, float formatting,\nobserved append capacity) keep their RED/determinism framing. memory.md is now\nthe canonical statement.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(gno-skill): correct map iteration from non-deterministic to inser…",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-20T10:41:36Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b65665d4db25499a11122f07bfe1669d341db9cd",
"body": "* feat(deploy): help agents clear the sys deploy gates (namespace + CLA)\n\nA realm deploy on a public gno.land network must clear two genesis-activated\nkeeper gates — namespace authorization, then the CLA signature — both of which\nreject with the same vm.UnauthorizedUserError type. The CLA log lives \n[…]\n. The gno skill's gnokey.md\nexplains it when present, but neither layer depends on the other.\n\nCo-Authored-By: Claude <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "gnokey reference + deploy-gate handling and per-write command echo (#19)",
"author_name": "Guilhem Fanton",
"author_login": "gfanton",
"committed_at": "2026-06-20T09:08:09Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "73af5e874739e6a2a8c7a60e231643807dee5430",
"body": "Co-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(release): bump to 0.6.0",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-19T13:14:17Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "8180cfd82fd85a7b66da5047331a062fb7fb5e84",
"body": "Releasing one component no longer rebuilds the other. release.yml takes a\n`component` input: gnomcp keeps plain v<version> tags + a full goreleaser release\n(archives + GitHub release + image); agentfaucet uses agentfaucet/v<version> tags +\nan image-only goreleaser run (release.disable; version passe\n[…]\n.\nmake bump (alias bump.gnomcp) bumps only the gnomcp plugin manifests; agentfaucet\nis versioned by its tag alone. Flow documented in docs/releasing.md.\n\nCo-authored-by: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: split releases into independent gnomcp + agentfaucet cadences (#18)",
"author_name": "Guilhem Fanton",
"author_login": "gfanton",
"committed_at": "2026-06-19T13:12:06Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "03acc211228307516e593abbb89ef4634e770b88",
"body": "…eping (#17)\n\n* feat(skills/gno): add gnoland.md system-realm reference\n\nTeach the durable design of gno.land's genesis-coupled system realms\n(r/sys/* names/users/namereg/validators/params/cla, native sys/params)\nand the discipline of querying the live chain for every per-network value\nrather than r\n[…]\nked, and .mynote is\npersonal and never cited from committed files.\n\nGenerated with Claude Code\nCo-Authored-By: Claude <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(skills/gno): sysrealms.md system-realm reference + skill houseke…",
"author_name": "Guilhem Fanton",
"author_login": "gfanton",
"committed_at": "2026-06-19T09:59:45Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3bb0e86c37264490fe4253897b846c0a3bbd6960",
"body": "…2e scenario (#16)\n\n* feat(profiles): point the built-in testnet faucet at the deployed agent-faucet\n\nThe zero-config testnet profile now sets faucet-service-url to the live\nagent-faucet (https://faucet-agent.test13.testnets.gno.land), so gno_faucet_fund\nperforms an automatic service grant instead o\n[…]\nt-service-url default. blocked (not fail) when\nthe live faucet is unreachable or rate-limits.\n\nCo-authored-by: Claude <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(profiles): default testnet to the deployed agent-faucet + live e…",
"author_name": "Guilhem Fanton",
"author_login": "gfanton",
"committed_at": "2026-06-19T09:25:04Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b84f65e82621c1f449a4e2d8252c0c54f4075bb7",
"body": "🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(release): bump to 0.5.0",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-17T21:19:11Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "306b66f452fd629c827d2a348b641657e90338ac",
"body": "Add OpenTelemetry metrics (Prometheus exporter) on an opt-in -metrics-addr\nlistener and structured slog JSON logging to the faucet, so burst control,\nHTTP traffic, and funding-wallet balance can be monitored in Grafana.\n\n- Metrics (opt-in, separate listener via promhttp): fund-outcome counter\n fauc\n[…]\n stays free of OpenTelemetry; all OTel lives in\n cmd/agentfaucet behind a small faucet.Metrics seam (keeps faucet extractable).\n\nDeps: go.opentelemetry.io/otel/exporters/prometheus, contrib otelhttp.",
"is_bot": false,
"headline": "feat(agentfaucet): observability — Prometheus metrics + JSON access logs",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-17T20:39:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "77845c00110f4a90f1a58b470b36a976ce2912da",
"body": "The dispenser used the global chain.DefaultGas* (10M fee / 10M wanted), which\nis sized for deploys and shared by every write path. A faucet only does a bank\nsend (~1.6M gas on test-13), so paying a 10 GNOT fee per drip is wasteful.\n\nAdd -gas-fee (default 1000000ugnot) and -gas-wanted (default 500000\n[…]\n global\ndefault is left untouched so Call/Run/AddPackage keep their deploy-sized budget.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(agentfaucet): faucet-scoped gas via -gas-fee/-gas-wanted flags",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-17T19:20:17Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "22077b667839b44ee16c10e2483e730b34f07ed6",
"body": "🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(release): bump to 0.4.0",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-17T18:48:26Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f451a0dea1c7a2f0d71098dad13bd801a98e49ef",
"body": "A load-balancer health check needs a GET that returns 200 while the process\nis serving. agentfaucet previously exposed only POST /fund, so an HTTP health\ncheck had nothing to probe. Add GET /health returning 200 \"ok\"; it does not\nprobe the chain, so a transient RPC blip won't pull the instance from rotation.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(faucet): add GET /health liveness endpoint to agentfaucet",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-17T18:47:45Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "c4cf22d0480b7759b4e5c32c2917e10adbf98b87",
"body": "🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(release): bump to 0.3.0",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-17T17:43:17Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "18cff328399807592b5f11083d2a02b2180d77b6",
"body": "Bump the built-in `testnet` profile off the dead test11 to test13 and\npopulate gnoweb + indexer endpoints so the zero-config testnet experience\nworks against the live network:\n\n chain-id test-13 (the node reports the hyphenated form; compared exactly)\n rpc https://rpc.test13.testnets.gno.\n[…]\naphql/query\n\nSweep every remaining test11 reference out of fixtures, comments, and docs.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(profiles): default testnet to test13",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-17T16:40:23Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7de58e450c7e90420450b37cc34e1090efde7cba",
"body": "Name gno_key_send/list/delete in the write package overview alongside the\nexisting tools; the comment had drifted as the multi-key surface grew.\n\nGenerated with Claude Code\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(write): refresh package doc-comment to list all key tools",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-17T16:40:23Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "b6e0eb8f87e4377d365b8ff98721e21cfb7a049f",
"body": "gno_key_delete refused nothing and an agent stranded ~981 GNOT on a key it\nremoved (surfaced by the new playground scenario 09, driven end-to-end). Make\nthe tool funds-aware:\n\n- Refuse by default when the key still holds ugnot (key_has_funds); the error\n leads with the one-step recovery and names a\n[…]\ne per-profile key-dir layout.\nRe-ran end-to-end: the agent recovered ~980 GNOT via a single sweep_to call,\nnothing stranded.\n\nGenerated with Claude Code\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(keystore): funds-safe gno_key_delete + multi-key e2e scenario",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-17T16:40:23Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "9dff9a5667a6c5e70692d2acbc3e61d643eea909",
"body": "A profile held exactly one agent key, so an agent could not exercise realms that\ninvolve multiple addresses. Allow up to GNOMCP_AGENT_MAX_KEYS (default 5) named\nkeys per profile, stored one file per key at <root>/<profile>/<name>.key. The\nwrite and key tools take an optional 'key' selector (default \n[…]\naversal where an init-time config table name could escape the\nkeys root). Docs and the tool-surface ADR updated to 23 tools.\n\nGenerated with Claude Code\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(keystore): multiple named agent keys per profile + gno_key_send",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-17T16:40:23Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "1b54e6d0e5aba39a421330c1016faec4aaba7232",
"body": "Add a global outflow token bucket to the agentfaucet limiter (ugnot-denominated,\nburst-capped, IP-independent) so the daily budget can't drain in one burst -- the\ncontrol that actually bounds outflow when the faucet is called server-side and all\nrequests share one egress IP. New -drip-rate/-drip-bur\n[…]\n-proxied faucet it is not a token-safety control. Document the\nin-memory/restart-reset limitation and the soft-floor caveat.\n\nGenerated with Claude Code\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(faucet): global outflow drip + balance-floor throttle",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-17T16:40:23Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4b9a2c86f1c4e0d0d27cd5cec2627a6d143f74da",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 4.3.1 to 6.0.3.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/34e114876b0b11c390a5638\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump actions/checkout from 4.3.1 to 6.0.3 (#4)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-15T15:20:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c47b4a0b83077bb997e5c490b84127372bdef520",
"body": "Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 6.4.0 to 7.2.2.\n- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)\n- [Commits](https://github.com/goreleaser/goreleaser-action/compare/e435ccd777264be153ace6237001ef4d979d3a7a...5daf1e\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.2.2 (#5)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-15T15:19:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8d04a36e71c0855572d37e82123f95fba72ecaa0",
"body": "Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.44.0 to 0.46.0.\n- [Release notes](https://github.com/golang/tools/releases)\n- [Commits](https://github.com/golang/tools/compare/v0.44.0...v0.46.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/tools\n dependency-version:\n[…]\nirect:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "build(deps): bump golang.org/x/tools from 0.44.0 to 0.46.0 (#14)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-15T15:16:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fc7276c169467134802db540059dbb32d76828f0",
"body": "* docs(readme): trim to a landing page; move setup detail to docs/\n\nThe README had grown to 279 lines, with an 82-line install section and\nfull profile/auth/tools reference inlined. Cut it to a 79-line landing\npage and move the depth into docs.\n\n- README: code-first install (curl | sh + read-the-scr\n[…]\nsection alongside \"What you can do\"\n\nThey serve different readers: \"What you can do\" is the narrative for newcomers;\nthe Tools breakdown is an at-a-glance capability map for advanced users. Keep both.",
"is_bot": false,
"headline": "docs(readme): trim to a landing page; move setup detail to docs/ (#12)",
"author_name": "Guilhem Fanton",
"author_login": "gfanton",
"committed_at": "2026-06-15T12:01:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2a61eb3a45b3dce695cb3acbe449f8e90e85cf9d",
"body": "Manifests bumped via scripts/bump-version.sh. The audit excludes three files\nwhose 0.2.0 strings are illustrative examples, not the package version: the\nrelease.yml dispatch hint, the README docker pin/verify examples, and the\ninternal/server/README MCP-server construction snippet.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(release): bump to 0.2.0",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-13T21:56:29Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "118daa51919cc6711a8b985c4433d7dc93575698",
"body": "… services\n\ngoreleaser now builds agentfaucet alongside gnomcp (its own release archive\nagentfaucet_<os>_<arch>.tar.gz; gnomcp's gno-mcp_<os>_<arch>.tar.gz name is\npreserved — scripts/install.sh resolves it) and publishes multi-arch images\nto ghcr.io/gnoverse/{gnomcp,agentfaucet} via dockers_v2 (the\n[…]\n\n\nImages are distroless/static nonroot; gnomcp runs attached (stdio), agentfaucet\nserves HTTP and must bind 0.0.0.0 in-container. README documents both.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(release): agentfaucet binary + multi-arch docker images for both…",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-13T21:56:23Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "37485d52116bb86674a182494bf1c5b68e95b7d9",
"body": "…tent re-run\n\nReplays the README quick-install one-liner in the l1-fresh image: the AUT\nmust run the published script (reimplementing its steps by hand is a\nfail), checksum verification + binary + Claude wiring land, and a second\nrun exits clean with no duplicate server entries. Live-validated: step 1's\nturn log is a single Bash call with the verbatim one-liner; the re-run\nanswer verified idempotency from .claude.json, not assumption.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(playground): scenario 12 — curl|sh installer end-to-end + idempo…",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-12T23:11:34Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "0a27bbcafbd4042a985384008a829caaebb25562",
"body": "…arness step\n\nscripts/install.sh (POSIX sh, ~170 lines, auditable on purpose): platform\ndetection, release download verified against checksums.txt, user-home bin\ndir (no sudo), and harness wiring — Claude Code and Gemini CLI driven\nthrough their own CLIs, Codex and OpenCode get their steps printed; \n[…]\n, and the Claude\nprompt now ends by reminding the user to restart — container-validated.\n\nScenario 11 syncs the Instruct and binds the restart reminder.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(dist): install script + per-harness install docs + restart-the-h…",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-12T23:03:23Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "2eae3894bd22df74e3efa5b455330e5272ac459e",
"body": "…where it matters\n\nContainer A/B runs in the fresh image: the binary download and MCP\nregistration work reliably from goal-level wording (the agent resolves\nplatform + asset via the releases API), but dropping the two plugin\ncommands sent it through ~12 trial-and-error CLI calls before finding\n`plug\n[…]\nctation the\nprompt no longer requests, and binds skills-arrive-via-the-plugin (cache\ndirs present, nothing hand-copied into ~/.claude/skills) in step 1.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(dist): trim the install prompt — goal-level where proven, exact …",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-12T22:41:01Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "2d356a01dfdc7c989d34d3179ffc5eda5c6bdc7d",
"body": "…e targets\n\nScenario 11 (external tier) replays the README install prompt in the\nl1-fresh image: platform-matched release binary, marketplace plugin\ninstall, MCP registration — asserting the final state carries no broken\nplugin-shipped server and the next session exposes the gno skill family.\nLive-v\n[…]\ninstalls mutate the container itself), and the\nverify toolkit gains a third fact kind — container state via docker exec\nwith a cwd outside any checkout.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(playground): fresh-install external scenario + per-scenario imag…",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-12T22:28:13Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b9c94c13f4bd9e86d45b7726ac0aa4aaa5bc5c2e",
"body": "…n every plugin install\n\nThe Claude Code plugin is sourced from the whole repo, so the dev-mode\n.mcp.json (go run ./cmd/gnomcp) auto-registered in every GitHub install\nas a permanently-failing MCP server next to the real one. An explicit\nmcpServers field in plugin.json does not suppress the auto-det\n[…]\n-hand steps\n(binary archive + slash-command plugin install + absolute-path mcp add),\ngo install demoted to the from-source option for other MCP clients.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(dist): drop repo-root .mcp.json — it shipped as a broken server i…",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-12T22:28:03Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6c43682230ed3eb65300e7d7b47551f2c0f837cb",
"body": "…CI guards (#11)\n\nworkflow_dispatch release (validate -> tag-guard -> manifest gate -> tag -> goreleaser -> attestation), scripts/bump-version.sh + .version-bump.json + make bump for the six lockstep plugin manifests, token-less release-config CI job (script tests, drift check, goreleaser check + sn\n[…]\nt), goreleaser archives.formats deprecation fix, and repair of main's red CI (integration-vet c.Call arity + masked gofmt failure).\n\nGenerated by Claude\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(release): manual release flow — dispatch workflow, bump script, …",
"author_name": "Guilhem Fanton",
"author_login": "gfanton",
"committed_at": "2026-06-12T15:59:31Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "dcb639a340e6e889aca2f25e3aa9860482bf8e71",
"body": "…n.md\n\nTwo collisions between the playground merge and the toolchain reference:\nbuild.md's standalone-trap table offered `gno mod download` as the escape\nfrom single-package mode, but released gno versions reject mod download\nitself in a bare directory (same pattern error) — the caveat now says to\na\n[…]\nin-matched\ninstall, deps from the target) with gno_eval/simulate demoted to last\nresort.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(skills): post-merge coherence — route toolchain cases to toolchai…",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-12T15:40:16Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "924672488cadcbb1dfab5ad1e5e1b8d657b7c682",
"body": "…r test architecture\n\nSquash-merge of feat/playground (59 commits). Major areas:\n\n- Playground e2e harness: a Claude-QAs-Claude driver (host) QAs a containerized\n Claude+gnomcp+gno-skill scenario by scenario against an in-container simnet\n (in-memory gnoland node + faucet + gnoweb, chain test9999)\n[…]\nale manual test/e2e protocols\n are retired (their session-lifecycle coverage is now automated); test/e2e/realms\n stays as simnet/integration fixtures.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(playground): e2e harness, read-only audit, sessions + three-laye…",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-12T15:13:53Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "22ffb74e40d6768cc6980c8acdfe2e7f7df154f1",
"body": "…rget-chain deps\n\nNew skills/gno/references/toolchain.md: testing local Gno code against a\nlive chain requires a gno binary built from that chain's pinned source\n(language semantics move between releases). The reference covers\nresolving the chain-id to its release tag (semver twin or peeled commit\ns\n[…]\nreign Go\nmodule.\n\nSKILL.md gains the router row; build.md cross-references the new file.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(skills): chain-matched toolchain reference — versioned store, ta…",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-12T15:11:26Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "92c534758f2090287ce52351e326c3f0680c997a",
"body": "… retire gno_inspect\n\ngno_read now serves package source at three depths instead of dumping raw\nbytes:\n\n- DEFAULT: a structural outline — per-file txtar with exported signatures +\n docs, unexported signatures, imports, and byte counts; bodies elided.\n Server-rendered from the AST (new internal/gno\n[…]\nnit + integration suites\ngreen; go-reviewer loop clean (1 MUST — duplicate emission for grouped-decl\nsiblings — found and fixed with a regression test).\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(mcp): gno_read depths — outline default, symbol fetch with deps;…",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-11T10:16:27Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "5f48161e45de0234e15fa0f2da5288a81f96064d",
"body": "Three thin user-invocable skills composing the main gno skill's\nreference library: each reads ../gno/SKILL.md (source index) plus only\nthe references it needs; content lives in skills/gno/references/, never\nduplicated. New debug.md reference maps failure signatures (sourced\nfrom real tool/chain erro\n[…]\naudit provenance/fidelity rules).\n\nSquashed from feat/side-skills (retained, 7 commits).\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(skills): side skills — gno-audit, gno-debug, gno-onboard",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-11T08:16:34Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "56529f6b77ee7133d35588c8b9f040a20bed8f2d",
"body": "…l, public marketplace\n\nVersion resets to 0.1.0 across all manifests (no release exists yet;\nrelease CI checks manifests against the tag). Author/owner becomes the\ngnoverse org. All descriptions converge on one canonical line with\n\"skill\" singular (the four-skill era is long gone). The Claude\nmarket\n[…]\nferencing the nonexistent\nskills/plugin.json (harnesses discover skills/ automatically).\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(plugins): correct metadata — 0.1.0, gnoverse org, singular skil…",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-10T22:22:25Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a37c6e46c7b91d1f882f1bd447ae3bfd715253ba",
"body": "Replace the skill import with an agents.md for working on the repo:\ncommands, architecture map, conventions, security invariants, and a\nhousekeeping matrix of which reference docs to update per change type.\nGEMINI.md keeps the skill import — it is the Gemini extension's\ncontextFileName, i.e. user-facing delivery.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: AGENTS.md is contributor guidance, not skill delivery",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-10T22:14:51Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a3e6a78955c728408684c0bf6b2184f59825bb39",
"body": "… state\n\nThe six ADRs were plan-era records; rewrite each to the architecture as\nbuilt, with an explicit status line. Highlights: chain-type and\nallow-dangerous-tools are gone (chain-id allowlist + locality from\nchain-id); write authorization records the dual identity model (agent\nkey default, chain\n[…]\nddress); docker and a2a are marked accepted-not-implemented\nwith current reality stated.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(adr): move under docs/, drop prxxxx prefix, reconcile to shipped…",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-10T22:05:36Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "1ac133d2f97be111843c4e681d9e328baed7077a",
"body": "🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: render the session-WIP caution as a warning admonition",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-10T22:05:25Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "0327ca6be6900a08d1d885645d553e0b6352ef59",
"body": "Rewrite the README in the original main README's format: tagline,\nwork-in-progress warning, \"Why this exists\", security posture, roadmap —\nno branch lineage, ADR, or layout sections. Testnet leads; local gnodev\nmoves to a sidenote. The session write path is marked WIP (use with\ncaution) in the READM\n[…]\nth the monorepo as\nthe intended single source of truth. Fix stale tool count (19 -> 21).\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: README rewrite + session-WIP and source-of-truth notes",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-10T21:47:49Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6f7227878e0a9c9b6cc8ee06edce602d0c0ccd4a",
"body": "gno_account reads any address's on-chain record (balance, sequence,\naccount number) via auth/accounts; an address the chain has never seen\nreports exists:false — a normal answer, not an error. gno_status reports\na profile's declared chain-id/RPC against the node's live chain-id,\nheight, and block ti\n[…]\naccounts handler returns no response height\n(live-verified against the in-process node).\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(tools): chain-info reads — gno_account + gno_status",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-10T20:51:57Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "959a01fb2a11325a8b87462f5362a06a9f4b008f",
"body": "…type removal\n\nThe agent can now add a chain profile at runtime, in-memory only (gone on\nrestart): gno_profile_add takes rpc_url+chain_id explicitly or discovers them\nfrom a gnoweb_url, validates against the chain-id allowlist (dev/testNN), and\ndials the node to confirm it reports the declared chain\n[…]\nst_changed + mid-session tool summoning; live\ne2e against real test13 (add + gno_packages read through the dynamic\nprofile).\n\nGenerated with Claude Code\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(mcp): dynamic in-memory profiles (B3) — gno_profile_add + chain-…",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-10T12:59:36Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c3188c25d1ed6fda6950c42eba86b57c4dae8470",
"body": "Squash of the review-fixes branch: the full remediation of the 2026-06-10\ndeep codebase review, its 6-agent reconciliation follow-ups, and the\nbehavior-preserving Stage-G deduplication. 454 tests green under -race;\ngofmt/vet clean; govulncheck 0 affecting (was 15). Verified live end-to-end\nagainst g\n[…]\nng\nlocal agent-key and session files must be regenerated (re-fund testnet agent\nkeys). Acceptable on the unreleased v2 line.\n\nGenerated with Claude Code\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: deep-review remediation — security hardening, supply chain, dedup",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-10T12:59:36Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "5dbaa2589adf4292d5201e78e021fa310b69e283",
"body": "The JSON-Schema path patterns are advisory (clients don't enforce them), so\ngno_render and gno_eval only had soft realm scoping. Give them firm handler-side\nvalidation, each appropriate to what the underlying query supports:\n\n- gno_render: realm-only. Render() is a realm concept; vm/qrender evaluate\n[…]\n now validate their accepted path type explicitly, and the\nparam name signals it: path = realm-or-pure (read/inspect/eval), realm = realm\nonly (render).\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(mcp): firm path-type scoping for gno_render and gno_eval",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-10T12:59:36Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c91a78ee510640094fc31033fa262d118f49883f",
"body": "A missing or unresolvable profile killed the whole process (SIGSEGV -> the\nclient saw 'connection closed'). Root cause: buildChainResolver returned\nclients[profile] directly, so an unresolved profile yielded a typed-nil\n*chain.Real boxed in a non-nil chain.Client interface. Every handler's\n'if c == \n[…]\nths, and a typed-nil-client regression through gno_inspect. Live-verified\nagainst the real binary: unknown/omitted profile -> clean error, server alive.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(mcp): profile resolution no longer crashes the server",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-10T12:59:36Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a18a42e2bdd2b18a3d186e58dca77acd34818c9e",
"body": "…ealm->path\n\nMakes gnomcp able to pull a whole package in one call and discover packages,\nand stops the read tools being realm-centric so they work for /p/ pure\npackages. The audit workflow previously skipped the MCP because whole-package\nreads needed 1 (list) + N (per file) round-trips and every to\n[…]\nntegration tests for ListPaths/\nReadPackageFiles, go-reviewer pass, and a live e2e through the MCP wire against\na gnodev with real /r/ and /p/ packages.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(mcp): package-aware reads — whole-package txtar, gno_packages, r…",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-10T12:59:36Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "88acedabdd376265afbceb5f0de4fd72d5a1db41",
"body": "…ntent/errors + tool fixes\n\nWire layer (cmd/gnomcp/main.go): tool Annotations now reach the wire (read tools advertise readOnly, writes destructive); Result.StructuredContent is sent on success (sessions, tx hashes, addresses); a ToolError maps to a structured code + extra-values payload so recovery\n[…]\nutput budgeting applied to eval/inspect/indexer text outputs.\n\nDeferred to before-hosting: faucet limiter map-key eviction, X-Forwarded-For IP handling.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(mcp): address MCP-review findings — wire annotations/structuredCo…",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-10T12:59:36Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "114be49e845237bb6bf3066a6ebd461bde251733",
"body": "…n harness\n\nTiered funding for the agent's testnet key, precedence service > link > manual fallback: internal/clientfaucet (Faucet seam, Resolve, LinkFaucet tier-1/fallback, ServiceFaucet tier-2 client); gno_faucet_fund tool (testnet-gated); profile faucet-url/faucet-service-url fields; insufficient\n[…]\nispense e2e.\n\nDeferred to before-hosting: hCaptcha gate, persistent state store, limiter map-key eviction, X-Forwarded-For IP, funding-wallet + hosting.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(faucet): tiered agent testnet faucet (B2) + real-node integratio…",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-10T12:59:36Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "fa23b9ac1195c116bc600f8ed834fd96a831cabb",
"body": "Real.QuerySession resolves sessions via a direct ABCI query at\nauth/accounts/<master>/session/<sessionAddr>; the README claimed no such\npath exists and instructed not to implement the method. Rewrite the\nsection against real.go and note it is verified against the gno commit\npinned in go.mod (past the v1.1.0 surface the rest of the file targets).\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(chain): correct stale session-query ABCI note",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-10T12:59:36Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "5ca538e7025b7e70aac2c126b0723f18221bb420",
"body": "cmd/verify-gnoclient was a compile-only check of the gnoclient API\nsurface. It is redundant with chain/real.go, which exercises the same\nAPI (a real break fails the normal build), and its printed findings\nincluded a stale \"no session ABCI path\" claim. Not referenced by build,\nCI, or docs.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: remove verify-gnoclient dev stub",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-10T12:59:36Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "abf52d1b5ccb3e88d7419b5d5639012e3bab5801",
"body": "profiles: merge.go + builtin.go (and their tests) -> config.go\nchain: resolver.go -> client.go\nindexer: resolver.go -> client.go\n\nSame-package code motion, no behavior change. Each removed file held a\nsingle helper or a one-line type alias; the Resolver types now sit next\nto the Client they serve. go test ./... and go vet ./... pass unchanged\n(358 tests, 15 packages).\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor(internal): fold single-function files into their packages",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-10T12:59:36Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "fb9bc3d1dec381b83221d105c9034797d1807544",
"body": "Convert all test assertions from hand-rolled if/t.Fatalf/t.Errorf to testify: require.* for fail-fast checks, assert.* for non-fatal. Intent-preserving — same tests, names, and coverage; only the assertion mechanism changed. testify promoted from an indirect to a direct dependency. 53 test files; 358 tests green; vet clean.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor(test): adopt testify (require/assert) across the suite",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-10T12:59:36Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "6100a8fe51bf99d9a17b1d26b35440307a0aac1c",
"body": "Squash of feat/agent-keystore-testnet (9 commits): extends the agent's own write\nidentity from local (test1) to testnet via a generated, persisted per-profile key.\nBuilt subagent-driven TDD (each task spec- and go-reviewed); live e2e verified vs\na test9999 gnodev (one identity-line bug found and fix\n[…]\n chain: Balance() via QueryAccount for the funds pre-check.\n- test/e2e: PROTOCOL-agent-testnet.md with recorded live run; docs (tools/security) updated.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(agent): agent testnet write identity (SPEC1 testnet keystore)",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-10T12:59:36Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "645383f89e89af66aebdf53dfb4a7cf74b20a174",
"body": "Replace sb.WriteString(fmt.Sprintf(...)) with fmt.Fprintf(&sb, ...) in the gnokey create/revoke command formatters, writing directly into the strings.Builder instead of allocating an intermediate string per line. Plain-literal writes stay as WriteString. Output is unchanged.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor(session): build gnokey commands with fmt.Fprintf",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-10T12:59:36Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "7b16170226d9ce1a33f60d1c2ae5769ea6bb5176",
"body": "…nizer\n\nReplace the two-regexp scan of the whole document with a golang.org/x/net/html tokenizer that reads the <head> only: parsing stops at </head> or <body>, so meta-tags in the body can no longer poison discovery and most pages read far less than the full payload. The tokenizer lower-cases attri\n[…]\nructural) and unescapes attribute values. Extract the gnoconnect:rpc/chainid tag names into named constants shared by the matcher and the error message.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor(gnoweb): parse gnoconnect meta-tags via x/net/html head toke…",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-10T12:59:36Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f754c20cddfe40ccd0196d68f289bdfc8d7696d5",
"body": "Squash of feat/agent-keystore (12 commits): the agent's own write identity on\nlocal (dev) chains via the well-known test1 account, distinct from the session\n(act-as-user) path. Built via subagent-driven TDD; final go-reviewed (no MUST);\nlive-e2e verified vs gnodev (clean, no bugs).\n\n- internal/keyst\n[…]\nileLocal); never the user's gnokey.\n- Docs: docs/tools.md, docs/security.md, internal/chain/README.md updated;\n test/e2e/PROTOCOL-agent-local.md added.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(agent): agent write identity on local/dev (SPEC1)",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-10T12:59:36Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "abc175bacbac9301d210e05631b03d92bce5b598",
"body": "Squash of feat/mcp-base (27 commits): the shippable MCP base before the\na2a HTTP layer. Built via subagent-driven TDD and live-e2e verified\nagainst gnodev (5 bugs found and fixed).\n\n- Profiles are the source of truth for reads; sessions are write authority.\n- Zero-config built-in defaults (local dev\n[…]\n / revoke;\n GasFee-accurate local spend tracking; auth_status revoke/expiry detection.\n- CI, release, and goreleaser configs ported from the v0.1 base.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(mcp): clean MCP base — zero-config reads, sessions, profile CLI",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-10T12:59:36Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "e9356c5395020dcc58efb61ff7b41206372704ea",
"body": "Squash-merge of feat/update-skill. Resyncs the gno skill with the current\ngnolang/gno docs and packages it for cross-agent distribution.\n\nSkill content:\n- interrealm.md rewritten from gno-interrealm-v2.md (cross(cur), the cur\n capability token + IsCurrent() auth primitive, three borrow rules,\n Sto\n[…]\ne;\n LICENSE (Apache-2.0); README install matrix; package.json; make dev\n (claude --plugin-dir .) for live local iteration.\n\nGenerated with Claude Code\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(skills): rewrite gno skill + package as multi-agent plugin",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-10T12:59:36Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7c01f90b2d55018c772be306156f6fd4d308d471",
"body": null,
"is_bot": false,
"headline": "chore(e2e): ignore local test keyring",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-10T12:59:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9b55574292c0e4d126f01740f708f1d2989dacd6",
"body": "Adds an opt-in allow_run flag to gno_session_propose that requests the\nchain's vm/run permission. gno_run now picks sessions filtered by\nAllowRun=true (via the new Manager.PickSessionForRun), so MsgRun\nbroadcasts hit only sessions the chain actually authorizes for\nad-hoc scripts.\n\nWire-level changes\n[…]\nc:<realm>\" → realm\n paths, \"vm/run\" → AllowRun, and drops unknown tokens silently.\n- Manager.PickSessionForProfile and PickSessionForRun share a pickSession\n body parameterized by a match predicate.",
"is_bot": false,
"headline": "feat(session): vm/run permission support (gno_run end-to-end)",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-10T12:59:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "63b4422975e13146071e375248a41cc8bd136c55",
"body": "(1) Realm functions invoked by gno_call (Increment, Echo, Ping) must\ndeclare `cur realm` as the first parameter. The chain refuses MsgCall\nagainst non-crossing functions with \"function X is non-crossing and\ncannot be called with MsgCall; query with vm/qeval or use MsgRun\".\n\n(2) The master-address fi\n[…]\n to match the local cap denomination;\n clampCoin currently rejects cross-denomination compares.\n - Check 11 (gno_run): deferred. MsgRun needs vm/run permission\n which propose does not yet emit.",
"is_bot": false,
"headline": "test(e2e): cur-realm parameter, correct master fixture, PROTOCOL updates",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-10T12:59:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "130f63865616e0994a3a6be96a670072bd9cbe7a",
"body": "Two chain-rejection bugs surfaced during the MD-E e2e run against\ngnodev. The pure-Go test suite did not catch either because Fake does\nnot enforce chain-format conventions; only an actual MsgCreateSession\nbroadcast trips them.\n\n(1) Keypair.PubkeyBech32 bech32-encoded the raw 32-byte ed25519 pubkey,\n[…]\ne to store user-facing realm paths internally.\n\nTests updated to assert the new contracts: PubkeyBech32 round-trips\nthrough crypto.PubKeyFromBech32; FormatGnokeyCreateCommand emits the\nvm/exec prefix.",
"is_bot": false,
"headline": "fix(session,chain): chain-compatible pubkey and AllowPaths encoding",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-10T12:59:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ceabf5d155f6b3c323f71fd041d856068ffb5660",
"body": "…sion\n\ngno_call and gno_run now pass Profile.MasterAddress to chain.Call/Run\nso the real client can build session-signed transactions. The separate\nsimulate branch is gone: simulate=true uses the same session-pick flow\nas broadcast and only differs in the simulate bool passed to the chain\nclient and\n[…]\nes the chain.Real behavior — sessions\nare required to address the master account, even in simulation.\n\ngno_session_propose stamps master onto the new SessionMeta via the\nextended AddPending signature.",
"is_bot": false,
"headline": "refactor(write): plumb master through call/run; simulate requires ses…",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-10T12:59:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7f9a94a84c2f986cfced109158baae6dc15a1b9e",
"body": "AddPending now takes the profile's master address and stamps it onto\nSessionMeta atomically at creation time. The SetMasterAddress seam is\ngone — there's no longer a window where a session exists without its\nmaster, so no separate fix-up step is needed.\n\nTests inject master via the new arg; the chain-activation flow no\nlonger pokes meta.MasterAddress through the lock.",
"is_bot": false,
"headline": "feat(session): persist master on AddPending; remove SetMasterAddress",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-10T12:59:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31c314cafee5eb06b06cf069a04d0d1af9ae2764",
"body": "The chain emits GnoSessionAccount via amino.MarshalJSONIndent at\ntm2/pkg/sdk/auth/handler.go:248. Amino-JSON differs from std JSON in\nthree load-bearing ways: embedded structs are NOT flattened, integers\nare string-encoded, and std.Coins marshals as \"<amount><denom>\".\nencoding/json silently drops th\n[…]\n panic inside\ncrypto/ed25519.\n\nError wraps under Real.Call/Run now name their stage\n(\"sign tx\" / \"broadcast tx\" / \"auth/accounts query\") matching\nthe \"build unsigned tx\" precedent in the same methods.",
"is_bot": false,
"headline": "fix(chain): amino-JSON decode session account + error cleanup",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-10T12:59:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "42d79dd22fe0e318cbffeac85f4e43ffb1209aa5",
"body": "chain.Client.Call/Run gain a master parameter; the broadcast MsgCall\nsets Caller=master while the session keypair signs the tx with\nSignature.SessionAddr=session, matching the chain ante handler's\nexpectation post-PR #5307.\n\nchain.Client.QuerySession now takes (master, sessionAddr) and hits\nauth/acc\n[…]\n\nstamp Profile.MasterAddress onto pending sessions at creation.\n\nTool-layer call sites (call.go / run.go / auth_status.go) thread an\nempty master string for now; MD-D will plumb Profile.MasterAddress.",
"is_bot": false,
"headline": "feat(chain): session-signed Call/Run and real QuerySession in chain.Real",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-10T12:59:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0060aa4783ef1462cc46dc7dec170be3aaeb5092",
"body": "Session-signed transactions cannot use SignerFromKeybase: its Sign\nslot-matches signers[i] == signer.PubKey().Address(), which fails when\nthe signer is a session keypair but the tx's GetSigners returns the\nmaster address. The adapter writes the session signature into\nSignatures[0] unconditionally an\n[…]\nSessionAddr zero for the\ncaller (chain.Real) to populate after Sign returns.\n\nsessionKeyInfo satisfies keys.Info directly because all keys.Info\nconstructors are unexported and require a Keybase entry.",
"is_bot": false,
"headline": "feat(session): GnoclientSigner adapter on Keypair",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-10T12:59:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d160b1ccd0d5802d80e624f4e9ff6206eff15a2c",
"body": "PR #5307 (session SessionAddr/BaseSessionAccount/GnoSessionAccount) is\nrequired for chain.Real to issue session-signed Call/Run tx and to query\nauth/accounts/<master>/session/<sessionAddr>. v1.1.0 predates this work.",
"is_bot": false,
"headline": "build: bump gno to master for session-signed tx support",
"author_name": "gfanton",
"author_login": "gfanton",
"committed_at": "2026-06-10T12:59:36Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 11,
"commits_last_year": 214,
"latest_release_at": "2026-07-22T20:19:35Z",
"latest_release_tag": "v0.9.0",
"releases_from_tags": false,
"days_since_last_push": 2,
"active_weeks_last_year": 10,
"days_since_latest_release": 6,
"mean_days_between_releases": 4.3
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": false,
"has_contributing": false,
"health_percentage": 37,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/gnoverse/gno-mcp",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/gnoverse/gno-mcp",
"is_deprecated": false,
"latest_version": "v0.9.0",
"repository_url": "https://github.com/gnoverse/gno-mcp",
"versions_count": 11,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-22T20:14:27Z",
"latest_version_yanked": null,
"days_since_latest_publish": 6
}
]
},
"popularity": {
"forks": 3,
"stars": 3,
"watchers": 0,
"fork_history": {
"days": [
{
"date": "2026-05-20",
"count": 1
},
{
"date": "2026-06-25",
"count": 1
},
{
"date": "2026-07-24",
"count": 1
}
],
"complete": true,
"collected": 3,
"total_forks": 3
},
"star_history": null,
"open_issues_and_prs": 14
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": true,
"bootstrap_files": [
"Makefile",
"playground/Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 36599,
"source_files_sampled": 197,
"oversized_source_files": 0,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md",
"GEMINI.md",
"playground/AGENTS.md",
"playground/CLAUDE.md"
],
"agent_instruction_max_bytes": 6474
},
"dependencies": {
"manifests": [
"go.mod",
"package.json"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "google.golang.org/grpc",
"direct": false,
"version": "v1.81.1",
"severity": "critical",
"ecosystem": "go",
"cvss_score": 9.1,
"advisory_ids": [
"GHSA-hrxh-6v49-42gf",
"GO-2026-6061"
],
"fixed_version": "1.82.1",
"advisory_count": 2,
"oldest_advisory_days": 7
},
{
"name": "golang.org/x/crypto",
"direct": true,
"version": "v0.53.0",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5932"
],
"fixed_version": null,
"advisory_count": 1,
"oldest_advisory_days": 21
},
{
"name": "github.com/klauspost/compress",
"direct": false,
"version": "v1.18.6",
"severity": "unknown",
"ecosystem": "go",
"cvss_score": null,
"advisory_ids": [
"GO-2026-5841"
],
"fixed_version": "1.18.7",
"advisory_count": 1,
"oldest_advisory_days": 1
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"unknown": 2,
"critical": 1
},
"advisory_count": 4,
"affected_count": 3,
"assessed_count": 108,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 1
},
"ecosystems": [
"go",
"npm"
],
"dependencies": [
{
"name": "github.com/BurntSushi/toml",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.0"
},
{
"name": "github.com/gnolang/gno",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20260624072255-1822034ddd17"
},
{
"name": "github.com/google/jsonschema-go",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.4.3"
},
{
"name": "github.com/modelcontextprotocol/go-sdk",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.1"
},
{
"name": "github.com/prometheus/client_golang",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.23.2"
},
{
"name": "github.com/stretchr/testify",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.11.1"
},
{
"name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.69.0"
},
{
"name": "go.opentelemetry.io/otel",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.44.0"
},
{
"name": "go.opentelemetry.io/otel/exporters/prometheus",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.66.0"
},
{
"name": "go.opentelemetry.io/otel/metric",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.44.0"
},
{
"name": "go.opentelemetry.io/otel/sdk",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.44.0"
},
{
"name": "go.opentelemetry.io/otel/sdk/metric",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.44.0"
},
{
"name": "golang.org/x/crypto",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.53.0"
},
{
"name": "golang.org/x/net",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.56.0"
},
{
"name": "golang.org/x/tools",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.47.0"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "github.com/burntsushi/toml",
"direct": true,
"version": "v1.6.0",
"ecosystem": "go"
},
{
"name": "github.com/gnolang/gno",
"direct": true,
"version": "v0.0.0-20260624072255-1822034ddd17",
"ecosystem": "go"
},
{
"name": "github.com/google/jsonschema-go",
"direct": true,
"version": "v0.4.3",
"ecosystem": "go"
},
{
"name": "github.com/modelcontextprotocol/go-sdk",
"direct": true,
"version": "v1.6.1",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/client_golang",
"direct": true,
"version": "v1.23.2",
"ecosystem": "go"
},
{
"name": "github.com/stretchr/testify",
"direct": true,
"version": "v1.11.1",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp",
"direct": true,
"version": "v0.69.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel",
"direct": true,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/exporters/prometheus",
"direct": true,
"version": "v0.66.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/metric",
"direct": true,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/sdk",
"direct": true,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/sdk/metric",
"direct": true,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/crypto",
"direct": true,
"version": "v0.53.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/net",
"direct": true,
"version": "v0.56.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/tools",
"direct": true,
"version": "v0.47.0",
"ecosystem": "go"
},
{
"name": "dario.cat/mergo",
"direct": false,
"version": "v1.0.2",
"ecosystem": "go"
},
{
"name": "github.com/alecthomas/chroma/v2",
"direct": false,
"version": "v2.27.0",
"ecosystem": "go"
},
{
"name": "github.com/beorn7/perks",
"direct": false,
"version": "v1.0.1",
"ecosystem": "go"
},
{
"name": "github.com/bits-and-blooms/bitset",
"direct": false,
"version": "v1.24.5",
"ecosystem": "go"
},
{
"name": "github.com/bmatsuo/lmdb-go",
"direct": false,
"version": "v1.8.0",
"ecosystem": "go"
},
{
"name": "github.com/btcsuite/btcd/btcec/v2",
"direct": false,
"version": "v2.5.0",
"ecosystem": "go"
},
{
"name": "github.com/btcsuite/btcd/btcutil",
"direct": false,
"version": "v1.2.0",
"ecosystem": "go"
},
{
"name": "github.com/cenkalti/backoff/v5",
"direct": false,
"version": "v5.0.3",
"ecosystem": "go"
},
{
"name": "github.com/cespare/xxhash/v2",
"direct": false,
"version": "v2.3.0",
"ecosystem": "go"
},
{
"name": "github.com/cockroachdb/apd/v3",
"direct": false,
"version": "v3.2.3",
"ecosystem": "go"
},
{
"name": "github.com/cockroachdb/errors",
"direct": false,
"version": "v1.14.0",
"ecosystem": "go"
},
{
"name": "github.com/cockroachdb/fifo",
"direct": false,
"version": "v0.0.0-20240816210425-c5d0cb0b6fc0",
"ecosystem": "go"
},
{
"name": "github.com/cockroachdb/logtags",
"direct": false,
"version": "v0.0.0-20241215232642-bb51bb14a506",
"ecosystem": "go"
},
{
"name": "github.com/cockroachdb/pebble",
"direct": false,
"version": "v1.1.5",
"ecosystem": "go"
},
{
"name": "github.com/cockroachdb/redact",
"direct": false,
"version": "v1.1.8",
"ecosystem": "go"
},
{
"name": "github.com/cockroachdb/tokenbucket",
"direct": false,
"version": "v0.0.0-20250429170803-42689b6311bb",
"ecosystem": "go"
},
{
"name": "github.com/consensys/gnark-crypto",
"direct": false,
"version": "v0.20.1",
"ecosystem": "go"
},
{
"name": "github.com/cosmos/gogoproto",
"direct": false,
"version": "v1.7.2",
"ecosystem": "go"
},
{
"name": "github.com/cosmos/ics23/go",
"direct": false,
"version": "v0.11.0",
"ecosystem": "go"
},
{
"name": "github.com/cosmos/ledger-cosmos-go",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/datadog/zstd",
"direct": false,
"version": "v1.5.7",
"ecosystem": "go"
},
{
"name": "github.com/davecgh/go-spew",
"direct": false,
"version": "v1.1.2-0.20180830191138-d8f796af33cc",
"ecosystem": "go"
},
{
"name": "github.com/decred/dcrd/dcrec/secp256k1/v4",
"direct": false,
"version": "v4.4.1",
"ecosystem": "go"
},
{
"name": "github.com/dgraph-io/ristretto/v2",
"direct": false,
"version": "v2.4.0",
"ecosystem": "go"
},
{
"name": "github.com/dlclark/regexp2/v2",
"direct": false,
"version": "v2.2.2",
"ecosystem": "go"
},
{
"name": "github.com/dustin/go-humanize",
"direct": false,
"version": "v1.0.1",
"ecosystem": "go"
},
{
"name": "github.com/emicklei/dot",
"direct": false,
"version": "v1.11.0",
"ecosystem": "go"
},
{
"name": "github.com/erigontech/mdbx-go",
"direct": false,
"version": "v0.40.2",
"ecosystem": "go"
},
{
"name": "github.com/felixge/httpsnoop",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/getsentry/sentry-go",
"direct": false,
"version": "v0.47.0",
"ecosystem": "go"
},
{
"name": "github.com/go-logr/logr",
"direct": false,
"version": "v1.4.3",
"ecosystem": "go"
},
{
"name": "github.com/go-logr/stdr",
"direct": false,
"version": "v1.2.2",
"ecosystem": "go"
},
{
"name": "github.com/gofrs/flock",
"direct": false,
"version": "v0.13.0",
"ecosystem": "go"
},
{
"name": "github.com/gogo/protobuf",
"direct": false,
"version": "v1.3.2",
"ecosystem": "go"
},
{
"name": "github.com/golang/protobuf",
"direct": false,
"version": "v1.5.4",
"ecosystem": "go"
},
{
"name": "github.com/golang/snappy",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/google/go-cmp",
"direct": false,
"version": "v0.7.0",
"ecosystem": "go"
},
{
"name": "github.com/google/uuid",
"direct": false,
"version": "v1.6.0",
"ecosystem": "go"
},
{
"name": "github.com/gorilla/websocket",
"direct": false,
"version": "v1.5.3",
"ecosystem": "go"
},
{
"name": "github.com/grpc-ecosystem/grpc-gateway/v2",
"direct": false,
"version": "v2.29.0",
"ecosystem": "go"
},
{
"name": "github.com/gtank/merlin",
"direct": false,
"version": "v0.1.1",
"ecosystem": "go"
},
{
"name": "github.com/hashicorp/golang-lru/v2",
"direct": false,
"version": "v2.0.7",
"ecosystem": "go"
},
{
"name": "github.com/ianlancetaylor/cgosymbolizer",
"direct": false,
"version": "v0.0.0-20260602043845-868e80fa497f",
"ecosystem": "go"
},
{
"name": "github.com/klauspost/compress",
"direct": false,
"version": "v1.18.6",
"ecosystem": "go"
},
{
"name": "github.com/kr/pretty",
"direct": false,
"version": "v0.3.1",
"ecosystem": "go"
},
{
"name": "github.com/kr/text",
"direct": false,
"version": "v0.2.0",
"ecosystem": "go"
},
{
"name": "github.com/libp2p/go-buffer-pool",
"direct": false,
"version": "v0.1.0",
"ecosystem": "go"
},
{
"name": "github.com/mimoo/strobego",
"direct": false,
"version": "v0.0.0-20181016162300-f8f6d4d2b643",
"ecosystem": "go"
},
{
"name": "github.com/munnerz/goautoneg",
"direct": false,
"version": "v0.0.0-20191010083416-a7dc8b61c822",
"ecosystem": "go"
},
{
"name": "github.com/pelletier/go-toml",
"direct": false,
"version": "v1.9.5",
"ecosystem": "go"
},
{
"name": "github.com/peterbourgon/ff/v3",
"direct": false,
"version": "v3.4.0",
"ecosystem": "go"
},
{
"name": "github.com/pkg/errors",
"direct": false,
"version": "v0.9.1",
"ecosystem": "go"
},
{
"name": "github.com/pmezard/go-difflib",
"direct": false,
"version": "v1.0.1-0.20181226105442-5d4384ee4fb2",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/client_model",
"direct": false,
"version": "v0.6.2",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/common",
"direct": false,
"version": "v0.69.0",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/otlptranslator",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/prometheus/procfs",
"direct": false,
"version": "v0.20.1",
"ecosystem": "go"
},
{
"name": "github.com/rogpeppe/go-internal",
"direct": false,
"version": "v1.15.0",
"ecosystem": "go"
},
{
"name": "github.com/rs/cors",
"direct": false,
"version": "v1.11.1",
"ecosystem": "go"
},
{
"name": "github.com/rs/xid",
"direct": false,
"version": "v1.6.0",
"ecosystem": "go"
},
{
"name": "github.com/segmentio/asm",
"direct": false,
"version": "v1.2.1",
"ecosystem": "go"
},
{
"name": "github.com/segmentio/encoding",
"direct": false,
"version": "v0.5.4",
"ecosystem": "go"
},
{
"name": "github.com/sig-0/insertion-queue",
"direct": false,
"version": "v0.0.0-20241004125609-6b3ca841346b",
"ecosystem": "go"
},
{
"name": "github.com/syndtr/goleveldb",
"direct": false,
"version": "v1.0.1-0.20210819022825-2ae1ddf74ef7",
"ecosystem": "go"
},
{
"name": "github.com/valyala/bytebufferpool",
"direct": false,
"version": "v1.0.0",
"ecosystem": "go"
},
{
"name": "github.com/yosida95/uritemplate/v3",
"direct": false,
"version": "v3.0.2",
"ecosystem": "go"
},
{
"name": "github.com/yuin/goldmark",
"direct": false,
"version": "v1.8.2",
"ecosystem": "go"
},
{
"name": "github.com/yuin/goldmark-highlighting/v2",
"direct": false,
"version": "v2.0.0-20230729083705-37449abec8cc",
"ecosystem": "go"
},
{
"name": "github.com/zondax/golem",
"direct": false,
"version": "v0.30.0",
"ecosystem": "go"
},
{
"name": "github.com/zondax/hid",
"direct": false,
"version": "v0.9.2",
"ecosystem": "go"
},
{
"name": "github.com/zondax/ledger-go",
"direct": false,
"version": "v1.0.1",
"ecosystem": "go"
},
{
"name": "go.etcd.io/bbolt",
"direct": false,
"version": "v1.5.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/auto/sdk",
"direct": false,
"version": "v1.2.1",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc",
"direct": false,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp",
"direct": false,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace",
"direct": false,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp",
"direct": false,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/otel/trace",
"direct": false,
"version": "v1.44.0",
"ecosystem": "go"
},
{
"name": "go.opentelemetry.io/proto/otlp",
"direct": false,
"version": "v1.10.0",
"ecosystem": "go"
},
{
"name": "go.uber.org/multierr",
"direct": false,
"version": "v1.11.0",
"ecosystem": "go"
},
{
"name": "go.uber.org/zap",
"direct": false,
"version": "v1.28.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/exp",
"direct": false,
"version": "v0.0.0-20260611194520-c48552f49976",
"ecosystem": "go"
},
{
"name": "golang.org/x/mod",
"direct": false,
"version": "v0.37.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/oauth2",
"direct": false,
"version": "v0.36.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sync",
"direct": false,
"version": "v0.22.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/sys",
"direct": false,
"version": "v0.46.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/term",
"direct": false,
"version": "v0.44.0",
"ecosystem": "go"
},
{
"name": "golang.org/x/text",
"direct": false,
"version": "v0.40.0",
"ecosystem": "go"
},
{
"name": "google.golang.org/genproto/googleapis/api",
"direct": false,
"version": "v0.0.0-20260622175928-b703f567277d",
"ecosystem": "go"
},
{
"name": "google.golang.org/genproto/googleapis/rpc",
"direct": false,
"version": "v0.0.0-20260622175928-b703f567277d",
"ecosystem": "go"
},
{
"name": "google.golang.org/grpc",
"direct": false,
"version": "v1.81.1",
"ecosystem": "go"
},
{
"name": "google.golang.org/protobuf",
"direct": false,
"version": "v1.36.11",
"ecosystem": "go"
},
{
"name": "gopkg.in/yaml.v3",
"direct": false,
"version": "v3.0.1",
"ecosystem": "go"
}
],
"collected": true,
"truncated": false,
"total_count": 108,
"direct_count": 15,
"indirect_count": 93
}
},
"maintainership": {
"issues": {
"open_prs": 12,
"merged_prs": 39,
"open_issues": 2,
"closed_ratio": 0,
"closed_issues": 0,
"closed_unmerged_prs": 11
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "gfanton",
"commits": 170,
"avatar_url": "https://avatars.githubusercontent.com/u/8671905?v=4"
},
{
"type": "User",
"login": "moul",
"commits": 34,
"avatar_url": "https://avatars.githubusercontent.com/u/94029?v=4"
},
{
"type": "User",
"login": "junghoon-vans",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/44942700?v=4"
}
],
"contributors_sampled": 3,
"top_contributor_share": 0.829
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"release.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 9,
"reason": "27 out of 28 merged PRs checked by a CI test -- score normalized to 9",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 1,
"reason": "Found 4/24 approved changesets -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 26 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 4,
"reason": "dependency not pinned by hash detected -- score normalized to 4",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 4,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 10,
"reason": "GitHub workflow tokens follow principle of least privilege",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 7,
"reason": "3 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "ef19be44acdb1109ada2fa4e19e7472ab98a7a23",
"ran_at": "2026-07-29T13:47:04Z",
"aggregate_score": 5.9,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-27T11:08:55Z",
"oldest_open_prs": [
{
"number": 3,
"created_at": "2026-05-18T15:26:56Z",
"last_comment_at": "2026-05-18T15:32:45Z",
"last_comment_author": "moul"
},
{
"number": 31,
"created_at": "2026-06-26T15:19:08Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 32,
"created_at": "2026-06-26T15:20:01Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 41,
"created_at": "2026-07-13T11:10:25Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 42,
"created_at": "2026-07-13T11:10:39Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 43,
"created_at": "2026-07-13T11:10:43Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 50,
"created_at": "2026-07-20T11:10:02Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 52,
"created_at": "2026-07-22T14:52:43Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 62,
"created_at": "2026-07-24T20:07:27Z",
"last_comment_at": "2026-07-24T20:07:32Z",
"last_comment_author": "netlify"
},
{
"number": 63,
"created_at": "2026-07-27T11:08:49Z",
"last_comment_at": "2026-07-27T11:08:54Z",
"last_comment_author": "netlify"
},
{
"number": 64,
"created_at": "2026-07-27T11:08:54Z",
"last_comment_at": "2026-07-27T11:08:59Z",
"last_comment_author": "netlify"
},
{
"number": 65,
"created_at": "2026-07-27T11:08:57Z",
"last_comment_at": "2026-07-27T11:09:03Z",
"last_comment_author": "netlify"
}
],
"last_merged_pr_at": "2026-07-23T15:42:22Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 28,
"created_at": "2026-06-26T15:08:30Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 59,
"created_at": "2026-07-22T21:59:06Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/gnoverse/gno-mcp",
"host": "github.com",
"name": "gno-mcp",
"owner": "gnoverse"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 58,
"inputs": {
"security": 65,
"vitality": 79,
"community": 27,
"governance": 50,
"engineering": 66
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 79,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 71,
"inputs": {
"commits_last_year": 214,
"human_commit_share": 0.91,
"days_since_last_push": 2,
"active_weeks_last_year": 10
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 2 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 2
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "10/52 weeks with commits",
"points": 6.9,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 10
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "214 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 214
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 11,
"latest_release_tag": "v0.9.0",
"releases_from_tags": false,
"days_since_latest_release": 6,
"mean_days_between_releases": 4.3
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "11 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 11
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 6 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 6
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~4.3 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 4.3
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 27,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 7,
"inputs": {
"forks": 3,
"stars": 3,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "3 stars",
"points": 4.9,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 3
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "3 forks",
"points": 2.5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 3
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 50,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 27,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 3,
"top_contributor_share": 0.829
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 83% of commits",
"points": 3.8,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 83
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "3 contributors",
"points": 4.1,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 3
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 26 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "at_risk",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 31,
"inputs": {
"merged_prs": 39,
"open_issues": 2,
"closed_issues": 0,
"issue_closed_ratio": 0,
"closed_unmerged_prs": 11
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "0% of issues closed",
"points": 0,
"status": "missed",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 0
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "39/50 decided PRs merged",
"points": 29.8,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 39,
"decided": 50
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 4/24 approved changesets -- score normalized to 1",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"followers": 35,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "gnoverse",
"public_repos": 37,
"account_age_days": 662
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "35 followers of gnoverse",
"points": 11.2,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 35,
"login": "gnoverse"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "37 public repos, account ~1 yr old",
"points": 15.1,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 37
}
},
{
"code": "account_age_years",
"params": {
"years": 1
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/gnoverse/gno-mcp"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 6
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 6 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 6
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "11 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 11
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 66,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 66,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "2 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 2
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "27 out of 28 merged PRs checked by a CI test -- score normalized to 9",
"points": 18,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 65,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": null,
"notes": [],
"value": 59,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 18,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 0,
"scorecard_aggregate": 5.9
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "27 out of 28 merged PRs checked by a CI test -- score normalized to 9",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 4/24 approved changesets -- score normalized to 1",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 26 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 4",
"points": 2,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 2,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "GitHub workflow tokens follow principle of least privilege",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "3 existing vulnerabilities detected",
"points": 5.2,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 108 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 108
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 89,
"inputs": {
"source": "osv",
"advisories": 4,
"affected_packages": 3,
"assessed_packages": 108,
"unassessed_packages": 0,
"affected_by_severity": "critical 1, unknown 2",
"direct_affected_packages": 1
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "1 affected: golang.org/x/crypto v0.53.0 (unknown)",
"points": 26.6,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 1,
"packages": "golang.org/x/crypto v0.53.0 (unknown)"
}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory has been public longer than 90 days",
"points": 40,
"status": "met",
"details": [
{
"code": "advisories_none_stale",
"params": {
"days": 90
}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 108,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 23
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 77,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md",
"GEMINI.md",
"playground/AGENTS.md",
"playground/CLAUDE.md"
],
"agent_instruction_max_bytes": 6474
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "AGENTS.md, CLAUDE.md, GEMINI.md, playground/AGENTS.md, playground/CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "AGENTS.md, CLAUDE.md, GEMINI.md, playground/AGENTS.md, playground/CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "91 of 91 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 91,
"sampled": 91
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 83,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [
"Makefile",
"playground/Makefile"
],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0.65,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0.09
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile, playground/Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile, playground/Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "65 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 65,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "9 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 9,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 4",
"points": 4,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 36599,
"source_files_sampled": 197,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/197 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 197,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "critical",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"example_dirs": [],
"has_mcp_signal": true,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 20,
"status": "met",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"Could not fetch npm package 'gnomcp' from its registry"
],
"report_type": "repository",
"generated_at": "2026-07-29T13:47:23.425287Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/g/gnoverse/gno-mcp.svg",
"full_name": "gnoverse/gno-mcp",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}
Registros relacionados
Repositorios inspeccionados que comparten etiquetas de catálogo o ecosistemas con gnoverse/gno-mcp. Leer en paralelo →
Las puntuaciones son señales, no garantías. Reflejan prácticas públicamente visibles en GitHub; no son una auditoría de código ni una garantía de seguridad.
Los datos ausentes se excluyen y los pesos se renormalizan; nunca se puntúan como cero. La metodología es versionada y abierta: métricas v1.13.0, esquema v0.27.0 — metodología completa · wiki de métricas.
