Registro públicoEn riesgo
Informe de salud del softwareesquema 0.27.0 · métricas 2.1.0 · 2026-07-25 18:05 UTC
isr4el-silv4 / pi-web-ui
Chrome side-panel UI and local bridge extension for Pi Coding Agent
isr4el-silv4/pi-web-ui tiene un índice de salud de 33 sobre 100, lo que lo sitúa en la banda En riesgo. Su puntuación más alta es Sustainability & Governance (46/100) y la más baja, Engineering Quality (30/100). Se actualizó por última vez hace 5 días. Una sola persona concentra la mayor parte del trabajo reciente.
33
global / 100Índice de salud del software
Las métricas se agrupan en categorías ponderadas sobre una escala estandarizada de 1 a 100. El resultado global parte de su media ponderada, calibrada contra la distribución del registro público para que las bandas tengan significado percentil; cuando la evidencia pública activa la Política de Jurisdicciones de Alto Riesgo, la calificación se ajusta y recibe un límite «En riesgo» de 34.
33
Excepcional93-100El nivel más alto del registro (≈ el 5% superior); cumple prácticamente todos los criterios evaluados
Excelente80-92Sólido en todos los frentes; carencias menores
Bueno65-79Saludable; carencias limitadas y manejables
Moderado50-64Aceptable con carencias notables; se recomienda revisión
Débil35-49Debilidades sustanciales en varias áreas
En riesgo20-34Debilidades significativas; su adopción exige cautela
Crítico1-19Problemas graves (proyecto abandonado, un solo mantenedor, sin higiene)
Perfil de puntuación
Cada eje es una categoría. La forma importa más que la media: un proyecto sano llena toda la figura, mientras que un perfil de picos y cráteres indica que la fortaleza en una dimensión enmascara el riesgo en otra.
El resultado global ponderado 38 se calibra a 33 en la escala publicada del índice (calibración del registro 2026-08-02).
Titularidad
Israel SilvaCuenta personal
3 seguidores6 repositorios públicosdesde jun 2019
Este repositorio pertenece a una cuenta personal. Un proyecto con un único propietario conlleva más riesgo de continuidad que uno respaldado por una organización.
Ecosistemas de paquetes
| Registro | Paquete | Versión | Descargas / mes | Versiones | Última publicación | Etiquetas |
|---|---|---|---|---|---|---|
| npm | @isr4el-silv4/pi-web-ui | 1.0.15 | 2574 | 16 | hace 5 días | pi-packagepi-extensionpipi-coding-agentchromevivaldiedgebravebrowserchromiumaiharnessbrowser-tools |
Métricas por categoría
Vitalidad
¿Está vivo el proyecto: se escribe código y se publican versiones?
36
Actividad de desarrollo
59Moderado
Cómo se puntúa
| 36/36 | Recencia de push — último push hace 5 días |
| 4.8/36 | Cadencia de commits — 7/52 semanas con commits |
| 18/18 | Volumen de commits — 105 commits en el último año |
| 0/10 | OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully |
Datos de entrada utilizados
| commits_last_year | 105 |
| human_commit_share | 1 |
| days_since_last_push | 5 |
| active_weeks_last_year | 7 |
Disciplina de publicación
1Crítico
Cómo se puntúa
| 0/27 | Publica versiones — sin versiones publicadas |
| 0/36 | Recencia de las versiones — sin versiones |
| 0/27 | Cadencia de publicación — sin versiones |
| 0/10 | OpenSSF Scorecard: Signed-Releases — sin datos |
Datos de entrada utilizados
| releases_count | 0 |
Excluidos de la puntuación (sin datos o no aplicable): OpenSSF Scorecard: Signed-Releases. Los pesos restantes se han renormalizado.
Comunidad y Adopción
¿Tiene el proyecto usuarios, descargas, atención y unas condiciones acogedoras para quienes contribuyen?
36
Popularidad y adopción
17Crítico
Cómo se puntúa
| 16.9/60 | Estrellas — 12 estrellas |
| 0/25 | Forks — 1 forks |
| 0/15 | Observadores — 0 observadores |
Datos de entrada utilizados
| forks | 1 |
| stars | 12 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Salud de la comunidad
44Débil
Cómo se puntúa
| 22.5/22.5 | README |
| 16.9/22.5 | Licencia — archivo de licencia presente, no es una licencia reconocida |
| 0/18 | Guía CONTRIBUTING |
| 0/13.5 | Código de conducta |
| 0/7.2 | Plantilla de issues |
| 0/6.3 | Plantilla de PR |
Datos de entrada utilizados
| has_readme | sí |
| has_license | sí |
| readme_badges | — |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| readme_badge_services | — |
| has_pull_request_template | no |
Adopción en el ecosistema (descargas)
57Moderado
Cómo se puntúa
| 45.5/80 | Descargas mensuales — 2574 descargas/mes en npm |
| 0/20 | Dependientes en el registro — no lo informa este ecosistema |
Datos de entrada utilizados
| packages | @isr4el-silv4/pi-web-ui |
| dependents | — |
| ecosystems | npm |
| total_downloads | — |
| monthly_downloads | 2574 |
Excluidos de la puntuación (sin datos o no aplicable): Dependientes en el registro. Los pesos restantes se han renormalizado.
Sostenibilidad y Gobernanza
¿Sobrevivirá el proyecto a sus personas: factor bus, capacidad de respuesta, quién lo respalda y mantenimiento del paquete?
46
Cómo se puntúa
| 9/54 | Factor bus — la mitad de los commits recae en 1 contribuyente(s) |
| 0/22.5 | Distribución de commits — el principal contribuyente firma el 100% de los commits |
| 1.4/13.5 | Amplitud de contribuyentes — 1 contribuyentes |
| 0/10 | OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
Datos de entrada utilizados
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
Capacidad de respuesta a issues y PR
51Moderado
Cómo se puntúa
| 14/42 | Resolución de issues — 33% de issues cerradas |
| 30/30 | Aceptación de PR — 1/1 PR decididos fusionados |
| 0/13 | Newcomer PR acceptance — ningún PR de un contribuyente primerizo decidido en 30 d |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/26 approved changesets -- score normalized to 0 |
Datos de entrada utilizados
| merged_prs | 1 |
| open_issues | 2 |
| closed_issues | 1 |
| prs_merged_7d | — |
| prs_decided_7d | — |
| prs_merged_30d | — |
| prs_decided_30d | — |
| issue_closed_ratio | 0,333 |
| closed_unmerged_prs | 0 |
| first_time_authors_30d | — |
| first_time_prs_merged_30d | — |
| first_time_prs_decided_30d | — |
Excluidos de la puntuación (sin datos o no aplicable): newcomer_pr_acceptance. Los pesos restantes se han renormalizado.
Propiedad y custodia
41Débil
Cómo se puntúa
| 10/30 | Respaldo de la propiedad — cuenta personal (usuario) |
| 0/20 | Dominio verificado — no aplicable a cuentas de usuario |
| 4.3/25 | Alcance del propietario — 3 seguidores de isr4el-silv4 |
| 18.2/25 | Trayectoria — 6 repos públicos, cuenta de ~7 años |
Datos de entrada utilizados
| followers | 3 |
| owner_type | User |
| is_verified | — |
| owner_login | isr4el-silv4 |
| public_repos | 6 |
| account_age_days | 2593 |
Excluidos de la puntuación (sin datos o no aplicable): Dominio verificado. Los pesos restantes se han renormalizado.
Mantenimiento de paquetes
100Excepcional
Cómo se puntúa
| 25/25 | Publicado y resoluble — 1 paquete(s) en npm |
| 35/35 | Recencia de publicación — última publicación hace 5 días |
| 20/20 | Historial de versiones — 16 versiones en el registro |
| 20/20 | No obsoleto — activo, ni obsoleto ni retirado |
Datos de entrada utilizados
| packages | @isr4el-silv4/pi-web-ui |
| ecosystems | npm |
| any_deprecated | no |
| min_days_since_publish | 5 |
Calidad de Ingeniería
¿Existen unas prácticas mínimas de ingeniería y documentación?
30
Prácticas de ingeniería
24En riesgo
Cómo se puntúa
| 0/24 | Flujos de trabajo de CI |
| 24/24 | Pruebas presentes |
| 0/16 | Configuración de linter |
| 0/9.6 | Hooks de pre-commit |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — 0 out of 1 merged PRs checked by a CI test -- score normalized to 0 |
Datos de entrada utilizados
| has_ci | no |
| has_tests | sí |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Documentación
40Débil
Cómo se puntúa
| 30/30 | README |
| 0/25 | Directorio de documentación |
| 0/15 | Sitio de documentación / página del proyecto |
| 10/10 | Descripción del repositorio |
| 0/10 | Topics |
| 0/10 | Wiki |
Datos de entrada utilizados
| topics | — |
| has_wiki | no |
| homepage | — |
| has_readme | sí |
| has_docs_dir | no |
| has_description | sí |
Seguridad
¿Son sólidas las prácticas visibles de seguridad y de cadena de suministro, sin exposición jurisdiccional de alto riesgo sin resolver?
40
Postura de seguridad
25En riesgo
Cómo se puntúa
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — 0 out of 1 merged PRs checked by a CI test -- score normalized to 0 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/26 approved changesets -- score normalized to 0 |
| 0/2.5 | Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
| 0/10 | Dangerous-Workflow — sin datos |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.2/2.5 | Licencia — license file detected |
| 0/7.5 | Maintained — project was created within the last 90 days. Please review its contents carefully |
| 0/5 | Packaging — sin datos |
| 0/5 | Pinned-Dependencies — sin datos |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — sin datos |
| 0/7.5 | Token-Permissions — sin datos |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Datos de entrada utilizados
| source | openssf_scorecard |
| checks_evaluated | 13 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 5 |
| scorecard_aggregate | 2,5 |
Excluidos de la puntuación (sin datos o no aplicable): dangerous_workflow, packaging, pinned_dependencies, signed_releases, token_permissions. Los pesos restantes se han renormalizado.
Avisos de dependencias
100Excepcional
Cómo se puntúa
| 35/35 | Dependencias directas libres de avisos conocidos — ninguna dependencia directa tiene un aviso conocido |
| 25/25 | Dependencias indirectas libres de avisos conocidos — ninguna dependencia indirecta tiene un aviso conocido |
| 0/40 | Sin avisos pendientes — ningún aviso tiene fecha de publicación |
Datos de entrada utilizados
| source | osv |
| advisories | 0 |
| affected_packages | 0 |
| assessed_packages | 2 |
| unassessed_packages | 0 |
| affected_by_severity | none |
| direct_affected_packages | 0 |
Excluidos de la puntuación (sin datos o no aplicable): Sin avisos pendientes. Los pesos restantes se han renormalizado. Se cotejó el cierre de dependencias en tiempo de ejecución de npm:@isr4el-silv4/pi-web-ui@1.0.15 —lo que arrastra la instalación del paquete publicado—: 2 paquetes. No se analiza la alcanzabilidad.
Preparación para IA
¿Hasta qué punto está el repositorio preparado para desarrollarse y mantenerse con agentes de codificación de IA? Tiene un peso deliberadamente pequeño (4%): las herramientas para agentes son una señal real de mantenimiento, pero un repositorio sin ninguna puede alcanzar igualmente 100/100.
46
Contexto y guía para agentes
32En riesgo
Cómo se puntúa
| 0/45 | Instrucciones para agentes — sin CLAUDE.md / AGENTS.md / reglas de editor |
| 0/15 | Documentación legible por máquinas (llms.txt) |
| 32/40 | Historial de commits legible — 60 de 100 commits humanos declaran su intención (asunto estructurado o cuerpo explicativo) |
Datos de entrada utilizados
| has_llms_txt | no |
| legible_history_share | 0,6 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Cómo se puntúa
| 0/18 | Arranque con un solo comando |
| 22/22 | Pruebas automatizadas |
| 0/11 | Configuración de lint / formato |
| 11/11 | Verificación estática de tipos — tsconfig.json |
| 0/10 | Entorno reproducible |
| 0/10 | Práctica demostrada con agentes — ningún commit con autoría de agente entre los últimos 100 |
| 0/8 | Mantenimiento automatizado — no se observan actualizaciones automáticas de dependencias |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — sin datos |
Datos de entrada utilizados
| has_nix | no |
| has_tests | sí |
| lockfiles | — |
| has_dockerfile | no |
| typed_language | sí |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | tsconfig.json |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
Excluidos de la puntuación (sin datos o no aplicable): OpenSSF Scorecard: Pinned-Dependencies. Los pesos restantes se han renormalizado.
Legibilidad del código para modelos
100Excepcional
Cómo se puntúa
| 45/45 | Código verificable por tipos — TypeScript (tipado estático) |
| 55/55 | Tamaños de archivo manejables — 0/48 archivos fuente de más de 60 KB |
Datos de entrada utilizados
| primary_language | TypeScript |
| largest_source_bytes | 41.602 |
| source_files_sampled | 48 |
| oversized_source_files | 0 |
Datos clave
12estrellas de GitHub
1contribuidores
105commits en los últimos 12 meses
5días desde el último push
0versiones publicadas
1factor bus
2issues abiertas
npmecosistemas de paquetes
Advertencias de recopilación de datos
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Más detalle
OpenSSF Scorecard 2.5 / 10
2.5agregado
Evaluación de seguridad independiente y agnóstica en cuanto a herramientas, procedente del proyecto de código abierto OpenSSF Scorecard. Cada comprobación premia una práctica de seguridad, no la herramienta de un proveedor concreto. Las comprobaciones que Scorecard no pudo determinar se marcan como n/d y se excluyen de la puntuación de seguridad (nunca se cuentan como cero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 0 | CI-Tests | 0 out of 1 merged PRs checked by a CI test -- score normalized to 0 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/26 approved changesets -- score normalized to 0 |
| 0 | Contributors | project has 0 contributing companies or organizations -- score normalized to 0 |
| n/d | Dangerous-Workflow | no workflows found |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 9 | License | license file detected |
| 0 | Maintained | project was created within the last 90 days. Please review its contents carefully |
| n/d | Packaging | packaging workflow not detected |
| n/d | Pinned-Dependencies | no dependencies found |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| n/d | Signed-Releases | no releases found |
| n/d | Token-Permissions | No tokens found |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
Dependencias directas 2
| Registro | Paquete | Restricción de versión | Manifiesto |
|---|---|---|---|
| npm | @sinclair/typebox | ^0.34.49 | package.json |
| npm | ws | ^8.21.0 | package.json |
Todas las dependencias no recopilado
No fue posible recopilar el conjunto de dependencias resuelto para este informe: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Avisos de dependencias 0
Instalar npm:@isr4el-silv4/pi-web-ui@1.0.15 arrastra 2 paquetes, directos y transitivos: 0 tienen avisos conocidos, de los cuales 0 son dependencias directas.
Ningún aviso conocido afecta a las dependencias evaluadas.
Un aviso significa que la versión registrada en el grafo de dependencias cae dentro del rango afectado de un aviso. No se analiza la alcanzabilidad, y el grafo incluye fijaciones de desarrollo y prueba: un hallazgo puede referirse al utillaje y no al software distribuido.
Informe JSON sin procesar legible por máquina
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 408,
"has_wiki": false,
"homepage": null,
"languages": {
"JavaScript": 1106,
"TypeScript": 219851
},
"pushed_at": "2026-07-19T19:05:15Z",
"created_at": "2026-06-05T21:12:42Z",
"owner_type": "User",
"updated_at": "2026-07-23T06:59:14Z",
"description": "Chrome side-panel UI and local bridge extension for Pi Coding Agent",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "main",
"license_spdx_raw": "NOASSERTION",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript"
]
},
"owner": {
"blog": null,
"name": "Israel Silva",
"type": "User",
"login": "isr4el-silv4",
"company": null,
"location": null,
"followers": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/51991395?v=4",
"created_at": "2019-06-19T08:50:57Z",
"is_verified": null,
"public_repos": 6,
"account_age_days": 2593
},
"license": {
"state": "custom",
"spdx_id": null,
"raw_spdx": "NOASSERTION",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [],
"recent_commits": [
{
"oid": "f460063655e4d860150f7064cd05c60c2c3b57ae",
"body": null,
"is_bot": false,
"headline": "Updated package.json version",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-19T19:05:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8324f16dbeccb34e991ae5aa5b62c8823d4f98b7",
"body": "fix(bridge): use host Pi version + version-resilient model API",
"is_bot": false,
"headline": "Merge pull request #3 from isr4el-silv4/bugfix/1-local-models-not-listed",
"author_name": "Israel Silva",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-19T18:55:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d5185069f796bfc18fce65e7912e60639d17e31",
"body": "…(#1)\n\nRoot cause: the bridge is a separate spawned process that resolved its OWN\nbundled @earendil-works/pi-coding-agent (0.78.x), which lagged the host\n CLI. Two concrete consequences:\n 1. glm-5.2 was missing — 0.78.x's static model catalog predates it.\n 2. Even when pointed at 0.80.x, the bridge \n[…]\nts: normalizeModelRegistry across both shapes, loadPiSdk honoring\nPI_HOST_PI (+cache), and bridge-process passing/omitting PI_HOST_PI.\n6 pre-existing version-drift failures unchanged; no new failures.",
"is_bot": false,
"headline": ":bug: fix(bridge): use host Pi version + version-resilient model API …",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-19T18:38:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ba9ef783529f4e04a97586568d6aa802421fdb13",
"body": "Reverts the bump to ^0.80.10. While 0.80.x ships glm-5.2, it introduced\nan auth-detection regression: modelRegistry.getAvailable() returned only\nthe active model (openrouter/zai catalogs dropped), so the extension\nshowed only one model. Confirmed live: 0.78.1 returns 266+ models, while\n0.80.10 retur\n[…]\n's models.json (built-in provider 'zai' inherits api/baseUrl,\nauth from auth.json), verified to appear alongside all other models.\n\nThe earlier mergeCurrentModel + slash-safe selection commits remain.",
"is_bot": false,
"headline": ":revert: revert(deps): pi-coding-agent back to ^0.78.1 (#1)",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-19T17:03:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ed2f231386e87dfd8106b495d4fb60bfa008596c",
"body": "…istered (#1)\n\nThe user's default model zai/glm-5.2 was invisible in the extension\nbecause @earendil-works/pi-ai 0.78.1 does not yet ship glm-5.2 (only\nglm-5 / glm-5.1). With glm-5.2 unregistered, modelRegistry.find() could\nnot resolve the configured default, so findInitialModel silently dropped\nit \n[…]\ned). After the bump glm-5.2 is registered, resolves as the\ndefault, and appears in the model_list broadcast (verified live).\n\nVerified live: currentModel becomes zai/glm-5.2 and RESULT_HAS_GLM52=true.",
"is_bot": false,
"headline": ":arrow_up: fix(deps): bump pi-coding-agent ^0.80.10 so glm-5.2 is reg…",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-19T16:37:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "93a6beae49576be06f24547db25b6c8f11b8f6eb",
"body": "The bridge's broadcastModelList built the model picker list solely from\nmodelRegistry.getAvailable(), which excludes the session's active model\nwhen it is a synthesized fallback. This happens whenever a default model\nid does not exactly match a registered built-in — e.g. the user's\ndefault `zai/glm-\n[…]\n early return when the\n available list is empty but an active model exists\n- Add unit tests for the helper and end-to-end tests asserting the\n model_list broadcast contains the fallback active model",
"is_bot": false,
"headline": "bug fix(bridge): include active model in extension model list (#1)",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-19T16:14:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "02100f0696191fc4765448096545094fe384b72f",
"body": null,
"is_bot": false,
"headline": "Updated package version and updated ignore files",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-11T12:46:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "332d59da3d42936e003b9e048d008fa51a7bc203",
"body": null,
"is_bot": false,
"headline": "Updated package.json version",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-11T12:39:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3c8931763e54de115ea2799df6f28f7af51dded8",
"body": null,
"is_bot": false,
"headline": "Updated .gitignore",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-11T12:36:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61ff5d22e817c9b2a2f87c54c107e240ac283328",
"body": "- Changed /pi-web-ui start to open the extension's Chrome Web Store\n page instead of http://localhost:<port>/open\n- Updated tests to use the new STORE_URL constant",
"is_bot": false,
"headline": "🔗 open Chrome Web Store page instead of localhost on start",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-11T11:41:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "46b11ac1251dd1cb52362f2cd0a3f5e7b29b6a24",
"body": null,
"is_bot": false,
"headline": "Added .github/ to .npmignore",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-02T18:32:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "432a00640de0c9cfaaeb768cfd6b5cffa263c38c",
"body": null,
"is_bot": false,
"headline": "Updated package.json",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-02T18:31:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1a07d48c25ae7130c69947b98613c644b7cb1f03",
"body": null,
"is_bot": false,
"headline": "Updated README",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-02T18:30:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d4557e378bcd3b6ad8dda3bbf21693b150f1ff4",
"body": null,
"is_bot": false,
"headline": "Create FUNDING.yml",
"author_name": "Israel Silva",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-02T15:16:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b896a82c0fb5256fb2a185326915eb23f1f46b22",
"body": null,
"is_bot": false,
"headline": "Updated package.json",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-02T13:52:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e90728dbdfa0d4169e5714d8021684142484174",
"body": "Model selection is now handled exclusively through the <select> element\nin the chrome extension. The set_model command path and broadcastModelList\non session creation remain intact, so model selection functionality is\nunchanged.",
"is_bot": false,
"headline": "refactor: remove /model slash command from bridge",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-02T12:21:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a8942c183928510ddf97b8bad1be73eb24f511d",
"body": null,
"is_bot": false,
"headline": "Allow model selection",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-01T22:04:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b5f1c7567f869cbceb96114c9fd8e5b34daf0f4c",
"body": null,
"is_bot": false,
"headline": "Updated version",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-28T19:32:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0bd41958a284bc474aca2e10b7aefc7c0c5d97c8",
"body": "- Call resourceLoader.reload() after construction (SDK skips reload\n when a resourceLoader is provided, so extensions/skills/templates\n were never discovered from disk)\n- Access _extensionRunner private field (was extensionRunner without\n underscore, which was always undefined)\n- Add theme.fg/bg/bold/italic/underline/inverse/strikethrough/reset\n methods to WebUiContext (extensions call these during init; missing\n methods caused 'theme.fg is not a function' errors)",
"is_bot": false,
"headline": "fix: discover extension commands, skills, and templates",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-28T13:56:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fdef6b46b391c8d716cb6277ae5f675ad50d8da4",
"body": null,
"is_bot": false,
"headline": "Added handling for bridge-process.ts",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-28T13:05:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c82e071b2d065a00c149a52f693312b740302810",
"body": null,
"is_bot": false,
"headline": "changed bin in package.json",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-28T11:37:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4e0edfeec47f7a26f2eebbacee1037a1cf914d50",
"body": null,
"is_bot": false,
"headline": "Updated README and added logs",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-28T11:21:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82d94d4becbbc9e85120bfa55b326913072d5142",
"body": null,
"is_bot": false,
"headline": "Changed bridge IP",
"author_name": "AI Coding Agent",
"author_login": null,
"committed_at": "2026-06-25T21:48:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "59f9399335acbad6c88525fc9fd364a80b2e24d5",
"body": null,
"is_bot": false,
"headline": "Updated package version",
"author_name": "AI Coding Agent",
"author_login": null,
"committed_at": "2026-06-25T21:41:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b95a2a14c19471618aeb5a8baaae3aba296ce208",
"body": null,
"is_bot": false,
"headline": "Updated .gitignore",
"author_name": "AI Coding Agent",
"author_login": null,
"committed_at": "2026-06-25T20:53:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "24abc5b356a5f80a535fcc900b32fbc5959e608f",
"body": "Not needed for a published library — consumers resolve their own\ndependency tree. Added to .gitignore to prevent future commits.",
"is_bot": false,
"headline": "chore: remove package-lock.json from tracking",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-25T20:50:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f00c465a84bc83a03de2dc9ca0c7ff21fe482eb7",
"body": null,
"is_bot": false,
"headline": "chore: bump version to 1.0.3",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-25T20:49:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a827821be6de15b406bc95f1d882f42a2b44b46",
"body": "The bridge was failing to start when no Chrome/Chromium browser was found,\nbecause chrome.open() threw an error after the bridge was already running.\n\nNow chrome.open() is wrapped in try-catch so the bridge starts regardless.\nUsers can open any browser (Firefox, etc.) manually on the bridge port.\n\nAlso adds tests for the new behavior.",
"is_bot": false,
"headline": "fix: make Chrome open best-effort so bridge starts even without Chrome",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-25T20:43:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cbb6c134d06c5d7717f1429c737e4f3c42aedc37",
"body": "…very, completions\n\nBridge-side implementation for Pi extension commands on Chrome:\n\n- WebUiContext: full ExtensionUIContext implementation via WebSocket\n - confirm/select/input with 30s timeout and default responses\n - notify as fire-and-forget broadcast\n - All TUI-only methods as no-ops\n - cle\n[…]\n command_completions event with items\n- Protocol types: list_resources, get_completions, resources_list,\n command_completions, extension_command_error\n- 131 tests passing, TypeScript compiles cleanly",
"is_bot": false,
"headline": "feat: bridge-side extension commands — bindExtensions, resource disco…",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-23T21:26:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cbb44258e973d6802b2cae24d5094802d8a90fa8",
"body": null,
"is_bot": false,
"headline": "1.0.2",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T21:54:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2f68b7e220643c7b89262cad24ff4fc5c1cebc85",
"body": null,
"is_bot": false,
"headline": "updated image in package.json",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T21:53:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4df2d3f368d40982cb7d0f883a8e94e291eaaf21",
"body": null,
"is_bot": false,
"headline": "1.0.1",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T21:44:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31e4f6e606a29069fa7fab76581e93129b3ce363",
"body": null,
"is_bot": false,
"headline": "Add license field to package.json",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T21:44:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa4644b02061fc5d9fd7bd179ba02003996ca19d",
"body": null,
"is_bot": false,
"headline": "Fix npm badge URL and add repository field",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T21:44:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b42b2f8267bd8c4e2da15cda6f33d012f8d1ec3",
"body": null,
"is_bot": false,
"headline": "updated package name",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T21:29:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "09a33ca42f04ea495df2b33785386234e8fa269c",
"body": null,
"is_bot": false,
"headline": "Added Pi tag to package.json",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T21:25:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d974bd61cd8be5e5f2ccc5bb0159c208426bba93",
"body": null,
"is_bot": false,
"headline": "Replace header logos with pi-web-ui screenshot",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T21:18:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7863b32f00c5d6bb7069e3cd7ab2f091aabe9685",
"body": null,
"is_bot": false,
"headline": "added keywords",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T20:57:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8929cee54481ae9d97a2f90b58da3dddd2834538",
"body": null,
"is_bot": false,
"headline": "set version to 1.0.0",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T20:55:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3e0b53cc0b16ba865365866dd09b785f9e087172",
"body": null,
"is_bot": false,
"headline": "Removed divider from README",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T20:53:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c2a9258d4214a563025a46d4fd701c11d015d667",
"body": null,
"is_bot": false,
"headline": "docs: center logos",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T20:51:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13afc2eabd85513eb11ac67d4ccd04b6fe9e3eae",
"body": null,
"is_bot": false,
"headline": "docs: move logos to top and equalize sizes at 64px",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T20:50:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d1cc18b777fed0c032dbfdaec76d4bae7dee71e",
"body": null,
"is_bot": false,
"headline": "docs: constrain logo sizes in README",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T20:47:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ab6dacbbfd9fba92d01b54a87c7fa07f101d88b",
"body": null,
"is_bot": false,
"headline": "docs: add Pi and Chrome logo assets",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T20:47:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b6c46fc8d6923e5bdf378fb399e314ad83c7bbb",
"body": null,
"is_bot": false,
"headline": "docs: add Pi and Chrome logos to README header",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T20:46:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "917f8636c187c2c34fc1c2b4eda77cf914b68d34",
"body": "- Rewrite README with philosophy, architecture, setup, usage examples,\n browser tools, frontend workflows, session management, and permissions\n- Add emojis to section titles for readability\n- Create LICENSE file (Apache 2.0)\n- Set package.json private to false for npm publishing",
"is_bot": false,
"headline": "docs: comprehensive README, Apache 2.0 license, set package public",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T20:41:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b0bf508281e2565a566f19250de21a4d8ff106a2",
"body": null,
"is_bot": false,
"headline": "moved chrome-extension to specific repo",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T20:12:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c0cd537bbcbad5bc9139addc74230fd55cfb539",
"body": "- Scroll target now points to main (the actual scrollable container)\n instead of #messages (a no-op since main has overflow-y: auto)\n- Added bottom padding to main and margin-bottom to last message\n for breathing room between conversation and textarea",
"is_bot": false,
"headline": "Fix spacing between last message and prompt input",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T13:48:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ac40464fa853b8bf049e9805676d0d33aa6fa6a",
"body": "…ing old one\n\nOn WebSocket connect, send new_session with cwd from /status instead of\ndispatching session_state which restored the previous session. This ensures\na fresh session starts immediately when the extension is refreshed.",
"is_bot": false,
"headline": "fix(chrome-extension): start new session on refresh instead of restor…",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T13:31:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aea229d9acf89a0f2b6c3d4306e2cb98e92c3d47",
"body": "Relocate UI request dialogs from main content area into the header,\npositioned between the attached tabs list and the CWD/resume row.\nRestyled with yellow warning colors for clear action-required visibility.",
"is_bot": false,
"headline": "Move confirmation banners to header above CWD row",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T13:14:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cd75629e4262d4bc94047db07d98f90ec085cac4",
"body": null,
"is_bot": false,
"headline": "clean up: remove stray IDE/plan files from tracking, update gitignore",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T12:19:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9fd04ecd84b6ef07254bc4a3f61339a7ffc9b6a6",
"body": "- Switch form to column layout so send/abort button stays visible\n- Enable overflow-y: auto on textarea so long text is scrollable\n- Add thin custom scrollbar for the textarea",
"is_bot": false,
"headline": "fix prompt form layout and textarea scrolling",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T12:17:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6946e9d9f270cca030a195499ea6b85f41b07730",
"body": null,
"is_bot": false,
"headline": "restore original .gitignore",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T12:14:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "323a922a4cc7a41f0dc9b4662c66581389640dae",
"body": null,
"is_bot": false,
"headline": "preserve README.md in gitignore",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T12:13:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9084ff404d93ca445d8df1296dc5390333fc584d",
"body": null,
"is_bot": false,
"headline": "unstage IDE and plan files, add to gitignore",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T12:12:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e93b1b00ad22f3ef2e456efa8d4370931ff7810f",
"body": "- Changed <input> to <textarea> for multi-line support\n- Auto-resizes vertically (max 180px) as user types\n- Enter sends message, Shift+Enter adds newline\n- Resets height after sending",
"is_bot": false,
"headline": "replace prompt input with auto-growing textarea",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T12:12:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1b30a64ef34deaa29bf188551ff5756f2a655fcf",
"body": null,
"is_bot": false,
"headline": "add Pi badge as extension icons (16, 32, 48, 128px)",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T12:04:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6137512382973f573cb5a875baaec1ee4836bca5",
"body": "- Complete CSS rewrite with CSS custom properties for theming\n- Light mode: warm stone palette, blue accent\n- Dark mode: deep zinc palette, blue accent\n- User messages as blue bubbles flush-right\n- Assistant messages as bordered cards with rich markdown\n- Catppuccin Mocha code blocks for developer-n\n[…]\n) in header\n- Persists preference to localStorage\n- Respects OS prefers-color-scheme as default\n- Green dot status indicator for bridge online/offline\n- Custom thin scrollbar, smooth theme transitions",
"is_bot": false,
"headline": "redesign sidepanel with light/dark mode",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T12:00:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dc8d0455fede9c44a243d010ba6a383f891fd075",
"body": "- Move pi-badge.svg into chrome-extension/ directory\n- Display 20px badge next to \"Pi Web UI\" title in header\n- Style with rounded corners and proper alignment",
"is_bot": false,
"headline": "Add Pi badge logo to chrome-extension header",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T11:43:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "869f8a6ea1a7474b1fb9865f1674af85d3b32b61",
"body": "Switch from hidden attribute to CSS class-based visibility:\n- .error-pill defaults to display: none\n- Only shows when .visible class is present (set only with real error text)\n- Clear textContent on hide to prevent stale content",
"is_bot": false,
"headline": "Fix empty error pill always visible",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T11:34:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "353413ed13ff7a92121a306c0102bb61f8c8b5f1",
"body": "- Clear sessionError on sessions_list and session_history events so\n the error pill hides when sessions load successfully after an error\n- Add defensive trim() check in renderErrorPill to guard against\n empty/whitespace-only error strings\n- Add tests for error pill clear-on-success scenarios",
"is_bot": false,
"headline": "Fix empty error pill showing when no error exists",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T11:29:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "480f8c692c2991007b321e165b31b504ef148011",
"body": "Relocate the cwd path/Browse button and Resume/session dropdown from\nthe session section into the header for a cleaner layout matching\nthe design mockup.\n\n- Restructured header HTML with semantic elements\n- Added pill-shaped session select with custom chevron\n- Styled cwd path with monospace font and ellipsis truncation\n- No functional changes — purely aesthetic",
"is_bot": false,
"headline": "Move cwd and session select into header bar",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T11:24:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c55a6ae9ddbd03d6f7eec4849880f46ac2c0597",
"body": "The thinking toggle button and block were appended to the DOM via\nappendChild, but then immediately destroyed by 'innerHTML +=' which\nreplaces all children. Replaced with insertAdjacentHTML('beforeend')\nto preserve the thinking elements.\n\nAlso updated the assistant_message ServerEvent type to include the\noptional thinking field that was already being sent at runtime.",
"is_bot": false,
"headline": "fix: thinking emoji not rendered in live chat assistant messages",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T11:09:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5dbc4582212ae7aeba96bcb3646fd6dcfa1c3d28",
"body": null,
"is_bot": false,
"headline": "Added missing files",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T10:52:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d7db9adbcfa86e31c95f4a845c894b25323b6567",
"body": "…nts in live chat\n\nThe bridge server broadcasts tool_call/tool_result events during live chat\nbut the client reducer ignored them, so only the final assistant_message\nwas rendered. Now the reducer handles all intermediate events to match\nthe session_history display.\n\nAlso includes thinking block extraction in assistant_message broadcast.",
"is_bot": false,
"headline": "fix(chrome-extension): render tool_call, tool_result and thinking eve…",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T10:47:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f0b0f97c860fb47c1a85176d5c796c904365fb70",
"body": "The model can finish generating before the abort signal reaches the\nprovider, resulting in a normal message_end (stopReason: end_turn)\nthat was incorrectly broadcast to the UI after 'Aborted' appeared.\n\nTrack an 'aborted' flag on the bridge: set on abort command, reset on\nnew prompt/new session. Any message_end arriving while the flag is set\nis suppressed, regardless of stopReason.",
"is_bot": false,
"headline": "fix(abort): suppress all assistant messages after user clicks abort",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T10:14:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8b010aae3969eb9a4df247a3a074ef60db53fecf",
"body": "…elay\n\n- Add reconnection logic to bridge-client.js (7 attempts, 2s between each)\n- Emit bridge_reconnect_exhausted event after all retries fail\n- Show reload banner in sidepanel when reconnection is exhausted\n- Suppress duplicate bridge_error notifications during reconnection\n- Clear notifications on successful reconnection\n- Add tests for reconnection, exhaustion, counter reset, and disconnect cleanup",
"is_bot": false,
"headline": "feat(chrome-extension): auto-reconnect bridge up to 7 times with 2s d…",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-13T16:11:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7aa3811b6958e36af6bedf6a73ffd30df8dce54c",
"body": "- Delete src/protocol/permissions.ts (PermissionMode type, isPermissionMode)\n- Remove observe/debug/control mode selector from Chrome extension UI\n- Remove set_permission_mode command from protocol\n- Simplify permission enforcement: all tools allowed by default\n- Cookie/storage toggles and confirmation prompts retained\n- Remove permissionMode from session state, bridge context, and all fixtures\n- Update 16 test files to remove permissionMode references",
"is_bot": false,
"headline": "Remove permission mode selector from UI and simplify bridge permissions",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-13T15:46:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f1fa8848023a5d768021cbebdf0cd0cd864eb8e",
"body": "… chat on new session\n\n- Extract cwd from session file header on resume instead of using bridge context cwd\n- Fix list_sessions returning partial session that overwrote sessionPath in UI state\n- Highlight the currently active session in the dropdown selector\n- Clear chat history when creating a new session via the dropdown\n- Add session_history event with empty messages for new_session\n- Add 4 tests for resume_session cwd behavior",
"is_bot": false,
"headline": "fix: resume_session uses session cwd, highlight active session, clear…",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-13T13:28:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cbee86ef2704fb5558f2c3eb396b38a79fb3501e",
"body": "The Pi SDK's createAgentSession ignores the sessionPath option — it only\naccepts a pre-built sessionManager. When resuming, create a\nSessionManager.open(sessionPath) and pass it so the model loads the full\nconversation history.\n\nAlso removed the async IIFE in resume_session that broadcast a second\nsession_state after the WebSocket already sent one, causing an infinite\nfetchSessionsForCwd → list_sessions → session_state loop.",
"is_bot": false,
"headline": "fix: resume_session loads conversation history into SDK context",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-13T12:40:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c7d844b16ea325b49b17b11871050db0efa9b6d8",
"body": "- Add list_sessions command to protocol with SessionHistoryMessage type\n- Implement bridge handlers for list_sessions and enhanced resume_session\n- Add session dropdown UI next to cwd label with auto-fetch on cwd change\n- Support rich message rendering: tool calls, bash output, compaction, thinking \n[…]\ngistry\n- Extract cwd from session file when resuming for correct directory context\n- Add error pill display for session loading errors\n- Add comprehensive tests for protocol, bridge, client, and state",
"is_bot": false,
"headline": "feat: add session resume with rich conversation history",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-13T11:42:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ac8504fbeb0b1f84af5e19d4be94472b6df28417",
"body": null,
"is_bot": false,
"headline": "docs: save auto-start-session plan to plans/ dir",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-12T22:55:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ac568b2a5c4f004dd3a3f578341c33279749adb",
"body": "The Browse button now immediately sends new_session to the bridge\nafter the user picks a directory, removing the extra \"New session\"\nclick. Shows an error notification if the bridge is offline.\n\n- sidepanel.js: auto-send new_session after directory picker resolves\n- sidepanel.html: remove the \"New session\" button\n- tests: add coverage for new_session command and cwd in session_state",
"is_bot": false,
"headline": "feat: auto-start new session when browsing a directory",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-12T22:51:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d4534d4587720a267d5f64f5bbda11897bba616",
"body": "The extension showed 'not set' for cwd even when the bridge was running\nwith a valid working directory. Three fixes:\n\n1. Server: send session_state to new WebSocket clients on connect\n2. Client: fetch session state from HTTP /status endpoint on connect\n3. UI: render() now reads state.session.cwd and updates the display",
"is_bot": false,
"headline": "fix: populate cwd in Chrome extension from bridge session state",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-12T22:33:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2001c1c69455a5aeda5b94d5ff7223babd83efe1",
"body": "- Integrated attached tabs bar into the main header\n- Header now shows title, bridge status, and debugger tabs together\n- Removed fixed positioning, tabs flow naturally in header\n- Cleaned up duplicate CSS rules",
"is_bot": false,
"headline": "refactor: move debugger tabs into header bar",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-12T21:51:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e4aed7f71c9b6f3ec5122d795ee0f0c7ef235c31",
"body": "- network.startCapture now sends Network.enable to all attached tabs\n- network.stopCapture now sends Network.disable to all attached tabs\n- console.getLogs now sends Runtime.enable to target tab\n- tabs.getCurrent returns debuggerAttached boolean flag\n- Tool descriptions updated to clarify capture is auto-enabled on attach\n- Agent no longer needs to call startCapture before getNetworkRequests\n- Added 8 new tests for CDP command dispatch and debuggerAttached flag",
"is_bot": false,
"headline": "fix: network/console capture starts immediately on debugger attach",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-12T21:41:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a757eaa2e22a894fb8b90bd158377e753fd7fc07",
"body": "…ls_conflict events\n\nThe sidepanel had its own chrome.tabs.onActivated listener that fired\nbefore the tool executor's auto-attach could complete, causing false\ndevtools_conflict events on every tab switch.\n\nRemoved the sidepanel's onActivated listener and added onAttachFailed\ncallback to the tool executor so the sidepanel only shows the DevTools\nwarning when auto-attach actually fails on a newly activated tab.",
"is_bot": false,
"headline": "fix: remove duplicate tab activation listener causing spurious devtoo…",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-10T21:53:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b71d1bfeb5efb2cb65d4eafc13835ae082fb2d3",
"body": "debugger.sendCdpCommand, debugger.evaluateScript, and\nnetwork.getResponseBody now auto-attach to the target tab if the\ndebugger is not already attached. Previously, sending a CDP command\nto an unattached tab would cause the chrome.debugger.sendCommand call\nto fail in an unhandled way, leaving the bridge promise hanging\nindefinitely and blocking the Pi agent conversation.\n\nAlso removes duplicate network.getResponseBody case.",
"is_bot": false,
"headline": "fix: auto-attach debugger before CDP commands to prevent hangs",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-10T21:37:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a5d0feae32db8f6beeea3041b78e6ae3fcc151c",
"body": "…lict UI\n\n- Auto-start network capture on tool executor creation\n- Auto-attach debugger to active tab on startup\n- Auto-reattach debugger when DevTools closes (1s retry interval)\n- Auto-attach on tab activation\n- Fixed header bar showing all tabs with active debuggers (with X to detach)\n- DevTools c\n[…]\nxpose isAttached(), attachedTabIds, networkCapture, detachTab() on executor\n- Add devtoolsConflict and attachedTabs to sidepanel state\n- Update tests for new auto-attach, reattach, and detach behavior",
"is_bot": false,
"headline": "feat: auto-attach debugger, auto-start network capture, DevTools conf…",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-10T19:21:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3747d6b37a77ffbf46587075fefe385698090cd3",
"body": "- Add global box-sizing: border-box so padding never expands elements\n- Add max-width: 100% to .message and .message.assistant pre\n- Code blocks now scroll internally without pushing the panel wider\n- Text after code blocks wraps correctly at any panel width",
"is_bot": false,
"headline": "fix: constrain code blocks and messages to panel width",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-10T18:01:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f0ce855b05d6cd2490aa9f4f1af3724387411b46",
"body": "Add overflow-wrap and word-break rules across all message elements,\nheaders, code, tables, links, and notifications so text wraps properly\nin narrow panels instead of overflowing horizontally.",
"is_bot": false,
"headline": "fix: prevent text cutoff when side panel is narrowed",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-10T16:51:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5a09705984b0826c3ea133ddd68defac4538b133",
"body": "…ering\n\n- Fix 'content is not iterable' error: browser tool execute functions now\n return { content: [{ type: 'text', text: ... }], details: {...} } as\n required by the Pi SDK agent runtime, instead of raw executor results\n- Fix execute parameter signature: now accepts (_toolCallId, params) instea\n[…]\nssages using marked + DOMPurify\n- Style code blocks, tables, lists, headings, links, and blockquotes in CSS\n- Sanitize all rendered HTML to prevent XSS\n- Add tests for both fixes and markdown renderer",
"is_bot": false,
"headline": "fix: wrap browser tool results in Pi SDK format and add markdown rend…",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-10T16:46:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7dee9626730a86aa4897b1846a16ec2966381668",
"body": "- Fix async getAsEntry() handling in cwd-picker.js (newer Chrome returns Promise)\n- Add server-side CWD fallback: search home dir subdirs and parent of process.cwd()\n- Show warning + editable input in UI when only directory name is available\n- Add tests for async getAsEntry and expanded CWD search",
"is_bot": false,
"headline": "fix: resolve CWD when chrome.fileSystem.getDisplayPath fails",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-07T15:38:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "79fe9b27396b00e68f03dc8bca932d393deed5a9",
"body": "Root cause: createAgentSession returns { session: { ... } } but the bridge\nwas using the wrapper directly, so sdkSession.prompt was undefined.\n\nChanges:\n- Extract inner session from { session } wrapper in sdk-session.ts\n- Add input validation for non-object messages in bridge-client.js\n- Add try-cat\n[…]\nocket-server.ts\n- Handle 'error' events in sidepanel-state.js reducer\n- Add comprehensive logging throughout the message flow\n- Add tests for session extraction, error handling, and round-trip prompts",
"is_bot": false,
"headline": "fix: extract session from Pi SDK wrapper and add robust error handling",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-07T14:59:12Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3d0c43171389101bad2155bfe3816511db1a3c33",
"body": "The bridge was not creating an SDK session when started via createHttpServer,\nso prompts from the extension had nowhere to go.\n\nChanges:\n- createBridgeApp now creates SDK session automatically when no sdkHost is\n provided, using createDefaultPiSdkAdapter\n- SDK session events (assistant_message, tool_call, tool_result) are\n subscribed to and relayed to connected WebSocket clients\n- Add 4 integration tests for SDK session creation and prompt relay",
"is_bot": false,
"headline": "fix(bridge): create SDK session automatically for prompt forwarding",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-07T12:03:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3076b5b8fda65210712b6815f5d669da95629baf",
"body": "The bridge was not actually processing prompts from the extension — it only\nbroadcasted a prompt_received acknowledgement but never forwarded the message\nto Pi's SDK session.\n\nChanges:\n- Bridge now forwards prompt commands to sdkSession.prompt()\n- WebSocket connections are registered in browser clie\n[…]\nribed to and relayed back to connected clients\n- Extension ignores prompt_received echo to avoid duplicating user messages\n- Add 3 integration tests for prompt relay and 2 unit tests for state reducer",
"is_bot": false,
"headline": "fix(bridge): forward prompts to Pi and relay assistant messages",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-07T11:52:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f059eccfb2436cefe4ef43e79b40516eae0e628b",
"body": "The CWD picker was silently failing and always showing 'not set' because\ngetAsEntry() and chrome.fileSystem.getDisplayPath() are deprecated/unreliable.\n\n- Extract path resolution into cwd-picker.js with proper error handling\n- Support both callback-style and promise-style getDisplayPath APIs\n- Fall back to directory name when APIs are unavailable\n- Add 7 unit tests covering all edge cases",
"is_bot": false,
"headline": "fix(chrome-extension): show selected directory path in CWD picker",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-07T11:39:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "30800d12fde85b40dd447e65d94b18921a1f733d",
"body": "- Unref stderr stream after bridge is ready so it doesn't keep\n the event loop alive\n- Chrome opener uses setImmediate instead of waiting for exit\n event (xdg-open may not emit exit reliably)",
"is_bot": false,
"headline": "fix: prevent CLI from hanging after bridge start",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-06T18:43:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2665448f6ca238e2404216df8149c87eb541973d",
"body": "When Pi loads the extension from src/, import.meta.url resolves to\nsrc/bridge-process.js, making the relative path point to\nsrc/bridge/server.js which doesn't exist. Now checks both dist and\nsrc paths, always returning the compiled dist/bridge/server.js.",
"is_bot": false,
"headline": "fix: resolve bridge entry path for both src and dist contexts",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-06T18:26:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f2e5379b3c24aca3e208e9dc421f47f8e0e8bcc1",
"body": "- Bridge now responds to POST /stop by closing server and exiting\n- bridge-process stop() checks if running before calling stopFn\n- No-op if bridge is already stopped\n- Added tests for stop behavior",
"is_bot": false,
"headline": "feat: implement bridge stop via POST /stop endpoint",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-06T18:12:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "858287b5d6bab69d6a8484762ee23fde8e3ad9d1",
"body": "- Pipe bridge stderr instead of ignoring it\n- Include stderr output in timeout error message\n- Helps diagnose why bridge fails to start",
"is_bot": false,
"headline": "fix: capture bridge stderr for better error diagnostics",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-06T17:49:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "964a4f33e16f8d98e209a09b9391416f7f9a0384",
"body": "After spawning the bridge process, poll /status until it responds\nbefore returning from start(). This prevents the browser from\nopening a 'site cannot be reached' page due to the bridge not\nyet listening.\n\n- Added waitForBridgeReady() with configurable timeout/poll interval\n- Defaults: 10s timeout, 200ms poll interval\n- Throws if bridge never becomes ready within timeout\n- Added tests for polling and timeout behavior",
"is_bot": false,
"headline": "fix: wait for bridge to be ready before opening browser",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-06T17:34:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1ed1aa5152f451fbfb289ca047cba348ef7abb0e",
"body": "- Wrap child_process.spawn in a Promise to catch async ENOENT errors\n instead of crashing with uncaught exception\n- Try all candidates in order before giving up:\n google-chrome, google-chrome-stable, chromium, chromium-browser,\n vivaldi-stable, vivaldi, xdg-open\n- xdg-open fallback opens the system default browser (e.g. Vivaldi)\n- Clear error message when no browser is found\n- Add 5 new tests for fallback, ENOENT handling, and platform coverage",
"is_bot": false,
"headline": "fix: handle missing Chrome and support more browsers",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-06T17:23:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c4cd16a8f58b54139912beae850eeef7119f932c",
"body": null,
"is_bot": false,
"headline": "Remove pi.extensions from package.json (not needed for auto-discovery)",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-05T22:29:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3fb166e6404939a2cffefbc110f84b35e1d3a5d3",
"body": "Pi discovers extensions from ~/.pi/agent/extensions/*/index.ts (jiti loads\nTypeScript directly). The entry point was at src/index.ts but Pi expects\nindex.ts at the root of the extension directory.\n\nAlso remove pi.extensions from package.json — that field is for 'pi install'\npackages, not for auto-discovered extensions in the extensions directory.",
"is_bot": false,
"headline": "Add root index.ts for Pi auto-discovery",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-05T22:29:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a56b3344a3f6e911383ea66b9ec8e592a36876c4",
"body": "…nd browser tools\n\n- Add src/index.ts as the main extension entry point\n- Register /pi-web-ui command with start/stop/status/open subcommands\n- Register 20 browser tools (tabs, HTML, console, network, debugger, cookies/storage)\n- Add session_start/session_shutdown lifecycle hooks\n- Add /browser-tool\n[…]\nUiController\n- Update package.json with pi.extensions field for auto-discovery\n- Add @sinclair/typebox dependency for parameter schemas\n- Add tests for extension command handlers and tool registration",
"is_bot": false,
"headline": "Add Pi auto-discovery extension entry point with /pi-web-ui command a…",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-05T22:14:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "965275928b28c9d74c2980099b27550d7dbd9058",
"body": null,
"is_bot": false,
"headline": "Complete side panel UI requests and live browser tooling",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-05T21:47:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5edc69d01c89dc4a961e0e3082b807a2d8b2c758",
"body": null,
"is_bot": false,
"headline": "Wire SDK session lifecycle and confirmation policy",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-05T21:42:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a709cff444a8f5328fef630ac972e39f24079e68",
"body": null,
"is_bot": false,
"headline": "Move tests into submodule test directories",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-05T21:40:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "407b89b8bea89298b67dc32568bbb2f1b74f9ec1",
"body": null,
"is_bot": false,
"headline": "Wire SDK adapter and browser tool request path",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-05T21:38:01Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 0,
"commits_last_year": 105,
"latest_release_at": null,
"latest_release_tag": null,
"releases_from_tags": false,
"days_since_last_push": 5,
"active_weeks_last_year": 7,
"days_since_latest_release": null,
"mean_days_between_releases": null
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 42,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "@isr4el-silv4/pi-web-ui",
"exists": true,
"license": "Apache-2.0",
"keywords": [
"pi-package",
"pi-extension",
"pi",
"pi-coding-agent",
"chrome",
"vivaldi",
"edge",
"brave",
"browser",
"chromium",
"ai",
"harness",
"browser-tools"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@isr4el-silv4/pi-web-ui",
"is_deprecated": false,
"latest_version": "1.0.15",
"repository_url": "https://github.com/isr4el-silv4/pi-web-ui",
"versions_count": 16,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 2574,
"first_published_at": "2026-06-17T21:40:18.963000Z",
"latest_published_at": "2026-07-19T19:05:28.541000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
}
]
},
"popularity": {
"forks": 1,
"stars": 12,
"watchers": 0,
"fork_history": {
"days": [
{
"date": "2026-07-16",
"count": 1
}
],
"complete": true,
"collected": 1,
"total_forks": 1
},
"star_history": null,
"open_issues_and_prs": 2
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 41602,
"source_files_sampled": 48,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 2,
"malicious_count": 0,
"assessed_package": "npm:@isr4el-silv4/pi-web-ui@1.0.15",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "@sinclair/typebox",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^0.34.49"
},
{
"name": "ws",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^8.21.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 1,
"open_issues": 2,
"closed_ratio": 0.333,
"closed_issues": 1,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "isr4el-silv4",
"commits": 102,
"avatar_url": "https://avatars.githubusercontent.com/u/51991395?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": false,
"has_tests": true,
"ci_workflows": [],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 0,
"reason": "0 out of 1 merged PRs checked by a CI test -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/26 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": null,
"reason": "no workflows found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 9,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": null,
"reason": "no dependencies found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": null,
"reason": "No tokens found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "f460063655e4d860150f7064cd05c60c2c3b57ae",
"ran_at": "2026-07-25T18:05:24Z",
"aggregate_score": 2.5,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": null,
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-19T18:55:51Z",
"ci_last_conclusion": null,
"oldest_open_issues": [
{
"number": 2,
"created_at": "2026-07-12T22:57:55Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 4,
"created_at": "2026-07-19T20:32:06Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/isr4el-silv4/pi-web-ui",
"host": "github.com",
"name": "pi-web-ui",
"owner": "isr4el-silv4"
},
"metrics": {
"overall": {
"key": "overall",
"band": "at_risk",
"name": "Overall health",
"note": "The weighted overall 38 is calibrated to 33 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 38,
"calibrated": 33,
"calibration": "2026-08-02"
}
}
],
"value": 33,
"inputs": {
"security": 40,
"vitality": 36,
"community": 36,
"governance": 46,
"calibration": "2026-08-02",
"engineering": 30,
"ai_readiness": 46,
"weighted_overall_raw": 38
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "weak",
"name": "Vitality",
"value": 36,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 59,
"inputs": {
"commits_last_year": 105,
"human_commit_share": 1,
"days_since_last_push": 5,
"active_weeks_last_year": 7
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 5 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 5
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "7/52 weeks with commits",
"points": 4.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 7
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "105 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 105
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "critical",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"releases_count": 0
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "no releases published",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases_published",
"params": {}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "no releases",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases",
"params": {}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "no releases",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases",
"params": {}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "weak",
"name": "Community & Adoption",
"value": 36,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 17,
"inputs": {
"forks": 1,
"stars": 12,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "12 stars",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 12
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "1 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 1
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "weak",
"name": "Community health",
"note": null,
"notes": [],
"value": 44,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "license file present, not a recognized license",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "license_custom",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 57,
"inputs": {
"packages": [
"@isr4el-silv4/pi-web-ui"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 2574
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "2,574 downloads/month across npm",
"points": 45.5,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 2574,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "weak",
"name": "Sustainability & Governance",
"value": 46,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 10,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 51,
"inputs": {
"merged_prs": 1,
"open_issues": 2,
"closed_issues": 1,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 0.333,
"closed_unmerged_prs": 0,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "33% of issues closed",
"points": 14,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 33
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "1/1 decided PRs merged",
"points": 30,
"status": "met",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 1,
"decided": 1
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/26 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "weak",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 41,
"inputs": {
"followers": 3,
"owner_type": "User",
"is_verified": null,
"owner_login": "isr4el-silv4",
"public_repos": 6,
"account_age_days": 2593
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "3 followers of isr4el-silv4",
"points": 4.3,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 3,
"login": "isr4el-silv4"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "6 public repos, account ~7 yr old",
"points": 18.2,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 6
}
},
{
"code": "account_age_years",
"params": {
"years": 7
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"@isr4el-silv4/pi-web-ui"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 5
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 5 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 5
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "16 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 16
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "at_risk",
"name": "Engineering Quality",
"value": 30,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "at_risk",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 24,
"inputs": {
"has_ci": false,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "0 out of 1 merged PRs checked by a CI test -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "weak",
"name": "Documentation",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "weak",
"name": "Security",
"value": 40,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Dangerous-Workflow, Packaging, Pinned-Dependencies, Signed-Releases, Token-Permissions. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"dangerous_workflow",
"packaging",
"pinned_dependencies",
"signed_releases",
"token_permissions"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 25,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 13,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 5,
"scorecard_aggregate": 2.5
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "0 out of 1 merged PRs checked by a CI test -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/26 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no workflows found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "No tokens found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "exceptional",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:@isr4el-silv4/pi-web-ui@1.0.15 runtime dependency closure — what installing the published package pulls in — 2 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "npm:@isr4el-silv4/pi-web-ui@1.0.15",
"assessed": 2
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 2,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 2,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "weak",
"name": "AI Readiness",
"value": 46,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 32,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.6,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "60 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 32,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 60,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "weak",
"name": "Verify loop (build / test / typecheck)",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_pinned_dependencies"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 37,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
"tsconfig.json"
],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "exceptional",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 41602,
"source_files_sampled": 48,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/48 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 48,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"metrics_version": "2.1.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-25T18:05:30.939469Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/i/isr4el-silv4/pi-web-ui.svg",
"full_name": "isr4el-silv4/pi-web-ui",
"license_state": "custom",
"license_spdx": null
}Las puntuaciones son señales, no garantías. Reflejan prácticas públicamente visibles en GitHub; no son una auditoría de código ni una garantía de seguridad.
Los datos ausentes se excluyen y los pesos se renormalizan; nunca se puntúan como cero. La metodología es versionada y abierta: métricas v2.1.0, esquema v0.27.0 — metodología completa · wiki de métricas.
Cómo se sitúa un resultado dentro del registro general: estadísticas agregadas — npm.