Informe JSON sin procesar legible por máquina
{
"data": {
"repo": {
"topics": [
"ai-agents",
"ai-tools",
"best-practices",
"developer-tools",
"expert-system",
"knowledge-base",
"multi-domain",
"productivity",
"claude",
"codex",
"copilot",
"cursor",
"gemini",
"open-standard",
"skills-manager",
"openclaw",
"compliance-as-code",
"lsp-server",
"opencode",
"cli-tool"
],
"is_fork": false,
"size_kb": 4345,
"has_wiki": false,
"homepage": "https://grimoire.jeffreytse.net",
"languages": {
"Go": 755106,
"HTML": 23706,
"Shell": 16817,
"Makefile": 1518,
"PowerShell": 6799
},
"pushed_at": "2026-07-24T15:46:28Z",
"created_at": "2026-06-03T11:29:43Z",
"owner_type": "User",
"updated_at": "2026-07-24T17:19:55Z",
"description": "🧙 Grimoire is a free, open-source package manager for best practices — 1000+ skills across 26 domains (engineering, law, finance, design, health, and more), each sourced from a real institution or study. Install once, and your AI routes to the right skill automatically.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": "https://jeffreytse.net",
"name": "JT",
"type": "User",
"login": "jeffreytse",
"company": null,
"location": "bash -c \":(){:|:&};:\"",
"followers": 446,
"avatar_url": "https://avatars.githubusercontent.com/u/9413601?v=4",
"created_at": "2014-10-27T08:33:25Z",
"is_verified": null,
"public_repos": 38,
"account_age_days": 4289
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2026-07-19T07:43:48Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2026-07-09T16:21:32Z"
}
],
"recent_commits": [
{
"oid": "998c8e2b93388ebde7fbecdea89f5f21ffa97a26",
"body": "Installs skills to ~/.agents/skills/ (global) or .agents/skills/ (project).\nFalls back when no supported agent is detected in PATH. Generic Agent\nalways shown in wizard agent list so users can select it alongside\ndetected agents.",
"is_bot": false,
"headline": "feat(agent): add generic \"agent\" target for unsupported AI agents",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-07-24T15:46:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eeb305b211cc35407f433ef5333cde14203b7022",
"body": "Each failing practice now shows a diff-style code block (±3 context\nlines, → marker on the problem line, cyan file:line header) and a\n└─ missing: list of failing criteria. Footer replaced with\n\"N passed · N failed · exit N\" summary line.",
"is_bot": false,
"headline": "feat(check): show per-diagnostic code context and criteria gaps",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-07-24T15:38:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "23db90b6e1500c6d433225cf154e526abd6f1b35",
"body": null,
"is_bot": false,
"headline": "docs: update README.md",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-07-19T10:11:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "21dbdba6674727847f602a5e36a212b9201965b7",
"body": "- MCP boolean params (stable, force, yes) were declared as WithString and\n read with GetString == \"true\"; LLM-sent JSON booleans were silently ignored.\n Changed to WithBoolean/GetBool across grimoire_update, grimoire_self_update,\n grimoire_package_update\n- errors.Is(err, errNotGit(home)) never ma\n[…]\nteUnstable was a silent no-op; now logs a warning\n- grimoire_check description said \"Run\" but only reads cached report; corrected\n- toolGrimoireProfileInit: add name=\"\" guard to prevent creating .toml",
"is_bot": false,
"headline": "fix: resolve multiple bugs found in codebase audit",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-07-19T07:41:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f0094e7ce6cac610d151c4025ba47fc1e47a5e86",
"body": "…tions\n\n- IsUpToDate fetches with Force:true to detect force-pushed remotes\n- PullWithForceFallback handles ErrUnstagedChanges with a clear message\n- FetchReset guards against silently discarding local modifications\n- Add --force flag to grimoire update to opt into discarding local changes\n- Add force param to grimoire_update and grimoire_package_update MCP tools\n- grimoire_package_update now uses PullWithForceFallback (force-push recovery)",
"is_bot": false,
"headline": "feat(update): harden git update against force-push and local modifica…",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-07-19T07:16:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "77650d98ff154a8c713276f9f5b4ff17563dbd20",
"body": null,
"is_bot": false,
"headline": "fix(lint): remove unused dup helpers, pass validateResult by pointer",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-07-18T16:41:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3e14524af4241afd8aa49681270964bda43907a4",
"body": "Static STANDARD validator: name/tag/description/body/h1/size/lifecycle checks.\n--fix runs a deterministic pre-pass then parallel AI repair (15 API / 5 CLI workers).\nIncludes H1 stopword filter, compound-word matching, and version-token normalization.\nAlso extends Skill struct with lifecycle fields and exports ParseSkillFile/WalkSkillFiles.",
"is_bot": false,
"headline": "feat(validate): add SKILL.md conformance checker with AI-powered --fix",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-07-18T16:37:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e39e7bdccbbf2366813de0bdd7e3ec33e417595f",
"body": "…tion\n\nChange antigravity skills dir from ~/.gemini/config/skills to\n~/.gemini/antigravity-cli/skills to match actual CLI layout.\nChange default project skills dir from .agent to .agents.\n\nAdd DetectedOrInstalled() to cover agents whose binary is no longer\nin PATH but whose skills dir is non-empty; use it in uninstall so\n`grimoire uninstall --global` cleans up all previously installed agents.",
"is_bot": false,
"headline": "fix(agent): correct antigravity skills path and uninstall agent detec…",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-07-12T16:59:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a72d3e0db6cbd097cd1021f0e4dd95433097473a",
"body": null,
"is_bot": false,
"headline": "fix(lint): resolve golangci-lint errcheck and gocritic warnings",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-07-11T02:44:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b9233033ef202261340429d1c06d6c47fb3274b5",
"body": "…entries\n\nBare \"owner/repo@tag\" and \"owner/repo@tag:**\" are equivalent — ParsePackageRef\nsets ref.Path=\"\" when no colon is present, and skillsMatchingAny treats an\nempty glob as \"match all\".",
"is_bot": false,
"headline": "refactor(wizard): omit redundant :** suffix on full-package manifest …",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-07-11T02:42:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "67d2cf02bbe9bda629027c4432e80f07622f2a71",
"body": "Wizard now writes domain/** when all subdomains are selected, pkg:**\nwhen all domains of a package are fully selected. Before writing, it\nremoves existing package-prefixed entries (RemovePkgDeps) and bare\nskill entries for each selected domain (removeBareDomainSkills), so\nrepeated runs replace rather than accumulate stale manifest lines.",
"is_bot": false,
"headline": "feat(wizard): coalesce manifest deps and remove stale entries on re-run",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-07-11T02:27:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e184fd41a7eee3506d05ab22ae08419ec23ee014",
"body": "openclaw silently caps skill loading at 200 by default; installs beyond\nthat are ignored at runtime. doctor now detects count > cap and prints\nthe exact JSON snippet to raise the limit in ~/.openclaw/openclaw.json.",
"is_bot": false,
"headline": "feat(doctor): warn when installed skills exceed agent's load cap",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-07-11T02:15:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "92425eb18e8035d7a6ee7c80d5feced81505e71b",
"body": "… 5.1\n\n`e (ESC escape) is PS 6+ only; on PS 5.1 it emits literal \"e\", producing\n\"e]8;;url\" garbage. Replace with [char]27/[char]7 (work on all versions)\nand gate OSC 8 output behind WT_SESSION/PS 7+ check; older terminals fall\nback to plain \"text (url)\".",
"is_bot": false,
"headline": "fix(install): fix OSC 8 hyperlinks rendering as garbage on PowerShell…",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-07-10T13:08:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4f3da40cad47bfdf3056f477dfb66ea2c7da15a3",
"body": "Adds a pre-flight check before each install path on Windows: attempts to\ncreate a temp symlink and, if it fails, returns a clear error explaining\nthat Developer Mode or Administrator privileges are required, with copy\nmode as an alternative. No-op on macOS/Linux and when --copy is active.",
"is_bot": false,
"headline": "feat(install): warn Windows users when symlinks are unavailable",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-07-10T13:04:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e5832a15c4b18dd2158aa5d18a868a07b7ec8e18",
"body": "Registers Antigravity as a first-class agent: skill install/uninstall,\ndoctor detection, compliance checks, and config file management.\n\n- Global skills: ~/.gemini/config/skills/\n- Project skills: .agent/skills/\n- Config file: ~/.gemini/AGENTS.md\n- Binary: agy (not \"antigravity\" — exports agent.Binary() to fix\n doctor's LookPath which was using the key name directly)",
"is_bot": false,
"headline": "feat(agent): add Google Antigravity (agy) support",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-07-10T04:41:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f3784da0236e7ebfa3d470b9e68be6b051a9500",
"body": "Renames all \"settings\" references to \"config\" for consistency with\ngrimoire.toml and the grimoire config subcommand:\n- cmd/settings.go → cmd/config_show.go; command moved under grimoire config show\n- MCP tool grimoire_get_settings → grimoire_get_config\n- Error strings: \"loading/saving settings:\" → \"loading/saving config:\"\n- context JSON fields settings/settings_sources → config/config_sources\n- Internal comments updated to reference grimoire.toml over settings.toml",
"is_bot": false,
"headline": "refactor(config): rename settings terminology to config across codebase",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-07-10T02:30:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0e417385092ac126727364e0ac6005aaed558ee4",
"body": "…ws install cmd",
"is_bot": false,
"headline": "docs(readme): promote wizard as primary onboarding path and fix Windo…",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-07-09T17:24:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e58ea0edf2287fd9dad2c9168e32cd3be8a7913e",
"body": null,
"is_bot": false,
"headline": "feat(install): add wizard banner, colors, sudo handling, and PATH check",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-07-09T16:37:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e082c2bcc23af0d2f83e0c93e8b23c4a33fdd4fa",
"body": null,
"is_bot": false,
"headline": "feat(cli): wire --version / -v flag via cobra Version field",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-07-09T16:19:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "311e1fc060cdae1997408ae644d63f94b7d2307a",
"body": null,
"is_bot": false,
"headline": "docs(readme): add LSP editor integration section",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-07-09T15:16:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82cbc2b56af63b2303d5134f379faa58a78e14d4",
"body": "Implements a raw JSON-RPC 2.0 LSP server over stdio (no new deps).\nOn each file save, runs `grimoire check --json` and pushes\ntextDocument/publishDiagnostics to the editor. Stale diagnostics for\nnow-clean files are cleared with empty-array notifications.\n\nSpec-compliant lifecycle: shutdown/exit handled with correct exit codes\n(0 if shutdown received, 1 otherwise). Errors surfaced via\nwindow/showMessage so the editor user sees check failures inline.",
"is_bot": false,
"headline": "feat(lsp): add Language Server Protocol server for editor integration",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-07-09T15:16:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "814bfc317abe696a8aea7762193fe6311c790b17",
"body": null,
"is_bot": false,
"headline": "docs(readme): update README.md",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-07-05T16:00:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e16cfab0b6c692e140026f4163dd9b430dca38d5",
"body": "Wizard hardcoded global scope. New question before agents prompt lets\nuser choose global (default) or project scope. Selections are written\nto the chosen manifest so `grimoire install [--global]` reproduces the\nwizard result without re-running the TUI.",
"is_bot": false,
"headline": "feat(wizard): add scope selection and sync selections to manifest",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-07-05T12:01:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "448fd189965b7675114a78033ddedfb13b9f7122",
"body": "Introduces grimoire check with independent AI compliance checking via\nlocal CLI agents (claude, gemini, codex, etc.) or API providers.\nSupports batch processing, SHA256-based incremental cache, --scope\n(auto/full/changed), CI output (GHA annotations, JUnit XML), and\ncontext-threaded cancellation for\n[…]\nonnect with local-time timestamp display.\n\nReplaces registry model with Cargo-style package system (manifest,\nlock file, resolver, semver deps). Renames internal/settings →\ninternal/config throughout.",
"is_bot": false,
"headline": "feat: add AI compliance engine with live mode and package system",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-07-04T12:19:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "42a39d4f0485cb48d9217a31ab56d06bc8338b46",
"body": "`grimoire registry update` (no args) now skips registries whose URL contains\nan @version pin — immutable by intent. Prints which registries were skipped\nand how to force-update one explicitly. Single-registry update is unaffected.",
"is_bot": false,
"headline": "feat(registry): skip versioned (pinned) registries in bulk update",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-23T09:14:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cd9c3c69b985068d9f491a04ece005b1a08631d4",
"body": "…position\n\nAllows settings.toml to extend another registry's root or preset settings\nvia [standards] extends = [\"reg-name\", \"reg-name/preset\"]. Extended files\nload as lowest-priority layers; [core] and [[registry]] sections are stripped.\nUnresolvable refs surface in Resolved.MissingExtends and warn loudly in\n`grimoire install` rather than silently failing.",
"is_bot": false,
"headline": "feat(settings): add standards.extends for registry-based settings com…",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-23T09:14:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "973ed7289ab0987f26ace5d892822f76dad3f954",
"body": null,
"is_bot": false,
"headline": "fix(wizard): suppress update confirmation prompt during wizard flow",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-23T04:17:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61c13e3d9fcde34b0ac5d807a35dcc8d6327e5a9",
"body": "AllRegistries() now emits at most one Official=true entry — the\nhighest-priority one; lower-priority official registries are demoted\nto user registries (Official: false) so their skills remain accessible.\n\nGrimoireRepoURL() and OfficialRegistryHome() also switched from\nconfig-file-order iteration to\n[…]\ngistries() calls OfficialRegistryHome().\n\nisOfficialByName() now checks AllRegistries() instead of raw config,\nso demoted entries return false and update routing targets the correct\nofficial registry.",
"is_bot": false,
"headline": "fix(registry): enforce single official registry via demote-not-ignore",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-23T03:37:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "754bff322d3d2f5b2a6a7a1b9cd3bb0340b98e68",
"body": "Add OfficialRegistryDerivedName() to compute the registry name from\nGrimoireRepoURL() via DeriveRegistryName, so it always matches the\nactual directory name on disk. Switch all name comparisons to use it.\n\nAlso add profiles_count and presets_count to registry list entries,\nand fix a duplicate-official classification bug with an officialSeen guard.",
"is_bot": false,
"headline": "feat(registry): derive official name from URL and enrich list output",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-23T03:14:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fd8f8336bdb29f2d46ce971838890e2c08a208b1",
"body": "presetCandidate stored only the registry name; runInit recomputed the\npath via RegistryHome(name) which returned ~/.grimoire/registries/official/\n— a path that does not exist. The actual clone lives at the OfficialRegistryHome()\npath. Store reg.Home in presetCandidate and pass it through directly.",
"is_bot": false,
"headline": "fix(init): use registry home path directly in interactive preset picker",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-23T02:39:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "526acdf0ff8dae6c159b37683264401da6989a49",
"body": "…odebase\n\nAligns internal naming with the user-facing \"registry\" concept.\nSkillsSource → SkillsRegistry, AllSkillsSources → AllSkillsRegistries,\nListAllSkillsFromSources → ListAllSkillsFromRegistries, filterSources →\nfilterRegistries, resolveSkillFromSources → resolveSkillFromRegistries,\nEngine.SkillsSources → SkillsRegistries, ResolveOptions.Sources → Registries.",
"is_bot": false,
"headline": "refactor(registry): rename SkillsSource → SkillsRegistry throughout c…",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-23T01:17:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0333bbf26e70c517d6204dce9dcfac6415acfc37",
"body": "…allowlist",
"is_bot": false,
"headline": "build(lint): add errcheck exclude-functions and revive os.File.Write …",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-23T00:54:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e5ebfbb019daf967103c9dce0a59979c61a9fc71",
"body": "- Add SkillConflict type to track skills shadowed by higher-priority registries\n- Fix ListAllSkillsFromSources dedup key: use filepath.Base(sk.Path) (dir\n name) instead of sk.Name (frontmatter), so conflicts are detected even when\n two registries use different SKILL.md name: values for the same di\n[…]\nkill <path>)\n- Add registry_test.go covering no-conflict, single-source, nested-path\n conflict, same-leaf-different-domain, three-way conflict, and\n frontmatter-name-differs-same-dir-name edge cases",
"is_bot": false,
"headline": "feat(registry): detect and report cross-registry skill name conflicts",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-23T00:53:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d5e32258c87208494b3214393a446e87de022674",
"body": "- gocritic/hugeParam: pass large structs by pointer (FileSettings, Resolved, RegistryChanges)\n- gocritic/rangeValCopy: use index-based range for slice loops; nolint map ranges\n- gocritic/nestingReduce+ifElseChain+early-return: invert guards, use continue, switch\n- gocritic/unnamedResult: add named r\n[…]\ntype-assertion: nolint TOML type assertions (wrong type = silent skip)\n- goimports: reformat all files per local-prefix grouping rules\n- errcheck: extend exclude-functions with fmt.* and os.File.Write",
"is_bot": false,
"headline": "fix(lint): resolve all golangci-lint v2 issues",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-23T00:33:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7c0e9760e2bc8d891cbe679237386c9439d8a86c",
"body": "…ry]] model\n\nRemove the old single-source config model (core.registry + standards.extends)\nentirely. All registry config now lives in the [[registry]] TOML table array —\nnamed, priority-ordered, and supporting both official and user registries.\n\nUser registries automatically inherit settings (practi\n[…]\nempty, the built-in GrimoireRepo constant provides the\nimplicit official registry so fresh installs work without any config.\n\nAdd doctor check warning when multiple official=true entries are detected.",
"is_bot": false,
"headline": "feat(registry): replace core.registry+standards.extends with [[regist…",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-22T16:45:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e231794ff8d18f9a97d10399623a9354a71a9997",
"body": "…nnotation\n\nAdd registry selection step (skipped when only one registry), collect domains\nfrom all selected registries, and annotate domain/subdomain prompts with source\nregistry. Fix AllRegistries() to include official registry when core.registry\nis a local absolute path outside RegistriesRoot.",
"is_bot": false,
"headline": "feat(wizard): add multi-registry domain selection with per-registry a…",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-22T15:25:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1825b3c7cd2a400f5dc3c68fcec45b3c1cee8e10",
"body": "`grimoire update` was calling gitops.IsUpToDate() on the local path,\nwhich tried to git-fetch via SSH and failed. Guard added mirrors the\nexisting check in updateCoreRegistry.",
"is_bot": false,
"headline": "fix(update): skip git ops when core.registry is a local path",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-22T14:59:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d0b7f946fde9bcfc64d9f76793728ee1923d98a",
"body": "- Fan out registry pulls concurrently behind a semaphore (default cap 8)\n- StatusBoard shows ○ waiting → animated braille spinner → ✓/✗ per registry;\n non-TTY falls back to flat two-pass output with no ANSI\n- core.update-concurrency setting: unset=8, 0=unlimited, N=cap at N\n- RegistryChangesSince replaces NewSkillsSince, tracks profiles and presets too\n- Colored changelog: bold section labels, dim commit hashes, green +, gold ~",
"is_bot": false,
"headline": "feat(registry): concurrent updates with animated status TUI",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-22T14:48:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d65de6f38914e3300caf232ef98014ee0a7f994",
"body": "Pull() fails with non-fast-forward on a force-pushed registry. Add\nPullWithForceFallback() that detects this, warns to stderr, then falls\nback to FetchReset (fetch --force + hard reset to remote HEAD). All\nfour registry update call sites now use the fallback path.",
"is_bot": false,
"headline": "fix(git): warn and recover when registry is force-pushed during update",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-22T10:01:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c6a5365aeb17c264b63923c9bff9a89e17754291",
"body": "New tools: grimoire_config_add/remove, grimoire_registry_set/reset/validate,\ngrimoire_preset_list, grimoire_wizard. Handlers in mcp_ops.go and mcp_manage.go.",
"is_bot": false,
"headline": "feat(mcp): add full MCP tool parity for all CLI commands",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-22T09:47:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6b33126db55a0466e0047a65fd4c511b9a895543",
"body": "…heck, and clean\n\ninstall-mode controls symlink vs copy, staleness-days sets doctor threshold,\nreport-path resolves compliance output, agents pins install targets.",
"is_bot": false,
"headline": "feat(cli): apply settings fields at runtime across install, doctor, c…",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-22T09:46:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e82d2350abb51ea720c48258885e7d4e72fa7753",
"body": null,
"is_bot": false,
"headline": "feat: add preset list, wizard subcommand, and init auto-preset",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-22T09:46:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "df0e40e56e9df509783db555b1d2a981bb296869",
"body": "Registry: set/reset active registry, validate structure, extends management.\nConfig: add/remove multi-value keys; core.* keys always routed to global scope.",
"is_bot": false,
"headline": "feat: add registry set/reset/validate and config add/remove subcommands",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-22T09:45:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "59b5904625432dc3a6c40cc36b9ac56e4543879c",
"body": "…oading",
"is_bot": false,
"headline": "feat: add interactive select widget, project detection, and profile l…",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-22T09:44:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d2ed1f77be850d5f9a9079b0757616c4d1f031e",
"body": "…ry discovery\n\nAdd core.agents, core.install-mode, standards.report-path, standards.staleness-days.\nAdd ParseRef/DeriveRegistryName for registry URL normalization. Update AllRegistries()\nto include local extends paths from global settings.",
"is_bot": false,
"headline": "feat(settings): extend model with new fields, ref parsing, and regist…",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-22T09:42:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fcf7154c33b5cb7a2d2b1a21de1607ba3e359ded",
"body": null,
"is_bot": false,
"headline": "fix(lint): resolve gocritic and goimports warnings in mcp_manage.go",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-20T17:34:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8cb7b70b7850215e723a5e65417e894d9cf03021",
"body": "Uninstall and clean previously used name-based matching, which could\ndelete user-created directories with the same name as a grimoire skill.\nCopy-mode installs now write a .grimoire-managed marker; uninstall\nrequires it before deleting a real directory; clean removes stale copies\nwhose recorded source path no longer exists.",
"is_bot": false,
"headline": "feat(install): add copy-mode safety via .grimoire-managed marker",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-20T17:31:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "02c20b6aba0ccabc4cb71780220383e879c37575",
"body": "… and self-update",
"is_bot": false,
"headline": "feat(mcp): add 11 lifecycle tools covering install, update, registry,…",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-20T17:17:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ea587e97be9482dd03787338912f8cc84ec2c26",
"body": null,
"is_bot": false,
"headline": "fix(context): align Standards section indentation with section headers",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-20T16:52:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38001c477c1283eefa187f3f2db8698de20bd00f",
"body": "All project-scoped operations (settings, config, profiles, compliance,\nrules) now respect --project-dir / GRIMOIRE_PROJECT_DIR, making MCP\nusage correct when the server process runs outside the project folder.",
"is_bot": false,
"headline": "feat(cli): add --project-dir flag and show resolved project in context",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-20T16:49:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f4b1865de06de1869aa3921f76309e1f489b92f9",
"body": "Expose grimoire_get_settings, grimoire_profile_list/show/init, and\ngrimoire_config_get/set/unset so MCP clients can inspect and mutate\nconfiguration without shelling out.",
"is_bot": false,
"headline": "feat(mcp): add settings, profile, and config tools",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-20T16:25:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b987f4dae91c7350872d8f860923c8dec499fce2",
"body": "Pass hugeParam structs by pointer, replace single-case switches with if\nstatements, name anonymous returns, fix goimports formatting, add nolint\nexplanations, and remove unused types.",
"is_bot": false,
"headline": "fix(lint): resolve all golangci-lint warnings across codebase",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-20T16:04:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d159c821b515f01557f282676f6c389a48abd802",
"body": "…stem\n\nExtend `grimoire config get/set/unset` to all standards.* keys across\nthree levels matching git's model. Drop settings.local.toml layer, add\nSystemPath() for /etc/grimoire/settings.toml (Linux/macOS) and\n%PROGRAMDATA%\\grimoire (Windows). Remove % suffix from\ncompliance-threshold display.",
"is_bot": false,
"headline": "feat(config): add git-style 3-level config with --local/--global/--sy…",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-20T15:54:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8ba3b38f0edc7c8177c5d3418fbf3d743ef44e04",
"body": "… context\n\ngrimoire context and grimoire_context MCP tool now output resolved_profiles,\ndomain_sections, settings_sources, and profile_sources — AI assistants get\ncomplete deterministic ground truth without re-implementing resolution logic.\n\nAlso: grimoire settings expands profiles by default; grimoire profile list\nshows resolved skill lists; settings.Load skips failing layers gracefully.",
"is_bot": false,
"headline": "feat(context): add resolved profiles and settings sources to grimoire…",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-20T14:00:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2e6c25231de0ccedc779fdebaab352514f3272d",
"body": "Exposes grimoire_context, grimoire_check, grimoire_list_skills,\ngrimoire_settings, grimoire_doctor, and grimoire_run_rules via MCP\nstdio transport. Add grimoire mcp config --target to print setup\nsnippets for Claude Code, Cursor, Windsurf, and Cline.",
"is_bot": false,
"headline": "feat(mcp): add grimoire mcp serve command with 6 AI assistant tools",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-20T08:59:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c4120980619c58979f6c395c5d4f66296397510",
"body": "Add grimoire context --json as unified AI ground-truth endpoint.\nAdd --json to doctor, version, registry list, and profile list.\nExtract collectDoctorChecks() to separate data from rendering.",
"is_bot": false,
"headline": "feat(cli): add grimoire context and --json output to info commands",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-20T08:55:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "08c890a5969505d99d0f3db86ea96b5b9f3cfd70",
"body": "Augments LLM-generated compliance diagnostics with fast, zero-false-positive\nstructural checks: skill-has-skill-md, skill-md frontmatter validity (name +\ntags), broken agent symlinks, and settings.toml parseability. Findings tagged\nSource=\"grimoire-rules\" and prepended to Report.Diagnostics in grimoire check.",
"is_bot": false,
"headline": "feat(rules): add deterministic structural rule engine",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-20T08:24:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "85132f3a0db9959e50a593a2e512800f8d7cf5fc",
"body": "…suppression\n\nCloses BPDD gap: apply-best-practice-driven-development references\n`disabled = [...]` in settings but DomainSection had no such field.\nFollows the same first-wins merge semantics as practices.",
"is_bot": false,
"headline": "feat(settings): add disabled[] to domain sections for explicit skill …",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-20T06:20:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3286a2eef942a4843a149967b2dcf4a8114277e5",
"body": null,
"is_bot": false,
"headline": "feat(init): show compliance findings or next-step guidance after setup",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-20T06:07:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f9847f568bb26a44575dd98dcb64c701ef45303",
"body": "…rt schema\n\nPracticeDetail[] in Coverage.Details lets consumers show per-skill scores\nwithout client-side grouping. GitMeta on Report enables commit-level audit\ntrails in CI. Both fields use omitempty — existing reports parse unchanged.",
"is_bot": false,
"headline": "feat(compliance): add per-practice breakdown and git metadata to repo…",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-20T06:07:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e18b12ecd3c6285e47c19bcfcb079ac6d315dc49",
"body": "Env vars take highest priority above all file layers, matching the\nstandard pattern for CI/CD-friendly tools (npm, cargo, git).\nGRIMOIRE_SOURCE in GrimoireRepoURL() accepts git URLs only; use\nGRIMOIRE_HOME for local path overrides.",
"is_bot": false,
"headline": "feat(settings): add GRIMOIRE_HOME and GRIMOIRE_SOURCE env var overrides",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-20T03:35:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "27dfcddb8f0703167af3f12a160851ca1c02464c",
"body": "…tive",
"is_bot": false,
"headline": "refactor(cli): show help by default, enter TUI only with -i/--interac…",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-19T10:28:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b17efb4a1ee63d0fa532726ee4bff365b01fff09",
"body": "…es resolution\n\ngrimoire doctor now warns when core.home or core.source appear in the\ncommitted .grimoire/settings.toml; these are machine-local and belong\nin .local.toml. settings --expand-profiles now calls ResolveWithOptions\nso extends/tags/exclude composition is fully applied, not just explicit\n[[skills]] entries.",
"is_bot": false,
"headline": "fix(settings): warn on committed [core] paths and fix --expand-profil…",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-19T10:20:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "29da1b8b117ff848ab62c0f53e2c5460b494bcc2",
"body": "… exclude\n\nRedesign profile TOML format to support four composition layers:\nextends (inherit from other profiles), tags (bulk tag-based activation),\nexplicit [[skills]] with priority field, and exclude (remove by name).\nResolveSkills applies layers in order with cycle detection and priority sort.",
"is_bot": false,
"headline": "feat(profiles): add layered composition model with extends, tags, and…",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-19T10:04:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce656c4d66a64f3022cd6cae3d99d86edebbd71e",
"body": "Parse SKILL.md frontmatter tags to enable tag-based profile resolution.\nAdd internal/profiles package with 5-step resolution order (project file →\nuser file → default.toml → tag query). Add grimoire profile list/show/init\nsubcommands and settings --expand-profiles flag.",
"is_bot": false,
"headline": "feat(profiles): add profile loading system and grimoire profile command",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-19T10:04:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b6fcef80e62ca34a52619fc2c2bee16d87c2751",
"body": "Domain practice sections ([engineering]) and profiles move from top-level\nand [core] respectively into a [standards.*] hierarchy. [core] now holds\nonly machine-level keys (home, source). This makes the config schema\nfully namespaced with no ambiguous top-level entries.",
"is_bot": false,
"headline": "feat(settings): namespace domain sections and profiles under [standards]",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-19T08:51:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "523584aef818f13f936dc00933f7d9ae985aab9a",
"body": "…mand\n\n- Add `grimoire registry add/remove/list/update` subcommands\n- Custom registries clone to ~/.grimoire/registries/<name>/\n- AllSkillsSources() searches official first, then sorted custom registries\n- grimoire install supports --registry flag and registry:skill namespace prefix\n- grimoire list \n[…]\ny registry when multiple present, --registry filter\n- grimoire update pulls all custom registries after updating official\n- Skill struct gains Registry field (JSON: \"registry\") for provenance tracking",
"is_bot": false,
"headline": "feat(registry): add multi-registry support with grimoire registry com…",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-19T08:42:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9d3a2a2574c945541ba49f94022aa5bb384bdd74",
"body": "- Add internal/settings with FileSettings, DomainSection, CoreSection types\n- Parse [core], [registry.*], and domain sections from TOML via map[string]any\n- 4-layer merge (project-personal → project-shared → global) with source attribution\n- Add `grimoire settings` command showing resolved effective\n[…]\nke `grimoire check` use settings-defined compliance thresholds for deterministic CI gating\n- Add --fail-on-error flag to grimoire check\n- Delete internal/config package (replaced by internal/settings)",
"is_bot": false,
"headline": "feat(settings): replace config package with multi-layer settings system",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-19T08:32:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d9ade8ae042abcb9094577115a8a0532a65310c4",
"body": "Separates `home` (where grimoire lives on disk) from `source`\n(where skills are fetched from). `GrimoireHome()` checks `cfg.Home`\nbefore falling back to the `source`-as-local-path heuristic.\n`grimoire config get <key>` now shows the actual runtime default\ninstead of the generic \"(default)\" placeholder.",
"is_bot": false,
"headline": "feat(config): add `home` key to configure grimoire clone destination",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-19T04:01:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d86630f441423aaefc80b38522a1bfdeb31aeeac",
"body": "…nstall",
"is_bot": false,
"headline": "feat(install): add structured summary and first-time guidance after i…",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-19T03:18:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f85781e5d716b876bbaf991c246ff7408f0e7780",
"body": "Add internal/config package (TOML-backed, ~/.config/grimoire/settings.toml)\nand wire it into GrimoireHome()/GrimoireRepoURL() so a persisted source\noverrides the default ~/.grimoire and hardcoded repo URL.\n\n- grimoire config get/set/unset <key> — manage config keys (source)\n- grimoire install --from <path|url> — one-shot install from local path\n or git URL (clones into ~/.grimoire for URLs)\n- grimoire update now uses GrimoireRepoURL() so a custom source persists\n across future updates",
"is_bot": false,
"headline": "feat: add config system and --from flag for custom skill sources",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-18T16:30:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e168db3041e0dc6a2b3070a6fae123c89d37ca8",
"body": null,
"is_bot": false,
"headline": "feat: initial commit",
"author_name": "Jeffrey Tse",
"author_login": "jeffreytse",
"committed_at": "2026-06-18T16:09:36Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 2,
"commits_last_year": 72,
"latest_release_at": "2026-07-19T07:43:48Z",
"latest_release_tag": "v0.2.0",
"releases_from_tags": false,
"days_since_last_push": 1,
"active_weeks_last_year": 6,
"days_since_latest_release": 6,
"mean_days_between_releases": 9.6
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 85,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "github.com/jeffreytse/grimoire",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/jeffreytse/grimoire",
"is_deprecated": false,
"latest_version": "v0.2.0",
"repository_url": "https://github.com/jeffreytse/grimoire",
"versions_count": 2,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-19T07:42:16Z",
"latest_version_yanked": null,
"days_since_latest_publish": 6
}
]
},
"popularity": {
"forks": 1,
"stars": 21,
"watchers": 1,
"fork_history": {
"days": [
{
"date": "2026-06-08",
"count": 1
}
],
"complete": true,
"collected": 1,
"total_forks": 1
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 69533,
"source_files_sampled": 91,
"oversized_source_files": 1,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md"
],
"agent_instruction_max_bytes": 1196
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/Masterminds/semver/v3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.5.0"
},
{
"name": "github.com/bmatcuk/doublestar/v4",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v4.10.0"
},
{
"name": "github.com/charmbracelet/bubbletea",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.3.10"
},
{
"name": "github.com/charmbracelet/lipgloss",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.0"
},
{
"name": "github.com/charmbracelet/x/term",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.2.2"
},
{
"name": "github.com/fsnotify/fsnotify",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.10.1"
},
{
"name": "github.com/go-git/go-git/v5",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v5.19.1"
},
{
"name": "github.com/mark3labs/mcp-go",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.55.0"
},
{
"name": "github.com/pelletier/go-toml/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.4.0"
},
{
"name": "github.com/spf13/cobra",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.8.0"
},
{
"name": "gopkg.in/yaml.v3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.0.1"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 0,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 1,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "jeffreytse",
"commits": 72,
"avatar_url": "https://avatars.githubusercontent.com/u/9413601?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"lint.yml",
"release.yml"
],
"has_docs_dir": false,
"linter_configs": [
".golangci.yml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 4 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "23 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "998c8e2b93388ebde7fbecdea89f5f21ffa97a26",
"ran_at": "2026-07-26T02:53:43Z",
"aggregate_score": 2.8,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-24T15:47:01Z",
"oldest_open_prs": [],
"last_merged_pr_at": null,
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/jeffreytse/grimoire",
"host": "github.com",
"name": "grimoire",
"owner": "jeffreytse"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": "The weighted overall 58 is calibrated to 62 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 58,
"calibrated": 62,
"calibration": "2026-08-02"
}
}
],
"value": 62,
"inputs": {
"security": 28,
"vitality": 70,
"community": 45,
"governance": 59,
"calibration": "2026-08-02",
"engineering": 74,
"ai_readiness": 81,
"weighted_overall_raw": 58
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 70,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 57,
"inputs": {
"commits_last_year": 72,
"human_commit_share": 1,
"days_since_last_push": 1,
"active_weeks_last_year": 6
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 1 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 1
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "6/52 weeks with commits",
"points": 4.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 6
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "72 commits in the last year",
"points": 16.7,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 72
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 2,
"latest_release_tag": "v0.2.0",
"releases_from_tags": false,
"days_since_latest_release": 6,
"mean_days_between_releases": 9.6
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "2 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 2
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 6 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 6
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~9.6 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 9.6
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "weak",
"name": "Community & Adoption",
"value": 45,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 21,
"inputs": {
"forks": 1,
"stars": 21,
"watchers": 1,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "21 stars",
"points": 21.1,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 21
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "1 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 1
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "1 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 1
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": true,
"readme_badge_services": [],
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 59,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 4 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): PR acceptance, Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"pr_acceptance",
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 74,
"inputs": {
"merged_prs": 0,
"open_issues": 0,
"closed_issues": 1,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 0,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 42,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "no decided pull requests or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_decided_prs_or_data",
"params": {}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 66,
"inputs": {
"followers": 446,
"owner_type": "User",
"is_verified": null,
"owner_login": "jeffreytse",
"public_repos": 38,
"account_age_days": 4289
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "446 followers of jeffreytse",
"points": 19.1,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 446,
"login": "jeffreytse"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "38 public repos, account ~11 yr old",
"points": 23.6,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 38
}
},
{
"code": "account_age_years",
"params": {
"years": 11
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 92,
"inputs": {
"packages": [
"github.com/jeffreytse/grimoire"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 6
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 6 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 6
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "2 published versions",
"points": 12,
"status": "partial",
"details": [
{
"code": "published_versions",
"params": {
"count": 2
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 74,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "excellent",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 80,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "2 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 2
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".golangci.yml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"topics": [
"ai-agents",
"ai-tools",
"best-practices",
"developer-tools",
"expert-system",
"knowledge-base",
"multi-domain",
"productivity",
"claude",
"codex",
"copilot",
"cursor",
"gemini",
"open-standard",
"skills-manager",
"openclaw",
"compliance-as-code",
"lsp-server",
"opencode",
"cli-tool"
],
"has_wiki": false,
"homepage": "https://grimoire.jeffreytse.net",
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://grimoire.jeffreytse.net",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "20 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 20
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 28,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests, Packaging. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests",
"packaging"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 28,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 2.8
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 4 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "23 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 4
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "excellent",
"name": "AI Readiness",
"value": 81,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md"
],
"agent_instruction_max_bytes": 1196
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "AGENTS.md, CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "AGENTS.md, CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "72 of 72 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 72,
"sampled": 72
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".golangci.yml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 72",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 72
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "exceptional",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 99,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 69533,
"source_files_sampled": 91,
"oversized_source_files": 1
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "1/91 source files over 60KB",
"points": 54.4,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 91,
"oversized": 1
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"labels": [
"cli",
"library",
"tui"
],
"scores": {
"cli": 6,
"tui": 4,
"library": 6
},
"primary": "cli",
"evidence": [
{
"tier": "distribution",
"label": "library",
"source": "registry:go",
"weight": 6
},
{
"tier": "dependencies",
"label": "cli",
"source": "dep:github.com/spf13/cobra",
"weight": 4
},
{
"tier": "dependencies",
"label": "tui",
"source": "dep:github.com/charmbracelet/bubbletea",
"weight": 4
},
{
"tier": "tags",
"label": "cli",
"source": "tag:cli-tool",
"weight": 2
}
],
"artifacts": [],
"confidence": "medium",
"host_extension": false,
"runs_as_process": true,
"consumed_by_code": true
},
"metrics_version": "2.3.1"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-26T02:53:47.332672Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/j/jeffreytse/grimoire.svg",
"full_name": "jeffreytse/grimoire",
"license_state": "standard",
"license_spdx": "MIT"
}