Registro públicoModerado
Informe de salud del softwareesquema 0.27.0 · métricas 1.13.0 · 2026-07-23 18:01 UTC
kangminlee-maker / ultracode-for-codex
Dynamic workflows redesigned for Codex, with parallel subagents, visible progress, and an optional local CLI runtime.
kangminlee-maker/ultracode-for-codex tiene un índice de salud de 55 sobre 100, lo que lo sitúa en la banda Moderado. Su puntuación más alta es Engineering Quality (76/100) y la más baja, Community & Adoption (30/100). Se actualizó por última vez hace 5 días. Una sola persona concentra la mayor parte del trabajo reciente.
55
global / 100Índice de salud del software
Las métricas se agrupan en categorías ponderadas sobre una escala de 1 a 100. El resultado global parte de su media; cuando la evidencia pública activa la Política de Jurisdicciones de Alto Riesgo, la calificación se ajusta y recibe el límite 49 (En riesgo). Preparación para IA queda fuera.
55
Excelente85-100Ejemplar; cumple prácticamente todos los criterios evaluados
Bueno70-84Saludable; carencias menores
Moderado50-69Aceptable con carencias notables; se recomienda revisión
En riesgo30-49Debilidades significativas; su adopción exige cautela
Crítico1-29Problemas graves (proyecto abandonado, un solo mantenedor, sin higiene)
Perfil de puntuación
Cada eje es una categoría. La forma importa más que la media: un proyecto sano llena toda la figura, mientras que un perfil de picos y cráteres indica que la fortaleza en una dimensión enmascara el riesgo en otra.
Titularidad
Kangmin LeeCuenta personal
5 seguidores31 repositorios públicosdesde ago 2025
Este repositorio pertenece a una cuenta personal. Un proyecto con un único propietario conlleva más riesgo de continuidad que uno respaldado por una organización.
Ecosistemas de paquetes
| Registro | Paquete | Versión | Descargas / mes | Versiones | Última publicación | Etiquetas |
|---|---|---|---|---|---|---|
| npm | ultracode-for-codex | 0.6.1 | 2679 | 21 | hace 5 días | codexworkflowcliautomationsubagents |
Métricas por categoría
Vitalidad
¿Está vivo el proyecto: se escribe código y se publican versiones?
72
Actividad de desarrollo
54Moderado
Cómo se puntúa
| 36/36 | Recencia de push — último push hace 5 días |
| 2.8/36 | Cadencia de commits — 4/52 semanas con commits |
| 14.9/18 | Volumen de commits — 45 commits en el último año |
| 0/10 | OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully |
Datos de entrada utilizados
| commits_last_year | 45 |
| human_commit_share | 1 |
| days_since_last_push | 5 |
| active_weeks_last_year | 4 |
Disciplina de publicación
100Excelente
Cómo se puntúa
| 27/27 | Publica versiones — 4 versiones publicadas |
| 36/36 | Recencia de las versiones — última versión hace 8 días |
| 27/27 | Cadencia de publicación — una versión cada ~3,2 días |
| 0/10 | OpenSSF Scorecard: Signed-Releases — sin datos |
Datos de entrada utilizados
| releases_count | 4 |
| latest_release_tag | v0.5.0 |
| releases_from_tags | no |
| days_since_latest_release | 8 |
| mean_days_between_releases | 3,2 |
Excluidos de la puntuación (sin datos o no aplicable): OpenSSF Scorecard: Signed-Releases. Los pesos restantes se han renormalizado.
Comunidad y Adopción
¿Tiene el proyecto usuarios, descargas, atención y unas condiciones acogedoras para quienes contribuyen?
30
Popularidad y adopción
1Crítico
Cómo se puntúa
| 0/60 | Estrellas — 2 estrellas |
| 0/25 | Forks — 0 forks |
| 0/15 | Observadores — 0 observadores |
Datos de entrada utilizados
| forks | 0 |
| stars | 2 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Salud de la comunidad
44En riesgo
Cómo se puntúa
| 22.5/22.5 | README |
| 16.9/22.5 | Licencia — archivo de licencia presente, no es una licencia reconocida |
| 0/18 | Guía CONTRIBUTING |
| 0/13.5 | Código de conducta |
| 0/7.2 | Plantilla de issues |
| 0/6.3 | Plantilla de PR |
Datos de entrada utilizados
| has_readme | sí |
| has_license | sí |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Adopción en el ecosistema (descargas)
57Moderado
Cómo se puntúa
| 45.7/80 | Descargas mensuales — 2679 descargas/mes en npm |
| 0/20 | Dependientes en el registro — no lo informa este ecosistema |
Datos de entrada utilizados
| packages | ultracode-for-codex |
| dependents | — |
| ecosystems | npm |
| total_downloads | — |
| monthly_downloads | 2679 |
Excluidos de la puntuación (sin datos o no aplicable): Dependientes en el registro. Los pesos restantes se han renormalizado.
Sostenibilidad y Gobernanza
¿Sobrevivirá el proyecto a sus personas: factor bus, capacidad de respuesta, quién lo respalda y mantenimiento del paquete?
50
Cómo se puntúa
| 9/54 | Factor bus — la mitad de los commits recae en 1 contribuyente(s) |
| 0/22.5 | Distribución de commits — el principal contribuyente firma el 100% de los commits |
| 1.4/13.5 | Amplitud de contribuyentes — 1 contribuyentes |
| 0/10 | OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
Datos de entrada utilizados
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
Cómo se puntúa
| 0/46.8 | Resolución de issues — sin issues o sin datos |
| 38.2/38.3 | Aceptación de PR — 22/22 PR decididos fusionados |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
Datos de entrada utilizados
| merged_prs | 22 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 0 |
Excluidos de la puntuación (sin datos o no aplicable): Resolución de issues. Los pesos restantes se han renormalizado.
Propiedad y custodia
36En riesgo
Cómo se puntúa
| 10/30 | Respaldo de la propiedad — cuenta personal (usuario) |
| 0/20 | Dominio verificado — no aplicable a cuentas de usuario |
| 5.6/25 | Alcance del propietario — 5 seguidores de kangminlee-maker |
| 12.9/25 | Trayectoria — 31 repos públicos, cuenta de ~0 años |
Datos de entrada utilizados
| followers | 5 |
| owner_type | User |
| is_verified | — |
| owner_login | kangminlee-maker |
| public_repos | 31 |
| account_age_days | 350 |
Excluidos de la puntuación (sin datos o no aplicable): Dominio verificado. Los pesos restantes se han renormalizado.
Mantenimiento de paquetes
100Excelente
Cómo se puntúa
| 25/25 | Publicado y resoluble — 1 paquete(s) en npm |
| 35/35 | Recencia de publicación — última publicación hace 5 días |
| 20/20 | Historial de versiones — 21 versiones en el registro |
| 20/20 | No obsoleto — activo, ni obsoleto ni retirado |
Datos de entrada utilizados
| packages | ultracode-for-codex |
| ecosystems | npm |
| any_deprecated | no |
| min_days_since_publish | 5 |
Calidad de Ingeniería
¿Existen unas prácticas mínimas de ingeniería y documentación?
76
Prácticas de ingeniería
76Bueno
Cómo se puntúa
| 24/24 | Flujos de trabajo de CI — 1 flujo(s) de trabajo |
| 24/24 | Pruebas presentes |
| 16/16 | Configuración de linter — eslint.config.mjs |
| 0/9.6 | Hooks de pre-commit |
| 0/6.4 | .editorconfig |
| 12/20 | OpenSSF Scorecard: CI-Tests — 15 out of 22 merged PRs checked by a CI test -- score normalized to 6 |
Datos de entrada utilizados
| has_ci | sí |
| has_tests | sí |
| has_editorconfig | no |
| has_linter_config | sí |
| has_precommit_config | no |
Documentación
75Bueno
Cómo se puntúa
| 30/30 | README |
| 25/25 | Directorio de documentación |
| 0/15 | Sitio de documentación / página del proyecto |
| 10/10 | Descripción del repositorio |
| 0/10 | Topics |
| 10/10 | Wiki |
Datos de entrada utilizados
| topics | — |
| has_wiki | sí |
| homepage | — |
| has_readme | sí |
| has_docs_dir | sí |
| has_description | sí |
Seguridad
¿Son sólidas las prácticas visibles de seguridad y de cadena de suministro, sin exposición jurisdiccional de alto riesgo sin resolver?
41
Postura de seguridad
41En riesgo
Cómo se puntúa
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 1.5/2.5 | CI-Tests — 15 out of 22 merged PRs checked by a CI test -- score normalized to 6 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 0/2.5 | Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.2/2.5 | Licencia — license file detected |
| 0/7.5 | Maintained — project was created within the last 90 days. Please review its contents carefully |
| 0/5 | Packaging — sin datos |
| 1.5/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 3 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — sin datos |
| 7.5/7.5 | Token-Permissions — GitHub workflow tokens follow principle of least privilege |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Datos de entrada utilizados
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 4,1 |
Excluidos de la puntuación (sin datos o no aplicable): packaging, signed_releases. Los pesos restantes se han renormalizado.
Preparación para IA
¿Hasta qué punto está el repositorio preparado para desarrollarse y mantenerse con agentes de codificación de IA? Es una insignia independiente y experimental — peso 0,0, de modo que se presenta por separado y no afecta a la puntuación de salud global.
63
Contexto y guía para agentes
40En riesgo
Cómo se puntúa
| 0/45 | Instrucciones para agentes — sin CLAUDE.md / AGENTS.md / reglas de editor |
| 0/15 | Documentación legible por máquinas (llms.txt) |
| 40/40 | Historial de commits legible — 36 de 45 commits humanos declaran su intención (asunto estructurado o cuerpo explicativo) |
Datos de entrada utilizados
| has_llms_txt | no |
| legible_history_share | 0,8 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Cómo se puntúa
| 0/18 | Arranque con un solo comando |
| 22/22 | Pruebas automatizadas |
| 11/11 | Configuración de lint / formato — eslint.config.mjs |
| 11/11 | Verificación estática de tipos — tsconfig.json |
| 10/10 | Entorno reproducible — lockfile |
| 10/10 | Práctica demostrada con agentes — 35 de los últimos 45 commits con autoría o crédito de agente |
| 0/8 | Mantenimiento automatizado — no se observan actualizaciones automáticas de dependencias |
| 3/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 3 |
Datos de entrada utilizados
| has_nix | no |
| has_tests | sí |
| lockfiles | package-lock.json |
| has_dockerfile | no |
| typed_language | sí |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | sí |
| typecheck_configs | tsconfig.json |
| agent_commit_share | 0,778 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
Legibilidad del código para modelos
96Excelente
Cómo se puntúa
| 45/45 | Código verificable por tipos — TypeScript (tipado estático) |
| 51.1/55 | Tamaños de archivo manejables — 4/57 archivos fuente de más de 60 KB |
Datos de entrada utilizados
| primary_language | TypeScript |
| largest_source_bytes | 283.225 |
| source_files_sampled | 57 |
| oversized_source_files | 4 |
Datos clave
2estrellas de GitHub
1contribuidores
45commits en los últimos 12 meses
5días desde el último push
4versiones publicadas
1factor bus
0issues abiertas
npmecosistemas de paquetes
Advertencias de recopilación de datos
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
- deps.dev does not index npm:ultracode-for-codex@0.6.1; advisories assessed against the repository dependency graph instead
Más detalle
OpenSSF Scorecard 4.1 / 10
4.1agregado
Evaluación de seguridad independiente y agnóstica en cuanto a herramientas, procedente del proyecto de código abierto OpenSSF Scorecard. Cada comprobación premia una práctica de seguridad, no la herramienta de un proveedor concreto. Las comprobaciones que Scorecard no pudo determinar se marcan como n/d y se excluyen de la puntuación de seguridad (nunca se cuentan como cero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 6 | CI-Tests | 15 out of 22 merged PRs checked by a CI test -- score normalized to 6 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 0 | Contributors | project has 0 contributing companies or organizations -- score normalized to 0 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 9 | License | license file detected |
| 0 | Maintained | project was created within the last 90 days. Please review its contents carefully |
| n/d | Packaging | packaging workflow not detected |
| 3 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 3 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| n/d | Signed-Releases | no releases found |
| 10 | Token-Permissions | GitHub workflow tokens follow principle of least privilege |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
Todas las dependencias no recopilado
No fue posible recopilar el conjunto de dependencias resuelto para este informe: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Informe JSON sin procesar legible por máquina
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 982,
"has_wiki": true,
"homepage": null,
"languages": {
"HTML": 23262,
"JavaScript": 433222,
"TypeScript": 441992
},
"pushed_at": "2026-07-18T10:37:40Z",
"created_at": "2026-06-19T04:42:59Z",
"owner_type": "User",
"updated_at": "2026-07-18T10:37:39Z",
"description": "Dynamic workflows redesigned for Codex, with parallel subagents, visible progress, and an optional local CLI runtime.",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "main",
"license_spdx_raw": "NOASSERTION",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript",
"JavaScript"
]
},
"owner": {
"blog": null,
"name": "Kangmin Lee",
"type": "User",
"login": "kangminlee-maker",
"company": null,
"location": null,
"followers": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/225123635?v=4",
"created_at": "2025-08-07T04:27:11Z",
"is_verified": null,
"public_repos": 31,
"account_age_days": 350
},
"license": {
"state": "custom",
"spdx_id": null,
"raw_spdx": "NOASSERTION",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2026-07-15T14:52:00Z"
},
{
"tag": "v0.4.4",
"kind": "patch",
"published_at": "2026-07-08T00:42:17Z"
},
{
"tag": "v0.4.3",
"kind": "patch",
"published_at": "2026-07-07T01:03:40Z"
},
{
"tag": "v0.4.2",
"kind": "patch",
"published_at": "2026-07-06T00:45:57Z"
}
],
"recent_commits": [
{
"oid": "218a1b974ff60a9a4fd1487b28c3fa705767ab29",
"body": "Two prompt-size fixes since 0.6.0, both diagnosed from a real failed run\n(coloso-video-l10n) where a large `task` design-review aborted with\nworkflow_journal_write_failed at the aggregating synthesis agent:\n- the journal now audit-bounds an oversized agent prompt instead of aborting the run\n (the a\n[…]\n E2E) + lint + typecheck green; publish --dry-run\nprojects the 0.6.1 tarball (52 files) and passes the packaging provenance audit.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Release 0.6.1 (#22)",
"author_name": "Kangmin Lee",
"author_login": "kangminlee-maker",
"committed_at": "2026-07-18T10:37:35Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "2f3eb5165c58174ea4165dabf37e785c9818160a",
"body": "…oon every prompt (#21)\n\nThe `### Git Status` section of the workspace context was unbounded: the context byte\ncap (maxBytes) only ever applied to the included-file blocks, while the status list from\n`git status --short --untracked-files=all` was embedded verbatim. In a repo with many\nuntracked file\n[…]\n note and leading entries preserved; falsifiability — disabling the bound fails\nthe test; test:all 160/160 + lint + installed E2E.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(workspace-context): bound the git-status section so it can't ball…",
"author_name": "Kangmin Lee",
"author_login": "kangminlee-maker",
"committed_at": "2026-07-18T00:22:27Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f9fa9abb4cc67a6c923de0d0f082918c940f2c7d",
"body": "…un (#20)\n\nA run died with workflow_journal_write_failed (\"before agent start\") when an agent's\nprompt exceeded the journal's 512 KiB MAX_STRING_BYTES cap. Confirmed against a real\nfailed run (coloso-video-l10n): a `task` design-review with ~490 KiB per-agent prompts\n(95.8% of the cap) failed at the\n[…]\no\nre-dispatch; falsifiability — disabling truncation reproduces the exact original error;\ntest:all 161/161 + lint + installed E2E.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(journal): bound oversized agent prompts instead of aborting the r…",
"author_name": "Kangmin Lee",
"author_login": "kangminlee-maker",
"committed_at": "2026-07-18T00:19:28Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d346fa66c52fc03c740411d772e7acd00e52d8fc",
"body": "… (#19)\n\nPrepend `npm run lint` to the `test` script so it runs fail-fast before build, and\ntherefore also gates `test:all` (= `npm test && test:e2e`) and `prepublishOnly`\n(= `test:all`). A lint error now fails the whole test chain before the suite runs.\n\nCI: the separate `Lint` step is now redundan\n[…]\nbility —\nan unused non-`_` const makes `npm test` exit 1 at the lint step with zero test-suite\nlines (fails fast), restored clean.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(lint): run lint as part of npm test / test:all (and prepublish)…",
"author_name": "Kangmin Lee",
"author_login": "kangminlee-maker",
"committed_at": "2026-07-16T06:12:30Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4d537a1afeaf9256caac300e17a4d9ced980fb4f",
"body": "… gate (#18)\n\nOwner chose the full typescript-eslint toolchain. Adds eslint + typescript-eslint +\n@eslint/js as devDependencies (dev-only — the shipped package is byte-identical, still\n52 files) with a flat config linting the product source src/**/*.ts. dist/, node_modules,\nand the .mjs test/script/\n[…]\nnpm run lint exit 0; typecheck clean; test:all 159/159 + installed E2E; publish\ndry-run unchanged (52 files, no dev-tooling leak).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(lint): add ESLint (typescript-eslint flat config) over src + CI…",
"author_name": "Kangmin Lee",
"author_login": "kangminlee-maker",
"committed_at": "2026-07-16T06:06:04Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3344c3cd2877f20890a42d4bba9d64cc1c670b23",
"body": "…version (#17)\n\n- IMPLEMENTATION_MAP.html was stale since PR #4 (all 0.4.5-era). Rebuild it as a\n current-state dashboard per the implementation-map guide: first-viewport tiles\n (goal=0.6.0 shipped/parity complete, health, authority risk, concurrent-nesting\n decision), the SVG blueprint's Codex-o\n[…]\ndependency changes).\n\nNo runtime/source change. HTML verified well-formed (balanced tags); no stale\n0.4.5/0.5.0 references remain.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(docs): refresh IMPLEMENTATION_MAP to 0.6.0 + sync package-lock …",
"author_name": "Kangmin Lee",
"author_login": "kangminlee-maker",
"committed_at": "2026-07-16T05:55:48Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "43860460c9196ce203982a7c8c9470895e259426",
"body": "The capability-expansion stream + PG-NEST completion since 0.5.0: opt-in agent web\nsearch (--agent-web-search), worktree-confined subagent file writes\n(--agent-file-write), named-allowlist MCP servers (--agent-mcp), native per-agent\ntypes resolved from ~/.codex/agents (--agent-types); plus nested wo\n[…]\n026-07-16, and refreshes\ndocs/provenance-audit.md to the 0.6.0 line.\n\ntest:all (unit 159/159 + installed E2E) and typecheck green.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Release 0.6.0 (#16)",
"author_name": "Kangmin Lee",
"author_login": "kangminlee-maker",
"committed_at": "2026-07-16T05:10:17Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "bf43301bce7b1afbc9b25d55ac46eb865310ad43",
"body": "…r scope (PG-NEST v2-B) (#15)\n\nNested children may now run in parallel (parallel([() => workflow('a'),\n() => workflow('b')])), lifting the sequential-only limit. Closes the second\nPG-NEST follow-on.\n\nThe VM value projector was a single shared slot `ctx.toVmValue`, captured\nper-promise in trackWorkfl\n[…]\nren both run) + 159/159 unit +\ninstalled e2e; N1-N9 sequential tests stay green. Design:\ndocs/ultracode-p12-concurrent-nesting.md.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(nested): concurrent nested workflow() via per-execution projecto…",
"author_name": "Kangmin Lee",
"author_login": "kangminlee-maker",
"committed_at": "2026-07-16T05:04:22Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ce86a4de974528fce61e5c2506b1eaae3615b4bf",
"body": "…d permission (PG-NEST v2-A) (#14)\n\nNested `workflow(name)` now resolves project/user/plugin workflows (same\nproject→user→plugin→built-in precedence as a top-level launch), not just built-ins.\nA nested child from a permission-required source is gated by the existing permission\nRECORD: it runs only i\n[…]\n fails loud, real cross-process permission store) +\n159/159 unit + installed e2e. Design: docs/ultracode-p11-nested-full-scope.md.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(nested): full-scope name sources for workflow() with record-gate…",
"author_name": "Kangmin Lee",
"author_login": "kangminlee-maker",
"committed_at": "2026-07-16T04:43:21Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c523a997d4aeb609dd15cc31c356ba2313a29df6",
"body": "…gent model/effort/persona (#13)\n\nPG-AGENTTYPE v1. `agent(prompt, { agentType: \"reviewer\" })` resolves a named type\nfrom the user's native Codex registry (`~/.codex/agents/*.toml`, keyed by filename\nstem) and applies that type's model, model_reasoning_effort, and\ndeveloper_instructions (persona) to \n[…]\nail-loud\nwithout) + falsifiability (call-key, ultra-ban) + 155/155 unit + installed e2e.\nDesign: docs/ultracode-p10-agent-type.md.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(agent-type): opt-in native agent types (--agent-types) for per-a…",
"author_name": "Kangmin Lee",
"author_login": "kangminlee-maker",
"committed_at": "2026-07-16T03:29:06Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ba7f7f7ba7359c6005fb1a4d5cc6c001a31fdb67",
"body": "…(#12)\n\n* feat(mcp): opt-in named-allowlist subagent MCP servers (--agent-mcp)\n\nLet workflow subagents call the user's own Codex MCP servers, scoped to a\nnamed allowlist and default-off (stream step (c)). When one or more server\nnames are given, exactly those [mcp_servers.NAME] sections are copied v\n[…]\nted by the\nchatgpt-codex-connector bot on PR #12.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(mcp): opt-in named-allowlist subagent MCP servers (--agent-mcp) …",
"author_name": "Kangmin Lee",
"author_login": "kangminlee-maker",
"committed_at": "2026-07-16T01:04:11Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "8490750f0b7cb7811ff21fcb3aa9f1b0a67b676a",
"body": "…e_file/str_replace) (#11)\n\nStream step (a): make worktree isolation's writes functional — previously a\nwrite-permitted sandbox with NO write tool (probed: agents could not write). Adds a\nrun-level gate workflow.agentFileWrite / --agent-file-write (default disabled). When\nenabled, a worktree-isolate\n[…]\nult-on flip). See docs/ultracode-p8-agent-file-write.md.\n\n\nClaude-Session: https://claude.ai/code/session_01XNpL8CEiGYL9FX3wZGRW7g\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(file-write): opt-in worktree-confined subagent file writes (writ…",
"author_name": "Kangmin Lee",
"author_login": "kangminlee-maker",
"committed_at": "2026-07-15T23:39:45Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "51b7c252552b2090d2ee05e2f0519859c433adfa",
"body": "…h (default-off) (#10)\n\nFirst step of the capability-expansion stream: let workflow subagents use the native\nCodex web_search tool. Run-level gate `workflow.agentWebSearch` / `--agent-web-search`\n(disabled|enabled), default disabled. When enabled, a single webSearchConfigValue()\nhelper flips web_sea\n[…]\norker model). See\ndocs/ultracode-p7-agent-web-search.md.\n\n\nClaude-Session: https://claude.ai/code/session_01XNpL8CEiGYL9FX3wZGRW7g\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(web-search): opt-in subagent web_search behind --agent-web-searc…",
"author_name": "Kangmin Lee",
"author_login": "kangminlee-maker",
"committed_at": "2026-07-15T17:42:45Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4e03ef6b67e79bfffea76cdf9003feee35f65d58",
"body": "Workflow parity accumulation since 0.4.5: dispatch core (agent concurrency, token budget,\nfailure taxonomy), worktree retention, pipeline/parallel contract correctness, nested\nworkflow(), and edit-and-iterate resume; plus the E2E reconciliation and CI added in the\npreceding fix. Bumps the package ve\n[…]\n:all (unit 130/130 + installed E2E) and typecheck green.\n\n\nClaude-Session: https://claude.ai/code/session_01XNpL8CEiGYL9FX3wZGRW7g\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Release 0.5.0 (#9)",
"author_name": "Kangmin Lee",
"author_login": "kangminlee-maker",
"committed_at": "2026-07-15T14:47:20Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3227e20798e7a880729117b4f16fcc0cb2fce0cd",
"body": "…ors, add CI (#8)\n\nThe packaged E2E gate (test:all / prepublishOnly) had gone red unnoticed: there is no CI, and\nthe per-PR `npm test` skips the E2E, so it had not run for several PRs. Two causes:\n\n1. Pre-existing since the xhigh->medium default-effort change: the fake Codex encodes effort into\n i\n[…]\nedicated\nfollow-up.\n\ntest:all + typecheck green locally.\n\n\nClaude-Session: https://claude.ai/code/session_01XNpL8CEiGYL9FX3wZGRW7g\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(e2e): reconcile default-effort assertions + PG-ITER resume select…",
"author_name": "Kangmin Lee",
"author_login": "kangminlee-maker",
"committed_at": "2026-07-15T14:36:32Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3eea49dcd60ed88375aa5a93a73b5639ccdb34d5",
"body": "…with an edited script (#7)\n\n(a) The CLI surfaces where each run's workflow script is persisted: the started line prints\n`script=<path>`, and an `[iterate]` hint (jsonl `workflow.iterate.ready`) on both completion\nand terminal failure prints the path, a copy-edit-resume command, and `--cwd <cwd>`.\n\n\n[…]\nility-proven. See docs/ultracode-p6-edit-and-iterate.md.\n\n\nClaude-Session: https://claude.ai/code/session_01XNpL8CEiGYL9FX3wZGRW7g\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "PG-ITER: edit-and-iterate DX — surface persisted scriptPath + resume …",
"author_name": "Kangmin Lee",
"author_login": "kangminlee-maker",
"committed_at": "2026-07-15T13:36:05Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6d54ba9d6ad7bb4d69967930a84f0dcfa7387d5a",
"body": "…ult-off) (#6)\n\nImplements the native Workflow `workflow(nameOrRef, args?)` hook (PG-NEST), v1\nscoped to built-in names and inline `{ script }` children, behind a default-off\n`workflow.nestedWorkflows` setting (`--nested-workflows`). When disabled, the hook\nkeeps its previous throwing stub, so exist\n[…]\nff throws.\n\nDesign: docs/ultracode-p5-nested-workflow.md\n\n\nClaude-Session: https://claude.ai/code/session_01XNpL8CEiGYL9FX3wZGRW7g\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Workflow parity: nested workflow() for built-in/inline children (defa…",
"author_name": "Kangmin Lee",
"author_login": "kangminlee-maker",
"committed_at": "2026-07-15T11:32:01Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "938f461731a6d82ea411c6a8c66288c1034330d0",
"body": "…through, and a 4096-item cap on parallel()/pipeline() (#5)\n\nPG-PIPE: pipeline() stages now receive (prevResult, originalItem, index),\nmatching the native Workflow contract (previously only prevResult was passed).\nA stage that returns null/undefined now passes that value onward to the next\nstage; on\n[…]\nms).\n\nDesign: docs/ultracode-p3f-contract-correctness.md\n\n\nClaude-Session: https://claude.ai/code/session_01XNpL8CEiGYL9FX3wZGRW7g\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Workflow parity: pipeline() (prev, item, index) signature + null pass…",
"author_name": "Kangmin Lee",
"author_login": "kangminlee-maker",
"committed_at": "2026-07-15T10:16:13Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "19ad88a2efb4bd4b32cae917c40d5e73ce287284",
"body": "…atch core (concurrency pool, failure taxonomy, spend ceiling) (#4)\n\n* Add failure-reason retry classification and cancellable retry backoff (G4)\n\nClassify workflow failure reasons for retry from a single source of truth:\nisRetryableFailureReason() over an allowlist {workflow_failed,\nworkflow_agent_\n[…]\nred-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01XNpL8CEiGYL9FX3wZGRW7g\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Workflow parity: retry classification, worktree reclamation, and disp…",
"author_name": "Kangmin Lee",
"author_login": "kangminlee-maker",
"committed_at": "2026-07-15T09:09:44Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "630bd5f32df33be0128617d94c7a2f3369a3d4b0",
"body": "… (#3)\n\nA live two-arm effort A/B on gpt-5.6-sol (docs/20260714-effort-quality-ab.md)\nshows review/analysis quality is tier-independent: medium, high, and xhigh all\nreach ~96-100% bug detection with 0 false positives and equal blind-judge fix\nquality (3/3) on both single-module local bugs (N=15/cell\n[…]\nudge pipeline) and the onto-mining scripts/taxonomy. Raw mined\nfindings (other projects' private review records) are gitignored, not published.\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Lower default reasoning effort xhigh->medium after review-quality A/B…",
"author_name": "Kangmin Lee",
"author_login": "kangminlee-maker",
"committed_at": "2026-07-14T00:55:10Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "9de92cdb6ce9c97676c7130e5d887b412f7b0d45",
"body": "Use the live Codex model catalog as runtime authority for model and reasoning-effort selection, propagate run-level effort defaults, and update setup diagnostics, workflows, documentation, and verification coverage.",
"is_bot": false,
"headline": "Prepare 0.4.5 catalog-aware model profiles (#2)",
"author_name": "Kangmin Lee",
"author_login": "kangminlee-maker",
"committed_at": "2026-07-13T05:50:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "63f9f291fa9f9065900da509a1f964523f23ca27",
"body": "Bump to 0.4.4 and close the changelog for the release: W1 change-evidence\nrename, W2 general example workflows, and the setup/doctor + Codex\nprompting DX (b0c3f52). W3 (task effort A/B) is measurement-only — no code\nchange; it lives in docs/, not the changelog. Update the provenance audit\nto the 0.4\n[…]\nan evidence unchanged)\nand refresh the implementation map.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ekn57eLvkvcUxvfQpmUxA3",
"is_bot": false,
"headline": "Prepare 0.4.4 release",
"author_name": "kangminlee-maker",
"author_login": "kangminlee-maker",
"committed_at": "2026-07-07T13:26:02Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "817b5ba02fd8ca8bb6f575f210cdd4eff4764731",
"body": "…g down)\n\nLive A/B (task at xhigh vs high, 15+15 runs on real Codex): identical\ntoken cost (median 40,200 vs 40,174), latency (153s vs 155s), agent count\n(9 vs 9), and quality (high found the planted bug 15/15). task cost is\ndriven by the planner's agent count, not per-agent effort, so lowering the\n\n[…]\nhe changelog\nexisted), and refresh the implementation map.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ekn57eLvkvcUxvfQpmUxA3",
"is_bot": false,
"headline": "Record W3 task effort A/B: keep xhigh (measured, no benefit to tierin…",
"author_name": "kangminlee-maker",
"author_login": "kangminlee-maker",
"committed_at": "2026-07-07T13:18:44Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b0c3f52fb192dcaaac54f281f384feebb1ca4ab4",
"body": "Adopt patterns from openai/codex-plugin-cc, adapted for the current\nGPT-5.5 Codex model family:\n\n- setup: new readiness doctor (package, Codex CLI, app-server, auth,\n skills). Spawns codex app-server for a real account/read auth probe;\n JSON by default, --plain for humans; exits non-zero when a de\n[…]\ned\nE2E, and a live setup run against a real Codex install.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01BvqyVwCsJw61keTMzTHC23",
"is_bot": false,
"headline": "Add setup doctor, Codex prompting reference, and DX improvements",
"author_name": "kangminlee-maker",
"author_login": "kangminlee-maker",
"committed_at": "2026-07-07T13:07:33Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "061a5732a1ffafbb9223625fdf635db630706e31",
"body": "Rebalance the project's identity toward \"general workflow runtime, code-review\nis one built-in\" without adding maintained runtime surface. Add three runnable,\nnon-review example workflows under references/example-workflows/ on the generic\nhost API: research-fan-out (fan-out-and-synthesize), migrate-\n[…]\n vs task machinery asymmetry is intentional, not neglect).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ekn57eLvkvcUxvfQpmUxA3",
"is_bot": false,
"headline": "W2: general example workflows + general-first identity reframe",
"author_name": "kangminlee-maker",
"author_login": "kangminlee-maker",
"committed_at": "2026-07-07T05:17:39Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "26bf61b774cfa672cbb65cfba70c94691b0f5595",
"body": "…ence\"\n\nThe general workspaceContext diff-evidence primitive was named around code\nreview (buildReviewEvidenceContext / ReviewEvidenceContext / \"### Review\nEvidence\"), implying it was review-only. It is general — any workflow that\nreasons over the working-tree/committed change can use it (the consum\n[…]\ny is prompt-inclusive — same class as any\ngit-state drift.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ekn57eLvkvcUxvfQpmUxA3",
"is_bot": false,
"headline": "W1: rename workspaceContext concept \"review evidence\" -> \"change evid…",
"author_name": "kangminlee-maker",
"author_login": "kangminlee-maker",
"committed_at": "2026-07-07T05:17:29Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7c1fff90d861ba56c16712ab54b92c7d632f1e9b",
"body": "Bump the package to 0.4.3 for the non-destructive workflow heartbeat.\nUpdate the provenance audit to the 0.4.3 release line (project-authored\nchange only; marker-scan evidence unchanged) and the implementation map.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ekn57eLvkvcUxvfQpmUxA3",
"is_bot": false,
"headline": "Prepare 0.4.3 release",
"author_name": "kangminlee-maker",
"author_login": "kangminlee-maker",
"committed_at": "2026-07-06T07:09:37Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "9915815199115afb237364477178ac08232daf42",
"body": "Under the default unbounded (timeout 0) workflow deadline, a genuinely\nstuck run had no liveness signal, because setting timeout 0 also disables\nthe per-agent stall timer. Emit a workflow.heartbeat progress event every\nworkflow.heartbeatMs (default 120000 ms) while a run is in flight,\ncarrying elaps\n[…]\n00s run emitted 50 ordered heartbeats and still completed.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ekn57eLvkvcUxvfQpmUxA3",
"is_bot": false,
"headline": "Add non-destructive workflow heartbeat for long or stuck runs",
"author_name": "kangminlee-maker",
"author_login": "kangminlee-maker",
"committed_at": "2026-07-06T04:27:48Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "e9b8a4b057395efae0cee0a8fb3aaccf596ae6ab",
"body": "Measure runtime reliability of the published 0.4.2 across 53 live runs\nagainst real Codex (codex-cli 0.142.5): task x15, code-review high x15,\ncode-review xhigh x15, and kill-then-resume x8. Result: zero hard\nfailures (no terminal error, hang, or schema break); overall completion\n51/53 (96.2%). code\n[…]\nte the\nimplementation map health/risk/next-decision tiles.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ekn57eLvkvcUxvfQpmUxA3",
"is_bot": false,
"headline": "Add 0.4.2 live runtime reliability study",
"author_name": "kangminlee-maker",
"author_login": "kangminlee-maker",
"committed_at": "2026-07-06T03:46:11Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b1fcf20a8cf0d6868f5118dac896e495a7f82b8b",
"body": "…doff\n\nF1/F2/F3 re-verified against installed 0.4.2 via a live re-run of the F1 repro (job_2c3ce94b): pre-agent failure, cause+remediation diagnostic, and a parseable ultracode.workflow.failure result.json. Adds a Status line and a Verification section; the original finding/spec record is retained.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01QpWPxAfg2aWUkjv3Pu7HmB",
"is_bot": false,
"headline": "Record 0.4.2 resolution and live verification in failure-contract han…",
"author_name": "kangminlee-maker",
"author_login": "kangminlee-maker",
"committed_at": "2026-07-06T01:03:29Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ce175769b4b835eeabdd310d1a8d05b15c73a41c",
"body": "Show the @latest upgrade commands for project and global installs and\npoint upgraders at re-running skills --install so the installed Codex\nskill commands track the package version.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01UWWpjPt8dzcNJ1JhSY2uY8",
"is_bot": false,
"headline": "Document the upgrade path in the README install section",
"author_name": "kangminlee-maker",
"author_login": "kangminlee-maker",
"committed_at": "2026-07-06T00:45:23Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "3d8039aa104844dc0443d6e587ba2e9e73eb25e2",
"body": "Bump the package to 0.4.2 for the runtime failure-contract DX fixes\n(total failure result channel, pre-agent code-review precondition,\nthree-part rejection diagnostics). Document the ultracode.workflow.failure\nstdout/result.json contract and the code-review clean-tree precondition in\nULTRACODE_INSTA\n[…]\nse\nline (project-authored changes only; marker-scan evidence unchanged).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01UWWpjPt8dzcNJ1JhSY2uY8",
"is_bot": false,
"headline": "Prepare 0.4.2 release",
"author_name": "kangminlee-maker",
"author_login": "kangminlee-maker",
"committed_at": "2026-07-06T00:34:38Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c6b341fd4633e5661b4fb7815c022eb2eecf047b",
"body": "…nditions\n\nImplement the three runtime failure-contract fixes from the 2026-07-05\nhandoff (docs/20260705-runtime-failure-contract-dx-handoff.md):\n\n- P3/F3: run writes an ultracode.workflow.failure record to stdout on any\n terminal failure or abort, so background result.json always parses;\n status \n[…]\ngments. Docs aligned in both SKILL.md files and\nIMPLEMENTATION_MAP.html.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01UWWpjPt8dzcNJ1JhSY2uY8",
"is_bot": false,
"headline": "Make the failure result channel total and pre-agent code-review preco…",
"author_name": "kangminlee-maker",
"author_login": "kangminlee-maker",
"committed_at": "2026-07-05T23:08:17Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ad7d0cfb42fdd358ba2a1bc93dd1627f7d4d6f0b",
"body": "The installed Codex skill folders never updated themselves, so sessions kept\nrouting on stale SKILL.md contracts. ultracode-for-codex skills reports\ncurrent/stale/missing/unmanaged per skill and --install syncs the packaged\nfolders into CODEX_HOME; postinstall prints a staleness notice, and the\nhybr\n[…]\nd skill's capability probe now surfaces skill drift at the point of use.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01QVwiXTCW3GF72WVZAcRRHo",
"is_bot": false,
"headline": "Add skills command with install sync and postinstall staleness notice",
"author_name": "kangminlee-maker",
"author_login": "kangminlee-maker",
"committed_at": "2026-07-05T13:21:10Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b8dc337ddd5201a94f293557a298d04fa0365ace",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_014Spe7nQR2VkNzh25WbZCGp",
"is_bot": false,
"headline": "Highlight recovery and authoring flows in README",
"author_name": "kangminlee-maker",
"author_login": "kangminlee-maker",
"committed_at": "2026-07-05T13:05:19Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "aec59fad7ee21d27c1e02ac65a5dd3df9595f604",
"body": "Per-agent effort/model options, failed/interrupted-run resume with journal-first\ndiscovery and liveness guard, code-review funnel tiering, run --validate, and\nthe hybrid native skill contract. Live-verified against Codex: per-turn\noverride enforcement, kill-then-resume, and the finder-tier contrast run.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_014Spe7nQR2VkNzh25WbZCGp",
"is_bot": false,
"headline": "Implement P4 hybrid orchestration and prepare 0.4.0 release",
"author_name": "kangminlee-maker",
"author_login": "kangminlee-maker",
"committed_at": "2026-07-05T12:59:22Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "4b7b68b751205ac44fdbf31e17666db540ddbbe2",
"body": null,
"is_bot": false,
"headline": "Prepare 0.3.4 release",
"author_name": "kangminlee-maker",
"author_login": "kangminlee-maker",
"committed_at": "2026-06-23T06:52:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "76e54e646518a8bee5287a575d51cc2b7b0ace71",
"body": null,
"is_bot": false,
"headline": "Store Ultracode runtime state globally",
"author_name": "kangminlee-maker",
"author_login": "kangminlee-maker",
"committed_at": "2026-06-23T06:44:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bebe3d62cc9fd73c65e4c3fab3b03422024d6777",
"body": null,
"is_bot": false,
"headline": "Implement dynamic code review workflow",
"author_name": "kangminlee-maker",
"author_login": "kangminlee-maker",
"committed_at": "2026-06-23T00:14:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9790f20c10e0a58feaf07d8a1f24b7b45c4e80c3",
"body": null,
"is_bot": false,
"headline": "Align README with repository description",
"author_name": "kangminlee-maker",
"author_login": "kangminlee-maker",
"committed_at": "2026-06-22T09:55:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "30d6274d57bba1c2bb6b39852e74e4268fd0bb1e",
"body": null,
"is_bot": false,
"headline": "Refocus README for users",
"author_name": "kangminlee-maker",
"author_login": "kangminlee-maker",
"committed_at": "2026-06-22T09:50:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3946f8ffd04a65cf390c39f4720c1e88330d3646",
"body": null,
"is_bot": false,
"headline": "Release 0.3.2 progress visual routing",
"author_name": "kangminlee-maker",
"author_login": "kangminlee-maker",
"committed_at": "2026-06-22T09:33:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ed47872a0cdb1e411158b3ccb77f90dbd6b2926a",
"body": null,
"is_bot": false,
"headline": "Release 0.3.1 skill command split",
"author_name": "kangminlee-maker",
"author_login": "kangminlee-maker",
"committed_at": "2026-06-22T09:11:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c3734d8ac4f49088b3ff2fd250ea919d93ae86f3",
"body": null,
"is_bot": false,
"headline": "Release 0.3.0 background controls",
"author_name": "kangminlee-maker",
"author_login": "kangminlee-maker",
"committed_at": "2026-06-22T08:02:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56d3c73fb93b75673f54d909981eaadbfe5d0bd0",
"body": null,
"is_bot": false,
"headline": "Release 0.2.6 dynamic phase planning",
"author_name": "kangminlee-maker",
"author_login": "kangminlee-maker",
"committed_at": "2026-06-22T07:24:48Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 4,
"commits_last_year": 45,
"latest_release_at": "2026-07-15T14:52:00Z",
"latest_release_tag": "v0.5.0",
"releases_from_tags": false,
"days_since_last_push": 5,
"active_weeks_last_year": 4,
"days_since_latest_release": 8,
"mean_days_between_releases": 3.2
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 42,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "ultracode-for-codex",
"exists": true,
"license": "Apache-2.0",
"keywords": [
"codex",
"workflow",
"cli",
"automation",
"subagents"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/ultracode-for-codex",
"is_deprecated": false,
"latest_version": "0.6.1",
"repository_url": "https://github.com/kangminlee-maker/ultracode-for-codex",
"versions_count": 21,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 2679,
"first_published_at": "2026-06-22T00:31:05.880000Z",
"latest_published_at": "2026-07-18T10:42:52.787000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
}
]
},
"popularity": {
"forks": 0,
"stars": 2,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 283225,
"source_files_sampled": 57,
"oversized_source_files": 4,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 22,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "kangminlee-maker",
"commits": 45,
"avatar_url": "https://avatars.githubusercontent.com/u/225123635?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml"
],
"has_docs_dir": true,
"linter_configs": [
"eslint.config.mjs"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 6,
"reason": "15 out of 22 merged PRs checked by a CI test -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 9,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 3,
"reason": "dependency not pinned by hash detected -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 10,
"reason": "GitHub workflow tokens follow principle of least privilege",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "218a1b974ff60a9a4fd1487b28c3fa705767ab29",
"ran_at": "2026-07-23T18:01:08Z",
"aggregate_score": 4.1,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-18T10:38:28Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-18T10:37:35Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/kangminlee-maker/ultracode-for-codex",
"host": "github.com",
"name": "ultracode-for-codex",
"owner": "kangminlee-maker"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"security": 41,
"vitality": 72,
"community": 30,
"governance": 50,
"engineering": 76
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 72,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 54,
"inputs": {
"commits_last_year": 45,
"human_commit_share": 1,
"days_since_last_push": 5,
"active_weeks_last_year": 4
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 5 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 5
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "4/52 weeks with commits",
"points": 2.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 4
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "45 commits in the last year",
"points": 14.9,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 45
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 4,
"latest_release_tag": "v0.5.0",
"releases_from_tags": false,
"days_since_latest_release": 8,
"mean_days_between_releases": 3.2
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "4 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 4
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 8 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 8
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~3.2 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 3.2
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 30,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 2,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "2 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 2
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "at_risk",
"name": "Community health",
"note": null,
"notes": [],
"value": 44,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "license file present, not a recognized license",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "license_custom",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 57,
"inputs": {
"packages": [
"ultracode-for-codex"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 2679
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "2,679 downloads/month across npm",
"points": 45.7,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 2679,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 50,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 10,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 72,
"inputs": {
"merged_prs": 22,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "22/22 decided PRs merged",
"points": 38.2,
"status": "met",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 22,
"decided": 22
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 36,
"inputs": {
"followers": 5,
"owner_type": "User",
"is_verified": null,
"owner_login": "kangminlee-maker",
"public_repos": 31,
"account_age_days": 350
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "5 followers of kangminlee-maker",
"points": 5.6,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 5,
"login": "kangminlee-maker"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "31 public repos, account ~0 yr old",
"points": 12.9,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 31
}
},
{
"code": "account_age_years",
"params": {
"years": 0
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"ultracode-for-codex"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 5
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 5 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 5
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "21 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 21
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 76,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "eslint.config.mjs",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.mjs"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "15 out of 22 merged PRs checked by a CI test -- score normalized to 6",
"points": 12,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 41,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 41,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 4.1
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "15 out of 22 merged PRs checked by a CI test -- score normalized to 6",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 3",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "GitHub workflow tokens follow principle of least privilege",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 63,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.8,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "36 of 45 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 36,
"sampled": 45
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 67,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"package-lock.json"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"tsconfig.json"
],
"agent_commit_share": 0.778,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "eslint.config.mjs",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.mjs"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "35 of the last 45 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 35,
"sampled": 45
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 96,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 283225,
"source_files_sampled": 57,
"oversized_source_files": 4
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "4/57 source files over 60KB",
"points": 51.1,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 57,
"oversized": 4
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"deps.dev does not index npm:ultracode-for-codex@0.6.1; advisories assessed against the repository dependency graph instead"
],
"report_type": "repository",
"generated_at": "2026-07-23T18:01:21.454612Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/k/kangminlee-maker/ultracode-for-codex.svg",
"full_name": "kangminlee-maker/ultracode-for-codex",
"license_state": "custom",
"license_spdx": null
}Las puntuaciones son señales, no garantías. Reflejan prácticas públicamente visibles en GitHub; no son una auditoría de código ni una garantía de seguridad.
Los datos ausentes se excluyen y los pesos se renormalizan; nunca se puntúan como cero. La metodología es versionada y abierta: métricas v1.13.0, esquema v0.27.0 — metodología completa · wiki de métricas.
Cómo se sitúa un resultado dentro del registro general: estadísticas agregadas — npm.