marimo-team/codemirror-sql tiene un índice de salud de 81 sobre 100, lo que lo sitúa en la banda Excelente. Su puntuación más alta es Vitality (89/100) y la más baja, Community & Adoption (56/100). Se actualizó por última vez hoy. Una sola persona concentra la mayor parte del trabajo reciente.
81
global / 100
Excelente
Índice de salud del software
Las métricas se agrupan en categorías ponderadas sobre una escala estandarizada de 1 a 100. El resultado global parte de su media ponderada, calibrada contra la distribución del registro público para que las bandas tengan significado percentil; cuando la evidencia pública activa la Política de Jurisdicciones de Alto Riesgo, la calificación se ajusta y recibe un límite «En riesgo» de 34.
81
Excepcional93-100El nivel más alto del registro (≈ el 5% superior); cumple prácticamente todos los criterios evaluados
Excelente80-92Sólido en todos los frentes; carencias menores
Bueno65-79Saludable; carencias limitadas y manejables
Moderado50-64Aceptable con carencias notables; se recomienda revisión
Débil35-49Debilidades sustanciales en varias áreas
En riesgo20-34Debilidades significativas; su adopción exige cautela
Crítico1-19Problemas graves (proyecto abandonado, un solo mantenedor, sin higiene)
Perfil de puntuación
Cada eje es una categoría. La forma importa más que la media: un proyecto sano llena toda la figura, mientras que un perfil de picos y cráteres indica que la fortaleza en una dimensión enmascara el riesgo en otra.
El resultado global ponderado 69 se calibra a 81 en la escala publicada del índice (calibración del registro 2026-08-02).
Dependencias directas libres de avisos conocidos — ninguna dependencia directa tiene un aviso conocido
25/25
Dependencias indirectas libres de avisos conocidos — ninguna dependencia indirecta tiene un aviso conocido
0/40
Sin avisos pendientes — ningún aviso tiene fecha de publicación
Datos de entrada utilizados
source
osv
advisories
0
affected_packages
0
assessed_packages
3
unassessed_packages
0
affected_by_severity
none
direct_affected_packages
0
Excluidos de la puntuación (sin datos o no aplicable): Sin avisos pendientes. Los pesos restantes se han renormalizado. Se cotejó el cierre de dependencias en tiempo de ejecución de npm:@marimo-team/codemirror-sql@0.3.0 —lo que arrastra la instalación del paquete publicado—: 3 paquetes. No se analiza la alcanzabilidad.
¿Hasta qué punto está el repositorio preparado para desarrollarse y mantenerse con agentes de codificación de IA? Tiene un peso deliberadamente pequeño (4%): las herramientas para agentes son una señal real de mantenimiento, pero un repositorio sin ninguna puede alcanzar igualmente 100/100.
Código verificable por tipos — TypeScript (tipado estático)
55/55
Tamaños de archivo manejables — 0/53 archivos fuente de más de 60 KB
Datos de entrada utilizados
primary_language
TypeScript
largest_source_bytes
40.147
source_files_sampled
53
oversized_source_files
0
Datos clave
17estrellas de GitHub
4contribuidores
137commits en los últimos 12 meses
0días desde el último push
11versiones publicadas
1factor bus
2issues abiertas
npmecosistemas de paquetes
Advertencias de recopilación de datos
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Más detalle
Historial de estrellas y forks 0 ★ / 3 ⇿
0Estrellas
3Forks
Cuándo se añadió cada estrella y fork, recopilado de GitHub y agrupado por día. El crecimiento acumulado se sitúa justo encima de las adiciones diarias que lo componen, de modo que ambos se leen en conjunto: la acumulación orgánica sostenida no se parece en nada a un pico abrupto y efímero. Cuando esa diferencia es medible, se informa como autenticidad del crecimiento.
OpenSSF Scorecard 6.0 / 10
6.0agregado
Evaluación de seguridad independiente y agnóstica en cuanto a herramientas, procedente del proyecto de código abierto OpenSSF Scorecard. Cada comprobación premia una práctica de seguridad, no la herramienta de un proveedor concreto. Las comprobaciones que Scorecard no pudo determinar se marcan como n/d y se excluyen de la puntuación de seguridad (nunca se cuentan como cero).Scorecard v5.5.0 · 2026-08-03 00:07 UTC
No fue posible recopilar el conjunto de dependencias resuelto para este informe: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Avisos de dependencias 0
Instalar npm:@marimo-team/codemirror-sql@0.3.0 arrastra 3 paquetes, directos y transitivos: 0 tienen avisos conocidos, de los cuales 0 son dependencias directas.
Ningún aviso conocido afecta a las dependencias evaluadas.
Un aviso significa que la versión registrada en el grafo de dependencias cae dentro del rango afectado de un aviso. No se analiza la alcanzabilidad, y el grafo incluye fijaciones de desarrollo y prueba: un hallazgo puede referirse al utillaje y no al software distribuido.
Informe JSON sin procesar legible por máquina
{
"data": {
"repo": {
"topics": [
"codemirror",
"codemirror-extension",
"sql"
],
"is_fork": false,
"size_kb": 1548,
"has_wiki": false,
"homepage": "https://marimo-team.github.io/codemirror-sql/",
"languages": {
"Python": 9739,
"TypeScript": 464283
},
"pushed_at": "2026-08-02T18:12:55Z",
"created_at": "2025-07-31T02:26:19Z",
"owner_type": "Organization",
"updated_at": "2026-07-24T14:38:48Z",
"description": "A CodeMirror extension for SQL linting, hover, and completions. With support for DuckDB and BigQuery",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript"
]
},
"owner": {
"blog": "https://marimo.io/",
"name": "marimo",
"type": "Organization",
"login": "marimo-team",
"company": null,
"location": null,
"followers": 622,
"avatar_url": "https://avatars.githubusercontent.com/u/98563464?v=4",
"created_at": "2022-01-27T23:44:55Z",
"is_verified": null,
"public_repos": 51,
"account_age_days": 1648
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2026-07-23T20:41:36Z"
},
{
"tag": "v0.2.8",
"kind": "patch",
"published_at": "2026-06-08T16:05:37Z"
},
{
"tag": "v0.2.7",
"kind": "patch",
"published_at": "2026-06-08T15:20:14Z"
},
{
"tag": "v0.2.4",
"kind": "patch",
"published_at": "2025-10-15T13:37:07Z"
},
{
"tag": "v0.2.3",
"kind": "patch",
"published_at": "2025-09-25T16:00:36Z"
},
{
"tag": "v0.2.1",
"kind": "patch",
"published_at": "2025-08-25T16:14:35Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2025-08-25T15:00:03Z"
},
{
"tag": "v0.1.3",
"kind": "patch",
"published_at": "2025-08-10T22:42:11Z"
},
{
"tag": "v0.1.2",
"kind": "patch",
"published_at": "2025-08-08T16:12:59Z"
},
{
"tag": "v0.1.1",
"kind": "patch",
"published_at": "2025-07-31T19:32:50Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2025-07-31T02:30:34Z"
}
],
"recent_commits": [
{
"oid": "ca192000e6717ed833a550b257139860cb901387",
"body": null,
"is_bot": false,
"headline": "chore: release v0.3.0",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-23T20:40:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "22252fb3910ac3fe00b4a8aa3e7bb5cf2ccc7c8a",
"body": "## Summary\nBroadens unit-test coverage and reduces test boilerplate.\n\nUnit suite (excludes browser-covered `navigation-extension`):\n\n| Metric | Before | After |\n|---|---|---|\n| Statements | 89.1% | **91.6%** |\n| Branches | 81.2% | **85.9%** |\n| Lines | 89.0% | **91.5%** |\n| Tests | 471 | **587** (+1\n[…]\nubic.dev/buttons/review-in-cubic-light.svg\"><img\nalt=\"Review in cubic\"\nsrc=\"https://www.cubic.dev/buttons/review-in-cubic-dark.svg\"></picture></a>\n\n<!-- End of auto-generated description by cubic. -->",
"is_bot": false,
"headline": "test: expand edge-case coverage and DRY up test helpers (#168)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-23T19:09:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "68ecb204a42409569671ea2127abd4c2c943ee10",
"body": "… (#167)\n\n## What\n\nRegistering the SQL completion sources had gotten unwieldy — each of the\nthree schema-aware sources required its own `dialect.language.data.of({\nautocomplete })` call:\n\n```ts\ndialect.language.data.of({ autocomplete: createCteCompletionSource({ parser }) }),\ndialect.language.data.o\n[…]\nubic.dev/buttons/review-in-cubic-light.svg\"><img\nalt=\"Review in cubic\"\nsrc=\"https://www.cubic.dev/buttons/review-in-cubic-dark.svg\"></picture></a>\n\n<!-- End of auto-generated description by cubic. -->",
"is_bot": false,
"headline": "feat: sqlCompletion helper to register all completion sources at once…",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-23T18:39:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "991e53ac8aa19928d1fb57c9faad3432794d8b2a",
"body": "## Summary\n\nTyping a bare identifier prefix now completes columns of the tables\nreferenced in the current statement's `FROM`/`JOIN` clauses — even when\nthe schema defines many tables:\n\n```sql\nSELECT id, name, email\nFROM users\nWHERE active = true\nORDER BY created_at DESC;\n```\n\n`SELECT e` → `email`, `\n[…]\nubic.dev/buttons/review-in-cubic-light.svg\"><img\nalt=\"Review in cubic\"\nsrc=\"https://www.cubic.dev/buttons/review-in-cubic-dark.svg\"></picture></a>\n\n<!-- End of auto-generated description by cubic. -->",
"is_bot": false,
"headline": "feat: unqualified column completion inferred from the FROM clause (#165)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-23T18:32:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2df4518064904a2528511f4bf9d0d9ed69884561",
"body": "…, rename (#166)\n\n## Summary\n\nAdds the classic LSP trio for statement-local SQL identifiers —\ngo-to-definition, document highlights, and rename — and rewrites CTE\ncompletion on top of `QueryContext` (#164). All analyses are purely\nlocal; no schema required.\n\n### CTE completion (`cteCompletionSource`\n[…]\nubic.dev/buttons/review-in-cubic-light.svg\"><img\nalt=\"Review in cubic\"\nsrc=\"https://www.cubic.dev/buttons/review-in-cubic-dark.svg\"></picture></a>\n\n<!-- End of auto-generated description by cubic. -->",
"is_bot": false,
"headline": "feat: AST-based CTE support: completion, go-to-definition, highlights…",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-23T18:29:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2ef198ccd9fddd530f28f76159941ee2c52a6d85",
"body": "## Summary\n\nNothing in the extension previously understood table aliases: in `SELECT\nu.name FROM users u`, hovering `u` or `u.name` found nothing, and there\nwas no alias-qualified column completion. This PR adds a shared,\nstatement-scoped alias/CTE analysis and uses it in hover and a new\ncompletion \n[…]\nubic.dev/buttons/review-in-cubic-light.svg\"><img\nalt=\"Review in cubic\"\nsrc=\"https://www.cubic.dev/buttons/review-in-cubic-dark.svg\"></picture></a>\n\n<!-- End of auto-generated description by cubic. -->",
"is_bot": false,
"headline": "feat: alias resolution for hover and completion (#164)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-23T17:28:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e690b8d370594f104b27d4eafd83f5fda8b37c83",
"body": "…guous columns) (#163)\n\n## Summary\n\nLinting was syntax-only, even though the extension already accepts a\nfull `SQLNamespace` schema (used by hover). This adds\n**`sqlSemanticLinter`**, a schema-aware linter that reports the\nhighest-value SQL diagnostics:\n\n- **Unknown table** — `FROM`/`JOIN` reference\n[…]\nubic.dev/buttons/review-in-cubic-light.svg\"><img\nalt=\"Review in cubic\"\nsrc=\"https://www.cubic.dev/buttons/review-in-cubic-dark.svg\"></picture></a>\n\n<!-- End of auto-generated description by cubic. -->",
"is_bot": false,
"headline": "feat: schema-aware semantic diagnostics (unknown tables/columns, ambi…",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-23T15:42:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "575c72eb5b65c09e762ca6d8be9a4a3e7fc27c07",
"body": "Parse the original statement text (comments included) instead of the\ncomment-stripped version. node-sql-parser handles comments natively and\nreports positions relative to the original text, so stripping comments\nbefore parsing shifted error lines/columns in the document.\n\n\n<!-- This is an auto-gener\n[…]\nubic.dev/buttons/review-in-cubic-light.svg\"><img\nalt=\"Review in cubic\"\nsrc=\"https://www.cubic.dev/buttons/review-in-cubic-dark.svg\"></picture></a>\n\n<!-- End of auto-generated description by cubic. -->",
"is_bot": false,
"headline": "fix: lint diagnostics offset when statements contain comments (#162)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-23T15:16:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "428d0fb6e202d5da377086fbe5769c701ee6624e",
"body": "This PR contains the following updates:\n\n| Package | Change |\n[Age](https://docs.renovatebot.com/merge-confidence/) |\n[Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n| [typescript](https://www.typescriptlang.org/)\n([source](https://redirect.github.com/microsoft/TypeS\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4yNDIuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI0Mi4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency typescript to v7 (#153)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-23T13:50:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8aad5c5e30fd6fb072270b5c8aa2006b544ca00a",
"body": "- sqlLinter now lints each statement via SqlStructureAnalyzer, reporting\nerrors for every broken statement instead of only the first parse\nfailure\n- SqlStatement carries parse errors so the linter reuses the analyzer's\n per-statement parse (no double-parsing; cached by content)\n- Diagnostic spans widen to cover the offending token instead of one\nchar\n- New SqlLinterConfig options: perStatement (default true) and\n structureAnalyzer (share an instance to reuse its cache)",
"is_bot": false,
"headline": "feat: per-statement linting with token-wide error spans (#161)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-23T13:50:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "471028c82b13499a8a3f1835a0d2ea254844d5f5",
"body": "… (#160)\n\nRaise line coverage 73% -> 93% and branch coverage 63% -> 83%.\n\n- Extract computeMarkerStyle from SqlGutterMarker.toDOM so the marker\n color/opacity branches can be unit-tested without an EditorView\n- Add hover-render tests covering the tooltip HTML builders and the\n tooltip create() path (hover.ts 30% -> 97%)\n- Add extractColumnReferences tests for the parser\n- Cover remaining namespace-utils branches (root self/children\n traversal, maxDepth cutoff, self-label matching)",
"is_bot": false,
"headline": "test: improve coverage for hover, gutter, parser, and namespace utils…",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-23T13:35:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b148dd63b617c1aa80f7fd9264e167c55bd31fa",
"body": "…TE completion (#159)\n\n- structure-analyzer: key the statement cache on document content\ninstead of\na lossy 32-bit hash that could collide and return another document's\nstatements\n- namespace-utils: allow tables literally named \"self\"; only treat\nobjects with\n a Completion-shaped self tag and child\n[…]\nxplicit inactiveOpacity of 0\n- cte-completion-source: scan CTE bodies with balanced parentheses so\nCTEs\n after function calls or subqueries are completed; support column lists\n (WITH a(x, y) AS ...)",
"is_bot": false,
"headline": "fix: correctness bugs in analyzer cache, hover, parser, gutter, and C…",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-23T13:20:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "59ab9bb7880b2341d170763829c0d7d0371eb98f",
"body": "This PR contains the following updates:\n\n| Package | Change |\n[Age](https://docs.renovatebot.com/merge-confidence/) |\n[Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n| [playwright](https://playwright.dev)\n([source](https://redirect.github.com/microsoft/playwright)) |\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4yMzEuMSIsInVwZGF0ZWRJblZlciI6IjQzLjI0Mi4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency playwright to v1.61.1 (#150)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-23T13:20:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "06f246f9439c39a23c4da97b115d8a62142d304a",
"body": "This PR contains the following updates:\n\n| Package | Type | Update | Change | OpenSSF |\n|---|---|---|---|---|\n| [actions/checkout](https://redirect.github.com/actions/checkout) |\naction | major | `v6` → `v7` | [![OpenSSF\nScorecard](https://api.securityscorecards.dev/projects/github.com/actions/check\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4yMzEuMSIsInVwZGF0ZWRJblZlciI6IjQzLjI3Mi40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update actions/checkout action to v7 (#151)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-23T13:19:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cc318b4697a3535a9d2e34e5aa173285e4c6a4b2",
"body": "This PR contains the following updates:\n\n| Update | Change |\n|---|---|\n| lockFileMaintenance | All locks refreshed |\n\n🔧 This Pull Request updates lock files to use the latest dependency\nversions.\n\n---\n\n### Configuration\n\n📅 **Schedule**: (UTC)\n\n- Branch creation\n - \"before 5am on the first day of th\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4yNDIuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI0Mi4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): lock file maintenance (#152)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-23T13:19:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "922b3c5521d755a57f3b6fa8f7fbc0a84fcfd0c6",
"body": "This PR contains the following updates:\n\n| Package | Type | Update | Change | OpenSSF |\n|---|---|---|---|---|\n| [actions/setup-node](https://redirect.github.com/actions/setup-node) |\naction | major | `v6` → `v7` | [![OpenSSF\nScorecard](https://api.securityscorecards.dev/projects/github.com/actions/s\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4yNTkuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI3Mi40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update actions/setup-node action to v7 (#154)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-23T13:19:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "da15ca1250b3fc69a8832e36aa3148a2c28d91a3",
"body": "This adds a minimal AGENTS.md as the canonical agent-context doc, with\nCLAUDE.md as a symlink to it so both the AGENTS.md and CLAUDE.md tool\necosystems resolve the same file. The content is deliberately minimal —\na one-line overview plus verified development commands — since these\nfiles load into every agent context, so every line is a recurring token\ncost. Part of the marimo-team engineering-excellence initiative to give\nagents accurate, low-overhead repo context.",
"is_bot": false,
"headline": "docs: add AGENTS.md with CLAUDE.md symlink (#158)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-23T13:19:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1176517e34401831498cb351fabe826d94c8f2f7",
"body": "## What this does\n\nAdds an `autofix.ci` workflow that automatically **pushes** lint fixes\nonto pull requests. When a contributor opens or updates a PR, the\nworkflow runs the repo's mutating fixer (`pnpm run lint`, i.e. `oxlint\n--fix`) and, via the [autofix.ci](https://autofix.ci) GitHub App,\ncommits\n[…]\ne` is exactly `autofix.ci` (required — the service\nidentifies the workflow by name for security) and the\n`autofix-ci/action` step runs last.\n\nPart of the marimo-team engineering-excellence initiative.",
"is_bot": false,
"headline": "ci: add autofix.ci (#157)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-22T17:45:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7481621feb5452b7a788e4ac12122365cf628e61",
"body": "## What changed\n\n- **Lint in CI**: added a plain `pnpm exec oxlint` step to the `test`\njob. The existing `lint` script is `oxlint --fix` (mutating), so CI runs\nthe non-mutating variant. There is no oxlint config file, which is fine\n— oxlint applies its defaults.\n- **Coverage config** (`vite.config.t\n[…]\ned and `coverage/` is\ngitignored.\n\nNo mechanical source fixes were required. Part of the marimo-team\nengineering-excellence initiative to make existing-but-unenforced\nquality gates actually run in CI.",
"is_bot": false,
"headline": "ci: enforce lint and report coverage on PRs (#156)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-22T14:37:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "749da922b383cede131399baa1791d2151a51eaf",
"body": "Sets each workflow's top-level `permissions:` to `{}` (deny-all) and\nmoves the previously top-level grants into the specific jobs that\ninherited them. **Effective permissions are unchanged for every job** —\nthis just makes the grants explicit per job so a newly-added job can't\nsilently inherit broad\n[…]\ntill parse; per-job effective scopes identical). Workflows whose jobs\ninherit the org default are left untouched for a manual per-job pass.\n\n_Flagged by github-maintenance Workflow Permissions Audit._",
"is_bot": false,
"headline": "ci: adopt deny-all top-level workflow permissions (#155)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-14T20:52:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bdd67d1eb574d5c2e29966687e2c2c1c557cb888",
"body": null,
"is_bot": false,
"headline": "chore: release v0.2.8",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-06-08T16:04:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3a0447244707ad7f852b693c60a3d2fdec32490d",
"body": "Since v0.2.5 the published npm tarball has been missing\n`src/data/common-keywords.json` and `src/data/duckdb-keywords.json`,\nleaving the `./data/*` exports dead (404 / unresolved module for\nconsumers). PR #128 split the release into separate `build`/`publish`\njobs, but the build job's `upload-artifa\n[…]\nnst the current package and fails if `src/data/*.json` is\ndropped from `files`.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(ci): ship src/data/*.json in published tarball (#148)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2026-06-08T16:04:03Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "faee1f67e1dbc8fe80953c254c1117a84192d705",
"body": null,
"is_bot": false,
"headline": "chore: release v0.2.7",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-06-08T15:18:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e1fffb93ec29ed911afee061a6d976c4d3fe0131",
"body": "The `publish` job has no `checkout` step, so `package.json` (with the\n`packageManager` field) only exists after the artifact download. Running\n`pnpm/action-setup` first left it with no pnpm version to read, causing\n\"No pnpm version is specified\".\n\nFix: reorder so the artifact download runs before pnpm setup.\n\nFixes the failure in [this\nrun](https://github.com/marimo-team/codemirror-sql/actions/runs/27144993776/job/80120275403).",
"is_bot": false,
"headline": "fix(ci): download artifact before pnpm setup in publish job (#147)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-06-08T15:18:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "12a17f148ee2da2a867e55c640c1cee1ac2478b5",
"body": null,
"is_bot": false,
"headline": "chore: release v0.2.6",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-06-08T14:33:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f6c681eabce3338551e3a208098698cb1bf5ea5",
"body": "The `Setup Node.js` step in the `publish` job was over-indented, making\n`release.yml` invalid YAML. This caused the v0.2.5 release runs to fail\nat 0s (\"workflow file issue\") so the publish job never ran — npm latest\nis still 0.2.4.\n\nIntroduced in #128. Fix re-aligns the step to 6 spaces; YAML now parses.",
"is_bot": false,
"headline": "fix(ci): correct YAML indentation in release publish job (#145)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-06-08T14:33:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c76558dac0774e61e99d32bb05d8ad644f9691a",
"body": null,
"is_bot": false,
"headline": "chore: release v0.2.5",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-06-08T14:02:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fde96b159e284b45eb952eae48b64cfc856b9fb6",
"body": "This PR contains the following updates:\n\n| Package | Type | Update | Change | OpenSSF |\n|---|---|---|---|---|\n|\n[@codemirror/lang-sql](https://redirect.github.com/codemirror/lang-sql)\n| devDependencies | pin | [`^6.10.0` →\n`6.10.0`](https://renovatebot.com/diffs/npm/@codemirror%2flang-sql/6.10.0/6.1\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4yMDIuMSIsInVwZGF0ZWRJblZlciI6IjQzLjIwMi4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): pin dependencies (#140)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-05-29T16:13:12Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "56203c88e188acfd3341b1cd37a016edc6cdb039",
"body": "This PR contains the following updates:\n\n| Package | Type | Update | Change | OpenSSF |\n|---|---|---|---|---|\n|\n[@testing-library/dom](https://redirect.github.com/testing-library/dom-testing-library)\n| devDependencies | pin | [`^10.4.1` →\n`10.4.1`](https://renovatebot.com/diffs/npm/@testing-library%\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4yMDIuMSIsInVwZGF0ZWRJblZlciI6IjQzLjIwMi4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): pin dependencies (#141)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-05-29T15:31:12Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2db4db8f0e4fb7633dca41188973dee9777ead30",
"body": "> ℹ️ **Note**\n> \n> This PR body was truncated due to platform limits.\n\nThis PR contains the following updates:\n\n| Package | Type | Update | Change | OpenSSF |\n[Age](https://docs.renovatebot.com/merge-confidence/) |\n[Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|---|-\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4yMDIuMSIsInVwZGF0ZWRJblZlciI6IjQzLjIwMi4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update all non-major dependencies (#137)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-05-29T15:13:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "71d354d1a0643e84cbff54da8501d4e3ac8c218d",
"body": "This PR contains the following updates:\n\n| Package | Type | Update | Change | OpenSSF |\n|---|---|---|---|---|\n|\n[actions/download-artifact](https://redirect.github.com/actions/download-artifact)\n| action | major | `v4` → `v8` | [![OpenSSF\nScorecard](https://api.securityscorecards.dev/projects/github\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4yMDIuMSIsInVwZGF0ZWRJblZlciI6IjQzLjIwMi4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update github artifact actions (major) (#138)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-05-29T15:07:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bd17c8348a68c283f563bc839807f36a7ea2800a",
"body": null,
"is_bot": false,
"headline": "upgrade lockfile (#139)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2026-05-29T15:07:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5cb28c9c2bff0be5888f92a8d7ce24c7149b5fd4",
"body": "This PR contains the following updates:\n\n| Update | Change |\n|---|---|\n| lockFileMaintenance | All locks refreshed |\n\n🔧 This Pull Request updates lock files to use the latest dependency\nversions.\n\n---\n\n### Configuration\n\n📅 **Schedule**: (UTC)\n\n- Branch creation\n - \"before 5am on the first day of th\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4xMTAuMiIsInVwZGF0ZWRJblZlciI6IjQzLjEyMy44IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): lock file maintenance (#122)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-05-29T14:48:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d60176da88539efffdd47cd794eeb325fe8a990b",
"body": "Fixes misconfigured fields in `pnpm-workspace.yaml`.\n\nSee the tracking issue in github-maintenance.\n\n<!-- github-maintenance:hash=20d1dfc3:script=pnpm-workspace-check -->\n\nCo-authored-by: marimo-github-maintenance-bot[bot] <267743655+marimo-github-maintenance-bot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "[github-maintenance] Fix pnpm-workspace.yaml configuration (#124)",
"author_name": "marimo-github-maintenance-bot[bot]",
"author_login": "marimo-github-maintenance-bot[bot]",
"committed_at": "2026-05-29T14:45:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31ef7617233e01a84bdee96b2a715f0e45256928",
"body": null,
"is_bot": false,
"headline": "upgrade pnpm to v11 (#135)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2026-05-29T14:44:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "03ffef8b2f1d4ec2ac219ed0d3496d4fa029c1ca",
"body": null,
"is_bot": false,
"headline": "migrate to oxlint (#133)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2026-05-29T14:40:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2fa853b0f020a8ec826edb2e245e437e4347478a",
"body": "CI was failing from playwright tests",
"is_bot": false,
"headline": "fix playwright config (#134)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2026-05-29T14:40:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc013f2a1906641d7478a63379342751bd548ee3",
"body": null,
"is_bot": false,
"headline": "manual upgrade jsdom (#132)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2026-05-29T14:34:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "558bc028db8022a6819e752daee7cce6f707cffb",
"body": "> ℹ️ **Note**\n> \n> This PR body was truncated due to platform limits.\n\nThis PR contains the following updates:\n\n| Package | Change |\n[Age](https://docs.renovatebot.com/merge-confidence/) |\n[Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n|\n[@vitest/browser-playwright]\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0Mi44NS4xIiwidXBkYXRlZEluVmVyIjoiNDMuMTk0LjAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update vitest monorepo to ^4.1.7 (#105)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-05-29T14:23:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2651296c455a11ccde9fe991992259caf973d935",
"body": "This PR contains the following updates:\n\n| Package | Type | Update | Change | OpenSSF |\n|---|---|---|---|---|\n|\n[actions/upload-pages-artifact](https://redirect.github.com/actions/upload-pages-artifact)\n| action | major | `v4` → `v5` | [![OpenSSF\nScorecard](https://api.securityscorecards.dev/project\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4yMDIuMSIsInVwZGF0ZWRJblZlciI6IjQzLjIwMi4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update actions/upload-pages-artifact action to v5 (#131)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-05-29T14:22:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dcdb606df685b0e4320b93c4052265706e91664c",
"body": "This PR contains the following updates:\n\n| Package | Type | Update | Change | OpenSSF |\n|---|---|---|---|---|\n| [actions/setup-node](https://redirect.github.com/actions/setup-node) |\naction | major | `v4` → `v6` | [![OpenSSF\nScorecard](https://api.securityscorecards.dev/projects/github.com/actions/s\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4yMDIuMSIsInVwZGF0ZWRJblZlciI6IjQzLjIwMi4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update actions/setup-node action to v6 (#130)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-05-29T14:21:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9fa4441052050337a21e0d9b25c206779102dece",
"body": "This PR contains the following updates:\n\n| Package | Change |\n[Age](https://docs.renovatebot.com/merge-confidence/) |\n[Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n| [typescript](https://www.typescriptlang.org/)\n([source](https://redirect.github.com/microsoft/TypeS\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4xMDAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjEyMy44IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency typescript to v6 (#119)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-05-29T14:18:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6a88130dc5531be9807a7f3f55a5110298e88e28",
"body": "This PR contains the following updates:\n\n| Package | Type | Update | Change | OpenSSF |\n|---|---|---|---|---|\n|\n[actions/configure-pages](https://redirect.github.com/actions/configure-pages)\n| action | major | `v5` → `v6` | [![OpenSSF\nScorecard](https://api.securityscorecards.dev/projects/github.com\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4xMDAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjE3My42IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update actions/configure-pages action to v6 (#117)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-05-29T14:17:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a511d34c4e11688d6096f22cb889a6b6fb54d88f",
"body": "This PR contains the following updates:\n\n| Package | Type | Update | Change | OpenSSF |\n|---|---|---|---|---|\n|\n[actions/deploy-pages](https://redirect.github.com/actions/deploy-pages)\n| action | major | `v4` → `v5` | [![OpenSSF\nScorecard](https://api.securityscorecards.dev/projects/github.com/actio\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4xMDAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjE3My42IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update actions/deploy-pages action to v5 (#118)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-05-29T14:16:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7727be799d0a99ba48548970d1b3a0d816021e9f",
"body": "This PR contains the following updates:\n\n| Package | Type | Update | Change | OpenSSF |\n|---|---|---|---|---|\n| [pnpm/action-setup](https://redirect.github.com/pnpm/action-setup) |\naction | major | `v4` → `v6` | [![OpenSSF\nScorecard](https://api.securityscorecards.dev/projects/github.com/pnpm/action\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4xMTAuMiIsInVwZGF0ZWRJblZlciI6IjQzLjE3My42IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update pnpm/action-setup action to v6 (#121)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-05-29T14:16:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "93ab69e90083ced7cb10fe0f94925595e453d177",
"body": "## Summary\n\nAdds a Dremio SQL dialect export with:\n\n- Dremio reserved keywords\n- Dremio SQL data types, including semi-structured types\n- double-quote identifier support\n- case-insensitive identifier completion\n\nThe keyword/type lists are based on Dremio's SQL reference docs.\n\n## Test Plan\n\n- `pnpm test --run src/__tests__/index.test.ts`\n- `pnpm typecheck`\n- `pnpm build`",
"is_bot": false,
"headline": "feat: add Dremio SQL dialect (#129)",
"author_name": "Matt Corley",
"author_login": "corleyma",
"committed_at": "2026-05-29T02:21:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "480fd871b4173ae03a67041d863d4c0f7d33b594",
"body": "…jobs (#128)\n\nSplits the single release job into 4 jobs so the `id-token: write` scope\nis held only by a publish job that runs `npm publish` exclusively (no\ninstall/test/build/exec).\n\n- **build** (no `id-token`): install, typecheck, test, build, validate,\nupload `dist/` + package metadata as artifac\n[…]\n in to only the scopes it needs.\n\nResolves the supply-chain audit `oidc-publish-fused` finding. Motivated\nby the TanStack npm supply-chain compromise (May 2026). Mirrors\nmarimo-team/codemirror-ai#111.",
"is_bot": false,
"headline": "chore(ci): split release.yml into build/publish/release-notes/notify …",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-05-12T17:59:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e24f371ab86186e5e36a49a5fda5bc1e2c3f3ada",
"body": "Splits the single build-and-deploy job into the canonical GitHub Pages\n2-job pattern: build (no `id-token`) → deploy (only `id-token: write`,\nruns deploy-pages only).\n\nResolves the supply-chain audit's OIDC-fused finding on this workflow.",
"is_bot": false,
"headline": "chore(ci): split demo.yml into build + deploy jobs (#127)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-05-12T17:25:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e8fe76dd08178ecb8be698bf55e39a8d22feb6a1",
"body": "node-24 ships with npm 11+ which already supports OIDC trusted\npublishing, so the `npm install -g npm@latest` step is redundant.\nRemoving it also drops one global install in the same job as `id-token:\nwrite`.",
"is_bot": false,
"headline": "chore(ci): remove redundant npm@latest upgrade (#126)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-05-12T16:54:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3388dee917a07a616bf62b407bfe420bd54283f6",
"body": "Adds `\"packageManager\": \"pnpm@10.28.2\"` to `package.json` and drops the\nredundant `version:` arg from `pnpm/action-setup` in CI.\n\nThe action now reads the version from `packageManager`, giving a single\nsource of truth shared between local dev and CI. Matches the convention\nused in `marimo` and `marimo-lsp`.",
"is_bot": false,
"headline": "chore: pin pnpm via packageManager (#123)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-05-12T15:13:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "63c269a5edd3f1c2abac46a750dba3eaf4546103",
"body": "Co-authored-by: marimo-github-maintenance-bot[bot] <267743655+marimo-github-maintenance-bot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "[github-maintenance] Pin GitHub Actions to SHA hashes (#120)",
"author_name": "marimo-github-maintenance-bot[bot]",
"author_login": "marimo-github-maintenance-bot[bot]",
"committed_at": "2026-04-06T14:09:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c0409d3de7fd18276e868a35684c50a342ba7dc5",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency vite to v8 (#109)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-04-06T14:09:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b2b131abf380f0542a188522abc151885ae340ce",
"body": "Adds missing `pnpm-workspace.yaml` with required fields.\n\nSee the tracking issue in github-maintenance.\n\n<!-- github-maintenance:hash=3d5358e2:script=pnpm-workspace-check -->\n\nCo-authored-by: marimo-github-maintenance-bot[bot] <267743655+marimo-github-maintenance-bot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "[github-maintenance] Fix pnpm-workspace.yaml configuration (#112)",
"author_name": "marimo-github-maintenance-bot[bot]",
"author_login": "marimo-github-maintenance-bot[bot]",
"committed_at": "2026-03-18T15:10:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cab7e0e695fcf27b5b2585374ba51330290605ad",
"body": "Adds `local>marimo-team/.github:renovate-config` to the `extends` array\nin `renovate.json`.\n\n<!-- github-maintenance:hash=7fdcfb05:script=renovate-config-fix -->\n\nCo-authored-by: marimo-github-maintenance-bot[bot] <267743655+marimo-github-maintenance-bot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "[github-maintenance] Extend org Renovate config preset (#113)",
"author_name": "marimo-github-maintenance-bot[bot]",
"author_login": "marimo-github-maintenance-bot[bot]",
"committed_at": "2026-03-18T15:09:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3a4ed2d605cfae0a63ff5e7e56a91d4e70191a20",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency @biomejs/biome to v2.3.11 (#99)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-01-12T18:24:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d87d0f49ba24f3d6366ab386c4fe1b34a552d4c2",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update vitest monorepo to v4.0.17 (#100)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-01-12T18:23:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f42a111464ff347a0d9ab3c255fe6127b277421",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency node-sql-parser to v5.4.0 (#104)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-01-12T18:23:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c5a9b8757a7a33334f8398082568daabadf9053",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update crate-ci/typos action to v1.40.1 (#102)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-12-29T19:23:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2fba51dfbcb1d37fe923b89365c10cfbfa47f7a5",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update crate-ci/typos action to v1.40.0 (#94)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-12-11T00:48:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "651ddae854d29c28757011913d0be822e7189bc1",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update actions/checkout action to v6 (#95)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-12-11T00:48:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ed419f05094c4038007e9e59bf092d9a98169d32",
"body": null,
"is_bot": false,
"headline": "ci: oidc (#96)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2025-12-11T00:48:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ebae5875d2b894052809eabdc2ef4d80088b53ba",
"body": "* update packages and fix renovate bot\n\n* fix test install\n\n* use pnpx but install all\n\n* add playwright as dev dep",
"is_bot": false,
"headline": "update packages, fix renovate bot and playwright test (#93)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2025-12-10T18:24:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1fc7145412572d6ef3278eecd85403d288d1e101",
"body": "…rt (#92)",
"is_bot": false,
"headline": "perf: only render gutter markers for lines that are within the viewpo…",
"author_name": "Knyntsje",
"author_login": "Knyntsje",
"committed_at": "2025-12-01T04:18:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "caa7c664135988b634f55a3e57a1327a5ffeede2",
"body": null,
"is_bot": false,
"headline": "avoid renovate bot pr for lint version, upgrade test pkg (#90)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2025-11-01T17:15:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f8f13fd33f0ce9b59442fc2978f79782cad29736",
"body": "* add test\n\n* move to a folder, and update config\n\n* remove screenshot\n\n* add pnpm install chromium\n\n* use pnpx\n\n* use 6.9.1\n\n* rebase",
"is_bot": false,
"headline": "add browser test with playwright for freeze (#88)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2025-11-01T15:14:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ede6ca8620c143a1b44f02e7ad8d0ad7994cc8f8",
"body": null,
"is_bot": false,
"headline": "fix codemirror/lint for browser freeze (#87)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2025-11-01T13:02:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1b6df099ac920a0071f5b53346b94de1541232ec",
"body": null,
"is_bot": false,
"headline": "update packages and test",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2025-11-01T09:33:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "14cc59aa710bdaa207e7d160ecc3b5681898f412",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency node to v24 (#83)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-11-01T08:30:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4197696e95e0d76d4dbc463e4fcc5c5d0ddca13f",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update crate-ci/typos action to v1.39.0 (#85)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-11-01T08:26:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5d342b6aeec0bd343b3bea665f3746a1907912e3",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency jsdom to v27.0.1 (#78)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-10-24T21:08:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc687c6044daa0348642206ff5a0dbf8fb85b117",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency vite to v7.1.12 (#79)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-10-24T21:08:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4274a9e0aeeb4d3482a8a10084755cd5b2fdbdda",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency @biomejs/biome to v2.3.0 (#80)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-10-24T21:08:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bb9bf06db5624b300380d2ef7338dbb8fe72f7f1",
"body": null,
"is_bot": false,
"headline": "chore: release v0.2.4",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2025-10-15T13:36:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d595b3ab1b36e4b799383b0eebfcbd398d80cf93",
"body": "* move codemirror deps to peer deps\n\n* upgrade packages",
"is_bot": false,
"headline": "move codemirror deps to peer deps (#73)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2025-10-15T13:35:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "55aa3df43c1cd498ac1edaf1676ff069bfa7e558",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update actions/setup-node action to v6 (#75)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-10-15T13:27:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "64f760c58f66816ce66ddedac5909ee30cacc242",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update crate-ci/typos action to v1.38.1 (#69)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-10-12T15:06:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "039ff17a4affc02130fc7b68884bbc5c6c6f9afa",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update github/codeql-action action to v4 (#71)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-10-12T15:06:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "51520f0f2521f0482a7b184f807b5876242ab46d",
"body": null,
"is_bot": false,
"headline": "update all packages (#68)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2025-10-04T07:10:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c286e9250637c1c179dff9134c500113f877d5af",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update crate-ci/typos action to v1.37.2 (#67)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-10-04T07:08:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7a5e74fb885f1e84bbd124dc269ce3a3e18b15d8",
"body": "* support better table list extraction\n\n* add import",
"is_bot": false,
"headline": "support better table list extraction (#61)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2025-10-04T07:07:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "caef1aa7bc6bb0527c9b783efc9dbea1ee07a9ff",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update crate-ci/typos action to v1.37.1 (#62)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-10-03T04:56:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b65b3276aae0bd0981b445dbc44bd215cc88d92",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update crate-ci/typos action to v1.36.3 (#59)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-29T03:08:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c6e651f0621ae9918834be4c72ae1600b9e23db8",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update codemirror (#60)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-29T03:08:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "63fefa8c5558a7b2d89fc154133ece63848c9bc6",
"body": null,
"is_bot": false,
"headline": "chore: release v0.2.3",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2025-09-25T15:59:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "42cc50223cfdb948dc76b2494dce1dc1157c4416",
"body": null,
"is_bot": false,
"headline": "chore: release v0.2.2",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2025-09-25T15:45:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "02b6e87a01cda17f89a13a620554c0d32e9ea026",
"body": null,
"is_bot": false,
"headline": "improvement: add another tooltip override (#58)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2025-09-25T15:45:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6e398483181c0ebef4facee77ff56c59e826a274",
"body": "* export types, update packages, fix regression\n\n* fix lockfile",
"is_bot": false,
"headline": "export types, update packages, fix regression (#57)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2025-09-25T15:37:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c83be451cde1a99c39037caef4e3fdbf39ce4a3",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency @codemirror/view to v6.38.3 (#54)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-25T02:04:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "675dba8998371faf5df67384b6dbe69fed3928cd",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency vite to v7.1.7 (#55)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-25T02:04:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a2fbd8bebc1ead1ae7085de61f12986a1a46afe",
"body": null,
"is_bot": false,
"headline": "Update README",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2025-09-23T23:38:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "83ef3f25c737960b980324bd0177b3cb7baaab06",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency vite to v7.1.6 (#53)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-21T00:21:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a5116887194e8dc77a48dcd9245632bf12f6d4fb",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency jsdom to v27 (#51)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-17T05:27:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ba80b57c0e9f0a0f484ec5d5aba8ca60d4ce7446",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency @codemirror/lang-sql to v6.10.0 (#52)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-17T05:27:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "62be7df5f64f30f25465d39bb305aa82bbbfa4b7",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency @biomejs/biome to v2.2.4 (#49)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-13T04:50:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7587dc9841b3fe41127469c19eb59ed1479d43de",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency vite to v7.1.5 (#50)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-13T04:50:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "04e2f9240eed72c9655276fff667bfd5d1e16d5f",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "fix(deps): update codemirror (#46)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-05T06:41:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db295f8c89bbacd4d3ed30b90b7ef68282da9b20",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update crate-ci/typos action to v1.36.2 (#44)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-05T06:41:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a44bf52e94e33098c6265a5ae31405b18a4c8e6a",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency vite to v7.1.4 (#45)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-05T06:41:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "49c29f02ab983fe0a640eae2da9477f974885dc7",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "fix(deps): update dependency node-sql-parser to v5.3.12 (#47)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-05T06:40:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cf9321566af3a9f9723e398726e29056fac6cc86",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update actions/setup-node action to v5 (#48)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-05T06:40:36Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 11,
"commits_last_year": 137,
"latest_release_at": "2026-07-23T20:41:36Z",
"latest_release_tag": "v0.3.0",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 24,
"days_since_latest_release": 10,
"mean_days_between_releases": 39.7
},
"artifacts": {
"collected": true,
"structure": [],
"declarations": [
{
"name": "@marimo-team/codemirror-sql",
"path": "package.json",
"tokens": [
"npm.entry",
"npm.peer_dependencies"
],
"ecosystem": "npm"
}
]
},
"community": {
"has_readme": true,
"has_license": true,
"readme_badges": {
"hosts": [],
"total": 0,
"header": 0,
"collected": true,
"has_inspect_badge": false
},
"has_description": true,
"has_contributing": true,
"health_percentage": 75,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "@marimo-team/codemirror-sql",
"exists": true,
"license": "Apache-2.0",
"keywords": [
"codemirror",
"codemirror-plugin",
"sql"
],
"ecosystem": "npm",
"categories": [],
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@marimo-team/codemirror-sql",
"declared_type": null,
"is_deprecated": false,
"latest_version": "0.3.0",
"repository_url": "https://github.com/marimo-team/codemirror-sql",
"versions_count": 11,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 2,
"monthly_downloads": 11992,
"first_published_at": "2025-07-31T02:30:28.027000Z",
"latest_published_at": "2026-07-23T20:41:22.356000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 10
}
]
},
"popularity": {
"forks": 3,
"stars": 17,
"watchers": 1,
"fork_history": {
"days": [
{
"date": "2025-10-29",
"count": 1
},
{
"date": "2025-11-28",
"count": 1
},
{
"date": "2026-05-26",
"count": 1
}
],
"complete": true,
"collected": 3,
"total_forks": 3
},
"star_history": null,
"open_issues_and_prs": 10
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 40147,
"source_files_sampled": 53,
"oversized_source_files": 0,
"agent_instruction_files": [
".cursorrules",
"AGENTS.md",
"CLAUDE.md"
],
"agent_instruction_max_bytes": 862
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 3,
"malicious_count": 0,
"assessed_package": "npm:@marimo-team/codemirror-sql@0.3.0",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "node-sql-parser",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^5.3.13"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 8,
"merged_prs": 160,
"open_issues": 2,
"closed_ratio": 0.6,
"closed_issues": 3,
"closed_unmerged_prs": 36
},
"bus_factor": 1,
"bot_contributors": 2,
"top_contributors": [
{
"type": "User",
"login": "mscolnick",
"commits": 44,
"avatar_url": "https://avatars.githubusercontent.com/u/2753772?v=4"
},
{
"type": "User",
"login": "Light2Dark",
"commits": 30,
"avatar_url": "https://avatars.githubusercontent.com/u/19585239?v=4"
},
{
"type": "User",
"login": "Knyntsje",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/161234462?v=4"
},
{
"type": "User",
"login": "corleyma",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/2080732?v=4"
}
],
"contributors_sampled": 4,
"top_contributor_share": 0.579
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"autofix.yml",
"demo.yml",
"release.yml",
"test.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"pnpm-lock.yaml"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 3,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 1/22 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 10,
"reason": "all dependencies are pinned",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 9,
"reason": "SAST tool detected but not run on all commits",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 5,
"reason": "5 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "ca192000e6717ed833a550b257139860cb901387",
"ran_at": "2026-08-03T00:07:07Z",
"aggregate_score": 6,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"recent_prs": {
"merged_7d": 2,
"decided_7d": 3,
"merged_30d": 49,
"authors_30d": 2,
"decided_30d": 52,
"sample_size": 60,
"window_days": 30,
"sample_exhausted": false,
"authors_probed_30d": 2,
"newcomer_merged_30d": 0,
"bot_prs_excluded_30d": 5,
"newcomer_authors_30d": 0,
"newcomer_decided_30d": 0
},
"ci_last_run_at": "2026-07-23T20:41:45Z",
"oldest_open_prs": [
{
"number": 136,
"created_at": "2026-05-29T14:51:12Z",
"last_comment_at": "2026-07-22T14:39:57Z",
"last_comment_author": "github-actions"
},
{
"number": 142,
"created_at": "2026-05-29T16:14:31Z",
"last_comment_at": "2026-08-02T13:13:48Z",
"last_comment_author": "renovate"
},
{
"number": 143,
"created_at": "2026-05-29T16:14:51Z",
"last_comment_at": "2026-07-23T13:23:19Z",
"last_comment_author": "github-actions"
},
{
"number": 144,
"created_at": "2026-05-29T17:36:28Z",
"last_comment_at": "2026-05-29T17:36:31Z",
"last_comment_author": "renovate"
},
{
"number": 149,
"created_at": "2026-06-13T16:15:59Z",
"last_comment_at": "2026-07-30T21:04:15Z",
"last_comment_author": "renovate"
},
{
"number": 207,
"created_at": "2026-07-27T22:16:13Z",
"last_comment_at": "2026-07-27T22:16:16Z",
"last_comment_author": "renovate"
},
{
"number": 208,
"created_at": "2026-07-30T09:59:52Z",
"last_comment_at": "2026-07-30T09:59:55Z",
"last_comment_author": "renovate"
},
{
"number": 209,
"created_at": "2026-08-01T01:36:05Z",
"last_comment_at": "2026-08-01T01:36:46Z",
"last_comment_author": "github-actions"
}
],
"last_merged_pr_at": "2026-07-27T11:02:50Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 2,
"created_at": "2025-07-31T02:27:47Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 169,
"created_at": "2026-07-24T09:15:49Z",
"last_comment_at": "2026-07-27T05:28:24Z",
"last_comment_author": "Light2Dark"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/marimo-team/codemirror-sql",
"host": "github.com",
"name": "codemirror-sql",
"owner": "marimo-team"
},
"metrics": {
"overall": {
"key": "overall",
"band": "excellent",
"name": "Overall health",
"note": "The weighted overall 69 is calibrated to 81 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 69,
"calibrated": 81,
"calibration": "2026-08-02"
}
}
],
"value": 81,
"inputs": {
"security": 68,
"vitality": 89,
"community": 56,
"governance": 60,
"calibration": "2026-08-02",
"engineering": 67,
"ai_readiness": 77,
"weighted_overall_raw": 69
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 89,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 81,
"inputs": {
"commits_last_year": 137,
"human_commit_share": 0.48,
"days_since_last_push": 0,
"active_weeks_last_year": 24
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "24/52 weeks with commits",
"points": 16.6,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 24
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "137 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 137
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "exceptional",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 11,
"latest_release_tag": "v0.3.0",
"releases_from_tags": false,
"days_since_latest_release": 10,
"mean_days_between_releases": 39.7
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "11 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 11
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 10 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 10
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~39.7 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 39.7
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 10,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 10 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 10
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 56,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 22,
"inputs": {
"forks": 3,
"stars": 17,
"watchers": 1,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "17 stars",
"points": 19.5,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 17
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "3 forks",
"points": 2.5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 3
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "1 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 1
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "excellent",
"name": "Community health",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": 0,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": true,
"readme_badge_services": [],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "good",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 68,
"inputs": {
"packages": [
"@marimo-team/codemirror-sql"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 11992
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "11,992 downloads/month across npm",
"points": 54.4,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 11992,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 60,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 27,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 4,
"top_contributor_share": 0.579
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 58% of commits",
"points": 9.5,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 58
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "4 contributors",
"points": 5.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 4
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 57,
"inputs": {
"merged_prs": 160,
"open_issues": 2,
"closed_issues": 3,
"prs_merged_7d": 2,
"prs_decided_7d": 3,
"prs_merged_30d": 49,
"prs_decided_30d": 52,
"issue_closed_ratio": 0.6,
"closed_unmerged_prs": 36,
"first_time_authors_30d": 0,
"first_time_prs_merged_30d": 0,
"first_time_prs_decided_30d": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "60% of issues closed",
"points": 25.2,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 60
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "160/196 decided PRs merged",
"points": 24.5,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 160,
"decided": 196
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 1/22 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"followers": 622,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "marimo-team",
"public_repos": 51,
"account_age_days": 1648
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "622 followers of marimo-team",
"points": 20.1,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 622,
"login": "marimo-team"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "51 public repos, account ~4 yr old",
"points": 21.5,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 51
}
},
{
"code": "account_age_years",
"params": {
"years": 4
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"@marimo-team/codemirror-sql"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 10
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 10 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 10
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "11 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 11
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 67,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "4 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 4
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"topics": [
"codemirror",
"codemirror-extension",
"sql"
],
"has_wiki": false,
"homepage": "https://marimo-team.github.io/codemirror-sql/",
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://marimo-team.github.io/codemirror-sql/",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "3 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 3
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "good",
"name": "Security",
"value": 68,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 60,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 6
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 1/22 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "all dependencies are pinned",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool detected but not run on all commits",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "5 existing vulnerabilities detected",
"points": 3.8,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "exceptional",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:@marimo-team/codemirror-sql@0.3.0 runtime dependency closure — what installing the published package pulls in — 3 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "npm:@marimo-team/codemirror-sql@0.3.0",
"assessed": 3
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 3,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 3,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 3
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 77,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.958,
"agent_instruction_files": [
".cursorrules",
"AGENTS.md",
"CLAUDE.md"
],
"agent_instruction_max_bytes": 862
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": ".cursorrules, AGENTS.md, CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".cursorrules, AGENTS.md, CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "46 of 48 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 46,
"sampled": 48
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 63,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"pnpm-lock.yaml"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
"tsconfig.json"
],
"agent_commit_share": 0.01,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0.48
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "1 of the last 100 commits agent-authored or agent-credited",
"points": 2,
"status": "partial",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 1,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "48 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 48,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "all dependencies are pinned",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "exceptional",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 40147,
"source_files_sampled": 53,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/53 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 53,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"labels": [
"library"
],
"scores": {
"library": 17
},
"primary": "library",
"evidence": [
{
"tier": "declared",
"label": "library",
"source": "npm.entry",
"weight": 8
},
{
"tier": "distribution",
"label": "library",
"source": "registry:npm",
"weight": 6
},
{
"tier": "declared",
"label": "library",
"source": "npm.peer_dependencies",
"weight": 3
}
],
"artifacts": [
{
"path": "package.json",
"labels": [
"library"
],
"ecosystem": "npm"
}
],
"confidence": "high",
"host_extension": false,
"runs_as_process": false,
"consumed_by_code": true
},
"metrics_version": "2.3.1"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-08-03T00:07:23.732251Z",
"schema_version": "0.30.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/m/marimo-team/codemirror-sql.svg",
"full_name": "marimo-team/codemirror-sql",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}
Registros relacionados
Repositorios inspeccionados que comparten etiquetas de catálogo o ecosistemas con marimo-team/codemirror-sql. Leer en paralelo →
Las puntuaciones son señales, no garantías. Reflejan prácticas públicamente visibles en GitHub; no son una auditoría de código ni una garantía de seguridad.
Los datos ausentes se excluyen y los pesos se renormalizan; nunca se puntúan como cero. La metodología es versionada y abierta: métricas v2.3.1, esquema v0.30.0 — metodología completa · wiki de métricas.
