Registro públicoModerado
Informe de salud del softwareesquema 0.26.0 · métricas 1.13.0 · 2026-07-22 11:55 UTC
maurigre / mgr-method
MGR — Método Governado por Rastreabilidade (Traceability-Governed Method): spec-driven development framework for coding agents, portable between Claude Code and GitHub Copilot
maurigre/mgr-method tiene un índice de salud de 57 sobre 100, lo que lo sitúa en la banda Moderado. Su puntuación más alta es Engineering Quality (86/100) y la más baja, Security (33/100). Se actualizó por última vez hace 1 día. Una sola persona concentra la mayor parte del trabajo reciente.
57
global / 100Índice de salud del software
Las métricas se agrupan en categorías ponderadas sobre una escala de 1 a 100. El resultado global parte de su media; cuando la evidencia pública activa la Política de Jurisdicciones de Alto Riesgo, la calificación se ajusta y recibe el límite 49 (En riesgo). Preparación para IA queda fuera.
57
Excelente85-100Ejemplar; cumple prácticamente todos los criterios evaluados
Bueno70-84Saludable; carencias menores
Moderado50-69Aceptable con carencias notables; se recomienda revisión
En riesgo30-49Debilidades significativas; su adopción exige cautela
Crítico1-29Problemas graves (proyecto abandonado, un solo mantenedor, sin higiene)
Perfil de puntuación
Cada eje es una categoría. La forma importa más que la media: un proyecto sano llena toda la figura, mientras que un perfil de picos y cráteres indica que la fortaleza en una dimensión enmascara el riesgo en otra.
Titularidad
Mauri G. ReisCuenta personal
15 seguidores46 repositorios públicosdesde ago 2014
Este repositorio pertenece a una cuenta personal. Un proyecto con un único propietario conlleva más riesgo de continuidad que uno respaldado por una organización.
Ecosistemas de paquetes
| Registro | Paquete | Versión | Descargas / mes | Versiones | Última publicación | Etiquetas |
|---|---|---|---|---|---|---|
| npm | mgr-method | 0.5.0 | 2314 | 14 | hace 5 días | spec-driven-developmentsddagent-skillsclaude-codegithub-copilotcoding-agentsai-agentsadrarchitecture-decision-recordscode-reviewdeveloper-toolsclihexagonal |
Métricas por categoría
Vitalidad
¿Está vivo el proyecto: se escribe código y se publican versiones?
68
Actividad de desarrollo
55Moderado
Cómo se puntúa
| 36/36 | Recencia de push — último push hace 1 días |
| 2.1/36 | Cadencia de commits — 3/52 semanas con commits |
| 16.7/18 | Volumen de commits — 71 commits en el último año |
| 0/10 | OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully |
Datos de entrada utilizados
| commits_last_year | 71 |
| human_commit_share | 1 |
| days_since_last_push | 1 |
| active_weeks_last_year | 3 |
Disciplina de publicación
88Excelente
Cómo se puntúa
| 16.2/27 | Publica versiones — 15 etiquetas de versión (sin releases de GitHub) |
| 36/36 | Recencia de las versiones — última versión hace 5 días |
| 27/27 | Cadencia de publicación — una versión cada ~1,1 días |
| 0/10 | OpenSSF Scorecard: Signed-Releases — sin datos |
Datos de entrada utilizados
| releases_count | 15 |
| latest_release_tag | v0.5.0 |
| releases_from_tags | sí |
| days_since_latest_release | 5 |
| mean_days_between_releases | 1,1 |
Excluidos de la puntuación (sin datos o no aplicable): OpenSSF Scorecard: Signed-Releases. Los pesos restantes se han renormalizado.
Comunidad y Adopción
¿Tiene el proyecto usuarios, descargas, atención y unas condiciones acogedoras para quienes contribuyen?
37
Popularidad y adopción
1Crítico
Cómo se puntúa
| 0/60 | Estrellas — 2 estrellas |
| 0/25 | Forks — 0 forks |
| 0/15 | Observadores — 0 observadores |
Datos de entrada utilizados
| forks | 0 |
| stars | 2 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Salud de la comunidad
64Moderado
Cómo se puntúa
| 22.5/22.5 | README |
| 16.9/22.5 | Licencia — archivo de licencia presente, no es una licencia reconocida |
| 18/18 | Guía CONTRIBUTING |
| 0/13.5 | Código de conducta |
| 0/7.2 | Plantilla de issues |
| 0/6.3 | Plantilla de PR |
Datos de entrada utilizados
| has_readme | sí |
| has_license | sí |
| has_contributing | sí |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Adopción en el ecosistema (descargas)
56Moderado
Cómo se puntúa
| 44.9/80 | Descargas mensuales — 2314 descargas/mes en npm |
| 0/20 | Dependientes en el registro — no lo informa este ecosistema |
Datos de entrada utilizados
| packages | mgr-method |
| dependents | — |
| ecosystems | npm |
| total_downloads | — |
| monthly_downloads | 2314 |
Excluidos de la puntuación (sin datos o no aplicable): Dependientes en el registro. Los pesos restantes se han renormalizado.
Sostenibilidad y Gobernanza
¿Sobrevivirá el proyecto a sus personas: factor bus, capacidad de respuesta, quién lo respalda y mantenimiento del paquete?
54
Cómo se puntúa
| 9/54 | Factor bus — la mitad de los commits recae en 1 contribuyente(s) |
| 0/22.5 | Distribución de commits — el principal contribuyente firma el 100% de los commits |
| 1.4/13.5 | Amplitud de contribuyentes — 1 contribuyentes |
| 0/10 | OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
Datos de entrada utilizados
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
Cómo se puntúa
| 0/46.8 | Resolución de issues — sin issues o sin datos |
| 38.2/38.3 | Aceptación de PR — 6/6 PR decididos fusionados |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/22 approved changesets -- score normalized to 0 |
Datos de entrada utilizados
| merged_prs | 6 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 0 |
Excluidos de la puntuación (sin datos o no aplicable): Resolución de issues. Los pesos restantes se han renormalizado.
Propiedad y custodia
54Moderado
Cómo se puntúa
| 10/30 | Respaldo de la propiedad — cuenta personal (usuario) |
| 0/20 | Dominio verificado — no aplicable a cuentas de usuario |
| 8.7/25 | Alcance del propietario — 15 seguidores de maurigre |
| 24.2/25 | Trayectoria — 46 repos públicos, cuenta de ~11 años |
Datos de entrada utilizados
| followers | 15 |
| owner_type | User |
| is_verified | — |
| owner_login | maurigre |
| public_repos | 46 |
| account_age_days | 4349 |
Excluidos de la puntuación (sin datos o no aplicable): Dominio verificado. Los pesos restantes se han renormalizado.
Mantenimiento de paquetes
100Excelente
Cómo se puntúa
| 25/25 | Publicado y resoluble — 1 paquete(s) en npm |
| 35/35 | Recencia de publicación — última publicación hace 5 días |
| 20/20 | Historial de versiones — 14 versiones en el registro |
| 20/20 | No obsoleto — activo, ni obsoleto ni retirado |
Datos de entrada utilizados
| packages | mgr-method |
| ecosystems | npm |
| any_deprecated | no |
| min_days_since_publish | 5 |
Calidad de Ingeniería
¿Existen unas prácticas mínimas de ingeniería y documentación?
86
Prácticas de ingeniería
84Bueno
Cómo se puntúa
| 24/24 | Flujos de trabajo de CI — 2 flujo(s) de trabajo |
| 24/24 | Pruebas presentes |
| 16/16 | Configuración de linter — eslint.config.js |
| 0/9.6 | Hooks de pre-commit |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 4 out of 4 merged PRs checked by a CI test -- score normalized to 10 |
Datos de entrada utilizados
| has_ci | sí |
| has_tests | sí |
| has_editorconfig | no |
| has_linter_config | sí |
| has_precommit_config | no |
Documentación
90Excelente
Cómo se puntúa
| 30/30 | README |
| 25/25 | Directorio de documentación |
| 15/15 | Sitio de documentación / página del proyecto — https://www.npmjs.com/package/mgr-method |
| 10/10 | Descripción del repositorio |
| 10/10 | Topics — 13 topics |
| 0/10 | Wiki |
Datos de entrada utilizados
| topics | agent-skills, ai-agents, architecture-decision-records, claude-code, cli, code-review, coding-agents, developer-tools, github-copilot, nodejs, sdd, spec-driven-development, specification |
| has_wiki | no |
| homepage | https://www.npmjs.com/package/mgr-method |
| has_readme | sí |
| has_docs_dir | sí |
| has_description | sí |
Seguridad
¿Son sólidas las prácticas visibles de seguridad y de cadena de suministro, sin exposición jurisdiccional de alto riesgo sin resolver?
33
Postura de seguridad
33En riesgo
Cómo se puntúa
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 2.5/2.5 | CI-Tests — 4 out of 4 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/22 approved changesets -- score normalized to 0 |
| 0/2.5 | Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.2/2.5 | Licencia — license file detected |
| 0/7.5 | Maintained — project was created within the last 90 days. Please review its contents carefully |
| 0/5 | Packaging — sin datos |
| 2.5/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 5 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — sin datos |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 6/7.5 | Vulnerabilities — 2 existing vulnerabilities detected |
Datos de entrada utilizados
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 3,3 |
Excluidos de la puntuación (sin datos o no aplicable): packaging, signed_releases. Los pesos restantes se han renormalizado.
Preparación para IA
¿Hasta qué punto está el repositorio preparado para desarrollarse y mantenerse con agentes de codificación de IA? Es una insignia independiente y experimental — peso 0,0, de modo que se presenta por separado y no afecta a la puntuación de salud global.
46
Contexto y guía para agentes
40En riesgo
Cómo se puntúa
| 0/45 | Instrucciones para agentes — sin CLAUDE.md / AGENTS.md / reglas de editor |
| 0/15 | Documentación legible por máquinas (llms.txt) |
| 40/40 | Historial de commits legible — 69 de 71 commits humanos declaran su intención (asunto estructurado o cuerpo explicativo) |
Datos de entrada utilizados
| has_llms_txt | no |
| legible_history_share | 0,972 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Cómo se puntúa
| 0/18 | Arranque con un solo comando |
| 22/22 | Pruebas automatizadas |
| 11/11 | Configuración de lint / formato — eslint.config.js |
| 0/11 | Verificación estática de tipos |
| 10/10 | Entorno reproducible — lockfile |
| 0/10 | Práctica demostrada con agentes — ningún commit con autoría de agente entre los últimos 71 |
| 0/8 | Mantenimiento automatizado — no se observan actualizaciones automáticas de dependencias |
| 5/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 5 |
Datos de entrada utilizados
| has_nix | no |
| has_tests | sí |
| lockfiles | package-lock.json |
| has_dockerfile | no |
| typed_language | no |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | sí |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
Legibilidad del código para modelos
55Moderado
Cómo se puntúa
| 0/45 | Código verificable por tipos — JavaScript sin configuración de verificación de tipos |
| 55/55 | Tamaños de archivo manejables — 0/15 archivos fuente de más de 60 KB |
Datos de entrada utilizados
| primary_language | JavaScript |
| largest_source_bytes | 22.188 |
| source_files_sampled | 15 |
| oversized_source_files | 0 |
Datos clave
2estrellas de GitHub
1contribuidores
71commits en los últimos 12 meses
1días desde el último push
15versiones publicadas
1factor bus
0issues abiertas
npmecosistemas de paquetes
Advertencias de recopilación de datos
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
- deps.dev does not index npm:mgr-method@0.5.0; advisories assessed against the repository dependency graph instead
Más detalle
OpenSSF Scorecard 3.3 / 10
3.3agregado
Evaluación de seguridad independiente y agnóstica en cuanto a herramientas, procedente del proyecto de código abierto OpenSSF Scorecard. Cada comprobación premia una práctica de seguridad, no la herramienta de un proveedor concreto. Las comprobaciones que Scorecard no pudo determinar se marcan como n/d y se excluyen de la puntuación de seguridad (nunca se cuentan como cero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 10 | CI-Tests | 4 out of 4 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/22 approved changesets -- score normalized to 0 |
| 0 | Contributors | project has 0 contributing companies or organizations -- score normalized to 0 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 9 | License | license file detected |
| 0 | Maintained | project was created within the last 90 days. Please review its contents carefully |
| n/d | Packaging | packaging workflow not detected |
| 5 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 5 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| n/d | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 8 | Vulnerabilities | 2 existing vulnerabilities detected |
Dependencias directas 2
| Registro | Paquete | Restricción de versión | Manifiesto |
|---|---|---|---|
| npm | @clack/prompts | ^1.7.0 | package.json |
| npm | picocolors | ^1.1.1 | package.json |
Todas las dependencias no recopilado
No fue posible recopilar el conjunto de dependencias resuelto para este informe: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Informe JSON sin procesar legible por máquina
{
"data": {
"repo": {
"topics": [
"agent-skills",
"ai-agents",
"architecture-decision-records",
"claude-code",
"cli",
"code-review",
"coding-agents",
"developer-tools",
"github-copilot",
"nodejs",
"sdd",
"spec-driven-development",
"specification"
],
"is_fork": false,
"size_kb": 404,
"has_wiki": false,
"homepage": "https://www.npmjs.com/package/mgr-method",
"languages": {
"Shell": 1126,
"JavaScript": 79706
},
"pushed_at": "2026-07-20T12:30:31Z",
"created_at": "2026-07-04T19:41:46Z",
"owner_type": "User",
"updated_at": "2026-07-17T11:27:55Z",
"description": "MGR — Método Governado por Rastreabilidade (Traceability-Governed Method): spec-driven development framework for coding agents, portable between Claude Code and GitHub Copilot",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "main",
"license_spdx_raw": "NOASSERTION",
"primary_language": "JavaScript",
"significant_languages": [
"JavaScript"
]
},
"owner": {
"blog": "maurireis.com.br",
"name": "Mauri G. Reis",
"type": "User",
"login": "maurigre",
"company": null,
"location": "Ribeirão Preto, São Paulo, Brazil",
"followers": 15,
"avatar_url": "https://avatars.githubusercontent.com/u/8541648?v=4",
"created_at": "2014-08-25T04:33:19Z",
"is_verified": null,
"public_repos": 46,
"account_age_days": 4349
},
"license": {
"state": "custom",
"spdx_id": null,
"raw_spdx": "NOASSERTION",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2026-07-17T11:27:31Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2026-07-15T13:41:43Z"
},
{
"tag": "v0.3.8",
"kind": "patch",
"published_at": "2026-07-14T11:59:30Z"
},
{
"tag": "v0.3.7",
"kind": "patch",
"published_at": "2026-07-09T19:57:20Z"
},
{
"tag": "v0.3.6",
"kind": "patch",
"published_at": "2026-07-09T19:33:11Z"
},
{
"tag": "v0.3.5",
"kind": "patch",
"published_at": "2026-07-09T15:27:38Z"
},
{
"tag": "v0.3.4",
"kind": "patch",
"published_at": "2026-07-09T14:31:07Z"
},
{
"tag": "v0.3.3",
"kind": "patch",
"published_at": "2026-07-09T02:35:36Z"
},
{
"tag": "v0.3.2",
"kind": "patch",
"published_at": "2026-07-07T17:09:46Z"
},
{
"tag": "v0.3.1",
"kind": "patch",
"published_at": "2026-07-07T11:56:09Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2026-07-07T11:39:31Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2026-07-07T03:21:29Z"
},
{
"tag": "v0.1.3",
"kind": "patch",
"published_at": "2026-07-06T01:24:33Z"
},
{
"tag": "v0.1.2",
"kind": "patch",
"published_at": "2026-07-06T00:17:20Z"
},
{
"tag": "v0.1.1",
"kind": "patch",
"published_at": "2026-07-05T16:47:53Z"
}
],
"recent_commits": [
{
"oid": "709491e8a00442cb61d945bcab8ea7da06b43e2a",
"body": null,
"is_bot": false,
"headline": "chore: alinha os keywords do npm aos topics do repositório",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-17T11:27:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9b0e2923dff60394eb59637b7b505cbcecfdd76e",
"body": "description do pacote em inglês (vitrine npm), mantendo a marca — pendência do\nrelease registrada no completion da spec idioma-canonico-ingles",
"is_bot": false,
"headline": "chore: bump 0.5.0",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-17T10:57:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "83035806613d2ed158222f862e6a7b428854d750",
"body": "…changelog",
"is_bot": false,
"headline": "docs: registra o idioma canônico, o userLanguage e a cli bilíngue no …",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-17T10:57:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d1a016bee5b9d73ebc1cb16609498cb0047f6a2a",
"body": "- banner recebe a tabela de mensagens injetada (tagline, instalador e créditos);\n a marca Método Governado por Rastreabilidade não se traduz — linha fixa, com\n teste guardando a decisão\n- install com -y e sem flag herda o locale em vez de gravar null no manifesto;\n o backfill pt-BR do update volt\n[…]\n alcançar só manifestos da era sem o campo\n- smoke da CLI fixa o locale no helper de execução (o runner do CI usa locale C\n e a tabela en, o que quebrava os asserts em português) e cobre o help em en",
"is_bot": false,
"headline": "fix: aplica o idioma de saída ao banner e ao install não interativo",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-17T10:17:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "657fd334375c3c3563e400a7dbb591c49a8d47c0",
"body": "…e saída\n\n- src/messages.js concentra as strings da borda em fonte única; en é o default\n do pacote e qualquer pt-* seleciona a tabela pt-BR\n- precedência resolvida na borda: --user-language > manifesto (project > global)\n > locale; após o TUI, as mensagens finais saem no idioma escolhido\n- pergun\n[…]\nsmo padrão do adaptador\n de prompts; núcleo não lê ambiente nem decide idioma\n- erros lançados pelo núcleo e strings do validator permanecem pt (registrado\n como ajuste futuro no completion da spec)",
"is_bot": false,
"headline": "feat: adiciona tabela de mensagens en/pt-BR à CLI seguindo o idioma d…",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-17T03:22:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bfef9a3e8ab330ed44419ae82871b444f1fa23c7",
"body": "…onfigurável\n\n- traduz skills/, shared/, sdd-check.sh e README para inglês sob protocolo de\n integridade estrutural + gabarito por arquivo (ADR-0003)\n- adiciona userLanguage ao manifesto: pergunta no install com default do locale,\n flag --user-language, backfill pt-BR silencioso no update e exibiç\n[…]\nlity-rules.md\n com limpeza dos nomes legados; template de revisões vira reviews.md\n- adiciona scripts/check-translation.mjs (ferramenta de dev, fora do tarball) e\n README.pt-BR.md com links cruzados",
"is_bot": false,
"headline": "feat: adota o inglês como idioma canônico e torna o idioma de saída c…",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-17T03:03:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "09de23727bd99c7d9675b9b91e50dda3548f9ad3",
"body": "O workflow volta a rodar ao empurrar uma tag v* (gates de release + checagem tag==versao) e\nsegue disponivel sob demanda via workflow_dispatch. Continua gates-only: nao publica.\n\nA checagem tag==versao e o unico gate que o ci.yml nao cobre, e roda no instante em que o erro\nseria irreversivel (§5: versao publicada nunca e sobrescrita). Vale o guarda automatico.",
"is_bot": false,
"headline": "ci: reativa o disparo do publish por tag, mantendo o manual",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-15T13:41:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "362d219aa0e8cfaa9b44d19e5a4737870a51ce41",
"body": "Minor: as skills diagnosing-bugs e o code-analyzer de dois eixos sao funcionalidade nova que\nvai no pacote (skills/ esta no files). Fecha a secao [Nao lancado] -> [0.4.0] no changelog.\n\nPrep apenas: a tag v0.4.0 e o npm publish (manual, §5) ficam para o momento da publicacao.\nSe a publicacao nao for hoje, ajustar a data 2026-07-15 no changelog.",
"is_bot": false,
"headline": "chore: bump 0.4.0",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-15T12:07:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1559bd06569c49201a8c65974a28df3c93554115",
"body": "As duas features acrescentam conteudo que VAI no pacote publicado (skills/ esta no files):\na skill diagnosing-bugs e o code-analyzer de dois eixos. Faltavam na secao [Nao lancado] --\nso os gates estavam la, e esses nao mudam o pacote.\n\nSem bump: a versao e tag ficam para a publicacao manual (§5), cobrindo tudo desde a 0.3.8.",
"is_bot": false,
"headline": "docs: registra diagnosing-bugs e o eixo-spec no changelog",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-15T11:49:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56e742ec3d4c357101968915887a128e6a96b86c",
"body": "O revisor passa a medir dois eixos independentes, reportados lado a lado: Standards (o codigo\nsegue docs/sdd/09-review-rules.md?) e Spec (o codigo cumpriu a spec de origem?). Fecha a fenda\nentre o que o MGR promete (fidelidade ao plano) e o que ele verificava.\n\nO eixo Spec reprova requisito ausente/\n[…]\nfica inalterado.\n\nModelo de dois eixos adaptado de code-review de Matt Pocock (MIT); o smell baseline dele foi\nrejeitado por violar a §3.1. Sequencial (sem sub-agentes) para preservar a portabilidade.",
"is_bot": false,
"headline": "feat: adiciona o eixo-spec ao code-analyzer",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-15T04:14:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1646eae68325416c7d7d6c780079d7ebf4363f35",
"body": "Disciplina de diagnostico de bug dificil, adaptada de diagnosing-bugs de Matt Pocock\n(github.com/mattpocock/skills, MIT) para o vocabulario e a CONSTITUTION do MGR. Fecha a unica\nlacuna do fluxo: era onde o agente ainda improvisava, lendo codigo para chutar a causa.\n\nA regra central e sinal antes de\n[…]\nerto nao-trivial vai ao spec-create.\nNao cria branch: recomenda onde o fix aterrissa, com adiar como default.\n\nEntra no CORE (sempre instalada). Zero dependencia; 25 testes verdes; mgr validate verde.",
"is_bot": false,
"headline": "feat: adiciona a skill diagnosing-bugs ao nucleo",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-15T03:21:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0586c9b1577c38094c2f02f253a1b002853cf34d",
"body": "O workflow deixa de rodar ao empurrar uma tag v* e passa a executar so sob demanda\n(workflow_dispatch). Ele nao publica nada: roda os gates de release e confere que a tag bate com\na versao do package.json.\n\nCom o disparo manual, o run pode apontar para um branch em vez de uma tag, e a checagem\ntag == versao compararia o nome do branch com a versao. Ela agora e pulada quando o ref nao e\numa tag, em vez de falhar com uma mensagem enganosa.",
"is_bot": false,
"headline": "ci: desativa o disparo automatico do publish",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-14T17:50:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d9878a94b5510e87f01c8e9f8a4772132541a633",
"body": "A v4 dessas actions roda em node20, deprecado nos runners do GitHub, que ja as forcavam a\nexecutar em node24 e emitiam warning. A v5 e o primeiro major das duas que declara\nruns.using: node24.\n\nO breaking change do setup-node v5 (cache automatico quando o package.json declara\npackageManager) nao se aplica: o projeto nao tem esse campo e ja passa cache: npm explicito.",
"is_bot": false,
"headline": "ci: atualiza checkout e setup-node para v5",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-14T17:48:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "29ae86d829032465e7236d00294751469fdfdd7f",
"body": "Os artefatos SDD sairam do versionamento, entao as referencias a docs/sdd/ e specs/ ficaram\npenduradas: quem clonasse via a decisao, mas nao alcancava a fonte citada.\n\nAs citacoes viram texto autocontido (o racional ja estava no corpo dos ADRs) e as referencias\nrestantes apontam so para arquivos que existem no repositorio. O ADR-0001 ganha o ponteiro para\no ADR-0002, que cumpre o enforcement do INV-2 que ele havia deixado em aberto.",
"is_bot": false,
"headline": "docs: torna os ADRs autocontidos, sem apontar para artefatos locais",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-14T17:37:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "993d4bb9feb9b7b3208b3963535bacaba425cf69",
"body": "Os artefatos SDD passam a viver apenas no disco, por decisao do autor. As skills\nspec-create/spec-execute continuam funcionando localmente, pois dependem dos arquivos em\ndisco, nao do versionamento.\n\nOs ADRs (docs/adr/) seguem versionados: sao a decisao publica, nao o rascunho.",
"is_bot": false,
"headline": "chore: remove specs e docs/sdd do versionamento",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-14T17:33:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a7acdccf35e6004af17d461a0746091f002f383",
"body": "Implementa os quatro gates que a CONSTITUTION listava como [A IMPLEMENTAR]: ESLint (flat\nconfig), commitlint (hook commit-msg via core.hooksPath, sem husky), gate de cobertura\n(--test-coverage-lines=95, flag nativa do Node) e npm audit --audit-level=high no CI.\n\nO lint passa a enforcar dois invarian\n[…]\nra: src/ nunca importa bin/ (INV-2) e\nbin/mgr.cjs preso ao ES5, que e o que garante a mensagem legivel em Node < 22.\n\nNenhuma dependencia de runtime; o pacote publicado nao muda. Decisoes em ADR-0002.",
"is_bot": false,
"headline": "feat: adiciona gates de qualidade que quebram o build",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-14T14:50:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3759ac8ce250b826189e142f3692587d1ab89e9e",
"body": "Gera docs/sdd/ (00-08, 09-review-rules, _self-assessment), a CONSTITUTION.md\naprovada e o ADR-0001 (arquitetura em camadas: borda bin/ -> nucleo src/, sem\nports/adapters; inversao pontual no Humble Object de src/prompts.js).\n\nRegistra os gates adotados (ESLint, commitlint, gate de cobertura, auditoria de\ndependencias) como [A IMPLEMENTAR] na CONSTITUTION.\n\nIgnora .claude/ (auto-install de dogfooding) e .spec-init/cache/.",
"is_bot": false,
"headline": "docs: inicializa SDD do projeto (spec-init brownfield)",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-14T12:27:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f24e094128549da3cd236901a226cfd645abedd7",
"body": "Coleta de prompts extraida para src/prompts.js (injetavel) e smoke tests dos\ncomandos do CLI; cobertura de linhas de 81.44% para 96.95%.",
"is_bot": false,
"headline": "chore: bump 0.3.8",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-14T11:59:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fab9f595dbe266a33f49d61e3dbd8fb1c54bb3df",
"body": "O bloco interativo do install vivia inline no bin/mgr.js e nao era testavel\n(exige TTY). Agora a coleta de respostas mora em src/prompts.js e recebe o\nadaptador de prompts injetado (clack no CLI, stub nos testes).\n\nCobertura de linhas: 81.44% -> 96.95%. src/ inteiro a 100% (incluindo o novo\nprompts.js); bin/mgr.js sobe de 72% para 89.7%. Comportamento inalterado.",
"is_bot": false,
"headline": "refactor: extrai a coleta de prompts para src/prompts.js (injetavel)",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-14T11:58:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "76c89707fc3ade7b039f299d8cd1e94f9c148da8",
"body": "…idate)\n\nO smoke test do 0.3.1 trouxe bin/mgr.js para a medicao (o V8 coverage e\nherdado pelo subprocesso), expondo que os comandos do CLI nao tinham teste.\nCobre version/list/validate/help, dry-run, install, status, update, uninstall,\nbuild e os caminhos de erro.\n\nLinhas: 81.44% -> 89.52%; src/ inteiro a 100%. O restante de bin/mgr.js e o\nTUI interativo (clack), que exige TTY.",
"is_bot": false,
"headline": "test: cobre os comandos do CLI (status, update, uninstall, build, val…",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-14T04:36:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c534b351b66dfbee581d3bfe6bbf0ece6de53290",
"body": "Instala a fonte de qualidade e corrige os caminhos _shared no spec-init\n(fix da secao de qualidade do guia introduzida no 0.3.6).",
"is_bot": false,
"headline": "chore: bump 0.3.7",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-09T19:57:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7180bb149109f06da24a02a91f7e0aeb91789a87",
"body": "…init\n\nNo modelo autossuficiente (0.3.0+) nao existe .mgr-core/shared; o installEngine\nso copiava _shared/arch. A fonte shared/quality/regras-qualidade.md nao era\ninstalada e o spec-init apontava para .mgr-core/shared/... (inexistente),\nquebrando a montagem da secao de qualidade do guia (0.3.6).\n\n- installEngine copia _shared/quality quando spec-init esta no conjunto.\n- spec-init referencia _shared/arch e _shared/quality (co-locadas nas skills).\n- teste garante a fonte de qualidade instalada.",
"is_bot": false,
"headline": "fix: instala a fonte de qualidade e corrige caminhos _shared no spec-…",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-09T19:55:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de78cbd1a4e8794b6ec6609be0de224e2877856b",
"body": "spec-execute com fidelidade ao plano e qualidade por linguagem (Effective\nJava + Checkstyle); nova fonte shared/quality/regras-qualidade.md.",
"is_bot": false,
"headline": "chore: bump 0.3.6",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-09T19:33:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b1c321effa86ab078ad5149c0aa44c3bd57e9de8",
"body": "Resolve dois defeitos reais do executor:\n\n- Fidelidade ao plano (trilho): reafirma o artefato exato antes de cada task e\n proibe alterar forma/quantidade/nome por conta propria (o \"1 controller vira\n 4\"). Divergencia real -> parar e voltar ao spec-create.\n- Qualidade e idioma da linguagem aplicado\n[…]\no - JQ-1) + Google Checkstyle;\n demais linguagens [ADAPTADO]. spec-init grava o perfil no guia; code-analyzer cita.\n- Auto-review por task, trilho/buscar-ou-perguntar e economia de tokens explicitos.",
"is_bot": false,
"headline": "feat: spec-execute com fidelidade ao plano e qualidade por linguagem",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-09T19:24:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c524c9ed0a8694ee20448e837ed30ce59c825360",
"body": "DTOs e mappers da web sob a versao do controller (isolamento de versao da\nAPI), com regras ArchUnit; opt-in no perfil Hexagonal+Java.",
"is_bot": false,
"headline": "chore: bump 0.3.5",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-09T15:27:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "625065e2e83dba0eb4d67b0a4b42292354387ac2",
"body": "…sao)\n\nCodifica no perfil Hexagonal+Java (opt-in) que DTOs (...Request/...Response) e\nmappers da web moram sob controller.v* em vez de soltos em adapter.in.web,\nisolando o contrato por versao da API, com regras ArchUnit. Dispensavel em\nAPIs sem versionamento.",
"is_bot": false,
"headline": "feat: dto/mapper da web sob a versao do controller (isolamento de ver…",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-09T15:24:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e18b8da01a80fc25a85f0833ec42fcf8fd8194c0",
"body": "Refino da convencao Hexagonal (perfil Java): command/query, composition\nroot, relacao entre dominios (DDD) e estrutura de adapters mais rica.",
"is_bot": false,
"headline": "chore: bump 0.3.4",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-09T14:31:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d249294e99df04723b69ee528a4267dda06f0de7",
"body": "Codifica no perfil Hexagonal+Java os pontos discutidos:\n\n- Command/Query (input data) co-locados com o input port em core..port.in.\n- config como composition root: unico a acessar as impls de use case\n (regra ArchUnit dedicada).\n- Organizacao de pacotes como escolha neutra (por feature x por camada\n[…]\nort; features independentes (slices ArchUnit).\n- Estrutura de adapters mais rica (web/rabbit/persistence/client) com sufixos\n Controller/Receiver/RepositoryAdapter/ApiAdapter. Regras usam ..core..X..",
"is_bot": false,
"headline": "feat: refina convencao hexagonal (command/query, composition root, DDD)",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-09T14:29:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d6f07403f7d65366a1431fb262085f634126b8ca",
"body": "Governanca do enforcement de arquitetura + convencao/ruleset ArchUnit do\nperfil Hexagonal+Java, e nota de enforcement nas demais arquiteturas.",
"is_bot": false,
"headline": "chore: bump 0.3.3",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-09T02:35:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "19d5148285d8aded4a452b618a305fcd24a4047f",
"body": "O CHANGELOG estava parado no 0.1.0 e listava os guias de arquitetura como\nplanejado/stubs, contradizendo o README. Repoe as entradas 0.1.1-0.3.2 com\ndatas reais de publicacao e registra que arch-clean/onion/layered viraram\ncanonicas no 0.2.0 (sem reescrever a entrada historica do 0.1.0).",
"is_bot": false,
"headline": "docs: atualiza CHANGELOG (0.1.1-0.3.2 e tira arch guides de planejado)",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-09T02:33:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4dfba59afd2c41191a47f1b60b16363d2533bd37",
"body": "Absorve as boas ideias da archunit-guard sem prende-las a hexagonal:\n\n- Governanca do enforcement (agnostica) nas Boas Praticas transversais:\n arch-lint e guard-rail, nunca enfraquecer, drift corrige o codigo, mudanca\n de regra so via adr-create, sem excecoes; traduzir os INV para a ferramenta\n d\n[…]\nase/...Adapter, estrutura interna do adapter) e o\n ruleset ArchUnit concreto.\n- arch-clean/onion/layered ganham a nota de Enforcement (traduzir INV para a\n ferramenta do perfil), marcada [ADAPTADO].",
"is_bot": false,
"headline": "feat: codifica governanca do enforcement e convencao hexagonal",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-09T02:25:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c7d4447b5d88fe49df9953e11e9e2416c14d9f4e",
"body": "Guard de versao do Node no CLI: em Node < 22 mostra mensagem clara em vez de\ncrash minificado.",
"is_bot": false,
"headline": "chore: bump 0.3.2",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-07T17:09:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "587ab85abb210bfdd04c370dfb69a1d9ff5ef76b",
"body": "Adiciona um launcher CJS (bin/mgr.cjs, ES5) como bin do pacote: valida\nprocess.versions.node >= 22 antes de carregar o bundle ESM e, se for menor,\nimprime uma mensagem clara e sai, em vez do crash minificado. O bin passa a\napontar para o launcher, que e incluido em files.",
"is_bot": false,
"headline": "feat: guard de versao do Node no CLI (mensagem clara em Node < 22)",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-07T17:09:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56db7b286b06555525df79f5f51e2504544f5f7b",
"body": "… stubs)\n\nAs skills de arquitetura ja sao canonicas (Clean/Martin, Onion/Palermo,\nLayered/Fowler) e agnosticas a linguagem; a tabela ainda as descrevia como\nstubs [A DEFINIR]. Atualiza tambem a linha da hexagonal (nao e mais so Java).",
"is_bot": false,
"headline": "docs: corrige tabela de skills (arch-clean/onion/layered nao sao mais…",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-07T16:47:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ea4727e12eabcd29a57ff8d97adb21b9628a076",
"body": "Corrige crash \"find is not a function\" no install quando ha instalacao\nanterior detectada (regressao do 0.3.0).",
"is_bot": false,
"headline": "chore: bump 0.3.1",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-07T11:56:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2979145c8087ab4a0015b10cdcf4f5c81cffdb22",
"body": "detectPrior passou a retornar o objeto do manifesto (ou null) em vez de uma\nlista, mas cmdInstall ainda chamava prior.find(...), quebrando com \"find is\nnot a function\" quando havia instalacao previa. Usa prior.model diretamente e\nadiciona um smoke test do CLI que exercita esse caminho.",
"is_bot": false,
"headline": "fix: install nao quebra com instalacao anterior detectada",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-07T11:55:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "50a3c50d2149f2ed412e88f6b2c6c0fffe48e2b1",
"body": "Instalacao seletiva e autossuficiente por motor: skills direto na pasta do\nmotor (sem .mgr-core/skills nem lancadores). O .mgr-core vira config do\nprojeto (manifest.json + .env com MGR_PROJECT_ID, usado pelo mgr-code).\nMigracao automatica do modelo antigo no install/update.",
"is_bot": false,
"headline": "chore: bump 0.3.0",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-07T11:39:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "30a2053726acfbc2b0638c50643fa933efc3178c",
"body": "Cobre detect, installs/detectPrior, os throws de update/uninstall sem\ninstalacao e a resolucao do token via --skills-dir com arch. Linha e funcoes\na 100%.",
"is_bot": false,
"headline": "test: recompoe cobertura do instalador (detect, installs, ciclo de vida)",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-07T11:36:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a35bd16a60ff569f6ee04b6a6eea7a24ed74e07",
"body": "Reescreve a secao de Instalacao: o install agora e seletivo (pergunta\nlinguagem, arquitetura e MGR_PROJECT_ID) e copia so as skills usadas. Cada\nmotor e autossuficiente (skills direto na pasta do motor, sem duplicacao) e o\n.mgr-core guarda apenas config (manifest.json + .env). Documenta a migracao\nautomatica do modelo antigo e as novas flags.",
"is_bot": false,
"headline": "docs: atualiza README e help para o install seletivo e .mgr-core config",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-07T11:36:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "90b58f01edc9446063f50f9cc85a1b8c0bdea5ce",
"body": "O .mgr-core deixa de guardar skills e passa a conter apenas config: o\nmanifest.json e um .env com MGR_PROJECT_ID, consumido pela memoria estendida\n(mgr-code). As skills seguem apenas na pasta do motor, sem duplicacao.\n\nO manifesto volta a ser project-level e a migracao do modelo antigo mantem o\n.mgr-core (remove so o conteudo duplicado) em vez de apaga-lo. Inclui a\npergunta interativa e a flag --project-id.",
"is_bot": false,
"headline": "refactor: .mgr-core como config do projeto (manifest + .env)",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-07T11:30:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b84209279c188eceb387790f54455a8045373a32",
"body": "…iclo de vida)",
"is_bot": false,
"headline": "test: cobre o novo instalador (selecao, autossuficiencia, migracao, c…",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-07T10:53:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5e3a85b6804acb51da98707d5e6a86beaca517ee",
"body": "Substitui o modelo runtime + lancadores (.mgr-core + apontadores) por um\nmodelo autossuficiente: o conteudo completo das skills SELECIONADAS vai\ndireto para a pasta do motor (.claude/skills ou .github/skills), com um\nmanifesto proprio. Cada motor e independente e pode ser removido sem\nafetar o outro\n[…]\ngracao automatica de instalacoes antigas (runtime-launcher): remove\n .mgr-core e lancadores e reinstala no novo layout.\n- flags --language/--arch/--all-skills; status/update/uninstall no novo modelo.",
"is_bot": false,
"headline": "feat: instalacao seletiva e autossuficiente por motor",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-07T10:53:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a6e19b3f62c1b4f53e291e05a47abeea256fa546",
"body": null,
"is_bot": false,
"headline": "chore: bump 0.2.0 (engines >=22 + skills de arquitetura completas)",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-07T03:21:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "62636d748fc5d4d54644c756cffde982f38d414b",
"body": null,
"is_bot": false,
"headline": "docs(spec-init): documenta montagem do guia via fonte transversal unica",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-07T03:19:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d7eb51c6f9fbf277e387692f657c06c871a7ef54",
"body": "Deixa de ser stub: guia da arquitetura em camadas (Fowler, PoEAA) com\nPrincipios top-down (Presentation/Domain/Data Source), Anti-patterns e\nChecklist proprios. Marca na fonte transversal que os Anti-patterns/\nChecklist/enforcement de inversao sao da familia hexagonal/clean/onion;\nlayered usa os seus. Fecha a padronizacao das 4 skills de arquitetura.",
"is_bot": false,
"headline": "feat: arch-layered canonica (Fowler) no template padrao",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-07T03:14:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0640eb275744364583f95925a18ffc876b239132",
"body": "Deixa de ser stub: guia completo da Onion Architecture (Jeffrey Palermo,\n2008) no template comum (Objetivo, Fundamentacao, Principios/INV com os 4\ntenets, Anti-patterns, Referencias), incluindo a fonte transversal unica.",
"is_bot": false,
"headline": "feat: arch-onion canonica (Palermo) no template padrao",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-07T03:09:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ce841f597b2496e7fd6864e98180ae53d548b1e",
"body": "- Cria shared/arch/regras-transversais.md como fonte unica das regras\n transversais (design, testes, logs, mutation, perfis de linguagem,\n boas praticas opt-in, anti-patterns transversais e checklist).\n- arch-clean deixa de ser stub: guia canonico completo (Robert C. Martin)\n no template padrao (\n[…]\n Referencias), incluindo a fonte transversal.\n- arch-hexagonal migra para o mesmo template, movendo as transversais para\n a fonte unica (nada perdido). Template comum entre as skills de arquitetura.",
"is_bot": false,
"headline": "refactor: padroniza skills de arquitetura com fonte transversal unica",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-07T03:03:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "37ddfb9b677ff005992cee97ef3d130868fe8781",
"body": "Reestrutura em invariantes universais + design OO + testes/logs/mutation\n+ perfis por linguagem (Java validado; Go, Python, C#, TypeScript/Node\nadaptados; generico) + guard-rails da IA, com IDs citaveis pelo\ncode-analyzer. Preserva as premissas do autor: mantem racional do mutation,\nos complementos opcionais (ArchUnit e nomenclatura como opt-in, \"oferecer\nnao impor\") e todas as regras validadas originais.",
"is_bot": false,
"headline": "refactor: arch-hexagonal agnostica com perfis por linguagem",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-07T02:21:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "78e1ff52fe6ecb2344724ababc6ac5d924cec23a",
"body": null,
"is_bot": false,
"headline": "chore: engines node >=22 (alinha com o LTS testado no CI)",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-06T16:47:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "98dd68485de9277c2fcf950cf9c09079b007189e",
"body": "Adiciona testes para installer (detect, detectPrior, --skills-dir, update\ncustom, motor invalido), bundle (pkgDir/sharedDir/readVersion), builder\n(buildSkill ausente) e validator. Refatora validator extraindo checkSkill\n(logica pura, sem IO) para permitir testar as ramificacoes de validacao.",
"is_bot": false,
"headline": "test: cobertura de linhas e funcoes a 100%",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-06T02:48:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b904d9c96e189122367d8c442b981cbe462f47ca",
"body": null,
"is_bot": false,
"headline": "docs: usar npx mgr-method@latest na instalacao",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-06T02:35:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cfb5a80d8e554eed29c7163e5e63b744436cdc6c",
"body": null,
"is_bot": false,
"headline": "docs: remove badge de downloads (pacote novo, sem dados)",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-06T02:24:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a2cd678f0baf07dfd5cd3064896e073c6135df3",
"body": null,
"is_bot": false,
"headline": "ci: nao falhar o build se o upload ao Coveralls der erro",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-06T02:10:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0445c5ee495c883242807f836992e51d5b8e0029",
"body": "…o README",
"is_bot": false,
"headline": "docs: adiciona badges (CI, coverage, npm, node, downloads, license) n…",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-06T02:06:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d198eb601b3c1e0736372d2fd7ab01129b367429",
"body": "Adiciona script coverage (node:test com reporter lcov, exclui test/**),\nenvia o lcov ao Coveralls no CI e passa os workflows para node-version\nlts/*. Ignora lcov.info, coverage/ e exemplos/.",
"is_bot": false,
"headline": "ci: cobertura de testes via Coveralls e Node LTS",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-06T02:06:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2f98cb2e590175881cb1b06cd05a4218cb261397",
"body": "Remove auto-publish do CI: OIDC (npm/cli#8730) e granular token bypass_2fa\n(npm/cli#8869) estao quebrados no npm. Workflow agora roda so os gates de\nqualidade na tag e documenta o comando de publish manual (recovery code).",
"is_bot": false,
"headline": "ci: publish manual (gates-only) ate npm corrigir OIDC/token",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-06T01:29:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "591dbb00d4e0b6d7c75a34dc26ee13d5f934176f",
"body": "Espelha o setup de referencia (nklisch/express-route-parser): Node 24\ntraz npm >=11.5.1 nativo, mantem registry-url. Testa se o OIDC token\nexchange passa agora que o metadado repository.url do pacote foi\ncorrigido para maurigre pela publicacao manual do 0.1.2.",
"is_bot": false,
"headline": "test: volta ao OIDC (Node 24 + registry-url) e bump 0.1.3",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-06T01:24:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "98971f75682a04e3ae9fc24d5b647b2e93b6a739",
"body": "OIDC trusted publishing falha com \"package not found\" no token exchange\nmesmo com config correta (bug npm/cli#8730). Fallback confiavel via\nNODE_AUTH_TOKEN + secret NPM_TOKEN. Provenance mantida.",
"is_bot": false,
"headline": "fix: publica via Automation token (NPM_TOKEN) em vez de OIDC",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-06T00:17:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4b6d401ea2c3345f75c68a44dcc428aabc7e6aad",
"body": null,
"is_bot": false,
"headline": "chore: diagnostico OIDC verbose no publish",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-05T23:54:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "37336afa8776cae19bc53f18b9c432d9a910a680",
"body": "O registry-url no setup-node grava um .npmrc temporario com linha de\n_authToken, o que faz o npm ignorar o OIDC (E404/ENEEDAUTH). Removendo,\no npm >=11.5.1 com id-token:write autentica via OIDC automaticamente.",
"is_bot": false,
"headline": "fix: remove registry-url para o OIDC de Trusted Publishing funcionar",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-05T23:52:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c5298c879a318119d4c7bf2a3de1acad8a61f60",
"body": "setup-node deixa o .npmrc com _authToken invalido quando nao ha token,\no que fazia o npm ignorar o OIDC e retornar E404. Zerar NODE_AUTH_TOKEN\nforca o fallback correto para Trusted Publishing.",
"is_bot": false,
"headline": "fix: zera NODE_AUTH_TOKEN no publish para OIDC funcionar",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-05T23:49:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eceb2e02ba95d340d36601e75ef0e76dc36ba5cc",
"body": "- Atualiza npm para >=11.5.1 no workflow (Trusted Publishing exige)\n- Remove token/NODE_AUTH_TOKEN: auth via OIDC (Trusted Publisher)\n- Provenance passa a ser automatica",
"is_bot": false,
"headline": "chore: bump 0.1.2 e corrige publish via OIDC",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-05T23:46:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a81d95cb55dd9f34fca8eaf90c505ebc5e67f24a",
"body": "Updated author and repository details in package.json.",
"is_bot": false,
"headline": "Update author and repository information",
"author_name": "Mauri G. Reis",
"author_login": "maurigre",
"committed_at": "2026-07-05T23:26:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ff13d2e0b790b6b97bcf9776671bb436d3d0661",
"body": "Updated Node.js version from 20 to 22 and modified package version check to use jq.",
"is_bot": false,
"headline": "Update Node.js version and package version check",
"author_name": "Mauri G. Reis",
"author_login": "maurigre",
"committed_at": "2026-07-05T23:24:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b01f3952f8a08b15448ee50ad7e7d8ab5b5f376a",
"body": null,
"is_bot": false,
"headline": "0.1.1",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-05T16:47:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ebfd4b437ec9d59cbc6c1a9d054b515cd647ea41",
"body": "feat: added publishing routine",
"is_bot": false,
"headline": "Merge pull request #2 from maurigre/adds_publishing_routine",
"author_name": "Mauri G. Reis",
"author_login": "maurigre",
"committed_at": "2026-07-05T16:44:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "39c6a5bad8f0502cca636e18f02914d54dbad2df",
"body": null,
"is_bot": false,
"headline": "feat: removed space in banner",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-05T16:42:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1a5fb1c85dc63f48b457acb028ecedffbdbd0828",
"body": null,
"is_bot": false,
"headline": "feat: added publishing routine",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-05T16:37:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "79101aa582b7ebf494e8b63a22414fad32ce4882",
"body": "feat: added evidence capture for chanllenge",
"is_bot": false,
"headline": "Merge pull request #1 from maurigre/add_evidence_capture_for_challenge",
"author_name": "Mauri G. Reis",
"author_login": "maurigre",
"committed_at": "2026-07-05T15:41:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "22231d2eac252df9fa4cb4daa2183a62f045a17d",
"body": null,
"is_bot": false,
"headline": "feat: added evidence capture for chanllenge",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-05T15:35:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a6671296dbf5d21ba6727809058613149d00c4e",
"body": null,
"is_bot": false,
"headline": "feat: base initial version",
"author_name": "Mauri Reis",
"author_login": "maurigre",
"committed_at": "2026-07-04T19:39:45Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 15,
"commits_last_year": 71,
"latest_release_at": "2026-07-17T11:27:31Z",
"latest_release_tag": "v0.5.0",
"releases_from_tags": true,
"days_since_last_push": 1,
"active_weeks_last_year": 3,
"days_since_latest_release": 5,
"mean_days_between_releases": 1.1
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 57,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "mgr-method",
"exists": true,
"license": "SEE LICENSE IN LICENSE",
"keywords": [
"spec-driven-development",
"sdd",
"agent-skills",
"claude-code",
"github-copilot",
"coding-agents",
"ai-agents",
"adr",
"architecture-decision-records",
"code-review",
"developer-tools",
"cli",
"hexagonal"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/mgr-method",
"is_deprecated": false,
"latest_version": "0.5.0",
"repository_url": "https://github.com/maurigre/mgr-method",
"versions_count": 14,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 2314,
"first_published_at": "2026-07-05T18:29:06.035000Z",
"latest_published_at": "2026-07-17T11:46:39.857000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
}
]
},
"popularity": {
"forks": 0,
"stars": 2,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 22188,
"source_files_sampled": 15,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "@clack/prompts",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.7.0"
},
{
"name": "picocolors",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.1.1"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 6,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "maurigre",
"commits": 71,
"avatar_url": "https://avatars.githubusercontent.com/u/8541648?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"publish.yml"
],
"has_docs_dir": true,
"linter_configs": [
"eslint.config.js"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "4 out of 4 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/22 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 9,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 5,
"reason": "dependency not pinned by hash detected -- score normalized to 5",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 8,
"reason": "2 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "709491e8a00442cb61d945bcab8ea7da06b43e2a",
"ran_at": "2026-07-22T11:54:52Z",
"aggregate_score": 3.3,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-17T11:30:32Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-17T10:58:33Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/maurigre/mgr-method",
"host": "github.com",
"name": "mgr-method",
"owner": "maurigre"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 57,
"inputs": {
"security": 33,
"vitality": 68,
"community": 37,
"governance": 54,
"engineering": 86
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 68,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"commits_last_year": 71,
"human_commit_share": 1,
"days_since_last_push": 1,
"active_weeks_last_year": 3
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 1 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 1
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "3/52 weeks with commits",
"points": 2.1,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 3
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "71 commits in the last year",
"points": 16.7,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 71
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 88,
"inputs": {
"releases_count": 15,
"latest_release_tag": "v0.5.0",
"releases_from_tags": true,
"days_since_latest_release": 5,
"mean_days_between_releases": 1.1
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "15 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 15
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 5 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 5
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~1.1 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 1.1
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 37,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 2,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "2 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 2
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "license file present, not a recognized license",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "license_custom",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 56,
"inputs": {
"packages": [
"mgr-method"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 2314
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "2,314 downloads/month across npm",
"points": 44.9,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 2314,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 54,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 10,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 72,
"inputs": {
"merged_prs": 6,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "6/6 decided PRs merged",
"points": 38.2,
"status": "met",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 6,
"decided": 6
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/22 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 54,
"inputs": {
"followers": 15,
"owner_type": "User",
"is_verified": null,
"owner_login": "maurigre",
"public_repos": 46,
"account_age_days": 4349
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "15 followers of maurigre",
"points": 8.7,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 15,
"login": "maurigre"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "46 public repos, account ~11 yr old",
"points": 24.2,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 46
}
},
{
"code": "account_age_years",
"params": {
"years": 11
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"mgr-method"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 5
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 5 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 5
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "14 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 14
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 86,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "2 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 2
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "eslint.config.js",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.js"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "4 out of 4 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"topics": [
"agent-skills",
"ai-agents",
"architecture-decision-records",
"claude-code",
"cli",
"code-review",
"coding-agents",
"developer-tools",
"github-copilot",
"nodejs",
"sdd",
"spec-driven-development",
"specification"
],
"has_wiki": false,
"homepage": "https://www.npmjs.com/package/mgr-method",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://www.npmjs.com/package/mgr-method",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "13 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 13
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 33,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 33,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 3.3
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "4 out of 4 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/22 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 5",
"points": 2.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "2 existing vulnerabilities detected",
"points": 6,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 2
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "at_risk",
"name": "AI Readiness",
"value": 46,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.972,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "69 of 71 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 69,
"sampled": 71
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 48,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"package-lock.json"
],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "eslint.config.js",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.js"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 71",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 71
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 5",
"points": 5,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"primary_language": "JavaScript",
"largest_source_bytes": 22188,
"source_files_sampled": 15,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "JavaScript without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "JavaScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/15 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 15,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"deps.dev does not index npm:mgr-method@0.5.0; advisories assessed against the repository dependency graph instead"
],
"report_type": "repository",
"generated_at": "2026-07-22T11:55:00.570047Z",
"schema_version": "0.26.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/m/maurigre/mgr-method.svg",
"full_name": "maurigre/mgr-method",
"license_state": "custom",
"license_spdx": null
}Las puntuaciones son señales, no garantías. Reflejan prácticas públicamente visibles en GitHub; no son una auditoría de código ni una garantía de seguridad.
Los datos ausentes se excluyen y los pesos se renormalizan; nunca se puntúan como cero. La metodología es versionada y abierta: métricas v1.13.0, esquema v0.26.0 — metodología completa · wiki de métricas.
Cómo se sitúa un resultado dentro del registro general: estadísticas agregadas — npm.