Registro públicoModerado
Informe de salud del softwareesquema 0.27.0 · métricas 1.13.0 · 2026-08-01 07:41 UTC
mycelium-labs / mycelium
Runtime failure prevention for AI agents. Prevents predictable failures before they reach the execution layer
mycelium-labs/mycelium tiene un índice de salud de 58 sobre 100, lo que lo sitúa en la banda Moderado. Su puntuación más alta es Vitality (83/100) y la más baja, Community & Adoption (38/100). Se actualizó por última vez hoy. Una sola persona concentra la mayor parte del trabajo reciente.
58
global / 100Índice de salud del software
Las métricas se agrupan en categorías ponderadas sobre una escala de 1 a 100. El resultado global parte de su media; cuando la evidencia pública activa la Política de Jurisdicciones de Alto Riesgo, la calificación se ajusta y recibe el límite 49 (En riesgo). Preparación para IA queda fuera.
58
Excelente85-100Ejemplar; cumple prácticamente todos los criterios evaluados
Bueno70-84Saludable; carencias menores
Moderado50-69Aceptable con carencias notables; se recomienda revisión
En riesgo30-49Debilidades significativas; su adopción exige cautela
Crítico1-29Problemas graves (proyecto abandonado, un solo mantenedor, sin higiene)
Perfil de puntuación
Cada eje es una categoría. La forma importa más que la media: un proyecto sano llena toda la figura, mientras que un perfil de picos y cráteres indica que la fortaleza en una dimensión enmascara el riesgo en otra.
Titularidad
mycelium.labsOrganización
0 seguidores1 repositorio públicodesde abr 2026
Este repositorio está respaldado por una organización: una custodia compartida y responsable que puede sobrevivir a cualquier mantenedor individual.
Ecosistemas de paquetes
| Registro | Paquete | Versión | Descargas / mes | Versiones | Última publicación | Etiquetas |
|---|---|---|---|---|---|---|
| PyPI | mycelium-runtime | 1.20.1 | 3627 | 36 | hace 0 días | agent-guardrailsagent-reliabilityai-agentscrewaiduplicate-tool-executionidempotencylanggraphllm-agentspythontool-calling |
Métricas por categoría
Vitalidad
¿Está vivo el proyecto: se escribe código y se publican versiones?
83
Actividad de desarrollo
72Bueno
Cómo se puntúa
| 36/36 | Recencia de push — último push hace 0 días |
| 8.3/36 | Cadencia de commits — 12/52 semanas con commits |
| 18/18 | Volumen de commits — 305 commits en el último año |
| 10/10 | OpenSSF Scorecard: Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
Datos de entrada utilizados
| commits_last_year | 305 |
| human_commit_share | 1 |
| days_since_last_push | 0 |
| active_weeks_last_year | 12 |
Disciplina de publicación
100Excelente
Cómo se puntúa
| 27/27 | Publica versiones — 32 versiones publicadas |
| 36/36 | Recencia de las versiones — última versión hace 0 días |
| 27/27 | Cadencia de publicación — una versión cada ~0,4 días |
| 0/10 | OpenSSF Scorecard: Signed-Releases — sin datos |
Datos de entrada utilizados
| releases_count | 32 |
| latest_release_tag | v1.20.1 |
| releases_from_tags | no |
| days_since_latest_release | 0 |
| mean_days_between_releases | 0,4 |
Excluidos de la puntuación (sin datos o no aplicable): OpenSSF Scorecard: Signed-Releases. Los pesos restantes se han renormalizado.
Comunidad y Adopción
¿Tiene el proyecto usuarios, descargas, atención y unas condiciones acogedoras para quienes contribuyen?
38
Popularidad y adopción
15Crítico
Cómo se puntúa
| 14.6/60 | Estrellas — 9 estrellas |
| 0/25 | Forks — 1 forks |
| 0/15 | Observadores — 0 observadores |
Datos de entrada utilizados
| forks | 1 |
| stars | 9 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Salud de la comunidad
50Moderado
Cómo se puntúa
| 22.5/22.5 | README |
| 22.5/22.5 | Licencia — licencia reconocida (MIT) |
| 0/18 | Guía CONTRIBUTING |
| 0/13.5 | Código de conducta |
| 0/7.2 | Plantilla de issues |
| 0/6.3 | Plantilla de PR |
Datos de entrada utilizados
| has_readme | sí |
| has_license | sí |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Adopción en el ecosistema (descargas)
59Moderado
Cómo se puntúa
| 47.5/80 | Descargas mensuales — 3627 descargas/mes en pypi |
| 0/20 | Dependientes en el registro — no lo informa este ecosistema |
Datos de entrada utilizados
| packages | mycelium-runtime |
| dependents | — |
| ecosystems | pypi |
| total_downloads | — |
| monthly_downloads | 3627 |
Excluidos de la puntuación (sin datos o no aplicable): Dependientes en el registro. Los pesos restantes se han renormalizado.
Sostenibilidad y Gobernanza
¿Sobrevivirá el proyecto a sus personas: factor bus, capacidad de respuesta, quién lo respalda y mantenimiento del paquete?
52
Cómo se puntúa
| 9/54 | Factor bus — la mitad de los commits recae en 1 contribuyente(s) |
| 0/22.5 | Distribución de commits — el principal contribuyente firma el 100% de los commits |
| 1.4/13.5 | Amplitud de contribuyentes — 1 contribuyentes |
| 0/10 | OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
Datos de entrada utilizados
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
Cómo se puntúa
| 46.8/46.8 | Resolución de issues — 100% de issues cerradas |
| 36.8/38.3 | Aceptación de PR — 25/26 PR decididos fusionados |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/13 approved changesets -- score normalized to 0 |
Datos de entrada utilizados
| merged_prs | 25 |
| open_issues | 0 |
| closed_issues | 29 |
| issue_closed_ratio | 1 |
| closed_unmerged_prs | 1 |
Propiedad y custodia
33En riesgo
Cómo se puntúa
| 30/30 | Respaldo de la propiedad — propiedad de una organización |
| 0/20 | Dominio verificado |
| 0/25 | Alcance del propietario — 0 seguidores de mycelium-labs |
| 2.7/25 | Trayectoria — 1 repos públicos, cuenta de ~0 años |
Datos de entrada utilizados
| followers | 0 |
| owner_type | Organization |
| is_verified | — |
| owner_login | mycelium-labs |
| public_repos | 1 |
| account_age_days | 100 |
Mantenimiento de paquetes
100Excelente
Cómo se puntúa
| 25/25 | Publicado y resoluble — 1 paquete(s) en pypi |
| 35/35 | Recencia de publicación — última publicación hace 0 días |
| 20/20 | Historial de versiones — 36 versiones en el registro |
| 20/20 | No obsoleto — activo, ni obsoleto ni retirado |
Datos de entrada utilizados
| packages | mycelium-runtime |
| ecosystems | pypi |
| any_deprecated | no |
| min_days_since_publish | 0 |
Calidad de Ingeniería
¿Existen unas prácticas mínimas de ingeniería y documentación?
67
Prácticas de ingeniería
68Moderado
Cómo se puntúa
| 24/24 | Flujos de trabajo de CI — 4 flujo(s) de trabajo |
| 24/24 | Pruebas presentes |
| 0/16 | Configuración de linter |
| 0/9.6 | Hooks de pre-commit |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 12 out of 12 merged PRs checked by a CI test -- score normalized to 10 |
Datos de entrada utilizados
| has_ci | sí |
| has_tests | sí |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Documentación
65Moderado
Cómo se puntúa
| 30/30 | README |
| 25/25 | Directorio de documentación |
| 0/15 | Sitio de documentación / página del proyecto |
| 10/10 | Descripción del repositorio |
| 0/10 | Topics |
| 0/10 | Wiki |
Datos de entrada utilizados
| topics | — |
| has_wiki | no |
| homepage | — |
| has_readme | sí |
| has_docs_dir | sí |
| has_description | sí |
Seguridad
¿Son sólidas las prácticas visibles de seguridad y de cadena de suministro, sin exposición jurisdiccional de alto riesgo sin resolver?
44
Postura de seguridad
44En riesgo
Cómo se puntúa
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 2.5/2.5 | CI-Tests — 12 out of 12 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/13 approved changesets -- score normalized to 0 |
| 0/2.5 | Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | Licencia — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 5/5 | Packaging — packaging workflow detected |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — sin datos |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Datos de entrada utilizados
| source | openssf_scorecard |
| checks_evaluated | 17 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 1 |
| scorecard_aggregate | 4,4 |
Excluidos de la puntuación (sin datos o no aplicable): signed_releases. Los pesos restantes se han renormalizado.
Preparación para IA
¿Hasta qué punto está el repositorio preparado para desarrollarse y mantenerse con agentes de codificación de IA? Es una insignia independiente y experimental — peso 0,0, de modo que se presenta por separado y no afecta a la puntuación de salud global.
60
Contexto y guía para agentes
100Excelente
Cómo se puntúa
| 45/45 | Instrucciones para agentes — AGENTS.md |
| 15/15 | Documentación legible por máquinas (llms.txt) — llms.txt presente |
| 40/40 | Historial de commits legible — 99 de 100 commits humanos declaran su intención (asunto estructurado o cuerpo explicativo) |
Datos de entrada utilizados
| has_llms_txt | sí |
| legible_history_share | 0,99 |
| agent_instruction_files | AGENTS.md |
| agent_instruction_max_bytes | 3293 |
Cómo se puntúa
| 0/18 | Arranque con un solo comando |
| 22/22 | Pruebas automatizadas |
| 0/11 | Configuración de lint / formato |
| 0/11 | Verificación estática de tipos |
| 10/10 | Entorno reproducible — lockfile |
| 0/10 | Práctica demostrada con agentes — ningún commit con autoría de agente entre los últimos 100 |
| 0/8 | Mantenimiento automatizado — no se observan actualizaciones automáticas de dependencias |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Datos de entrada utilizados
| has_nix | no |
| has_tests | sí |
| lockfiles | uv.lock |
| has_dockerfile | no |
| typed_language | no |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | — |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
Legibilidad del código para modelos
54Moderado
Cómo se puntúa
| 0/45 | Código verificable por tipos — Python sin configuración de verificación de tipos |
| 54.4/55 | Tamaños de archivo manejables — 1/86 archivos fuente de más de 60 KB |
Datos de entrada utilizados
| primary_language | Python |
| largest_source_bytes | 125.835 |
| source_files_sampled | 86 |
| oversized_source_files | 1 |
Datos clave
9estrellas de GitHub
1contribuidores
305commits en los últimos 12 meses
0días desde el último push
32versiones publicadas
1factor bus
0issues abiertas
PyPIecosistemas de paquetes
Advertencias de recopilación de datos
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
- deps.dev does not index pypi:mycelium-runtime@1.20.1; advisories assessed against the repository dependency graph instead
Más detalle
OpenSSF Scorecard 4.4 / 10
4.4agregado
Evaluación de seguridad independiente y agnóstica en cuanto a herramientas, procedente del proyecto de código abierto OpenSSF Scorecard. Cada comprobación premia una práctica de seguridad, no la herramienta de un proveedor concreto. Las comprobaciones que Scorecard no pudo determinar se marcan como n/d y se excluyen de la puntuación de seguridad (nunca se cuentan como cero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 10 | CI-Tests | 12 out of 12 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/13 approved changesets -- score normalized to 0 |
| 0 | Contributors | project has 0 contributing companies or organizations -- score normalized to 0 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 10 | Packaging | packaging workflow detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| n/d | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
Dependencias directas 2
| Registro | Paquete | Restricción de versión | Manifiesto |
|---|---|---|---|
| PyPI | pydantic | >=2,<3 | sdk/pyproject.toml |
| PyPI | pyyaml | >=6 | sdk/pyproject.toml |
Todas las dependencias no recopilado
No fue posible recopilar el conjunto de dependencias resuelto para este informe: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Informe JSON sin procesar legible por máquina
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 15849,
"has_wiki": false,
"homepage": null,
"languages": {
"Python": 799645
},
"pushed_at": "2026-08-01T07:39:37Z",
"created_at": "2026-04-23T03:34:37Z",
"owner_type": "Organization",
"updated_at": "2026-08-01T07:39:38Z",
"description": "Runtime failure prevention for AI agents. Prevents predictable failures before they reach the execution layer",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Python",
"significant_languages": [
"Python"
]
},
"owner": {
"blog": null,
"name": "mycelium.labs",
"type": "Organization",
"login": "mycelium-labs",
"company": null,
"location": null,
"followers": 0,
"avatar_url": "https://avatars.githubusercontent.com/u/278574486?v=4",
"created_at": "2026-04-23T03:28:43Z",
"is_verified": null,
"public_repos": 1,
"account_age_days": 100
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v1.20.1",
"kind": "patch",
"published_at": "2026-08-01T07:39:38Z"
},
{
"tag": "v1.20.0",
"kind": "minor",
"published_at": "2026-08-01T06:23:47Z"
},
{
"tag": "v1.19.2",
"kind": "patch",
"published_at": "2026-07-31T14:47:02Z"
},
{
"tag": "v1.19.1",
"kind": "patch",
"published_at": "2026-07-31T02:44:25Z"
},
{
"tag": "v1.19.0",
"kind": "minor",
"published_at": "2026-07-30T03:27:37Z"
},
{
"tag": "v1.18.2",
"kind": "patch",
"published_at": "2026-07-30T02:53:47Z"
},
{
"tag": "v1.18.1",
"kind": "patch",
"published_at": "2026-07-29T18:20:22Z"
},
{
"tag": "v1.18.0",
"kind": "minor",
"published_at": "2026-07-29T03:36:19Z"
},
{
"tag": "v1.17.0",
"kind": "minor",
"published_at": "2026-07-29T02:40:16Z"
},
{
"tag": "v1.16.1",
"kind": "patch",
"published_at": "2026-07-28T17:44:25Z"
},
{
"tag": "v1.14.0",
"kind": "minor",
"published_at": "2026-07-27T01:54:25Z"
},
{
"tag": "v1.13.4",
"kind": "patch",
"published_at": "2026-07-22T05:00:34Z"
},
{
"tag": "v1.13.3",
"kind": "patch",
"published_at": "2026-07-22T05:00:33Z"
},
{
"tag": "v1.13.2",
"kind": "patch",
"published_at": "2026-07-22T05:00:32Z"
},
{
"tag": "v1.13.1",
"kind": "patch",
"published_at": "2026-07-22T05:00:31Z"
},
{
"tag": "v1.13.0",
"kind": "minor",
"published_at": "2026-07-22T05:00:31Z"
},
{
"tag": "v1.12.0",
"kind": "minor",
"published_at": "2026-07-22T05:00:30Z"
},
{
"tag": "v1.11.0",
"kind": "minor",
"published_at": "2026-07-22T05:00:29Z"
},
{
"tag": "v1.10.1",
"kind": "patch",
"published_at": "2026-07-22T05:00:28Z"
},
{
"tag": "v1.10.0",
"kind": "minor",
"published_at": "2026-07-22T05:00:28Z"
},
{
"tag": "v1.9.3",
"kind": "patch",
"published_at": "2026-07-22T05:00:27Z"
},
{
"tag": "v1.9.2",
"kind": "patch",
"published_at": "2026-07-22T05:00:26Z"
},
{
"tag": "v1.9.1",
"kind": "patch",
"published_at": "2026-07-22T05:00:25Z"
},
{
"tag": "v1.9.0",
"kind": "minor",
"published_at": "2026-07-19T12:22:44Z"
},
{
"tag": "v1.8.0",
"kind": "minor",
"published_at": "2026-07-19T06:48:14Z"
},
{
"tag": "v1.7.0",
"kind": "minor",
"published_at": "2026-07-19T06:22:13Z"
},
{
"tag": "v1.6.0",
"kind": "minor",
"published_at": "2026-07-19T05:59:06Z"
},
{
"tag": "v1.5.0",
"kind": "minor",
"published_at": "2026-07-18T17:59:35Z"
},
{
"tag": "v1.4.0",
"kind": "minor",
"published_at": "2026-07-17T08:20:56Z"
},
{
"tag": "v1.3.4",
"kind": "patch",
"published_at": "2026-07-16T05:00:40Z"
},
{
"tag": "v1.3.2",
"kind": "patch",
"published_at": "2026-07-15T03:51:10Z"
},
{
"tag": "v1.3.1",
"kind": "patch",
"published_at": "2026-07-06T04:50:17Z"
}
],
"recent_commits": [
{
"oid": "8745dcd25bbcf52d81e51c4a32a7c2b875ba954c",
"body": "…1.20.1\n\ndocs: manual claim/complete path + release v1.20.1",
"is_bot": false,
"headline": "Merge pull request #55 from mycelium-labs/docs/manual-claim-complete-…",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-08-01T07:38:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a4a03b030fad07a331809b3c42efebc21e7df7b4",
"body": "Document explicit claim → execute → complete beside decorators for custom\ntool runners, surface it from mycelium init help, and bump public version\nrefs so the patch ships with the PyPI description.",
"is_bot": false,
"headline": "docs: manual claim/complete path + release v1.20.1",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-08-01T07:38:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a74c60c7d91612cfc093ce781f10dce24687f31",
"body": "feat: outcome emitter + DTTR telemetry (v1.20.0)",
"is_bot": false,
"headline": "Merge pull request #54 from mycelium-labs/feat/outcome-emitter-dttr",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-08-01T06:22:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a53c05a5fbde4af2a902dc828d502a2ab27bf3a2",
"body": null,
"is_bot": false,
"headline": "feat: outcome emitter + DTTR telemetry (v1.20.0)",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-08-01T06:07:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4cb313d9ec0aaaba8dea21b8caf62dcf1f954626",
"body": "docs: failure & threat model for the transition/ledger core + guarantee→test map",
"is_bot": false,
"headline": "Merge pull request #53 from mycelium-labs/docs/failure-threat-model",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-08-01T05:39:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9fa8de7653b24690955350098e900df5dd919f3e",
"body": "…antee→test map",
"is_bot": false,
"headline": "docs: failure & threat model for the transition/ledger core with guar…",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-08-01T05:36:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "97e1f6056f08ef70fe7ce005359b93b50e5b8a15",
"body": "…l (atomicity contract)",
"is_bot": false,
"headline": "test: stale-snapshot hard-block guard returns held-lease claim to pol…",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-08-01T05:36:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "390a2012eecc866e6ba7e081bd24eab6e97b3ae2",
"body": "docs+tests: payment-class identity guidance + Phase 4 reliability suite (v1.19.2)",
"is_bot": false,
"headline": "Merge pull request #52 from mycelium-labs/docs/payment-class-identity",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-31T14:46:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb6a84c42a5334f3802c663657abe29520223c8c",
"body": "…ntity docs)",
"is_bot": false,
"headline": "chore: release v1.19.2 (Phase 4 reliability tests + payment-class ide…",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-31T14:44:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8fae785e36f84e853709d59cbff5e77caec086f4",
"body": "… property transitions, payment mock)",
"is_bot": false,
"headline": "test: Phase 4 reliability suite (multiprocess, crash-window, outages,…",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-31T14:44:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6e9264ae24286702f31508c89ce6fd7ba370204b",
"body": null,
"is_bot": false,
"headline": "chore: add hypothesis to dev extras",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-31T14:44:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d7cdaa6e3165a042d7267bc488f44335101b067a",
"body": "Recommended production pattern, no API or key-derivation change:\n- sdk/README: never mint payment-class keys from raw client/LLM args\n alone; derive from server-authoritative values; deterministic\n provider_key = HMAC-SHA256(server_secret, action_id) via\n provider_idempotency_key_param. No wall-clock in identity.\n- Root README: one-line pointer.\n- CHANGELOG: Unreleased / Docs bullet.",
"is_bot": false,
"headline": "docs: payment-class identity (server-authoritative) guidance",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-31T03:47:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a546683ecd638c1afc47d29833702f0ee0fff204",
"body": "Docs sync + release prep for the patch:\n- New 'Field mapping for external verifiers' section in sdk/README.md\n (request_id / external_operation_ref / provider id separation; ref is a\n handle, not proof). No integration added.\n- Bump badges/banners (root README, SDK README, handbook) to 1.19.1.\n- CHANGELOG: 1.19.1 section (demo-DX CLI pass + docs), empty Unreleased.",
"is_bot": false,
"headline": "chore: release v1.19.1 (demo-DX pass + docs alignment)",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-31T02:43:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d2f667af1d4a1caefbeafd3fd6b04f08a620f51",
"body": "feat: mycelium demo DX pass (ASCII-safe, visible HARD_BLOCK, clear labels)",
"is_bot": false,
"headline": "Merge pull request #51 from mycelium-labs/feat/demo-dx",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-31T02:32:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6da501c6a2070a0d1db0ae1f84ebbdb491feb329",
"body": "…bels)\n\nDesign-partner feedback from Akash / Thskyshield:\n\n- ASCII-safe output: em dashes/arrows removed and every print routed through\n an ASCII-safe writer, so the tour no longer crashes on Windows consoles\n (cp1252).\n- New explicit HARD_BLOCK section: an ambiguous mutating transition is\n redis\n[…]\nan\n in-memory ledger and points to 'mycelium demo --redis' for the two-worker\n cross-process proof (Redis not required for the default tour).\n\nNo ledger/reconcile semantics changed. No version bump.",
"is_bot": false,
"headline": "feat: mycelium demo DX pass (ASCII-safe, visible HARD_BLOCK, clear la…",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-31T02:23:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "12836e7450da7e4a33e07fd40587a17b72c0ad1e",
"body": "…ntics\n\ndocs: identity-conflict semantics (Mengchheang probe 1)",
"is_bot": false,
"headline": "Merge pull request #50 from mycelium-labs/docs/identity-conflict-sema…",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-30T04:01:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c9f5ff111467f0812e1dd61f890c08e1699d3566",
"body": "…sed)\n\nExpanded the one-liner into a dedicated 'Transition identity and the\nrequest_id caveat' subsection under 'What @ledger / ledger_sync do'.\nStates clearly: same request_id + changed args = new transition\n(intentional); request_id alone is not an identity-conflict guard.\nOpt-in conflict-reject mode discussed but not shipped.\nPoints at test_mengchheang_public_repro.py::test_semantic_identity.\n\nNo code/default change. No version bump.",
"is_bot": false,
"headline": "docs: identity-conflict semantics documented (Mengchheang probe 1 clo…",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-30T03:58:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4f3d664bc1aef6be274f01efe3ca79af23fc0be2",
"body": "…ority-honesty\n\nRevert \"docs: release authority honesty (Igor's seam)\"",
"is_bot": false,
"headline": "Merge pull request #49 from mycelium-labs/revert-48-docs/release-auth…",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-30T03:56:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4033218117c4b9af2ca9ec5ad68c3c52d8093001",
"body": null,
"is_bot": false,
"headline": "Revert \"docs: release authority honesty (Igor's seam)\"",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-30T03:51:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1fb2eb3ae8f95e54a7ac2b3bad8d1a622e91a076",
"body": "docs: release authority honesty (Igor's seam)",
"is_bot": false,
"headline": "Merge pull request #48 from mycelium-labs/docs/release-authority-honesty",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-30T03:51:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "45a75dd02eb6c1e26a454e887b08fecb7e144b18",
"body": "…ivilege\n\nExpanded the one-line warning into a dedicated 'Release authority (what\nMycelium does not authenticate)' subsection under the operator runbook.\nCovers release, mark-dead, and the Python API. Explicit: no auth hook\nshipped (Igor/ThumbGate seam).",
"is_bot": false,
"headline": "docs: release authority honesty — backend write access is the real pr…",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-30T03:50:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "452c6c01285e6bbfcf544d36eb76728351280e60",
"body": "feat: fail-closed Gmail sent-log reconciler (v1.19.0)",
"is_bot": false,
"headline": "Merge pull request #47 from mycelium-labs/feat/gmail-reconciler",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-30T03:26:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "34738fe379436ea88517cfe2bfb933243e6b3b33",
"body": "GmailReconciler queries the Gmail API sent-log by RFC 2822 Message-ID\nto resolve ambiguous email-send transitions. Injected service is duck-typed.\nNew mycelium/providers/ sub-package for first-party reconcilers.\n\nCloses design-partner patch from Shadow / agent-contracts (Mail 7).",
"is_bot": false,
"headline": "feat: fail-closed Gmail sent-log reconciler (v1.19.0)",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-30T03:24:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95644bcbee3903ca5ad2b23a47e1d7a04e81500e",
"body": "chore: bump v1.18.2 (regression tests + docs sync)",
"is_bot": false,
"headline": "Merge pull request #46 from mycelium-labs/release/v1.18.2",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-30T02:53:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f9124c6afe5a4e67288e98da318f90c18f8ee3d1",
"body": null,
"is_bot": false,
"headline": "docs: add mycelium demo --redis to root README quickstart",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-30T02:51:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "605a601bfd6d60b6da8a8c4c665d89962c3c11f7",
"body": null,
"is_bot": false,
"headline": "chore: bump v1.18.2 (regression tests + docs sync)",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-30T02:50:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa2b60d6506ef01ab3a38a23b07b6f33e5b4df3a",
"body": "docs: port Mengchheang's public repro as regression tests (v1.18.1 CAS probes)",
"is_bot": false,
"headline": "Merge pull request #45 from mycelium-labs/test/mengchheang-public-repro",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-30T02:34:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4b12a598dbc8da3009545f4e49adaef9d34f136a",
"body": "…S probes)\n\nPort the three probes from notes/design-partners/mycelium_1_16_0_public_repro.py\ninto the test suite as pytest tests:\n\n 1. test_semantic_identity — same caller request_id + changed args derives\n a different transition key (intentional; documented).\n 2. test_concurrent_reconcile_not\n[…]\npost-1.18.1 _try_reclaim\n (WATCH/MULTI) gives exactly one \"claimed\".\n\nPre-1.18.1 bug baselines preserved in the module docstring.\nIdentity-conflict note added to sdk/README.md transition-key docs.",
"is_bot": false,
"headline": "docs: port Mengchheang's public repro as regression tests (v1.18.1 CA…",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-29T19:40:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1483c1ca04f2d4573292e8245dceeb0a62763569",
"body": "…m-cas\n\nfix: reconcile CAS-loss — poll instead of hard-block on concurrent EXPIRED reset (v1.18.1)",
"is_bot": false,
"headline": "Merge pull request #44 from mycelium-labs/fix/concurrent-reset-reclai…",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-29T18:10:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "48fe59f7cf5fa58e4dbb94e0cff86aa6b34f07e1",
"body": "…PIRED reset (v1.18.1)\n\nRoot cause: a TOCTOU window between mark_blocked and _try_transition in\nthe NOT_EXECUTED reconcile path let both threads claim IN_FLIGHT when\nracing on an EXPIRED (lease-expired) seed. Thread B's mark_blocked\nunconditionally transitioned Thread A's freshly-claimed IN_FLIGHT b\n[…]\nner so the owner-fence in mark_blocked is effective.\n\nDocs:\n - sdk/README.md: add atomicity contract section for the EXPIRED seed\n flow + mark_blocked owner fence.\n - CHANGELOG.md: v1.18.1 entry.",
"is_bot": false,
"headline": "fix: reconcile CAS-loss — poll instead of hard-block on concurrent EX…",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-29T17:16:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bb04db37c457fc3187791caa9b2890310f590b5e",
"body": null,
"is_bot": false,
"headline": "docs: bump root README version banners to v1.18.x",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-29T03:51:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a9527a38f0c096e6bd425ad3875137e862fab815",
"body": "feat: atomicity contract for one-shot terminal outcomes (CAS + owner fencing) (v1.18.0)",
"is_bot": false,
"headline": "Merge pull request #43 from mycelium-labs/feat/atomicity-contract",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-29T03:35:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2fa909c0bde4dfefdd7ac4f16e1f2f46c85814c8",
"body": "# Conflicts:\n#\tCHANGELOG.md\n#\tsdk/mycelium/action_ledger.py\n#\tsdk/pyproject.toml",
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/main' into feat/atomicity-contract",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-29T03:33:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "85f7e27933b5b83c20a71967f481647bcd4366ea",
"body": "…fencing) (v1.18.0)\n\n- try_transition on memory/file/redis/postgres backends\n- LedgerOutcomeAlreadySetError for refused CAS writes\n- Owner fencing in @ledger/_record_failure wrapper paths\n- Poll-loop hardening (no _raise_hard_block after mark_unknown)\n- 123-parametrized test suite in test_atomicity_contract.py\n- Fix: fakeredis fixture leaks -> function-scoped monkeypatch",
"is_bot": false,
"headline": "feat: atomicity contract for one-shot terminal outcomes (CAS + owner …",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-29T03:27:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e9dc99382ec4e62de99ff852e4a03352fe6aef30",
"body": "feat: provider idempotency-key validity windows (fail closed after expiry)",
"is_bot": false,
"headline": "Merge pull request #42 from mycelium-labs/feat/provider-key-validity",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-29T02:28:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "22ff083ca11906bcfb11a49fad6bf22de61da099",
"body": "…piry)",
"is_bot": false,
"headline": "feat: provider idempotency-key validity windows (fail closed after ex…",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-29T02:25:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c042e66dac49160db8a0377a89dc429f5ef6cdfb",
"body": "Fix: use PAT for tag push (PyPI doesn't support reusable workflows)",
"is_bot": false,
"headline": "Merge pull request #41 from mycelium-labs/fix/pypi-workflow-call",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-28T17:51:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d7b1004f579a5ccf3bf3ed3e88d6a4d4e18d87e1",
"body": "PyPI Trusted Publishing does not support reusable workflows\n(workflow_call), causing the publish step to fail. Switch to a\nPAT-based tag push so publish.yml's on: push: tags: v* trigger\nfires naturally when the release job pushes a new tag.\n\n- Removed workflow_call: from publish.yml\n- Removed publish: job from release.yml (no longer needed)\n- release.yml now pushes the tag via RELEASE_PAT secret\n- Fails with clear setup instructions if RELEASE_PAT is missing\n- Updated README with PAT setup step",
"is_bot": false,
"headline": "fix: use PAT for tag push instead of workflow_call",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-28T17:48:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f5f94f1788127a9702494e06838b43357cc45ed0",
"body": "Release v1.16.1",
"is_bot": false,
"headline": "Merge pull request #40 from mycelium-labs/release/v1.16.1",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-28T17:43:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "99a21523601220cbccd3a412e1bee70d458f89fe",
"body": "…r fix)",
"is_bot": false,
"headline": "chore: bump to v1.16.1 (release automation, demo tour, storage wrappe…",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-28T17:39:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b8bc99647f6d77e892496fa5c4f8a7be0a7310c",
"body": "Automate releases on version-bump merge to main",
"is_bot": false,
"headline": "Merge pull request #39 from mycelium-labs/ci/release-on-merge",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-28T17:24:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38e5749f2c682fbf883da908bdca22929becd424",
"body": "…r solo maintainer\n\n- Removed permissions: administration: write (invalid GITHUB_TOKEN key)\n- Dropped the API call; job now only prints setup instructions\n- Changed required approvals from 1 to 0, removed enforce_admins",
"is_bot": false,
"headline": "fix: remove invalid permissions and fix branch-protection settings fo…",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-28T17:15:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b40266f8a1a4c63856ca73bde67a8ed9b799f04",
"body": "Adds a new release.yml workflow triggered on push to main that:\n- Reads version from sdk/pyproject.toml and checks if tag exists\n- Runs SDK tests + ruff as a safety gate before tagging\n- Creates annotated tag v{version} + GitHub Release with changelog notes\n- Calls publish.yml (now reusable via work\n[…]\nrapid merges\n- Includes one-time branch protection setup via workflow_dispatch\n\nThe existing manual tag-push and workflow_dispatch paths remain\nunchanged. Doc-only merges release nothing (idempotent).",
"is_bot": false,
"headline": "feat: automate releases on version-bump merge to main",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-28T14:49:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8c8686ebc1ee47afd99f41adba82e198b3c410dd",
"body": "- uv.lock: regenerate mycelium-runtime 1.15.0 -> 1.16.0\n- Export LedgerWorkerAliveError from package root\n- Export has_worker_death_evidence from transition.__all__ and package root\n- README: \"What it does\" heading v1.15.x -> v1.16.x",
"is_bot": false,
"headline": "chore: sync version refs and exports (v1.16.0)",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-28T03:05:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4730e881b9098794f490b3515348f6eaace37ee5",
"body": "Reclaim requires affirmative death evidence when opted in via\nreclaim_requires_death_signal (default False). Prevents reclaiming\na transition from a worker that is merely paused (GC, storage\npartition, failing auto-renew).\n\n- LedgerEntry: last_heartbeat_at, worker_dead_asserted_by/_at fields\n- has_w\n[…]\ndger_sync() decorators and config.py\n- 26 tests in tests/test_worker_death_signal.py\n\nAlso ships fail-closed storage contract (14a8514) and feature demo\nexpansion (a96620d) under the same v1.16.0 tag.",
"is_bot": false,
"headline": "feat: worker-death signal before reclaim (v1.16.0)",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-28T02:47:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a96620d71f7a7cfd52da9a9e434d70811289d74c",
"body": null,
"is_bot": false,
"headline": "docs: expand demo into full feature tour (v1.15.0)",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-27T04:21:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "14a8514078bf327e855fca8c7862cae7826af6fa",
"body": null,
"is_bot": false,
"headline": "feat: fail-closed storage contract + unclassified tool policy (v1.15.0)",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-27T04:21:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d33cf4cb8fbba5d2e15eb34fcfdd1b330db36112",
"body": null,
"is_bot": false,
"headline": "feat: operator release workflow for hard-blocked transitions (v1.15.0)",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-27T02:29:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f448535c4a1bca2ae2e5d4fc1195bd07db92dd8f",
"body": "Keep peers on POLL while @ledger/@ledger_sync work is still running, instead\nof looking EXPIRED after lease_ttl. Document lease_renew_interval across\nREADMEs, handbook, and init template.",
"is_bot": false,
"headline": "feat: auto-renew execution leases during long ledgered tools (v1.14.0)",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-27T01:48:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "66160aa6be0cd2cef168b4fec3c14ff628dc0481",
"body": "Add redis/postgres extras and mycelium run to install snippets; point first-time readers at @ledger and task-level idempotency.",
"is_bot": false,
"headline": "docs: fill install gaps and surface ledger APIs on root README",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-23T03:19:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1a26f84e39b53a156f72216944fd8de3b429baf8",
"body": "Root README, handbook lede, and llms.txt now name duplicate side effects, bad tool args, and fresh tool data—not only the side-effect path.",
"is_bot": false,
"headline": "docs: widen hero to cover args, scope, and stale tool data",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-23T02:59:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b9e202ee8732a6c634c538fbd6e02a24db1a04d3",
"body": "Reframe Mycelium as wrapping tools after LLM tool_calls (not a pre-LLM layer), and mark duplicate-side-effect / transition envelope as core vs context and tool boundaries as opt-in.",
"is_bot": false,
"headline": "docs: align product scope with tool-guard architecture",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-23T02:55:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2cd31933d59757a7b3f42f5aa076aaaa4b5c282b",
"body": null,
"is_bot": false,
"headline": "proof: two-worker real Redis Cloud-style #7417 redispatch (v1.13.4)",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-22T04:44:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f11b1e166bc4f36accba4460b19210f0a96fd80",
"body": null,
"is_bot": false,
"headline": "docs: #7417 transition-envelope pitch + Cloud ~180s note (v1.13.3)",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-22T04:22:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "93233f3b6dcb5c0e3bd4f8cfc08c94bb71acea32",
"body": null,
"is_bot": false,
"headline": "docs: map public sufficiency gates to Mycelium TransitionGate (v1.13.2)",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-22T03:37:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "65933dadb9ee268ca2e240332eae6f618bd21df8",
"body": "docs: sync version banners to v1.13.1",
"is_bot": false,
"headline": "Merge pull request #37 from mycelium-labs/docs/version-banners-1.13.1",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-22T03:19:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cbd903ec8e007e5367cd905c90498d8c7e7a0874",
"body": null,
"is_bot": false,
"headline": "docs: sync version banners to v1.13.1 for PyPI republish",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-22T03:19:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2c5eb9fd2e8e0cda18c098c3b4476d18a4fe481",
"body": "feat: REPAIR gate for incomplete durable transitions (v1.13.0)",
"is_bot": false,
"headline": "Merge pull request #36 from mycelium-labs/feat/repair-gate-1.13.0",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-22T03:11:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c9b33a1416b6d323bdda37a615b4af9ae97074af",
"body": "Heal missing key/boundary/terminal context before execute so redispatches\ndo not spawn a second side effect; renew_lease remains the owner-side lease extend.",
"is_bot": false,
"headline": "feat: add REPAIR gate for incomplete durable transitions (v1.13.0)",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-22T03:00:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3da15445f1b3055dd75c3078d6af25b9da2e1195",
"body": "Publish the zero-touch YAML launcher with synchronized package metadata, PyPI documentation, and handbook descriptions.",
"is_bot": false,
"headline": "feat: release command auto-instrumentation (v1.12.0)",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-21T04:27:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b3f2738bdda57da9d97aae130d4e2bd928850fdb",
"body": "…tation\n\nAdd command-based auto-instrumentation",
"is_bot": false,
"headline": "Merge pull request #35 from mycelium-labs/feat/command-auto-instrumen…",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-21T04:25:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "171d541f38881a16ad39c034069a8dcda731979d",
"body": "Wrap explicitly addressed YAML tools and tasks before application startup so developers can enable Mycelium without editing every function, while failing closed on unsafe or partial instrumentation.",
"is_bot": false,
"headline": "feat: add command-based auto-instrumentation",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-21T04:23:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d925d0badbdc4a02c228353d963eb3a17fb80a68",
"body": "Publish the merged LangGraph ToolRuntime identity integration as a backward-compatible minor release.",
"is_bot": false,
"headline": "chore: release v1.11.0",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-21T03:36:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8e036624ae76136b330d3de48d8fcb4554346f11",
"body": "feat: auto-propagate LangGraph runtime IDs",
"is_bot": false,
"headline": "Merge pull request #34 from mycelium-labs/feat/langgraph-runtime-ids",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-21T03:33:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e72cd13200c277f11427486f2a14ddccc3dfd252",
"body": "Map trusted ToolRuntime metadata into generic Mycelium transition identity so LangGraph redispatches deduplicate without manual ID plumbing.",
"is_bot": false,
"headline": "feat: auto-propagate LangGraph runtime IDs",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-21T03:00:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "12c7c766c82c5c5206560bd257e778437ec6fe19",
"body": "Shields SVG for ?cacheSeconds=60 was Cloudflare-cached at v1.9.3; bump release query and README heading so GitHub/PyPI show the current version.",
"is_bot": false,
"headline": "docs: bust stale PyPI version badge cache (v1.10.1)",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-20T05:12:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a30a94a9e75f5a1a434bf4e51ac916e69109bb9",
"body": "Make execution lease windows first-class in resolution and allow workers to extend leases mid-flight so peers keep polling instead of reclaiming.",
"is_bot": false,
"headline": "feat: lease validity + renew_lease for long-running tools (v1.10.0)",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-20T04:58:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "211544f10f216220cad863de8f032629909c89a9",
"body": "….9.3\n\ndocs: envelope field stack + PyPI description republish (v1.9.3)",
"is_bot": false,
"headline": "Merge pull request #33 from mycelium-labs/docs/envelope-fields-pypi-1…",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-20T03:26:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c3fbebb78b537b63c9d4d41029d9daab0c6a8fb",
"body": "Document the six transition-envelope fields in priority order and the\nrequired-support invariant (Mycelium branding). Patch bump so the next\ntag publish rebuilds PyPI's long description from the current sdk/README.",
"is_bot": false,
"headline": "docs: envelope field stack + republish PyPI description (v1.9.3)",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-20T03:25:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "16cb799a233ca23cd4a4e04b84a2f4503d0625ec",
"body": "…block-expired-reconcile\n\ndocs: resolution gates, SOFT_BLOCK, and EXPIRED reclaim",
"is_bot": false,
"headline": "Merge pull request #32 from mycelium-labs/docs/resolution-gates-soft-…",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-20T03:06:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7bf9f2c2a3215311eb6f2fefe3a6c9e70db0e6da",
"body": "Update root README, sdk README, and the handbook to describe the current\ntransition resolution model: gate taxonomy, read-only SOFT_BLOCK, and\nEXPIRED + not_crossed reclaim only when external_operation_ref reconcile\nproves NOT_EXECUTED.",
"is_bot": false,
"headline": "docs: document resolution gates, SOFT_BLOCK, and EXPIRED reclaim",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-20T03:04:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3217237ef0bd13c09785a38e169b45587d2a9b9a",
"body": "…laim-if-provable\n\nfix: EXPIRED + not_crossed reclaim only if provable (v1.9.2)",
"is_bot": false,
"headline": "Merge pull request #31 from mycelium-labs/fix/expired-not-crossed-rec…",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-20T02:31:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d8a921b65e563dcc618ba838403f66c1c72375b",
"body": "Close the remaining gap on stale-lease reclaim for strict side-effecting\ntools. Poll no longer hard-blocks blind on EXPIRED mid-wait; it returns so\nthe claim loop can reconcile via external_operation_ref.\n\nReclaim only when the provider proves NOT_EXECUTED; missing ref stays\nfail-closed HARD_BLOCK. Clearer expired hard-block messages distinguish\nnot_crossed from maybe_crossed/crossed.",
"is_bot": false,
"headline": "fix: EXPIRED + not_crossed reclaim only if provable (v1.9.2)",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-20T02:28:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dee33d870afae4aed7c269f70940afb4b6cd91b0",
"body": null,
"is_bot": false,
"headline": "chore: release v1.9.1",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-19T12:15:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e560d70b6ae42bdc69d5448941f0aa560c6a2e29",
"body": "…nknown\n\nfeat: SOFT_BLOCK gate for read-only UNKNOWN (v1.9.0)",
"is_bot": false,
"headline": "Merge pull request #30 from mycelium-labs/feat/soft-block-read-only-u…",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-19T12:07:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "433d6d64884c8fe3fa636e98a2ab7c78f45896a3",
"body": "Resolve an ambiguous UNKNOWN/BLOCKED terminal outcome on a read-only tool\nthrough a dedicated read-only gate instead of polling to a timeout.\n\n- Add SOFT_BLOCK to TransitionGate and resolve_read_only_gate() describing the\n full read-only taxonomy (RETURN / POLL / RECLAIM / SOFT_BLOCK).\n- Since re-r\n[…]\nnc argument), raising the new LedgerSoftBlockError.\n- Side-effecting UNKNOWN resolution is unchanged (still HARD_BLOCK / reconcile).\n- Export LedgerSoftBlockError; works in sync and async claim paths.",
"is_bot": false,
"headline": "feat: SOFT_BLOCK gate for read-only UNKNOWN (v1.9.0)",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-19T11:39:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "435dbeb602b4e17b9a34fad3b480f02332d0a93a",
"body": "Turn retry_only_with_same_provider_idempotency_key from a cooperative\npromise into an opt-in enforced rule.\n\n- New provider_idempotency_key_param on ToolTransitionBinding and in YAML\n names the kwarg carrying the provider idempotency key.\n- New durable LedgerEntry.provider_idempotency_key captured \n[…]\ns the key still maps to the same transition and is caught.\n- Opt-in and backward compatible: tools that do not declare the param keep\n the previous cooperative behavior. Sync and async paths covered.",
"is_bot": false,
"headline": "feat: enforce same provider idempotency key on retry (v1.8.0)",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-19T06:47:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7f94acd175f0ec5dd8c74b45a8d30ccce3f4c103",
"body": null,
"is_bot": false,
"headline": "docs: remove em dashes from docs site copy",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-19T06:32:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2f0067d3e2ba5e1a68cca1de8862b5bb1acd10d",
"body": "… API)",
"is_bot": false,
"headline": "docs: update site to v1.7.0 (banner + reconcile/boundary/spendability…",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-19T06:29:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "22d59cc9f9aaa1d77b3f60d89e9b629e390b363d",
"body": null,
"is_bot": false,
"headline": "docs: add PyPI downloads badge to README and docs site",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-19T06:21:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cde09fb3ae7a7e586950cf2b6310f3ed4fa34e83",
"body": "Add an automated reconciliation loop (Phase 2) so an ambiguous\nside-effecting transition that recorded an external_operation_ref can be\nresolved against the provider instead of hard-blocking for a human.\n\n- New Reconciler protocol (read-only reconcile(entry) -> ReconcileResult;\n optional reconcile_\n[…]\nf, no reconciler, or a raising/timing-out\n reconciler all resolve to hard-block; a reconcile exception never\n propagates.\n- Export Reconciler, ReconcileResult, ReconcileStatus from the package root.",
"is_bot": false,
"headline": "feat: provider reconcile loop for external_operation_ref (v1.7.0)",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-19T06:18:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a6957390d4b6cae09d615ccc04ec90ebe1355f6d",
"body": null,
"is_bot": false,
"headline": "docs: add Google Search Console verification file",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-19T05:59:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "70e02b66056188faa05e8a40289db84e580fc435",
"body": "Add a durable external_operation_ref on ledger entries plus\nrecord_external_operation() / attach_external_operation_ref() to capture the\nprovider's operation handle (id or idempotency key). The ref survives an\nambiguous failure and is surfaced in the hard-block message so a transition\ncan be reconciled against the provider. Phase 1: recording only; automated\nprovider reconcile lands next. Backward compatible.",
"is_bot": false,
"headline": "feat: external_operation_ref recording (v1.6.0)",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-19T05:58:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a2e4d3e10c23b8029c9ce2e06a471ead5098669",
"body": "Target \"reliable AI agents\" and related queries and make the docs\ndiscoverable/citable by AI answer engines, without cutting a release.\n\n- index.html: canonical, robots, author, theme-color, og:site_name/locale\n- reliability-focused description/OG/Twitter copy and keywords\n- add SoftwareApplication + WebSite JSON-LD; new \"reliable AI agents\" FAQ\n- add robots.txt (allow AI crawlers + sitemap), sitemap.xml, llms.txt",
"is_bot": false,
"headline": "docs: strengthen SEO and GEO for the docs site",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-19T05:55:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1d4df2cfac9c9f6b992190abeebd7e5fda929bb9",
"body": "Replace \"experimental early release\" with a statement that the public API\nis stable and breaking changes only land at major versions.",
"is_bot": false,
"headline": "docs: reword version banner to \"early but API-stable\"",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-19T05:51:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a988bb9df7ce6ada27766422d00d8e099b4773f2",
"body": "…5.0)\n\nWrap the external call in `with side_effect():` so a failure after the\neffect is classified FAILED_AFTER_EFFECT / UNKNOWN instead of the blanket\nFAILED_BEFORE_EFFECT. Boundary is persisted before the call and only moves\nforward, so a crash mid-call leaves the entry ambiguous and redispatch\nhard-blocks. Backward compatible; works in sync and async tools.",
"is_bot": false,
"headline": "feat: side_effect() boundary marker for mid-flight maybe_crossed (v1.…",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-18T17:59:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d375d0b7019764eebae95ca551ea81e4bb54bf85",
"body": "Add multi_use / single_use / non_replayable with class-derived defaults,\nwire through YAML and gate resolution, and document in the full template.",
"is_bot": false,
"headline": "feat: ship spendability on transition bindings (v1.4.0)",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-17T08:20:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "876c7b8d282769a72dc4acefa418d141743a642f",
"body": "Draft Dev.to post kept locally under gitignored randm/docs/articles/.",
"is_bot": false,
"headline": "chore: move unpublished articles out of public docs/",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-16T04:43:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4227d7e112219fe7095f19b4785890447122bf19",
"body": null,
"is_bot": false,
"headline": "chore: release v1.3.4",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-16T04:39:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f008e93b20ec87534fa35dd3f7089ea9feb521a0",
"body": null,
"is_bot": false,
"headline": "docs: clarify init on-ramp vs --full reference scaffold",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-16T04:38:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "667cfa58c5b0e06efe8ae8c1d4915a784a1aa684",
"body": null,
"is_bot": false,
"headline": "docs: keep tools/tasks empty so registry.auto cannot allowlist TODOs",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-16T04:37:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "319bdbeb69daf94b8e2c71fb3dc0c949b59707c8",
"body": null,
"is_bot": false,
"headline": "docs: make allowlist-first wire-up step 1 in full YAML template",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-16T04:35:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "11b3e049d659f8feef8edd294ab6176e7d770bdd",
"body": null,
"is_bot": false,
"headline": "docs: compress full YAML template with required/optional legend",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-16T04:34:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c4c44f7fba5142b459f8222a358e3f7075f41ba4",
"body": "…dator",
"is_bot": false,
"headline": "docs: templatify tasks, registry, runner, history_guard, message_vali…",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-16T04:32:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bd98141fed646728bb3cdf8f752a5badcc2926b5",
"body": null,
"is_bot": false,
"headline": "docs: slim tools scaffold to one fill-in stub per side_effect_class",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-16T04:31:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d551aa00dfcf5a8ca8b7f6ae9b4e5770b046e33",
"body": null,
"is_bot": false,
"headline": "docs: replace placeholder tools with five-class examples in scaffold",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-16T04:30:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4edefaf6da5748afc3a9396f617b23dfb997c87a",
"body": null,
"is_bot": false,
"headline": "docs: templatify audit_receipt signing and storage options",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-16T04:29:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b888521ca19539c87e56f35f760096fa5d773bab",
"body": null,
"is_bot": false,
"headline": "docs: templatify state_flush storage and flush_on in YAML scaffold",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-16T04:28:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "52d74a754f2c076cf28f8deb420b61ba707400fb",
"body": null,
"is_bot": false,
"headline": "docs: spell out task_ledger storage options without cross-refs",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-16T04:26:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "14e704047c634c215386d94d5608df90b918bbdc",
"body": null,
"is_bot": false,
"headline": "docs: clear placeholder tasks from task_ledger allowlist",
"author_name": "Nandana Dileep",
"author_login": "nandanadileep",
"committed_at": "2026-07-16T04:26:19Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 32,
"commits_last_year": 305,
"latest_release_at": "2026-08-01T07:39:38Z",
"latest_release_tag": "v1.20.1",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 12,
"days_since_latest_release": 0,
"mean_days_between_releases": 0.4
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 37,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "mycelium-runtime",
"exists": true,
"license": "MIT",
"keywords": [
"agent-guardrails",
"agent-reliability",
"ai-agents",
"crewai",
"duplicate-tool-execution",
"idempotency",
"langgraph",
"llm-agents",
"python",
"tool-calling",
"Development Status :: 4 - Beta",
"Intended Audience :: Developers",
"License :: OSI Approved :: MIT License",
"Programming Language :: Python :: 3",
"Programming Language :: Python :: 3.10",
"Programming Language :: Python :: 3.11",
"Programming Language :: Python :: 3.12",
"Programming Language :: Python :: 3.13",
"Topic :: Software Development :: Libraries :: Python Modules"
],
"ecosystem": "pypi",
"matches_repo": true,
"registry_url": "https://pypi.org/project/mycelium-runtime/",
"is_deprecated": false,
"latest_version": "1.20.1",
"repository_url": "https://github.com/mycelium-labs/mycelium",
"versions_count": 36,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 3627,
"first_published_at": "2026-06-30T04:29:08.989266Z",
"latest_published_at": "2026-08-01T07:40:41.638152Z",
"latest_version_yanked": null,
"days_since_latest_publish": 0
}
]
},
"popularity": {
"forks": 1,
"stars": 9,
"watchers": 0,
"fork_history": {
"days": [
{
"date": "2026-07-30",
"count": 1
}
],
"complete": true,
"collected": 1,
"total_forks": 1
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": true,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 125835,
"source_files_sampled": 86,
"oversized_source_files": 1,
"agent_instruction_files": [
"AGENTS.md"
],
"agent_instruction_max_bytes": 3293
},
"dependencies": {
"manifests": [
"sdk/pyproject.toml"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"pypi"
],
"dependencies": [
{
"name": "pydantic",
"manifest": "sdk/pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=2,<3"
},
{
"name": "pyyaml",
"manifest": "sdk/pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=6"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 25,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 29,
"closed_unmerged_prs": 1
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "nandanadileep",
"commits": 312,
"avatar_url": "https://avatars.githubusercontent.com/u/110280757?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"pages.yml",
"publish.yml",
"release.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"uv.lock"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/13 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "8745dcd25bbcf52d81e51c4a32a7c2b875ba954c",
"ran_at": "2026-08-01T07:41:40Z",
"aggregate_score": 4.4,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-08-01T07:40:45Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-08-01T07:38:58Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/mycelium-labs/mycelium",
"host": "github.com",
"name": "mycelium",
"owner": "mycelium-labs"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 58,
"inputs": {
"security": 44,
"vitality": 83,
"community": 38,
"governance": 52,
"engineering": 67
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 83,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"commits_last_year": 305,
"human_commit_share": 1,
"days_since_last_push": 0,
"active_weeks_last_year": 12
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "12/52 weeks with commits",
"points": 8.3,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 12
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "305 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 305
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 32,
"latest_release_tag": "v1.20.1",
"releases_from_tags": false,
"days_since_latest_release": 0,
"mean_days_between_releases": 0.4
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "32 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 32
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~0.4 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 0.4
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 38,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 15,
"inputs": {
"forks": 1,
"stars": 9,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "9 stars",
"points": 14.6,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 9
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "1 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 1
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 59,
"inputs": {
"packages": [
"mycelium-runtime"
],
"dependents": null,
"ecosystems": "pypi",
"total_downloads": null,
"monthly_downloads": 3627
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "3,627 downloads/month across pypi",
"points": 47.5,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 3627,
"ecosystems": "pypi"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 52,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 10,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"merged_prs": 25,
"open_issues": 0,
"closed_issues": 29,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 1
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 46.8,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "25/26 decided PRs merged",
"points": 36.8,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 25,
"decided": 26
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/13 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 33,
"inputs": {
"followers": 0,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "mycelium-labs",
"public_repos": 1,
"account_age_days": 100
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "0 followers of mycelium-labs",
"points": 0,
"status": "missed",
"details": [
{
"code": "owner_followers",
"params": {
"count": 0,
"login": "mycelium-labs"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "1 public repos, account ~0 yr old",
"points": 2.7,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 1
}
},
{
"code": "account_age_years",
"params": {
"years": 0
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"mycelium-runtime"
],
"ecosystems": "pypi",
"any_deprecated": false,
"min_days_since_publish": 0
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on pypi",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "pypi"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 0 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 0
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "36 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 36
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 67,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "4 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 4
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 44,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 44,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 4.4
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/13 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 1
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 60,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"has_llms_txt": true,
"legible_history_share": 0.99,
"agent_instruction_files": [
"AGENTS.md"
],
"agent_instruction_max_bytes": 3293
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "AGENTS.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "AGENTS.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": "llms.txt present",
"points": 15,
"status": "met",
"details": [
{
"code": "llms_txt_present",
"params": {}
}
],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "99 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 99,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 32,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"uv.lock"
],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 54,
"inputs": {
"primary_language": "Python",
"largest_source_bytes": 125835,
"source_files_sampled": 86,
"oversized_source_files": 1
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Python without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "Python"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "1/86 source files over 60KB",
"points": 54.4,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 86,
"oversized": 1
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"deps.dev does not index pypi:mycelium-runtime@1.20.1; advisories assessed against the repository dependency graph instead"
],
"report_type": "repository",
"generated_at": "2026-08-01T07:41:55.111908Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/m/mycelium-labs/mycelium.svg",
"full_name": "mycelium-labs/mycelium",
"license_state": "standard",
"license_spdx": "MIT"
}Las puntuaciones son señales, no garantías. Reflejan prácticas públicamente visibles en GitHub; no son una auditoría de código ni una garantía de seguridad.
Los datos ausentes se excluyen y los pesos se renormalizan; nunca se puntúan como cero. La metodología es versionada y abierta: métricas v1.13.0, esquema v0.27.0 — metodología completa · wiki de métricas.
Cómo se sitúa un resultado dentro del registro general: estadísticas agregadas — PyPI.