Symphony turns project work into isolated, autonomous implementation runs, allowing teams to manage work instead of supervising coding agents.
ElixirApache-2.0★ 26.183 estrellas⑂ 2647 forksdesde feb 2026Ver en GitHub ↗
openai/symphony tiene un índice de salud de 63 sobre 100, lo que lo sitúa en la banda Moderado. Su puntuación más alta es Community & Adoption (78/100) y la más baja, Security (34/100). Se actualizó por última vez hace 1 día. Una sola persona concentra la mayor parte del trabajo reciente.
63
global / 100
Moderado
Índice de salud del software
Las métricas se agrupan en categorías ponderadas sobre una escala de 1 a 100. El resultado global parte de su media; cuando la evidencia pública activa la Política de Jurisdicciones de Alto Riesgo, la calificación se ajusta y recibe el límite 49 (En riesgo). Preparación para IA queda fuera.
63
Excelente85-100Ejemplar; cumple prácticamente todos los criterios evaluados
Bueno70-84Saludable; carencias menores
Moderado50-69Aceptable con carencias notables; se recomienda revisión
En riesgo30-49Debilidades significativas; su adopción exige cautela
Crítico1-29Problemas graves (proyecto abandonado, un solo mantenedor, sin higiene)
Perfil de puntuación
Cada eje es una categoría. La forma importa más que la media: un proyecto sano llena toda la figura, mientras que un perfil de picos y cráteres indica que la fortaleza en una dimensión enmascara el riesgo en otra.
¿Hasta qué punto está el repositorio preparado para desarrollarse y mantenerse con agentes de codificación de IA? Es una insignia independiente y experimental — peso 0,0, de modo que se presenta por separado y no afecta a la puntuación de salud global.
Código verificable por tipos — Elixir sin configuración de verificación de tipos
53/55
Tamaños de archivo manejables — 3/82 archivos fuente de más de 60 KB
Datos de entrada utilizados
primary_language
Elixir
largest_source_bytes
77.007
source_files_sampled
82
oversized_source_files
3
Datos clave
26.183estrellas de GitHub
9contribuidores
41commits en los últimos 12 meses
1días desde el último push
1versiones publicadas
1factor bus
0issues abiertas
Hexecosistemas de paquetes
Advertencias de recopilación de datos
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Could not fetch hex package 'symphony_elixir' from its registry
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Más detalle
Historial de estrellas y forks 0 ★ / 2647 ⇿
0Estrellas
2647Forks
1Versiones
Cuándo se añadió cada estrella y fork, recopilado de GitHub y agrupado por día. El crecimiento acumulado se sitúa justo encima de las adiciones diarias que lo componen, de modo que ambos se leen en conjunto: la acumulación orgánica sostenida no se parece en nada a un pico abrupto y efímero. Cuando esa diferencia es medible, se informa como autenticidad del crecimiento.
Solo se muestra el historial más reciente: este repositorio supera la ventana de recopilación, por lo que no se captura el historial más antiguo.
Mayor 0Menor 0Parche 1
OpenSSF Scorecard 3.4 / 10
3.4agregado
Evaluación de seguridad independiente y agnóstica en cuanto a herramientas, procedente del proyecto de código abierto OpenSSF Scorecard. Cada comprobación premia una práctica de seguridad, no la herramienta de un proveedor concreto. Las comprobaciones que Scorecard no pudo determinar se marcan como n/d y se excluyen de la puntuación de seguridad (nunca se cuentan como cero).Scorecard v5.5.0 · 2026-07-23 21:51 UTC
No fue posible recopilar el conjunto de dependencias resuelto para este informe: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Informe JSON sin procesar legible por máquina
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 30463,
"has_wiki": false,
"homepage": "https://openai.com/index/open-source-codex-orchestration-symphony/",
"languages": {
"CSS": 8252,
"Shell": 657,
"Elixir": 911302,
"Python": 19585,
"Makefile": 650,
"Dockerfile": 600
},
"pushed_at": "2026-07-22T00:52:06Z",
"created_at": "2026-02-26T21:54:00Z",
"owner_type": "Organization",
"updated_at": "2026-07-23T20:56:31Z",
"description": "Symphony turns project work into isolated, autonomous implementation runs, allowing teams to manage work instead of supervising coding agents.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Elixir",
"significant_languages": [
"Elixir"
]
},
"owner": {
"blog": "https://openai.com/",
"name": "OpenAI",
"type": "Organization",
"login": "openai",
"company": null,
"location": null,
"followers": 127163,
"avatar_url": "https://avatars.githubusercontent.com/u/14957082?v=4",
"created_at": "2015-10-03T19:34:05Z",
"is_verified": null,
"public_repos": 265,
"account_age_days": 3946
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.0.1",
"kind": "patch",
"published_at": "2026-07-18T00:13:44Z"
}
],
"recent_commits": [
{
"oid": "1f3219bb1ea5f69a1305dc594e79b0db57c113c5",
"body": "#### Context\n\nJira blockers only gated literal Todo states, so Open or Backlog issues could dispatch through active blockers.\n\n#### TL;DR\n\n*Gate Jira new-category issues on active blockers.*\n\n#### Summary\n\n- Read Jira `statusCategory.key` while normalizing issues.\n- Gate `new` category issues on inw\n[…]\neduler policy was unnecessary; Jira already exposes the native category signal.\n\n#### Test Plan\n\n- [x] `make -C elixir all`\n- [x] `mise exec -- mix test test/symphony_elixir/jira_adapter_test.exs:166`",
"is_bot": false,
"headline": "Gate Jira new-category issues on blockers",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-07-20T22:15:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3c372fa1f32a4d573a7bb9fa0cc101e16add63c3",
"body": "#### Context\n\nDocs called turn timeout a total cap, while runtime uses silence. Generic tool-input prompts also received fabricated answers, and approval-looking option labels alone are not enough to identify MCP approval prompts.\n\n#### TL;DR\n\n*Document idle timeouts and block generic tool input.*\n\n\n[…]\nixir all`\n- [x] `mise exec -- mix test test/symphony_elixir/app_server_test.exs:619 test/symphony_elixir/app_server_test.exs:788`\n- [x] `mise exec -- mix test test/symphony_elixir/app_server_test.exs`",
"is_bot": false,
"headline": "Block generic tool input and document idle timeouts",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-07-20T22:14:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cbd2158d5cd76a1b738c79130b9d9bffbd4b4317",
"body": "#### Context\n\nFailed new-workspace bootstrap was skipped on retry, and relative local roots followed launcher cwd instead of the selected workflow file.\n\n#### TL;DR\n\n*Retry failed bootstrap cleanly and anchor local roots to WORKFLOW.md.*\n\n#### Summary\n\n- Remove newly created partial workspaces when \n[…]\nlan\n\n- [x] `make -C elixir all`\n- [x] `mise exec -- mix test test/symphony_elixir/workspace_and_config_test.exs:60`\n- [x] `mise exec -- mix test test/symphony_elixir/workspace_and_config_test.exs:244`",
"is_bot": false,
"headline": "Retry failed workspace setup and anchor local roots",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-07-20T22:14:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0517275cf8a4a01a3f843419d4512c41efb8a27b",
"body": "#### Context\n\nA retry performs a fresh by-id lookup, then dispatch revalidates before starting work. If that second read missed or went stale, the popped retry could stay claimed forever; bypassing it instead could dispatch stale work.\n\n#### TL;DR\n\n*Keep dispatch-time freshness and let retries relea\n[…]\nEX_HOME=/private/tmp/symphony-hex mise exec -- make -C elixir all`\n- [x] `mise exec -- mix test test/symphony_elixir/core_test.exs:875`\n- [x] `mise exec -- mix test test/symphony_elixir/core_test.exs`",
"is_bot": false,
"headline": "Keep retry dispatch fresh without leaking claims",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-07-20T22:10:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7cf29df6101706b4348f9194074dc991d51f4fb5",
"body": "#### Context\n\nTerminal reconciliation could race a live worker and could recompute cleanup from reloaded config, deleting the wrong workspace. Recorded-path cleanup also still needs the local symlink-escape guard before hooks run.\n\n#### TL;DR\n\n*Stop workers first and clean the validated workspace re\n[…]\nx test test/symphony_elixir/core_test.exs:541`\n- [x] `mise exec -- mix test test/symphony_elixir/core_test.exs:618`\n- [x] `mise exec -- mix test test/symphony_elixir/workspace_and_config_test.exs:176`",
"is_bot": false,
"headline": "Make terminal workspace cleanup safe",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-07-20T22:09:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "633eae740f807de18007f5a9a25e2e0d206afdf4",
"body": "#### Context\n\nJira inward Blocks links were normalized as dispatchable, so Symphony\ncould\nstart Todo work before its blocker reached a terminal state.\n\n#### TL;DR\n\n*Jira Todo issues now wait for inward Blocks dependencies.*\n\n#### Summary\n\n- Request issuelinks in Jira candidate polling and ID refresh\n[…]\nocker, proved workspace creation, and\n deleted the disposable issues.\n- [x] SYMPHONY_RUN_JIRA_LIVE_E2E=1 mix test\ntest/symphony_elixir/jira_live_e2e_test.exs\n\nCo-authored-by: Codex <codex@openai.com>",
"is_bot": false,
"headline": "feat(jira): honor blocking issue links (#108)",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-07-20T19:51:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "678e4ca8b55962dc894dc2e911dd84b143a7f263",
"body": "#### Context\n\nSymphony's generic tracker seam needs a GitLab Issues implementation without adding generic mutation APIs.\n\n#### TL;DR\n\n*Add GitLab Issues reads and a host-authenticated raw GitLab API tool.*\n\n#### Summary\n\n- Add project-scoped GitLab issue reads, IID normalization, and dispatchability\n[…]\nHONY_RUN_GITLAB_LIVE_E2E=1 mix test test/symphony_elixir/gitlab_live_e2e_test.exs`\n- [x] `SYMPHONY_RUN_LIVE_E2E=1 SYMPHONY_LIVE_LINEAR_TEAM_KEY=FST mix test test/symphony_elixir/live_e2e_test.exs:123`",
"is_bot": false,
"headline": "Add GitLab Issues tracker adapter",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-07-20T18:15:12Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c68ba657359fc8eac53500188ff1a6d42c0fbc44",
"body": "#### Context\n\nSymphony's generic tracker seam needs an Asana implementation without adding generic mutation APIs.\n\n#### TL;DR\n\n*Add Asana task reads and a host-authenticated raw Asana API tool.*\n\n#### Summary\n\n- Add project-scoped Asana task reads, section-state mapping, and dispatchability.\n- Add r\n[…]\nMPHONY_RUN_ASANA_LIVE_E2E=1 mix test test/symphony_elixir/asana_live_e2e_test.exs`\n- [x] `SYMPHONY_RUN_LIVE_E2E=1 SYMPHONY_LIVE_LINEAR_TEAM_KEY=FST mix test test/symphony_elixir/live_e2e_test.exs:123`",
"is_bot": false,
"headline": "Add Asana tracker adapter",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-07-20T18:09:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e5740501abec0480476047df9f70ab0395fb7166",
"body": "#### Context\n\nSymphony's generic tracker seam needs a Jira Cloud implementation without adding generic mutation APIs.\n\n#### TL;DR\n\n*Add Jira Cloud reads and a host-authenticated raw Jira REST tool.*\n\n#### Summary\n\n- Add project-scoped Jira reads, ADF normalization, and status dispatchability.\n- Add \n[…]\nSYMPHONY_RUN_JIRA_LIVE_E2E=1 mix test test/symphony_elixir/jira_live_e2e_test.exs`\n- [x] `SYMPHONY_RUN_LIVE_E2E=1 SYMPHONY_LIVE_LINEAR_TEAM_KEY=FST mix test test/symphony_elixir/live_e2e_test.exs:123`",
"is_bot": false,
"headline": "Add Jira Cloud tracker adapter",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-07-20T18:05:12Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "044f204f161038f8a12823bbf42f85f089fc77df",
"body": "#### Context\n\nSymphony's generic tracker seam needs a real non-Linear stress test without adding generic mutation APIs.\n\n#### TL;DR\n\n*Add GitHub Issues reads and a host-authenticated raw GitHub tool.*\n\n#### Summary\n\n- Add project-scoped GitHub issue reads, normalization, and dispatchability.\n- Add r\n[…]\nHONY_RUN_GITHUB_LIVE_E2E=1 mix test test/symphony_elixir/github_live_e2e_test.exs`\n- [x] `SYMPHONY_RUN_LIVE_E2E=1 SYMPHONY_LIVE_LINEAR_TEAM_KEY=FST mix test test/symphony_elixir/live_e2e_test.exs:123`",
"is_bot": false,
"headline": "Add GitHub Issues tracker adapter",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-07-20T18:00:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7af5a7648c9fbffa08825fe0c0b18be00100aff3",
"body": "#### Context\n\nSymphony's scheduler was coupled to Linear types, reads, and mutations,\nmaking a second ticketing system require core orchestration changes.\n\n#### TL;DR\n\n*Introduce a generic tracker boundary while keeping Linear as the first\nadapter.*\n\n#### Summary\n\n- Normalize scheduler inputs throug\n[…]\nScript 6/6, Python 6/6, and Go passed.\n- [x] Live Linear smoke: local daemon processed FST-5 to Done, wrote one\ncomment, and cleaned its workspace.\n\n---------\n\nCo-authored-by: Codex <codex@openai.com>",
"is_bot": false,
"headline": "Add generic tracker interface with Linear adapter (#102)",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-07-18T05:01:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2121e5ae3562fb973a3e543dd60c81380219fb94",
"body": "#### Context\n\nThe v0.0.1 tag run built and smoke-tested every artifact, but release creation failed because the job had no Git checkout.\n\n#### TL;DR\n\n*Check out Git before verifying release tags.*\n\n#### Summary\n\n- Add checkout to the Burrito release job before running `gh release create --verify-tag\n[…]\nakes instead of fixing the missing Git context.\n\n#### Test Plan\n\n- [x] `yq eval .github/workflows/burrito-release.yml`\n- [x] `actionlint .github/workflows/burrito-release.yml`\n- [x] `git diff --check`",
"is_bot": false,
"headline": "Fix Burrito release tag verification",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-07-18T00:22:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "91a624958c1cedf2c48840f211d9d017f8a7942e",
"body": "#### Context\n\nUsing Symphony currently requires installing and configuring an Elixir runtime. Downloadable executables make first use much simpler.\n\n#### TL;DR\n\n*Add self-contained Burrito executables for macOS and Linux.*\n\n#### Summary\n\n- Add Burrito targets for macOS and Linux on arm64 and x86_64.\n[…]\nest --cover`\n- [x] `mise exec -- mix lint`\n- [x] `mise exec -- mix dialyzer --format short`\n- [x] `actionlint .github/workflows/burrito-release.yml`\n- [x] Run the packaged macOS arm64 CLI on this Mac.",
"is_bot": false,
"headline": "Add Burrito release packaging for Symphony",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-07-18T00:08:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "45a53b8588a9650c2f424cb31a6495af1bc86727",
"body": "#### Context\n\nAgent guidance did not clearly state that simplicity is a project\nconstraint or that adversarial review should challenge complexity.\n\n#### TL;DR\n\n*Make agent guidance prefer simple designs and adversarial verification.*\n\n#### Summary\n\n- Add one-owner/invariant and lifecycle review guid\n[…]\natives\n\n- A detailed Symphony-specific checklist was rejected because it would\n overfit one incident instead of providing durable guidance.\n\n#### Test Plan\n\n- [x] `cd elixir && mise exec -- make all`",
"is_bot": false,
"headline": "Clarify agent simplicity guidance",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-07-17T22:34:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d476215c23f33ff27d222ea2d2c44e631de4a922",
"body": "#### Context\n\nSymphony could start scheduling with semantically invalid workflow\nsettings, while blank required values also passed validation.\n\n#### TL;DR\n\n*Validate workflow settings before they become effective or start scheduling.*\n\n#### Summary\n\n- Make WorkflowStore cache only semantically valid\n[…]\ned because startup still\n appeared healthy with invalid settings.\n\n#### Test Plan\n\n- [x] `cd elixir && mise exec -- make all`\n- [x] `cd elixir && mise exec -- mix test --seed 567691 --max-failures 1`",
"is_bot": false,
"headline": "Validate workflow before scheduling",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-07-17T22:14:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "476b2b04e0da4ea4d9ada82fc091886734999d89",
"body": "#### Context\n\nOrchestrator restarts reset in-memory claims, but sibling TaskSupervisor workers could survive and be redispatched concurrently.\n\n#### TL;DR\n\n*Supervise agent workers and the orchestrator as one restart unit.*\n\n#### Summary\n\n- Add an AgentRuntimeSupervisor with TaskSupervisor and Orche\n[…]\n/core_test.exs:228`\n- [x] `mise exec -- mix test --cover --seed 155984 --max-cases 8`\n- [x] `mise exec -- mix test test/symphony_elixir/core_test.exs test/symphony_elixir/orchestrator_status_test.exs`",
"is_bot": false,
"headline": "Couple workers to orchestrator runtime",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-07-17T21:31:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cdb466a57fec4f7b525996f08ffb314d4cb813ca",
"body": "#### Context\n\nA YAML-valid, typed-invalid reload replaced cached config and prompt, then made `Config.settings!` raise.\n\n#### TL;DR\n\n*Keep the last good typed workflow when a reload cannot be parsed.*\n\n#### Summary\n\n- Cache parsed settings with each workflow store state.\n- Reject typed-invalid reloa\n[…]\ngic; invalid typed state no longer reaches `settings!`.\n\n#### Test Plan\n\n- [x] `mix test test/symphony_elixir/extensions_test.exs:104`\n- [x] `mix test --cover --seed 659305`\n- [x] `make -C elixir all`",
"is_bot": false,
"headline": "Preserve last good config on typed-invalid reloads",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-07-17T20:06:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "504101ec464fffbfb4349b2b480b4558a656dd57",
"body": "#### Context\n\nLive E2E could fail on cold Codex startup, remote `~/` workspace expansion, or Docker nested sandboxing.\n\n#### TL;DR\n\n*Make local and SSH live smoke tests reliable with test-only Codex isolation.*\n\n#### Summary\n\n- Fix remote `~/` workspace expansion so SSH workers use the intended home\n[…]\nst-only.\n- Did not make Docker privileged; the container remains the isolation boundary.\n\n#### Test Plan\n\n- [x] `make -C elixir all`\n- [x] `cd elixir && CODEX_HOME=<temporary auth-only home> make e2e`",
"is_bot": false,
"headline": "Fix live E2E worker isolation and SSH paths",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-07-17T19:41:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4cbe3a9699a73b862466c0b157ceca0c1985d6d7",
"body": "#### Context\n\nSymphony Observability currently uses the browser's generic fallback\nicon, which makes its control-plane tabs hard to identify.\n\n#### TL;DR\n\n*Add a custom, cache-busted favicon to the Symphony Observability\ndashboard.*\n\n#### Summary\n\n- Add a generated 128x128 transparent PNG mark for S\n[…]\nset route is easier to\ncache, test, and replace.\n\n#### Test Plan\n\n- [x] `make -C elixir all`\n- [x] `mix test test/symphony_elixir/extensions_test.exs`\n- [x] Browser preview at `http://127.0.0.1:4022/`",
"is_bot": false,
"headline": "[web] Add Symphony favicon (#90)",
"author_name": "Sharmila",
"author_login": "sharmila-oai",
"committed_at": "2026-06-09T23:25:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b4ccf7b55327821ca6d9b1b8b9e4ab5ac7f30e15",
"body": "#### Context\n\nDashboard rows show tracker issue identifiers as plain text, so\noperators must navigate to active issues manually.\n\n#### TL;DR\n\n*Link dashboard issue identifiers to their tracker-provided URLs.*\n\n#### Summary\n\n- Preserve tracker issue URLs across running, blocked, and retry\nsnapshots\n-\n[…]\nt Plan\n\n- [x] `make -C elixir all`\n- [x] Browser preview with synthetic `tracker.example` issue URLs\n- [x] Browser computed style confirms a `1px` underline\n- [x] Invalid URL scheme remains plain text",
"is_bot": false,
"headline": "[web] Link dashboard issues to tracker (#89)",
"author_name": "Sharmila",
"author_login": "sharmila-oai",
"committed_at": "2026-06-05T22:56:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "54b456b347bba0212a290430eec886def341342d",
"body": "#### Context\n\nProjects need an explicit opt-in signal so active issues are not\ndispatched only because they belong to a polled project.\n\n#### TL;DR\n\n*Allow workflows to require Linear labels before an issue is dispatched\nor continued.*\n\n#### Summary\n\n- Add normalized `tracker.required_labels` config\n[…]\niltering would hide removed labels from reconciliation,\npreventing clean agent shutdown.\n\n#### Test Plan\n\n- [x] `make -C elixir all`\n- [x] `mix test test/symphony_elixir/workspace_and_config_test.exs`",
"is_bot": false,
"headline": "[linear] Require opt-in labels for dispatch (#88)",
"author_name": "Sharmila",
"author_login": "sharmila-oai",
"committed_at": "2026-06-04T19:43:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0d85c27c9abe94ce23f63a2c7ad0b687ab8d44d5",
"body": "#### Context\n\nBrix oaipkg installs in Symphony-launched FSS runs need DNS/network\naccess, but the workflow turn sandbox did not enable it.\n\n#### TL;DR\n\n*Allow Symphony workflow turns to use network/DNS for package installs.*\n\n#### Summary\n\n- Add `networkAccess: true` to the workflow turn sandbox pol\n[…]\nbin/env mix specs.check`\n- [x] `/usr/bin/env mix test\ntest/symphony_elixir/workspace_and_config_test.exs`\n- [x] `/usr/bin/env make all MIX=\"/usr/bin/env mix\"`\n\nCo-authored-by: Codex <codex@openai.com>",
"is_bot": false,
"headline": "Allow network access for package-installing workflow turns (#65)",
"author_name": "Andrew Codispoti",
"author_login": "andrew749",
"committed_at": "2026-06-01T16:15:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fecbc92a1590dd46c4bcb9df31c76f4824e8caf1",
"body": "#### Context\n\nRevert PR #84 after it was merged so Symphony main returns to the\nprevious workflow and implementation.\n\n#### TL;DR\n\n*Reverts the Codex thread link and Linear comment resume changes from PR\n#84.*\n\n#### Summary\n\n- Revert the squash merge commit from PR #84.\n- Remove the added Linear com\n[…]\nt the request was to revert the merged\nchange.\n\n#### Test Plan\n\n- [x] `git diff --check HEAD~1..HEAD`\n- [x] `rg -n \"lin_api_|ZtX3ZP\" .`\n- [x] `mix pr_body.check --file /tmp/symphony_revert_pr_body.md`",
"is_bot": false,
"headline": "[codex] Revert Codex thread link and Linear comment resume changes (#85)",
"author_name": "yansenzhou-oai",
"author_login": "yansenzhou-oai",
"committed_at": "2026-06-01T02:48:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "68a18a7d4d07e8c9ebf06df95014417b303ee840",
"body": "#### Context\n\nNeed Symphony to keep a first-class Codex thread loop for Linear issues,\nincluding human follow-up comments and terminal cleanup.\n\n#### TL;DR\n\n*Adds Codex thread links, thread archiving, and Linear comment resume\nsupport.*\n\n#### Summary\n\n- Add Codex app-server proxy support with thread\n[…]\ny.\n- Leave thread handling as plain dashboard text, but `codex://` links\nmake app handoff direct.\n\n#### Test Plan\n\n- [x] `make -C elixir all`\n- [x] `git diff --check`\n- [x] `rg -n \"lin_api_|ZtX3ZP\" .`",
"is_bot": false,
"headline": "[codex] Add Codex thread links and Linear comment resumes (#84)",
"author_name": "yansenzhou-oai",
"author_login": "yansenzhou-oai",
"committed_at": "2026-06-01T02:42:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c5261d12101b02e0045ca84701eed0c4be367387",
"body": "#### Context\n\nAdds the requested SD-6 smoke-test note so the Symphony board review workflow can validate a minimal docs-only change.\n\n#### TL;DR\n\n*Add a short board review smoke-test markdown note.*\n\n#### Summary\n\n- Added docs/symphony-smoke-board-review.md with a short heading and note.\n- Kept the \n[…]\nub Actions `make-all` rerun\n- [x] `mix pr_body.check --file <(gh pr view 79 --repo openai/symphony --json body -q .body)`\n- [x] `git status --short` shows only `?? docs/symphony-smoke-board-review.md`",
"is_bot": false,
"headline": "docs: add board review smoke test note",
"author_name": "poon-oai",
"author_login": "poon-oai",
"committed_at": "2026-05-29T20:26:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f577cb5a1e971f04ebcfcdd06e72e722ab4b2ebe",
"body": "#### Context\n\nSmoke-test ticket SD-4 asks for an isolated doc proving Symphony picked up and handled the issue.\n\n#### TL;DR\n\n*Adds the SD-4 Symphony smoke-test note.*\n\n#### Summary\n\n- Adds `docs/symphony-smoke-test-one.md`.\n- Keeps the change docs-only and limited to the smoke-test note.\n- Mentions \n[…]\nHub Actions `make-all`\n- [x] `test -f docs/symphony-smoke-test-one.md && rg \"SD-4|Symphony\" docs/symphony-smoke-test-one.md && git diff --check`\n- [x] `mix pr_body.check --file <process-substitution>`",
"is_bot": false,
"headline": "docs: add SD-4 Symphony smoke-test note",
"author_name": "poon-oai",
"author_login": "poon-oai",
"committed_at": "2026-05-29T07:53:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2c1851830477434100fdb8980fcc1fce1a8af81d",
"body": null,
"is_bot": false,
"headline": "Update README.md",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-05-20T22:28:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3365695e85307ac50872418332cf3d2802cdda19",
"body": "#### Context\n\nCodex app-server sessions can request operator input or MCP elicitation.\nThese should pause visibly instead of retrying until exhausted.\n\n#### TL;DR\n\n*Show input-blocked Symphony sessions in state, API, and dashboard.*\n\n#### Summary\n\n- Treat Codex input-required and MCP elicitation eve\n[…]\nec -- mix test test/symphony_elixir/app_server_test.exs\ntest/symphony_elixir/extensions_test.exs\ntest/symphony_elixir/orchestrator_status_test.exs`\n\n---------\n\nCo-authored-by: Codex <codex@openai.com>",
"is_bot": false,
"headline": "Surface input-blocked Symphony sessions (#66)",
"author_name": "Danial Mirza",
"author_login": "danial-openai",
"committed_at": "2026-05-20T06:05:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bbef62364db25970cf0e732fc61011ab753d2604",
"body": "#### Context\n\nRestrict the PR description lint workflow so forked PR checks run with\nthe least token access needed.\n\n#### TL;DR\n\n*Set read-only workflow permissions and stop checkout from storing\ncredentials.*\n\n#### Summary\n\n- Add explicit contents read permission to the PR description lint\nworkflow\n[…]\nve defaults unchanged, but explicit permissions make the token\nscope easier to review.\n\n#### Test Plan\n\n- [ ] `make -C elixir all`\n- [x] Parsed `.github/workflows/pr-description-lint.yml` with PyYAML.",
"is_bot": false,
"headline": "[codex] Harden PR description lint workflow (#71)",
"author_name": "Drew Hintz",
"author_login": "hintz-openai",
"committed_at": "2026-05-14T03:03:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "58cf97da06d556c019ccea20c67f4f77da124bf3",
"body": "Summary:\n- Update the default Symphony Codex command to select gpt-5.5 via\n --config model instead of the root --model flag.\n- Refresh README and tests so examples and argv assertions match the\n app-server-compatible command shape.\n\nRationale:\n- Codex app-server ignores the root --model flag, so t\n[…]\n\n\nTests:\n- mise exec -- mix format --check-formatted\n- mise exec -- mix test\n- mise exec -- mix lint\n- Isolated app-server smoke test with the updated command\n\nCo-authored-by: Codex <codex@openai.com>",
"is_bot": false,
"headline": "fix(elixir): configure Codex app-server model via config",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-04-27T22:08:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "eaa457d96acd59c6081c3d9c86948451dbcd25bf",
"body": "#### Context\n\nSPEC.md had ambiguous conformance language and implementation details\nthat made the service contract harder to port.\n\n#### TL;DR\n\n*Clarify SPEC.md and normalize RFC-style requirement wording.*\n\n#### Summary\n\n- Add normative language and tighten config, workspace, reload, restart,\nand u\n[…]\nollow-up\nspec changes.\n\n#### Test Plan\n\n- [x] `make -C elixir all`\n- [x] `git diff --check HEAD~1..HEAD`\n- [x] RFC keyword scan outside code fences\n\n---------\n\nCo-authored-by: Codex <codex@openai.com>",
"is_bot": false,
"headline": "Clarify Symphony service specification (#61)",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-04-27T18:02:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9e89dd9ff0a3eddb8813c77f633ca4534d6e14b2",
"body": "## Summary\nPin floating external GitHub Actions workflow refs to immutable SHAs.\n\n## Why\nSee the rationale doc:\nhttps://docs.google.com/document/d/1qOURCNx2zszQ0uWx7Fj5ERu4jpiYjxLVWBWgKa2wTsA/edit?tab=t.0\n\n## Validation\n- `rg -n --pcre2\n\"uses:\\s*(?!\\./)(?!docker://)[^#\\n]+@(?![0-9a-f]{40}(?:\\s+#.*)?$)\\S+\"\n.github/workflows`\n- `git diff --check`\n- `git diff --stat -- .github/workflows`",
"is_bot": false,
"headline": "[codex] Pin GitHub Actions workflow references (#57)",
"author_name": "Drew Hintz",
"author_login": "hintz-openai",
"committed_at": "2026-03-27T18:39:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a164593aacb3db4d6808adc5a87173d906726406",
"body": "#### Context\n\nSSH failover currently happens inside `AgentRunner`, which can bypass\nper-host caps and rerun a ticket on a second host after the first host\nalready started setup.\n\n#### TL;DR\n\n*Keep each worker run on one SSH host and let the orchestrator own\nretries.*\n\n#### Summary\n\n- Remove `AgentRu\n[…]\n\n\n- [x] `make -C elixir all`\n- [x] `cd elixir && mise exec -- mix test\ntest/symphony_elixir/core_test.exs:1167\ntest/symphony_elixir/core_test.exs:1237\ntest/symphony_elixir/core_test.exs:1337 --seed 0`",
"is_bot": false,
"headline": "fix(elixir): keep ssh retries in orchestrator (#54)",
"author_name": "mstrautmann-oai",
"author_login": "mstrautmann-oai",
"committed_at": "2026-03-19T19:34:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1f86bac53a84eb0e9f10d6546e3f19a5724a5b09",
"body": "#### Context\n\nThe Codex app-server merges stderr into stdout (`stderr_to_stdout`).\nNon-JSON diagnostic lines written by Codex during healthy turns were\nincorrectly emitted as `:malformed` protocol events in the Symphony UI.\n\n<img width=\"2496\" height=\"446\" alt=\"Screenshot 2026-03-12 at 4 27 20 PM\"\nsr\n[…]\nnv(:symphony_elixir, :workflow_file_path,\nSystem.fetch_env!(\"SYMPHONY_TEST_WORKFLOW\")); Mix.Task.run(\"test\",\n[\"test/symphony_elixir/app_server_test.exs\"])'`\n\nCo-authored-by: Codex <noreply@openai.com>",
"is_bot": false,
"headline": "fix(elixir): fix malformed JSON event form codex message (#50)",
"author_name": "Kevin Wang",
"author_login": "kevinw-openai",
"committed_at": "2026-03-16T17:09:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ff65c7c729c03d4daa550bd30290fc5291f60c67",
"body": "#### Context\n\nSymphony needs to run tickets on SSH workers, keep the live E2E reliable, and preserve correct remote path semantics.\n\n#### TL;DR\n\n*Add SSH workers, Docker-backed SSH live E2E coverage, per-host caps, and correct worker-side `~` resolution.*\n\n#### Summary\n\n- Add SSH worker execution, r\n[…]\n elixir all`\n- [x] `cd elixir && env -u SYMPHONY_LIVE_SSH_WORKER_HOSTS LINEAR_API_KEY=\"$(tr -d '\\r\\n' < ~/.linear_api_key)\" SYMPHONY_RUN_LIVE_E2E=1 mix test test/symphony_elixir/live_e2e_test.exs:128`",
"is_bot": false,
"headline": "Add SSH worker support to Symphony Elixir",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-03-11T21:47:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b1863e83ac9197fefa110e7102ac03f000fd29f4",
"body": "#### Context\n\nAdd a real end-to-end path for Symphony Elixir that exercises Linear and\nCodex together, and make it easy to invoke explicitly from one Make target.\n\n#### TL;DR\n\n*Add a real live Linear/Codex E2E test plus a `make e2e` entrypoint.*\n\n#### Summary\n\n- Add an opt-in live Elixir test that c\n[…]\n`make -C elixir all`\n- [x] `env -u LINEAR_API_KEY make -C elixir e2e`\n- [x] `LINEAR_API_KEY=$(tr -d '\\r\\n' < ~/.linear_api_key) SYMPHONY_RUN_LIVE_E2E=1 mix test test/symphony_elixir/live_e2e_test.exs`",
"is_bot": false,
"headline": "Add a real live Linear/Codex E2E target",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-03-10T20:45:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c9ec3f15b9b38631a7dbb987d1c48e8a2aff7eba",
"body": "#### Context\n\nSymphony Elixir had a few correctness gaps around retry scheduling, refresh coalescing,\nworkspace path handling, Codex turn policy forwarding, and running-issue refreshes.\n\n#### TL;DR\n\n*Stabilize Symphony Elixir orchestration, workspace safety, and Codex policy passthrough.*\n\n#### Summ\n[…]\ns and can stop\n healthy workers during reconciliation.\n\n#### Test Plan\n\n- [x] `make -C elixir all`\n- [x] Targeted regression coverage for AppServer turn policy passthrough and Linear by-id pagination",
"is_bot": false,
"headline": "Stabilize Symphony Elixir orchestration and policy handling",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-03-10T19:53:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8afebb3919b35f8d3470c243eaff178190c10f04",
"body": "#### Context\n\nThe schema and tests now treat tracker state lists as YAML lists and only lowercase\nstate-limit keys, but `SPEC.md` still documented older and stricter behavior.\n\n#### TL;DR\n\n*Align `SPEC.md` with the current workflow config and state normalization behavior.*\n\n#### Summary\n\n- document \n[…]\nrings in the schema\n- keep trim-based normalization in the spec and change the implementation\n\n#### Test Plan\n\n- [x] `make -C elixir all`\n- [x] Docs-only diff reviewed against current schema and tests",
"is_bot": false,
"headline": "Align workflow config spec with schema behavior",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-03-10T18:20:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e65f5eea2961409984d992e240f090032ebd6501",
"body": "#### Context\n\nThe config layer had grown around NimbleOptions and a large getter surface. This branch moves parsing to an Ecto schema and simplifies callers to read typed nested settings directly.\n\n#### TL;DR\n\n*Replace the bespoke config access layer with an Ecto-backed schema and typed settings acc\n[…]\nleft `make -C elixir all` red on coverage and dialyzer\n\n#### Test Plan\n\n- [x] `make -C elixir all`\n- [x] `cd elixir && mix test test/symphony_elixir/workspace_and_config_test.exs --warnings-as-errors`",
"is_bot": false,
"headline": "Refactor config access around an Ecto schema",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-03-10T15:41:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b0e0ff0082236a73c12a48483d0c6036fdd31fe1",
"body": "#### Context\n\nReplace the custom Elixir observability TCP server with Phoenix while\nkeeping the shipped escript and existing operational API calls working\nthe same way they did before.\n\n#### TL;DR\n\n*Move the Elixir observability dashboard and API onto Phoenix without\nbreaking the escript or curl wor\n[…]\nphoenix.js`\n- [x] `curl -si -X POST -d '' http://127.0.0.1:40123/api/v1/refresh`\n- [x] `curl -si -X POST -d '' http://127.0.0.1:40123/api/v1/state`\n\n---------\n\nCo-authored-by: Codex <codex@openai.com>",
"is_bot": false,
"headline": "Move Elixir observability dashboard to Phoenix (#29)",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-03-05T01:24:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fa75ec68c23fbf773c43197da618f88684d8d3f6",
"body": null,
"is_bot": false,
"headline": ":musical_score:",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-03-04T17:29:11Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 1,
"commits_last_year": 41,
"latest_release_at": "2026-07-18T00:13:44Z",
"latest_release_tag": "v0.0.1",
"releases_from_tags": false,
"days_since_last_push": 1,
"active_weeks_last_year": 10,
"days_since_latest_release": 5,
"mean_days_between_releases": null
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 50,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"ecosystem": {
"packages": []
},
"popularity": {
"forks": 2647,
"stars": 26183,
"watchers": 170,
"fork_history": {
"days": [
{
"date": "2026-04-30",
"count": 9
},
{
"date": "2026-05-01",
"count": 61
},
{
"date": "2026-05-02",
"count": 43
},
{
"date": "2026-05-03",
"count": 43
},
{
"date": "2026-05-04",
"count": 32
},
{
"date": "2026-05-05",
"count": 72
},
{
"date": "2026-05-06",
"count": 69
},
{
"date": "2026-05-07",
"count": 49
},
{
"date": "2026-05-08",
"count": 34
},
{
"date": "2026-05-09",
"count": 32
},
{
"date": "2026-05-10",
"count": 29
},
{
"date": "2026-05-11",
"count": 28
},
{
"date": "2026-05-12",
"count": 29
},
{
"date": "2026-05-13",
"count": 26
},
{
"date": "2026-05-14",
"count": 22
},
{
"date": "2026-05-15",
"count": 19
},
{
"date": "2026-05-16",
"count": 7
},
{
"date": "2026-05-17",
"count": 16
},
{
"date": "2026-05-18",
"count": 17
},
{
"date": "2026-05-19",
"count": 26
},
{
"date": "2026-05-20",
"count": 16
},
{
"date": "2026-05-21",
"count": 8
},
{
"date": "2026-05-22",
"count": 8
},
{
"date": "2026-05-23",
"count": 4
},
{
"date": "2026-05-24",
"count": 12
},
{
"date": "2026-05-25",
"count": 9
},
{
"date": "2026-05-26",
"count": 11
},
{
"date": "2026-05-27",
"count": 7
},
{
"date": "2026-05-28",
"count": 10
},
{
"date": "2026-05-29",
"count": 11
},
{
"date": "2026-05-30",
"count": 6
},
{
"date": "2026-05-31",
"count": 8
},
{
"date": "2026-06-01",
"count": 11
},
{
"date": "2026-06-02",
"count": 4
},
{
"date": "2026-06-03",
"count": 7
},
{
"date": "2026-06-04",
"count": 11
},
{
"date": "2026-06-05",
"count": 6
},
{
"date": "2026-06-06",
"count": 7
},
{
"date": "2026-06-07",
"count": 2
},
{
"date": "2026-06-08",
"count": 7
},
{
"date": "2026-06-09",
"count": 8
},
{
"date": "2026-06-10",
"count": 6
},
{
"date": "2026-06-11",
"count": 5
},
{
"date": "2026-06-12",
"count": 9
},
{
"date": "2026-06-13",
"count": 4
},
{
"date": "2026-06-14",
"count": 4
},
{
"date": "2026-06-15",
"count": 4
},
{
"date": "2026-06-16",
"count": 8
},
{
"date": "2026-06-17",
"count": 2
},
{
"date": "2026-06-18",
"count": 5
},
{
"date": "2026-06-19",
"count": 1
},
{
"date": "2026-06-20",
"count": 2
},
{
"date": "2026-06-21",
"count": 6
},
{
"date": "2026-06-22",
"count": 6
},
{
"date": "2026-06-23",
"count": 5
},
{
"date": "2026-06-24",
"count": 2
},
{
"date": "2026-06-26",
"count": 2
},
{
"date": "2026-06-27",
"count": 3
},
{
"date": "2026-06-28",
"count": 5
},
{
"date": "2026-06-29",
"count": 3
},
{
"date": "2026-06-30",
"count": 2
},
{
"date": "2026-07-01",
"count": 3
},
{
"date": "2026-07-02",
"count": 3
},
{
"date": "2026-07-03",
"count": 3
},
{
"date": "2026-07-05",
"count": 3
},
{
"date": "2026-07-06",
"count": 1
},
{
"date": "2026-07-07",
"count": 3
},
{
"date": "2026-07-08",
"count": 6
},
{
"date": "2026-07-09",
"count": 2
},
{
"date": "2026-07-10",
"count": 4
},
{
"date": "2026-07-11",
"count": 5
},
{
"date": "2026-07-13",
"count": 4
},
{
"date": "2026-07-14",
"count": 2
},
{
"date": "2026-07-15",
"count": 2
},
{
"date": "2026-07-16",
"count": 3
},
{
"date": "2026-07-17",
"count": 3
},
{
"date": "2026-07-18",
"count": 4
},
{
"date": "2026-07-19",
"count": 5
},
{
"date": "2026-07-20",
"count": 7
},
{
"date": "2026-07-21",
"count": 4
},
{
"date": "2026-07-22",
"count": 3
},
{
"date": "2026-07-23",
"count": 10
}
],
"complete": false,
"collected": 1000,
"total_forks": 2647
},
"star_history": null,
"open_issues_and_prs": 9
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [
"elixir/Makefile",
"elixir/mise.toml"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"elixir/mix.exs"
],
"largest_source_bytes": 77007,
"source_files_sampled": 82,
"oversized_source_files": 3,
"agent_instruction_files": [
"elixir/AGENTS.md"
],
"agent_instruction_max_bytes": 3118
},
"dependencies": {
"manifests": [
"elixir/mix.exs"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"hex"
],
"dependencies": [
{
"name": "bandit",
"manifest": "elixir/mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 1.8"
},
{
"name": "phoenix",
"manifest": "elixir/mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 1.8.0"
},
{
"name": "phoenix_html",
"manifest": "elixir/mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 4.2"
},
{
"name": "phoenix_live_view",
"manifest": "elixir/mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 1.1.0"
},
{
"name": "req",
"manifest": "elixir/mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 0.5"
},
{
"name": "jason",
"manifest": "elixir/mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 1.4"
},
{
"name": "yaml_elixir",
"manifest": "elixir/mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 2.12"
},
{
"name": "solid",
"manifest": "elixir/mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 1.2"
},
{
"name": "ecto",
"manifest": "elixir/mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 3.13"
},
{
"name": "burrito",
"manifest": "elixir/mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 1.5"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 9,
"merged_prs": 58,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 7
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "frantic-openai",
"commits": 28,
"avatar_url": "https://avatars.githubusercontent.com/u/189043716?v=4"
},
{
"type": "User",
"login": "sharmila-oai",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/257629015?v=4"
},
{
"type": "User",
"login": "hintz-openai",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/201815723?v=4"
},
{
"type": "User",
"login": "poon-oai",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/274337507?v=4"
},
{
"type": "User",
"login": "yansenzhou-oai",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/247462522?v=4"
},
{
"type": "User",
"login": "andrew749",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/2242730?v=4"
},
{
"type": "User",
"login": "danial-openai",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/178343703?v=4"
},
{
"type": "User",
"login": "kevinw-openai",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/15899713?v=4"
},
{
"type": "User",
"login": "mstrautmann-oai",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/247462730?v=4"
}
],
"contributors_sampled": 9,
"top_contributor_share": 0.683
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"burrito-release.yml",
"make-all.yml",
"pr-description-lint.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"mix.lock"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "28 out of 28 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 2/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 6,
"reason": "dependency not pinned by hash detected -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "26 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "1f3219bb1ea5f69a1305dc594e79b0db57c113c5",
"ran_at": "2026-07-23T21:51:47Z",
"aggregate_score": 3.4,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-20T22:16:03Z",
"oldest_open_prs": [
{
"number": 58,
"created_at": "2026-04-14T00:26:39Z",
"last_comment_at": "2026-05-19T23:34:24Z",
"last_comment_author": "REFaster"
},
{
"number": 60,
"created_at": "2026-04-21T04:33:59Z",
"last_comment_at": "2026-05-20T17:11:22Z",
"last_comment_author": "REFaster"
},
{
"number": 76,
"created_at": "2026-05-29T06:36:32Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 77,
"created_at": "2026-05-29T07:57:21Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 78,
"created_at": "2026-05-29T07:58:04Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 81,
"created_at": "2026-05-29T17:27:26Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 82,
"created_at": "2026-05-29T17:58:18Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 83,
"created_at": "2026-05-29T18:16:01Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 115,
"created_at": "2026-07-22T00:47:28Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-20T22:15:12Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/openai/symphony",
"host": "github.com",
"name": "symphony",
"owner": "openai"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 63,
"inputs": {
"security": 34,
"vitality": 71,
"community": 78,
"governance": 57,
"engineering": 73
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 71,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"commits_last_year": 41,
"human_commit_share": 1,
"days_since_last_push": 1,
"active_weeks_last_year": 10
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 1 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 1
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "10/52 weeks with commits",
"points": 6.9,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 10
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "41 commits in the last year",
"points": 14.6,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 41
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "good",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"releases_count": 1,
"latest_release_tag": "v0.0.1",
"releases_from_tags": false,
"days_since_latest_release": 5,
"mean_days_between_releases": null
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "1 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 1
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 5 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 5
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "cadence unknown (single release)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "release_cadence_unknown",
"params": {}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "good",
"name": "Community & Adoption",
"value": 78,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "excellent",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 97,
"inputs": {
"forks": 2647,
"stars": 26183,
"watchers": 170,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "26,183 stars",
"points": 60,
"status": "met",
"details": [
{
"code": "stars",
"params": {
"count": 26183
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "2,647 forks",
"points": 25,
"status": "met",
"details": [
{
"code": "forks",
"params": {
"count": 2647
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "170 watchers",
"points": 12.4,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 170
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 57,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 57,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 31,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 9,
"top_contributor_share": 0.683
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 68% of commits",
"points": 7.1,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 68
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "9 contributors",
"points": 12.2,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 9
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 64,
"inputs": {
"merged_prs": 58,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 7
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "58/65 decided PRs merged",
"points": 34.1,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 58,
"decided": 65
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 2/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"followers": 127163,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "openai",
"public_repos": 265,
"account_age_days": 3946
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "127,163 followers of openai",
"points": 25,
"status": "met",
"details": [
{
"code": "owner_followers",
"params": {
"count": 127163,
"login": "openai"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "265 public repos, account ~10 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 265
}
},
{
"code": "account_age_years",
"params": {
"years": 10
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 73,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "3 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 3
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "28 out of 28 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": "https://openai.com/index/open-source-codex-orchestration-symphony/",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://openai.com/index/open-source-codex-orchestration-symphony/",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 34,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 34,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 3.4
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "28 out of 28 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 2/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 6",
"points": 3,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "26 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 4
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 66,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.951,
"agent_instruction_files": [
"elixir/AGENTS.md"
],
"agent_instruction_max_bytes": 3118
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "elixir/AGENTS.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "elixir/AGENTS.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "39 of 41 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 39,
"sampled": 41
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"mix.lock"
],
"has_dockerfile": true,
"typed_language": false,
"bootstrap_files": [
"elixir/Makefile",
"elixir/mise.toml"
],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"elixir/mix.exs"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "elixir/Makefile, elixir/mise.toml",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "elixir/Makefile, elixir/mise.toml"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 41",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 41
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 6",
"points": 6,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 53,
"inputs": {
"primary_language": "Elixir",
"largest_source_bytes": 77007,
"source_files_sampled": 82,
"oversized_source_files": 3
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Elixir without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "Elixir"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "3/82 source files over 60KB",
"points": 53,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 82,
"oversized": 3
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"Could not fetch hex package 'symphony_elixir' from its registry",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-23T21:52:07.865229Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/o/openai/symphony.svg",
"full_name": "openai/symphony",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}
Registros relacionados
Repositorios inspeccionados que comparten etiquetas de catálogo o ecosistemas con openai/symphony. Leer en paralelo →
Las puntuaciones son señales, no garantías. Reflejan prácticas públicamente visibles en GitHub; no son una auditoría de código ni una garantía de seguridad.
Los datos ausentes se excluyen y los pesos se renormalizan; nunca se puntúan como cero. La metodología es versionada y abierta: métricas v1.13.0, esquema v0.27.0 — metodología completa · wiki de métricas.
