JavaScript · TypeScriptMIT★ 834 estrellas⑂ 6 forksdesde feb 2026Ver en GitHub ↗
pockebot/openpocket tiene un índice de salud de 54 sobre 100, lo que lo sitúa en la banda Moderado. Su puntuación más alta es Engineering Quality (77/100) y la más baja, Vitality (38/100). Se actualizó por última vez hace 11 días. Una sola persona concentra la mayor parte del trabajo reciente.
54
global / 100
Moderado
Índice de salud del software
Las métricas se agrupan en categorías ponderadas sobre una escala de 1 a 100. El resultado global parte de su media; cuando la evidencia pública activa la Política de Jurisdicciones de Alto Riesgo, la calificación se ajusta y recibe el límite 49 (En riesgo). Preparación para IA queda fuera.
54
Excelente85-100Ejemplar; cumple prácticamente todos los criterios evaluados
Bueno70-84Saludable; carencias menores
Moderado50-69Aceptable con carencias notables; se recomienda revisión
En riesgo30-49Debilidades significativas; su adopción exige cautela
Crítico1-29Problemas graves (proyecto abandonado, un solo mantenedor, sin higiene)
Perfil de puntuación
Cada eje es una categoría. La forma importa más que la media: un proyecto sano llena toda la figura, mientras que un perfil de picos y cráteres indica que la fortaleza en una dimensión enmascara el riesgo en otra.
Sin avisos pendientes — ningún aviso lleva público más de 90 días
Datos de entrada utilizados
source
osv
advisories
9
affected_packages
4
assessed_packages
508
unassessed_packages
0
affected_by_severity
high 3, moderate 1
direct_affected_packages
1
Se cotejó el cierre de dependencias en tiempo de ejecución de npm:openpocket@0.2.3 —lo que arrastra la instalación del paquete publicado—: 508 paquetes. No se analiza la alcanzabilidad.
¿Hasta qué punto está el repositorio preparado para desarrollarse y mantenerse con agentes de codificación de IA? Es una insignia independiente y experimental — peso 0,0, de modo que se presenta por separado y no afecta a la puntuación de salud global.
npm package 'openpocket' points at a different repository (https://github.com/SergioChan/openpocket); excluded from ecosystem scoring
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Más detalle
Historial de estrellas y forks 834 ★ / 6 ⇿
834Estrellas
6Forks
Cuándo se añadió cada estrella y fork, recopilado de GitHub y agrupado por día. El crecimiento acumulado se sitúa justo encima de las adiciones diarias que lo componen, de modo que ambos se leen en conjunto: la acumulación orgánica sostenida no se parece en nada a un pico abrupto y efímero. Cuando esa diferencia es medible, se informa como autenticidad del crecimiento.
OpenSSF Scorecard 4.3 / 10
4.3agregado
Evaluación de seguridad independiente y agnóstica en cuanto a herramientas, procedente del proyecto de código abierto OpenSSF Scorecard. Cada comprobación premia una práctica de seguridad, no la herramienta de un proveedor concreto. Las comprobaciones que Scorecard no pudo determinar se marcan como n/d y se excluyen de la puntuación de seguridad (nunca se cuentan como cero).Scorecard v5.5.0 · 2026-07-21 15:48 UTC
No fue posible recopilar el conjunto de dependencias resuelto para este informe: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Avisos de dependencias 4
Instalar npm:openpocket@0.2.3 arrastra 508 paquetes, directos y transitivos: 4 tienen avisos conocidos, de los cuales 1 son dependencias directas.
Paquete
Versión
Relación
Gravedad
Avisos
Corregido en
@mariozechner/pi-coding-agent
0.54.2
directa
alta
3
0.78.1
undici
6.24.1
indirecta
alta
4
8.5.0
uuid
8.3.2
indirecta
alta
1
13.0.1
qs
6.14.2
indirecta
moderada
1
6.15.2
Un aviso significa que la versión registrada en el grafo de dependencias cae dentro del rango afectado de un aviso. No se analiza la alcanzabilidad, y el grafo incluye fijaciones de desarrollo y prueba: un hallazgo puede referirse al utillaje y no al software distribuido.
Informe JSON sin procesar legible por máquina
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 38965,
"has_wiki": true,
"homepage": "https://openpocket.ai",
"languages": {
"CSS": 42633,
"Vue": 6459,
"Java": 4627,
"Shell": 8081,
"Makefile": 33,
"Dockerfile": 1907,
"JavaScript": 2750886,
"TypeScript": 1813314
},
"pushed_at": "2026-07-09T21:52:04Z",
"created_at": "2026-02-18T21:51:23Z",
"owner_type": "Organization",
"updated_at": "2026-07-15T09:07:50Z",
"description": "🐹 An Intelligent Phone That Never Sleeps.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "JavaScript",
"significant_languages": [
"JavaScript",
"TypeScript"
]
},
"owner": {
"blog": "openpocket.ai",
"name": "openpocket",
"type": "Organization",
"login": "pockebot",
"company": null,
"location": "United States of America",
"followers": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/262933667?v=4",
"created_at": "2026-02-21T03:26:02Z",
"is_verified": null,
"public_repos": 2,
"account_age_days": 150
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [],
"recent_commits": [
{
"oid": "d4dae3d30d6f7c9f6d004a377cf1f1d3400d0685",
"body": "## Summary\n- Add one-command installation for Codex CLI/Desktop and Claude Code\nCLI/Desktop.\n- Add native, self-contained Codex and Claude Code phone-use adapters\nunder one `plugins/openpocket-phone/` integration root.\n- Generate both adapters from one canonical skill and one 23-tool\nAndroid MCP imp\n[…]\nnt tests, or the Testing section explains why I did\nnot.\n- [x] I updated docs, or confirmed no doc changes were needed.\n- [x] I confirmed the PR does not include secrets, credentials, or\nprivate data.",
"is_bot": false,
"headline": "Add native Codex and Claude Code phone-use plugins (#119)",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-07-09T21:52:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "eb017f66e637ec19ecd648964dc084d1a1ada8eb",
"body": null,
"is_bot": false,
"headline": "docs: add phone use environment setup steps",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-07-09T21:45:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "905c22427422cc1a305d2c6ee4fa67c7c1dd7bdb",
"body": null,
"is_bot": false,
"headline": "docs: clarify phone use host prerequisites",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-07-09T21:36:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "371e6757013e2bf7aaa41c8400925a053a6705c3",
"body": null,
"is_bot": false,
"headline": "Consolidate phone plugins under one integration root",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-07-09T21:11:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "67e1d77b97e45dfbcd5219476b43f43133a857a4",
"body": null,
"is_bot": false,
"headline": "Document native phone plugin onboarding",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-07-09T20:22:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2c87cf2889d0eae1d03abe9b4cd8904a01985fab",
"body": null,
"is_bot": false,
"headline": "Bundle Codex phone plugin runtime",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-07-09T20:05:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bad154d68c02ac4c9feb948d142fe69aea9ac421",
"body": null,
"is_bot": false,
"headline": "Add native Claude Code phone plugin",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-07-09T19:18:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eb5da7c2ec1dca6f18ae3fcbcfd68a3a9df0755f",
"body": null,
"is_bot": false,
"headline": "Add one-command phone use installer",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-07-09T18:36:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f638c71b0b310f3f31d1a000e743f22eb8c4898d",
"body": "## Summary\n\n- Adds the local `openpocket-phone` Codex plugin bundle under\n`plugins/openpocket-phone/`.\n- Expands the shared OpenPocket Phone MCP server with ergonomic Android\nphone-use tools for Codex, Claude Code, and other MCP clients.\n- Adds Claude Code MCP registration and standalone setup docum\n[…]\nnt tests, or the Testing section explains why I did\nnot.\n- [x] I updated docs, or confirmed no doc changes were needed.\n- [x] I confirmed the PR does not include secrets, credentials, or\nprivate data.",
"is_bot": false,
"headline": "Add Codex and Claude Code phone-use integrations (#118)",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-07-09T04:11:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f455cc76d1d17107f112d7e16c2e5ad88d233386",
"body": null,
"is_bot": false,
"headline": "Document plugin install flows",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-07-09T03:50:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af59819dda57260bece11f20725f440676541f59",
"body": null,
"is_bot": false,
"headline": "Document Codex and Claude Code phone use",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-07-09T03:20:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f0fb98fbea9a8ea33fbe277c806cda91eb553405",
"body": null,
"is_bot": false,
"headline": "Improve Codex phone-use plugin ergonomics",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-07-09T03:20:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2755d236b6815a59c8de8c7934dc234e46cad925",
"body": null,
"is_bot": false,
"headline": "Document fresh Codex plugin session requirement",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-07-09T03:20:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce60f31b028f8c185e604653b9a97a1a69075806",
"body": null,
"is_bot": false,
"headline": "Fix Codex plugin MCP startup",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-07-09T03:20:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b33f51adedfa2273e43d14b9eabaa8228c8a711e",
"body": null,
"is_bot": false,
"headline": "Add Codex phone-use plugin MVP",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-07-09T03:20:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f1d18ba9300766217b43cac16398e30fb477b78a",
"body": "## Summary\n- Add a data-heavy workflow boundary to x-twitter-play.\n- Point agents to configured X/Twitter tools such as TweetClaw for bulk\nsearch, follower export, media, monitoring, webhooks, giveaway draws,\nand broad DM inspection.\n\n## Why\nOpenPocket's phone skill is best for visible app actions. \n[…]\nnt tests, or the Testing section explains why I did\nnot.\n- [x] I updated docs, or confirmed no doc changes were needed.\n- [x] I confirmed the PR does not include secrets, credentials, or\nprivate data.",
"is_bot": false,
"headline": "Add X data tool boundary (#117)",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-07-09T01:28:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6cb9d178db409c9250221dcb647c6391c4dea292",
"body": null,
"is_bot": false,
"headline": "Add X data tool boundary",
"author_name": "kriptoburak",
"author_login": "kriptoburak",
"committed_at": "2026-06-16T14:55:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "200a97975df60e7878f7cf3bd46abe488326cf53",
"body": "* Fix cron channel metadata and timezone handling\n\n* Confirm default cron timezones with the user\n\n---------\n\nCo-authored-by: stablegenius49 <185121704+stablegenius49@users.noreply.github.com>",
"is_bot": false,
"headline": "Fix cron channel metadata and timezone handling (#115)",
"author_name": "Stable Genius",
"author_login": "stablegenius49",
"committed_at": "2026-03-23T03:12:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c482baba7e4fbaed407edbeb946ef973cff8b27",
"body": "… (#114)\n\nPreviously, transient 5xx server errors were only retried for OpenAI-like\nmodels. This caused tasks using other providers (e.g. Google Gemini) to\nfail immediately on temporary outages like 503 high-demand errors.\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Extend model error retry logic to all providers, not just OpenAI-like…",
"author_name": "Frank",
"author_login": "tsubasakong",
"committed_at": "2026-03-17T17:36:56Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "294fb0a29460f397e45f7bc20d96ca3cf73f3b07",
"body": "* Use agent.maxSteps for cron step budget instead of hardcoded 30\n\nCron tasks were aborting mid-execution because the step budget defaulted\nto 30 (clamped 20-60), far below the configured agent.maxSteps of 100.\nThis caused tasks like \"comment on 10 posts\" to fail after only 6.\n\n- Default cron stepBu\n[…]\nn step budget test to match new 80-maxSteps range\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Use agent.maxSteps for cron step budget instead of hardcoded 30 (#113)",
"author_name": "Frank",
"author_login": "tsubasakong",
"committed_at": "2026-03-17T15:51:44Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a7feb54916367566b0a49362cec9043a66f5acd3",
"body": "* Add Aliyun GUI-OWL coordinate fix and GUI-Plus model support (#111)\n\n- Fix GUI-OWL (pre-gui_owl_7b) coordinate rescaling from 1000x1000\n normalized space to actual device pixel dimensions\n- Add GUI-Plus model client with smart_resize coordinate conversion\n- Add aliyun_gui_plus backend type and mo\n[…]\noting for Aliyun models\n- Tests for all the above\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add Aliyun GUI-OWL coordinate fix and GUI-Plus model support (#112)",
"author_name": "Frank",
"author_login": "tsubasakong",
"committed_at": "2026-03-16T01:52:48Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a5db5b2731a708e9c364318d5b128cd9077525c1",
"body": "## Summary\n- Fix the OpenPocket helper IME causing a full-screen black overlay when\nactivated during Unicode text input on physical devices.\n- Replace the ineffective 1px-transparent-view approach with\n`onEvaluateInputViewShown() → false`, which prevents the system from\ncreating a keyboard window en\n[…]\ns why I did\nnot.\n- [x] I updated docs, or confirmed no doc changes were needed.\n- [x] I confirmed the PR does not include secrets, credentials, or\nprivate data.\n\nMade with [Cursor](https://cursor.com)",
"is_bot": false,
"headline": "Fix helper IME black screen by suppressing keyboard window (#109)",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-14T03:59:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "80ad44473a07c29c5939fc02862d8939e18f1e64",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' into dev-sergio",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-14T03:59:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e5a0a97111995b3903e0e63be147cb91300c5146",
"body": null,
"is_bot": false,
"headline": "Add retries for transient Codex server errors (#110)",
"author_name": "Frank",
"author_login": "tsubasakong",
"committed_at": "2026-03-13T18:57:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "00906f9ddd60743307d85b7aae569a1e4c91bbc5",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' into dev-sergio",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-12T23:22:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b663762a4e17b62b75df26321afb658975ebdac6",
"body": "The previous 1px-transparent-view approach did not work because\nAndroid's IME window manager ignores View LayoutParams and enforces\na minimum keyboard window size, resulting in a full-screen black\noverlay whenever the helper IME was activated.\n\nReplace with onEvaluateInputViewShown() returning false\n[…]\nthodService still binds to the focused input field, so\ngetCurrentInputConnection() works normally for text injection via\nbroadcast — verified on-device with screenshot confirmation.\n\nMade-with: Cursor",
"is_bot": false,
"headline": "Fix helper IME black screen by suppressing keyboard window entirely",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-12T23:11:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "570b4ddc2158f94dbe4d9f9ffaf6e31d50b22631",
"body": "## Summary\n- fix skill file reads in the pi coding backend when the model emits\nhome-relative paths like `.openpocket/skills/...`\n- add a regression test for skill-root path resolution so the read flow\nstays pinned to the real skill location\n- let a second Ctrl+C force-exit the gateway so shutdown i\n[…]\ns why I did\nnot.\n- [x] I updated docs, or confirmed no doc changes were needed.\n- [x] I confirmed the PR does not include secrets, credentials, or\nprivate data.\n\nMade with [Cursor](https://cursor.com)",
"is_bot": false,
"headline": "Fix skill path reads and gateway shutdown interrupts (#108)",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-12T17:56:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b7e837302b6969563b49987643f23dc766f047a9",
"body": "…own.\n\nResolve home-relative skill reads before passing paths into the pi coding read tool, and let a second Ctrl+C force exit while graceful shutdown is in progress.\n\nMade-with: Cursor",
"is_bot": false,
"headline": "Fix skill path reads in pi coding executor and speed up gateway shutd…",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-12T17:50:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0426ffd7a1099ba4a2de2d485e3f3e9304a9935b",
"body": "…gs (#107)\n\n## Summary\n- Add ANSI color-coded agent step logs and truncate verbose result\noutput\n- Fix skill path resolution to use absolute paths instead of tilde\nshorthand\n- Add x-twitter-play skill\n\n## Why\nAgent step logs (`[thought]`, `[decision]`, `[result]`, `[start]`,\n`[end]`) were all plain \n[…]\nnt tests, or the Testing section explains why I did\nnot.\n- [x] I updated docs, or confirmed no doc changes were needed.\n- [x] I confirmed the PR does not include secrets, credentials, or\nprivate data.",
"is_bot": false,
"headline": "Add cron bounded planning, skill path fixes, and color-coded agent lo…",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-12T04:36:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2324997b67eac2f6e26b4d4d7083d5d11c4db2e6",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' into feat/cron-bounded-plan-and-hide-package-names",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-12T04:33:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7688a8114a0df64764fdb1b58ffbf694d36067bc",
"body": "Agent step logs ([thought], [decision], [result], etc.) were all plain\nwhite, making it hard to scan terminal output for important information.\n\n- Add colorizeAgentLog() that applies per-section ANSI colors: cyan for\n thought, yellow for decision, green/dim/red for result variants, dim\n for metada\n[…]\nwith an omission summary,\n preventing skill reads and large outputs from flooding the terminal\n- Update runtimeTone to classify agent/model lines for the gateway log\n path as well\n\nMade-with: Cursor",
"is_bot": false,
"headline": "Add color-coded agent step logs and truncate verbose results",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-12T04:30:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7b19bb60f387a53e49fa39bcea6a245c4a4cc3fc",
"body": "The model was stripping or misinterpreting the ~ prefix in skill paths,\nusing .openpocket/skills/... instead of ~/.openpocket/skills/..., which\nresolved to workspace/.openpocket/... and caused ENOENT. Using absolute\npaths eliminates the ambiguity entirely.\n\nMade-with: Cursor",
"is_bot": false,
"headline": "Use absolute paths for skill locations instead of tilde shorthand",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-12T03:49:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "93956da871b454341d1d1de7d8538b78a5ed6a48",
"body": null,
"is_bot": false,
"headline": "Create SKILL.md",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-12T03:47:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d962efcc6aeb8a84bcb60381221e36c747b65dcc",
"body": "The skill loader compacts absolute paths to ~/... notation via\ncompactSkillPath, but path.resolve does not expand ~, causing the\nagent's read tool to resolve ~/.openpocket/skills/... relative to the\nworkspace directory instead of the home directory. This resulted in\nENOENT when the agent tried to read local skill files.\n\nAdded expandTilde helper in resolveWorkspacePathPolicy so ~ paths\nresolve correctly to os.homedir().\n\nMade-with: Cursor",
"is_bot": false,
"headline": "Expand tilde in workspace path resolution for skill read access",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-12T03:46:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6e61844f0fef8254625d284b560455626eb05d4",
"body": "## Summary\n- guard SkillLoader’s local skills path with a try/catch so CI/sandbox\nruns\n\n don’t crash when OPENPOCKET_HOME isn’t writable\n- keep bundled and workspace skills loading unchanged\n\n## Why\nfound this problem while setting up the project on my machine\n\n## Changes\n\nAdded a try/catch around \n[…]\nnt tests, or the Testing section explains why I did\nnot.\n- [x] I updated docs, or confirmed no doc changes were needed.\n- [x] I confirmed the PR does not include secrets, credentials, or\nprivate data.",
"is_bot": false,
"headline": "Avoid creating unwritable HOME skills dir in SkillLoader (#103)",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-12T03:02:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8c8a8b971529a4bf21c7637adbd88fb1d7aedebe",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' into startup-fix",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-12T03:02:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c00ce022c8b1dac71b9388d06eb67941e4f4649b",
"body": null,
"is_bot": false,
"headline": "feat: expose installed app labels to runtime prompts (#106)",
"author_name": "Frank",
"author_login": "tsubasakong",
"committed_at": "2026-03-12T02:01:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f0ff5529d196a4d6d27b76db53f6c9ec8057440",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' into startup-fix",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-11T23:02:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "63f15763948cb2c7b0b7b9fb25911f8f4d874b4d",
"body": "…ges (#105)\n\n## Summary\n- Cron-triggered tasks now generate a structured **CronTaskPlan**\n(summary, steps, step budget, completion criteria) before execution,\nensuring bounded single-pass runs.\n- When the step budget is exhausted, the run completes **normally**\ninstead of failing with \"Max steps rea\n[…]\n why I did\nnot.\n- [x] I updated docs, or confirmed no doc changes were needed.\n- [x] I confirmed the PR does not include secrets, credentials, or\nprivate data.\n\n\nMade with [Cursor](https://cursor.com)",
"is_bot": false,
"headline": "Add bounded cron task planning and hide package names from user messa…",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-11T23:01:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "374d7fdeef60078683b80166608b65a25ae54fdc",
"body": "When a user amends a cron task, the system now calls the LLM to\nintelligently merge the amendment into the original task, producing a\nclean consolidated description. This replaces the naive \"Additional\ninstruction:\" string append that caused task text to grow unboundedly\nwith repeated updates.\n\nBoth\n[…]\nent prefix), calls consolidateCronTaskUpdate\nfor an LLM rewrite, and falls back to simple append if the LLM is\nunavailable or fails. The consolidated result is capped at 2000 chars.\n\nMade-with: Cursor",
"is_bot": false,
"headline": "Use LLM consolidation for cron task updates instead of simple append",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-11T22:55:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "df0a2b5b1de8de2151ecfb8041777c9e78b8fc30",
"body": "The classify prompt previously instructed the model to reproduce the\nCOMPLETE merged task text in patch.task, but the 1024-token output\nlimit caused long tasks to be silently truncated.\n\nNow the prompt asks the model to output only the user's amendment (delta),\nand the server merges it into the orig\n[…]\n\nboth a length ratio (<70% of original) and prefix check to distinguish\ndeltas from full replacements. The classify maxTokens limit is also\nraised from 1024 to 2048 as a safety net.\n\nMade-with: Cursor",
"is_bot": false,
"headline": "Fix cron task update truncation by switching to delta-based merge",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-11T22:47:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b8ff62c7a964e8adebbd2d9a52d07381dfa72714",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' into feat/cron-bounded-plan-and-hide-package-names",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-11T22:27:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d4342910e7fffb41d81a394892dd8532b1d8393",
"body": "Cron-triggered tasks now go through a planning phase that produces a\nstructured CronTaskPlan (summary, steps, step budget, completion criteria).\nThe plan is injected into the agent system prompt to guide execution and\nenforce a bounded single-pass run. When the step budget is exhausted the\nrun compl\n[…]\n The fallback wording is simplified to generic phrases (\"Still\nworking on it\") and the LLM prompts explicitly instruct the model to\nnever reveal package names or bundle identifiers.\n\nMade-with: Cursor",
"is_bot": false,
"headline": "Add bounded cron task planning and hide package names from user messages",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-11T22:18:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2fc3035384b37228f7fdd8b1c94a811ff604c499",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' into startup-fix",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-11T21:20:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "883e8e7f685d509296065e1a4372080b47f73858",
"body": "…UX (#104)\n\n## Summary\n- Fix cron job management routing so users can refer to tasks\nconversationally (\"update the task\") without getting \"No scheduled jobs\nmatched\"\n- Prevent regex-based profile update from hijacking schedule management\nintents\n- Replace hardcoded cron start notification with model\n[…]\nnt tests, or the Testing section explains why I did\nnot.\n- [x] I updated docs, or confirmed no doc changes were needed.\n- [x] I confirmed the PR does not include secrets, credentials, or\nprivate data.",
"is_bot": false,
"headline": "Improve cron management routing, error reporting, and scheduled task …",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-11T21:20:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0fbdda2e578ab3043398c2f92b65baff3ba69ee4",
"body": "Parse raw JSON bodies embedded in error message strings to extract\nstructured metadata (request_id, error code, type) and include a\nraw_response snippet in formatted output.\n\nMade-with: Cursor",
"is_bot": false,
"headline": "Improve error reporting for embedded JSON in provider responses",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-11T20:49:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d7d599aceea12241626c8107f171c7647f27c668",
"body": "- Inject existing job catalog into LLM prompts so the model can resolve\n anaphoric references (\"the task\", \"this job\") to actual job IDs\n- Add single-job fallback in executeCronManagementIntent when selector\n matches nothing but only one enabled job exists\n- Append \"Scheduled task started\" message\n[…]\nth model-generated natural\n language via narrateScheduledTaskStart\n- Remove all Chinese regex patterns from chat-assistant; non-English\n intent detection is now fully model-driven\n\nMade-with: Cursor",
"is_bot": false,
"headline": "Improve cron job management routing and scheduled task UX",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-11T20:47:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9b3ce9763c1fd7b8acb892f1191c3b510e35bd43",
"body": "Physical devices lack a reliable way to input Unicode text (emoji,\nCJK, etc.) via ADB. The clipboard path fails when `adb shell cmd\nclipboard` is unimplemented, and the third-party ADB Keyboard is\nrarely pre-installed.\n\nThis adds a minimal Android InputMethodService (`ai.openpocket.ime`)\nthat recei\n[…]\n auto-installs helper IME on physical devices\n- test/adb-runtime.test.mjs: 10 new unit tests covering the full\n fallback chain, base64 encoding, IME restore, and exported utilities\n\nMade-with: Cursor",
"is_bot": false,
"headline": "Add OpenPocket helper IME for reliable Unicode text input",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-11T17:06:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "de4c8fe5b08efba842611d54441e36dabb101978",
"body": "Preserve upstream model error details in CLI, runtime logs, and chat fallbacks so request IDs are shown alongside the actual failure reason for debugging.\n\nMade-with: Cursor",
"is_bot": false,
"headline": "Improve provider error reporting",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-11T04:47:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0000227df715e845c557ccbcd75cb6ee2b1bc5a2",
"body": "…x runs\n\n don’t crash when OPENPOCKET_HOME isn’t writable\n- keep bundled and workspace skills loading unchanged",
"is_bot": false,
"headline": "- guard SkillLoader’s local skills path with a try/catch so CI/sandbo…",
"author_name": "shrey",
"author_login": "shrey32",
"committed_at": "2026-03-10T21:34:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e278643c8358f101be24711ad9ce6176e551bf2c",
"body": "## Summary\n- add the Reddit community link to the README top link row\n- change the docs-site header to show GitHub, Discord, and Reddit as\ntop-right social icons\n- replace the temporary text-based Discord nav item with icon-based\ncommunity links\n\n## Why\nThe project now needs both Discord and Reddit \n[…]\nnt tests, or the Testing section explains why I did\nnot.\n- [x] I updated docs, or confirmed no doc changes were needed.\n- [x] I confirmed the PR does not include secrets, credentials, or\nprivate data.",
"is_bot": false,
"headline": "docs: add Reddit community links (#102)",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-10T18:32:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0660d19a34c27c90a25fad4550018309473f0a73",
"body": null,
"is_bot": false,
"headline": "docs: add Reddit community links",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-10T18:27:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "105984f940c138b002017afeb03fba5505fbc4cf",
"body": "## Summary\n- add the Discord invite link to the website top-right navigation\n- add the same Discord invite link to the README top link row\n- keep the change scoped to website discovery and README community\nnavigation\n\n## Why\nUsers need a visible path to the community Discord from both the docs\nsite \n[…]\nnt tests, or the Testing section explains why I did\nnot.\n- [x] I updated docs, or confirmed no doc changes were needed.\n- [x] I confirmed the PR does not include secrets, credentials, or\nprivate data.",
"is_bot": false,
"headline": "docs: add Discord community links (#101)",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-10T18:02:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "283809bca82d8694ebb2c570369f09c02575a834",
"body": null,
"is_bot": false,
"headline": "docs: add Discord community links",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-10T17:57:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf0c80531e42d09ac1181117e312a3c06903441c",
"body": null,
"is_bot": false,
"headline": "Update video sources in README.md",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-10T17:09:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "734655f3acbe58b2cae9035e29bd1473ae136bcf",
"body": null,
"is_bot": false,
"headline": "Update README.md",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-10T17:06:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ba3ce3ada05529d7d79d93a5f397eece12c543a",
"body": "## Summary\n- replace the README Social demo video source with the stable public\ndemo asset URL\n- avoid committing expiring GitHub `private-user-images` signed URLs\ninto the README\n- keep the fix scoped to the current uncommitted README video-source\nchange\n\n## Why\nThe current uncommitted README edit \n[…]\nnt tests, or the Testing section explains why I did\nnot.\n- [x] I updated docs, or confirmed no doc changes were needed.\n- [x] I confirmed the PR does not include secrets, credentials, or\nprivate data.",
"is_bot": false,
"headline": "docs: restore stable README demo video URL (#100)",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-10T16:56:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0a76e3e2a9623af2bf962aa073821ec6cdd71b7a",
"body": null,
"is_bot": false,
"headline": "docs: restore stable README demo video URL",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-10T16:51:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38cb326c84475d094094855662be85b61bdee51e",
"body": "Replaced video source for the Social section in README.md.\n\n## Summary\n<!-- Describe the change in 2-5 bullets. Focus on what changed. -->\n\n## Why\n<!-- Explain the problem, motivation, or product need behind the change.\n-->\n\n## Changes\n<!-- List the key implementation points, migrations, or rollout \n[…]\nnt tests, or the Testing section explains why I did\nnot.\n- [ ] I updated docs, or confirmed no doc changes were needed.\n- [ ] I confirmed the PR does not include secrets, credentials, or\nprivate data.",
"is_bot": false,
"headline": "Update video source for Social media section (#99)",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-10T16:45:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6203e02f118760a108cba3388d620d5ac441a252",
"body": "Replaced video source for the Social section in README.md.",
"is_bot": false,
"headline": "Update video source for Social media section",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-10T16:42:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c222922d0bb0af5a3acd237cb960b150c73f6b15",
"body": "## Summary\n- refresh the README demos section into a media-rich grid layout\n- embed the demo videos directly in the README instead of only listing\nremote links\n- keep the change scoped to the uncommitted README edits currently in\nthe working tree\n\n## Why\nThe current working tree included another REA\n[…]\nnt tests, or the Testing section explains why I did\nnot.\n- [x] I updated docs, or confirmed no doc changes were needed.\n- [x] I confirmed the PR does not include secrets, credentials, or\nprivate data.",
"is_bot": false,
"headline": "docs: enrich README demo section (#98)",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-10T16:37:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e4eef1d2e31748c1adfbe01bbb78b019daaa4419",
"body": null,
"is_bot": false,
"headline": "docs: enrich README demo section",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-10T16:32:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1625766cb1c2c8af5460452411ebebde6463d9be",
"body": "## Summary\n- refresh the README positioning and structure for a clearer landing\npage experience\n- update the README CI badge and source clone command to the new\n`pockebot/openpocket` repository path\n- keep the README contribution and product overview sections aligned\nwith the current docs site\n\n## W\n[…]\nnt tests, or the Testing section explains why I did\nnot.\n- [x] I updated docs, or confirmed no doc changes were needed.\n- [x] I confirmed the PR does not include secrets, credentials, or\nprivate data.",
"is_bot": false,
"headline": "docs: refresh README landing page (#97)",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-10T16:16:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3c883180af6ad7b558bdc96e9331b9fd192ef6e2",
"body": null,
"is_bot": false,
"headline": "docs: refresh README landing page",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-10T16:11:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0555bf0ba1fdd8caec4b3cd67aec73d593c0a468",
"body": "## Summary\n- update VitePress GitHub links to point at the pockebot organization\nrepo\n- update the frontend quickstart clone command to the new SSH remote\n- keep the frontend documentation aligned with the repository move\n\n## Why\nThe repository moved under the `pockebot` organization, so frontend\nli\n[…]\nnt tests, or the Testing section explains why I did\nnot.\n- [x] I updated docs, or confirmed no doc changes were needed.\n- [x] I confirmed the PR does not include secrets, credentials, or\nprivate data.",
"is_bot": false,
"headline": "docs(frontend): update GitHub repository links (#96)",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-10T15:51:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cacd4d11e2f799aa0d699fd9980d8397d43a3075",
"body": null,
"is_bot": false,
"headline": "docs(frontend): update GitHub repository links",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-10T15:42:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef93ba7c584fae0ad9d9d5119006c98d641942d8",
"body": null,
"is_bot": false,
"headline": "Use chat context for contextual schedule updates (#95)",
"author_name": "Frank",
"author_login": "tsubasakong",
"committed_at": "2026-03-09T18:13:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b9a6c6a0f0a44a878be7574795e1c340d36bf2c6",
"body": "…ermission-dialogs\n\nfix(agent): correct permission dialog handling — evaluate task relevance instead of blind escalation",
"is_bot": false,
"headline": "Merge pull request #94 from SergioChan/fix/auto-dismiss-unnecessary-p…",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-09T16:15:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f85a2dd7747864389cbca81304aa28b2b6895651",
"body": null,
"is_bot": false,
"headline": "test(ci): align permission dialog expectations",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-09T16:07:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9b8c1a60e86957d9491029939e1029facc323c16",
"body": "…nce instead of blind escalation\n\nPreviously, when an Android permission dialog appeared (e.g., Chrome requesting\nmicrophone on first launch), two mechanisms caused incorrect behavior:\n\n1. The capability probe auto-escalated ANY detected permission signal to Human\n Auth without considering whether\n[…]\nstill calls request_human_auth while a permission\n dialog is showing, return corrective feedback guiding it to handle the\n dialog locally instead of auto-rejecting and escalating.\n\nMade-with: Cursor",
"is_bot": false,
"headline": "fix(agent): correct permission dialog handling — evaluate task releva…",
"author_name": "travis.wang",
"author_login": "wowill",
"committed_at": "2026-03-09T15:03:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "928de542100e44f8b12f878f0d98dba0fdfcecfb",
"body": "…argets\"\n\nThis reverts commit de780e8963a85f8742023ae78f4320da44afcb3f.",
"is_bot": false,
"headline": "Revert \"fix(agent): auto-approve all permission dialogs on emulator t…",
"author_name": "travis.wang",
"author_login": "wowill",
"committed_at": "2026-03-09T14:13:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de780e8963a85f8742023ae78f4320da44afcb3f",
"body": "On emulator targets, Android permission dialogs (microphone, camera,\nlocation, photos, etc.) should be auto-approved locally since there is\nno real user data to protect. Previously, only capability=\"permission\"\nwas auto-approved; other capabilities like \"microphone\" or \"camera\"\nwould auto-reject the\n[…]\n (camera/microphone surfaces are safe to use locally)\n\nPhysical device behavior is unchanged — non-permission capabilities\nstill reject locally and delegate to human auth as before.\n\nMade-with: Cursor",
"is_bot": false,
"headline": "fix(agent): auto-approve all permission dialogs on emulator targets",
"author_name": "travis.wang",
"author_login": "wowill",
"committed_at": "2026-03-09T14:12:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "18533437368da0da1486e597d905fee222095bb8",
"body": null,
"is_bot": false,
"headline": "Improve cron schedule management routing and matching (#93)",
"author_name": "Frank",
"author_login": "tsubasakong",
"committed_at": "2026-03-09T08:07:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0fa1c10ce0397947658cdecaf4cef63c6c88bf46",
"body": "Generalize language handling and switch skills to model-driven routing",
"is_bot": false,
"headline": "Merge pull request #91 from SergioChan/codex/doc-language-cleanup",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-09T05:23:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6b7201680e4ea61c5fc632218f7e70911179c473",
"body": null,
"is_bot": false,
"headline": "agent: remove default skill index item cap",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-09T05:04:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "060ea1c90adcb30ba7378670d90c237bebb57c02",
"body": null,
"is_bot": false,
"headline": "fix: restore chinese particle trimming for assistant names",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-09T04:49:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f184cb57762198220b03edab8c7c73274e00f66",
"body": null,
"is_bot": false,
"headline": "chore: clean locale plumbing and adb endpoint helpers",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-09T04:40:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7b5fd23154aa7825b5a0b121abdda406dd028913",
"body": null,
"is_bot": false,
"headline": "agent: align skill routing with openclaw",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-09T04:25:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a838582d133cb8d68561beb0d2553be32f6ddc2a",
"body": null,
"is_bot": false,
"headline": "agent: switch skills to model-driven selection",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-09T04:08:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cf50afa2bdeedb6fef5195ed2f0dc8e75f9a6059",
"body": "… and readable triggers\n\n- Remove dangling semicolon in capabilityLabel left from zhMap deletion\n- Remove 8 void-locale dead parameters from function signatures and\n update all call sites (questionForStep, pickFallback,\n personaPresetFromAnswer, buildScheduledJobName, humanAuthSecurityNote,\n play\n[…]\nmat in BARE_SESSION_RESET_PROMPT.md\n- Fix downgradeShoppingClaimsWhenUnverified to use same-language\n replacement text for Chinese regex matches, preventing mixed-language\n output\n\nMade-with: Cursor",
"is_bot": false,
"headline": "fix: complete language cleanup with dead-param removal, compat fixes,…",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-09T04:03:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "744e6b2de5d5d172b8b0ce2b5003ee905861eeda",
"body": null,
"is_bot": false,
"headline": "chore: doc language cleanup locale follow-up",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-08T18:48:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7855377a3833fe0eeec622fe190126099a39f1e2",
"body": null,
"is_bot": false,
"headline": "chore: doc language cleanup",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-08T18:28:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c76ad9d8aa839aa9b2cbbd893bf2113d0068793d",
"body": "* docs: add telegram schedule cron plan\n\n* feat: add schedule intent routing\n\n* feat: add cron registry and schema\n\n* fix: harden cron registry compatibility\n\n* feat: add cron cli commands\n\n* feat: add schedule confirmation flow\n\n* feat: support wall-clock cron schedules\n\n* feat: add agent cron management tools\n\n* feat: add model-driven scheduled cron flow\n\n* fix: harden schedule extraction and cron DST handling\n\n* chore: drop docs artifacts from schedule PR",
"is_bot": false,
"headline": "Add model-driven scheduled cron flow for Telegram tasks (#90)",
"author_name": "Frank",
"author_login": "tsubasakong",
"committed_at": "2026-03-08T07:51:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c650fffaba537259f7a038da3629422ba89448a4",
"body": "…ording\n\ndocs: tighten multi-agent compliance wording",
"is_bot": false,
"headline": "Merge pull request #89 from SergioChan/codex/multi-agent-compliance-w…",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-07T18:02:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "65c4ad50a7d75d84af8374b2225bef02dfd13809",
"body": null,
"is_bot": false,
"headline": "docs: tighten multi-agent compliance wording",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-07T17:57:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "600c4400cd0a82ef0995c04c9a70f81f5396eaf0",
"body": null,
"is_bot": false,
"headline": "docs: add contribution guide and PR template enforcement",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-07T17:52:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8deb9269de4414b599f0619ad63a7117073bf518",
"body": null,
"is_bot": false,
"headline": "Merge pull request #87 from SergioChan/feature/slack-channel-support",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-07T17:42:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "99b65ee2979a4e20eb1aaa2f08ec4de1dc255fd2",
"body": null,
"is_bot": false,
"headline": "test(setup): stabilize optional channel prompts",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-07T17:36:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "51263cc5b5619daae3f4cf843315a2503912dba7",
"body": "…i-target\n\nAdd multi-agent instance management and shared relay hub",
"is_bot": false,
"headline": "Merge pull request #88 from SergioChan/codex/orchestrator-worker-mult…",
"author_name": "Sergio",
"author_login": "SergioChan",
"committed_at": "2026-03-07T17:29:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "454e918af119cebaa5a2a78e75b8876f970f326e",
"body": null,
"is_bot": false,
"headline": "docs: add multi-agent deployment patterns guide",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-07T17:08:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dc6777dbd01a2d2c1d15dd066257e82f1239485f",
"body": null,
"is_bot": false,
"headline": "docs: update multi-agent and CLI documentation",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-07T06:43:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f1f94eb784ae7eed1e9b1dd842bb9bb2eca6657d",
"body": null,
"is_bot": false,
"headline": "fix(manager): harden multi-agent metadata handling",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-07T06:24:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fc15c64887d3c61ace2ece9e0c9b890f3a397275",
"body": "Add full Slack channel integration as a new channel adapter, following\nthe same pattern as Telegram, Discord, WhatsApp, and iMessage adapters.\n\n- Implement SlackAdapter using @slack/bolt with Socket Mode\n- Support DM messages, @mention in channels, slash commands, interactive buttons\n- Add proxy sup\n[…]\nding setup wizard with Slack configuration flow\n- Add Slack capabilities (markdown, threads, buttons, file upload)\n- Increase Socket Mode ping timeout to 30s for proxy compatibility\n\nMade-with: Cursor",
"is_bot": false,
"headline": "feat(channel): add Slack channel adapter with Socket Mode support",
"author_name": "travis.wang",
"author_login": "wowill",
"committed_at": "2026-03-07T05:39:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5313e538fc2b17a620771a81d05f62d4a26ac253",
"body": null,
"is_bot": false,
"headline": "feat(human-auth): add shared relay hub for agents",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-07T03:14:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "041443ab4b37190e9123bd25225a0ffed2017a27",
"body": null,
"is_bot": false,
"headline": "feat(dashboard): add manager dashboard overview",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-07T03:03:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13f863e99a275d33d1927add1ed5f27db0af2883",
"body": null,
"is_bot": false,
"headline": "feat(cli): add multi-agent registry and selection",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-07T02:58:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6c607911a6ec37aa5986792235e2429368c260f8",
"body": null,
"is_bot": false,
"headline": "fix(chat): remove visible [truncated] marker from progress updates",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-06T05:59:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9ed6b478db3affbcf256e06c78f714af7479a08b",
"body": "…tadata",
"is_bot": false,
"headline": "feat(agent): add runtime_info tool for authoritative runtime model me…",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-06T05:53:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6bb6b4f6bcd76a1262910ccbd2c53d98044a534",
"body": null,
"is_bot": false,
"headline": "chore(gateway): log task execution plan at info level",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-06T05:53:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c55ffcac66182f9f0b1abdb9538642dfef68811b",
"body": null,
"is_bot": false,
"headline": "feat: add model-routed coding vs phone execution planning",
"author_name": "Yuheng",
"author_login": "SergioChan",
"committed_at": "2026-03-06T05:37:13Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 0,
"commits_last_year": 573,
"latest_release_at": null,
"latest_release_tag": null,
"releases_from_tags": false,
"days_since_last_push": 11,
"active_weeks_last_year": 7,
"days_since_latest_release": null,
"mean_days_between_releases": null
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 62,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "openpocket",
"exists": true,
"license": "MIT",
"keywords": [],
"ecosystem": "npm",
"matches_repo": false,
"registry_url": "https://www.npmjs.com/package/openpocket",
"is_deprecated": false,
"latest_version": "0.2.3",
"repository_url": "https://github.com/SergioChan/openpocket",
"versions_count": 4,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 37,
"first_published_at": "2026-02-18T22:34:09.367000Z",
"latest_published_at": "2026-03-02T18:25:57.122000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 140
}
]
},
"popularity": {
"forks": 6,
"stars": 834,
"watchers": 3,
"fork_history": {
"days": [
{
"date": "2026-03-10",
"count": 1
},
{
"date": "2026-03-11",
"count": 1
},
{
"date": "2026-03-13",
"count": 1
},
{
"date": "2026-03-16",
"count": 1
},
{
"date": "2026-03-21",
"count": 1
},
{
"date": "2026-06-16",
"count": 1
}
],
"complete": true,
"collected": 6,
"total_forks": 6
},
"star_history": {
"days": [
{
"date": "2026-02-18",
"count": 1
},
{
"date": "2026-03-10",
"count": 2
},
{
"date": "2026-03-11",
"count": 40
},
{
"date": "2026-03-12",
"count": 128
},
{
"date": "2026-03-13",
"count": 96
},
{
"date": "2026-03-14",
"count": 39
},
{
"date": "2026-03-15",
"count": 36
},
{
"date": "2026-03-16",
"count": 35
},
{
"date": "2026-03-17",
"count": 40
},
{
"date": "2026-03-18",
"count": 29
},
{
"date": "2026-03-19",
"count": 33
},
{
"date": "2026-03-20",
"count": 33
},
{
"date": "2026-03-21",
"count": 32
},
{
"date": "2026-03-22",
"count": 30
},
{
"date": "2026-03-23",
"count": 29
},
{
"date": "2026-03-24",
"count": 35
},
{
"date": "2026-03-25",
"count": 36
},
{
"date": "2026-03-26",
"count": 39
},
{
"date": "2026-03-27",
"count": 42
},
{
"date": "2026-03-28",
"count": 27
},
{
"date": "2026-03-29",
"count": 28
},
{
"date": "2026-03-30",
"count": 13
},
{
"date": "2026-04-09",
"count": 1
},
{
"date": "2026-04-23",
"count": 1
},
{
"date": "2026-04-24",
"count": 2
},
{
"date": "2026-04-28",
"count": 1
},
{
"date": "2026-05-03",
"count": 1
},
{
"date": "2026-05-05",
"count": 2
},
{
"date": "2026-06-05",
"count": 1
},
{
"date": "2026-06-29",
"count": 1
},
{
"date": "2026-07-15",
"count": 1
}
],
"complete": true,
"collected": 834,
"total_stars": 834
},
"open_issues_and_prs": 14
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": true,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 841710,
"source_files_sampled": 189,
"oversized_source_files": 14,
"agent_instruction_files": [
"docs/reference/templates/AGENTS.md"
],
"agent_instruction_max_bytes": 3535
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [
{
"name": "@mariozechner/pi-coding-agent",
"direct": true,
"version": "0.54.2",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.3,
"advisory_ids": [
"GHSA-7v5m-pr3q-6453",
"GHSA-jfgx-wxx8-mp94",
"GHSA-r95r-rj6r-c39x"
],
"fixed_version": "0.78.1",
"advisory_count": 3,
"oldest_advisory_days": 34
},
{
"name": "undici",
"direct": false,
"version": "6.24.1",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-35p6-xmwp-9g52",
"GHSA-g8m3-5g58-fq7m",
"GHSA-p88m-4jfj-68fv",
"GHSA-vxpw-j846-p89q"
],
"fixed_version": "8.5.0",
"advisory_count": 4,
"oldest_advisory_days": 32
},
{
"name": "uuid",
"direct": false,
"version": "8.3.2",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-w5hq-g745-h8pq"
],
"fixed_version": "13.0.1",
"advisory_count": 1,
"oldest_advisory_days": 89
},
{
"name": "qs",
"direct": false,
"version": "6.14.2",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-q8mj-m7cp-5q26"
],
"fixed_version": "6.15.2",
"advisory_count": 1,
"oldest_advisory_days": 59
}
],
"collected": true,
"truncated": false,
"by_severity": {
"high": 3,
"moderate": 1
},
"advisory_count": 9,
"affected_count": 4,
"assessed_count": 508,
"assessed_package": "npm:openpocket@0.2.3",
"unassessed_count": 0,
"direct_affected_count": 1
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "@mariozechner/pi-agent-core",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^0.54.1"
},
{
"name": "@mariozechner/pi-ai",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^0.54.1"
},
{
"name": "@mariozechner/pi-coding-agent",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^0.54.1"
},
{
"name": "@modelcontextprotocol/sdk",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.26.0"
},
{
"name": "@sinclair/typebox",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^0.34.48"
},
{
"name": "@slack/bolt",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.6.0"
},
{
"name": "@slack/web-api",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^7.14.1"
},
{
"name": "@types/qrcode",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.5.6"
},
{
"name": "baileys",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^6.7.21"
},
{
"name": "cron-parser",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^5.5.0"
},
{
"name": "discord.js",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^14.25.1"
},
{
"name": "node-telegram-bot-api",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^0.66.0"
},
{
"name": "openai",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^6.10.0"
},
{
"name": "qrcode",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.5.4"
},
{
"name": "qrcode-terminal",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^0.12.0"
},
{
"name": "sharp",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^0.34.5"
},
{
"name": "zod",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^3.25.76"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 2,
"merged_prs": 84,
"open_issues": 12,
"closed_ratio": 0.478,
"closed_issues": 11,
"closed_unmerged_prs": 3
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "SergioChan",
"commits": 436,
"avatar_url": "https://avatars.githubusercontent.com/u/10103766?v=4"
},
{
"type": "User",
"login": "tsubasakong",
"commits": 34,
"avatar_url": "https://avatars.githubusercontent.com/u/97429702?v=4"
},
{
"type": "User",
"login": "wowill",
"commits": 28,
"avatar_url": "https://avatars.githubusercontent.com/u/18542410?v=4"
},
{
"type": "User",
"login": "baryhuang",
"commits": 20,
"avatar_url": "https://avatars.githubusercontent.com/u/3003873?v=4"
},
{
"type": "User",
"login": "juntoku9",
"commits": 19,
"avatar_url": "https://avatars.githubusercontent.com/u/92097440?v=4"
},
{
"type": "User",
"login": "YingjingLu",
"commits": 15,
"avatar_url": "https://avatars.githubusercontent.com/u/17891021?v=4"
},
{
"type": "User",
"login": "rogerint54",
"commits": 7,
"avatar_url": "https://avatars.githubusercontent.com/u/214940240?v=4"
},
{
"type": "User",
"login": "flashclub",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/30818149?v=4"
},
{
"type": "User",
"login": "tt67890",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/262873253?v=4"
},
{
"type": "User",
"login": "reneehuang1",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/100229782?v=4"
}
],
"contributors_sampled": 13,
"top_contributor_share": 0.762
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"issue-fix.lock.yml",
"issue-plan.lock.yml",
"node-tests.yml",
"pr-template.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "11 out of 11 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 1,
"reason": "Found 2/11 approved changesets -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 10 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "17 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 7,
"reason": "dependency not pinned by hash detected -- score normalized to 7",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "144 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "d4dae3d30d6f7c9f6d004a377cf1f1d3400d0685",
"ran_at": "2026-07-21T15:48:35Z",
"aggregate_score": 4.3,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/pockebot/openpocket",
"host": "github.com",
"name": "openpocket",
"owner": "pockebot"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 54,
"inputs": {
"security": 47,
"vitality": 38,
"community": 65,
"governance": 45,
"engineering": 77
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "at_risk",
"name": "Vitality",
"value": 38,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 62,
"inputs": {
"commits_last_year": 573,
"human_commit_share": 1,
"days_since_last_push": 11,
"active_weeks_last_year": 7
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 11 days ago",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 11
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "7/52 weeks with commits",
"points": 4.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 7
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "573 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 573
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "17 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "critical",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"releases_count": 0
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "no releases published",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases_published",
"params": {}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "no releases",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases",
"params": {}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "no releases",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases",
"params": {}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 65,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"forks": 6,
"stars": 834,
"watchers": 3,
"growth_state": "organic",
"growth_factor_pct": 100
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "834 stars",
"points": 47.4,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 834
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "6 forks",
"points": 5.8,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 6
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "3 watchers",
"points": 1.7,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 3
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 77,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 45,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 38,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 13,
"top_contributor_share": 0.762
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 76% of commits",
"points": 5.4,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 76
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "13 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 13
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 10 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 61,
"inputs": {
"merged_prs": 84,
"open_issues": 12,
"closed_issues": 11,
"issue_closed_ratio": 0.478,
"closed_unmerged_prs": 3
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "48% of issues closed",
"points": 22.3,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 48
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "84/87 decided PRs merged",
"points": 36.9,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 84,
"decided": 87
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 2/11 approved changesets -- score normalized to 1",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 39,
"inputs": {
"followers": 4,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "pockebot",
"public_repos": 2,
"account_age_days": 150
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "4 followers of pockebot",
"points": 5,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 4,
"login": "pockebot"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "2 public repos, account ~0 yr old",
"points": 4.3,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 2
}
},
{
"code": "account_age_years",
"params": {
"years": 0
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 77,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "4 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 4
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "11 out of 11 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": "https://openpocket.ai",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://openpocket.ai",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 47,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 43,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 15,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 3,
"scorecard_aggregate": 4.3
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "11 out of 11 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 2/11 approved changesets -- score normalized to 1",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 10 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "17 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 7",
"points": 3.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "144 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "moderate",
"name": "Dependency advisories",
"note": "Matched the npm:openpocket@0.2.3 runtime dependency closure — what installing the published package pulls in — 508 packages. Reachability is not analyzed.",
"notes": [
{
"code": "advisories_scope_published",
"params": {
"package": "npm:openpocket@0.2.3",
"assessed": 508
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 62,
"inputs": {
"source": "osv",
"advisories": 9,
"affected_packages": 4,
"assessed_packages": 508,
"unassessed_packages": 0,
"affected_by_severity": "high 3, moderate 1",
"direct_affected_packages": 1
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "1 affected: @mariozechner/pi-coding-agent 0.54.2 (high 7.3)",
"points": 14.6,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 1,
"packages": "@mariozechner/pi-coding-agent 0.54.2 (high 7.3)"
}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "3 affected: undici 6.24.1 (high 7.5), uuid 8.3.2 (high 7.5), qs 6.14.2 (moderate 5.3)",
"points": 7.6,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 3,
"packages": "undici 6.24.1 (high 7.5), uuid 8.3.2 (high 7.5), qs 6.14.2 (moderate 5.3)"
}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory has been public longer than 90 days",
"points": 40,
"status": "met",
"details": [
{
"code": "advisories_none_stale",
"params": {
"days": 90
}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 508,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 13
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 70,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.76,
"agent_instruction_files": [
"docs/reference/templates/AGENTS.md"
],
"agent_instruction_max_bytes": 3535
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "docs/reference/templates/AGENTS.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "docs/reference/templates/AGENTS.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "76 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 76,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 74,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"package-lock.json"
],
"has_dockerfile": true,
"typed_language": false,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
"tsconfig.json"
],
"agent_commit_share": 0.03,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "3 of the last 100 commits agent-authored or agent-credited",
"points": 6,
"status": "partial",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 3,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 7",
"points": 7,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "good",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 78,
"inputs": {
"primary_language": "JavaScript",
"largest_source_bytes": 841710,
"source_files_sampled": 189,
"oversized_source_files": 14
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "JavaScript with type-check config (tsconfig.json)",
"points": 27,
"status": "partial",
"details": [
{
"code": "typecheck_config_language",
"params": {
"files": "tsconfig.json",
"language": "JavaScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "14/189 source files over 60KB",
"points": 50.9,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 189,
"oversized": 14
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "critical",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"example_dirs": [],
"has_mcp_signal": true,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 20,
"status": "met",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"npm package 'openpocket' points at a different repository (https://github.com/SergioChan/openpocket); excluded from ecosystem scoring",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-21T15:48:57.766390Z",
"schema_version": "0.23.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/p/pockebot/openpocket.svg",
"full_name": "pockebot/openpocket",
"license_state": "standard",
"license_spdx": "MIT"
}
Registros relacionados
Repositorios inspeccionados que comparten etiquetas de catálogo o ecosistemas con pockebot/openpocket. Leer en paralelo →
Las puntuaciones son señales, no garantías. Reflejan prácticas públicamente visibles en GitHub; no son una auditoría de código ni una garantía de seguridad.
Los datos ausentes se excluyen y los pesos se renormalizan; nunca se puntúan como cero. La metodología es versionada y abierta: métricas v1.13.0, esquema v0.23.0 — metodología completa · wiki de métricas.
