4-agent coding team dashboard — terminals, agent chat, GitHub board, Telegram bridge, and shared memory in one local web view.
JavaScript · TypeScriptMIT★ 29 estrellas⑂ 9 forksdesde mar 2026Ver en GitHub ↗
TipoHerramienta de línea de comandosBibliotecaServicio de redInterfaz webBot de chatcómo se determina
realproject7/quadwork tiene un índice de salud de 78 sobre 100, lo que lo sitúa en la banda Bueno. Su puntuación más alta es Vitality (86/100) y la más baja, Community & Adoption (44/100). Se actualizó por última vez hace 4 días. Una sola persona concentra la mayor parte del trabajo reciente.
78
global / 100
Bueno
Índice de salud del software
Las métricas se agrupan en categorías ponderadas sobre una escala estandarizada de 1 a 100. El resultado global parte de su media ponderada, calibrada contra la distribución del registro público para que las bandas tengan significado percentil; cuando la evidencia pública activa la Política de Jurisdicciones de Alto Riesgo, la calificación se ajusta y recibe un límite «En riesgo» de 34.
78
Excepcional93-100El nivel más alto del registro (≈ el 5% superior); cumple prácticamente todos los criterios evaluados
Excelente80-92Sólido en todos los frentes; carencias menores
Bueno65-79Saludable; carencias limitadas y manejables
Moderado50-64Aceptable con carencias notables; se recomienda revisión
Débil35-49Debilidades sustanciales en varias áreas
En riesgo20-34Debilidades significativas; su adopción exige cautela
Crítico1-19Problemas graves (proyecto abandonado, un solo mantenedor, sin higiene)
Perfil de puntuación
Cada eje es una categoría. La forma importa más que la media: un proyecto sano llena toda la figura, mientras que un perfil de picos y cráteres indica que la fortaleza en una dimensión enmascara el riesgo en otra.
El resultado global ponderado 67 se calibra a 78 en la escala publicada del índice (calibración del registro 2026-08-02).
30 seguidores29 repositorios públicosdesde oct 2015HUNT
Este repositorio pertenece a una cuenta personal. Un proyecto con un único propietario conlleva más riesgo de continuidad que uno respaldado por una organización.
Dependencias directas libres de avisos conocidos — ninguna dependencia directa tiene un aviso conocido
25/25
Dependencias indirectas libres de avisos conocidos — ninguna dependencia indirecta tiene un aviso conocido
0/40
Sin avisos pendientes — ningún aviso tiene fecha de publicación
Datos de entrada utilizados
source
osv
advisories
0
affected_packages
0
assessed_packages
110
unassessed_packages
0
affected_by_severity
none
direct_affected_packages
0
Excluidos de la puntuación (sin datos o no aplicable): Sin avisos pendientes. Los pesos restantes se han renormalizado. Se cotejó el cierre de dependencias en tiempo de ejecución de npm:quadwork@2.7.1 —lo que arrastra la instalación del paquete publicado—: 110 paquetes. No se analiza la alcanzabilidad.
¿Hasta qué punto está el repositorio preparado para desarrollarse y mantenerse con agentes de codificación de IA? Tiene un peso deliberadamente pequeño (4%): las herramientas para agentes son una señal real de mantenimiento, pero un repositorio sin ninguna puede alcanzar igualmente 100/100.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Más detalle
Historial de estrellas y forks 0 ★ / 9 ⇿
0Estrellas
9Forks
49Versiones
Cuándo se añadió cada estrella y fork, recopilado de GitHub y agrupado por día. El crecimiento acumulado se sitúa justo encima de las adiciones diarias que lo componen, de modo que ambos se leen en conjunto: la acumulación orgánica sostenida no se parece en nada a un pico abrupto y efímero. Cuando esa diferencia es medible, se informa como autenticidad del crecimiento.
Mayor 1Menor 15Parche 33
OpenSSF Scorecard 4.4 / 10
4.4agregado
Evaluación de seguridad independiente y agnóstica en cuanto a herramientas, procedente del proyecto de código abierto OpenSSF Scorecard. Cada comprobación premia una práctica de seguridad, no la herramienta de un proveedor concreto. Las comprobaciones que Scorecard no pudo determinar se marcan como n/d y se excluyen de la puntuación de seguridad (nunca se cuentan como cero).Scorecard v5.5.0 · 2026-08-05 08:52 UTC
No fue posible recopilar el conjunto de dependencias resuelto para este informe: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Avisos de dependencias 0
Instalar npm:quadwork@2.7.1 arrastra 110 paquetes, directos y transitivos: 0 tienen avisos conocidos, de los cuales 0 son dependencias directas.
Ningún aviso conocido afecta a las dependencias evaluadas.
Un aviso significa que la versión registrada en el grafo de dependencias cae dentro del rango afectado de un aviso. No se analiza la alcanzabilidad, y el grafo incluye fijaciones de desarrollo y prueba: un hallazgo puede referirse al utillaje y no al software distribuido.
Informe JSON sin procesar legible por máquina
{
"data": {
"icon": {
"bytes": 74427,
"width": 1024,
"height": 1024,
"rejected": [],
"collected": true,
"media_type": "image/png",
"source_url": "https://raw.githubusercontent.com/realproject7/quadwork/main/public/icon.png",
"source_type": "readme",
"content_hash": "365f99e12e2a81079d2ea306c91cfbbc41df4e4e78c3866f5f82f51ed8756584",
"candidates_considered": 1
},
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 5349,
"has_wiki": true,
"homepage": null,
"languages": {
"CSS": 3056,
"JavaScript": 1046373,
"TypeScript": 526302
},
"pushed_at": "2026-08-01T04:15:12Z",
"created_at": "2026-03-31T13:20:19Z",
"owner_type": "User",
"updated_at": "2026-08-01T04:15:24Z",
"description": "4-agent coding team dashboard — terminals, agent chat, GitHub board, Telegram bridge, and shared memory in one local web view.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "JavaScript",
"significant_languages": [
"JavaScript",
"TypeScript"
]
},
"owner": {
"blog": "https://mint.club/",
"name": "Project7",
"type": "User",
"login": "realproject7",
"company": "HUNT",
"location": "Seoul, Korea",
"followers": 30,
"avatar_url": "https://avatars.githubusercontent.com/u/15100667?v=4",
"created_at": "2015-10-13T05:45:27Z",
"is_verified": null,
"public_repos": 29,
"account_age_days": 3949
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v2.7.1",
"kind": "patch",
"published_at": "2026-07-25T01:47:28Z"
},
{
"tag": "v2.7.0",
"kind": "minor",
"published_at": "2026-07-13T03:05:14Z"
},
{
"tag": "v2.6.0",
"kind": "minor",
"published_at": "2026-07-07T03:52:31Z"
},
{
"tag": "v2.5.1",
"kind": "patch",
"published_at": "2026-07-06T23:50:52Z"
},
{
"tag": "v2.5.0",
"kind": "minor",
"published_at": "2026-07-06T12:09:30Z"
},
{
"tag": "v2.4.0",
"kind": "minor",
"published_at": "2026-07-04T03:10:10Z"
},
{
"tag": "v2.3.9",
"kind": "patch",
"published_at": "2026-06-11T07:40:47Z"
},
{
"tag": "v2.3.8",
"kind": "patch",
"published_at": "2026-06-07T21:18:36Z"
},
{
"tag": "v2.3.7",
"kind": "patch",
"published_at": "2026-06-04T07:18:50Z"
},
{
"tag": "v2.3.6",
"kind": "patch",
"published_at": "2026-06-02T08:54:47Z"
},
{
"tag": "v2.3.5",
"kind": "patch",
"published_at": "2026-06-02T01:53:56Z"
},
{
"tag": "v2.3.4",
"kind": "patch",
"published_at": "2026-06-02T01:47:10Z"
},
{
"tag": "v2.3.3",
"kind": "patch",
"published_at": "2026-06-01T21:15:51Z"
},
{
"tag": "v2.3.2",
"kind": "patch",
"published_at": "2026-06-01T11:15:52Z"
},
{
"tag": "v2.3.1",
"kind": "patch",
"published_at": "2026-06-01T07:44:18Z"
},
{
"tag": "v2.3.0",
"kind": "minor",
"published_at": "2026-06-01T05:18:22Z"
},
{
"tag": "v2.2.1",
"kind": "patch",
"published_at": "2026-05-30T13:03:40Z"
},
{
"tag": "v2.2.0",
"kind": "minor",
"published_at": "2026-05-30T11:32:08Z"
},
{
"tag": "v2.1.0",
"kind": "minor",
"published_at": "2026-05-29T12:31:57Z"
},
{
"tag": "v2.0.1",
"kind": "patch",
"published_at": "2026-05-22T00:57:11Z"
},
{
"tag": "v2.0.0",
"kind": "major",
"published_at": "2026-05-21T04:20:51Z"
},
{
"tag": "v1.19.3",
"kind": "patch",
"published_at": "2026-05-19T01:04:19Z"
},
{
"tag": "v1.19.2",
"kind": "patch",
"published_at": "2026-05-15T13:40:41Z"
},
{
"tag": "v1.19.1",
"kind": "patch",
"published_at": "2026-05-15T13:08:13Z"
},
{
"tag": "v1.19.0",
"kind": "minor",
"published_at": "2026-05-06T05:19:00Z"
},
{
"tag": "v1.18.4",
"kind": "patch",
"published_at": "2026-05-06T04:25:46Z"
},
{
"tag": "v1.18.3",
"kind": "patch",
"published_at": "2026-05-06T03:52:54Z"
},
{
"tag": "v1.18.2",
"kind": "patch",
"published_at": "2026-05-06T02:34:41Z"
},
{
"tag": "v1.18.1",
"kind": "patch",
"published_at": "2026-05-04T14:07:27Z"
},
{
"tag": "v1.18.0",
"kind": "minor",
"published_at": "2026-05-04T07:34:40Z"
},
{
"tag": "v1.17.3",
"kind": "patch",
"published_at": "2026-05-04T04:17:46Z"
},
{
"tag": "v1.17.2",
"kind": "patch",
"published_at": "2026-05-04T03:43:43Z"
},
{
"tag": "v1.17.1",
"kind": "patch",
"published_at": "2026-05-04T03:20:30Z"
},
{
"tag": "v1.17.0",
"kind": "minor",
"published_at": "2026-04-30T22:49:51Z"
},
{
"tag": "v1.16.1",
"kind": "patch",
"published_at": "2026-04-30T05:00:42Z"
},
{
"tag": "v1.16.0",
"kind": "minor",
"published_at": "2026-04-30T02:41:46Z"
},
{
"tag": "v1.15.1",
"kind": "patch",
"published_at": "2026-04-29T04:43:26Z"
},
{
"tag": "v1.15.0",
"kind": "minor",
"published_at": "2026-04-29T03:04:09Z"
},
{
"tag": "v1.14.6",
"kind": "patch",
"published_at": "2026-04-28T13:00:07Z"
},
{
"tag": "v1.14.5",
"kind": "patch",
"published_at": "2026-04-28T11:08:54Z"
},
{
"tag": "v1.14.4",
"kind": "patch",
"published_at": "2026-04-28T10:53:12Z"
},
{
"tag": "v1.14.3",
"kind": "patch",
"published_at": "2026-04-28T07:40:26Z"
},
{
"tag": "v1.14.2",
"kind": "patch",
"published_at": "2026-04-28T04:43:42Z"
},
{
"tag": "v1.14.1",
"kind": "patch",
"published_at": "2026-04-28T02:00:06Z"
},
{
"tag": "v1.14.0",
"kind": "minor",
"published_at": "2026-04-28T01:56:17Z"
},
{
"tag": "v1.13.1",
"kind": "patch",
"published_at": "2026-04-27T08:20:45Z"
},
{
"tag": "v1.13.0",
"kind": "minor",
"published_at": "2026-04-27T06:27:17Z"
},
{
"tag": "v1.12.1",
"kind": "patch",
"published_at": "2026-04-27T05:13:44Z"
},
{
"tag": "v1.12.0",
"kind": "minor",
"published_at": "2026-04-21T11:39:22Z"
},
{
"tag": "v1.11.1",
"kind": "patch",
"published_at": "2026-04-20T11:37:03Z"
},
{
"tag": "v1.11.0",
"kind": "minor",
"published_at": "2026-04-20T03:21:21Z"
},
{
"tag": "v1.10.1",
"kind": "patch",
"published_at": "2026-04-19T11:37:34Z"
},
{
"tag": "v1.10.0",
"kind": "minor",
"published_at": "2026-04-19T03:02:04Z"
},
{
"tag": "v1.9.0",
"kind": "minor",
"published_at": "2026-04-16T23:15:20Z"
},
{
"tag": "v1.8.5",
"kind": "patch",
"published_at": "2026-04-13T08:32:52Z"
},
{
"tag": "v1.8.4",
"kind": "patch",
"published_at": "2026-04-13T06:17:12Z"
},
{
"tag": "v1.8.3",
"kind": "patch",
"published_at": "2026-04-12T12:41:16Z"
},
{
"tag": "v1.8.2",
"kind": "patch",
"published_at": "2026-04-12T12:25:39Z"
},
{
"tag": "v1.8.1",
"kind": "patch",
"published_at": "2026-04-12T12:01:55Z"
},
{
"tag": "v1.8.0",
"kind": "minor",
"published_at": "2026-04-12T08:04:26Z"
},
{
"tag": "v1.7.0",
"kind": "minor",
"published_at": "2026-04-11T17:41:41Z"
},
{
"tag": "v1.6.3",
"kind": "patch",
"published_at": "2026-04-11T13:10:46Z"
},
{
"tag": "v1.6.2",
"kind": "patch",
"published_at": "2026-04-11T11:43:33Z"
},
{
"tag": "v1.6.1",
"kind": "patch",
"published_at": "2026-04-11T05:15:15Z"
},
{
"tag": "v1.6.0",
"kind": "minor",
"published_at": "2026-04-11T02:19:02Z"
},
{
"tag": "v1.5.5",
"kind": "patch",
"published_at": "2026-04-10T12:18:25Z"
},
{
"tag": "v1.5.4",
"kind": "patch",
"published_at": "2026-04-10T10:37:00Z"
},
{
"tag": "v1.5.3",
"kind": "patch",
"published_at": "2026-04-09T18:04:06Z"
},
{
"tag": "v1.5.2",
"kind": "patch",
"published_at": "2026-04-09T16:53:47Z"
},
{
"tag": "v1.5.1",
"kind": "patch",
"published_at": "2026-04-09T14:37:29Z"
},
{
"tag": "v1.5.0",
"kind": "minor",
"published_at": "2026-04-09T11:12:50Z"
},
{
"tag": "v1.4.0",
"kind": "minor",
"published_at": "2026-04-09T09:25:08Z"
},
{
"tag": "v1.3.0",
"kind": "minor",
"published_at": "2026-04-09T09:25:06Z"
},
{
"tag": "v1.2.5",
"kind": "patch",
"published_at": "2026-04-09T09:25:05Z"
},
{
"tag": "v1.2.4",
"kind": "patch",
"published_at": "2026-04-09T09:25:03Z"
},
{
"tag": "v1.2.3",
"kind": "patch",
"published_at": "2026-04-09T09:25:02Z"
},
{
"tag": "v1.2.2",
"kind": "patch",
"published_at": "2026-04-09T09:25:01Z"
},
{
"tag": "v1.2.1",
"kind": "patch",
"published_at": "2026-04-09T09:24:59Z"
},
{
"tag": "v1.2.0",
"kind": "minor",
"published_at": "2026-04-09T09:24:58Z"
},
{
"tag": "v1.1.0",
"kind": "minor",
"published_at": "2026-04-09T09:24:57Z"
},
{
"tag": "v1.0.17",
"kind": "patch",
"published_at": "2026-04-09T09:24:55Z"
},
{
"tag": "v1.0.16",
"kind": "patch",
"published_at": "2026-04-09T09:24:54Z"
},
{
"tag": "v1.0.15",
"kind": "patch",
"published_at": "2026-04-09T09:24:52Z"
},
{
"tag": "v1.0.14",
"kind": "patch",
"published_at": "2026-04-09T09:24:51Z"
},
{
"tag": "v1.0.13",
"kind": "patch",
"published_at": "2026-04-09T09:24:50Z"
},
{
"tag": "v1.0.12",
"kind": "patch",
"published_at": "2026-04-09T09:24:49Z"
},
{
"tag": "v1.0.11",
"kind": "patch",
"published_at": "2026-04-09T09:24:47Z"
},
{
"tag": "v1.0.10",
"kind": "patch",
"published_at": "2026-04-09T09:24:46Z"
},
{
"tag": "v1.0.9",
"kind": "patch",
"published_at": "2026-04-09T09:24:45Z"
},
{
"tag": "v1.0.8",
"kind": "patch",
"published_at": "2026-04-09T09:24:44Z"
},
{
"tag": "v1.0.7",
"kind": "patch",
"published_at": "2026-04-09T09:24:43Z"
},
{
"tag": "v1.0.6",
"kind": "patch",
"published_at": "2026-04-09T09:24:42Z"
},
{
"tag": "v1.0.5",
"kind": "patch",
"published_at": "2026-04-09T09:24:40Z"
},
{
"tag": "v1.0.4",
"kind": "patch",
"published_at": "2026-04-09T09:24:39Z"
},
{
"tag": "v1.0.3",
"kind": "patch",
"published_at": "2026-04-09T09:24:38Z"
},
{
"tag": "v1.0.2",
"kind": "patch",
"published_at": "2026-04-09T09:24:30Z"
},
{
"tag": "v1.0.1",
"kind": "patch",
"published_at": "2026-04-09T09:24:12Z"
}
],
"recent_commits": [
{
"oid": "44d820ce0c135b274ab0aa6abb720af3190746ca",
"body": "[#1023] Add Grok (xAI Grok Build CLI) as a fourth agent backend",
"is_bot": false,
"headline": "Merge pull request #1024 from realproject7/task/1023-grok-backend",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-08-01T04:15:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b03aa60a6b2e94c8531c61e88d9b52379f72d27b",
"body": "… mirror test\n\nThree PO/@re1 items in one push.\n\n1. macOS fixture defect. os.tmpdir() is a symlink on macOS\n (/var/folders -> /private/var/folders); git canonicalizes the paths it\n reports, so the common-dir equality never matched and the suite was\n red for every Mac operator while staying gre\n[…]\neting\n that class of test. The grok-only/gemini-only ACs move to post-merge\n local-Mac verification by the PO, as the amended ticket records.\n\nCo-Authored-By: Claude Opus 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1023] Fix macOS fixture path, cite grok queueing evidence, drop the…",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-08-01T04:05:38Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f2877fb702a5b0f3d26a674e9cc1a4d03162bbb7",
"body": "@re1 on PR #1024:\n\n- pty-dispatcher.js still justified the cap re-arm's residual injection\n with \"safe because the cap is Claude-only\", which stopped being true\n the moment grok became eligible. The rationale now states what it\n actually rests on — a cap-eligible TUI queuing input received mid-tu\n[…]\nettingsPage.tsx alone is\n reverted.\n\nNo behavior change from the previous head: the inlined expression is the\nextracted helper's logic verbatim.\n\nCo-Authored-By: Claude Opus 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1023] Correct the cap re-arm rationale and inline the backend fallback",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-08-01T04:00:19Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "65add1fca0ce296fdcf3fa9118afedff163e3fc3",
"body": "Extends the existing claude/codex/gemini seams to grok, plus the one\ngenuinely new mechanism grok requires: a project-scoped TOML MCP config\nand folder trust, since grok has no --mcp-config-style flag.\n\n- injectMode: grok -> \"project_toml\"\n- PERMISSION_FLAGS: grok -> --always-approve\n- buildAgentArg\n[…]\native \".git\". The write is append-if-absent because\nthe common-dir exclude is shared and arg-build runs on every spawn and\nrespawn.\n\nCloses #1023\n\nCo-Authored-By: Claude Opus 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1023] Add Grok (xAI Grok Build CLI) as a fourth agent backend",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-08-01T03:50:24Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "59198955480c2224e1980e1645690d34a8ec0db3",
"body": "[#1021] 2.7.1",
"is_bot": false,
"headline": "Merge pull request #1022 from realproject7/task/1021-release-v2-7-1",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-25T01:39:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7ea62768e97dde18916e559a6dcad628e18d8712",
"body": "Patch bump 2.7.0 -> 2.7.1 from main 31708d5. npm `latest` is 2.7.0, so a\npublish without this release-source bump would fail as a duplicate.\n\nVersion strings only, edited by path rather than global replacement:\npackage.json.version, package-lock.json.version, and\npackage-lock.json.packages[\"\"].versi\n[…]\nint, PR #1020), #1018 (claude-opus-5 pinned model,\nPR #1019), #1003-#1009 (governed-batch + installation/operator docs\nrefresh, PRs #1011-#1017).\n\nCo-Authored-By: Claude Opus 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1021] 2.7.1",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-25T01:35:19Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "31708d52232fa7058e8648ea0710da4490bead42",
"body": "…-wake\n\n[#1010] Bound Claude deferred-wake delivery under continuous TUI repaint",
"is_bot": false,
"headline": "Merge pull request #1020 from realproject7/task/1010-claude-file-chat…",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-25T01:03:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "01c2c12a1f5367cce4c957c376067052322b7e97",
"body": "re2 on PR #1020: test 18b asserted the \"a stale callback cannot affect a\nsubsequent cycle\" contract but could not discriminate it — by the time\nthe cap drain returns, cleanupDrainListener has already cleared both\nhandles, so no stale timer ever exists. Replacing the guard with\n`() => true` left the \n[…]\nrming per post is\ndeliberately not done since a chatty agent could then extend deferral\nindefinitely — recreating the starvation this cap bounds.\n\nCo-Authored-By: Claude Opus 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1010] Pin the stale-cycle guard with a discriminating test",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-25T00:49:31Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a9dadab88e688222ee2d903a4dab02a4afd0892e",
"body": "The Claude Code TUI repaints its status line ~5x/sec while idle, so the\ndeferred-wake drain's idle timer — reset on every onData — never saw the\n5s gap and a queued wake was starved indefinitely. Claude agents in\nfile-chat mode were therefore never woken, while codex agents (whose TUI\ngoes quiet bet\n[…]\nCap timings are\noverridable so the regressions run at millisecond scale. Verified the\ncore case fails with the cap disabled (11 assertions fail).\n\nCo-Authored-By: Claude Opus 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1010] Bound Claude deferred-wake delivery under continuous TUI repaint",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-25T00:34:04Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7c4830ee1e2ee41e78afe20b1abc5812692c7aeb",
"body": "[#1018] Add Claude Opus 5 as a pinned selectable model",
"is_bot": false,
"headline": "Merge pull request #1019 from realproject7/task/1018-claude-opus-5",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-25T00:21:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef8715c2b22793ff6af28965e62c6a97ed4618f8",
"body": "Append `claude-opus-5` to MODEL_OPTIONS.claude immediately after\nclaude-fable-5 and before the 4.x pins (newest pin first, never first),\nso modelsForBackend(\"claude\")[0] stays \"opus\" — the #931 default/heal\ntarget. Pure data addition: buildAgentArgs already forwards any concrete\nClaude slug as `--mo\n[…]\nuard, since that surface is React-only), and\na launch case asserting `--model claude-opus-5` alongside the permission\nand --mcp-config arguments.\n\nCo-Authored-By: Claude Opus 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1018] Add Claude Opus 5 as a pinned selectable model",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-25T00:14:18Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "caf94e2b4d687ab02be00a35a62706f28a791256",
"body": "…resh\n\n[#1009] docs(operator-mcp): Make the Operator MCP guide backend-neutral and remote-safe",
"is_bot": false,
"headline": "Merge pull request #1017 from realproject7/task/1009-operator-mcp-ref…",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-18T00:08:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "64ce6b8f2ea297d36ee254a9e8fe6724b270cf82",
"body": "…ard support\n\nAddress @re1: the \"MCP client must run on the same machine\" note (line 7)\ncontradicted the SSH local-forward path documented under Remote / VPS. Restate\nit as a shared-loopback requirement that explicitly allows either same-host\noperation or the documented SSH tunnel.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1009] docs(operator-mcp): Reconcile same-machine note with SSH-forw…",
"author_name": "project7",
"author_login": null,
"committed_at": "2026-07-18T00:06:24Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "24fcb8ba12d63e63d8f1a2e438478a98f73085ac",
"body": "…al and remote-safe\n\n- Backend-neutral: retitle \"from a Claude agent\" → \"from an MCP client\"; the\n operator server is a generic stdio MCP server usable by any MCP-capable\n client. Add a generic registration framing (every client launches the same\n `quadwork-mcp-operator --port <port>` bin) and a \n[…]\nsurface. Docs-only; no backend/runtime code, packages, tests,\nlegacy migration implementation, other docs, or other repos touched.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1009] docs(operator-mcp): Make the Operator MCP guide backend-neutr…",
"author_name": "project7",
"author_login": null,
"committed_at": "2026-07-18T00:03:06Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "11b4e0a2a96ff84331a923c9da47c9284111b9b8",
"body": "…refresh\n\n[#1008] docs(troubleshooting): Refresh current runtime recovery guidance",
"is_bot": false,
"headline": "Merge pull request #1016 from realproject7/task/1008-troubleshooting-…",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-17T23:58:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "761e06ac5f4642e0c2aa07323073003c9510dd89",
"body": "…lar agents\n\nAddress @re1: the onData trust listener at server/index.js:1182 is Butler-only\n(butlerSession.term). The four agents (head/dev/re1/re2) are pre-trusted at\nproject creation by running `claude -p` in each Claude-backed worktree\n(server/routes.js:3924-3940, #599; #975 made it async, did no\n[…]\nuadWork runs at creation), then restart the agent — instead of the\nincorrect \"a per-agent listener auto-answers on restart\" claim.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1008] docs(troubleshooting): Correct trust-prompt recovery for regu…",
"author_name": "project7",
"author_login": null,
"committed_at": "2026-07-17T23:54:24Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f9556489d8f3a1d4231ba7453a74f1bf094662ac",
"body": "Tie the stale entries to current behavior; no runtime changes.\n\n- Trust prompt: drop the manual `claude -p \"echo ok\"` pre-trust and the\n \"QuadWork v1.14.5+ pre-trusts during project creation\" wording (both removed\n by #975). Describe the current behavior — an onData listener auto-confirms the\n Cl\n[…]\nresent or added. Docs-only; no runtime code,\ntests, package versions, legacy migration implementation, or other documents\ntouched.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1008] docs(troubleshooting): Refresh current runtime recovery guidance",
"author_name": "project7",
"author_login": null,
"committed_at": "2026-07-17T23:50:22Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d65d35646496f0268960c546571cb9ae53293947",
"body": "[#1007] docs(install-vps): Modernize VPS installation and remove legacy chat migration prose",
"is_bot": false,
"headline": "Merge pull request #1015 from realproject7/task/1007-install-vps-refresh",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-17T23:46:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c388f47310b3ed2f35bb120802f03d3c39ebd6d0",
"body": "…at migration prose\n\n- Remove the obsolete \"Migrating from Older Versions (AgentChattr cleanup)\"\n section from the public install guide (pm2 agentchattr-* cleanup, config\n key removal) — no longer relevant to a current install.\n- Add a Remote Access section that keeps control local-forward based:\n\n[…]\nbin/quadwork.js:864). Docs-only; no runtime\ncode, package versions, tests, legacy cleanup implementation, or quadwork-web\ntouched.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1007] docs(install-vps): Modernize VPS install and remove legacy ch…",
"author_name": "project7",
"author_login": null,
"committed_at": "2026-07-17T23:44:05Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "fbc870d3c499e4bcf2cedeef80b4b8893904571c",
"body": "…refresh\n\n[#1006] docs(install-windows): Bring the WSL2 guide to current setup parity",
"is_bot": false,
"headline": "Merge pull request #1014 from realproject7/task/1006-install-windows-…",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-17T23:38:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a4a35ee2526cd7362214ef06534009b0860a574e",
"body": "…parity\n\nMake docs/install-windows.md independently usable instead of deferring to the\nMac guide, and align every command with the current code / the corrected\ninstall-mac.md (#1005).\n\n- Inline the full flow inside WSL2: install agent CLIs (Claude Code / Codex /\n Gemini CLI), authenticate, install \n[…]\nuide\" pointers.\n\nDocs-only; no runtime code, tests, package versions, legacy migration\nimplementation, or other documents touched.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1006] docs(install-windows): Bring the WSL2 guide to current setup …",
"author_name": "project7",
"author_login": null,
"committed_at": "2026-07-17T23:35:44Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b1b70b6071f69d388add36e416a3f1b07e3ccb82",
"body": "[#1005] docs(install-mac): Update macOS installation for the current QuadWork release",
"is_bot": false,
"headline": "Merge pull request #1013 from realproject7/task/1005-install-mac-refresh",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-17T23:33:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a44dc5b8287f8d8bf1f01d2aa52b01931300991",
"body": "Reconcile docs/install-mac.md with the current CLI, SetupWizard, README, and\npackage metadata (v2.7.0), removing stale v1.14.5-era wording.\n\n- Verify step: `quadwork --version` is not a subcommand (falls through to the\n usage help); use `npm list -g quadwork`, and bump the example version from\n 1.\n[…]\nhat auto-answers the prompt\n (server/index.js:1182).\n\nDocs-only; no runtime code, package versions, tests, or other docs touched.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1005] docs(install-mac): Update macOS guide for the current release",
"author_name": "project7",
"author_login": null,
"committed_at": "2026-07-17T23:27:52Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "5f16c0a5afa613ca4f41c38b27a18e37bd4c8b48",
"body": "…tr-claims\n\n[#1004] docs: Remove stale AgentChattr claims from repository guidance and README credits",
"is_bot": false,
"headline": "Merge pull request #1012 from realproject7/task/1004-remove-agentchat…",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-17T23:22:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cc5d3eaafcdb9a53ba52aaf50edad44a82c5ecba",
"body": "…README credits\n\nRemove references portraying AgentChattr / agentchattr-telegram as current\nQuadWork dependencies and describe the verified current arrangement.\n\n- README.md: drop the AgentChattr External Tools credit (no credit implies a\n current dependency).\n- CLAUDE.md: replace \"AgentChattr chat\n[…]\ntion\nimplementation, or quadwork-web touched. AGENTS.md already contains no\nAgentChattr text (rg over the three files finds none).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1004] docs: Remove stale AgentChattr claims from repo guidance and …",
"author_name": "project7",
"author_login": null,
"committed_at": "2026-07-17T23:19:26Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ce8f30b32732a0496e21b9ef87d20be5f93f9096",
"body": "…batch\n\n[#1003] docs(readme): Reframe QuadWork around governed batch delivery",
"is_bot": false,
"headline": "Merge pull request #1011 from realproject7/task/1003-readme-governed-…",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-17T23:15:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bfadf2bb694e0399f9a0d443230d2ec597bbc23c",
"body": "Rewrite the README narrative around governed, one-ticket-at-a-time batch\ndelivery. Name all four roles accurately (@head, @dev, @re1, @re2) and\ndescribe the Issue → Branch → PR → Review × 2 → Merge pipeline they run.\n\nRemove unsupported claims (production-grade, ship 24/7, high code quality\nwithout \n[…]\nackend mentions with the actually-supported\nCodex, Claude, and Gemini CLIs. External Tools credits, commands, and\nlinks unchanged.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1003] docs(readme): Reframe QuadWork around governed batch delivery",
"author_name": "project7",
"author_login": null,
"committed_at": "2026-07-17T23:05:11Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "853716246a18f628d592b42da063ca141323c1c1",
"body": "[#1001] 2.7.0",
"is_bot": false,
"headline": "Merge pull request #1002 from realproject7/task/1001-release-v2-7-0",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-13T03:03:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad0e163d0e28dac11458d223372793993871e2fc",
"body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1001] 2.7.0",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-13T03:00:25Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f280d579d5af01e854334e7e9cbfc6adaf1ecb4f",
"body": "[#999] Add GPT-5.6 Sol/Terra/Luna to codex model dropdown",
"is_bot": false,
"headline": "Merge pull request #1000 from realproject7/task/999-gpt56-models",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-13T02:46:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c29d5ade690e9a75454c8dbd021be676c15ede4c",
"body": "Append gpt-5.6-sol/terra/luna to MODEL_OPTIONS.codex after the existing\nconcrete rows so modelsForBackend(\"codex\")[0] stays \"gpt-5.4\" (#931\ndefault/heal target). Pure data addition; effectiveModel/sanitizeModel\nalready handle any concrete slug. Adds a test asserting optionsForBackend(\n\"codex\") includes the 3 new slugs.\n\nCloses #999\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#999] Add GPT-5.6 Sol/Terra/Luna to codex model dropdown",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-13T02:42:53Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "21eac479c0a12fc796858b31eaacf12536b5d615",
"body": "[#997] 2.6.0",
"is_bot": false,
"headline": "Merge pull request #998 from realproject7/task/997-release-v2-6-0",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-07T03:52:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7bd527d11500fd2a2744735681299252cb754289",
"body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#997] 2.6.0",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-07T03:49:01Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "dd06e2c748ad8a29ada3110dacaabddf2bdbb906",
"body": "[#961] Clarify Operator MCP VPS loopback and SSH forwarding troubleshooting",
"is_bot": false,
"headline": "Merge pull request #996 from realproject7/task/961-operator-mcp-docs",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-07T01:23:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "39d0723c581fe30660f45ba70b90187126ab16f4",
"body": "…ooting\n\nDocs-only. The VPS path in operator-mcp.md was technically correct but easy to\nmisread while troubleshooting. Adds a focused \"Remote / VPS troubleshooting\"\nsubsection under the existing Registration section (references it, no\nduplication):\n- restates the loopback rule (client always hits 12\n[…]\n examples carry a trailing `sleep` (keep stdin open so\nthe MCP server can flush responses before the pipe closes).\n\nNo code or behavior change.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#961] Clarify Operator MCP VPS loopback and SSH forwarding troublesh…",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-07T01:18:29Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ac199ce0cffc9851545e07e4716f188e56f1a868",
"body": "[#992] Auto-respawn agents on server restart when a batch is active",
"is_bot": false,
"headline": "Merge pull request #995 from realproject7/task/992-restart-respawn",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-07T01:16:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38c78780503237b14674500fb1376d018d75cc35",
"body": "#972's clean shutdown kills agent PTYs on pm2/local restart, but nothing\nrespawned them — a project mid-batch silently stalled (no dev progress, no\nreviews) until an operator manually restarted head/dev/re1/re2. This bit every\nv2.5.x upgrade.\n\nrespawnActiveBatchAgents(cfg) runs once in the startup c\n[…]\nartRespawn.test.js: active→4 restored, idle→none, unknown/throw→\nnone, opt-out→none, idempotent-skip, failing-spawn logged, malformed projects.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#992] Auto-respawn agents on server restart when a batch is active",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-07T01:10:07Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "49d50e57c8f14f31c6acca81f15a971800b13a8d",
"body": "[#957] Lifecycle-aware cleanup of agent backend temp dirs",
"is_bot": false,
"headline": "Merge pull request #994 from realproject7/task/957-temp-cleanup",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-07T01:02:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "995d94ec98bbd0dea1d2c364fe80493f625ca53f",
"body": "Claude Code keeps temp under /tmp/claude-{uid} and never bounds it. On Linux\nhosts where /tmp has a per-user quota, that dir grows until the quota is\nexhausted, after which every Claude bash call fails silently (exit 1, no\noutput). QuadWork owns the agent lifecycle, so it cleans at known-safe moment\n[…]\n1 post-mortem) + install-vps.md note.\n\nReimplemented fresh against current main (old PR #960 bitrotted after\n#968/#972/#975 reworked index.js).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#957] Lifecycle-aware cleanup of agent backend temp dirs",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-07T00:56:51Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "cb9963ea43672b4db479d84d176e68eb81a44f43",
"body": "[#966] Reseed worktree CLAUDE.md alongside AGENTS.md",
"is_bot": false,
"headline": "Merge pull request #993 from realproject7/task/966-reseed-claude-md",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-07T00:49:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "24160df828049189221b95bce8537434fc84227d",
"body": "Auto-reseed refreshed worktree AGENTS.md on template upgrade but never\nCLAUDE.md, so the two instruction files drifted. _performReseedWrites now\nalso refreshes CLAUDE.md via the same reseedAgentsMd merge (fresh template\nwins per-H2, operator-added H2 sections preserved).\n\nGuard: only a provably Quad\n[…]\nroject's own hand-authored\nCLAUDE.md, or a missing one, is left byte-identical and recorded in skipped.\nAGENTS.md reseed behavior is unchanged.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#966] Reseed worktree CLAUDE.md alongside AGENTS.md",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-07T00:44:25Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "1d1b020ae5214e21ea3b20cb8bdfd7b33b97d8ff",
"body": "[#990] 2.5.1",
"is_bot": false,
"headline": "Merge pull request #991 from realproject7/task/990-release-v2-5-1",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-06T23:50:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af59d36034b758ff816ad7b13397fa2a25ac7072",
"body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#990] 2.5.1",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-06T23:47:22Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "7bf9fc14e9ecae8af7c1af15564c32ef5d8a197f",
"body": "[#988] Reverse-proxy dashboard token allowlist (v2.5.1 hotfix)",
"is_bot": false,
"headline": "Merge pull request #989 from realproject7/task/988-proxy-token-allowlist",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-06T23:46:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "777d9857a1a0a4c8be6ddc0d3c8167f6a2234d2d",
"body": "REQUEST CHANGES: isAllowedWsOrigin's #968 same-host fallback\n(u.host === req.headers.host) fired even for a LOOPBACK socket carrying a\nnon-loopback, non-allowlisted Host+Origin — so a forged/foreign matched pair\n(untrusted on-box proxy, DNS-rebinding page) with a valid token slipped\nthrough, violati\n[…]\ner.\n\nAdds the requested regression test: matched foreign Host+Origin + valid token\n→ WS 403 (not opened). Full suite still 61 passed, 0 failed.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#988] Close WS same-host fallback for forged foreign Host+Origin (re1)",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-06T23:42:52Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ccffe682e3c4a2b7cd0b8adec4a1c83ea84c397c",
"body": "The #968 loopback-only gate on /api/session-token 403s a dashboard served\nthrough an on-box authenticated reverse proxy (nginx forwards a public\nHost/Origin), so the terminal WS never gets a token and closes 1006.\n\nAdd opt-in config.trusted_dashboard_hosts: when the socket is loopback AND\nthe forwar\n[…]\nrusted) → 403. wsPtyAuth.test.js\n(no-allowlist case) still passes. docs/troubleshooting.md documents the\nauthenticated-nginx + allowlist setup.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#988] Reverse-proxy dashboard token allowlist (v2.5.1 hotfix)",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-06T23:36:23Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ddb3e434fe16c5e7979a5a71e431c548c5995054",
"body": "[#986] 2.5.0",
"is_bot": false,
"headline": "Merge pull request #987 from realproject7/task/986-release-v2-5-0",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-06T12:09:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8bb55d0d57a9540e2affa484b291f9621351889e",
"body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#986] 2.5.0",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-06T12:05:22Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f6533e992d8926b72dd358ed95493a9a20f828f5",
"body": "[#975] De-block the event loop",
"is_bot": false,
"headline": "Merge pull request #985 from realproject7/task/975-deblock-event-loop",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-06T12:00:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d1b61dfb40863b899d2080178faf61eed3bab56",
"body": "QuadWork is single-process, so any synchronous block on the main thread\nfreezes every agent's WS/HTTP/timers. Removes the 3 confirmed stalls,\nbehavior-preservingly (only the blocking removed).\n\n1. file-chat.js appendMessage — the retry loop slept via\n Atomics.wait(...,100), a synchronous 100ms blo\n[…]\nfailed. Server boots + shuts down cleanly on this branch.\n\nNote (not implemented here, per ticket): JSONL rotation is a separate\nfuture ticket.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#975] De-block the event loop (EPIC #967 Phase 3)",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-06T11:54:33Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ce7fc0cc5e419e3b2c3471f6794ea7bf1f81b2e2",
"body": "[#974] Setup hardening",
"is_bot": false,
"headline": "Merge pull request #984 from realproject7/task/974-setup-hardening",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-06T11:41:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3f7b3cc7feffd91d030a27204e72c67872e3dae4",
"body": "Fixes 5 confirmed setup/start defects + 2 folded lows. Changes confined\nto setup/start paths (bin/quadwork.js, server setup route, server listen);\nno steady-state runtime or agent-spawn behavior changes.\n\n1. Stale-branch brick — if a `worktree-<agent>` branch survives after its\n dir was deleted, s\n[…]\ndetached). Full\nsuite 60 passed / 0 failed. EADDRINUSE + stale-branch reuse also verified\nend-to-end against a live server and a real git repo.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#974] Setup hardening (EPIC #967 Phase 3)",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-06T11:33:32Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d7cf39f654645759041c919206f1a9a005f14ac2",
"body": "[#973] Frontend correctness bundle",
"is_bot": false,
"headline": "Merge pull request #983 from realproject7/task/973-frontend-correctness",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-06T11:20:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "000b5d4bc5cbde115b6ba7302fee8cd7b6833fdf",
"body": "Fixes 7 confirmed frontend-only bugs + 3 folded lows across the\ndashboard components. No server changes.\n\nChatPanel:\n- 403 auth banner was dead code (authRetryRef read, never incremented);\n now counts failures and clears the tally on a clean poll / project switch.\n- project-switch poll race: an in-\n[…]\nager:\n- bootstrap WebSocket was never closed (leak); closes it after use and polls\n /api/sessions for liveness instead of a fixed spawn sleep.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#973] Frontend correctness bundle (EPIC #967 Phase 3)",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-06T11:08:17Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a33f427d658fa7b6c0a4f9c7595f675880864fb2",
"body": "[#971] Atomic config writes + field-scoped flag endpoint",
"is_bot": false,
"headline": "Merge pull request #982 from realproject7/task/971-atomic-config",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-06T10:54:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c52f246a26ceccb10c6c7ba7bb4756308105d782",
"body": "…view)\n\n@re1 (re-review): the section-merge PATCH intentionally never drops projects, so\na Settings \"Remove\" (which filtered the project from local state and relied on\nsave) no longer persisted — the project stayed on disk.\n\n- routes.js: new DELETE /api/projects/:id — removes the project atomically \n[…]\nwaway port): Settings \"Remove\" → Confirm\nfires DELETE /api/projects/:id; the project is gone from disk, others intact.\nSuite 59/0/2, tsc clean.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#971] Add DELETE /api/projects/:id so Settings \"Remove\" persists (re…",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-06T05:06:28Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6b3aa60731044ac54be5f7ecfa8c5b90aeae3ffb",
"body": "@re1: SettingsPage.save was the last frontend caller PUTting the whole config,\nwhich the #971 AC forbids. Add a section-merge PATCH /api/config backed by\nupdateConfig and move the Settings save to it.\n\n- routes.js: new PATCH /api/config — merges the provided sections into the\n freshest on-disk conf\n[…]\nowser (throwaway port): a Settings save fires\nPATCH /api/config (no PUT); operator_name persists, idle flag preserved. Suite\n59/0/2, tsc clean.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#971] Migrate SettingsPage.save off whole-config PUT (review)",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-06T04:59:51Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "53274b7d9df2db1339ba701fd47646656a409037",
"body": "EPIC #967 Phase 2 — make config the single serialization point, killing the\nwhole-config read-modify-write races.\n\nconfig.js:\n- writeConfig is now ATOMIC (write a `${pid}.tmp` file, then renameSync onto\n config.json — the migrate-ac.js pattern). The old in-place writeFileSync\n could truncate confi\n[…]\n /api/projects/:id/flags (no whole-config PUT); the flag persists, unrelated\nfields + raw operator_name are unchanged. Never touched port 8400.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#971] Atomic config writes + field-scoped flag endpoint",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-06T04:49:47Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3b2d415d5adadf52dd3b38d6184c655031746c53",
"body": "[#972] Clean shutdown() + fix quadwork stop PID handling",
"is_bot": false,
"headline": "Merge pull request #981 from realproject7/task/972-shutdown-cleanup",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-06T04:32:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82fcc90c93e24678c06851652881aa0ae3ce6f07",
"body": "EPIC #967 Phase 2. Two lifecycle defects, isolated to the shutdown/stop paths.\n\nshutdown() (server/index.js) only stopped butler + file-chat, so Ctrl+C:\n- orphaned the detached+unref caffeinate (no -t) → the Mac never slept again,\n- left agent PTYs (and CLI children holding worktree locks) alive,\n- \n[…]\nd-to-end (throwaway\nport): server.pid written, stop → clean shutdown, no orphan, pid removed.\nSuite 57/0/2, tsc clean; never touched port 8400.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#972] Clean shutdown() + fix `quadwork stop` PID handling",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-06T03:49:55Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d741026761257483f4f875ed81fb33e2ef2b3f1a",
"body": "[#968] Auth the terminal WS + PTY-write endpoints (Origin + session token)",
"is_bot": false,
"headline": "Merge pull request #980 from realproject7/task/968-ws-pty-auth",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-06T03:32:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c55c0661b54f89eee25c36af4267b85a5c14b139",
"body": "Review (@re1): the token endpoint gated on req.ip alone, so a DNS-rebound\npage (attacker domain → 127.0.0.1) or a same-host reverse proxy keeps the\nsocket on loopback while the browser's Host/Origin is a REMOTE name, and\ncould pull the session token to a non-local origin — then authenticate\n/ws/term\n[…]\nas documented.\n\nLocal dashboard on 127.0.0.1/localhost is unaffected (re-verified: attach +\ntype on a throwaway port). Suite 55/0/2, tsc clean.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#968] Harden /api/session-token against DNS rebinding / reverse proxy",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-06T03:26:02Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3d11b6676c4d703ed6e10bc6c6123b92d895c21b",
"body": "…oken)\n\nEPIC #967 Phase 1 — close the top security hole: the terminal WebSocket\nand PTY-write endpoints had no auth or Origin check, so any web page the\noperator visited could open ws://127.0.0.1:8400/ws/terminal and inject\nkeystrokes into an agent PTY (remote shell over tailnet).\n\nBackend (server/i\n[…]\nand asserts foreign-origin/no-token WS rejected, valid token accepted,\nREST token gate, /api/config redaction + PUT preservation. Suite 55/0/2.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#968] Auth the terminal WS + PTY-write endpoints (Origin + session t…",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-06T03:18:34Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "48f78922f2464c3813918be706ce23b7c80e7a2b",
"body": "…ards\n\n[#970] Guard activity/log, bridge sender, reviewer-token path",
"is_bot": false,
"headline": "Merge pull request #979 from realproject7/task/970-routes-security-gu…",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-06T02:48:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4bb9e94b73fee28f462c2a8b4d0544a29c482ef7",
"body": "EPIC #967 Phase 1 security — three isolated local-attack-surface gaps in\nserver/routes.js, each with a test.\n\n1. POST /api/activity/log: `project` had only a non-empty-string check but\n flows into path.join(CONFIG_DIR, project, \"activity.jsonl\") → mkdir +\n appendFileSync, i.e. an arbitrary-path \n[…]\nt.js fixtures moved to\nin-root worktree paths to match the now-restricted behavior (intent preserved).\nSuite: 54 passed / 0 failed / 2 skipped.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#970] Guard activity/log, bridge sender, reviewer-token path",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-05T03:14:14Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "97b9d9fd106a96a0bbd20872818266f65354576e",
"body": "[#969] Fix QueueManager markdown XSS via react-markdown",
"is_bot": false,
"headline": "Merge pull request #978 from realproject7/task/969-queuemanager-xss",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-05T02:59:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3a74bdbbcd3284cfde21e09f4ccd84660d0e085c",
"body": "Add a react-markdown `components.a` override so preview links keep the\nprior `target=\"_blank\" rel=\"noopener noreferrer\"` behavior — clicking a\nlink no longer navigates the SPA away from (and discards) the queue\neditor. react-markdown still sanitizes the href, so this is styling/UX\nparity only, no security change.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#969] Preserve preview links' new-tab behavior",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-05T02:54:06Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "4793c6858d7fd5d2b98dba34ec143f6a394b6ace",
"body": "EPIC #967 Phase 1 (security). QueueManager's preview built HTML with a\nhand-rolled renderMarkdown and injected it via dangerouslySetInnerHTML.\nGitHub issue titles flow into that markdown (generateTemplate line ~50),\nso a title like `[x](javascript:alert(1))` or an attribute-breakout\n(`\" onmouseover=\n[…]\nl for normal\n markdown. Runs in the plain-node suite via react-dom/server.\n\nNo new dependency. tsc + eslint clean; suite 53 passed / 0 failed.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#969] Fix QueueManager markdown XSS via react-markdown",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-05T02:49:21Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f6aead0bf2b440ee3e22b6236cd2f6ea3e4509f2",
"body": "[#976] Add CI test-gate, release gate, and pack-smoke asset coverage",
"is_bot": false,
"headline": "Merge pull request #977 from realproject7/task/976-ci-test-gate",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-05T02:42:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95c8016ff5925c8bafe2d1e14e0f1aea7256efb7",
"body": "Phase 0 of EPIC #967: PRs and pushes to main had no CI, so the\npack-smoke crash-loop guard (#937/#939) only ran on manual `npm test`,\nand the release scripts published with no test step.\n\n- .github/workflows/ci.yml: run the server discovery suite on PRs and\n push-to-main (Node 24.x, matching the VP\n[…]\nI\" claim to reference the new\n workflow now that CI actually exists.\n\nNo runtime code changes. Existing suite (52 runnable, 2 skipped) passes.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#976] Add CI test-gate, release gate, and pack-smoke asset coverage",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-05T02:33:26Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a344307b677175ac1eb4138e4ea43228bf06f7e5",
"body": "[#964] 2.4.0",
"is_bot": false,
"headline": "Merge pull request #965 from realproject7/task/964-release-v2-4-0",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-04T03:09:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "341198502a4d6047d908aeb03a8c737d8fa1fe7e",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#964] 2.4.0",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-04T03:06:44Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "354b90f5531cf1376ed16379eb0bc1d2aca0139e",
"body": "[#962] Agent guidelines v7 — EPIC alignment, design fidelity, kill-list review, evidence-bound reporting",
"is_bot": false,
"headline": "Merge pull request #963 from realproject7/task/962-agent-guidelines-v7",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-04T03:05:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d23c62e81568dd64a514c361e6b7ecb968fe821b",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#962] Allow reviewer memory-card writes as sole no-write exception",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-04T03:01:58Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "df60faac0473677be11a81c234d9e2fda7be0400",
"body": "…st review, evidence-bound reporting\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#962] Agent guidelines v7 — EPIC alignment, design fidelity, kill-li…",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-03T04:55:59Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "8638a531dcbbe4d7b2794c1ccc95280284e8b2ba",
"body": null,
"is_bot": false,
"headline": "2.3.9",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-11T07:40:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0fbd4d609c7fb63608b7b2a8fd51b1f816fb5106",
"body": "[#958] Add Fable 5 (claude-fable-5) to the agent model catalog",
"is_bot": false,
"headline": "Merge pull request #959 from realproject7/task/958-fable5-model-catalog",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-06-11T07:40:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1657297c1d1cb74b6456c1902227b3b8edbdf245",
"body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#958] Add Fable 5 (claude-fable-5) to the claude model catalog",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-11T07:29:09Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a91b908366fbc6cf5538a37355b4c8964d470924",
"body": null,
"is_bot": false,
"headline": "2.3.8",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-07T21:18:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "37d9576e42be62708d72a57d10779770597752a2",
"body": "…stdio\n\n[#948] Document operator MCP stdio JSON-RPC",
"is_bot": false,
"headline": "Merge pull request #956 from realproject7/task/948-docs-operator-mcp-…",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-06-07T13:02:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cc26b5e8c549fd253ef040097c5ee307679fb9d9",
"body": null,
"is_bot": false,
"headline": "[#948] Document operator MCP stdio JSON-RPC",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-07T13:00:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "69ce351b43251401e6f32527eaa5ce6850180312",
"body": "…token\n\n[#949] Add reviewer account settings",
"is_bot": false,
"headline": "Merge pull request #955 from realproject7/task/949-settings-reviewer-…",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-06-07T12:57:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "811595271a9dddf2afa07f08e35119d16c9ef789",
"body": null,
"is_bot": false,
"headline": "[#949] Preserve reviewer user on config saves",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-07T12:56:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "19b66c2a7ed44d21c37913d29deb7e0b654a95c7",
"body": null,
"is_bot": false,
"headline": "[#949] Use neutral reviewer token fixture",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-07T12:54:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "01aae55a93000a397becce5737692d76730cd67f",
"body": null,
"is_bot": false,
"headline": "[#949] Add reviewer account settings",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-07T12:51:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "468abd838cb05b50b4123d158341635fd1b8010f",
"body": "…-clone\n\n[#947] Refresh setup clones before worktrees",
"is_bot": false,
"headline": "Merge pull request #954 from realproject7/task/947-setup-wizard-empty…",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-06-07T12:45:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "400640bc0f055b009241448bbfac0a7348579a7d",
"body": null,
"is_bot": false,
"headline": "[#947] Refresh setup clones before worktrees",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-07T12:42:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3337c4b0aae504b99e69b57fc896f3a6009e92c2",
"body": "…ive-close-link\n\n[#951] Link batch progress via native close events",
"is_bot": false,
"headline": "Merge pull request #953 from realproject7/task/951-batch-progress-nat…",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-06-07T12:36:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "28a2c7fd6ed78ff7a3ed3a388b4a2394531fa8ce",
"body": null,
"is_bot": false,
"headline": "[#951] Link batch progress via native close events",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-07T12:34:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ae49f67398c85d5d9b053126233f102069577a73",
"body": "…minal-cache\n\n[#950] Cache terminal batch progress rows",
"is_bot": false,
"headline": "Merge pull request #952 from realproject7/task/950-batch-progress-ter…",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-06-07T12:29:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2d08bad7329b069b2092dece79516da8017e085",
"body": null,
"is_bot": false,
"headline": "[#950] Let fresh progress override terminal cache",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-07T12:27:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e87723c0f26259a7a0c1c7225f416d62296c8d0",
"body": null,
"is_bot": false,
"headline": "[#950] Cache terminal batch progress rows",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-07T12:23:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc13d536048db2439ad807264556c153e7c372c7",
"body": "…ED for batch tracking\n\nA PR titled without [#<issue>] (even with \"Closes #N\" in the body) isn't linked by\nQuadWork's title-based tracker, so the closed item flaps queued(retrying)<->closed and\nburns GitHub API re-checking it (live repro: plotlink-ows #488 / PR #491). Reinforces the\nexisting convention pending the proper #951 fix (use GitHub's native close-link).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#951] dev seed: stress that the [#<issue>] PR title prefix is REQUIR…",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-07T12:04:20Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "7b7531fbfb092f1e0a5ed443dabfb3957fd0503b",
"body": null,
"is_bot": false,
"headline": "2.3.7",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-04T07:18:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "40c835616c443b2da4901d14bdf74fea27b612b4",
"body": "…pshot\n\n[#943] Read persisted GITHUB.md for code-batch progress on cold cache; cap + soft-fail fallback",
"is_bot": false,
"headline": "Merge pull request #946 from realproject7/task/943-batch-progress-sna…",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-06-04T07:13:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6fb40fedf00da5826d65844c88a5553eac333077",
"body": "…; cap + soft-fail fallback\n\nCode-batch progress read the in-memory _graphqlCache, which is empty after a\nrestart until the next board refresh. Every item then fell through to the #828\nper-item live fallback (gh issues/N + Search) which (a) fired ALL items\nconcurrently with no cap and (b) rendered a\n[…]\nrency-capped (observed max ≤ GH_MAX_CONCURRENT) and\nsoft-fails every transient error to \"queued (retrying)\", never \"fetch failed\".\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#943] Read persisted GITHUB.md for code-batch progress on cold cache…",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-04T07:09:17Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "18268188e0791101b41ffe85984597591f6882f0",
"body": "[#944] Persist pinned_projects & sidebar_groups via field-scoped endpoints",
"is_bot": false,
"headline": "Merge pull request #945 from realproject7/task/944-persist-pins",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-06-04T06:55:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "610586462fd12b574a2b7f0eb4229144a401c438",
"body": "…oints\n\nPins/groups reset on server restart because all persistence went through the\nwhole-config GET→mutate→PUT path. Any writer holding a stale snapshot (and a\nrestart fires several at once: settings, idle, bridge/queue/trigger widgets)\nsilently dropped pins/groups on its next full PUT.\n\nFix:\n- Ad\n[…]\noups; malformed payloads\n→ 400 leaving config unchanged; pins/groups survive the startup config rewrite\nand a version-bump reseed.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#944] Persist pinned_projects & sidebar_groups via field-scoped endp…",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-04T06:50:30Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "befeb2338b126e94c128d9c2823e859ee93f1fb6",
"body": null,
"is_bot": false,
"headline": "2.3.6",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-02T08:54:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "30ee89691eef1e5579082fcfede07ebace5318ae",
"body": "[#939] Add pack-smoke CI guard against runtime requires missing from the tarball",
"is_bot": false,
"headline": "Merge pull request #942 from realproject7/task/939-pack-smoke",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-06-02T08:48:30Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 97,
"commits_last_year": 1404,
"latest_release_at": "2026-07-25T01:47:28Z",
"latest_release_tag": "v2.7.1",
"releases_from_tags": false,
"days_since_last_push": 4,
"active_weeks_last_year": 17,
"days_since_latest_release": 11,
"mean_days_between_releases": 5.9
},
"artifacts": {
"collected": true,
"structure": [],
"declarations": [
{
"name": "quadwork",
"path": "package.json",
"tokens": [
"npm.bin"
],
"ecosystem": "npm"
}
]
},
"community": {
"has_readme": true,
"has_license": true,
"readme_badges": {
"hosts": [
"shields.io"
],
"total": 6,
"header": 0,
"collected": true,
"has_inspect_badge": false
},
"has_description": true,
"has_contributing": false,
"health_percentage": 42,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "quadwork",
"exists": true,
"license": "MIT",
"keywords": [
"ai",
"agents",
"multi-agent",
"coding",
"dashboard",
"terminal",
"claude",
"codex",
"quadwork"
],
"ecosystem": "npm",
"categories": [],
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/quadwork",
"declared_type": null,
"is_deprecated": false,
"latest_version": "2.7.1",
"repository_url": "https://github.com/realproject7/quadwork",
"versions_count": 101,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 2426,
"first_published_at": "2026-04-01T13:17:10.574000Z",
"latest_published_at": "2026-07-25T01:54:02.442000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 11
}
]
},
"popularity": {
"forks": 9,
"stars": 29,
"watchers": 0,
"fork_history": {
"days": [
{
"date": "2026-04-21",
"count": 4
},
{
"date": "2026-04-24",
"count": 3
},
{
"date": "2026-04-30",
"count": 1
},
{
"date": "2026-07-30",
"count": 1
}
],
"complete": true,
"collected": 9,
"total_forks": 9
},
"star_history": null,
"open_issues_and_prs": 3
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": true,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 243846,
"source_files_sampled": 148,
"oversized_source_files": 3,
"agent_instruction_files": [
"CLAUDE.md",
"templates/CLAUDE.md"
],
"agent_instruction_max_bytes": 3586
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 110,
"malicious_count": 0,
"assessed_package": "npm:quadwork@2.7.1",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "discord.js",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^14.18.0"
},
{
"name": "express",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^5.2.1"
},
{
"name": "multer",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^2.1.1"
},
{
"name": "node-pty",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.2.0-beta.12"
},
{
"name": "ws",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^8.20.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 478,
"open_issues": 3,
"closed_ratio": 0.995,
"closed_issues": 543,
"closed_unmerged_prs": 3
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "realproject7",
"commits": 1302,
"avatar_url": "https://avatars.githubusercontent.com/u/15100667?v=4"
},
{
"type": "User",
"login": "gracefully91",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/133555466?v=4"
},
{
"type": "User",
"login": "ggomaeng",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/18402191?v=4"
}
],
"contributors_sampled": 3,
"top_contributor_share": 0.998
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml"
],
"has_docs_dir": true,
"linter_configs": [
"eslint.config.mjs"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "13 out of 13 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 10,
"reason": "all changesets reviewed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 6,
"reason": "project has 2 contributing companies or organizations -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 3,
"reason": "dependency not pinned by hash detected -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "34 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "44d820ce0c135b274ab0aa6abb720af3190746ca",
"ran_at": "2026-08-05T08:52:11Z",
"aggregate_score": 4.4,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"recent_prs": {
"merged_7d": 1,
"decided_7d": 1,
"merged_30d": 25,
"authors_30d": 1,
"decided_30d": 26,
"sample_size": 60,
"window_days": 30,
"sample_exhausted": false,
"authors_probed_30d": 1,
"newcomer_merged_30d": 0,
"bot_prs_excluded_30d": 0,
"newcomer_authors_30d": 0,
"newcomer_decided_30d": 0
},
"ci_last_run_at": "2026-08-01T04:16:40Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-08-01T04:15:13Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 1025,
"created_at": "2026-08-01T04:10:16Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1026,
"created_at": "2026-08-01T04:33:45Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1027,
"created_at": "2026-08-01T04:34:05Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/realproject7/quadwork",
"host": "github.com",
"name": "quadwork",
"owner": "realproject7"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": "The weighted overall 67 is calibrated to 78 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 67,
"calibrated": 78,
"calibration": "2026-08-02"
}
}
],
"value": 78,
"inputs": {
"security": 55,
"vitality": 86,
"community": 44,
"governance": 64,
"calibration": "2026-08-02",
"engineering": 80,
"ai_readiness": 67,
"weighted_overall_raw": 67
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 86,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"commits_last_year": 1404,
"human_commit_share": 1,
"days_since_last_push": 4,
"active_weeks_last_year": 17
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 4 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 4
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "17/52 weeks with commits",
"points": 11.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 17
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "1404 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 1404
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "exceptional",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 97,
"latest_release_tag": "v2.7.1",
"releases_from_tags": false,
"days_since_latest_release": 11,
"mean_days_between_releases": 5.9
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "97 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 97
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 11 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 11
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~5.9 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 5.9
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "weak",
"name": "Community & Adoption",
"value": 44,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 31,
"inputs": {
"forks": 9,
"stars": 29,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "29 stars",
"points": 23.5,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 29
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "9 forks",
"points": 7.5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 9
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": 6,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [
"shields.io"
],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 56,
"inputs": {
"packages": [
"quadwork"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 2426
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "2,426 downloads/month across npm",
"points": 45.1,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 2426,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 64,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 19,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 3,
"top_contributor_share": 0.998
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "3 contributors",
"points": 4.1,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 3
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 6,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "exceptional",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"merged_prs": 478,
"open_issues": 3,
"closed_issues": 543,
"prs_merged_7d": 1,
"prs_decided_7d": 1,
"prs_merged_30d": 25,
"prs_decided_30d": 26,
"issue_closed_ratio": 0.995,
"closed_unmerged_prs": 3,
"first_time_authors_30d": 0,
"first_time_prs_merged_30d": 0,
"first_time_prs_decided_30d": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 41.8,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "478/481 decided PRs merged",
"points": 29.8,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 478,
"decided": 481
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "all changesets reviewed",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 54,
"inputs": {
"followers": 30,
"owner_type": "User",
"is_verified": null,
"owner_login": "realproject7",
"public_repos": 29,
"account_age_days": 3949
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "30 followers of realproject7",
"points": 10.7,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 30,
"login": "realproject7"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "29 public repos, account ~10 yr old",
"points": 22.8,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 29
}
},
{
"code": "account_age_years",
"params": {
"years": 10
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"quadwork"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 11
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 11 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 11
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "101 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 101
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 80,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "excellent",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "eslint.config.mjs",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.mjs"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "13 out of 13 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 55,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "weak",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 44,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 4.4
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "13 out of 13 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "all changesets reviewed",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 3",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "34 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "exceptional",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:quadwork@2.7.1 runtime dependency closure — what installing the published package pulls in — 110 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "npm:quadwork@2.7.1",
"assessed": 110
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 110,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 110,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 4
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 67,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.96,
"agent_instruction_files": [
"CLAUDE.md",
"templates/CLAUDE.md"
],
"agent_instruction_max_bytes": 3586
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "CLAUDE.md, templates/CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "CLAUDE.md, templates/CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "96 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 96,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 67,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"package-lock.json"
],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"tsconfig.json"
],
"agent_commit_share": 0.47,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "eslint.config.mjs",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.mjs"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "47 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 47,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 81,
"inputs": {
"primary_language": "JavaScript",
"largest_source_bytes": 243846,
"source_files_sampled": 148,
"oversized_source_files": 3
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "JavaScript with type-check config (tsconfig.json)",
"points": 27,
"status": "partial",
"details": [
{
"code": "typecheck_config_language",
"params": {
"files": "tsconfig.json",
"language": "JavaScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "3/148 source files over 60KB",
"points": 53.9,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 148,
"oversized": 3
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"example_dirs": [],
"has_mcp_signal": true,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 20,
"status": "met",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"top": [
"library",
"application"
],
"labels": [
"cli",
"library",
"network-service",
"web-ui",
"chat-bot"
],
"scores": {
"cli": 10,
"web-ui": 4,
"library": 6,
"chat-bot": 4,
"mcp-server": 3,
"network-service": 4
},
"primary": "cli",
"evidence": [
{
"tier": "declared",
"label": "cli",
"source": "npm.bin",
"weight": 10
},
{
"tier": "distribution",
"label": "library",
"source": "registry:npm",
"weight": 6
},
{
"tier": "dependencies",
"label": "chat-bot",
"source": "dep:discord.js",
"weight": 4
},
{
"tier": "dependencies",
"label": "network-service",
"source": "dep:express",
"weight": 4
},
{
"tier": "structure",
"label": "mcp-server",
"source": "mcp_signal",
"weight": 3
},
{
"tier": "description",
"label": "web-ui",
"source": "description:web-ui",
"weight": 2
},
{
"tier": "tags",
"label": "web-ui",
"source": "tag:dashboard",
"weight": 2
}
],
"artifacts": [
{
"path": "package.json",
"labels": [
"cli"
],
"ecosystem": "npm"
}
],
"confidence": "high",
"host_extension": false,
"runs_as_process": true,
"consumed_by_code": true
},
"metrics_version": "2.5.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-08-05T08:52:27.142415Z",
"schema_version": "0.31.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/r/realproject7/quadwork.svg",
"full_name": "realproject7/quadwork",
"license_state": "standard",
"license_spdx": "MIT"
}
Registros relacionados
Repositorios inspeccionados que comparten etiquetas de catálogo o ecosistemas con realproject7/quadwork. Leer en paralelo →
Las puntuaciones son señales, no garantías. Reflejan prácticas públicamente visibles en GitHub; no son una auditoría de código ni una garantía de seguridad.
Los datos ausentes se excluyen y los pesos se renormalizan; nunca se puntúan como cero. La metodología es versionada y abierta: métricas v2.5.0, esquema v0.31.0 — metodología completa · wiki de métricas.
