stxkxs / mkt

Conjunto completo de dependencias resueltas según el grafo de dependencias de GitHub: 11 paquetes directos y 44 indirectos (transitivos). El cierre transitivo es completo cuando el repositorio incluye un lockfile.

Este repositorio no publica ningún paquete que el índice resuelva, así que se evaluó su propio grafo de dependencias — 55 paquetes, que incluyen también fijaciones de desarrollo y prueba que nunca se distribuyen: 1 tienen avisos conocidos, de los cuales 1 son directas.

Un aviso significa que la versión registrada en el grafo de dependencias cae dentro del rango afectado de un aviso. No se analiza la alcanzabilidad, y el grafo incluye fijaciones de desarrollo y prueba: un hallazgo puede referirse al utillaje y no al software distribuido.

{
  "data": {
    "repo": {
      "topics": [
        "bubbletea",
        "cli",
        "coinbase",
        "crypto",
        "dashboard",
        "finance",
        "go",
        "golang",
        "market-data",
        "real-time",
        "stocks",
        "terminal",
        "tui",
        "websocket"
      ],
      "is_fork": false,
      "size_kb": 2284,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "Go": 649002
      },
      "pushed_at": "2026-07-17T23:30:51Z",
      "created_at": "2026-03-03T08:06:56Z",
      "owner_type": "User",
      "updated_at": "2026-07-17T23:30:11Z",
      "description": "Real-time stock & crypto market dashboard for the terminal — live prices, charts, portfolio P&L, and alerts. No API keys.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": "https://stxkxs.dev",
      "name": null,
      "type": "User",
      "login": "stxkxs",
      "company": null,
      "location": "sd, cali",
      "followers": 8,
      "avatar_url": "https://avatars.githubusercontent.com/u/139715017?v=4",
      "created_at": "2023-07-16T19:53:37Z",
      "is_verified": null,
      "public_repos": 10,
      "account_age_days": 1102
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.1.0",
          "kind": "minor",
          "published_at": "2026-07-17T23:33:15Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "0d368d6de0e3da6bee24539c78068e19802ec6ba",
          "body": "A red-team of the enable-able surfaces found the defaults safe (HTTP API,\nSSH dashboard, MCP server, and third-party notifiers are all opt-in) but\nalmost ungovernable once enabled. This adds the missing scoping knobs and\ncloses one critical secret-exfiltration hole, ahead of the first release.\n\n────\n[…]\n test -race, golangci-lint,\nand govulncheck all clean.\n\nCo-authored-by: stxkxsbot <275011021+stxkxsbot@users.noreply.github.com>\nClaude-Session: https://claude.ai/code/session_01RMEDVRUzxjucvVWJ1gDsu1",
          "is_bot": false,
          "headline": "fix(security): harden the attack surface a cautious team can scope down",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-07-17T23:30:04Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "099df8acd7a20046bfa6d16897d5a189970c3f75",
          "body": "Release pipeline so tagged versions ship immutable, verifiable binaries —\nusers can pin and run a prior cut.\n\n  - .goreleaser.yaml builds linux/darwin/windows on amd64+arm64 (CGO off)\n    with the Taskfile's version/commit/date ldflags, producing tar.gz (zip\n    on windows) archives, checksums.txt, \n[…]\nut a release with `git tag vX.Y.Z && git push --tags`.\n\nCo-authored-by: stxkxsbot <275011021+stxkxsbot@users.noreply.github.com>\nClaude-Session: https://claude.ai/code/session_01RMEDVRUzxjucvVWJ1gDsu1",
          "is_bot": false,
          "headline": "build: cross-platform signed releases via GoReleaser",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-07-17T23:30:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1952b992a244c9d275def9498c9854e9218ffff9",
          "body": "Adds an SSH-served dashboard, enriches the HTTP data surface with live\nprices, seeds a coherent default config on first run, and bumps\ngolang.org/x/crypto to clear 7 SSH CVEs now that mkt links the SSH stack.\n\n───────────────────────────  HTTP data surface  ───────────────────────────\n\nThe market ca\n[…]\n test -race, golangci-lint, and govulncheck\nall clean.\n\nCo-authored-by: stxkxsbot <275011021+stxkxsbot@users.noreply.github.com>\nClaude-Session: https://claude.ai/code/session_01RMEDVRUzxjucvVWJ1gDsu1",
          "is_bot": false,
          "headline": "feat: SSH dashboard (mkt serve), live data surface, seeded config",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-07-17T22:39:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ea82c40a3b966c5281cb787041b0fa6e4310736f",
          "body": "…ol routing (#54)\n\nAddresses the six priority findings from the quality audit. Every change is\nbuild/vet/gofmt clean, passes `go test -race`, lints clean under golangci-lint\nv2.11.4 (0 issues), and passes govulncheck under go1.26.5.\n\n──────────────────────── WebSocket liveness (Systems) ────────────\n[…]\nte-limit/\n  fail-closed paths, MCP structuredContent, and the root TUI router across all\n  nine tabs (previously 0% coverage).\n\nCo-authored-by: stxkxsbot <275011021+stxkxsbot@users.noreply.github.com>",
          "is_bot": false,
          "headline": "fix: harden WS liveness, HTTP auth, and provider I/O; centralize symb…",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-07-15T18:08:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0207ddab302e4070ab4486ebfe4fb07cdf389237",
          "body": "UX polish across the TUI plus a new config-validation CLI command, and\na consistency pass that dedupes viewport/truncation math shared by the\nscrolling tabs.\n\n─── Help overlay ───\n\nNew internal/tui/help package: pressing `?` on any tab opens a centered\nkeybinding card showing the active tab's keys f\n[…]\nidateConfig plus the dark-alias theme check.\n\nREADME documents the new `?`, `s`, and `i` bindings and the validate\nsubcommand.\n\nCo-authored-by: stxkxsbot <275011021+stxkxsbot@users.noreply.github.com>",
          "is_bot": false,
          "headline": "feat: help overlay, watchlist sort, delete confirm, config validate",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-06-10T06:41:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b7891739ab9405f403cacc52520dab57c69ff4ab",
          "body": "internal/tui/chart/model.go was 1534 lines / 26 functions — the\nlargest file in the codebase and a maintenance burden. Split along\nnatural responsibility seams. Behavior is identical; this is a\nsame-package file split, so no API or rendering change.\n\nAfter:\n- model.go (835)        — Model type, Upda\n[…]\n file are minimal: overlays.go uses\nindicator + provider + theme + color/math; subpanels.go uses\nindicator + theme + color/math + fmt/strings + lipgloss.\n\nCHANGELOG: appended under Unreleased > Added.",
          "is_bot": false,
          "headline": "refactor: split chart/model.go into model + overlays + subpanels",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-25T05:15:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "77a5c7e5c0fbb0c6a937eca0fcb7f68a7f29d721",
          "body": "The audit flagged a real observability gap: provider errors were\nlog-and-continue with nothing exposed on /metrics, so operators\nrunning mkt --listen :9999 (or mkt daemon) had no way to see \"yahoo\nfailure rate\" or \"coinbase WS flapping\" from outside the process.\n\ninternal/observe: tiny dependency-fr\n[…]\nttern is in place — adding more is a one-line var + .Inc() per\ncall site. Keeping this PR focused on the abstraction + the two\nhighest-traffic providers.\n\nCHANGELOG: appended under Unreleased > Added.",
          "is_bot": false,
          "headline": "feat: provider failure counters on /metrics",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-25T04:43:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1dde09e3bd3170971d8d21886df223da62354085",
          "body": "The new-alert modal is the only path the TUI uses to write user-author-\ned alert rules into the engine. Bugs in this state machine silently\ncorrupt the user's config, so it's a higher-value target than packages\nthat just render. Eleven tests cover the full behavioral surface:\n\n- New returns inactive\n[…]\nical condition ordering shifts.\n\nStatement coverage on internal/tui/alertdialog: 58.4% (remaining\npercentage is the View renderer; not behavioral logic).\n\nCHANGELOG: appended under Unreleased > Added.",
          "is_bot": false,
          "headline": "test: cover alertdialog state machine (58.4%)",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-25T04:11:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7ec886fff5f63274726ad1e517b663c594c72365",
          "body": "The internal/config package was previously untested — the YAML parsing,\ndefaults merge, and Save/Load round-trip were all unverified. This\nadds tests for the full public surface, including the small bug\nclasses most likely to bite: layout drift in ParseTime, default\nfallback in PollDuration, AddSymb\n[…]\n stays minimal\n\nTests use t.Setenv(\"HOME\", t.TempDir()) so the real ~/.config/mkt\nconfig is never touched.\n\nStatement coverage on internal/config: 90.6%.\n\nCHANGELOG: appended under Unreleased > Added.",
          "is_bot": false,
          "headline": "test: add config package round-trip tests (90.6% coverage)",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-25T03:38:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "733da910923842cd07efe8e259036d3317be125c",
          "body": "The five background polling goroutines in cmd/dashboard.go (macro,\nfutures, DeFi, equity, news) were five copies of the same pattern:\n\n  ticker := time.NewTicker(interval)\n  defer ticker.Stop()\n  fetch := func() { ... }\n  fetch()  // initial\n  for {\n      select {\n      case <-ctx.Done(): return\n   \n[…]\nnOnEveryTick — fires initial + 2 ticks\n- TestPollFiresInitialEvenIfCancelledEarly — initial fetch runs even\n  when ctx is cancelled before the first tick\n\nCHANGELOG: appended under Unreleased > Added.",
          "is_bot": false,
          "headline": "refactor: extract poll helper, dedupe 5 polling goroutines",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-25T03:08:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "90f65da821c95ae1cf61fa198c72273b7ff1315b",
          "body": "The Usage, Data Sources, Architecture, and Project Layout sections\nhad not been updated since several feature programs (daemon, mcp,\nbacktest, calendar/earnings, FRED, DeFiLlama, Binance futures, EDGAR\nfilings, options chain, correlation matrix, command palette, recording\nprovider, --listen HTTP ser\n[…]\ny current package and cmd/ subcommand is now\n  listed with a one-line description.\n- .gitignore: exclude .claude/ session state so it can't be committed\n  accidentally.\n\nREADME-only — no code changes.",
          "is_bot": false,
          "headline": "docs: refresh README to reflect the full v2 feature set",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-25T02:38:27Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "df13ed3c4fcb940112ac47ef5c454a31ba03782e",
          "body": "A small batch of high-value hardening flagged by a quality audit.\n\n─── HTTP server (--listen) ───\n\nToken auth: new --listen-token flag adds bearer-token authentication\nto /quotes, /quotes/{symbol}, /alerts, /metrics, and\n/webhook/tradingview. Clients send Authorization: Bearer <token> or\n?token=<tok\n[…]\n Unreleased entries documenting all of the above.\n\nTests added: TestAuthRequiredWhenTokenSet, TestAuthDisabledWhenTokenEmpty,\nTestTradingViewBodyTooLarge, TestTradingViewLooseDecodeAcceptsExtraFields.",
          "is_bot": false,
          "headline": "fix: quality pass — auth, body limit, jitter, url-escape, changelog",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-25T02:05:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "19fb8b1727f0fd582b0bb86c1d56f9500195b6f7",
          "body": "The full-screen chart and comparison chart views now drive a\nmouse-tracked crosshair. As the cursor moves through the candle area,\ndashed vertical + horizontal lines render through the hovered column\nand row, and the OHLCV summary line at the bottom of the chart switches\nfrom the most recent candle \n[…]\nr offset math\n  unchanged.\n\nAlso in this commit: CHANGELOG backfills for FU3 (Yahoo earnings\ncalendar adapter) and FU4 (heatmap click drill-down) that shipped in\nprior PRs without an Unreleased entry.",
          "is_bot": false,
          "headline": "feat: chart hover crosshair",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-25T01:32:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4c66236ced8af1c9d0e44756a0f68e5029ef935f",
          "body": "Mouse clicks on the heatmap now select sectors (overview) and stock tiles (drilldown), matching the keyboard model.\n\nheatmap/model.go: MouseClickMsg handler translates click X/Y to grid coordinates, replays layoutTreemap to locate the containing rect, and sets the cursor. Second click on an already-selected sector drills in. Drilldown clicks resolve to (col, row) using the 22w x 4h tile layout.",
          "is_bot": false,
          "headline": "feat: heatmap click-to-select / drill-down",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-25T01:22:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7b15c5590ce6a1ebca78c2a20f97b27468309605",
          "body": "Implement calendar.EarningsSource using Yahoo's v10 quoteSummary calendarEvents module. Macro tab calendar section now shows per-watchlist earnings interleaved with hardcoded econ schedule.\n\nyahoo/earnings.go: FetchEarnings calls quoteSummary concurrently per ticker; EarningsAdapter wraps *Provider \n[…]\nverage.\n\ntui/messages.go: CalendarUpdateMsg for async refresh. dashboard.go: synchronous econ events on startup, background earnings fetch with 30s timeout, merged events pushed via CalendarUpdateMsg.",
          "is_bot": false,
          "headline": "feat: Yahoo earnings in calendar tile",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-25T01:19:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "877b4ce41d57b152230f3d300f0133924742adbb",
          "body": "Two CHANGELOG entries that the original FU1 (MCP expansion) and FU2 (level2 WebSocket) commits dropped.",
          "is_bot": false,
          "headline": "docs: backfill CHANGELOG Changed entries for FU1/FU2",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-25T01:14:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ffecad594da5caee17e198c38099a7e104ca81a9",
          "body": "Detail panel now refreshes the bid/ask block live via a per-symbol level2 WebSocket subscription instead of showing only the REST snapshot from V2.\n\ncoinbase/orderbook_ws.go: StreamOrderBook opens a WS, subscribes to level2 for one product, maintains an in-memory book via applyL2 + buildBook helpers\n[…]\nbol launches a per-symbol streamer goroutine and cancels it when the symbol changes or the panel closes. dashboard.go registers tea.Program via detail.SetLiveProgram so the streamer has a Send target.",
          "is_bot": false,
          "headline": "feat: live order book via Coinbase level2 WebSocket",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-25T01:11:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "825f0fbd68496c14e1401515dad45dee38324fbb",
          "body": "Expand the MCP server from a minimal tool dispatcher to a proper read-only MCP implementation. Adds ping, resources, prompts, notifications handling, and capability negotiation so clients like Claude Desktop see a full surface area.\n\ninternal/mcp/server.go: New(name, version) + WithTools/WithResourc\n[…]\nget a response.\n\ncmd/mcp.go: registers three resources (mkt://config, mkt://watchlist, mkt://portfolios) and two prompts (analyze_symbol, portfolio_review) backed by the existing config and providers.",
          "is_bot": false,
          "headline": "feat: full read-only MCP spec compliance",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-25T01:06:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4a8879160ce25fcd5fe9d6df9b528ac849ae0e1e",
          "body": "Add `mkt backtest <rules.yaml> <replay.ndjson>` that replays a recorded NDJSON quote stream through a YAML rules file and reports per-rule fire counts plus first/last trigger timestamps. Closes the program.\n\ncmd/backtest.go: loadBacktestRules parses a small YAML schema into alert.Rule values. Fresh \n[…]\nle counters. Replay provider streams quotes through Cache.Push + Engine.Check; once exhausted the command sorts by fire count and prints a one-line summary per rule. No notifiers — read-only analysis.",
          "is_bot": false,
          "headline": "feat: rule backtest CLI",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-25T00:18:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d12dd166400dfbb295896355f54e168020a95b66",
          "body": "Accept TradingView alert webhooks at /webhook/tradingview and route them through every configured notifier. Bypasses rule evaluation and cooldown since TV already owns those concerns.\n\ninternal/alert/engine.go: new Inject(a) fires through onAlert + notifiers as if detected by the engine.\n\ninternal/a\n[…]\ner.go: /webhook/tradingview (POST) parses TradingView's freeform JSON (symbol/ticker, price/close, message/alert) with permissive aliases. 200 on accept, 400 on bad JSON, 503 when alerts are disabled.",
          "is_bot": false,
          "headline": "feat: TradingView webhook receiver",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-25T00:15:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e30193178d691325e30b00465d91f5931db475d1",
          "body": "Add a `mkt mcp` subcommand that speaks the Model Context Protocol on stdin/stdout so Claude Code / Claude Desktop / any MCP client can query mkt for quotes, history, alerts, and portfolio summaries.\n\ninternal/mcp/server.go: hand-rolled JSON-RPC over stdio (no external dep) supporting initialize, tools/list, tools/call. cmd/mcp.go registers four tools backed by the existing providers: get_quote, query_history, get_alerts, get_portfolio.",
          "is_bot": false,
          "headline": "feat: minimal MCP server over stdio",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-25T00:11:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "422ff3a61997bff19181f8afeb9dd371ba62e4de",
          "body": "Add a small read-only HTTP surface for scripting and monitoring, opt-in via a global `--listen <addr>` flag. Works in both dashboard and daemon modes.\n\ninternal/api/server.go: Server with /quotes, /quotes/{symbol}, /alerts, /metrics (Prometheus text format). market/cache.go: Symbols() enumerates cached symbols. cmd/root.go declares the persistent --listen flag; cmd/dashboard.go and cmd/daemon.go construct the server when set.",
          "is_bot": false,
          "headline": "feat: HTTP / metrics endpoint behind --listen",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-25T00:07:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dfdcda9799482acc6456f7ec07af32a26f7285e8",
          "body": "Add a `mkt daemon` subcommand that runs the hub + alert engine + every configured notifier without showing a TUI.\n\ncmd/daemon.go: subscribes to the deduplicated union of cfg.Watchlist and every cfg.Watchlists group; constructs the alert engine and registers DesktopNotifier, WebhookNotifier (if configured), NtfyNotifier, PushoverNotifier, HistoryNotifier mirroring the dashboard wiring. Lifecycle is cancelled on SIGTERM / SIGINT.",
          "is_bot": false,
          "headline": "feat: daemon mode (headless alerts)",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-25T00:00:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0657905245666e3f8ca0e25e1dedcaf744ac199f",
          "body": "Tiny prompt opened with `:` that jumps to a tab by name prefix, switches themes, or quits the program.\n\ninternal/tui/palette: Model{active, query, tabNames} with Open, Update(KeyPressMsg) returning a Result{Action, Arg}, and View(width). Actions: ActionJumpTab, ActionSetTheme, ActionQuit, ActionCancel.\n\ninternal/tui/app.go: Palette guard at the top of the key handler consumes all keys while active. `:` from any tab opens the palette.",
          "is_bot": false,
          "headline": "feat: command palette",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-24T23:58:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "18cbd536d56347e68d0274799bf6d7e05bb49d6a",
          "body": "Add a config-driven map of freeform notes keyed by symbol, rendered below the sparkline in the detail overlay. Read-only — users edit the YAML directly for now; an in-TUI editor is a later iteration.\n\n─── Config ─────────────────────────────────────────────────────────\n\nconfig.Config gains an option\n[…]\n─────────────────────────\n\ncmd/dashboard.go calls App.LoadNotes(cfg.Notes) when the map is non-empty.\n\n─── Docs ──────────────────────────────────────────────────────────\n\nCHANGELOG entry under Added.",
          "is_bot": false,
          "headline": "feat: per-symbol freeform notes in detail panel",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-24T23:53:47Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b5788df0c5cba04bb6e19b39f88fe5cc01a92575",
          "body": "Let users organize symbols into named groups and switch between\nthem at runtime with [ / ] on the watchlist tab — mirrors the\nportfolio UX. The hub subscribes to the deduplicated union so\nevery group stays live regardless of which is showing.\n\n─── Config ─────────────────────────────────────────────\n[…]\ntchlist. A small dedupeUnion produces\nthe symbol list passed to the hub. tui.NewApp now takes groups.\n\n─── Docs ──────────────────────────────────────────────────────────\n\nCHANGELOG entry under Added.",
          "is_bot": false,
          "headline": "feat: multiple named watchlists",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-24T23:49:13Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3765e0ea0704360e5c85ce73de37b621ef550479",
          "body": "Surface D5's curated economic schedule directly in the macro tab —\nadding a new tab felt like overkill for what amounts to one\nagenda list. The next 30 days of FOMC / CPI / NFP / GDP releases\nrender below the existing macro/futures/TVL sections.\n\n─── TUI ─────────────────────────────────────────────\n[…]\nming(EconomicEvents(),\nnow, 30 days) at startup and seeds the macro model via\nApp.LoadCalendarEvents.\n\n─── Docs ──────────────────────────────────────────────────────────\n\nCHANGELOG entry under Added.",
          "is_bot": false,
          "headline": "feat: upcoming-events section in macro tab",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-24T23:42:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "365e8c1a0065d2c89bf865ebca50ac0bca34562d",
          "body": "Add a new \"Correl\" tab that renders pairwise Pearson correlations\nbetween watchlist symbols as a colored grid. Sourced from each\nsymbol's recent prices in the market cache.\n\n─── Portfolio package ──────────────────────────────────────────────\n\ncorrelation.go:\n  - Correlation(a, b) returns Pearson's \n[…]\nadcasts theme.ChangedMsg, and renders in View.\n\n─── Docs ──────────────────────────────────────────────────────────\n\nREADME keybindings table extends the tab range to 1–9; CHANGELOG\nentry under Added.",
          "is_bot": false,
          "headline": "feat: correlation-matrix tab",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-24T23:38:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "82cf507ec025c9b752d61c0df1520ef0630b5c00",
          "body": "Add a REST level-2 fetcher for Coinbase order books and render the\ntop bids/asks in the symbol-detail overlay for crypto symbols. The\nWebSocket L2 channel for live updates is a follow-up — a REST\nsnapshot per detail-open is enough for the initial signal.\n\n─── Coinbase provider ──────────────────────\n[…]\nenter\" handler now propagates the SetSymbol Cmd to\ntea. cmd/dashboard.go passes coinbaseProv through.\n\n─── Docs ──────────────────────────────────────────────────────────\n\nCHANGELOG entry under Added.",
          "is_bot": false,
          "headline": "feat: Coinbase order-book depth in detail panel",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-24T23:32:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d0578864575759b73c679431f633741e3206aa3e",
          "body": "Add an Options tab that pulls Yahoo's v7 options endpoint for a\nselected symbol and renders calls vs puts strike-aligned, plus a\nheader with max-pain strike. Loads via \"O\" on the watchlist.\n\n─── Yahoo provider ────────────────────────────────────────────────\n\ninternal/provider/yahoo/options.go: Fetc\n[…]\n.LoadSymbol and switch the active tab.\n\n─── Docs ──────────────────────────────────────────────────────────\n\nREADME keybindings table adds the 8 jump and the \"O\" shortcut.\nCHANGELOG entry under Added.",
          "is_bot": false,
          "headline": "feat: options-chain tab",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-24T23:25:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "77a0cf01da7949ebb787fdd7fc527e19b1a912a3",
          "body": "Add the standard risk-management calculation: given equity, max\nrisk per trade, entry, and stop (or an ATR-implied stop), compute\nshares and dollar risk. Closes Phase 4.\n\n─── Portfolio package ──────────────────────────────────────────────\n\nsizing.go:\n  - PositionSize(equity, riskPct, entry, stop) r\n[…]\ne defaults: risk 1%, atr-mult 2,\nlong=true.\n\n─── Docs ──────────────────────────────────────────────────────────\n\nREADME Usage block adds an example of the new subcommand.\nCHANGELOG entry under Added.",
          "is_bot": false,
          "headline": "feat: position-sizing math + CLI",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-24T23:16:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "23a91a00b25579662dbd568c3ab3b8f2d504a709",
          "body": "Persist periodic portfolio-value marks to NDJSON and render a tiny\nsparkline + max-drawdown alongside the totals on the portfolio\ntab. Surfaces P5's MaxDrawdown on real user data.\n\n─── Portfolio package ──────────────────────────────────────────────\n\nequity.go: EquityMark{Time, PortfolioName, Value}\n[…]\n each portfolio with the current quote snapshot,\nappends a mark to the file, and sends EquityMarkMsg.\n\n─── Docs ──────────────────────────────────────────────────────────\n\nCHANGELOG entry under Added.",
          "is_bot": false,
          "headline": "feat: portfolio equity curve with sparkline + drawdown",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-24T23:12:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7884c69be1861b7ccad3cc72f5b6db12f3563ff0",
          "body": "Pure-math functions so P6 (equity curve) and P7 (position sizing)\ncan compute the standard risk gauges without each rolling its own.\nNo UI surface yet — P6 will be the natural place to display.\n\n─── Portfolio package ──────────────────────────────────────────────\n\nmetrics.go:\n  - Sharpe(returns, rf)\n[…]\nength mismatch, zero variance, no downside), flat /\nmonotonic MaxDrawdown.\n\n─── Docs ──────────────────────────────────────────────────────────\n\nCHANGELOG entry under Added. UI surface deferred to P6.",
          "is_bot": false,
          "headline": "feat: portfolio risk metrics (Sharpe / Sortino / beta / max DD)",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-24T23:06:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "27c33f032e008fa43a5a3d11cc411030988a1d03",
          "body": "Add a `mkt portfolio import` CLI that reads a CSV file and appends\ntransactions to a named portfolio in the YAML config. Schwab and a\ngeneric format are shipped; the Format interface lets future\nbrokers plug in without touching the command.\n\n─── Importer package ─────────────────────────────────────\n[…]\nparse summary\nand exits without writing.\n\n─── Docs ──────────────────────────────────────────────────────────\n\nREADME usage block adds the import command with format docs;\nCHANGELOG entry under Added.",
          "is_bot": false,
          "headline": "feat: CSV import for broker exports",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-24T23:02:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5bd00224b53a76f9816a8ef05663f2fb53274f79",
          "body": "Add a dividend transaction type and surface cumulative + YTD\ndividend income on the portfolio tab. Dividends are separate from\nrealized P&L (which captures gains/losses on sales) and do not\naffect holdings.\n\n─── Portfolio package ──────────────────────────────────────────────\n\n- transaction.go: TxDi\n[…]\ndend records and the total is positive. Uses the\nexisting portfolio.Dividends + DividendsYTD helpers.\n\n─── Docs ──────────────────────────────────────────────────────────\n\nCHANGELOG entry under Added.",
          "is_bot": false,
          "headline": "feat: dividend tracking",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-24T22:56:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a5bd7856438ecfd006df1feacd23578bb1140793",
          "body": "Extend realized-P&L with lot-aware accounting alongside the\nexisting weighted-average path. Default (empty) preserves current\nbehavior; users opt in to FIFO/LIFO/HIFO via per-portfolio config.\n\n─── Portfolio package ──────────────────────────────────────────────\n\n- lots.go: TaxMethod typed string wi\n[…]\nod is non-default the\nrealized line is labeled with the method name (e.g.,\n\"Realized (FIFO): $X.XX\").\n\n─── Docs ──────────────────────────────────────────────────────────\n\nCHANGELOG entry under Added.",
          "is_bot": false,
          "headline": "feat: tax-lot accounting (FIFO / LIFO / HIFO)",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-24T22:51:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "84ab5da4b5e88767c42cf9a9058a30056f8aa6bd",
          "body": "Surface realized gains/losses by walking the transaction history.\nPairs with F3's transaction model; the existing unrealized P&L\ndisplay gets a \"Realized\" line alongside it.\n\n─── Portfolio package ──────────────────────────────────────────────\n\n- realized.go: Realized(txs) walks transactions in decl\n[…]\nn for gain, red for loss) when the active\nportfolio has any transactions. No other rendering changes.\n\n─── Docs ──────────────────────────────────────────────────────────\n\nCHANGELOG entry under Added.",
          "is_bot": false,
          "headline": "feat: realized P&L from portfolio transaction log",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-24T22:45:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b29035dea40e33fe5024f881726fdcc788e90aea",
          "body": "Ship the calendar data types and a hardcoded 2026 economic event\nschedule so V4 (calendar tab) has something to render. Earnings\nadapter is deferred — Yahoo requires crumb auth and nested parsing\nwhich warrants its own PR. The Earnings hook is defined here as\nan interface so the calendar tab can com\n[…]\nwith boundary edge cases (events at exactly now /\nexactly now+window), EventType.String() spot check.\n\n─── Docs ──────────────────────────────────────────────────────────\n\nCHANGELOG entry under Added.",
          "is_bot": false,
          "headline": "feat: economic calendar provider",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-24T22:41:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9f9c0623e50420eb1fd42ee97fb006dc5f18fff4",
          "body": "Add a polled provider for Binance perpetual futures funding rate\nand open interest, plus a macro-tab section that shows the current\nsnapshot for BTC, ETH, and SOL. No API key required.\n\n─── Provider package ──────────────────────────────────────────────\n\ninternal/provider/binance/futures.go: FetchFu\n[…]\n for [BTCUSDT, ETHUSDT, SOLUSDT] on startup\nand every 2 minutes. Goroutine respects ctx cancellation.\n\n─── Docs ──────────────────────────────────────────────────────────\n\nCHANGELOG entry under Added.",
          "is_bot": false,
          "headline": "feat: Binance futures funding + open interest",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-24T22:36:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "d490b134fc258b2e38ca86e6b7d2641f15813ac4",
          "body": "Add a polled provider that pulls per-chain DeFi TVL from\nDeFiLlama's public v2 chains endpoint and surfaces the top\nchains as a new section in the macro tab. No API key.\n\n─── Provider package ──────────────────────────────────────────────\n\ninternal/provider/defillama/defillama.go: FetchChains(ctx) G\n[…]\nhains\non startup and every 5 minutes, sending DeFiUpdateMsg. The\ngoroutine respects ctx cancellation.\n\n─── Docs ──────────────────────────────────────────────────────────\n\nCHANGELOG entry under Added.",
          "is_bot": false,
          "headline": "feat: DeFiLlama TVL provider with macro tile",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-24T22:32:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "da86cd451f64616f604ae8f66ff5a319be09580a",
          "body": "Add per-ticker EDGAR Atom feeds and a filter so users can see\n8-K / 10-Q / 10-K / 4 / 13D filings alongside (or instead of)\ngeneral financial RSS.\n\n─── News package ──────────────────────────────────────────────────\n\n- edgar.go: FetchEDGAR(ctx, tickers, limit) fetches the public\n  EDGAR Atom feed fo\n[…]\next\nadds the key.\n\n─── Docs ──────────────────────────────────────────────────────────\n\nREADME News section documents edgar_tickers and the 'f' filter\nkey with an example; CHANGELOG entry under Added.",
          "is_bot": false,
          "headline": "feat: SEC EDGAR filings in the news tab",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-24T22:27:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f4eab673ce4ededf02bfdea7f6174f97de977af9",
          "body": "Add a HistoryProvider for FRED series (Fed Funds, Treasury yields,\nunemployment, CPI, etc.) using the public fredgraph CSV endpoint\n— no API key required. Symbols are routed via a \"FRED:\" prefix so\nthe existing MultiHistoryProvider can dispatch them alongside\nCoinbase and Yahoo.\n\n─── Provider packag\n[…]\ntiHistoryProvider so FRED: symbols match first.\n\n─── Docs ──────────────────────────────────────────────────────────\n\nCLAUDE.md symbol-routing line gains the FRED: prefix; CHANGELOG\nentry under Added.",
          "is_bot": false,
          "headline": "feat: FRED economic data provider",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-24T22:21:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fd209053ee2a53c3c61e83c3d439138dbcf35f67",
          "body": "Triggered alerts were previously in-memory only. Persist them to\n~/.config/mkt/alert-history.ndjson and load on startup so the\nAlerts tab shows a running record across restarts.\n\n─── Alert package ──────────────────────────────────────────────────\n\n- history.go: HistoryFile{path, max} reads (LoadAll\n[…]\ntation is deferred — 500\nentries covers ~40 hours of dense activity at the default\n5-minute cooldown.\n\n─── Docs ──────────────────────────────────────────────────────────\n\nCHANGELOG entry under Added.",
          "is_bot": false,
          "headline": "feat: persist alert history to NDJSON",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-24T22:17:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3de1272139f25bd23007439262b2104af070444e",
          "body": "Add two new alert conditions that fill obvious gaps in the existing\ncondition set: volume spikes and volatility expansion. Real ATR\nwould require OHLC plumbing into the alert engine (the cache only\nstores closes), so the volatility condition uses rolling stddev as\na clearly-named proxy.\n\n─── Indicat\n[…]\nd.\n\n─── Docs ──────────────────────────────────────────────────────────\n\nREADME Alerts section adds the two conditions to the supported\nlist with notes on Value semantics; CHANGELOG entry under Added.",
          "is_bot": false,
          "headline": "feat: volume-above and volatility (stddev) alert conditions",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-24T22:11:30Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ab38399aae72eb363341add8f49f2c78bd4bae54",
          "body": "Generalize alert rules to support multi-condition matching with\nthree modes — all (every sub must fire), any (first match fires),\nand sequence (subs must fire in declared order). Backward compatible\nwith legacy single-condition rules.\n\n─── Alert package ──────────────────────────────────────────────\n[…]\n anyWebhook detection still picks them up.\n\n─── Docs ──────────────────────────────────────────────────────────\n\nREADME Alerts section adds compound and sequence examples;\nCHANGELOG entry under Added.",
          "is_bot": false,
          "headline": "feat: compound and sequence alert rules",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-24T22:05:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "816de593c698ec63581da80cbc69df885dfce449",
          "body": "Add two Notifier implementations so alerts can reach a phone\nwithout keeping the TUI open. Pairs with daemon mode (O1) coming\nlater.\n\n─── Alert package ──────────────────────────────────────────────────\n\n- ntfy.go: NtfyNotifier{server, topic} posts the alert message as\n  the request body to <server>\n[…]\nrUser and\nPushoverToken for Pushover).\n\n─── Docs ──────────────────────────────────────────────────────────\n\nREADME Alerts section adds mobile-push configuration examples;\nCHANGELOG entry under Added.",
          "is_bot": false,
          "headline": "feat: ntfy.sh and Pushover mobile-push notifiers",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-24T21:59:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "637c57db17e858ef02bd922dea7105bd3cc31455",
          "body": "Add a Notifier implementation that POSTs triggered alerts as JSON\nto user-configured URLs. First non-desktop destination — unblocks\nSlack/Discord/IFTTT/custom-server integrations without per-service\ncode.\n\n─── Alert package ──────────────────────────────────────────────────\n\n- webhook.go: WebhookNot\n[…]\n configured.\n\n─── Docs ──────────────────────────────────────────────────────────\n\nREADME Alerts section documents webhook_url and per-rule webhooks\nwith a worked example; CHANGELOG entry under Added.",
          "is_bot": false,
          "headline": "feat: webhook alert notifier",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-24T21:53:58Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c16fc6b528f82cb581c995337e77c838131f1e14",
          "body": "Detect classic single- and two-candle reversal/indecision patterns\n(Doji, Hammer, Shooting Star, Bullish Engulfing, Bearish Engulfing)\nand surface them as marker glyphs on the chart. Closes Phase 1.\n\n─── Indicator package ──────────────────────────────────────────────\n\n- patterns.go: Pattern enum an\n[…]\nshows latest detected pattern name when toggled.\n\n─── Docs ──────────────────────────────────────────────────────────\n\nREADME keybindings table and indicator list updated; CHANGELOG\nentry under Added.",
          "is_bot": false,
          "headline": "feat: candle pattern detection",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-24T21:48:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "11dded3774f36a4db0e8e0dd72206857781cd99d",
          "body": "Add a price-binned volume histogram that draws as a right-side\ngutter on the chart, surfacing high-volume nodes and the point of\ncontrol (POC).\n\n─── Indicator package ──────────────────────────────────────────────\n\n- volumeprofile.go: VolumeProfile(candles, numBins) returns a slice\n  of VolumeBin{Pr\n[…]\n.\n- Summary line shows POC:<price> when toggled.\n\n─── Docs ──────────────────────────────────────────────────────────\n\nREADME keybindings table and indicator list updated; CHANGELOG\nentry under Added.",
          "is_bot": false,
          "headline": "feat: volume profile indicator",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-24T21:43:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "49c413813b2378eee7aee957d7a7d885cf09eb5a",
          "body": "Add a trend-strength gauge (ADX with +DI/-DI components) and\nclassic floor-trader pivot points (P, R1-R3, S1-S3). ADX rides\nthe sub-panel; pivots draw as horizontal levels on the main chart.\n\n─── Indicator package ──────────────────────────────────────────────\n\n- adx.go: ADX(highs, lows, closes, per\n[…]\nt becomes \"(toggle: 1-9, a, p; i/esc to close)\".\n\n─── Docs ──────────────────────────────────────────────────────────\n\nREADME keybindings table and indicator list updated; CHANGELOG\nentry under Added.",
          "is_bot": false,
          "headline": "feat: ADX and pivot points indicators",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-24T21:37:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3be39553c2754b22b276a374f024b1ea91909684",
          "body": "Add a volatility measure (ATR, Wilder-smoothed True Range) and a\nmomentum oscillator (Stochastic %K/%D) — both in the sub-panel —\nto round out the standard set. ATR also unblocks ATR-based alerts\n(A4) and position sizing (P7).\n\n─── Indicator package ──────────────────────────────────────────────\n\n- \n[…]\nhows ATR and Stoch K/D last values when toggled.\n\n─── Docs ──────────────────────────────────────────────────────────\n\nREADME keybindings table and indicator list updated; CHANGELOG\nentry under Added.",
          "is_bot": false,
          "headline": "feat: ATR and Stochastic indicators",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-24T21:30:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3d6f1606a250f6d543415f279e2f336bd491693f",
          "body": "Add two volume-aware indicators users frequently want for intraday\ncontext, plus chart wiring for both.\n\n─── Indicator package ──────────────────────────────────────────────\n\n- vwap.go: VWAP(highs, lows, closes, volumes) computes running\n  anchored VWAP using typical price (H+L+C)/3 per candle. Retu\n[…]\nine gains VWAP and OBV last-values when toggled.\n\n─── Docs ──────────────────────────────────────────────────────────\n\nREADME keybindings table and indicator list updated; CHANGELOG\nentry under Added.",
          "is_bot": false,
          "headline": "feat: VWAP and OBV indicators",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-24T21:25:15Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c478c507df2859d3361de7c99d7722633771cbcc",
          "body": "Mouse was previously wired only for the tab bar and watchlist.\nExtend the same patterns to portfolio, alerts, news, heatmap, and\nchart so the full TUI is mouse-navigable.\n\n─── App routing ────────────────────────────────────────────────────\n\ninternal/tui/app.go forwards MouseClickMsg and MouseWheelM\n[…]\ncount, down increases it). Clicks are no-ops; a\n  hover crosshair is a follow-up feature.\n\nMouse behavior is visual and validated by manual verification per\nthe PR description; no new automated tests.",
          "is_bot": false,
          "headline": "feat: mouse support across all tabs",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-24T20:38:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "119f3593810ef4f1b8533e4663d3824ca300d78c",
          "body": "Introduce the Transaction type and a folding function that derives\nHoldings from a transaction history, unblocking realized P&L (P1),\ntax lots (P2), dividends (P3), and CSV import (P4). Backward\ncompatible — existing holdings-only configs load unchanged.\n\n─── Portfolio package ──────────────────────\n[…]\n──────\n\ncmd/dashboard.go calls portfolio.Materialize for each configured\nportfolio. The TUI continues to consume materialized Holdings;\nsurfacing transactions in the UI is P1.\n\nNo user-visible change.",
          "is_bot": false,
          "headline": "feat: portfolio transaction model",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-24T20:30:24Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9161a5e80dedacd4a56350e2034cc54c81c2e157",
          "body": "Introduce the recording wire format and both ends — a recording\ndecorator that tees live quotes to disk and a replay provider that\nreads them back — to unblock backtesting (B1), deterministic\ndebugging, and demo capture.\n\n─── Package ────────────────────────────────────────────────────────\n\ninternal\n[…]\nne Sink lose no lines.\n\ninternal/provider/recording/replay_test.go covers symbol filtering,\nmalformed-line tolerance, missing/future version rejection, and\nmissing-file error.\n\nNo user-visible change.",
          "is_bot": false,
          "headline": "feat: record and replay quote streams as NDJSON",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-24T20:24:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7f7feb03484e75dd419f7844a31c7291d6402f8e",
          "body": "Extract a Notifier interface from the hardcoded desktop-notification\npath so future destinations (webhook, mobile push, log-only) can\nregister alongside it without touching the engine.\n\n- internal/alert/notify.go: defines Notifier{Name(), Notify(ctx, a)}\n  and DesktopNotifier preserving the existing\n[…]\ns in onAlert since it is an\n  internal program message, not an external destination.\n- internal/alert/engine_test.go: adds TestNotifierFanOut and\n  TestNotifierErrorIsolation.\n\nNo user-visible change.",
          "is_bot": false,
          "headline": "refactor: notifier interface for alert destinations",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-24T20:14:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4d0c021ad995f560173540580cbedbd4600955bd",
          "body": "─── Alert engine ───\n`alert.Engine.Check` acquired `RLock` but mutated `refPrices` and\n`cooldowns`. The dispatcher is single-writer today, so no race was\nfiring in practice, but the lock was lying about what `Check` does and\nany future caller would corrupt the maps. Upgraded to `Lock`.\n\n─── History \n[…]\ny the\nsmall centered panel was visible against empty space. Rewrote to use\n`lipgloss.Compositor` / `Layer` (lipgloss v2) so the modal sits on\ntop of the live tab content at a computed centered offset.",
          "is_bot": false,
          "headline": "fix: alert race, history interval fallbacks, overlay compositing",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-16T19:07:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8d1b29beeebb23a032d94a3693f95644fb8674d2",
          "body": "─── Security ───\n\nTwo reachable stdlib CVEs were flagged by govulncheck on Go 1.26.2:\n  • GO-2026-4971 — net.Dialer panic on NUL byte (Windows)\n  • GO-2026-4918 — HTTP/2 transport infinite loop on bad SETTINGS_MAX_FRAME_SIZE\nBoth are reachable via yahoo.Provider.History → http.Client.Do. Bumping\ntoo\n[…]\nth          0.0.19 → 0.0.23\n  • golang.org/x/sync           0.19.0 → 0.20.0\n  • golang.org/x/sys            0.41.0 → 0.44.0\n\nVerified: task build, task test, task lint (0 issues), govulncheck (clean).",
          "is_bot": false,
          "headline": "chore: bump toolchain to go1.26.3, patch arg-injection in OpenURL",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-05-13T03:07:39Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fa2769cb4cc27171707ad1ebe9f4d05bc5d93d32",
          "body": "Addresses the priority fixes from a full-codebase quality audit. No\nuser-visible feature changes; surfaces prior silent gaps in testing,\nCI, and operational safety.\n\n─── Testing ───────────────────────────────────────────────────────────\n\n- internal/indicator: added test coverage for RSI, SMA, EMA, \n[…]\nider, and test/PR expectations.\n- README.md now documents the `task` prereq in the build-from-source\n  instructions.\n- CLAUDE.md and README.md project-layout sections drop the removed\n  binance entry.",
          "is_bot": false,
          "headline": "chore: quality pass — tests, CI, lint, concurrency, theming, docs",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-04-21T05:03:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2463628776509f4806b632269d43fc860e4e3354",
          "body": "─── Theme Infrastructure ───\n\ntheme/theme.go — New color (ColorShadow) and 6 new shared styles for tab\nseparators, branding, cursor gutter, row highlight, border characters, and\npanel titles. SectionHeader() renders styled dividers (\"── Title ────\").\nStyleTabActive redesigned from inverted backgroun\n[…]\nndedBorder with RenderPanel(),\ngiving embedded title in the border frame and drop shadow.\n\nsymbolinfo/model.go — Same RenderPanel() treatment with embedded symbol\nname in the border and shadow effect.",
          "is_bot": false,
          "headline": "feat: redesign TUI with premium financial terminal aesthetic",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-03-30T09:17:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cfe2428536464134b10cb061208fecbce8de5ea0",
          "body": "- project instructions for claude code cli integration",
          "is_bot": false,
          "headline": "chore: add claude.md for claude code context",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-03-23T06:59:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "86f945259df56efc967abf63477726f185fb8fd8",
          "body": "…bol info\n\n- fuzzy search, configurable day range, and full mouse support\n- indicator-based price alerts with desktop notifications\n- detailed symbol info panel",
          "is_bot": false,
          "headline": "feat: add search, day range, mouse support, indicator alerts, and sym…",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-03-20T06:59:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "333f0f1442f4a6fdb9efb738fc70a8aaba8420e9",
          "body": "…comparison charts\n\n- 7 color themes with live switching\n- technical indicators: sma, ema, bollinger bands, rsi, macd\n- macro dashboard, news feed, sector heatmap, and comparison charts",
          "is_bot": false,
          "headline": "feat: add themes, technical indicators, macro/news/heatmap tabs, and …",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-03-16T06:59:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d120b48d36b8d5effb5e5cd9cea5f7c613131062",
          "body": "- consolidate styles, deduplicate formatting, and fix bugs\n- add multiple selectable thematic portfolios with scrolling viewport",
          "is_bot": false,
          "headline": "feat: add thematic portfolios, consolidate styles, and fix bugs",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-03-06T07:59:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3792c02b2e80d5c1a08477da019856dc8810d38b",
          "body": "- bubbletea v2 tui with coinbase websocket and yahoo finance polling\n- watchlist with sparklines, candlestick/line charts, and portfolio p&l\n- configurable watchlist and stdout streaming mode via cli",
          "is_bot": false,
          "headline": "feat: initial release with real-time stock and crypto market dashboard",
          "author_name": "stxkxs",
          "author_login": "stxkxs",
          "committed_at": "2026-03-04T07:59:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 1,
      "commits_last_year": 65,
      "latest_release_at": "2026-07-17T23:33:15Z",
      "latest_release_tag": "v0.1.0",
      "releases_from_tags": false,
      "days_since_last_push": 4,
      "active_weeks_last_year": 9,
      "days_since_latest_release": 4,
      "mean_days_between_releases": null
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 57,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/stxkxs/mkt",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/stxkxs/mkt",
          "is_deprecated": false,
          "latest_version": "v0.1.0",
          "repository_url": "https://github.com/stxkxs/mkt",
          "versions_count": 1,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-17T23:30:04Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 4
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 5,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": null,
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [
        "Taskfile.yml"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 25943,
      "source_files_sampled": 174,
      "oversized_source_files": 0,
      "agent_instruction_files": [
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 3047
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "golang.org/x/crypto",
            "direct": true,
            "version": "v0.54.0",
            "severity": "unknown",
            "ecosystem": "go",
            "cvss_score": null,
            "advisory_ids": [
              "GO-2026-5932"
            ],
            "fixed_version": null,
            "advisory_count": 1,
            "oldest_advisory_days": 14
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "unknown": 1
        },
        "advisory_count": 1,
        "affected_count": 1,
        "assessed_count": 55,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 1
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "charm.land/bubbletea/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.0.8"
        },
        {
          "name": "charm.land/lipgloss/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.0.5"
        },
        {
          "name": "charm.land/wish/v2",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v2.0.1"
        },
        {
          "name": "github.com/charmbracelet/ssh",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.0.0-20250826160808-ebfa259c7309"
        },
        {
          "name": "github.com/coder/websocket",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.8.15"
        },
        {
          "name": "github.com/gen2brain/beeep",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.11.2"
        },
        {
          "name": "github.com/spf13/cobra",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.10.2"
        },
        {
          "name": "github.com/spf13/viper",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.21.0"
        },
        {
          "name": "golang.org/x/crypto",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.54.0"
        },
        {
          "name": "golang.org/x/time",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.15.0"
        },
        {
          "name": "gopkg.in/yaml.v3",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v3.0.1"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "charm.land/bubbletea/v2",
            "direct": true,
            "version": "v2.0.8",
            "ecosystem": "go"
          },
          {
            "name": "charm.land/lipgloss/v2",
            "direct": true,
            "version": "v2.0.5",
            "ecosystem": "go"
          },
          {
            "name": "charm.land/wish/v2",
            "direct": true,
            "version": "v2.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/ssh",
            "direct": true,
            "version": "v0.0.0-20250826160808-ebfa259c7309",
            "ecosystem": "go"
          },
          {
            "name": "github.com/coder/websocket",
            "direct": true,
            "version": "v1.8.15",
            "ecosystem": "go"
          },
          {
            "name": "github.com/gen2brain/beeep",
            "direct": true,
            "version": "v0.11.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cobra",
            "direct": true,
            "version": "v1.10.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/viper",
            "direct": true,
            "version": "v1.21.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/crypto",
            "direct": true,
            "version": "v0.54.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/time",
            "direct": true,
            "version": "v0.15.0",
            "ecosystem": "go"
          },
          {
            "name": "gopkg.in/yaml.v3",
            "direct": true,
            "version": "v3.0.1",
            "ecosystem": "go"
          },
          {
            "name": "charm.land/log/v2",
            "direct": false,
            "version": "v2.0.0",
            "ecosystem": "go"
          },
          {
            "name": "git.sr.ht/~jackmordaunt/go-toast",
            "direct": false,
            "version": "v1.1.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/anmitsu/go-shlex",
            "direct": false,
            "version": "v0.0.0-20200514113438-38f4b401e2be",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/colorprofile",
            "direct": false,
            "version": "v0.4.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/keygen",
            "direct": false,
            "version": "v0.5.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/ultraviolet",
            "direct": false,
            "version": "v0.0.0-20260703014108-f5a850f9c2b7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/x/ansi",
            "direct": false,
            "version": "v0.11.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/x/conpty",
            "direct": false,
            "version": "v0.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/x/errors",
            "direct": false,
            "version": "v0.0.0-20251110184232-6ab307057ac7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/x/term",
            "direct": false,
            "version": "v0.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/x/termios",
            "direct": false,
            "version": "v0.1.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/charmbracelet/x/windows",
            "direct": false,
            "version": "v0.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/clipperhouse/displaywidth",
            "direct": false,
            "version": "v0.11.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/clipperhouse/uax29/v2",
            "direct": false,
            "version": "v2.7.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/creack/pty",
            "direct": false,
            "version": "v1.1.24",
            "ecosystem": "go"
          },
          {
            "name": "github.com/esiqveland/notify",
            "direct": false,
            "version": "v0.13.3",
            "ecosystem": "go"
          },
          {
            "name": "github.com/fsnotify/fsnotify",
            "direct": false,
            "version": "v1.9.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-logfmt/logfmt",
            "direct": false,
            "version": "v0.6.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-ole/go-ole",
            "direct": false,
            "version": "v1.3.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/go-viper/mapstructure/v2",
            "direct": false,
            "version": "v2.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/godbus/dbus/v5",
            "direct": false,
            "version": "v5.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/inconshreveable/mousetrap",
            "direct": false,
            "version": "v1.1.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/jackmordaunt/icns/v3",
            "direct": false,
            "version": "v3.0.1",
            "ecosystem": "go"
          },
          {
            "name": "github.com/lucasb-eyer/go-colorful",
            "direct": false,
            "version": "v1.4.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/mattn/go-runewidth",
            "direct": false,
            "version": "v0.0.23",
            "ecosystem": "go"
          },
          {
            "name": "github.com/muesli/cancelreader",
            "direct": false,
            "version": "v0.2.2",
            "ecosystem": "go"
          },
          {
            "name": "github.com/nfnt/resize",
            "direct": false,
            "version": "v0.0.0-20180221191011-83c6a9932646",
            "ecosystem": "go"
          },
          {
            "name": "github.com/pelletier/go-toml/v2",
            "direct": false,
            "version": "v2.2.4",
            "ecosystem": "go"
          },
          {
            "name": "github.com/rivo/uniseg",
            "direct": false,
            "version": "v0.4.7",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sagikazarmark/locafero",
            "direct": false,
            "version": "v0.11.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sergeymakinen/go-bmp",
            "direct": false,
            "version": "v1.0.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sergeymakinen/go-ico",
            "direct": false,
            "version": "v1.0.0-beta.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/sourcegraph/conc",
            "direct": false,
            "version": "v0.3.1-0.20240121214520-5f936abd7ae8",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/afero",
            "direct": false,
            "version": "v1.15.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/cast",
            "direct": false,
            "version": "v1.10.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/spf13/pflag",
            "direct": false,
            "version": "v1.0.10",
            "ecosystem": "go"
          },
          {
            "name": "github.com/subosito/gotenv",
            "direct": false,
            "version": "v1.6.0",
            "ecosystem": "go"
          },
          {
            "name": "github.com/tadvi/systray",
            "direct": false,
            "version": "v0.0.0-20190226123456-11a2b8fa57af",
            "ecosystem": "go"
          },
          {
            "name": "github.com/xo/terminfo",
            "direct": false,
            "version": "v0.0.0-20220910002029-abceb7e1c41e",
            "ecosystem": "go"
          },
          {
            "name": "go.yaml.in/yaml/v3",
            "direct": false,
            "version": "v3.0.4",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/exp",
            "direct": false,
            "version": "v0.0.0-20251023183803-a4bb9ffd2546",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sync",
            "direct": false,
            "version": "v0.22.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/sys",
            "direct": false,
            "version": "v0.47.0",
            "ecosystem": "go"
          },
          {
            "name": "golang.org/x/text",
            "direct": false,
            "version": "v0.40.0",
            "ecosystem": "go"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 55,
        "direct_count": 11,
        "indirect_count": 44
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 57,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "stxkxs",
          "commits": 65,
          "avatar_url": "https://avatars.githubusercontent.com/u/139715017?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "release.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [
        ".golangci.yml"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 4 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 10,
            "reason": "all dependencies are pinned",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 8,
            "reason": "1 out of the last 1 releases have a total of 1 signed artifacts.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 9,
            "reason": "1 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "0d368d6de0e3da6bee24539c78068e19802ec6ba",
        "ran_at": "2026-07-22T20:31:50Z",
        "aggregate_score": 5.7,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-17T23:33:25Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-07-17T23:30:05Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/stxkxs/mkt",
    "host": "github.com",
    "name": "mkt",
    "owner": "stxkxs"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 60,
      "inputs": {
        "security": 63,
        "vitality": 74,
        "community": 38,
        "governance": 50,
        "engineering": 74
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 74,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "commits_last_year": 65,
              "human_commit_share": 1,
              "days_since_last_push": 4,
              "active_weeks_last_year": 9
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 4 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 4
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "9/52 weeks with commits",
                "points": 6.2,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 9
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "65 commits in the last year",
                "points": 16.3,
                "status": "partial",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 65
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "good",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "releases_count": 1,
              "latest_release_tag": "v0.1.0",
              "releases_from_tags": false,
              "days_since_latest_release": 4,
              "mean_days_between_releases": null
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "1 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 4 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 4
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "cadence unknown (single release)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence_unknown",
                    "params": {}
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "1 out of the last 1 releases have a total of 1 signed artifacts.",
                "points": 8,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 38,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 10,
            "inputs": {
              "forks": 0,
              "stars": 5,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "5 stars",
                "points": 9.8,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "good",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 70,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 50,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 20,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 4 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 72,
            "inputs": {
              "merged_prs": 57,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "57/57 decided PRs merged",
                "points": 38.2,
                "status": "met",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 57,
                      "decided": 57
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "at_risk",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 38,
            "inputs": {
              "followers": 8,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "stxkxs",
              "public_repos": 10,
              "account_age_days": 1102
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "8 followers of stxkxs",
                "points": 6.9,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 8,
                      "login": "stxkxs"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "10 public repos, account ~3 yr old",
                "points": 13.6,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 10
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 3
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "good",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "packages": [
                "github.com/stxkxs/mkt"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 4
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 4 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 4
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "1 published versions",
                "points": 4,
                "status": "partial",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 74,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "2 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 60,
            "inputs": {
              "topics": [
                "bubbletea",
                "cli",
                "coinbase",
                "crypto",
                "dashboard",
                "finance",
                "go",
                "golang",
                "market-data",
                "real-time",
                "stocks",
                "terminal",
                "tui",
                "websocket"
              ],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "14 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 14
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 63,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "moderate",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 57,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 5.7
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 4 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "all dependencies are pinned",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "1 out of the last 1 releases have a total of 1 signed artifacts.",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "1 existing vulnerabilities detected",
                "points": 6.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 55 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 55
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 89,
            "inputs": {
              "source": "osv",
              "advisories": 1,
              "affected_packages": 1,
              "assessed_packages": 55,
              "unassessed_packages": 0,
              "affected_by_severity": "unknown 1",
              "direct_affected_packages": 1
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "1 affected: golang.org/x/crypto v0.54.0 (unknown)",
                "points": 26.6,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 1,
                      "packages": "golang.org/x/crypto v0.54.0 (unknown)"
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory has been public longer than 90 days",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "advisories_none_stale",
                    "params": {
                      "days": 90
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 55,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 2
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "excellent",
        "name": "AI Readiness",
        "value": 86,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 3047
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "65 of 65 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 65,
                      "sampled": 65
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 82,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [
                "Taskfile.yml"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Taskfile.yml",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Taskfile.yml"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 65",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 65
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "all dependencies are pinned",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 25943,
              "source_files_sampled": 174,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/174 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 174,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-22T20:32:08.419984Z",
  "schema_version": "0.26.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/stxkxs/mkt.svg",
  "full_name": "stxkxs/mkt",
  "license_state": "standard",
  "license_spdx": "MIT"
}