varar-dev/varar tiene un índice de salud de 73 sobre 100, lo que lo sitúa en la banda Bueno. Su puntuación más alta es Engineering Quality (86/100) y la más baja, Security (40/100). Se actualizó por última vez hoy. 2 personas concentran la mayor parte del trabajo reciente.
73
global / 100
Bueno
Índice de salud del software
Las métricas se agrupan en categorías ponderadas sobre una escala estandarizada de 1 a 100. El resultado global parte de su media ponderada, calibrada contra la distribución del registro público para que las bandas tengan significado percentil; cuando la evidencia pública activa la Política de Jurisdicciones de Alto Riesgo, la calificación se ajusta y recibe un límite «En riesgo» de 34.
73
Excepcional93-100El nivel más alto del registro (≈ el 5% superior); cumple prácticamente todos los criterios evaluados
Excelente80-92Sólido en todos los frentes; carencias menores
Bueno65-79Saludable; carencias limitadas y manejables
Moderado50-64Aceptable con carencias notables; se recomienda revisión
Débil35-49Debilidades sustanciales en varias áreas
En riesgo20-34Debilidades significativas; su adopción exige cautela
Crítico1-19Problemas graves (proyecto abandonado, un solo mantenedor, sin higiene)
Perfil de puntuación
Cada eje es una categoría. La forma importa más que la media: un proyecto sano llena toda la figura, mientras que un perfil de picos y cráteres indica que la fortaleza en una dimensión enmascara el riesgo en otra.
El resultado global ponderado 64 se calibra a 73 en la escala publicada del índice (calibración del registro 2026-08-02).
¿Hasta qué punto está el repositorio preparado para desarrollarse y mantenerse con agentes de codificación de IA? Tiene un peso deliberadamente pequeño (4%): las herramientas para agentes son una señal real de mantenimiento, pero un repositorio sin ninguna puede alcanzar igualmente 100/100.
crates.io, Go, Maven, npm, PyPI, RubyGemsecosistemas de paquetes
Advertencias de recopilación de datos
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Más detalle
Historial de estrellas y forks 0 ★ / 3 ⇿
0Estrellas
3Forks
Cuándo se añadió cada estrella y fork, recopilado de GitHub y agrupado por día. El crecimiento acumulado se sitúa justo encima de las adiciones diarias que lo componen, de modo que ambos se leen en conjunto: la acumulación orgánica sostenida no se parece en nada a un pico abrupto y efímero. Cuando esa diferencia es medible, se informa como autenticidad del crecimiento.
OpenSSF Scorecard 4.0 / 10
4.0agregado
Evaluación de seguridad independiente y agnóstica en cuanto a herramientas, procedente del proyecto de código abierto OpenSSF Scorecard. Cada comprobación premia una práctica de seguridad, no la herramienta de un proveedor concreto. Las comprobaciones que Scorecard no pudo determinar se marcan como n/d y se excluyen de la puntuación de seguridad (nunca se cuentan como cero).Scorecard v5.5.0 · 2026-07-30 13:07 UTC
No fue posible recopilar el conjunto de dependencias resuelto para este informe: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Informe JSON sin procesar legible por máquina
{
"data": {
"repo": {
"topics": [
"acceptance-test-driven-development",
"agentic-coding",
"behaviour-driven-development",
"executable-documents",
"executable-specification",
"markdown",
"specification-by-example"
],
"is_fork": false,
"size_kb": 15747,
"has_wiki": false,
"homepage": "https://varar.dev",
"languages": {
"C#": 234428,
"D2": 5159,
"Go": 220463,
"CSS": 21430,
"MDX": 117423,
"Java": 637194,
"Ruby": 184084,
"Rust": 359847,
"Astro": 36459,
"Shell": 83862,
"Kotlin": 60468,
"Python": 371677,
"Makefile": 9986,
"JavaScript": 19424,
"TypeScript": 707697
},
"pushed_at": "2026-07-29T22:24:39Z",
"created_at": "2026-06-25T10:24:18Z",
"owner_type": "Organization",
"updated_at": "2026-07-30T11:38:17Z",
"description": "Executable Documentation",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript",
"Java",
"Python",
"Rust"
]
},
"owner": {
"blog": null,
"name": null,
"type": "Organization",
"login": "varar-dev",
"company": null,
"location": null,
"followers": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/306831855?v=4",
"created_at": "2026-07-19T16:27:50Z",
"is_verified": null,
"public_repos": 3,
"account_age_days": 10
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.7.0",
"kind": "minor",
"published_at": "2026-07-23T09:15:32Z"
},
{
"tag": "v0.6.1",
"kind": "patch",
"published_at": "2026-07-22T12:23:34Z"
},
{
"tag": "v0.5.2",
"kind": "patch",
"published_at": "2026-07-22T09:37:23Z"
},
{
"tag": "v0.4.2",
"kind": "patch",
"published_at": "2026-07-08T21:25:35Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2026-07-07T19:41:41Z"
},
{
"tag": "v0.3.1",
"kind": "patch",
"published_at": "2026-07-06T13:11:57Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2026-07-04T11:47:34Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2026-07-03T18:04:58Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2026-07-02T20:56:54Z"
}
],
"recent_commits": [
{
"oid": "1afdf5cc01184f7fecda989e035fa90100474903",
"body": "…, Kotlin and Rust too\n\nPorts the TypeScript change: the run-result failure payload gains an\noptional anchor — the failing step's match span, or the first mismatched\ncell's — so an editor can underline the step that failed instead of the\nwhole line it shares with steps that passed.\n\nPython and Java \n[…]\nte the same rule, ready for\nwhenever that payload is ported.\n\nCo-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01ReZvGQen6fNTUi5R5X26zy",
"is_bot": false,
"headline": "feat(spec): a failure records the failing step's span in Python, Java…",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-29T22:24:29Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f015d61b443bb5cca4fa7baf1a62ab334ad13b13",
"body": "…underline the step and not its whole line\n\nA step that fails by throwing had no source range in the run result — only\na line number — so the editor squiggled the entire line, including the\nsteps on it that passed. The failure payload now carries the anchor the\nexecutor already computes (the failing\n[…]\nt still reads, and\nfalls back to the failing line as before.\n\nCo-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01ReZvGQen6fNTUi5R5X26zy",
"is_bot": false,
"headline": "feat(ts/core): a failure records the failing step's span, so editors …",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-29T22:03:34Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c2640386d6412858c60cf8bea921281899f17da2",
"body": "Every captured parameter went grey the moment its example failed, so a\none-cell mismatch wiped the highlighting off the whole paragraph — dates\nand amounts that were still perfectly correct. Only the mismatched cell\nturns vermillion now; the line wash already says the example failed.\n\nCo-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01ReZvGQen6fNTUi5R5X26zy",
"is_bot": false,
"headline": "chore(website): a failing example keeps the chips on its correct values",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-29T10:35:03Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "e5e9bbccd6faa53b3508c8bf25f45db383244c04",
"body": "The steps files moved into src/varar/, so their '../library.ts' import\nresolves to src/library.ts — but the editors still mounted them under\nsteps/, one directory off, which broke the browser runner and the\nin-editor type-checking on the front page.\n\n<Editor> now fails the build when a mounted .ts t\n[…]\nh no\nother tab provides, so the two can't drift apart again.\n\nCo-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01ReZvGQen6fNTUi5R5X26zy",
"is_bot": false,
"headline": "chore(website): editor tabs mount at the example project's own paths",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-29T09:12:07Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c33558699578b190a6067298b48b7368e7675f23",
"body": "The CLI run tests assert that stderr is empty, filtering out Node's one-time\n`ExperimentalWarning: globSync` notice. The filter matched `ExperimentalWarning`\nand `--trace-warnings` as unanchored substrings, so any line the CLI itself\nemitted containing either literal — a step name, a diagnostic, a h\n[…]\nhe prefixes of Node's own two-line notice instead, so only Node's\nnotice is filtered and the CLI's own output is always asserted on.\n\nCo-authored-by: Claude Opus 5 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "test(ts/cli): anchor stderr warning filter on Node's own prefix (#18)",
"author_name": "AndreasKoestler",
"author_login": "AndreasKoestler",
"committed_at": "2026-07-29T08:45:09Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "109290b652bfb8646d93b31641bbea1ff73a0f73",
"body": "Two of them are not: hello-varar.md and tables-and-docstrings.md are real files\nin all twelve projects, because their text differs per language. The skill said\nall of them were symlinks to the typescript-vitest originals, which made #72\nlook like a single edit when it was twelve.\n\nAlso picks up the \n[…]\nwalk to avoid a stale worktree, which took SKILL.md with it.\n\nCo-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01XEQaW2CkeUF4x9qpohJg4i",
"is_bot": false,
"headline": "docs: correct the port skill's claim that every sample oath is a symlink",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-29T08:42:43Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "1372a7f498a31e823407f7854c4ad10b166faa3f",
"body": "The last Var remnant, left out of #71 because it is sample content rather than\ncode. The oath's own text already said \"Hello, Varar\" — only the filename and\nthe identifiers derived from it still said var.\n\nRenamed across all 12 sample projects: the oath (a real file in each, not a\nsymlink like the o\n[…]\nthat example was already wrong, not merely\nstale.\n\nFixes #72\n\nCo-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01XEQaW2CkeUF4x9qpohJg4i",
"is_bot": false,
"headline": "chore(examples): the first-run oath is hello-varar.md, not hello-var.md",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-29T08:41:35Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "8e9409687b26322ad4d59b544664df66427def00",
"body": "Seventeen generated run-result files, committed before .var/ was gitignored —\nignoring a path never untracks what is already in it. Nothing reads them: no\nfile in the repo references these paths, and `make check` is green without them.\n\nThey were stale twice over. The set contains both the pre- and \n[…]\nry in someone's checkout is worth seeing rather\nthan hiding.\n\nCo-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01XEQaW2CkeUF4x9qpohJg4i",
"is_bot": false,
"headline": "chore: drop the stale .var/ run results committed to the repo",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-29T08:28:58Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7e8d6c9ea6805dadeb8d0d9fd52830eb43b74ec0",
"body": "The rename to Varar deliberately left internal code identifiers alone \"to avoid\nchurn/risk\" (doc/RENAME-VARAR.md). Several were not internal: VarSpec is\nsubclassed by every Kotest user, var.config.root and var.acceptDrift are JUnit\nconfiguration parameters, and .var/ is where run results land. The d\n[…]\nagnostic: are now\nvarar:drift:/varar:diagnostic:.\n\nFixes #71\n\nCo-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01XEQaW2CkeUF4x9qpohJg4i",
"is_bot": false,
"headline": "feat(spec)!: drop the redundant Var prefix from every identifier and key",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-29T07:59:31Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4a7d2d065f5e84c8a74fe819aa4b2ef3807291cb",
"body": "…-Dvar.update\n\nFour javadoc/comment sites in var-junit and var-kotest named a system property\nthat has not existed since the rename. The code reads varar.update; anyone\nfollowing the docs set -Dvar.update and got a run that silently ignored it —\nthe acknowledgment appeared not to work, with nothing \n[…]\nnly: no behaviour change, and VARAR_UPDATE=1 was unaffected.\n\nCo-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01XEQaW2CkeUF4x9qpohJg4i",
"is_bot": false,
"headline": "docs(java): the drift acknowledgment property is -Dvarar.update, not …",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-29T07:37:58Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b7fbf99481652fa30fd2322f5d8cfe3c9c2cfad3",
"body": "The config corpus only ever loads from a directory, so it passes a reader that\nfuses reading and parsing — which is how Ruby, Rust and Go each acquired that\nshape after #11 was filed against Python for it. The skill now states the split\nas part of the config package's contract and tables every port'\n[…]\n is covered by prose where it cannot be covered by a\ngolden.\n\nCo-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01XEQaW2CkeUF4x9qpohJg4i",
"is_bot": false,
"headline": "docs: the port skill requires a pure config parse, not just a reader",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-28T21:48:02Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "dfc41b5bc3fe68b3e4a867c9824d466885dd7105",
"body": "ReadVarConfig fused reading and parsing, so there was no way to validate\nvarar.config.json text you already had — an editor buffer, an LSP document, an\nin-memory fixture — without first inventing a temp file. It is now the thin\nfilesystem edge over the pure parser, matching TypeScript's parseVarConf\n[…]\npath, a URL, \"<memory>\"); nothing is read from it.\n\nRefs #11\n\nCo-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01XEQaW2CkeUF4x9qpohJg4i",
"is_bot": false,
"headline": "feat(go/config): ParseVarConfig validates config text without a file",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-28T21:48:02Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "13c393c22dad22b128c94908b7f9b3abd0860565",
"body": "read_var_config fused reading and parsing, so there was no way to validate\nvarar.config.json text you already had — an editor buffer, an LSP document, an\nin-memory fixture — without first inventing a temp file. It is now the thin\nfilesystem edge over the pure parser, matching TypeScript's parseVarCo\n[…]\npath, a URL, \"<memory>\"); nothing is read from\nit.\n\nRefs #11\n\nCo-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01XEQaW2CkeUF4x9qpohJg4i",
"is_bot": false,
"headline": "feat(rust/config): parse_var_config validates config text without a file",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-28T21:47:51Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "77dcef20e77e918af1ef5ce9226fd9735777ab1a",
"body": "read_var_config fused reading and parsing, so there was no way to validate\nvarar.config.json text you already had — an editor buffer, an LSP document, an\nin-memory fixture — without first inventing a temp file. It is now the thin\nfilesystem edge over the pure parser, matching TypeScript's parseVarCo\n[…]\npath, a URL, '<memory>'); nothing is read from\nit.\n\nRefs #11\n\nCo-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01XEQaW2CkeUF4x9qpohJg4i",
"is_bot": false,
"headline": "feat(ruby/config): parse_var_config validates config text without a file",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-28T21:47:51Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "e1cd290e80c93ff1f0caf59197656c4062f5ec6b",
"body": "read_varar_config fused reading and parsing, so there was no way to validate\nvarar.config.json text you already had — an editor buffer, an LSP document, an\nin-memory fixture — without first inventing a temp file. It is now the thin\nfilesystem edge over the pure parser, matching TypeScript's parseVar\n[…]\npath, a URL, \"<memory>\"); nothing is read from\nit.\n\nRefs #11\n\nCo-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01XEQaW2CkeUF4x9qpohJg4i",
"is_bot": false,
"headline": "feat(py/config): parse_varar_config validates config text without a file",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-28T21:47:41Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "909147eafe3c2c1f33d65ed335eeda3333c2980e",
"body": "…s suite runs anywhere\n\nThe file was gitignored as an \"artifact of a standalone pnpm install\", grouped\nwith pnpm-lock.yaml. It is not an artifact: it sets verifyDepsBeforeRun: false,\nwhich is the only reason `pnpm test` works inside this project at all. pnpm\nfinds a workspace root by walking UP, and\n[…]\nere resolve real released versions and want pnpm's defaults.\n\nCo-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01XEQaW2CkeUF4x9qpohJg4i",
"is_bot": false,
"headline": "fix(ts): examples/typescript-vitest commits pnpm-workspace.yaml so it…",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-28T21:11:52Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ead96e9a5e872aae4dd7416465f045a69ec57088",
"body": "… port skill\n\nADR 0002 put whole-file deletion out of scope as \"a different signal from\ndrift\". That stays true for *gating* — but it was silently also licensing the\nbaseline to hoard dead entries forever (#70). The amendment separates the two,\nand records why the predicate is the docs globs rather \n[…]\nby more than one mechanism needs a union, as var-junit does.\n\nCo-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01XEQaW2CkeUF4x9qpohJg4i",
"is_bot": false,
"headline": "docs: record baseline pruning in ADR 0002, the smoke contract and the…",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-28T17:49:56Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "df8dd6f449db3c028291e2e6fd1896fe46829574",
"body": "…nes dead baselines\n\nA fifth check, baseline-pruned: inject an entry for an oath no docs glob\nmatches, accept drift, and require it to be gone. Without the implementation it\nfails for every reconciling adapter, which is how it was built — gate first,\nthen the eleven adapters.\n\nThe probe is keyed at \n[…]\nves in `varar run` and is\ncovered by @varar/cli's own tests.\n\nCo-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01XEQaW2CkeUF4x9qpohJg4i",
"is_bot": false,
"headline": "chore(conformance): the smoke contract gates that accepting drift pru…",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-28T17:49:45Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "aaa0a363ac790aef0ff69562b6550d644394d4f8",
"body": "…hat no longer exist\n\nReconciliation is per-oath, so a path that has gone is never visited and its\nbaseline survived forever. Moving the sample projects' oaths into varar/ left\nevery port's lock carrying both the old root-level keys and the new ones, and\nthe only cure was deleting the file and re-re\n[…]\nDR 0002). It just no longer preserves the corpse.\n\nFixes #70\n\nCo-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01XEQaW2CkeUF4x9qpohJg4i",
"is_bot": false,
"headline": "fix(spec): accepting drift prunes varar.lock.json entries for oaths t…",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-28T17:49:32Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "77b95ada930f1efba2d7afff09c781d4744a9828",
"body": "…d CLAUDE.md\n\nADR 0002 said drift was \"not part of the conformance corpus\". That sentence was\nthe loophole: because no corpus covered the adapters, a port could implement\nevery drift function, unit-test them, call none of them, and stay green. An\namendment records what actually happened and what now\n[…]\n the three corpora and what each one does and does not gate.\n\nCo-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01XEQaW2CkeUF4x9qpohJg4i",
"is_bot": false,
"headline": "docs: record the adapter smoke contract in the ADR, the port skill an…",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-28T15:25:29Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "219724cfcfdb3510860c6b8ce1e61783e7ccee3e",
"body": "… just conformance-green\n\nconformance/bundles/ and conformance/config/ gate pure functions. Everything in\nthe imperative shell — oath discovery, step loading, the drift gate,\nVARAR_UPDATE, emitting one framework test item per example — is invisible to\nthem, so an adapter that discovers zero oaths is\n[…]\nn so the project is already built. All twelve adapters pass.\n\nCo-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01XEQaW2CkeUF4x9qpohJg4i",
"is_bot": false,
"headline": "chore(conformance): a third corpus gates that adapters are wired, not…",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-28T15:25:17Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a7c9dec6b72cdea4b905104dfc42f73ef8ff2083",
"body": "Asserts on what `trials` returns: a clean run records the baseline and yields\nno drift trial, a drifted baseline yields one and is preserved, and\nVARAR_UPDATE=1 accepts and re-records.\n\nThe three phases share one #[test] deliberately. VARAR_UPDATE is process-global\nand cargo runs test functions on p\n[…]\nequencing them is what keeps the no-drift\nassertions honest.\n\nCo-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01XEQaW2CkeUF4x9qpohJg4i",
"is_bot": false,
"headline": "test(rust): the cargotest adapter has a drift-gate test",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-28T15:24:54Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a43409bb8a8457add5107e45343df1c1e4735587",
"body": "Both adapters reconciled correctly but only the core had drift tests, so a\nregression in the adapter wiring itself would have been silent — the failure\nmode issue #69 turned out to be.\n\nEach asserts the three behaviours that matter: a clean run records the\nbaseline, a drifted baseline produces a fai\n[…]\n globally and these run inside the suite they would perturb.\n\nCo-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01XEQaW2CkeUF4x9qpohJg4i",
"is_bot": false,
"headline": "test(ruby): the rspec and minitest adapters have drift-gate specs",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-28T15:24:46Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d61a258d3973e38611d18dbafa3221abe06cd17f",
"body": "…ecord it\n\nThe vitest drift gate is armed by data — the plugin only checks when\nvarar.lock.json exists — so the dogfood project, which shipped none, gated\nnothing. Same hole as the .NET adapter had, reached by a different route.\n\nRecording it needed two fixes first. The sample had no way to write a \n[…]\ner no longer depends on how the sample spells the specifier.\n\nCo-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01XEQaW2CkeUF4x9qpohJg4i",
"is_bot": false,
"headline": "chore(examples): typescript-vitest commits a drift baseline and can r…",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-28T15:24:35Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "8a69ab998cc6cdb74db77fdee7193781731a7070",
"body": "… that stopped matching fails the run\n\nDiscovery now reconciles every oath against varar.lock.json through\nFileBaselineStore + DriftDetection.ReconcileDrift, emits one failing TestCase\nper drift finding, and honours VARAR_UPDATE=1 to accept and re-record. Every\npath into the executor funnels through\n[…]\n reconciles a stray lock file into the repo\nroot.\n\nFixes #69\n\nCo-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01XEQaW2CkeUF4x9qpohJg4i",
"is_bot": false,
"headline": "fix(dotnet/vstest): dotnet test enforces the drift gate — a paragraph…",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-28T15:24:18Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c9a88e9ea5a13606d4947b7cccd2daf7b2ba4324",
"body": "…draft-gated\n\nThe next branch is retired: doc fixes go live on every main push, new\nunreleased-feature pages carry Starlight draft: true until the release\ncommit, and behavior-changing edits to existing pages land with the code\nand are followed promptly by a release. PR #67 (versioned archives at\n/v/<version>/) is parked until after 1.0.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: ADR 0013 — the website deploys from main; unreleased pages are …",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-28T08:58:26Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "23ff56dd75d482fe63273e49f8092a6df76f2426",
"body": "…layout\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01GCsezdQnvRN4tnPtmETnZk",
"is_bot": false,
"headline": "chore(website): docs, tutorials and editors teach the varar/ project …",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-23T22:25:36Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "0a93fbeb4731b7754d4601edc70522f1fa3ae71d",
"body": "Oaths move into each project's varar/ directory; steps move to each\nlanguage's conventional location (src/varar, tests/varar, spec/varar,\nsrc/test/java/varar package with the varar.* config wildcard); harnesses\nand bridges are named after the tool (RunVararTest, tests/varar.rs,\nvarar_test.go, test_varar.py, varar_spec.rb); locks regenerated.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01GCsezdQnvRN4tnPtmETnZk",
"is_bot": false,
"headline": "chore(examples): sample projects adopt the varar/ layout",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-23T22:25:36Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ff841467ce5db549f6c65830d4ca2684ea205eb6",
"body": "…\"] loads every step class in the package\n\nStar-import semantics: top-level step-definition classes directly in the\npackage, from directory or jar classpath entries, name-sorted. Works in\nboth the JUnit engine and the Kotest adapter. A wildcard matching nothing\nfails like an unknown class name.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01GCsezdQnvRN4tnPtmETnZk",
"is_bot": false,
"headline": "feat(java/junit): steps entries support package wildcards — [\"varar.*…",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-23T22:25:26Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "163cfc27b79f63f997753acecee70be169fb631f",
"body": "…nto spec/varar/ or test/varar/\n\nThe steps file is snake_case and follows the detected framework's root\n(spec/ for RSpec, test/ for Minitest), and the bridge is now\nspec/varar_spec.rb / test/varar_test.rb.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01GCsezdQnvRN4tnPtmETnZk",
"is_bot": false,
"headline": "feat(ruby/runner): varar init scaffolds oaths into varar/ and steps i…",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-23T22:25:26Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a0fd9ccdf655f3a8baaa1062c79cce3aa60cfde7",
"body": "…o tests/varar/\n\nThe steps file is now snake_case (deep_thought.steps.py), following Python\nnaming conventions.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01GCsezdQnvRN4tnPtmETnZk",
"is_bot": false,
"headline": "feat(py/runner): varar init scaffolds oaths into varar/ and steps int…",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-23T22:25:26Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "4050a50f776e8c87fcc6086976c0201bb8fb7373",
"body": "…rc/varar/\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01GCsezdQnvRN4tnPtmETnZk",
"is_bot": false,
"headline": "feat(ts/cli): varar init scaffolds oaths into varar/ and steps into s…",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-23T22:25:25Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ef3a29c9447627b0c71226f49fd6e1d2ec460dca",
"body": "… now version 2 with an \"oaths\" key\n\nOne rename across all seven ports, the conformance corpus, the examples,\nand the internal docs. Framework conventions that happen to say spec\n(RSpec, Kotest's VarSpec, Python's importlib module specs, .gemspec/.nuspec)\nare unchanged.\n\nBREAKING CHANGE: varar.lock.\n[…]\ntOaths in oaths_test.go, and the Rust example harness\nis tests/oaths.rs.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01GCsezdQnvRN4tnPtmETnZk",
"is_bot": false,
"headline": "feat(spec)!: the spec concept is renamed to oath — varar.lock.json is…",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-23T20:43:51Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "cdab5a4127077e67497251c4b66cdd9e37ef56dd",
"body": "Every docs page now uses the term the Oaths explanation defines. The first\ntutorial moved to /tutorials/first-oath/ (the old /tutorials/first-spec/\nURL redirects), and the vitest how-to and no-theatre pages were retitled.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01GCsezdQnvRN4tnPtmETnZk",
"is_bot": false,
"headline": "chore(website): varar.dev says oath everywhere it used to say spec",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-23T20:43:39Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "67ea7225c4176f0dcb596d771730bf331eaac547",
"body": "The Java & Kotlin aside is gone: a new Configure step between Install and\nthe first oath shows varar init (with its real output and config) for ports\nthat have it, and the hand-written varar.config.json + JUnit suite or test\nharness for ports that don't — one language at a time via the site-wide\nlan\n[…]\nage's real step-file extension\ninstead of the *.steps.<ext> placeholder.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01GCsezdQnvRN4tnPtmETnZk",
"is_bot": false,
"headline": "chore(website): get-started tutorial gains a per-language Configure step",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-23T20:43:30Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a0e8465012d53bf9c04e3c358c199d192ddb9c8b",
"body": "…hing the TypeScript CLI\n\nThe Ruby scaffold still wrote the old 01-hello greeting example; it now\nwrites deep-thought.md and its one-sensor steps file, so a project started\nwith varar init looks the same in every language.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01GCsezdQnvRN4tnPtmETnZk",
"is_bot": false,
"headline": "fix(ruby/runner): varar init scaffolds the Deep Thought example, matc…",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-23T20:43:30Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "caf0fbd4404a4ae2fc14b30f59c2cb4735840184",
"body": "…ng the TypeScript CLI\n\nThe Python scaffold still wrote the old 01-hello greeting example; it now\nwrites deep-thought.md and its one-sensor steps file, so a project started\nwith varar init looks the same in every language.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01GCsezdQnvRN4tnPtmETnZk",
"is_bot": false,
"headline": "fix(py/runner): varar init scaffolds the Deep Thought example, matchi…",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-23T20:43:18Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2ec8552a3c3c8616fb1bdd453e614b38f342a41d",
"body": "Add an explanation page tying together the three mechanical defenses\nagainst decorative specs — return-based comparison, drift detection, and\nspan-anchored failures — and stating honestly what they can't catch.\nExtend the drive-a-feature agent guide with the mechanical/manual split:\nwhat the tooling\n[…]\ns in ADR 0002 that still\npointed at the renamed examples-and-drift page.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01TWpDsxmAMa4aVsiugPgZSn",
"is_bot": false,
"headline": "docs(website): explain why Varar specs can't be theatre",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-23T09:19:12Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "bed4b6c698c83e2028528f333f792936f154c4e6",
"body": null,
"is_bot": false,
"headline": "chore(release): java back to a SNAPSHOT placeholder after v0.7.0",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-23T09:15:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a748d8c6729ee8830a7c6444e5fe12fded13e234",
"body": null,
"is_bot": false,
"headline": "Release v0.7.0",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-23T09:01:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "80fc57b4883aef78ae05020d485d1376c0f31af8",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01UvMopw64mP5HVoU2R9N3ew",
"is_bot": false,
"headline": "chore: pin Node 26.5.0 via asdf .tool-versions and .node-version",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-23T08:44:28Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2249f4e1a24a61dbbfdbb4e252444e4402d38b09",
"body": "…ighlight-groups-ejextc\n\n# Conflicts:\n#\tdotnet/Varar.Tests/ConformanceFixtures.cs\n#\tgo/conformance/conformance_test.go\n#\tjava/kotlin/src/test/kotlin/dev/varar/kotlin/ConformanceTest.kt\n#\tjava/varar/src/test/java/dev/varar/ConformanceTest.java\n#\trust/varar/tests/conformance.rs\n#\ttypescript/packages/core/src/plan.ts\n#\ttypescript/packages/website/src/content/docs/explanation/markup-is-yours.md",
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/main' into claude/cucumber-lsp-h…",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-23T08:37:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7eeee980c0783fd8f5c41d237cb6446c18ad629b",
"body": "…aragraph (#65)\n\nFixes #61. A multi-table example no longer relies on the \"hug\" — a step\nparagraph glued directly beneath a table with no blank line — which is not valid\nGFM and does not survive a Markdown formatter (prettier re-emits the step as a\ntable row, silently changing what the spec means). \n[…]\nions.\n\n\nClaude-Session: https://claude.ai/code/session_01SqKahEdcXvVEYXt2zuYQwJ\n\nCo-authored-by: Aslak Hellesøy <aslak@oselvar.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(spec)!: an example runs until a heading, ---, or a non-matching p…",
"author_name": "Aslak Hellesøy",
"author_login": "aslakhellesoy",
"committed_at": "2026-07-23T08:25:08Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "66b5c2ba5e4e6f220e5d6a528748de212b2af407",
"body": "… Varar in comments\n\nAddresses PR review:\n- markup-is-yours.md and the custom-parameters reference now show a capture\n group (/#(\\w+)/) as the way to pick out the value — the first capture group\n is what the handler receives and the span editors highlight — instead of\n slicing markers off in pars\n[…]\ned \"var\" to \"Varar\" in the comments this branch added across the ports.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01KQvfYkzr57MdiM4Xh5hyvw",
"is_bot": false,
"headline": "docs: teach capture groups in custom-parameter docs; call the project…",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-07-23T08:19:13Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4512e779a03af806249fe97fb47190af9b31e4f6",
"body": "Markdown emphasis was something every project hand-rolled as a custom\nparameter type. It is now a built-in `{emph}` in every port, matching all six\nuniform emphasis notations — *x*, _x_, **x**, __x__, ***x***, ___x___ — and\npassing only the inner text to the handler (only the outermost delimiter pai\n[…]\n directly.\nIt carries a format that renders a mismatch back as *value*.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01KQvfYkzr57MdiM4Xh5hyvw",
"is_bot": false,
"headline": "feat(spec): add built-in {emph} parameter type for Markdown emphasis",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-07-22T23:58:40Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a27c18e6dc13b99e91ef259672a0f222db4acd6d",
"body": "…ot its surrounding notation\n\nEditor highlighting painted the whole cucumber-expression parameter match\nas a parameter token — including the delimiters, e.g. the quotes in\n{string} matching \"hi there\". Only the inner value is passed to the step\nhandler, so only that should be highlighted.\n\nThe match\n[…]\ne\ngroup ({int}, {word}, ...) fall back to highlighting the whole match.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01KQvfYkzr57MdiM4Xh5hyvw",
"is_bot": false,
"headline": "fix(vscode): highlight only the captured value of a step parameter, n…",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-07-22T23:29:51Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "49051c0b2bafc4814c6ec15b3d09e9a65be59700",
"body": "BREAKING CHANGE: A mismatched value captured from a paragraph is now labelled\n`cell 1`, `cell 2`, … instead of `arg 1`, `arg 2`. It shows up in the message\n(`CellMismatchError: cell 1: expected £2.55 but was £2.60`), in CellDiff.column,\nand in the conformance trace. \"arg\" named the handler's parameter; what differs\nis a cell in the document.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01GsFvMfF5vRnFsNy2pbAKXn",
"is_bot": false,
"headline": "fix(spec)!: an inline cell is labelled \"cell N\", not \"arg N\"",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-22T18:06:13Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "b5db269e22ce360bd974cc536b442b95daa772e9",
"body": "BREAKING CHANGE: A doc string is one cell, compared whole, so it no longer has\nan error of its own. DocStringMismatchError / DocStringDiff (and the\nisDocStringMismatchError guard) are gone from every port; a differing doc string\nnow throws CellMismatchError carrying a single CellDiff whose column is\n[…]\nne still shows a visible difference where a bare\ncell would render none.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01GsFvMfF5vRnFsNy2pbAKXn",
"is_bot": false,
"headline": "fix(spec)!: a doc-string mismatch is a cell mismatch",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-22T18:03:25Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a92379f32cbe5ab16f2c75172e0cbd1593e96d9b",
"body": "The docs had nine words for one idea — slot, parameter, argument, capture,\n\"comparable value\", \"concrete value\", placeholder, column and claim — and used\n\"cell\" only for table cells, while the code has long used CellDiff for\nparagraph values too.\n\nSettles on two words. A cell is the atomic value a s\n[…]\nn a marking in the\ndocument, and is now the page the reference links to.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01GsFvMfF5vRnFsNy2pbAKXn",
"is_bot": false,
"headline": "chore(website): adopt cell and slot as the shared vocabulary",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-22T17:43:47Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6b191fce4d6c549c75c7da7eddf756dd6f8864d1",
"body": "Two messages used the wrong word for what they counted. \"a sensor with N\nparameters must return an array of N values\" counts slots, which may be a table\nor a doc string rather than a parameter. And the header-bound row error said\n\"one value per bound column\" where the slot path says \"per slot\" — two\n[…]\ns, whether it sits in a table, in a header-bound row,\nor in a paragraph.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01GsFvMfF5vRnFsNy2pbAKXn",
"is_bot": false,
"headline": "fix(spec): sensor return errors name slots and cells consistently",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-22T17:41:42Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "5570b2365e529385baac42b09a45252486c22376",
"body": "…he old URLs\n\n/tutorials/try-var, /explanation/var-overview and\n/explanation/var-for-cucumber-users still carried the pre-rename name in their\nURL. Each moves to its varar-* slug with an Astro redirect left behind, so\npublished links keep working. The overview page also joins the sidebar (it was\norp\n[…]\ned \"Varar overview\" so it no\nlonger collides with the home page's title.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01GsFvMfF5vRnFsNy2pbAKXn",
"is_bot": false,
"headline": "chore(website): rename the var-* page slugs to varar-* and redirect t…",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-22T17:27:29Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "808608285017e8f37192e7dd76e612e30fe02396",
"body": "…d of silently passing\n\nBREAKING CHANGE: A sensor whose expression has parameters — or a trailing data\ntable or doc string — must return one value per slot. Returning\nundefined/None/null/nil previously skipped the comparison entirely and the\nexample went green, so a typo in a property access turned \n[…]\ntem now rejects at compile time what\nthe other ports reject at run time.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01GsFvMfF5vRnFsNy2pbAKXn",
"is_bot": false,
"headline": "fix(spec)!: a sensor with slots that returns nothing now fails instea…",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-22T17:11:43Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "894423d3bc6b7202fc359933ce0b05c1fa9cd4d7",
"body": "…ure files\n\nNeither scannerPlugins nor the fact that Gherkin feature files already run was\ndocumented anywhere — both were discoverable only by reading the source. Adds a\nvarar.config.json reference covering every key, and a how-to for pointing Varar\nat existing .feature files (including the Backgro\n[…]\nter\" passage on the Cucumber page, which claimed this was still to come.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01GsFvMfF5vRnFsNy2pbAKXn",
"is_bot": false,
"headline": "chore(website): document varar.config.json and running existing .feat…",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-22T17:11:42Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "31868f5f6448ba94c35ca39bf3c65fba5c99e27b",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(rust): refresh lockfiles (#59)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-22T16:53:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9cce7ab0081840ae7d526b24eca161889ec011eb",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(ts): refresh lockfiles (#60)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-22T16:53:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d1c482bcb47417460ab480cb626e273b3d0d0390",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(build): Update dependency golang to v1.26.5 (#58)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-22T16:53:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "309a74f7ffcec227dcb34b01a18a9dc4f8636de5",
"body": "… references\n\nThe drift pages explained what drift is but never how to accept it: name the\nbaseline file, say to commit it, and give the per-runner command (including that\nthe vitest plugin only reads the baseline, so accepting takes VARAR_UPDATE plus\n`varar run --update`). Also: the vitest guide no\n[…]\nhat was removed, `from var import`, `var.config.ts` and a\n\"sensos\" typo.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01GsFvMfF5vRnFsNy2pbAKXn",
"is_bot": false,
"headline": "chore(website): document the drift workflow and correct the stale API…",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-22T16:23:56Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ed04b5563b4e9d1ff6e0e8a6a1071e872613656b",
"body": "BREAKING CHANGE: @varar/vitest's exports are renamed to match the product name:\nVarResultsReporter → VararResultsReporter, VarResultsReporterOptions →\nVararResultsReporterOptions, VarVitestPluginOptions → VararVitestPluginOptions,\nvarVitestPlugin → vararVitestPlugin (the default export, so `import\nv\n[…]\ns no product\nprefix and is parallel to the same type in the other ports.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01GsFvMfF5vRnFsNy2pbAKXn",
"is_bot": false,
"headline": "refactor(ts/var-vitest)!: exported names are Varar-prefixed",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-22T16:21:35Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "2e4336305e88102543317b4790f698d15594b988",
"body": "BREAKING CHANGE: The environment variable that accepts drift is now\nVARAR_UPDATE in every adapter (vitest, the varar CLI, pytest, unittest,\nminitest, rspec, junit, kotest, gotest and cargotest); VAR_UPDATE is no longer\nrecognized. pytest's flag is now --varar-update and the JUnit/Kotest system\nprope\n[…]\n.update. Set VARAR_UPDATE=1 (or true) where you set\nVAR_UPDATE=1 before.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01GsFvMfF5vRnFsNy2pbAKXn",
"is_bot": false,
"headline": "refactor(spec)!: drift is accepted with VARAR_UPDATE, not VAR_UPDATE",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-22T16:20:30Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "2e394e69aa039cbd7ffe04770e5c6980c6867d76",
"body": "… 0.0.0\n\nEvery package exported `VERSION = '0.0.0'` however it was released, because the\nrelease only ever stamped package.json. The pure core does no file I/O, so it\ncannot read package.json at runtime — release/stamp.sh now rewrites the exported\nconstant alongside the manifest, and prepare.sh stages it with the rest of the\nrelease commit.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01GsFvMfF5vRnFsNy2pbAKXn",
"is_bot": false,
"headline": "fix(ts): published packages report their real version in VERSION, not…",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-22T16:17:13Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "94e5d2ebd10cb516d3f989d8f1915ac35530fed6",
"body": "…tep file\n\nA step file that Node cannot load failed with the raw loader error, which names\nneither cause nor cure. Both cases now say what to do: an unknown \".ts\"\nextension asks for Node 22.18+ or --experimental-strip-types, and an import\nstatement in a CommonJS project asks for \"type\": \"module\". The original error is\nkept as the cause.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01GsFvMfF5vRnFsNy2pbAKXn",
"is_bot": false,
"headline": "feat(ts/var-cli): varar run explains the two reasons Node refuses a s…",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-22T16:15:01Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "991c2e73b83ddec18ec88ad7422af260ac34bac5",
"body": "…steps file loads\n\nThe scaffolded step file is an ES module, so `varar run` failed straight after\n`varar init` in a fresh `npm init -y` project with \"Cannot use import statement\noutside a module\". init now adds \"type\": \"module\" when package.json declares no\ntype, and creates a package.json when ther\n[…]\n is never rewritten — a \"commonjs\" project is left alone with a warning.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01GsFvMfF5vRnFsNy2pbAKXn",
"is_bot": false,
"headline": "feat(ts/var-cli): varar init makes the project ESM so the scaffolded …",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-22T16:15:00Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a140d5992bf6be10dbaf1e1b916428ec577493eb",
"body": "…te, not a partial\n\nBREAKING CHANGE: A stimulus handler's return type is now `C | void` instead of\n`Partial<C> | void`. The runtime always REPLACED state with what the handler\nreturned — there was never a merge — so `Partial<C>` type-checked the one thing\nthe semantics forbid: a return that omits a \n[…]\nrent state to keep the rest, e.g.\n`(state) => ({ ...state, count: 1 })`.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01GsFvMfF5vRnFsNy2pbAKXn",
"is_bot": false,
"headline": "fix(ts)!: stimulus handlers are typed to return the complete next sta…",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-22T16:11:23Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f88864bfb4a811a2ae54b10c1b80c69d37e9d070",
"body": "…or retyped\n\nBREAKING CHANGE: State is no longer deep-frozen at runtime, and TypeScript\nhandlers receive `C` instead of `DeepReadonly<C>`. Mutating state no longer\nthrows at runtime nor fails to type-check — declare your own state type\n`readonly` if you want the compiler to stop you (in Java and Kot\n[…]\ne and a mapped\nreadonly type made unassignable to its own declared type.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01GsFvMfF5vRnFsNy2pbAKXn",
"is_bot": false,
"headline": "feat(spec)!: steps receive the state your factory made, never frozen …",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-22T15:58:54Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "be546c3a75296c256d602aa8f6ab0c54da922650",
"body": "…arp builds\n\ncloudflare/wrangler-action installs wrangler on the fly (`pnpm add\nwrangler@4`), which pulls workerd and miniflare's sharp@0.34 — undecided\nbuild scripts, so pnpm failed the install with ERR_PNPM_IGNORED_BUILDS\nbefore the deploy could run. Both are denied: the job uploads prebuilt\nstati\n[…]\nts, it never starts the local runtime or resizes an image.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01UrKPySMcJmyj1iF7pmHgi2",
"is_bot": false,
"headline": "ci(website): unblock the Cloudflare deploy by deciding workerd and sh…",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-22T14:49:49Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7ad7910317519f2f7c263285ae8e39ba5f64228e",
"body": "varar and varar-core still described themselves as \"Vár\" on RubyGems — the\npre-rename name, in the one field a browsing user reads.\n\nAlso updates the release tooling, where the 1Password vault is now genuinely\ncalled Varar (verified with `op vault get`): the comments and the\nsecrets-not-resolvable e\n[…]\nword pointers moved, because the\nvault really was renamed.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01CKCYL9Qnf5yJXuT3ip1jkR",
"is_bot": false,
"headline": "fix(ruby): describe the gems as Varar, not Vár",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-22T14:36:33Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "e943b98f7e215e7f4defc1e01c558fdd8855b97c",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(java): Update java dependencies (#51)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-22T14:30:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "137401d73341d0ce16710aa937d8144cb841ed32",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(dotnet): Update dependency dotnet-sdk to v10.0.302 (#50)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-22T14:30:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bd4ea97f86a1f7144b98ce6d38abf5b3e914873f",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(rust): Update Rust crate serde_json to v1.0.151 (#52)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-22T14:30:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "28688cfef4bdc8c250fb7763155e63cca8a69782",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(build): Update toolchains (#54)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-22T14:29:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ed0492d8c889cb8b4cd4aaef9b989ec1bb67d78b",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(dotnet): Update dependency coverlet.collector to v10 (#55)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-22T14:29:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6af7b43559a6924117e71a85d636d0d5955790e",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "ci: Update astral-sh/setup-uv action to v9 (#56)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-22T14:29:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "addebc46024fc90266f961320a67240465e3bb2e",
"body": "The samples still introduced themselves as \"Vár\" — in every README title, in\nsource comments, in the pytest/unittest package descriptions, and in the two\nMarkdown specs (\"# Hello, Vár\", \"Try changing to \\\"Hello, Varar!\\\"\").\n\nThe specs are the reason this is more than a text substitution: they are\nsy\n[…]\nVARAR.md and ADR 0008, which record the rename as history.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01CKCYL9Qnf5yJXuT3ip1jkR",
"is_bot": false,
"headline": "docs(examples): call the project Varar, not Vár, in the samples",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-22T13:11:29Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "76ee4ee812aa7e77674bab8fa5e3d46ff6764d6d",
"body": "…#49)\n\nCoding agents are a first-class audience for the docs. Generate /llms.txt and\n/llms-full.txt (starlight-llms-txt), a permissive robots.txt that names the AI\nuser-agents as welcome, and a sitemap (@astrojs/sitemap). Document the\nCloudflare-side 403 fix, which cannot live in the repo, in\ndoc/agent-friendly-docs.md.\n\n\nClaude-Session: https://claude.ai/code/session_016XqgP7C9Bwnds3fCwgju7M\n\nCo-authored-by: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(website): serve llms.txt, robots.txt and a sitemap for agents (…",
"author_name": "Aslak Hellesøy",
"author_login": "aslakhellesoy",
"committed_at": "2026-07-22T13:00:04Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "258d91d58514494f325f548e7d4344396183159b",
"body": "The sync wrote typescript-vitest/pnpm-workspace.yaml with the build-script\nallowlist, but the synced .gitignore still listed that filename, so `git add -A`\nskipped it and the published sample shipped without it — `pnpm install` failed\nwith ERR_PNPM_IGNORED_BUILDS exactly as before, while the file sa\n[…]\nnored: the\nworkflow resolves fresh from the released pins.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01CKCYL9Qnf5yJXuT3ip1jkR",
"is_bot": false,
"headline": "fix(ts): commit the generated pnpm-workspace.yaml in the synced sample",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-22T12:54:16Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d100ea8bb2196f7c4624bfbfde4d5c28fb6cde12",
"body": "The Varar NuGet packages are on nuget.org (0.5.2 and 0.6.1, uploaded by hand),\nbut varar-examples still had no csharp-vstest project — one flag was answering\ntwo different questions. DOTNET_NUGET_ENABLED gated both \"does .NET reach\nconsumers?\" and \"does the release upload it?\", and because uploads a\n[…]\na placeholder x.y.z is stripped from the published csproj.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01CKCYL9Qnf5yJXuT3ip1jkR",
"is_bot": false,
"headline": "feat(dotnet): ship the C# sample in varar-examples",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-22T12:49:18Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "34497851b3d6861abe68c5894bfb80d5e443a153",
"body": "The allowlist said yes to nine tree-sitter grammars on the assumption that\ncompiling a parser is the point of the package. It isn't, for Varar: their\ninstall script is `node-gyp-build`, which produces the NATIVE node binding,\nwhile every consumer here goes through web-tree-sitter and reads the `.was\n[…]\n all eight dialects — pass with every native build\ndenied.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01CKCYL9Qnf5yJXuT3ip1jkR",
"is_bot": false,
"headline": "chore: stop building native tree-sitter bindings nothing loads",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-22T12:36:23Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "9770812eca658b4da8e41f8d51208180ffe55bfc",
"body": "varar-examples' typescript-vitest check failed at `pnpm install` with\nERR_PNPM_IGNORED_BUILDS for tree-sitter-javascript and tree-sitter-typescript.\npnpm 10+ blocks dependency install scripts until they are allowlisted and exits\n1 — in CI as much as interactively. Both grammars arrive transitively t\n[…]\n0 packages: install, build and test all exit 0 (32 tests).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01CKCYL9Qnf5yJXuT3ip1jkR",
"is_bot": false,
"headline": "chore(release): give the synced TypeScript sample a pnpm build allowlist",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-22T12:32:31Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ec5671d8113aea5b4c09f2752299e5f26bda9e1e",
"body": null,
"is_bot": false,
"headline": "chore(release): java back to a SNAPSHOT placeholder after v0.6.1",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-22T12:23:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "331537c6a10c9bc87676bf74c5f96f6997ae783a",
"body": null,
"is_bot": false,
"headline": "Release v0.6.1",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-22T11:41:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "78c8e09f57d016a1748bf26efe452fb17c55966d",
"body": "…ommit\n\nThe Rust port was added to stamp.sh but not to prepare.sh's `git add` list, so\n`make prepare` produced a release commit with Rust still on the previous\nversion and left the tree dirty afterwards — which blocks `make release`\noutright, since cargo refuses to publish from a dirty working direc\n[…]\nstamp.sh touches, and the check fires when one is missing.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01CKCYL9Qnf5yJXuT3ip1jkR",
"is_bot": false,
"headline": "chore(release): fail prepare when a stamped file is left out of the c…",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-22T11:20:58Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b6c6c4b617fe79a0246192cfd7c9754846518230",
"body": "`make prepare` stamped the Rust crates to 0.6.0 but left them uncommitted:\nstamp.sh calls stamp_rust, while prepare.sh's `git add` list still named only\nthe other six ports, so the \"Release v0.6.0\" commit went out without them and\nthe tree stayed dirty afterwards. That blocks the release outright — \n[…]\nged set, and commits the\nstamps this run already produced.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01CKCYL9Qnf5yJXuT3ip1jkR",
"is_bot": false,
"headline": "chore(release): stage the Rust stamps in the release commit",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-22T11:18:56Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "105301d13126e1fd2079ca4ebc9facf491f85c77",
"body": null,
"is_bot": false,
"headline": "Release v0.6.0",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-22T11:11:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c350b70be026f7189ef45cf482e30fc94448f34a",
"body": "The engine still identified itself as `var`, the pre-rename name, so JVM users\nwrote @IncludeEngines(\"var\") against a project called Varar and the JUnit\nPlatform reported failures as \"TestEngine with ID 'var'\".\n\nOnly the engine id changed. The `\"var\"` strings in the core tests are table\ncell fixture\n[…]\nude-engine, IDE run configurations) needs\nthe same change.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01CKCYL9Qnf5yJXuT3ip1jkR",
"is_bot": false,
"headline": "feat(java)!: rename the JUnit TestEngine id from \"var\" to \"varar\"",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-22T11:07:50Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "748b5dccdf812e4d513768f582922ca3279373fd",
"body": "`make prepare` kept failing with \"TestEngine with ID 'var' failed to discover\ntests\", from a NoClassDefFoundError deep inside discovery. The cause was stale\nbuild output, not the port: release/stamp.sh rewrites the sample's pom to the\nrelease version before `mvn install` has published it, an IDE wat\n[…]\nstamps, so it rebuilds when its outputs are tampered with.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01CKCYL9Qnf5yJXuT3ip1jkR",
"is_bot": false,
"headline": "chore(java): clean the Maven sample before testing it",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-22T11:07:49Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "bea9c79c55f928e19fcdd1e6a22ff1b23d4f2d69",
"body": "Three varar-examples checks were permanently red on main.\n\nrust-cargotest and csharp-vstest failed with \"An error occurred trying to start\nprocess '/usr/bin/bash' with working directory '…/csharp-vstest'. No such file\nor directory\": a parked port's sample directory is excluded from the sync, but\nits\n[…]\ne (rust-cargotest\npresent, pinned to the release version).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01CKCYL9Qnf5yJXuT3ip1jkR",
"is_bot": false,
"headline": "chore(release): stop shipping workflows for samples that aren't synced",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-22T10:51:51Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a9f6545a1c0e3d87e57d0cd9a4904084ee989b18",
"body": "The Rust port has been conformance-complete for a while but shipped nowhere:\nCRATES_IO_ENABLED was 0, so 65-crates-io.sh reported OK without publishing. All\nfive crates (varar, varar-core, varar-config, varar-runner, varar-cargotest) are\nfree on crates.io and now publishable.\n\nMaking them publishabl\n[…]\nsame guard that caught\n the Go sample breaking in v0.5.0.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01CKCYL9Qnf5yJXuT3ip1jkR",
"is_bot": false,
"headline": "feat(rust): publish the Rust port to crates.io",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-22T10:46:17Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "97ccf864b19011e40d5309aeed33bc978875824b",
"body": null,
"is_bot": false,
"headline": "chore(release): java back to a SNAPSHOT placeholder after v0.5.2",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-22T09:37:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "83abc6d2b5777f2c8f4d237a021524824f012f07",
"body": null,
"is_bot": false,
"headline": "Release v0.5.2",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-21T14:57:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "712744af24e62a696e989a34e7b3173a062e631a",
"body": "`make python` failed with \"No module named 'var_pytest'\" — the pre-rename\nmodule. The example venv still held the 0.4.2 distributions (pytest_var,\noselvar_var*) alongside the current ones: `uv sync` prunes what the lockfile\nnames, but a RENAMED package leaves its old distribution behind, because uv \n[…]\nis left alone, and one with\nthe offending .pth is removed.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01CKCYL9Qnf5yJXuT3ip1jkR",
"is_bot": false,
"headline": "chore: drop a venv whose editable installs point at vanished paths",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-21T14:06:52Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "1a5b88e8fb55f8350e66cfd1aaadbc9eb55df111",
"body": "Without it the generated nuspec used SDK defaults: authors \"Varar.Core\",\ndescription the literal placeholder \"Package Description\", and no license,\nreadme or project URL. That is what nuget.org would have shown on the public\nlisting, and a published version can never be deleted there — only unlisted\n[…]\ne test projects are untouched — they set IsPackable=false.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01CKCYL9Qnf5yJXuT3ip1jkR",
"is_bot": false,
"headline": "chore(dotnet): give the NuGet packages real packaging metadata",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-21T13:48:58Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6270b75f11c95231e58f0872482499f1d6967254",
"body": "…load\n\nMaven Central moves after crates.io and NuGet (60 -> 69), so everything quicker\nfinishes before the slowest, most failure-prone target runs. It deliberately\ndoes NOT go last: 72-varar-examples pins each sample to a released artifact and\nruns the Go one against the published module, so every r\n[…]\npt —\nverified by running the sync against a scratch clone.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01CKCYL9Qnf5yJXuT3ip1jkR",
"is_bot": false,
"headline": "chore(release): run Maven Central later, and pack NuGet for manual up…",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-21T13:40:10Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "16ae68036dc083fe849ddd2b114f850c4ac3c535",
"body": "Two failure modes from the v0.5.1 run, neither of which was a real defect in\nwhat was being published:\n\nMaven Central: the bundle uploaded and the portal accepted it, but the client\nstopped polling at ~30 minutes while the deployment was still PUBLISHING, so\nthe target reported failure for a deploy \n[…]\nublish is\nindependently idempotent, so continuing is safe.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01CKCYL9Qnf5yJXuT3ip1jkR",
"is_bot": false,
"headline": "chore(release): survive a slow Central deploy and a PyPI rate limit",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-21T09:06:11Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "0d0921de1f3facff4731bb669a8ddeba7f51b158",
"body": "The items were renamed from npm-varar/pypi-varar to npm/pypi; release.env\nalready points at the new names, RELEASING.md still documented the old ones.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01CKCYL9Qnf5yJXuT3ip1jkR",
"is_bot": false,
"headline": "docs: match the renamed 1Password items for npm and PyPI",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-21T08:16:43Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "81686b7d4c0932f4100dcfbd66da92ac3edd794c",
"body": "A target that dies mid-sync leaves the destination wiped and re-rsynced but\nuncommitted — 166 modified files after the go pin failed. The next `make\nrelease` then died on those leftovers rather than on the real cause, which\ndefeats the \"fix the cause and re-run\" contract the release is built on.\nEve\n[…]\nles/ anyway, so a dirty tree has nothing worth preserving.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01CKCYL9Qnf5yJXuT3ip1jkR",
"is_bot": false,
"headline": "chore(release): reset a dirty varar-examples tree instead of refusing",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-21T08:14:41Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "0776305764780f74889beda709ff17b31c3dc08e",
"body": "tag_pattern is a regex, not a glob, and the unanchored \"v[0-9]*\" also matched\nthe Go module tag `go/v0.5.0` (it contains \"v0\"). git-cliff then treated that\ntag as a release: every commit before it was filed under a bogus\n\"## [go/v0.5.0]\" heading, and v0.5.1's own notes — which become the GitHub\nrele\n[…]\nf the changelog.\n\nCHANGELOG.md is regenerated accordingly.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01CKCYL9Qnf5yJXuT3ip1jkR",
"is_bot": false,
"headline": "chore(release): keep per-language module tags out of the changelog",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-21T08:14:41Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "59ec95ccc31f518099dda67edcaf5a48cf3b52ec",
"body": null,
"is_bot": false,
"headline": "Release v0.5.1",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-21T08:11:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "46e7d49e90c315eca5a114b8cc45f7989558b456",
"body": "It predates nothing and could have been conventional, but it is already on\nmain and rewriting pushed history for a commit message is not worth it. Same\ntreatment as the other non-conventional commits already listed: it ships\nnothing to a consumer, so it belongs in no changelog section either way.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01CKCYL9Qnf5yJXuT3ip1jkR",
"is_bot": false,
"headline": "chore(release): exempt the pushed \"Rename secrets\" commit from the lint",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-21T08:09:41Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "6dfb5da4a4f63e1c9532fabb3524abd58fe57328",
"body": "The go/varar external test imported the conformance/bNN fixture packages, which\nare symlinks into the shared corpus. Go's module zip drops symlinks, so the\npublished module lacked those packages — and `go mod tidy` in any consumer\nimporting github.com/varar-dev/varar/go/varar failed with \"module fou\n[…]\n\nconsumers resolve cleanly. v0.5.0 is retracted in go.mod.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01CKCYL9Qnf5yJXuT3ip1jkR",
"is_bot": false,
"headline": "fix(go): keep conformance fixtures out of the published module",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-20T21:12:26Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "eb15931d42e8824cf8cd110662f5754658ed3448",
"body": "@types/vscode had drifted to ~1.125.0 while engines.vscode declares ^1.105.0,\nso `vsce package` refused to build the .vsix (\"@types/vscode greater than\nengines.vscode\"), failing the Open VSX publish. Pin the types back to the\ndeclared floor (~1.105.0) rather than raising the floor, keeping the extension\ncompatible with VS Code 1.105+.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01CKCYL9Qnf5yJXuT3ip1jkR",
"is_bot": false,
"headline": "fix(vscode): align @types/vscode with the supported VS Code floor",
"author_name": "Aslak Hellesøy",
"author_login": null,
"committed_at": "2026-07-20T21:12:26Z",
"body_truncated": false,
"is_coding_agent": true
}
],
"releases_count": 9,
"commits_last_year": 1160,
"latest_release_at": "2026-07-23T09:15:32Z",
"latest_release_tag": "v0.7.0",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 8,
"days_since_latest_release": 7,
"mean_days_between_releases": 2.6
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 62,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "github.com/varar-dev/varar/go",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/varar-dev/varar/go",
"is_deprecated": false,
"latest_version": "v0.7.0",
"repository_url": "https://github.com/varar-dev/varar",
"versions_count": 6,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-23T09:01:26Z",
"latest_version_yanked": null,
"days_since_latest_publish": 7
}
]
},
"popularity": {
"forks": 3,
"stars": 24,
"watchers": 1,
"fork_history": {
"days": [
{
"date": "2026-07-09",
"count": 1
},
{
"date": "2026-07-12",
"count": 1
},
{
"date": "2026-07-15",
"count": 1
}
],
"complete": true,
"collected": 3,
"total_forks": 3
},
"star_history": null,
"open_issues_and_prs": 8
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"examples/typescript-vitest/tsconfig.json",
"typescript/packages/cli/tsconfig.json",
"typescript/packages/config/tsconfig.json",
"typescript/packages/core/tsconfig.json",
"typescript/packages/language/tsconfig.json",
"typescript/packages/lsp/tsconfig.json",
"typescript/packages/runner/tsconfig.json",
"typescript/packages/varar/tsconfig.json",
"typescript/packages/vitest/tsconfig.json",
"typescript/packages/vscode/tsconfig.json",
"typescript/packages/website/tsconfig.json"
],
"toolchain_manifests": [
"dotnet/Varar.Config/Varar.Config.csproj",
"dotnet/Varar.Core.Tests/Varar.Core.Tests.csproj",
"dotnet/Varar.Core/Varar.Core.csproj",
"dotnet/Varar.Runner/Varar.Runner.csproj",
"dotnet/Varar.TestAdapter.Tests/Varar.TestAdapter.Tests.csproj",
"dotnet/Varar.TestAdapter/Varar.TestAdapter.csproj",
"dotnet/Varar.Tests/Varar.Tests.csproj",
"dotnet/Varar/Varar.csproj",
"examples/csharp-vstest/csharp-vstest.csproj",
"examples/go-gotest/go.mod",
"examples/java-junit-gradle/build.gradle.kts",
"examples/java-junit-maven/pom.xml",
"examples/kotlin-junit/build.gradle.kts",
"examples/kotlin-kotest/build.gradle.kts",
"examples/rust-cargotest/Cargo.toml",
"go/conformance/go.mod",
"go/go.mod",
"java/config/pom.xml",
"java/core/pom.xml",
"java/junit/pom.xml",
"java/kotest/pom.xml",
"java/kotlin/pom.xml",
"java/pom.xml",
"java/runner/pom.xml",
"java/varar/pom.xml",
"rust/Cargo.toml",
"rust/cargotest/Cargo.toml",
"rust/config/Cargo.toml",
"rust/core/Cargo.toml",
"rust/runner/Cargo.toml",
"rust/varar/Cargo.toml"
],
"largest_source_bytes": 40370,
"source_files_sampled": 941,
"oversized_source_files": 0,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 13997
},
"dependencies": {
"manifests": [
"go/go.mod",
"java/pom.xml",
"python/pyproject.toml",
"ruby/Gemfile",
"rust/Cargo.toml",
"typescript/package.json"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"crates",
"go",
"maven",
"npm",
"pypi",
"rubygems"
],
"dependencies": [
{
"name": "github.com/cucumber/cucumber-expressions-go",
"manifest": "go/go.mod",
"ecosystem": "go",
"version_constraint": "v6.2.0+incompatible"
},
{
"name": "org.junit:junit-bom",
"manifest": "java/pom.xml",
"ecosystem": "maven",
"version_constraint": "${junit.version}"
},
{
"name": "io.cucumber:cucumber-expressions",
"manifest": "java/pom.xml",
"ecosystem": "maven",
"version_constraint": "${cucumber-expressions.version}"
},
{
"name": "varar",
"manifest": "ruby/Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "varar-config",
"manifest": "ruby/Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "varar-core",
"manifest": "ruby/Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "varar-minitest",
"manifest": "ruby/Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "varar-rspec",
"manifest": "ruby/Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "varar-runner",
"manifest": "ruby/Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 2,
"merged_prs": 45,
"open_issues": 6,
"closed_ratio": 0.625,
"closed_issues": 10,
"closed_unmerged_prs": 8
},
"bus_factor": 2,
"bot_contributors": 3,
"top_contributors": [
{
"type": "User",
"login": "aslakhellesoy",
"commits": 37,
"avatar_url": "https://avatars.githubusercontent.com/u/1000?v=4"
},
{
"type": "User",
"login": "AndreasKoestler",
"commits": 30,
"avatar_url": "https://avatars.githubusercontent.com/u/186307764?v=4"
},
{
"type": "User",
"login": "claude",
"commits": 29,
"avatar_url": "https://avatars.githubusercontent.com/u/81847?v=4"
}
],
"contributors_sampled": 3,
"top_contributor_share": 0.385
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"dotnet.yml",
"go.yml",
"java.yml",
"lint-commits.yml",
"python.yml",
"ruby.yml",
"rust.yml",
"typescript.yml"
],
"has_docs_dir": true,
"linter_configs": [
".rubocop.yml",
"biome.json"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"Cargo.lock",
"Gemfile.lock",
"go.sum",
"pnpm-lock.yaml",
"uv.lock"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 7,
"reason": "binaries present in source code",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "1 out of 1 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 1/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 4 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 9,
"reason": "1 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "1afdf5cc01184f7fecda989e035fa90100474903",
"ran_at": "2026-07-30T13:07:56Z",
"aggregate_score": 4,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-29T22:24:50Z",
"oldest_open_prs": [
{
"number": 53,
"created_at": "2026-07-22T13:41:11Z",
"last_comment_at": "2026-07-22T15:30:45Z",
"last_comment_author": "renovate"
},
{
"number": 68,
"created_at": "2026-07-26T22:16:42Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-29T08:45:10Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 11,
"created_at": "2026-07-02T12:23:22Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 12,
"created_at": "2026-07-02T12:23:24Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 24,
"created_at": "2026-07-18T16:53:31Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 62,
"created_at": "2026-07-22T22:48:06Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 63,
"created_at": "2026-07-22T22:48:17Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 66,
"created_at": "2026-07-23T09:19:28Z",
"last_comment_at": "2026-07-23T09:25:11Z",
"last_comment_author": "aslakhellesoy"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/varar-dev/varar",
"host": "github.com",
"name": "varar",
"owner": "varar-dev"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": "The weighted overall 64 is calibrated to 73 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 64,
"calibrated": 73,
"calibration": "2026-08-02"
}
}
],
"value": 73,
"inputs": {
"security": 40,
"vitality": 76,
"community": 49,
"governance": 60,
"calibration": "2026-08-02",
"engineering": 86,
"ai_readiness": 82,
"weighted_overall_raw": 64
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 76,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"commits_last_year": 1160,
"human_commit_share": 0.91,
"days_since_last_push": 0,
"active_weeks_last_year": 8
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "8/52 weeks with commits",
"points": 5.5,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 8
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "1160 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 1160
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "exceptional",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 9,
"latest_release_tag": "v0.7.0",
"releases_from_tags": false,
"days_since_latest_release": 7,
"mean_days_between_releases": 2.6
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "9 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 9
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 7 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 7
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~2.6 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 2.6
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "weak",
"name": "Community & Adoption",
"value": 49,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 25,
"inputs": {
"forks": 3,
"stars": 24,
"watchers": 1,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "24 stars",
"points": 22.1,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 24
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "3 forks",
"points": 2.5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 3
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "1 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 1
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 77,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [],
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 60,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "moderate",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 53,
"inputs": {
"bus_factor": 2,
"contributors_sampled": 3,
"top_contributor_share": 0.385
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "2 contributor(s) cover half of all commits",
"points": 25.2,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 2
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 38% of commits",
"points": 13.8,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 38
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "3 contributors",
"points": 4.1,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 3
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 4 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 59,
"inputs": {
"merged_prs": 45,
"open_issues": 6,
"closed_issues": 10,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 0.625,
"closed_unmerged_prs": 8,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "62% of issues closed",
"points": 26.2,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 62
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "45/53 decided PRs merged",
"points": 25.5,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 45,
"decided": 53
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 1/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "weak",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 37,
"inputs": {
"followers": 1,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "varar-dev",
"public_repos": 3,
"account_age_days": 10
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "1 followers of varar-dev",
"points": 2.2,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 1,
"login": "varar-dev"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "3 public repos, account ~0 yr old",
"points": 4.4,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 3
}
},
{
"code": "account_age_years",
"params": {
"years": 0
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/varar-dev/varar/go"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 7
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 7 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 7
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "6 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 6
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 86,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "excellent",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "8 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 8
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".rubocop.yml, biome.json",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".rubocop.yml, biome.json"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "1 out of 1 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"topics": [
"acceptance-test-driven-development",
"agentic-coding",
"behaviour-driven-development",
"executable-documents",
"executable-specification",
"markdown",
"specification-by-example"
],
"has_wiki": false,
"homepage": "https://varar.dev",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://varar.dev",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "7 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 7
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "weak",
"name": "Security",
"value": 40,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "weak",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 40,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 4
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "binaries present in source code",
"points": 5.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "1 out of 1 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 1/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 4 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "1 existing vulnerabilities detected",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 1
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "excellent",
"name": "AI Readiness",
"value": 82,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.945,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 13997
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "86 of 91 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 86,
"sampled": 91
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "excellent",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"Cargo.lock",
"Gemfile.lock",
"go.sum",
"pnpm-lock.yaml",
"uv.lock"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"examples/typescript-vitest/tsconfig.json",
"typescript/packages/cli/tsconfig.json",
"typescript/packages/config/tsconfig.json",
"typescript/packages/core/tsconfig.json",
"typescript/packages/language/tsconfig.json",
"typescript/packages/lsp/tsconfig.json",
"typescript/packages/runner/tsconfig.json",
"typescript/packages/varar/tsconfig.json",
"typescript/packages/vitest/tsconfig.json",
"typescript/packages/vscode/tsconfig.json",
"typescript/packages/website/tsconfig.json"
],
"agent_commit_share": 0.82,
"toolchain_manifests": [
"dotnet/Varar.Config/Varar.Config.csproj",
"dotnet/Varar.Core.Tests/Varar.Core.Tests.csproj",
"dotnet/Varar.Core/Varar.Core.csproj",
"dotnet/Varar.Runner/Varar.Runner.csproj",
"dotnet/Varar.TestAdapter.Tests/Varar.TestAdapter.Tests.csproj",
"dotnet/Varar.TestAdapter/Varar.TestAdapter.csproj",
"dotnet/Varar.Tests/Varar.Tests.csproj",
"dotnet/Varar/Varar.csproj",
"examples/csharp-vstest/csharp-vstest.csproj",
"examples/go-gotest/go.mod",
"examples/java-junit-gradle/build.gradle.kts",
"examples/java-junit-maven/pom.xml",
"examples/kotlin-junit/build.gradle.kts",
"examples/kotlin-kotest/build.gradle.kts",
"examples/rust-cargotest/Cargo.toml",
"go/conformance/go.mod",
"go/go.mod",
"java/config/pom.xml",
"java/core/pom.xml",
"java/junit/pom.xml",
"java/kotest/pom.xml",
"java/kotlin/pom.xml",
"java/pom.xml",
"java/runner/pom.xml",
"java/varar/pom.xml",
"rust/Cargo.toml",
"rust/cargotest/Cargo.toml",
"rust/config/Cargo.toml",
"rust/core/Cargo.toml",
"rust/runner/Cargo.toml",
"rust/varar/Cargo.toml"
],
"dependency_bot_commit_share": 0.09
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".rubocop.yml, biome.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".rubocop.yml, biome.json"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "examples/typescript-vitest/tsconfig.json, typescript/packages/cli/tsconfig.json, typescript/packages/config/tsconfig.json, typescript/packages/core/tsconfig.json, typescript/packages/language/tsconfig.json, typescript/packages/lsp/tsconfig.json, typescript/packages/runner/tsconfig.json, typescript/packages/varar/tsconfig.json, typescript/packages/vitest/tsconfig.json, typescript/packages/vscode/tsconfig.json, typescript/packages/website/tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples/typescript-vitest/tsconfig.json, typescript/packages/cli/tsconfig.json, typescript/packages/config/tsconfig.json, typescript/packages/core/tsconfig.json, typescript/packages/language/tsconfig.json, typescript/packages/lsp/tsconfig.json, typescript/packages/runner/tsconfig.json, typescript/packages/varar/tsconfig.json, typescript/packages/vitest/tsconfig.json, typescript/packages/vscode/tsconfig.json, typescript/packages/website/tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "82 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 82,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "9 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 9,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "exceptional",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 40370,
"source_files_sampled": 941,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/941 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 941,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "weak",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"labels": [
"library"
],
"scores": {
"library": 6
},
"primary": "library",
"evidence": [
{
"tier": "distribution",
"label": "library",
"source": "registry:go",
"weight": 6
}
],
"artifacts": [],
"confidence": "medium",
"host_extension": false,
"runs_as_process": false,
"consumed_by_code": true
},
"metrics_version": "2.3.1"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-30T13:08:05.430733Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/v/varar-dev/varar.svg",
"full_name": "varar-dev/varar",
"license_state": "standard",
"license_spdx": "MIT"
}
Registros relacionados
Repositorios inspeccionados que comparten etiquetas de catálogo o ecosistemas con varar-dev/varar. Leer en paralelo →
Las puntuaciones son señales, no garantías. Reflejan prácticas públicamente visibles en GitHub; no son una auditoría de código ni una garantía de seguridad.
Los datos ausentes se excluyen y los pesos se renormalizan; nunca se puntúan como cero. La metodología es versionada y abierta: métricas v2.3.1, esquema v0.27.0 — metodología completa · wiki de métricas.
