Registro públicoEn riesgo
Informe de salud del softwareesquema 0.26.0 · métricas 1.13.0 · 2026-07-22 03:11 UTC
voxgig-sdk / aareguru-sdk
Voxgig SDK for aareguru
voxgig-sdk/aareguru-sdk tiene un índice de salud de 38 sobre 100, lo que lo sitúa en la banda En riesgo. Su puntuación más alta es AI Readiness (72/100) y la más baja, Community & Adoption (21/100). Se actualizó por última vez hace 4 días. Una sola persona concentra la mayor parte del trabajo reciente.
38
global / 100Índice de salud del software
Las métricas se agrupan en categorías ponderadas sobre una escala de 1 a 100. El resultado global parte de su media; cuando la evidencia pública activa la Política de Jurisdicciones de Alto Riesgo, la calificación se ajusta y recibe el límite 49 (En riesgo). Preparación para IA queda fuera.
38
Excelente85-100Ejemplar; cumple prácticamente todos los criterios evaluados
Bueno70-84Saludable; carencias menores
Moderado50-69Aceptable con carencias notables; se recomienda revisión
En riesgo30-49Debilidades significativas; su adopción exige cautela
Crítico1-29Problemas graves (proyecto abandonado, un solo mantenedor, sin higiene)
Perfil de puntuación
Cada eje es una categoría. La forma importa más que la media: un proyecto sano llena toda la figura, mientras que un perfil de picos y cráteres indica que la fortaleza en una dimensión enmascara el riesgo en otra.
Titularidad
voxgig-sdkOrganización
2 seguidores568 repositorios públicosdesde ago 2025
Este repositorio está respaldado por una organización: una custodia compartida y responsable que puede sobrevivir a cualquier mantenedor individual.
Ecosistemas de paquetes
| Registro | Paquete | Versión | Descargas / mes | Versiones | Última publicación |
|---|---|---|---|---|---|
| Go | github.com/voxgig-sdk/aareguru-sdk/go | v0.1.8 | - | 9 | hace 5 días |
| Go | github.com/voxgig-sdk/aareguru-sdk/go-cli | v0.1.8 | - | 9 | hace 5 días |
| Go | github.com/voxgig-sdk/aareguru-sdk/go-mcp | v0.1.8 | - | 9 | hace 5 días |
Métricas por categoría
Vitalidad
¿Está vivo el proyecto: se escribe código y se publican versiones?
32
Actividad de desarrollo
53Moderado
Cómo se puntúa
| 36/36 | Recencia de push — último push hace 4 días |
| 4.2/36 | Cadencia de commits — 6/52 semanas con commits |
| 13/18 | Volumen de commits — 27 commits en el último año |
| 0/10 | OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully |
Datos de entrada utilizados
| commits_last_year | 27 |
| human_commit_share | 1 |
| days_since_last_push | 4 |
| active_weeks_last_year | 6 |
Disciplina de publicación
1Crítico
Cómo se puntúa
| 0/27 | Publica versiones — sin versiones publicadas |
| 0/36 | Recencia de las versiones — sin versiones |
| 0/27 | Cadencia de publicación — sin versiones |
| 0/10 | OpenSSF Scorecard: Signed-Releases — sin datos |
Datos de entrada utilizados
| releases_count | 0 |
Excluidos de la puntuación (sin datos o no aplicable): OpenSSF Scorecard: Signed-Releases. Los pesos restantes se han renormalizado.
Comunidad y Adopción
¿Tiene el proyecto usuarios, descargas, atención y unas condiciones acogedoras para quienes contribuyen?
21
Popularidad y adopción
1Crítico
Cómo se puntúa
| 0/60 | Estrellas — 0 estrellas |
| 0/25 | Forks — 0 forks |
| 0/15 | Observadores — 0 observadores |
Datos de entrada utilizados
| forks | 0 |
| stars | 0 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Salud de la comunidad
44En riesgo
Cómo se puntúa
| 22.5/22.5 | README |
| 16.9/22.5 | Licencia — archivo de licencia presente, no es una licencia reconocida |
| 0/18 | Guía CONTRIBUTING |
| 0/13.5 | Código de conducta |
| 0/7.2 | Plantilla de issues |
| 0/6.3 | Plantilla de PR |
Datos de entrada utilizados
| has_readme | sí |
| has_license | sí |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Sostenibilidad y Gobernanza
¿Sobrevivirá el proyecto a sus personas: factor bus, capacidad de respuesta, quién lo respalda y mantenimiento del paquete?
36
Cómo se puntúa
| 9/54 | Factor bus — la mitad de los commits recae en 1 contribuyente(s) |
| 0/22.5 | Distribución de commits — el principal contribuyente firma el 100% de los commits |
| 1.4/13.5 | Amplitud de contribuyentes — 1 contribuyentes |
| 3/10 | OpenSSF Scorecard: Contributors — project has 1 contributing companies or organizations -- score normalized to 3 |
Datos de entrada utilizados
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
Cómo se puntúa
| 0/46.8 | Resolución de issues — sin issues o sin datos |
| 0/38.3 | Aceptación de PR — sin PR decididos o sin datos |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/27 approved changesets -- score normalized to 0 |
Datos de entrada utilizados
| merged_prs | 0 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 0 |
Excluidos de la puntuación (sin datos o no aplicable): Resolución de issues, Aceptación de PR. Los pesos restantes se han renormalizado.
Propiedad y custodia
48En riesgo
Cómo se puntúa
| 30/30 | Respaldo de la propiedad — propiedad de una organización |
| 0/20 | Dominio verificado |
| 3.4/25 | Alcance del propietario — 2 seguidores de voxgig-sdk |
| 14.9/25 | Trayectoria — 568 repos públicos, cuenta de ~0 años |
Datos de entrada utilizados
| followers | 2 |
| owner_type | Organization |
| is_verified | — |
| owner_login | voxgig-sdk |
| public_repos | 568 |
| account_age_days | 349 |
Mantenimiento de paquetes
100Excelente
Cómo se puntúa
| 25/25 | Publicado y resoluble — 3 paquete(s) en go |
| 35/35 | Recencia de publicación — última publicación hace 5 días |
| 20/20 | Historial de versiones — 9 versiones en el registro |
| 20/20 | No obsoleto — activo, ni obsoleto ni retirado |
Datos de entrada utilizados
| packages | github.com/voxgig-sdk/aareguru-sdk/go, github.com/voxgig-sdk/aareguru-sdk/go-cli, github.com/voxgig-sdk/aareguru-sdk/go-mcp |
| ecosystems | go |
| any_deprecated | no |
| min_days_since_publish | 5 |
Calidad de Ingeniería
¿Existen unas prácticas mínimas de ingeniería y documentación?
56
Prácticas de ingeniería
60Moderado
Cómo se puntúa
| 24/24 | Flujos de trabajo de CI — 1 flujo(s) de trabajo |
| 24/24 | Pruebas presentes |
| 0/16 | Configuración de linter |
| 0/9.6 | Hooks de pre-commit |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — sin datos |
Datos de entrada utilizados
| has_ci | sí |
| has_tests | sí |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Excluidos de la puntuación (sin datos o no aplicable): OpenSSF Scorecard: CI-Tests. Los pesos restantes se han renormalizado.
Documentación
50Moderado
Cómo se puntúa
| 30/30 | README |
| 0/25 | Directorio de documentación |
| 0/15 | Sitio de documentación / página del proyecto |
| 10/10 | Descripción del repositorio |
| 0/10 | Topics |
| 10/10 | Wiki |
Datos de entrada utilizados
| topics | — |
| has_wiki | sí |
| homepage | — |
| has_readme | sí |
| has_docs_dir | no |
| has_description | sí |
Seguridad
¿Son sólidas las prácticas visibles de seguridad y de cadena de suministro, sin exposición jurisdiccional de alto riesgo sin resolver?
44
Postura de seguridad
44En riesgo
Cómo se puntúa
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — sin datos |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/27 approved changesets -- score normalized to 0 |
| 0.8/2.5 | Contributors — project has 1 contributing companies or organizations -- score normalized to 3 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.2/2.5 | Licencia — license file detected |
| 0/7.5 | Maintained — project was created within the last 90 days. Please review its contents carefully |
| 0/5 | Packaging — sin datos |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — no SAST tool detected |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — sin datos |
| 7.5/7.5 | Token-Permissions — GitHub workflow tokens follow principle of least privilege |
| 6.8/7.5 | Vulnerabilities — 1 existing vulnerabilities detected |
Datos de entrada utilizados
| source | openssf_scorecard |
| checks_evaluated | 15 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 3 |
| scorecard_aggregate | 4,4 |
Excluidos de la puntuación (sin datos o no aplicable): ci_tests, packaging, signed_releases. Los pesos restantes se han renormalizado.
Preparación para IA
¿Hasta qué punto está el repositorio preparado para desarrollarse y mantenerse con agentes de codificación de IA? Es una insignia independiente y experimental — peso 0,0, de modo que se presenta por separado y no afecta a la puntuación de salud global.
72
Contexto y guía para agentes
84Bueno
Cómo se puntúa
| 45/45 | Instrucciones para agentes — AGENTS.md, CLAUDE.md, go/AGENTS.md, go/CLAUDE.md, lua/AGENTS.md, lua/CLAUDE.md, php/AGENTS.md, php/CLAUDE.md, py/AGENTS.md, py/CLAUDE.md, rb/AGENTS.md, rb/CLAUDE.md, ts/AGENTS.md, ts/CLAUDE.md, ts/src/feature/test/AGENTS.md, ts/src/feature/test/CLAUDE.md |
| 0/15 | Documentación legible por máquinas (llms.txt) |
| 39.5/40 | Historial de commits legible — 20 de 27 commits humanos declaran su intención (asunto estructurado o cuerpo explicativo) |
Datos de entrada utilizados
| has_llms_txt | no |
| legible_history_share | 0,741 |
| agent_instruction_files | AGENTS.md, CLAUDE.md, go/AGENTS.md, go/CLAUDE.md, lua/AGENTS.md, lua/CLAUDE.md, php/AGENTS.md, php/CLAUDE.md, py/AGENTS.md, py/CLAUDE.md, rb/AGENTS.md, rb/CLAUDE.md, ts/AGENTS.md, ts/CLAUDE.md, ts/src/feature/test/AGENTS.md, ts/src/feature/test/CLAUDE.md |
| agent_instruction_max_bytes | 6673 |
Cómo se puntúa
| 18/18 | Arranque con un solo comando — .sdk/tm/go/Makefile, .sdk/tm/lua/Makefile, .sdk/tm/php/Makefile, .sdk/tm/py/Makefile, .sdk/tm/rb/Makefile, .sdk/tm/ts/Makefile, Makefile, go-cli/Makefile, go-mcp/Makefile, go/Makefile, lua/Makefile, php/Makefile, py/Makefile, rb/Makefile, ts/Makefile |
| 22/22 | Pruebas automatizadas |
| 0/11 | Configuración de lint / formato |
| 11/11 | Verificación estática de tipos — .sdk/src/cmp/go/tsconfig.json, .sdk/src/cmp/lua/tsconfig.json, .sdk/src/cmp/php/tsconfig.json, .sdk/src/cmp/py/tsconfig.json, .sdk/src/cmp/rb/tsconfig.json, .sdk/src/cmp/ts/tsconfig.json, .sdk/src/tsconfig.json, .sdk/tm/ts/src/tsconfig.json, .sdk/tm/ts/test/tsconfig.json, py/entity/py.typed, py/py.typed, ts/src/tsconfig.json, ts/test/tsconfig.json |
| 10/10 | Entorno reproducible — lockfile |
| 10/10 | Práctica demostrada con agentes — 18 de los últimos 27 commits con autoría o crédito de agente |
| 0/8 | Mantenimiento automatizado — no se observan actualizaciones automáticas de dependencias |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Datos de entrada utilizados
| has_nix | no |
| has_tests | sí |
| lockfiles | go.sum |
| has_dockerfile | no |
| typed_language | sí |
| bootstrap_files | .sdk/tm/go/Makefile, .sdk/tm/lua/Makefile, .sdk/tm/php/Makefile, .sdk/tm/py/Makefile, .sdk/tm/rb/Makefile, .sdk/tm/ts/Makefile, Makefile, go-cli/Makefile, go-mcp/Makefile, go/Makefile, lua/Makefile, php/Makefile, py/Makefile, rb/Makefile, ts/Makefile |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | .sdk/src/cmp/go/tsconfig.json, .sdk/src/cmp/lua/tsconfig.json, .sdk/src/cmp/php/tsconfig.json, .sdk/src/cmp/py/tsconfig.json, .sdk/src/cmp/rb/tsconfig.json, .sdk/src/cmp/ts/tsconfig.json, .sdk/src/tsconfig.json, .sdk/tm/ts/src/tsconfig.json, .sdk/tm/ts/test/tsconfig.json, py/entity/py.typed, py/py.typed, ts/src/tsconfig.json, ts/test/tsconfig.json |
| agent_commit_share | 0,667 |
| toolchain_manifests | go-cli/go.mod, go-mcp/go.mod, go/go.mod |
| dependency_bot_commit_share | 0 |
Legibilidad del código para modelos
100Excelente
Cómo se puntúa
| 45/45 | Código verificable por tipos — TypeScript (tipado estático) |
| 54.5/55 | Tamaños de archivo manejables — 8/935 archivos fuente de más de 60 KB |
Datos de entrada utilizados
| primary_language | TypeScript |
| largest_source_bytes | 116.720 |
| source_files_sampled | 935 |
| oversized_source_files | 8 |
Interfaces legibles por máquina
20Crítico
Cómo se puntúa
| 0/40 | Esquema de API (OpenAPI/GraphQL/proto) |
| 20/20 | Servidor MCP |
| 0/40 | Ejemplos ejecutables |
Datos de entrada utilizados
| example_dirs | — |
| has_mcp_signal | sí |
| api_schema_files | — |
Datos clave
0estrellas de GitHub
1contribuidores
27commits en los últimos 12 meses
4días desde el último push
0versiones publicadas
1factor bus
0issues abiertas
Go, npm, Packagist, PyPI, RubyGemsecosistemas de paquetes
Advertencias de recopilación de datos
- Could not fetch npm package '@voxgig-sdk/aareguru' from its registry
- Could not fetch npm package 'build-aareguru-sdk' from its registry
- Could not fetch packagist package 'voxgig-sdk/aareguru' from its registry
- Could not fetch pypi package 'voxgig-sdk-aareguru' from its registry
- Could not fetch rubygems package 'voxgig-sdk-aareguru' from its registry
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Más detalle
OpenSSF Scorecard 4.4 / 10
4.4agregado
Evaluación de seguridad independiente y agnóstica en cuanto a herramientas, procedente del proyecto de código abierto OpenSSF Scorecard. Cada comprobación premia una práctica de seguridad, no la herramienta de un proveedor concreto. Las comprobaciones que Scorecard no pudo determinar se marcan como n/d y se excluyen de la puntuación de seguridad (nunca se cuentan como cero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| n/d | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/27 approved changesets -- score normalized to 0 |
| 3 | Contributors | project has 1 contributing companies or organizations -- score normalized to 3 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 9 | License | license file detected |
| 0 | Maintained | project was created within the last 90 days. Please review its contents carefully |
| n/d | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | no SAST tool detected |
| 10 | Security-Policy | security policy file detected |
| n/d | Signed-Releases | no releases found |
| 10 | Token-Permissions | GitHub workflow tokens follow principle of least privilege |
| 9 | Vulnerabilities | 1 existing vulnerabilities detected |
Dependencias directas 7
| Registro | Paquete | Restricción de versión | Manifiesto |
|---|---|---|---|
| Go | github.com/voxgig-sdk/aareguru-sdk/go | v0.0.0 | go-cli/go.mod |
| Go | github.com/aql-lang/aql/eng/go | v0.0.1 | go-cli/go.mod |
| Go | github.com/voxgig-sdk/aareguru-sdk/go | v0.0.0 | go-mcp/go.mod |
| Go | github.com/modelcontextprotocol/go-sdk | v1.6.0 | go-mcp/go.mod |
| PyPI | requests | >=2.33 | py/pyproject.toml |
| RubyGems | json | — | rb/Gemfile |
| RubyGems | minitest | — | rb/Gemfile |
Todas las dependencias no recopilado
No fue posible recopilar el conjunto de dependencias resuelto para este informe: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Informe JSON sin procesar legible por máquina
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 1502,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 917288,
"Lua": 795365,
"PHP": 1011863,
"Hack": 5253,
"Ruby": 634840,
"Python": 807592,
"Makefile": 37021,
"JavaScript": 1030,
"TypeScript": 1340650
},
"pushed_at": "2026-07-17T20:02:44Z",
"created_at": "2026-05-06T14:35:00Z",
"owner_type": "Organization",
"updated_at": "2026-07-17T20:02:58Z",
"description": "Voxgig SDK for aareguru",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "main",
"license_spdx_raw": "NOASSERTION",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript",
"PHP",
"Go",
"Python",
"Lua"
]
},
"owner": {
"blog": null,
"name": null,
"type": "Organization",
"login": "voxgig-sdk",
"company": null,
"location": null,
"followers": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/225054013?v=4",
"created_at": "2025-08-06T17:30:25Z",
"is_verified": null,
"public_repos": 568,
"account_age_days": 349
},
"license": {
"state": "custom",
"spdx_id": null,
"raw_spdx": "NOASSERTION",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [],
"recent_commits": [
{
"oid": "9fd8af79462877aed62df531f6c57ae5a6948af7",
"body": "…s, robust errors\n\nEvery doc example is model-driven and verified in test mode: REFERENCE imports use the\nreal module name/casing; list/load examples use real fields and type-correct ids; intros,\ninterface tables and op lists show only operations the entity actually has; field types\nrender as native\n[…]\nk-focused README restructure. Generated by\n@voxgig/sdkgen.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01YQNji78yxxhpefjAWweKMv",
"is_bot": false,
"headline": "Regenerate: doc-correctness pass — model-driven examples, native type…",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-07-17T16:47:43Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a209165ba93ea72fc7939c0f9c2f72497b2c60fb",
"body": "…s, robust errors\n\nEvery doc example is model-driven and verified in test mode: REFERENCE imports use the\nreal module name/casing; list/load examples use real fields and type-correct ids; intros,\ninterface tables and op lists show only operations the entity actually has; field types\nrender as native\n[…]\nk-focused README restructure. Generated by\n@voxgig/sdkgen.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01YQNji78yxxhpefjAWweKMv",
"is_bot": false,
"headline": "Regenerate: doc-correctness pass — model-driven examples, native type…",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-07-17T13:17:51Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "39c64cb6144318fa5da377713b81018d5d476dfc",
"body": "…s, robust errors\n\nEvery doc example is model-driven and verified in test mode: REFERENCE imports use the\nreal module name/casing; list/load examples use real fields and type-correct ids; intros,\ninterface tables and op lists show only operations the entity actually has; field types\nrender as native\n[…]\nk-focused README restructure. Generated by\n@voxgig/sdkgen.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01YQNji78yxxhpefjAWweKMv",
"is_bot": false,
"headline": "Regenerate: doc-correctness pass — model-driven examples, native type…",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-07-17T12:59:29Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "2cd2023d17d5fe88b37c6babfb6d6d1b38b5d1f6",
"body": "These were machine-local-path symlinks accidentally committed (the .gitignore\nnode_modules/ rule matches directories, not symlinks). Untrack them and harden\n.gitignore so regeneration no longer re-adds them.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01APkLcZpAdg4Rmqz8Zg11wX",
"is_bot": false,
"headline": "Stop tracking node_modules symlinks (.sdk/node_modules, ts/node_modules)",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-07-16T18:02:14Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a22d86aa2b45b5b61479260e04d2593ba1b1b72d",
"body": "…s, robust errors\n\nEvery doc example is model-driven and verified in test mode: REFERENCE imports use the\nreal module name/casing; list/load examples use real fields and type-correct ids; intros,\ninterface tables and op lists show only operations the entity actually has; field types\nrender as native\n[…]\nk-focused README restructure. Generated by\n@voxgig/sdkgen.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01YQNji78yxxhpefjAWweKMv",
"is_bot": false,
"headline": "Regenerate: doc-correctness pass — model-driven examples, native type…",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-07-16T11:29:10Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "1e3af7953e0d3b557626511d6a6cd92fab1d68f9",
"body": "`go build` failed with \"missing go.sum entry\" for the pinned external\ndeps (aql/eng/go, modelcontextprotocol/go-sdk); go.mod also lacked the\nindirect requirements and a high-enough go directive (aql/eng/go needs\n1.24.7, MCP go-sdk needs 1.25). Content matches what sdkgen now emits\nat generation time (voxgig/sdkgen ad62801).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_017Uy7UbwythZMYbnA7yFRAG",
"is_bot": false,
"headline": "go-cli/go-mcp: add go.sum + fix go.mod so the modules build from a clone",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-07-10T19:48:41Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a139a7fd8bfc594b0e6a86168b1794ea810fea98",
"body": "Adds AGENTS.md/CLAUDE.md agent guides at root, per-language and feature\nlevels (local @voxgig/sdkgen 1.3.7 + create-sdkgen 0.16.2, .aontu model).\nCarries the keyless-auth fix (no bogus apikey for public APIs) and the\ndoc-correctness pass. Generated by @voxgig/sdkgen.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01YQNji78yxxhpefjAWweKMv",
"is_bot": false,
"headline": "Regenerate with agent-guide toolchain",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-07-10T01:06:33Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "697c61de41b6b829435358a7b26c403a9956f2b6",
"body": "Rebuilt through the pub pipeline now that pub-generate seeds the enriched\napi-info: the intro shows the English description (\"Real-time water\ntemperature, weather, and flow data for the Aare River in Switzerland.\")\ninstead of the raw German spec text, and the attribution note reads\n\"Metadata kindly \n[…]\nvia sdkgen 1.3.7).\n\nThe English description propagates to all per-language READMEs. Verified\nts 137, go ok. Version held at 0.1.6.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Regenerate README with English description + one-word \"Metadata\"",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-07-09T17:14:14Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ee38b0fa557d4d72e44484325b4c8a01cdcf36d5",
"body": "Rebuilt through the migrated pub pipeline (apidef 6.3.5, model 9.2.2,\nsdkgen 1.3.6, create-sdkgen 0.16; .sdk model is now .aontu):\n- README gains the \"Offline unit testing\" section (after \"Entities, not\n endpoints\"), the Voxgig learn-more link, the go-cli/go-mcp rows in the\n Packages table, and th\n[…]\nurce note requires @voxgig/sdkgen 1.3.6 (a local link was\nused here); publish 1.3.6 and pin ^1.3.6 to reproduce from the registry.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Regenerate SDK with the latest toolchain and README template",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-07-09T16:53:46Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "61fb2d55b8db932b9a199f9d8ba605a72f31cd3f",
"body": "…s, robust errors\n\nEvery doc example is model-driven and verified in test mode: REFERENCE imports use the\nreal module name/casing; list/load examples use real fields and type-correct ids; intros,\ninterface tables and op lists show only operations the entity actually has; field types\nrender as native\n[…]\nk-focused README restructure. Generated by\n@voxgig/sdkgen.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01YQNji78yxxhpefjAWweKMv",
"is_bot": false,
"headline": "Regenerate: doc-correctness pass — model-driven examples, native type…",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-07-05T22:27:16Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "71c44389f8ebd72c6fde60ecc8771d2072d935fe",
"body": "… tests\n\nEntity access is the capitalised client.Entity() factory (lowercase facade\nremoved); example result shapes now match the SDK (bare list/load/create returns,\n{ok,data} envelope only for direct); new per-language README-snippet unit tests;\ngrammar fixes (vowel article + plural); python types \n[…]\ns-the-entity correctness fix. Generated by @voxgig/sdkgen.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01YQNji78yxxhpefjAWweKMv",
"is_bot": false,
"headline": "Regenerate: capitalised entity access, correct result shapes, snippet…",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-07-05T00:01:42Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "752aa0c1b23a7539bf67a022e754014e8e2a10f0",
"body": "Corrected doc examples (real entity names, grammar, scoped imports, valid env\nvars), no auth examples for no-auth APIs, idiomatic exceptions (py/php/rb),\npublish-pending install + git-tag vendoring, packaging fixes (py-modules,\nphp classmap autoload), idiomatic client.<entity> facades, and typed mod\n[…]\nclasses/structs/annotations). Generated by @voxgig/sdkgen.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01YQNji78yxxhpefjAWweKMv",
"is_bot": false,
"headline": "Regenerate: SDK code-review refactor (P0-P3)",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-07-04T10:46:14Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3d2b01215d02bc591bdea29dc34da4c0141f8fa0",
"body": "Standard unofficial/non-affiliation disclosure, install commands matching the\npublished package names, correct voxgig-sdk repository/homepage/issues URLs,\ndeduped deps, and root LICENSE/SECURITY.md/CHANGELOG. Generated by @voxgig/sdkgen.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01YQNji78yxxhpefjAWweKMv",
"is_bot": false,
"headline": "Regenerate: publish-readiness metadata",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-07-03T16:35:22Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "c86e8f615bf393acab0d2dd0b59e570333ad9a05",
"body": "All eight ports deploy git tags only; registry publication is modeled\nper-target in .sdk/model/target/<t>.jsonic (publish.registry.active)\nand currently inactive everywhere. Root Makefile generated from the\nmodel by @voxgig/sdkgen.",
"is_bot": false,
"headline": "Regenerate: tag-only publication model (npm registry declared, inactive)",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-07-03T12:34:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce1e14304273725eebbe19c2db0d87b12c5e66bc",
"body": "…1), aontu 0.47.0 unify perf fixes\n\nlive-test: pass",
"is_bot": false,
"headline": "Regenerate SDK: root deploy Makefile, rb gemspec dedup (sdkgen d7dcc6…",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-07-02T23:06:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "333e0906fff0e9e036084997c40fbdb930d94100",
"body": "…1), aontu 0.47.0 unify fixes\n\nlive-test: pass",
"is_bot": false,
"headline": "Regenerate SDK: root deploy Makefile, rb gemspec dedup (sdkgen d7dcc6…",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-07-02T22:57:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6691784353b2b9e132fd6f8a28dbc6162cdf87f4",
"body": "- `.sdk/model/api/api-info.jsonic` no longer carries the upstream\n contact email, name, url, or maintainer name. Description and\n license_md rewritten to omit personal identifiers.\n- README picks up @voxgig/sdkgen 2d5cb29 — the contact line, voxgig.com\n promo block and \"Browse 500+\" / DX-consulting CTAs are replaced by\n a single link to https://github.com/voxgig/sdkgen.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "README: strip personal/contact data + sdkgen footer",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-06-03T16:49:03Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "780e5f69834890f7496f81633dc3a15b34646df7",
"body": "Picks up @voxgig/sdkgen 0a23f2b — the \"Every request must include...\"\nblock under \"## 30-second quickstart\" is gone. The 30s quickstart now\nopens straight with the lead-language code block.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "README: drop required_params_md from info.jsonic",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-06-03T16:36:59Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a1cee6dadc10ad02443e5c68f07dd0c923ed77ba",
"body": "Picks up @voxgig/sdkgen 8334498:\n- TS/PHP/Python/Ruby/Lua quickstart examples drop empty options\n containers — `new <Name>SDK()`, `sdk.new()`, `<Name>SDK()`,\n `<Name>SDK.new` (idiomatic Ruby form), `<Name>SDK::test()` etc.\n- New Go `sdk.New()` / `sdk.Test()` aliases (declared in `go/aareguru.go`)\n\n[…]\n\ncopies — rsynced by hand from voxgig/sdkgen/project/.sdk/src/cmp/.\n\nts: 131 tests pass; go test ./... passes; SDK builds cleanly.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Regenerate with v1.2.4 sdkgen: no-arg new() and Test() aliases",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-06-03T14:52:38Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d957339c958c4c37a506074bdfbf2225125dc91a",
"body": "… cleanup\n\nPicks up @voxgig/sdkgen commit 2b23693:\n- `.sdk/model/api/api-info.jsonic` declares `info.auth: false` (aare.guru\n is a public API, no key required). isAuthActive() now honors this and\n drops the apikey: env-var from every generated example and from the\n SDK constructor itself.\n- All q\n[…]\n templates (.sdk/src/cmp/<lang>/Readme*.ts) are frozen scaffold\ncopies — rsynced by hand from voxgig/sdkgen/project/.sdk/src/cmp/.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Regenerate with v1.2.3 sdkgen: no-auth flag, ReadmeExample test, null…",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-06-03T14:28:36Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "1567fdf596a98b246eefe845da5176d2be00e680",
"body": "Picks up the new ReadmeTop structure from @voxgig/sdkgen (see sdkgen\ncommit d36a321): tagline + value-prop, About <API>, per-language\ninstall blocks, 30-second quickstart in TypeScript, surface table\n(SDK/CLI/REPL/MCP), entities table with descriptions, secondary\nquickstarts, testing, How it works, \n[…]\ngen), so the ReadmeIntro_<lang>.ts and ReadmeTopQuick_ts\nupdates were rsynced in by hand from voxgig/sdkgen/project/.sdk/src/cmp/.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "README: regenerate with v1.2.2 sdkgen templates + rich aare.guru info",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-06-03T13:42:20Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f467969e30fef4814263a0dca77c2d4862c4c7f0",
"body": "live-test: pass",
"is_bot": false,
"headline": "Rebuild SDK with latest sdkgen + add go-cli and go-mcp targets",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-05-18T16:11:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "da6611183c89a629fbbe4929e057976449f6d643",
"body": "live-test: fail",
"is_bot": false,
"headline": "Rebuild SDK with latest sdkgen + add go-cli target",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-05-17T15:21:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c367ae3860ef6cff0315b1ceb747c4c8dcfb477d",
"body": "- module path: github.com/voxgig-sdk/aareguru-sdk → .../aareguru-sdk/go\n- Inline utility/struct as a package within the main module (drop nested\n go.mod and the require/replace pair for github.com/voxgig/struct).\n- Update all internal import paths accordingly.\n\nMakes the module resolvable via `go get github.com/voxgig-sdk/aareguru-sdk/go`\nonce a `go/vX.Y.Z` tag is pushed (Go monorepo subdirectory convention).",
"is_bot": false,
"headline": "Refactor go module for subdirectory consumption",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-05-17T11:04:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95979a6176b6cd22455052f83ace1c15bd248b7f",
"body": "…ig/create-sdkgen 0.15.0",
"is_bot": false,
"headline": "Regenerate SDK with @voxgig/apidef 6.2.0, @voxgig/sdkgen 1.2.1, @voxg…",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-05-15T13:49:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c0a6f278b1b1cf6746b09109312edfd5b7634ed1",
"body": null,
"is_bot": false,
"headline": "Regenerate SDK",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-05-06T14:49:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e76532b50da7d3c54a44528c4b9244b33ce15ae9",
"body": null,
"is_bot": false,
"headline": "Initial commit",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-05-06T14:35:01Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 0,
"commits_last_year": 27,
"latest_release_at": null,
"latest_release_tag": null,
"releases_from_tags": false,
"days_since_last_push": 4,
"active_weeks_last_year": 6,
"days_since_latest_release": null,
"mean_days_between_releases": null
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 62,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/voxgig-sdk/aareguru-sdk/go",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/voxgig-sdk/aareguru-sdk/go",
"is_deprecated": false,
"latest_version": "v0.1.8",
"repository_url": "https://github.com/voxgig-sdk/aareguru-sdk",
"versions_count": 9,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-16T11:29:10Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
},
{
"name": "github.com/voxgig-sdk/aareguru-sdk/go-cli",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/voxgig-sdk/aareguru-sdk/go-cli",
"is_deprecated": false,
"latest_version": "v0.1.8",
"repository_url": "https://github.com/voxgig-sdk/aareguru-sdk",
"versions_count": 9,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-16T11:29:10Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
},
{
"name": "github.com/voxgig-sdk/aareguru-sdk/go-mcp",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/voxgig-sdk/aareguru-sdk/go-mcp",
"is_deprecated": false,
"latest_version": "v0.1.8",
"repository_url": "https://github.com/voxgig-sdk/aareguru-sdk",
"versions_count": 9,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-16T11:29:10Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
}
]
},
"popularity": {
"forks": 0,
"stars": 0,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0
},
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": true,
"bootstrap_files": [
".sdk/tm/go/Makefile",
".sdk/tm/lua/Makefile",
".sdk/tm/php/Makefile",
".sdk/tm/py/Makefile",
".sdk/tm/rb/Makefile",
".sdk/tm/ts/Makefile",
"Makefile",
"go-cli/Makefile",
"go-mcp/Makefile",
"go/Makefile",
"lua/Makefile",
"php/Makefile",
"py/Makefile",
"rb/Makefile",
"ts/Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
".sdk/src/cmp/go/tsconfig.json",
".sdk/src/cmp/lua/tsconfig.json",
".sdk/src/cmp/php/tsconfig.json",
".sdk/src/cmp/py/tsconfig.json",
".sdk/src/cmp/rb/tsconfig.json",
".sdk/src/cmp/ts/tsconfig.json",
".sdk/src/tsconfig.json",
".sdk/tm/ts/src/tsconfig.json",
".sdk/tm/ts/test/tsconfig.json",
"py/entity/py.typed",
"py/py.typed",
"ts/src/tsconfig.json",
"ts/test/tsconfig.json"
],
"toolchain_manifests": [
"go-cli/go.mod",
"go-mcp/go.mod",
"go/go.mod"
],
"largest_source_bytes": 116720,
"source_files_sampled": 935,
"oversized_source_files": 8,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md",
"go/AGENTS.md",
"go/CLAUDE.md",
"lua/AGENTS.md",
"lua/CLAUDE.md",
"php/AGENTS.md",
"php/CLAUDE.md",
"py/AGENTS.md",
"py/CLAUDE.md",
"rb/AGENTS.md",
"rb/CLAUDE.md",
"ts/AGENTS.md",
"ts/CLAUDE.md",
"ts/src/feature/test/AGENTS.md",
"ts/src/feature/test/CLAUDE.md"
],
"agent_instruction_max_bytes": 6673
},
"dependencies": {
"manifests": [
".sdk/package.json",
"go-cli/go.mod",
"go-mcp/go.mod",
"go/go.mod",
"php/composer.json",
"py/pyproject.toml",
"rb/Gemfile",
"ts/package.json"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go",
"npm",
"packagist",
"pypi",
"rubygems"
],
"dependencies": [
{
"name": "github.com/voxgig-sdk/aareguru-sdk/go",
"manifest": "go-cli/go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0"
},
{
"name": "github.com/aql-lang/aql/eng/go",
"manifest": "go-cli/go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.1"
},
{
"name": "github.com/voxgig-sdk/aareguru-sdk/go",
"manifest": "go-mcp/go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0"
},
{
"name": "github.com/modelcontextprotocol/go-sdk",
"manifest": "go-mcp/go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.0"
},
{
"name": "requests",
"manifest": "py/pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=2.33"
},
{
"name": "json",
"manifest": "rb/Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
},
{
"name": "minitest",
"manifest": "rb/Gemfile",
"ecosystem": "rubygems",
"version_constraint": null
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 0,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "rjrodger",
"commits": 27,
"avatar_url": "https://avatars.githubusercontent.com/u/138608?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/27 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 9,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 10,
"reason": "GitHub workflow tokens follow principle of least privilege",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 9,
"reason": "1 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "9fd8af79462877aed62df531f6c57ae5a6948af7",
"ran_at": "2026-07-22T03:10:55Z",
"aggregate_score": 4.4,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-17T20:09:10Z",
"oldest_open_prs": [],
"last_merged_pr_at": null,
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/voxgig-sdk/aareguru-sdk",
"host": "github.com",
"name": "aareguru-sdk",
"owner": "voxgig-sdk"
},
"metrics": {
"overall": {
"key": "overall",
"band": "at_risk",
"name": "Overall health",
"note": null,
"notes": [],
"value": 38,
"inputs": {
"security": 44,
"vitality": 32,
"community": 21,
"governance": 36,
"engineering": 56
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "at_risk",
"name": "Vitality",
"value": 32,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 53,
"inputs": {
"commits_last_year": 27,
"human_commit_share": 1,
"days_since_last_push": 4,
"active_weeks_last_year": 6
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 4 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 4
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "6/52 weeks with commits",
"points": 4.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 6
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "27 commits in the last year",
"points": 13,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 27
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "critical",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"releases_count": 0
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "no releases published",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases_published",
"params": {}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "no releases",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases",
"params": {}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "no releases",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases",
"params": {}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 21,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 0,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "at_risk",
"name": "Community health",
"note": null,
"notes": [],
"value": 44,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "license file present, not a recognized license",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "license_custom",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 36,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 13,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "critical",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution",
"pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"merged_prs": 0,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "no decided pull requests or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_decided_prs_or_data",
"params": {}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/27 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 48,
"inputs": {
"followers": 2,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "voxgig-sdk",
"public_repos": 568,
"account_age_days": 349
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "2 followers of voxgig-sdk",
"points": 3.4,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 2,
"login": "voxgig-sdk"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "568 public repos, account ~0 yr old",
"points": 14.9,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 568
}
},
{
"code": "account_age_years",
"params": {
"years": 0
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/voxgig-sdk/aareguru-sdk/go",
"github.com/voxgig-sdk/aareguru-sdk/go-cli",
"github.com/voxgig-sdk/aareguru-sdk/go-mcp"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 5
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "3 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 3,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 5 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 5
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "9 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 9
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 56,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 60,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 44,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 44,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 15,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 3,
"scorecard_aggregate": 4.4
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/27 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "GitHub workflow tokens follow principle of least privilege",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "1 existing vulnerabilities detected",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 1
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 72,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "good",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.741,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md",
"go/AGENTS.md",
"go/CLAUDE.md",
"lua/AGENTS.md",
"lua/CLAUDE.md",
"php/AGENTS.md",
"php/CLAUDE.md",
"py/AGENTS.md",
"py/CLAUDE.md",
"rb/AGENTS.md",
"rb/CLAUDE.md",
"ts/AGENTS.md",
"ts/CLAUDE.md",
"ts/src/feature/test/AGENTS.md",
"ts/src/feature/test/CLAUDE.md"
],
"agent_instruction_max_bytes": 6673
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "AGENTS.md, CLAUDE.md, go/AGENTS.md, go/CLAUDE.md, lua/AGENTS.md, lua/CLAUDE.md, php/AGENTS.md, php/CLAUDE.md, py/AGENTS.md, py/CLAUDE.md, rb/AGENTS.md, rb/CLAUDE.md, ts/AGENTS.md, ts/CLAUDE.md, ts/src/feature/test/AGENTS.md, ts/src/feature/test/CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "AGENTS.md, CLAUDE.md, go/AGENTS.md, go/CLAUDE.md, lua/AGENTS.md, lua/CLAUDE.md, php/AGENTS.md, php/CLAUDE.md, py/AGENTS.md, py/CLAUDE.md, rb/AGENTS.md, rb/CLAUDE.md, ts/AGENTS.md, ts/CLAUDE.md, ts/src/feature/test/AGENTS.md, ts/src/feature/test/CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "20 of 27 human commits state their intent (structured subject or explanatory body)",
"points": 39.5,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 20,
"sampled": 27
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 71,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [
".sdk/tm/go/Makefile",
".sdk/tm/lua/Makefile",
".sdk/tm/php/Makefile",
".sdk/tm/py/Makefile",
".sdk/tm/rb/Makefile",
".sdk/tm/ts/Makefile",
"Makefile",
"go-cli/Makefile",
"go-mcp/Makefile",
"go/Makefile",
"lua/Makefile",
"php/Makefile",
"py/Makefile",
"rb/Makefile",
"ts/Makefile"
],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
".sdk/src/cmp/go/tsconfig.json",
".sdk/src/cmp/lua/tsconfig.json",
".sdk/src/cmp/php/tsconfig.json",
".sdk/src/cmp/py/tsconfig.json",
".sdk/src/cmp/rb/tsconfig.json",
".sdk/src/cmp/ts/tsconfig.json",
".sdk/src/tsconfig.json",
".sdk/tm/ts/src/tsconfig.json",
".sdk/tm/ts/test/tsconfig.json",
"py/entity/py.typed",
"py/py.typed",
"ts/src/tsconfig.json",
"ts/test/tsconfig.json"
],
"agent_commit_share": 0.667,
"toolchain_manifests": [
"go-cli/go.mod",
"go-mcp/go.mod",
"go/go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": ".sdk/tm/go/Makefile, .sdk/tm/lua/Makefile, .sdk/tm/php/Makefile, .sdk/tm/py/Makefile, .sdk/tm/rb/Makefile, .sdk/tm/ts/Makefile, Makefile, go-cli/Makefile, go-mcp/Makefile, go/Makefile, lua/Makefile, php/Makefile, py/Makefile, rb/Makefile, ts/Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".sdk/tm/go/Makefile, .sdk/tm/lua/Makefile, .sdk/tm/php/Makefile, .sdk/tm/py/Makefile, .sdk/tm/rb/Makefile, .sdk/tm/ts/Makefile, Makefile, go-cli/Makefile, go-mcp/Makefile, go/Makefile, lua/Makefile, php/Makefile, py/Makefile, rb/Makefile, ts/Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": ".sdk/src/cmp/go/tsconfig.json, .sdk/src/cmp/lua/tsconfig.json, .sdk/src/cmp/php/tsconfig.json, .sdk/src/cmp/py/tsconfig.json, .sdk/src/cmp/rb/tsconfig.json, .sdk/src/cmp/ts/tsconfig.json, .sdk/src/tsconfig.json, .sdk/tm/ts/src/tsconfig.json, .sdk/tm/ts/test/tsconfig.json, py/entity/py.typed, py/py.typed, ts/src/tsconfig.json, ts/test/tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".sdk/src/cmp/go/tsconfig.json, .sdk/src/cmp/lua/tsconfig.json, .sdk/src/cmp/php/tsconfig.json, .sdk/src/cmp/py/tsconfig.json, .sdk/src/cmp/rb/tsconfig.json, .sdk/src/cmp/ts/tsconfig.json, .sdk/src/tsconfig.json, .sdk/tm/ts/src/tsconfig.json, .sdk/tm/ts/test/tsconfig.json, py/entity/py.typed, py/py.typed, ts/src/tsconfig.json, ts/test/tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "18 of the last 27 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 18,
"sampled": 27
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 116720,
"source_files_sampled": 935,
"oversized_source_files": 8
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "8/935 source files over 60KB",
"points": 54.5,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 935,
"oversized": 8
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "critical",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"example_dirs": [],
"has_mcp_signal": true,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 20,
"status": "met",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Could not fetch npm package '@voxgig-sdk/aareguru' from its registry",
"Could not fetch npm package 'build-aareguru-sdk' from its registry",
"Could not fetch packagist package 'voxgig-sdk/aareguru' from its registry",
"Could not fetch pypi package 'voxgig-sdk-aareguru' from its registry",
"Could not fetch rubygems package 'voxgig-sdk-aareguru' from its registry",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-22T03:11:00.472329Z",
"schema_version": "0.26.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/v/voxgig-sdk/aareguru-sdk.svg",
"full_name": "voxgig-sdk/aareguru-sdk",
"license_state": "custom",
"license_spdx": null
}Las puntuaciones son señales, no garantías. Reflejan prácticas públicamente visibles en GitHub; no son una auditoría de código ni una garantía de seguridad.
Los datos ausentes se excluyen y los pesos se renormalizan; nunca se puntúan como cero. La metodología es versionada y abierta: métricas v1.13.0, esquema v0.26.0 — metodología completa · wiki de métricas.
Cómo se sitúa un resultado dentro del registro general: estadísticas agregadas — Go.