1mancompany/OneManCompany holds a health index of 65 out of 100, placing it in the Moderate band. It scores highest on Vitality (79/100) and lowest on Security (41/100). It was last updated 8 days ago. A single contributor accounts for most of its recent work.
65
overall / 100
Moderate
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
65
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Direct dependencies free of known advisories — 8 affected: langchain-core 1.2.16 (high 8.2), langgraph 1.0.9 (high 7.2), mcp 1.26.0 (high 7.6), +5 more
0/25
Indirect dependencies free of known advisories — transitive set not separable from development and test dependencies in this scope
24.6/40
No advisories left outstanding — 4 advisory-carrying package(s) unaddressed past 90 days; oldest published 145 days ago
Inputs used
source
osv
advisories
101
affected_packages
22
assessed_packages
101
unassessed_packages
0
affected_by_severity
critical 2, high 9, moderate 9, low 2
direct_affected_packages
8
Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 101 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Could not fetch pypi package 'onemancompany' from its registry
More detail
Star and fork history 0 ★ / 74 ⇿
0Stars
74Forks
24Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 0Patch 24
OpenSSF Scorecard 4.1 / 10
4.1aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-29 19:55 UTC
Full resolved dependency set from the GitHub dependency graph: 18 direct and 83 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
Registry
Package
Version
Relation
PyPI
fastapi
0.133.1
direct
PyPI
httpx
0.28.1
direct
PyPI
langchain
1.2.10
direct
PyPI
langchain-anthropic
1.3.4
direct
PyPI
langchain-core
1.2.16
direct
PyPI
langchain-mcp-adapters
0.2.1
direct
PyPI
langchain-openai
1.1.10
direct
PyPI
langgraph
1.0.9
direct
PyPI
loguru
0.7.3
direct
PyPI
mcp
1.26.0
direct
PyPI
pydantic
2.12.5
direct
PyPI
pydantic-settings
2.13.1
direct
PyPI
python-dotenv
1.2.1
direct
PyPI
pyyaml
6.0.3
direct
PyPI
rich
14.3.3
direct
PyPI
uvicorn
0.41.0
direct
PyPI
watchdog
6.0.0
direct
PyPI
websockets
16.0
direct
PyPI
annotated-doc
0.0.4
indirect
PyPI
annotated-types
0.7.0
indirect
PyPI
anthropic
0.84.0
indirect
PyPI
anyio
4.12.1
indirect
PyPI
attrs
25.4.0
indirect
PyPI
certifi
2026.2.25
indirect
PyPI
cffi
2.0.0
indirect
PyPI
charset-normalizer
3.4.4
indirect
PyPI
click
8.1.8
indirect
PyPI
click-option-group
0.5.9
indirect
PyPI
colorama
0.4.6
indirect
PyPI
cryptography
46.0.5
indirect
PyPI
deprecated
1.3.1
indirect
PyPI
distro
1.9.0
indirect
PyPI
docstring-parser
0.17.0
indirect
PyPI
dotty-dict
1.3.1
indirect
PyPI
gitdb
4.0.12
indirect
PyPI
gitpython
3.1.46
indirect
PyPI
h11
0.16.0
indirect
PyPI
httpcore
1.0.9
indirect
PyPI
httptools
0.7.1
indirect
PyPI
httpx-sse
0.4.3
indirect
PyPI
idna
3.11
indirect
PyPI
importlib-resources
6.5.2
indirect
PyPI
iniconfig
2.3.0
indirect
PyPI
jinja2
3.1.6
indirect
PyPI
jiter
0.13.0
indirect
PyPI
jsonpatch
1.33
indirect
PyPI
jsonpointer
3.0.0
indirect
PyPI
jsonschema
4.26.0
indirect
PyPI
jsonschema-specifications
2025.9.1
indirect
PyPI
langgraph-checkpoint
4.0.0
indirect
PyPI
langgraph-prebuilt
1.0.8
indirect
PyPI
langgraph-sdk
0.3.9
indirect
PyPI
langsmith
0.7.7
indirect
PyPI
markdown-it-py
4.0.0
indirect
PyPI
markupsafe
3.0.3
indirect
PyPI
mdurl
0.1.2
indirect
PyPI
onemancompany
0.2.383
indirect
PyPI
openai
2.24.0
indirect
PyPI
opensandbox
0.1.5
indirect
PyPI
opensandbox-code-interpreter
0.1.1
indirect
PyPI
orjson
3.11.7
indirect
PyPI
ormsgpack
1.12.2
indirect
PyPI
packaging
26.0
indirect
PyPI
pluggy
1.6.0
indirect
PyPI
pycparser
3.0
indirect
PyPI
pydantic-core
2.41.5
indirect
PyPI
pygments
2.19.2
indirect
PyPI
pyjwt
2.11.0
indirect
PyPI
pytest
9.0.2
indirect
PyPI
pytest-asyncio
1.3.0
indirect
PyPI
pytest-timeout
2.4.0
indirect
PyPI
python-dateutil
2.9.0.post0
indirect
PyPI
python-gitlab
6.5.0
indirect
PyPI
python-multipart
0.0.22
indirect
PyPI
python-semantic-release
10.5.3
indirect
PyPI
pywin32
311
indirect
PyPI
referencing
0.37.0
indirect
PyPI
regex
2026.2.19
indirect
PyPI
requests
2.32.5
indirect
PyPI
requests-toolbelt
1.0.0
indirect
PyPI
rpds-py
0.30.0
indirect
PyPI
shellingham
1.5.4
indirect
PyPI
six
1.17.0
indirect
PyPI
smmap
5.0.3
indirect
PyPI
sniffio
1.3.1
indirect
PyPI
sse-starlette
3.2.0
indirect
PyPI
starlette
0.52.1
indirect
PyPI
tenacity
9.1.4
indirect
PyPI
tiktoken
0.12.0
indirect
PyPI
tomlkit
0.13.3
indirect
PyPI
tqdm
4.67.3
indirect
PyPI
typing-extensions
4.15.0
indirect
PyPI
typing-inspection
0.4.2
indirect
PyPI
urllib3
2.6.3
indirect
PyPI
uuid-utils
0.14.1
indirect
PyPI
uvloop
0.22.1
indirect
PyPI
watchfiles
1.1.1
indirect
PyPI
win32-setctime
1.2.0
indirect
PyPI
wrapt
2.1.2
indirect
PyPI
xxhash
3.6.0
indirect
PyPI
zstandard
0.25.0
indirect
Dependency advisories 22
This repository publishes no package the index resolves, so its own dependency graph was assessed — 101 packages, which also include development and test pins that never ship: 22 carry known advisories, of which 8 are direct.
Package
Version
Relation
Severity
Advisories
Fixed in
cryptography
46.0.5
indirect
critical
5
48.0.1
gitpython
3.1.46
indirect
critical
17
3.1.55
langchain-core
1.2.16
direct
high
6
1.3.3
langgraph
1.0.9
direct
high
2
1.0.10rc1
mcp
1.26.0
direct
high
6
1.28.1
click
8.1.8
indirect
high
1
8.3.3
langsmith
0.7.7
indirect
high
5
1.0.7
pyjwt
2.11.0
indirect
high
12
2.13.0
python-multipart
0.0.22
indirect
high
12
0.0.31
starlette
0.52.1
indirect
high
10
1.3.1
urllib3
2.6.3
indirect
high
4
2.7.0
langchain
1.2.10
direct
moderate
2
1.4.6
langchain-anthropic
1.3.4
direct
moderate
2
1.4.6
pydantic-settings
2.13.1
direct
moderate
1
2.14.2
python-dotenv
1.2.1
direct
moderate
2
1.2.2
idna
3.11
indirect
moderate
2
3.15
langgraph-checkpoint
4.0.0
indirect
moderate
2
4.1.1
langgraph-sdk
0.3.9
indirect
moderate
2
0.3.15
pytest
9.0.2
indirect
moderate
2
9.0.3
requests
2.32.5
indirect
moderate
2
2.33.0
langchain-openai
1.1.10
direct
low
2
1.1.14
pygments
2.19.2
indirect
low
2
2.20.0
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"one-person-company",
"openclaw",
"self-evolving",
"agent-team",
"one-man-company",
"claude-code",
"multiagent"
],
"is_fork": false,
"size_kb": 156508,
"has_wiki": false,
"homepage": "https://1mancompany.github.io/OneManCompany/",
"languages": {
"CSS": 151018,
"HTML": 82565,
"Shell": 53634,
"Python": 5244151,
"JavaScript": 683266
},
"pushed_at": "2026-07-21T16:35:36Z",
"created_at": "2026-02-26T13:58:09Z",
"owner_type": "Organization",
"updated_at": "2026-07-29T14:11:43Z",
"description": "Build Your Agent Company with OMC",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Python",
"significant_languages": [
"Python",
"JavaScript"
]
},
"owner": {
"blog": null,
"name": "AI Native Wolrd",
"type": "Organization",
"login": "1mancompany",
"company": null,
"location": null,
"followers": 16,
"avatar_url": "https://avatars.githubusercontent.com/u/257597042?v=4",
"created_at": "2026-01-27T17:38:00Z",
"is_verified": null,
"public_repos": 31,
"account_age_days": 183
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.7.73",
"kind": "patch",
"published_at": "2026-05-09T23:36:41Z"
},
{
"tag": "v0.7.70",
"kind": "patch",
"published_at": "2026-05-01T21:58:09Z"
},
{
"tag": "v0.7.12",
"kind": "patch",
"published_at": "2026-04-21T10:19:52Z"
},
{
"tag": "v0.4.98",
"kind": "patch",
"published_at": "2026-04-11T12:08:42Z"
},
{
"tag": "v0.4.92",
"kind": "patch",
"published_at": "2026-04-10T23:47:15Z"
},
{
"tag": "v0.4.87",
"kind": "patch",
"published_at": "2026-04-10T16:16:22Z"
},
{
"tag": "v0.4.61",
"kind": "patch",
"published_at": "2026-04-08T19:49:22Z"
},
{
"tag": "v0.4.53",
"kind": "patch",
"published_at": "2026-04-07T22:58:39Z"
},
{
"tag": "v0.4.47",
"kind": "patch",
"published_at": "2026-04-07T16:09:39Z"
},
{
"tag": "v0.4.38",
"kind": "patch",
"published_at": "2026-04-07T12:24:15Z"
},
{
"tag": "v0.2.750",
"kind": "patch",
"published_at": "2026-03-29T22:51:13Z"
},
{
"tag": "v0.2.742",
"kind": "patch",
"published_at": "2026-03-29T18:44:45Z"
},
{
"tag": "v0.2.734",
"kind": "patch",
"published_at": "2026-03-29T13:35:14Z"
},
{
"tag": "v0.2.682",
"kind": "patch",
"published_at": "2026-03-27T17:06:52Z"
},
{
"tag": "v0.2.667",
"kind": "patch",
"published_at": "2026-03-27T00:07:43Z"
},
{
"tag": "v0.2.655",
"kind": "patch",
"published_at": "2026-03-26T22:17:46Z"
},
{
"tag": "v0.2.654",
"kind": "patch",
"published_at": "2026-03-26T22:03:48Z"
},
{
"tag": "v0.2.600",
"kind": "patch",
"published_at": "2026-03-25T21:28:59Z"
},
{
"tag": "v0.2.546",
"kind": "patch",
"published_at": "2026-03-23T23:01:37Z"
},
{
"tag": "v0.2.505",
"kind": "patch",
"published_at": "2026-03-21T13:55:01Z"
},
{
"tag": "v0.2.491",
"kind": "patch",
"published_at": "2026-03-20T21:12:05Z"
},
{
"tag": "v0.2.481",
"kind": "patch",
"published_at": "2026-03-20T15:52:54Z"
},
{
"tag": "v0.2.414",
"kind": "patch",
"published_at": "2026-03-18T23:48:16Z"
},
{
"tag": "v0.2.407",
"kind": "patch",
"published_at": "2026-03-18T22:16:24Z"
},
{
"tag": "demos",
"kind": "other",
"published_at": "2026-03-16T10:19:01Z"
}
],
"recent_commits": [
{
"oid": "1855764b601ac5183e8b61a06fb8fa8d051e9a5b",
"body": "fix: use app Python interpreter for assistant launcher",
"is_bot": false,
"headline": "Merge pull request #429 from 1mancompany/fix/408-python-interpreter",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-07-21T12:42:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "12413c32dc663379c807eedc7b30432261376727",
"body": null,
"is_bot": false,
"headline": "fix: use app python for assistant launcher",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-07-21T11:24:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e8721e5407cf40f5bfe0e36c5b064f8c42240a4f",
"body": "fix: honor executor contract in general assistant launcher",
"is_bot": false,
"headline": "Merge pull request #428 from 1mancompany/fix/407-task-description",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-07-21T11:12:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2ab3da04d5a8a744c2dd0e5e89daa4ee6d790db",
"body": null,
"is_bot": false,
"headline": "fix: honor executor launcher contract",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-07-21T10:58:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aff77289a8c0649455317c0bd20976a1e6716bf9",
"body": null,
"is_bot": false,
"headline": "fix: read executor task file in general assistant launcher",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-07-21T10:25:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0de2159174d84e00e6bdb5b57570e3f59bfdba66",
"body": "fix: Google Gemini API-key save fails with 'Unknown auth choice' (#405)",
"is_bot": false,
"headline": "Merge pull request #419 from 1mancompany/fix/google-gemini-auth-choice",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-07-20T16:26:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "94cb29d029d136ae5f9e46c4749873331339a8ff",
"body": "…tion (#405)\n\nSettings UI saves a key by POSTing choice=`${group_id}-api-key`, so for Google\nthat's \"google-api-key\", but the registered option value was\n\"google-gemini-api-key\" — the only provider diverging from the convention. So\nresolve_auth_choice returned None → {\"error\":\"Unknown auth choice\"}.\n[…]\nrified locally: 4511 passed, 2 skipped (pre-commit hit an\nunrelated load-induced timeout flake, passes in isolation).\n\nCloses #405\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: Google Gemini API-key save failed — align option value to conven…",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-07-20T16:10:29Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "96cb24aeb6f24d9189d1a8e2cf3ded4f1f1a8fbf",
"body": "* docs: add permanent WeChat community QR entry\n\n* feat: manage WeChat QR through Supabase\n\n* fix: lock down community QR admin access\n\n---------\n\nCo-authored-by: workspace <workspace@localhost>",
"is_bot": false,
"headline": "feat: add Supabase-managed WeChat live QR (#420)",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-07-20T12:20:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "64d61775b194b18d51d883c02736e37cc4f0d516",
"body": "…kill startup (#403) (#418)\n\nWindows PowerShell (GBK/CP936) can't encode the '🏢' in the startup banner,\nwhich is printed inside the FastAPI lifespan — so it raised UnicodeEncodeError\nand uvicorn exited \"Application startup failed\" while the launcher already said\nthe app was running.\n\nReconfigure sys\n[…]\nok hit an\nunrelated load-induced timeout flake, passes in isolation).\n\nCloses #403\n\nCo-authored-by: workspace <workspace@localhost>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: reconfigure stdout/stderr to UTF-8 so Windows GBK console can't …",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-07-19T19:46:09Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "fe9cf0ec509c304df23bee9b147f15a05877a768",
"body": "…ndpoint config (#402) (#417)\n\n* feat: first-class Azure AI Foundry provider + fix run_auto dropping endpoint config\n\nCloses #402. Azure Foundry already worked via the generic `custom` provider,\nbut required undocumented manual steps and had a non-interactive-init bug.\n\n- Add `azure` entry to PROVID\n[…]\nnthropic.com>\n\n* chore: bump version to 0.7.102 (above main after #415)\n\n---------\n\nCo-authored-by: workspace <workspace@localhost>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: first-class Azure AI Foundry provider + fix run_auto dropping e…",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-07-19T18:26:11Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d61775a7eec0c5278b7983bb5766b0609440f945",
"body": "…415)\n\n* fix: prevent duplicate products via entity-code propagation (#395)\n\nA downstream agent (COO) re-ran create_product_tool because the EA's\ndirective named the product but carried no code, and create_product\nsilently auto-incremented the slug (-2) on conflict — so two products\nwith the same na\n[…]\n.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: workspace <workspace@localhost>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: prevent duplicate products via entity-code propagation (#395) (#…",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-07-18T08:12:21Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "bd32830ed3524e517c7555380e6556334323643e",
"body": "…th CI version-gate fix) (#394)\n\n* Initial plan\n\n* feat: support per-employee custom provider endpoint overrides\n\nAgent-Logs-Url: https://github.com/1mancompany/OneManCompany/sessions/03f41bbf-a33a-4196-b861-5327fe4058ea\n\nCo-authored-by: zhengxuyu <20417640+zhengxuyu@users.noreply.github.com>\n\n* cho\n[…]\nauthored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>\nCo-authored-by: zhengxuyu <20417640+zhengxuyu@users.noreply.github.com>\nCo-authored-by: workspace <workspace@localhost>",
"is_bot": false,
"headline": "Enable per-employee custom third-party LLM endpoint configuration (wi…",
"author_name": "Copilot",
"author_login": "Copilot",
"committed_at": "2026-07-17T21:48:33Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d702f61fff5eb76e7e49cec26c0444048bbea1c6",
"body": "… version for CI gate) (#393)\n\n* Initial plan\n\n* fix: emit heartbeat logs during silent streamed agent phases\n\nAgent-Logs-Url: https://github.com/1mancompany/OneManCompany/sessions/166d7a82-5429-4992-9d68-edabd4bfc17f\n\nCo-authored-by: zhengxuyu <20417640+zhengxuyu@users.noreply.github.com>\n\n* chore:\n[…]\ngithub.com>\nCo-authored-by: zhengxuyu <20417640+zhengxuyu@users.noreply.github.com>\nCo-authored-by: workspace <workspace@localhost>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add streamed heartbeat/phase logs for long-running EA tasks (and bump…",
"author_name": "Copilot",
"author_login": "Copilot",
"committed_at": "2026-07-17T21:38:07Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7541ef8ac648d3b7d2f1b9b6c3ee0a03f4a61e9c",
"body": "The self-hosted ClaudeSessionExecutor path emitted zero live signal for a\ntask's entire duration — send_prompt read the NDJSON stream but routed it\nonly to a debug-gated disk trace, calling on_log exactly once at the end.\nSo for a long/stuck task (e.g. a clone-retry loop) the CEO saw a start\nevent, \n[…]\nsolation; touched files 213 green).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n# Conflicts:\n#\tpackage.json\n#\tpyproject.toml\n\nCo-authored-by: workspace <workspace@localhost>",
"is_bot": false,
"headline": "feat: stream self-hosted Claude session activity live (issue #3) (#414)",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-07-17T21:07:24Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "eba0c7be96a7a615f48fae9698de341b1a8aefe6",
"body": "* feat: CEO can abandon/redirect a running task (issue #1)\n\nA CEO natural-language 'abandon / pivot' instruction only *queued* a new\nfollow-up node behind the still-running task (e.g. a clone-retry react\nloop). _schedule_next short-circuits while the employee is in\n_running_tasks, so the old loop ke\n[…]\n Opus 4.8 (1M context) <noreply@anthropic.com>\n\n# Conflicts:\n#\tsrc/onemancompany/api/routes.py\n\n* chore: bump version to 0.7.96 (above main)\n\n---------\n\nCo-authored-by: workspace <workspace@localhost>",
"is_bot": false,
"headline": "feat: CEO can abandon/redirect a running task (#413)",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-07-17T20:53:31Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "dd71ed81636336ec36df5f87ad3c8e0c335f40c8",
"body": "CEO console /clear only cleared the frontend view and tried to swap to a\nnew conversation, but _ensureEaChatConversation() calls create with\nreuse_existing defaulting True, so the reuse picker returned the same\nmessage-laden ea_chat conversation. Disk messages.yaml was never touched,\nso a refresh (d\n[…]\ns disk; refresh sees empty history.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n# Conflicts:\n#\tpackage.json\n#\tpyproject.toml\n\nCo-authored-by: workspace <workspace@localhost>",
"is_bot": false,
"headline": "fix: /clear persists EA chat history to disk (issue #2) (#412)",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-07-17T20:48:22Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "577bdf0682b3f185752a5f10dc6b87be2a7361f7",
"body": "…g (#404)\n\n* fix(frontend): make product-planning conversations usable + guard trace viewer\n\nTwo frontend fixes around the product-planning flow (frontend/app.js only):\n\n1. openTraceViewer crashed with \"data.nodes is not iterable\". It called\n /api/projects/{id}/tree without checking r.ok; for a pr\n[…]\n\n---------\n\nCo-authored-by: KTC-HirokiNomura <hiroki.nomura@kinto-technologies.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nCo-authored-by: workspace <workspace@localhost>",
"is_bot": false,
"headline": "fix(frontend): guard trace viewer against 404 for products in plannin…",
"author_name": "shirokuma",
"author_login": "nomhiro",
"committed_at": "2026-07-17T15:49:21Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b6d385b66736c72942192a7b9b81a1ad82483f1e",
"body": "…(#400)\n\n* fix(frontend): route product planning replies to the CEO terminal\n\nThe conversation_message handler in app.js routed agent replies to the\nCEO terminal only when _currentConvType was 'oneonone' or 'ea_chat'.\nProduct planning conversations (opened via\n_openProductPlanningConversation) set _\n[…]\n.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: workspace <workspace@localhost>\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(frontend): route product planning EA replies to the CEO terminal …",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-07-17T15:41:06Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c1ba66ae2bec65dc48651f064057c03e6851a461",
"body": "…ol (#361)\n\n* feat(acp): add ACP adapter layer — thin re-export wrapper for agent-client-protocol SDK\n\n- Add `agent-client-protocol>=0.9.0` to pyproject.toml dependencies\n- Create `src/onemancompany/acp/` package with adapter.py that re-exports all\n ACP SDK types (protocols, schema, helpers, transp\n[…]\nter targets.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: workspace <workspace@localhost>\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: ACP integration — migrate executor layer to Agent Client Protoc…",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-07-17T15:04:10Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "db06ace1a77e01c5bc6d1144e4147eaea110dc2e",
"body": "Replace the reviewer-request workflow with an assignment workflow that\nadds the repo owner (zhengxuyu) as assignee on every newly opened issue\nand PR. Bump version 0.7.85 -> 0.7.86.\n\nCo-authored-by: workspace <workspace@localhost>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(ci): auto-assign issues and PRs to repo owner (#411)",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-07-17T14:24:36Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "8f880c03b2014e866b374c039333a1f201c971e0",
"body": "…nner (#399)\n\n* fix(cli): refresh source by default; banner shows installed app version\n\nTwo stacked bugs made `npx --yes @1mancompany/onemancompany@dev` lie\nabout what was actually running:\n\n1. After the first install the CLI defaulted to \"use existing files\"\n and only refreshed when --update was\n[…]\n.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: workspace <workspace@localhost>\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(cli): refresh source by default; show installed app version in ba…",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-05-22T13:22:46Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4a373b9b4c4df3a574f49c3bde3e3f66c546fed5",
"body": "* fix: product planning button must trigger EA — kickoff + context + add_kr tool\n\nClicking \"Start Planning\" created an empty conversation record but never\ninvoked the EA agent, so the terminal stayed blank and no issues / key\nresults were ever created.\n\nThree stacked problems, fixed together:\n\n1. /a\n[…]\n.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: workspace <workspace@localhost>\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: product planning button must trigger EA agent (issues & KRs) (#398)",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-05-22T12:20:05Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c07e378c46a537c35b85201bd42c68454f1e8f99",
"body": null,
"is_bot": false,
"headline": "1 (#396)",
"author_name": "fuyu12345",
"author_login": "fuyu12345",
"committed_at": "2026-05-19T14:12:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "069e371246b65bcac1994fc732371888ba369f11",
"body": "…rsion-gate checks (#384)\n\n* Initial plan\n\n* fix: make attachment prompts readable by agents\n\nAgent-Logs-Url: https://github.com/1mancompany/OneManCompany/sessions/6b82d3c5-8663-4c60-b36f-7ea845699ed2\n\nCo-authored-by: zhengxuyu <20417640+zhengxuyu@users.noreply.github.com>\n\n* test: tighten attachmen\n[…]\n+zhengxuyu@users.noreply.github.com>\nCo-authored-by: ZhengxuYu <yuzxfred@gmail.com>\nCo-authored-by: workspace <workspace@localhost>\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Make attachment prompts actionable, injection-safe, and satisfy CI ve…",
"author_name": "Copilot",
"author_login": "Copilot",
"committed_at": "2026-05-18T14:12:19Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d8912ef03d4f41b208d436b5a027de1640180c42",
"body": "…configs (#382)\n\n* Initial plan\n\n* fix: propagate configured host and port into generated MCP configs\n\nAgent-Logs-Url: https://github.com/1mancompany/OneManCompany/sessions/919b1a33-491c-4abc-8187-b806a28f1c88\n\nCo-authored-by: zhengxuyu <20417640+zhengxuyu@users.noreply.github.com>\n\n* chore: bump ve\n[…]\nngxuyu@users.noreply.github.com>\n\n---------\n\nCo-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>\nCo-authored-by: zhengxuyu <20417640+zhengxuyu@users.noreply.github.com>",
"is_bot": false,
"headline": "Propagate configured onboarding host/port into founding employee MCP …",
"author_name": "Copilot",
"author_login": "Copilot",
"committed_at": "2026-05-12T11:04:26Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "1833a527bf2334ba89293dee99628a7615afe331",
"body": "* Initial plan\n\n* Guard Enter send during IME composition\n\nAgent-Logs-Url: https://github.com/1mancompany/OneManCompany/sessions/b20fd088-8320-4a72-97a1-db5a46fdbb33\n\nCo-authored-by: zhengxuyu <20417640+zhengxuyu@users.noreply.github.com>\n\n* Bump version 0.7.76 -> 0.7.77 to fix CI version check\n\nAge\n[…]\nngxuyu@users.noreply.github.com>\n\n---------\n\nCo-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>\nCo-authored-by: zhengxuyu <20417640+zhengxuyu@users.noreply.github.com>",
"is_bot": false,
"headline": "Prevent Enter-to-send during active IME composition in chat input (#380)",
"author_name": "Copilot",
"author_login": "Copilot",
"committed_at": "2026-05-12T11:03:25Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "704e2cd42003df54c7dfbcd3bd3872085b4ee992",
"body": "* fix bug of llm provider during hiring\n\n* fix: keep LLM fallback constructible without API key\n\n* test: cover llm provider hiring defaults\n\n* Long Running Task Loop Optimization\n\n* chore: bump version to 0.7.75 to resolve merge conflict with main\n\nCo-authored-by: ZhengxuYu <zhengxuyu@users.noreply.\n[…]\ne[bot]@users.noreply.github.com>\nCo-authored-by: ZhengxuYu <zhengxuyu@users.noreply.github.com>\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>\nCo-authored-by: ZhengxuYu <yuzxfred@gmail.com>",
"is_bot": false,
"headline": "fix bug of llm provider during hiring (#369)",
"author_name": "fuyu12345",
"author_login": "fuyu12345",
"committed_at": "2026-05-12T09:07:20Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "40d90e25036b8f2ef0e594b9c2dafbc443662068",
"body": "* \"Claude PR Assistant workflow\"\n\n* \"Claude Code Review workflow\"\n\n* chore: bump version to 0.7.74\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: workspace <workspace@localhost>\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add Claude Code GitHub Workflow (#377)",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-05-11T12:52:04Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "e9054e64f312512366f5875615588f60541f5ca8",
"body": "Updated agent guidelines to follow TDD principles and outlined CI/CD requirements.",
"is_bot": false,
"headline": "Revise agent instructions for TDD and CI/CD compliance",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-05-11T09:08:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "74f5bd38cc703d5d177d275633845a2f849b75a5",
"body": "Co-authored-by: workspace <workspace@localhost>",
"is_bot": false,
"headline": "fix model pricing display for unknown costs (#374)",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-05-09T22:29:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a489abb9a8642ca03a900fbcbc562f53b88b649d",
"body": "* fix anthropic onboarding provider handling\n\n* chore bump version for ci\n\n---------\n\nCo-authored-by: workspace <workspace@localhost>",
"is_bot": false,
"headline": "[codex] fix Anthropic onboarding provider handling (#373)",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-05-09T22:18:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "79990fb404f0be7abd1a8d98b63e1ae350dbbd3b",
"body": "Replace expired QR code image with new one (valid until May 15).\n\nCo-authored-by: workspace <workspace@localhost>\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: update WeChat group QR code (#371)",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-05-08T16:03:17Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "8b15eefacc2c5bbfb3e8762f2e9812707e842232",
"body": "* remove public tools and sandbox setup from onboarding\n\n- Delete background_removal, image_generation, and video_generation asset tools\n- Remove _step_sandbox() and _install_sandbox_deps() from onboard wizard so users\n are no longer prompted to install Docker-based execution during init\n- Renumber\n[…]\nre: bump version to 0.7.70\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>\n\n* Remove image generation vessel capability\n\n---------\n\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Remove public tools and sandbox setup from onboarding (#366)",
"author_name": "fuyu12345",
"author_login": "fuyu12345",
"committed_at": "2026-05-01T21:54:26Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f1aff89ea77858b0766901ffb90f403dd9b092af",
"body": "* update model identity\n\n* update version\n\n* update deepseek-comapliatity\n\n* fix: escape dict braces in TEMPLATE string to avoid KeyError in str.format()\n\nThe TEMPLATE string is processed by str.format(), which interprets any\n{...} as a placeholder. The new extra_body dict literal was added without\nescaping, causing KeyError: '\"thinking\"' at generate_run_py time.\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Update deepseek comapliatity (#365)",
"author_name": "fuyu12345",
"author_login": "fuyu12345",
"committed_at": "2026-05-01T15:43:28Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "5384553f5270453773b3509621809d25b2a91806",
"body": "* update model identity\n\n* update version",
"is_bot": false,
"headline": "update model identity (#364)",
"author_name": "fuyu12345",
"author_login": "fuyu12345",
"committed_at": "2026-04-30T15:57:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "21b412bd1b2c66c19cd6a8ef4857c1c566c12ebc",
"body": "Co-authored-by: workspace <workspace@localhost>\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: add HuggingFace paper badge to README (#360)",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-04-28T18:40:53Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "37551604b4e1deeb8954d021ed569d97a2c7e6f0",
"body": "* chore: optimize WeChat QR code display in README\n\nCrop QR image to show only group name and code (remove phone UI chrome),\ncenter the image, increase width to 200px, and add descriptive caption.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n* chore: move WeChat QR to Commu\n[…]\n.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: workspace <workspace@localhost>\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: optimize WeChat QR code display in README (#359)",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-04-28T13:09:02Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3eb7e4f60dbb7f482f6686b8f129ed3c29c527f6",
"body": null,
"is_bot": false,
"headline": "update wechat image (#358)",
"author_name": "fuyu12345",
"author_login": "fuyu12345",
"committed_at": "2026-04-28T11:55:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6cae30fe562a82d92ce0e54ecbcf6ce523507d5c",
"body": "* update wechat server\n\n* update version",
"is_bot": false,
"headline": "update wechat server (#356)",
"author_name": "fuyu12345",
"author_login": "fuyu12345",
"committed_at": "2026-04-28T09:29:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31d59b10fb4541ac68a9c0b3fd110a1e5eb4f247",
"body": "* Fix ChatAnthropic not passing base_url for custom provider\n\nWhen using a custom provider with chat_class=anthropic (e.g. MiniMax via\napi.minimaxi.com/anthropic), ChatAnthropic was instantiated without base_url,\ncausing it to default to https://api.anthropic.com instead of the configured\ncustom end\n[…]\nrl handling already present for OpenAI-compatible\nproviders (openrouter, custom, etc.) in the same function.\n\n* chore: bump version to 0.7.60\n\n---------\n\nCo-authored-by: ZhengxuYu <yuzxfred@gmail.com>",
"is_bot": false,
"headline": "Fix: ChatAnthropic missing base_url for custom provider (#354)",
"author_name": "Perry",
"author_login": "AMagicPear",
"committed_at": "2026-04-28T07:12:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e443af90b1d5a2664bebf9aaa9e15a7801d76331",
"body": "Co-authored-by: workspace <workspace@localhost>\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: update Discord invite link (#355)",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-04-27T18:48:27Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "e5adeadb5b7a5b270d2350ec2e9df944ece59ef7",
"body": "Co-authored-by: workspace <workspace@localhost>\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: update README task tree image to task_tree_2 (#353)",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-04-27T10:54:03Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "04d9b91cf8351b2a9ace29abd53e6ecebf8dc7ec",
"body": "* feat: B2 design — responsive breakpoints, touch targets, reduced motion\n\n- Add primitive token overrides at 4 breakpoints (480/768/1024/1440px)\n so the entire UI scales with zero per-component overrides\n- Add prefers-reduced-motion: reduce (FINDING-010)\n- Add pointer:coarse touch targets (44px mi\n[…]\ny convention (0.5, not 0.4)\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: workspace <workspace@localhost>\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: B2 design — responsive breakpoints + interaction states (#350)",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-04-22T19:14:48Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ada0504cb321e58a12589ca8f7b27c99898c9af9",
"body": "fix: settings model selection not persisting after save",
"is_bot": false,
"headline": "Merge pull request #351 from 1mancompany/fix/settings-model-persist",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-04-22T19:07:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f4ff96ab1ddb5470cf2107ccf9e54a995c812ef4",
"body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "merge: resolve pyproject.toml version conflict (keep 0.7.56)",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-04-22T17:56:42Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "bb24751942d7ae4a1bad356ea86ce84ac5c23f3d",
"body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: trigger workflow re-run",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-04-22T17:32:22Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "4e3d199798e607dc3e515de532828c5a93e5b297",
"body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: bump version to 0.7.56",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-04-22T17:27:45Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a3c4cb2f966a72196ce727b81eb4e97cb3815be5",
"body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: bump version to 0.7.55",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-04-22T17:22:56Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ae47ace7f53f3f28ae057c9f4c252764aab92baa",
"body": "Root cause: main.py calls load_dotenv() at startup, seeding os.environ.\nWhen update_env_var() later writes a new value to the .env file, it\ncalls reload_settings() which constructs a new pydantic Settings().\nBut BaseSettings reads os.environ (highest priority) before .env file,\nso the stale startup \n[…]\n in sync with the\n.env file.\n\nAffects all settings saved via update_env_var: DEFAULT_LLM_MODEL,\nDEFAULT_API_PROVIDER, API keys, base URLs, etc.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: sync os.environ in update_env_var so model selection persists",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-04-22T17:22:34Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c0b435acad898928d7ad12e2fea056cd1a67f108",
"body": "style(design): B1 — two-layer design token system (Typography F→B, Spacing C→B)",
"is_bot": false,
"headline": "Merge pull request #349 from 1mancompany/feat/design-tokens-b1",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-04-22T16:25:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dafbf3f87fc6266f18a4e285b5adbe3d8e31986a",
"body": "…cing, radius\n\nReplace 352 hardcoded calc(font-boost) declarations with 6 semantic text tokens\n(--text-display through --text-micro), 107 border-radius values with 3 radius\ntokens (--radius-sm/md/full), and 186 high-frequency padding/gap values with\nspacing tokens (--sp-*, --pad-*, --gap-*).\n\nArchit\n[…]\ns.\n\nAlso adds heading hierarchy (h1/h2/h3.pixel-title) using semantic tokens.\n\nDesign Score impact: Typography F→B, Spacing C→B (batch 1 of 3).\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "style(design): B1 — two-layer design token system for typography, spa…",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-04-22T16:16:03Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "179d63161adc55b062630eacad201385be75db53",
"body": "…tus, changelog link (#347)\n\n- Add ecosystem positioning: OMC operates one level above agent frameworks as an agentic OS\n- Bump Node.js requirement from 16+ to 18+ (Node 16 EOL since Sept 2023)\n- Update OpenClaw label from \"Coming Soon\" to \"Experimental\" (code already exists)\n- Point changelog link to GitHub Releases (CHANGELOG.md doesn't exist)\n\nCo-authored-by: workspace <workspace@localhost>\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: README audit fixes — positioning, Node.js version, OpenClaw sta…",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-04-22T14:27:23Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "481b20daf90000a072b33405e3418802668e96a6",
"body": "fix: EA stall retry when agent promises but doesn't act",
"is_bot": false,
"headline": "Merge pull request #348 from 1mancompany/fix/ea-stall-retry",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-04-22T14:11:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "41f9aa83b692894b07ba0529b998c201b06942f0",
"body": "When EA (or any agent) says \"I will dispatch tasks\" but doesn't actually\ncall dispatch_child(), the system now:\n\n1. Detects the stall (expanded promise patterns for CN/EN)\n2. Reverts node to PROCESSING and re-schedules with explicit nudge\n3. After MAX_STALL_RETRIES (2), marks COMPLETED and warns CEO\n[…]\ntry attempts\n- 42 new tests covering patterns, retry logic, and edge cases\n\nFixes: C1 (stall retry), I1 (drain_pending), I2 (expanded patterns)\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: EA stall retry — re-run agent when it promises but doesn't act",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-04-22T14:00:29Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b80643031147232dcb7e11803c5e8cbf0c07ae66",
"body": "…rflow\n\nfix: debug LLM logging and task tree node overflow",
"is_bot": false,
"headline": "Merge pull request #346 from 1mancompany/fix/debug-print-and-tree-ove…",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-04-22T12:56:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4cc954d36aab7fefd98128bb109a3e0e223a1ddf",
"body": "Bug #13: Add logger.debug calls for LLM input, output, tool calls,\nand tool results in base.py agent execution loop. These print to\nconsole when --debug / OMC_DEBUG=1 is active. Task prompt was already\nlogged in vessel.py; this completes the picture.\n\nBug #8: Increase task tree card width 240→260px,\n[…]\nx description\nlines 6→12, chars per line 34→38. Nodes already had dynamic height;\nthe 6-line cap was too aggressive for real task descriptions.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: debug LLM logging and task tree node overflow (#8, #13)",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-04-22T12:41:49Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "73036c181337dc0eb6cf7b4e70da8c182471ea5b",
"body": "fix: product owner chain audit — validation, release safety, triggers",
"is_bot": false,
"headline": "Merge pull request #345 from 1mancompany/fix/product-owner-chain-audit",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-04-22T12:26:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b8e9524482c6a6b6456c9b294f5870e5a936669a",
"body": "Five new tests exercise the full _create_review_project function body\n(product_triggers.py:157-224) instead of mocking it away. Covers:\n- Happy path with tree creation and owner scheduling\n- Product not found returns empty\n- No owner_id falls back to EA_ID\n- No iter_id uses project_id only\n- Exception returns empty string\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "test: add coverage for _create_review_project to meet 98% CI threshold",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-04-22T12:14:22Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "faeac0b29e45a7fd7bb9e02e608a8d41e415cc7a",
"body": "…reliability\n\nBatch 1 (Critical):\n- Validate owner_id/assignee_id against employee registry in product CRUD\n- release_version only transitions DONE issues to RELEASED (skips non-DONE)\n- Remove broad exception handler in notify_owner (let unexpected errors propagate)\n\nBatch 2 (Important):\n- Sprint ca\n[…]\nrojects etc.) via product.config field\n- New assign_issue_tool and transfer_product_ownership_tool agent tools\n\n4172 tests passing, 0 failures.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: product owner chain audit — validation, release safety, trigger …",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-04-22T12:01:10Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "0a628ebaaf238a5c3f08f964871add225f7dedca",
"body": "…sponsive (#344)\n\n* fix(ux): define missing CSS variables, z-index scale, focus baseline, semantic HTML\n\n- Add --font-pixel, --font-mono, --bg-card, --text-primary to :root (28 references were falling back to browser defaults)\n- Define z-index scale as CSS variables (--z-base through --z-critical), \n[…]\ndth bottom sheets on mobile\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: workspace <workspace@localhost>\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(ux): CEO console UX audit fixes — CSS, JS safety, toasts, API, re…",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-04-22T11:27:15Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "08bf504e2fc3abc46456a39db9e127e882c137b9",
"body": "…print UX, agent tools (#343)\n\n* fix: publish sprint and review events from API routes\n\nSprint routes (create/start/close) and review routes (create/complete)\nwere not publishing events to event_bus, which broke the entire\ntrigger→review→activity pipeline. handle_sprint_closed (auto-creates\nreview c\n[…]\nfrom test_product_events.py\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: workspace <workspace@localhost>\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: audit fixes — event pipeline, status transitions, reviews UI, s…",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-04-22T10:34:31Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d931dad4d71b0521e9cf3cf1ce088b9951b6bf14",
"body": "feat: B4 audit — configurable thresholds, filters, assertions",
"is_bot": false,
"headline": "Merge pull request #342 from 1mancompany/feat/audit-batch4-config-tests",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-04-22T07:54:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d09d79400084ec0054b9232edf4249ee527b23d2",
"body": "…fixes\n\n- Extract 7 hardcoded thresholds to module-level constants in product_triggers.py\n (KR_LAGGING_THRESHOLD, MAX_ACTIVE_PROJECTS, BACKLOG_GROOMING_THRESHOLD,\n STALE_REVIEW_HOURS, BLOCKED_DAYS_THRESHOLD, UNHANDLED_BACKLOG_THRESHOLD)\n- Extract HISTORY_MAX_ENTRIES constant in product.py\n- Add assignee_id filter to list_issues() (empty string = unassigned)\n- Fix 3 weak assertions: >= → == for history and sync counts\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: B4 audit — configurable thresholds, assignee filter, assertion …",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-04-22T07:32:05Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "7020960757cf96ef0e4da7677633e2c5c816ceb3",
"body": "feat: B3 audit — frontend UX improvements",
"is_bot": false,
"headline": "Merge pull request #341 from 1mancompany/feat/audit-batch3-frontend-ux",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-04-22T07:22:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eab6f670fe2e10fb11fc956835d0d381d28a658e",
"body": "- Toast notification system replacing alert() for product operations\n- Sprint creation form in Roadmap tab with date defaults\n- Sprint lifecycle buttons: Start (planning), Close (active), Delete (planning)\n- Issue link management: view, add (blocks/blocked_by/relates_to), remove\n- Text search across\n[…]\norizontal scroll on small screens\n- Delete issue button with link cleanup\n- 3 new API endpoints: DELETE issue, POST sprint start, DELETE sprint\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: B3 audit — frontend UX: toast, sprint UI, issue links, search",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-04-22T07:14:43Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c31beee2ceac7fea01c27db0b13609fbd647c908",
"body": "feat: B2 audit — CRUD, status validation, agent tools",
"is_bot": false,
"headline": "Merge pull request #340 from 1mancompany/feat/audit-batch2-crud",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-04-22T06:58:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a3fcfe852c08d841cfc6e8a25fc7e80122e89cbd",
"body": "…tools\n\n- delete_issue() with link cleanup, delete_sprint() with active guard\n- start_sprint() convenience wrapper\n- Issue status transition validation via _VALID_TRANSITIONS map\n- Sprint date validation (end > start, format check)\n- 6 new agent tools: delete/reopen issue, start/delete sprint, sprint analytics, version management\n- Updated 3 existing tests for valid transition chains\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: B2 audit — CRUD operations, status validation, and 6 new agent …",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-04-21T22:58:58Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "0b73ccc033f29e7b78c8c68e8208c4d9a9d0bfe3",
"body": "fix: critical validation for product issue system",
"is_bot": false,
"headline": "Merge pull request #339 from 1mancompany/feat/audit-critical-fixes",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-04-21T22:41:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aea2ef3e899ff25ed90801ef2c877032cc6edde3",
"body": "- Circular dependency detection edge cases (diamond graph, visited dedup, missing issues)\n- Issue link CRUD edge cases (missing files, get_issue_links on nonexistent)\n- notify_owner() all branches (inactive product, no owner, exception, tree paths)\n- _log_product_activity detail generation branches \n[…]\ning product\n- EA role guide exists branch, _limit_result branches, tool_limits no project_dir\n- task_persistence corrupt system_tasks.yaml skip\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "test: add coverage tests to meet 98% CI threshold",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-04-21T22:33:20Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ba5f59c7c2fb90907ccb9e7c0db21e614f20bf3d",
"body": "…400s, ValueError on missing\n\n- create_issue() raises ValueError when product doesn't exist (was silently creating with empty product_id)\n- add_issue_link() detects circular block dependencies via BFS graph walk\n- Routes wrap enum construction in try-catch returning 400 (was crashing with 500)\n- update_issue/close_issue/reopen_issue raise ValueError on missing issue (was returning None)\n- Updated 4 old tests that expected None returns\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: critical validation — product exists check, circular deps, enum …",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-04-21T21:37:48Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "12ca63fe946c6b972c923233826650603cefba94",
"body": "feat: kanban board, roadmap timeline, and activity feed",
"is_bot": false,
"headline": "Merge pull request #338 from 1mancompany/feat/product-views",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-04-21T21:11:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "027ccb60dc8c537e59a53ecf3f2d8ec3dc71be1f",
"body": null,
"is_bot": false,
"headline": "chore: bump version to 0.7.27",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-04-21T21:01:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2673fb40f703c8bbadcd6819841df135937ceb11",
"body": "Writing 510 YAML entries one-by-one was too slow for CI's 30s\ntimeout. Now pre-seeds a large log directly, then appends one\nentry to verify the cap logic.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: speed up activity cap test (CI timeout fix)",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-04-21T21:01:28Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a38cc8dad73e99f141a186b0e60c362c091b35e2",
"body": null,
"is_bot": false,
"headline": "chore: bump version to 0.7.26",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-04-21T20:55:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0caa37939b09d95109f73d21d60d6b0b2aeb5dd3",
"body": "Backend: 3 new aggregation endpoints (kanban, roadmap, activity),\nproduct-scoped activity log with auto-logging from event bus.\nFrontend: 3 new tabs in product detail modal with drag-drop kanban,\nsprint/version timeline, and chronological activity feed.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add kanban board, roadmap timeline, and activity feed (Batch 3)",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-04-21T20:55:50Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "deeb2fc5531c65f40c796b8480fa58d0263e94cb",
"body": "feat: issue dependency links + review checklists",
"is_bot": false,
"headline": "Merge pull request #337 from 1mancompany/feat/issue-links-reviews",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-04-21T20:36:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "54252485a00cc1bbadad3934d46d56176b20f4fc",
"body": null,
"is_bot": false,
"headline": "chore: bump version to 0.7.25",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-04-21T20:31:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e3e164d84de2de8774791dabb7b3c90a36fc3e3",
"body": "The blocked-for-7-days check was using issue.created_at instead of\nwhen the blocked_by link was actually added. Old issues that got\nnewly blocked would immediately trigger false alerts. Link entries\nnow carry their own created_at timestamp.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: use link created_at for blocked-issue health check threshold",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-04-21T20:28:49Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "52dacfc9eb0d541c8b8788302b7b369b4dedf116",
"body": "Issue links: bidirectional blocks/blocked_by/relates_to with auto-reverse,\nidempotent adds, auto-migration from old linked_issue_ids format.\nReview checklists: CRUD with default checklist items, auto-created on\nsprint close, stale review detection (>24h), blocked issue warning (>7d).\n4 new agent tools, 9 new API endpoints.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add issue dependency links and review checklists (Batch 2)",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-04-21T20:07:11Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "195c3cdb994a2be0730f50bd068d79647c5cc4af",
"body": "feat: add Sprint iteration management to product system",
"is_bot": false,
"headline": "Merge pull request #336 from 1mancompany/feat/sprint-management",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-04-21T19:45:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a104fb8ad75ef94aea80b3d8551c5d29267b04d8",
"body": "Adds tests for: create_sprint_tool error, close_sprint_tool error,\nget_sprint_info by ID, fallback listing when no active sprint,\ncapacity + suggestion display, and exception handling.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "test: cover Sprint tool error paths, fallback listing, capacity display",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-04-21T18:58:44Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1c7b35b769f7d6ccf68135de6ae3025c2380e843",
"body": "…and invalid dates\n\nFixes CI coverage gate (98% threshold) by covering:\n- create_sprint/update_sprint/close_sprint with missing product/sprint\n- build_sprint_retrospective with nonexistent sprint and unfinished issues\n- Sprint expiry check with invalid end_date format\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "test: add coverage for Sprint error paths, retrospective carry-over, …",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-04-21T18:50:50Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "06c5a76d60dc6452933ee644d4c1f9910b1d0c67",
"body": "Sprint lifecycle with CRUD, single-active constraint, velocity calculation,\ncarry-over of unfinished issues, retrospective generation, and capacity\nsuggestion based on sliding average of last 3 sprints. Includes backlog\ngrooming alerts (P2/P3 ≥ 5 unscheduled) and sprint expiry detection in\nhealth check cron. 3 new agent tools, 6 API endpoints, 35+ tests.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add Sprint iteration management to product system",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-04-21T18:41:53Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "db6117173b4ee05d939f490749382a38a673d91e",
"body": "…-selector\n\nfix: route CEO followup to product owner + product selector feedback",
"is_bot": false,
"headline": "Merge pull request #335 from 1mancompany/fix/product-owner-notify-and…",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-04-21T13:45:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "88f2b9e621d63fbd8463d6e4e6eccdd36689d438",
"body": "…dback\n\nRoot cause of bug 1: task_followup() always routed to EA, even for\nproduct-linked projects. Product owners never got notified to update\nKR/issue progress. Fix: detect product_id in project doc, look up\nproduct owner, route followup to them instead of EA.\n\nRoot cause of bug 2: CEO console pro\n[…]\nhange event\nhandler. Users thought it was broken because nothing visible happened.\nFix: add _initProductSelector() with highlight on selection.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: route CEO followup to product owner and add product selector fee…",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-04-21T13:04:00Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4a0f873f4470f0829b34c579cb5cf1e154060f2b",
"body": "feat: product workspace with git-native worktrees",
"is_bot": false,
"headline": "Merge pull request #332 from 1mancompany/feat/product-workspace",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-04-21T10:33:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "87ce0f7e1fb81ff190470d74a0564e059aa736da",
"body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: restore README.md from main (worktree artifact)",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-04-21T10:23:30Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ad320ade0ca2c813b1caadbf3494daf4cacbf702",
"body": "# Conflicts:\n#\tpackage.json\n#\tpyproject.toml",
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/main' into feat/product-workspace",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-04-21T10:13:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "19abcef76591f9edccb017dc7705bb0a82e64fe3",
"body": "fix: CLI installs release version instead of main HEAD",
"is_bot": false,
"headline": "Merge pull request #333 from 1mancompany/fix/cli-clone-version",
"author_name": "ZhengxuYu",
"author_login": "zhengxuyu",
"committed_at": "2026-04-21T10:12:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0137aa7837f18f29779cda20180dad75c017746b",
"body": "…ranch name\n\n- _has_conflict_markers: check actual file content for <<<<<<< markers instead\n of git diff --check (which false-positives on trailing whitespace)\n- promote(): add filelock to serialise concurrent merges on same product\n- promote(): abort failed sync merge to avoid leaving worktree dir\n[…]\nDUCT_WORKTREE_DIR_NAME constant instead of hardcoded string\n- Extract base_project_id in vessel.py to avoid repeated split(\"/\")[0]\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: review fixes — conflict detection, concurrent promote lock, CI b…",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-04-21T10:09:38Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3f3cb6e3cace075ba3f685602c65e3216b77d540",
"body": "… errors\n\n- Version regex now anchored with $ to reject trailing garbage\n- Silent catch {} replaced with warn() per project no-silent-catch rule\n- Update path now copies all SOURCE_ITEMS (was missing company/ and config.yaml)\n- Extracted copyItems() helper to eliminate duplicated copy loop\n- Removed\n[…]\ne (always === cliVersion)\n- Bumped engines.node to >=18 for stable fs.cpSync\n- Added warning when --update requested but bundled source missing\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: address review findings — stricter validation, DRY copy, warn on…",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-04-21T10:05:16Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7ebd9307ae6f5674b125bf38fbe5313727b8b930",
"body": "…nstalls\n\nThe npm package now includes the full source (src/, frontend/, company/,\npyproject.toml, config.yaml, uv.lock). The CLI copies bundled files to\ninstallDir instead of git cloning, so users get exactly the version they\ninstalled via npm. Git is only needed as a fallback if source is missing.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: bundle source in npm package — no git clone needed for release i…",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-04-21T09:53:12Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "c13414f707bce8905b8af435aa942fa7b4d81550",
"body": "Root cause: `git clone --depth 1` always pulled main, so `npx @1mancompany/onemancompany`\n(latest=0.4.98) installed main HEAD (0.7.9) instead of the matching release.\n\nNow clones `--branch v{version}` for release versions. Falls back to main for dev\nversions where no tag exists. Also removes the pyproject.toml version override that\nmasked the mismatch.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: CLI clones version-tagged release instead of main branch HEAD",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-04-21T09:45:40Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "77ae0b4fdcf1ae0a48db7daa4b6c43f6d836ae39",
"body": null,
"is_bot": false,
"headline": "test: E2E integration tests + fix missing git-add in conflict resolution",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-04-21T09:39:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fd9eab5ad8e1be246de536579798ce12c89ed602",
"body": null,
"is_bot": false,
"headline": "feat: inject product workspace context into task descriptions",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-04-21T09:35:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac43c52dc5e8fafe7139f8a796f8b92bf5052e8d",
"body": "…ed product workspace\n\nAdds product_workspace_tools.py with promote_to_product @tool that resolves\nvessel context, delegates to product_workspace.promote(), and formats conflict\noutput. Registered in common_tools as a base tool. Includes 3 unit tests.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add promote_to_product tool — merges project worktree into shar…",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-04-21T09:31:02Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "804daa99972b84b3700af3fb8a3d621921c2636c",
"body": "…on archive\n\nWire product workspace worktree management into the project lifecycle:\n- _setup_product_worktree: called from create_named_project when product_id is set\n- _cleanup_product_worktree: called from archive_project to remove worktree\n- delete_product: removes product_worktree dirs before deleting project dirs\n- 4 new tests in TestLifecycleHooks covering create, reuse, no-op, and archive\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: lifecycle hooks — worktree creation on project create, cleanup …",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-04-21T09:26:01Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f50869afb4348b68cdc97977f28b0e4bf49b703d",
"body": "…TREE_DIR_NAME config",
"is_bot": false,
"headline": "feat: add workspace_initialized field to product model + PRODUCT_WORK…",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-04-21T09:21:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "991b9b114f2cfa3e2ab7963518b8adad5c7d3458",
"body": null,
"is_bot": false,
"headline": "fix: use your_version/product_version keys in conflict dict per spec",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-04-21T09:18:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1b8adba7c588d222b196d77becbcfd0a29585f6b",
"body": "…rees\n\nTDD implementation of init_workspace, add/remove_worktree, and promote\n(stateful merge with conflict detection, resolution retry, and abort).\nStrips GIT_* env vars in _git helpers to prevent test pollution from\npre-commit hooks and worktree contexts.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add product_workspace module — git operations for product workt…",
"author_name": "workspace",
"author_login": null,
"committed_at": "2026-04-21T09:14:31Z",
"body_truncated": false,
"is_coding_agent": true
}
],
"releases_count": 25,
"commits_last_year": 986,
"latest_release_at": "2026-05-09T23:36:41Z",
"latest_release_tag": "v0.7.73",
"releases_from_tags": false,
"days_since_last_push": 8,
"active_weeks_last_year": 12,
"days_since_latest_release": 80,
"mean_days_between_releases": 3.6
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 62,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "@1mancompany/onemancompany",
"exists": true,
"license": "Apache-2.0",
"keywords": [
"ai",
"agent",
"multi-agent",
"langchain",
"company",
"one-man-company",
"ai-native",
"autonomous-agent"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@1mancompany/onemancompany",
"is_deprecated": false,
"latest_version": "0.7.73",
"repository_url": "https://github.com/1mancompany/OneManCompany",
"versions_count": 418,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 4662,
"first_published_at": "2026-03-14T09:48:55.524000Z",
"latest_published_at": "2026-05-09T22:30:02.174000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 80
}
]
},
"popularity": {
"forks": 74,
"stars": 369,
"watchers": 1,
"fork_history": {
"days": [
{
"date": "2026-03-17",
"count": 1
},
{
"date": "2026-03-21",
"count": 1
},
{
"date": "2026-04-04",
"count": 1
},
{
"date": "2026-04-09",
"count": 1
},
{
"date": "2026-04-14",
"count": 1
},
{
"date": "2026-04-28",
"count": 4
},
{
"date": "2026-04-29",
"count": 1
},
{
"date": "2026-04-30",
"count": 1
},
{
"date": "2026-05-01",
"count": 1
},
{
"date": "2026-05-02",
"count": 1
},
{
"date": "2026-05-03",
"count": 1
},
{
"date": "2026-05-04",
"count": 1
},
{
"date": "2026-05-06",
"count": 5
},
{
"date": "2026-05-07",
"count": 1
},
{
"date": "2026-05-09",
"count": 1
},
{
"date": "2026-05-10",
"count": 1
},
{
"date": "2026-05-11",
"count": 7
},
{
"date": "2026-05-12",
"count": 3
},
{
"date": "2026-05-13",
"count": 2
},
{
"date": "2026-05-14",
"count": 3
},
{
"date": "2026-05-15",
"count": 1
},
{
"date": "2026-05-17",
"count": 2
},
{
"date": "2026-05-18",
"count": 1
},
{
"date": "2026-05-20",
"count": 2
},
{
"date": "2026-05-24",
"count": 1
},
{
"date": "2026-05-25",
"count": 1
},
{
"date": "2026-05-26",
"count": 1
},
{
"date": "2026-05-28",
"count": 2
},
{
"date": "2026-06-02",
"count": 2
},
{
"date": "2026-06-06",
"count": 1
},
{
"date": "2026-06-08",
"count": 1
},
{
"date": "2026-06-09",
"count": 1
},
{
"date": "2026-06-15",
"count": 1
},
{
"date": "2026-06-23",
"count": 1
},
{
"date": "2026-07-03",
"count": 1
},
{
"date": "2026-07-16",
"count": 1
},
{
"date": "2026-07-17",
"count": 1
},
{
"date": "2026-07-20",
"count": 1
},
{
"date": "2026-07-22",
"count": 1
},
{
"date": "2026-07-23",
"count": 1
},
{
"date": "2026-07-26",
"count": 1
},
{
"date": "2026-07-28",
"count": 2
}
],
"complete": true,
"collected": 65,
"total_forks": 74
},
"star_history": null,
"open_issues_and_prs": 13
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": true,
"has_dockerfile": false,
"has_mcp_signal": true,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 677463,
"source_files_sampled": 388,
"oversized_source_files": 19,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 1470
},
"dependencies": {
"manifests": [
"package.json",
"pyproject.toml"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "cryptography",
"direct": false,
"version": "46.0.5",
"severity": "critical",
"ecosystem": "pypi",
"cvss_score": 9.8,
"advisory_ids": [
"GHSA-537c-gmf6-5ccf",
"GHSA-m959-cc7f-wv43",
"GHSA-p423-j2cm-9vmq",
"PYSEC-2026-35",
"PYSEC-2026-36"
],
"fixed_version": "48.0.1",
"advisory_count": 5,
"oldest_advisory_days": 123
},
{
"name": "gitpython",
"direct": false,
"version": "3.1.46",
"severity": "critical",
"ecosystem": "pypi",
"cvss_score": 9.8,
"advisory_ids": [
"GHSA-2f96-g7mh-g2hx",
"GHSA-3rp5-jjmw-4wv2",
"GHSA-6p8h-3wgx-97gf",
"GHSA-7545-fcxq-7j24",
"GHSA-94p4-4cq8-9g67",
"GHSA-956x-8gvw-wg5v",
"GHSA-fjr4-x663-mwxc",
"GHSA-mv93-w799-cj2w",
"GHSA-r9mr-m37c-5fr3",
"GHSA-rpm5-65cw-6hj4"
],
"fixed_version": "3.1.55",
"advisory_count": 17,
"oldest_advisory_days": 94
},
{
"name": "langchain-core",
"direct": true,
"version": "1.2.16",
"severity": "high",
"ecosystem": "pypi",
"cvss_score": 8.2,
"advisory_ids": [
"GHSA-926x-3r5x-gfhw",
"GHSA-pjwx-r37v-7724",
"GHSA-qh6h-p6c9-ff54",
"PYSEC-2026-2193",
"PYSEC-2026-2563",
"PYSEC-2026-2564"
],
"fixed_version": "1.3.3",
"advisory_count": 6,
"oldest_advisory_days": 124
},
{
"name": "langgraph",
"direct": true,
"version": "1.0.9",
"severity": "high",
"ecosystem": "pypi",
"cvss_score": 7.2,
"advisory_ids": [
"GHSA-g48c-2wqr-h844",
"PYSEC-2026-83"
],
"fixed_version": "1.0.10rc1",
"advisory_count": 2,
"oldest_advisory_days": 145
},
{
"name": "mcp",
"direct": true,
"version": "1.26.0",
"severity": "high",
"ecosystem": "pypi",
"cvss_score": 7.6,
"advisory_ids": [
"GHSA-hvrp-rf83-w775",
"GHSA-jpw9-pfvf-9f58",
"GHSA-vj7q-gjh5-988w",
"PYSEC-2026-3481",
"PYSEC-2026-3482",
"PYSEC-2026-3483"
],
"fixed_version": "1.28.1",
"advisory_count": 6,
"oldest_advisory_days": 12
},
{
"name": "click",
"direct": false,
"version": "8.1.8",
"severity": "high",
"ecosystem": "pypi",
"cvss_score": 7.2,
"advisory_ids": [
"PYSEC-2026-2132"
],
"fixed_version": "8.3.3",
"advisory_count": 1,
"oldest_advisory_days": 90
},
{
"name": "langsmith",
"direct": false,
"version": "0.7.7",
"severity": "high",
"ecosystem": "pypi",
"cvss_score": 7.7,
"advisory_ids": [
"GHSA-3644-q5cj-c5c7",
"GHSA-f4xh-w4cj-qxq8",
"GHSA-rr7j-v2q5-chgv",
"PYSEC-2026-2582",
"PYSEC-2026-2583"
],
"fixed_version": "1.0.7",
"advisory_count": 5,
"oldest_advisory_days": 104
},
{
"name": "pyjwt",
"direct": false,
"version": "2.11.0",
"severity": "high",
"ecosystem": "pypi",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-752w-5fwx-jx9f",
"GHSA-993g-76c3-p5m4",
"GHSA-fhv5-28vv-h8m8",
"GHSA-jq35-7prp-9v3f",
"GHSA-w7vc-732c-9m39",
"GHSA-xgmm-8j9v-c9wx",
"PYSEC-2026-120",
"PYSEC-2026-175",
"PYSEC-2026-176",
"PYSEC-2026-177"
],
"fixed_version": "2.13.0",
"advisory_count": 12,
"oldest_advisory_days": 138
},
{
"name": "python-multipart",
"direct": false,
"version": "0.0.22",
"severity": "high",
"ecosystem": "pypi",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-5rvq-cxj2-64vf",
"GHSA-6jv3-5f52-599m",
"GHSA-mj87-hwqh-73pj",
"GHSA-pp6c-gr5w-3c5g",
"GHSA-v9pg-7xvm-68hf",
"GHSA-vffw-93wf-4j4q",
"PYSEC-2026-3036",
"PYSEC-2026-3037",
"PYSEC-2026-3038",
"PYSEC-2026-3039"
],
"fixed_version": "0.0.31",
"advisory_count": 12,
"oldest_advisory_days": 105
},
{
"name": "starlette",
"direct": false,
"version": "0.52.1",
"severity": "high",
"ecosystem": "pypi",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-82w8-qh3p-5jfq",
"GHSA-86qp-5c8j-p5mr",
"GHSA-jp82-jpqv-5vv3",
"GHSA-wqp7-x3pw-xc5r",
"GHSA-x746-7m8f-x49c",
"PYSEC-2026-161",
"PYSEC-2026-2280",
"PYSEC-2026-2281",
"PYSEC-2026-248",
"PYSEC-2026-249"
],
"fixed_version": "1.3.1",
"advisory_count": 10,
"oldest_advisory_days": 68
},
{
"name": "urllib3",
"direct": false,
"version": "2.6.3",
"severity": "high",
"ecosystem": "pypi",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-mf9v-mfxr-j63j",
"GHSA-qccp-gfcp-xxvc",
"PYSEC-2026-141",
"PYSEC-2026-142"
],
"fixed_version": "2.7.0",
"advisory_count": 4,
"oldest_advisory_days": 79
},
{
"name": "langchain",
"direct": true,
"version": "1.2.10",
"severity": "moderate",
"ecosystem": "pypi",
"cvss_score": 5.5,
"advisory_ids": [
"GHSA-gr75-jv2w-4656",
"PYSEC-2026-2192"
],
"fixed_version": "1.4.6",
"advisory_count": 2,
"oldest_advisory_days": 43
},
{
"name": "langchain-anthropic",
"direct": true,
"version": "1.3.4",
"severity": "moderate",
"ecosystem": "pypi",
"cvss_score": 5.1,
"advisory_ids": [
"GHSA-gr75-jv2w-4656",
"PYSEC-2026-2556"
],
"fixed_version": "1.4.6",
"advisory_count": 2,
"oldest_advisory_days": 43
},
{
"name": "pydantic-settings",
"direct": true,
"version": "2.13.1",
"severity": "moderate",
"ecosystem": "pypi",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-4xgf-cpjx-pc3j"
],
"fixed_version": "2.14.2",
"advisory_count": 1,
"oldest_advisory_days": 39
},
{
"name": "python-dotenv",
"direct": true,
"version": "1.2.1",
"severity": "moderate",
"ecosystem": "pypi",
"cvss_score": 6.6,
"advisory_ids": [
"GHSA-mf9w-mj56-hr94",
"PYSEC-2026-2270"
],
"fixed_version": "1.2.2",
"advisory_count": 2,
"oldest_advisory_days": 100
},
{
"name": "idna",
"direct": false,
"version": "3.11",
"severity": "moderate",
"ecosystem": "pypi",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-65pc-fj4g-8rjx",
"PYSEC-2026-215"
],
"fixed_version": "3.15",
"advisory_count": 2,
"oldest_advisory_days": 71
},
{
"name": "langgraph-checkpoint",
"direct": false,
"version": "4.0.0",
"severity": "moderate",
"ecosystem": "pypi",
"cvss_score": 6.8,
"advisory_ids": [
"GHSA-fjqc-hq36-qh5p",
"PYSEC-2026-2573"
],
"fixed_version": "4.1.1",
"advisory_count": 2,
"oldest_advisory_days": 34
},
{
"name": "langgraph-sdk",
"direct": false,
"version": "0.3.9",
"severity": "moderate",
"ecosystem": "pypi",
"cvss_score": 4.2,
"advisory_ids": [
"GHSA-w39p-vh2g-g8g5",
"PYSEC-2026-2575"
],
"fixed_version": "0.3.15",
"advisory_count": 2,
"oldest_advisory_days": 34
},
{
"name": "pytest",
"direct": false,
"version": "9.0.2",
"severity": "moderate",
"ecosystem": "pypi",
"cvss_score": 6.8,
"advisory_ids": [
"GHSA-6w46-j5rx-g56g",
"PYSEC-2026-1845"
],
"fixed_version": "9.0.3",
"advisory_count": 2,
"oldest_advisory_days": 188
},
{
"name": "requests",
"direct": false,
"version": "2.32.5",
"severity": "moderate",
"ecosystem": "pypi",
"cvss_score": 5.5,
"advisory_ids": [
"GHSA-gc5v-m9x4-r6x2",
"PYSEC-2026-2275"
],
"fixed_version": "2.33.0",
"advisory_count": 2,
"oldest_advisory_days": 126
},
{
"name": "langchain-openai",
"direct": true,
"version": "1.1.10",
"severity": "low",
"ecosystem": "pypi",
"cvss_score": 3.1,
"advisory_ids": [
"GHSA-r7w7-9xr2-qq2r",
"PYSEC-2026-76"
],
"fixed_version": "1.1.14",
"advisory_count": 2,
"oldest_advisory_days": 103
},
{
"name": "pygments",
"direct": false,
"version": "2.19.2",
"severity": "low",
"ecosystem": "pypi",
"cvss_score": 3.3,
"advisory_ids": [
"GHSA-5239-wwwm-4pmq",
"PYSEC-2026-2987"
],
"fixed_version": "2.20.0",
"advisory_count": 2,
"oldest_advisory_days": 129
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"low": 2,
"high": 9,
"critical": 2,
"moderate": 9
},
"advisory_count": 101,
"affected_count": 22,
"assessed_count": 101,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 8
},
"ecosystems": [
"npm",
"pypi"
],
"dependencies": [
{
"name": "fastapi",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.115"
},
{
"name": "uvicorn",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.34"
},
{
"name": "websockets",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=13"
},
{
"name": "langchain",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.3"
},
{
"name": "langchain-core",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.3"
},
{
"name": "langgraph",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.3"
},
{
"name": "langchain-openai",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.3"
},
{
"name": "langchain-anthropic",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.3"
},
{
"name": "langchain-mcp-adapters",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.1"
},
{
"name": "mcp",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=1.0"
},
{
"name": "pydantic",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=2.9"
},
{
"name": "pydantic-settings",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=2.6"
},
{
"name": "python-dotenv",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=1.0"
},
{
"name": "pyyaml",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=6.0.3"
},
{
"name": "httpx",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.27"
},
{
"name": "watchdog",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=4.0"
},
{
"name": "loguru",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.7"
},
{
"name": "rich",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=13.0"
},
{
"name": "InquirerPy",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.3"
},
{
"name": "datasets",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=4.8.3"
},
{
"name": "ddgs",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=8.0"
},
{
"name": "agent-client-protocol",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": "==0.9.0"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "fastapi",
"direct": true,
"version": "0.133.1",
"ecosystem": "pypi"
},
{
"name": "httpx",
"direct": true,
"version": "0.28.1",
"ecosystem": "pypi"
},
{
"name": "langchain",
"direct": true,
"version": "1.2.10",
"ecosystem": "pypi"
},
{
"name": "langchain-anthropic",
"direct": true,
"version": "1.3.4",
"ecosystem": "pypi"
},
{
"name": "langchain-core",
"direct": true,
"version": "1.2.16",
"ecosystem": "pypi"
},
{
"name": "langchain-mcp-adapters",
"direct": true,
"version": "0.2.1",
"ecosystem": "pypi"
},
{
"name": "langchain-openai",
"direct": true,
"version": "1.1.10",
"ecosystem": "pypi"
},
{
"name": "langgraph",
"direct": true,
"version": "1.0.9",
"ecosystem": "pypi"
},
{
"name": "loguru",
"direct": true,
"version": "0.7.3",
"ecosystem": "pypi"
},
{
"name": "mcp",
"direct": true,
"version": "1.26.0",
"ecosystem": "pypi"
},
{
"name": "pydantic",
"direct": true,
"version": "2.12.5",
"ecosystem": "pypi"
},
{
"name": "pydantic-settings",
"direct": true,
"version": "2.13.1",
"ecosystem": "pypi"
},
{
"name": "python-dotenv",
"direct": true,
"version": "1.2.1",
"ecosystem": "pypi"
},
{
"name": "pyyaml",
"direct": true,
"version": "6.0.3",
"ecosystem": "pypi"
},
{
"name": "rich",
"direct": true,
"version": "14.3.3",
"ecosystem": "pypi"
},
{
"name": "uvicorn",
"direct": true,
"version": "0.41.0",
"ecosystem": "pypi"
},
{
"name": "watchdog",
"direct": true,
"version": "6.0.0",
"ecosystem": "pypi"
},
{
"name": "websockets",
"direct": true,
"version": "16.0",
"ecosystem": "pypi"
},
{
"name": "annotated-doc",
"direct": false,
"version": "0.0.4",
"ecosystem": "pypi"
},
{
"name": "annotated-types",
"direct": false,
"version": "0.7.0",
"ecosystem": "pypi"
},
{
"name": "anthropic",
"direct": false,
"version": "0.84.0",
"ecosystem": "pypi"
},
{
"name": "anyio",
"direct": false,
"version": "4.12.1",
"ecosystem": "pypi"
},
{
"name": "attrs",
"direct": false,
"version": "25.4.0",
"ecosystem": "pypi"
},
{
"name": "certifi",
"direct": false,
"version": "2026.2.25",
"ecosystem": "pypi"
},
{
"name": "cffi",
"direct": false,
"version": "2.0.0",
"ecosystem": "pypi"
},
{
"name": "charset-normalizer",
"direct": false,
"version": "3.4.4",
"ecosystem": "pypi"
},
{
"name": "click",
"direct": false,
"version": "8.1.8",
"ecosystem": "pypi"
},
{
"name": "click-option-group",
"direct": false,
"version": "0.5.9",
"ecosystem": "pypi"
},
{
"name": "colorama",
"direct": false,
"version": "0.4.6",
"ecosystem": "pypi"
},
{
"name": "cryptography",
"direct": false,
"version": "46.0.5",
"ecosystem": "pypi"
},
{
"name": "deprecated",
"direct": false,
"version": "1.3.1",
"ecosystem": "pypi"
},
{
"name": "distro",
"direct": false,
"version": "1.9.0",
"ecosystem": "pypi"
},
{
"name": "docstring-parser",
"direct": false,
"version": "0.17.0",
"ecosystem": "pypi"
},
{
"name": "dotty-dict",
"direct": false,
"version": "1.3.1",
"ecosystem": "pypi"
},
{
"name": "gitdb",
"direct": false,
"version": "4.0.12",
"ecosystem": "pypi"
},
{
"name": "gitpython",
"direct": false,
"version": "3.1.46",
"ecosystem": "pypi"
},
{
"name": "h11",
"direct": false,
"version": "0.16.0",
"ecosystem": "pypi"
},
{
"name": "httpcore",
"direct": false,
"version": "1.0.9",
"ecosystem": "pypi"
},
{
"name": "httptools",
"direct": false,
"version": "0.7.1",
"ecosystem": "pypi"
},
{
"name": "httpx-sse",
"direct": false,
"version": "0.4.3",
"ecosystem": "pypi"
},
{
"name": "idna",
"direct": false,
"version": "3.11",
"ecosystem": "pypi"
},
{
"name": "importlib-resources",
"direct": false,
"version": "6.5.2",
"ecosystem": "pypi"
},
{
"name": "iniconfig",
"direct": false,
"version": "2.3.0",
"ecosystem": "pypi"
},
{
"name": "jinja2",
"direct": false,
"version": "3.1.6",
"ecosystem": "pypi"
},
{
"name": "jiter",
"direct": false,
"version": "0.13.0",
"ecosystem": "pypi"
},
{
"name": "jsonpatch",
"direct": false,
"version": "1.33",
"ecosystem": "pypi"
},
{
"name": "jsonpointer",
"direct": false,
"version": "3.0.0",
"ecosystem": "pypi"
},
{
"name": "jsonschema",
"direct": false,
"version": "4.26.0",
"ecosystem": "pypi"
},
{
"name": "jsonschema-specifications",
"direct": false,
"version": "2025.9.1",
"ecosystem": "pypi"
},
{
"name": "langgraph-checkpoint",
"direct": false,
"version": "4.0.0",
"ecosystem": "pypi"
},
{
"name": "langgraph-prebuilt",
"direct": false,
"version": "1.0.8",
"ecosystem": "pypi"
},
{
"name": "langgraph-sdk",
"direct": false,
"version": "0.3.9",
"ecosystem": "pypi"
},
{
"name": "langsmith",
"direct": false,
"version": "0.7.7",
"ecosystem": "pypi"
},
{
"name": "markdown-it-py",
"direct": false,
"version": "4.0.0",
"ecosystem": "pypi"
},
{
"name": "markupsafe",
"direct": false,
"version": "3.0.3",
"ecosystem": "pypi"
},
{
"name": "mdurl",
"direct": false,
"version": "0.1.2",
"ecosystem": "pypi"
},
{
"name": "onemancompany",
"direct": false,
"version": "0.2.383",
"ecosystem": "pypi"
},
{
"name": "openai",
"direct": false,
"version": "2.24.0",
"ecosystem": "pypi"
},
{
"name": "opensandbox",
"direct": false,
"version": "0.1.5",
"ecosystem": "pypi"
},
{
"name": "opensandbox-code-interpreter",
"direct": false,
"version": "0.1.1",
"ecosystem": "pypi"
},
{
"name": "orjson",
"direct": false,
"version": "3.11.7",
"ecosystem": "pypi"
},
{
"name": "ormsgpack",
"direct": false,
"version": "1.12.2",
"ecosystem": "pypi"
},
{
"name": "packaging",
"direct": false,
"version": "26.0",
"ecosystem": "pypi"
},
{
"name": "pluggy",
"direct": false,
"version": "1.6.0",
"ecosystem": "pypi"
},
{
"name": "pycparser",
"direct": false,
"version": "3.0",
"ecosystem": "pypi"
},
{
"name": "pydantic-core",
"direct": false,
"version": "2.41.5",
"ecosystem": "pypi"
},
{
"name": "pygments",
"direct": false,
"version": "2.19.2",
"ecosystem": "pypi"
},
{
"name": "pyjwt",
"direct": false,
"version": "2.11.0",
"ecosystem": "pypi"
},
{
"name": "pytest",
"direct": false,
"version": "9.0.2",
"ecosystem": "pypi"
},
{
"name": "pytest-asyncio",
"direct": false,
"version": "1.3.0",
"ecosystem": "pypi"
},
{
"name": "pytest-timeout",
"direct": false,
"version": "2.4.0",
"ecosystem": "pypi"
},
{
"name": "python-dateutil",
"direct": false,
"version": "2.9.0.post0",
"ecosystem": "pypi"
},
{
"name": "python-gitlab",
"direct": false,
"version": "6.5.0",
"ecosystem": "pypi"
},
{
"name": "python-multipart",
"direct": false,
"version": "0.0.22",
"ecosystem": "pypi"
},
{
"name": "python-semantic-release",
"direct": false,
"version": "10.5.3",
"ecosystem": "pypi"
},
{
"name": "pywin32",
"direct": false,
"version": "311",
"ecosystem": "pypi"
},
{
"name": "referencing",
"direct": false,
"version": "0.37.0",
"ecosystem": "pypi"
},
{
"name": "regex",
"direct": false,
"version": "2026.2.19",
"ecosystem": "pypi"
},
{
"name": "requests",
"direct": false,
"version": "2.32.5",
"ecosystem": "pypi"
},
{
"name": "requests-toolbelt",
"direct": false,
"version": "1.0.0",
"ecosystem": "pypi"
},
{
"name": "rpds-py",
"direct": false,
"version": "0.30.0",
"ecosystem": "pypi"
},
{
"name": "shellingham",
"direct": false,
"version": "1.5.4",
"ecosystem": "pypi"
},
{
"name": "six",
"direct": false,
"version": "1.17.0",
"ecosystem": "pypi"
},
{
"name": "smmap",
"direct": false,
"version": "5.0.3",
"ecosystem": "pypi"
},
{
"name": "sniffio",
"direct": false,
"version": "1.3.1",
"ecosystem": "pypi"
},
{
"name": "sse-starlette",
"direct": false,
"version": "3.2.0",
"ecosystem": "pypi"
},
{
"name": "starlette",
"direct": false,
"version": "0.52.1",
"ecosystem": "pypi"
},
{
"name": "tenacity",
"direct": false,
"version": "9.1.4",
"ecosystem": "pypi"
},
{
"name": "tiktoken",
"direct": false,
"version": "0.12.0",
"ecosystem": "pypi"
},
{
"name": "tomlkit",
"direct": false,
"version": "0.13.3",
"ecosystem": "pypi"
},
{
"name": "tqdm",
"direct": false,
"version": "4.67.3",
"ecosystem": "pypi"
},
{
"name": "typing-extensions",
"direct": false,
"version": "4.15.0",
"ecosystem": "pypi"
},
{
"name": "typing-inspection",
"direct": false,
"version": "0.4.2",
"ecosystem": "pypi"
},
{
"name": "urllib3",
"direct": false,
"version": "2.6.3",
"ecosystem": "pypi"
},
{
"name": "uuid-utils",
"direct": false,
"version": "0.14.1",
"ecosystem": "pypi"
},
{
"name": "uvloop",
"direct": false,
"version": "0.22.1",
"ecosystem": "pypi"
},
{
"name": "watchfiles",
"direct": false,
"version": "1.1.1",
"ecosystem": "pypi"
},
{
"name": "win32-setctime",
"direct": false,
"version": "1.2.0",
"ecosystem": "pypi"
},
{
"name": "wrapt",
"direct": false,
"version": "2.1.2",
"ecosystem": "pypi"
},
{
"name": "xxhash",
"direct": false,
"version": "3.6.0",
"ecosystem": "pypi"
},
{
"name": "zstandard",
"direct": false,
"version": "0.25.0",
"ecosystem": "pypi"
}
],
"collected": true,
"truncated": false,
"total_count": 101,
"direct_count": 18,
"indirect_count": 83
}
},
"maintainership": {
"issues": {
"open_prs": 1,
"merged_prs": 371,
"open_issues": 12,
"closed_ratio": 0.571,
"closed_issues": 16,
"closed_unmerged_prs": 22
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "TESTPERSONAL",
"commits": 513,
"avatar_url": "https://avatars.githubusercontent.com/u/6664588?v=4"
},
{
"type": "User",
"login": "zhengxuyu",
"commits": 411,
"avatar_url": "https://avatars.githubusercontent.com/u/20417640?v=4"
},
{
"type": "User",
"login": "fuyu12345",
"commits": 9,
"avatar_url": "https://avatars.githubusercontent.com/u/95920543?v=4"
},
{
"type": "User",
"login": "nickhezy",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/88995643?v=4"
},
{
"type": "User",
"login": "mengfn",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/173510632?v=4"
},
{
"type": "User",
"login": "AMagicPear",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/63146698?v=4"
},
{
"type": "User",
"login": "nomhiro",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/68546041?v=4"
}
],
"contributors_sampled": 7,
"top_contributor_share": 0.547
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"auto-assign-owner.yml",
"ci.yml",
"claude-code-review.yml",
"claude.yml",
"docs.yml",
"npm-publish.yml",
"test.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"uv.lock"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 5,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 1,
"reason": "Found 3/21 approved changesets -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 21 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "56 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "1855764b601ac5183e8b61a06fb8fa8d051e9a5b",
"ran_at": "2026-07-29T19:55:14Z",
"aggregate_score": 4.1,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-21T16:35:42Z",
"oldest_open_prs": [
{
"number": 430,
"created_at": "2026-07-21T12:55:33Z",
"last_comment_at": "2026-07-21T16:35:38Z",
"last_comment_author": "zhengxuyu"
}
],
"last_merged_pr_at": "2026-07-21T12:42:17Z",
"ci_last_conclusion": "SKIPPED",
"oldest_open_issues": [
{
"number": 362,
"created_at": "2026-04-30T01:08:20Z",
"last_comment_at": "2026-05-02T19:04:56Z",
"last_comment_author": "yjh051108"
},
{
"number": 363,
"created_at": "2026-04-30T13:10:07Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 406,
"created_at": "2026-07-17T04:21:38Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 409,
"created_at": "2026-07-17T04:28:07Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 410,
"created_at": "2026-07-17T04:28:50Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 421,
"created_at": "2026-07-21T09:25:27Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 422,
"created_at": "2026-07-21T09:25:27Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 423,
"created_at": "2026-07-21T09:25:27Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 424,
"created_at": "2026-07-21T09:25:27Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 425,
"created_at": "2026-07-21T09:25:28Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 426,
"created_at": "2026-07-21T09:25:28Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 427,
"created_at": "2026-07-21T09:25:29Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/1mancompany/OneManCompany",
"host": "github.com",
"name": "OneManCompany",
"owner": "1mancompany"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"security": 41,
"vitality": 79,
"community": 65,
"governance": 57,
"engineering": 77
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 79,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"commits_last_year": 986,
"human_commit_share": 1,
"days_since_last_push": 8,
"active_weeks_last_year": 12
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 8 days ago",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 8
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "12/52 weeks with commits",
"points": 8.3,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 12
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "986 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 986
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 21 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 25,
"latest_release_tag": "v0.7.73",
"releases_from_tags": false,
"days_since_latest_release": 80,
"mean_days_between_releases": 3.6
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "25 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 25
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 80 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 80
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~3.6 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 3.6
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 65,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "moderate",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 57,
"inputs": {
"forks": 74,
"stars": 369,
"watchers": 1,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "369 stars",
"points": 41.6,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 369
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "74 forks",
"points": 15.5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 74
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "1 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 1
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 77,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 61,
"inputs": {
"packages": [
"@1mancompany/onemancompany"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 4662
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "4,662 downloads/month across npm",
"points": 48.9,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 4662,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 57,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 29,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 7,
"top_contributor_share": 0.547
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 55% of commits",
"points": 10.2,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 55
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "7 contributors",
"points": 9.5,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 7
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"merged_prs": 371,
"open_issues": 12,
"closed_issues": 16,
"issue_closed_ratio": 0.571,
"closed_unmerged_prs": 22
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "57% of issues closed",
"points": 26.7,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 57
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "371/393 decided PRs merged",
"points": 36.1,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 371,
"decided": 393
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 3/21 approved changesets -- score normalized to 1",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 51,
"inputs": {
"followers": 16,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "1mancompany",
"public_repos": 31,
"account_age_days": 183
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "16 followers of 1mancompany",
"points": 8.8,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 16,
"login": "1mancompany"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "31 public repos, account ~0 yr old",
"points": 12,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 31
}
},
{
"code": "account_age_years",
"params": {
"years": 0
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"@1mancompany/onemancompany"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 80
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 80 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 80
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "418 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 418
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 77,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "7 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 7
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"topics": [
"one-person-company",
"openclaw",
"self-evolving",
"agent-team",
"one-man-company",
"claude-code",
"multiagent"
],
"has_wiki": false,
"homepage": "https://1mancompany.github.io/OneManCompany/",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://1mancompany.github.io/OneManCompany/",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "7 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 7
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 41,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 41,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 4.1
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 3.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 3/21 approved changesets -- score normalized to 1",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 21 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "56 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "at_risk",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 101 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 101
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 41,
"inputs": {
"source": "osv",
"advisories": 101,
"affected_packages": 22,
"assessed_packages": 101,
"unassessed_packages": 0,
"affected_by_severity": "critical 2, high 9, moderate 9, low 2",
"direct_affected_packages": 8
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "8 affected: langchain-core 1.2.16 (high 8.2), langgraph 1.0.9 (high 7.2), mcp 1.26.0 (high 7.6), +5 more",
"points": 6,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 8,
"packages": "langchain-core 1.2.16 (high 8.2), langgraph 1.0.9 (high 7.2), mcp 1.26.0 (high 7.6)"
}
},
{
"code": "advisories_affected_more",
"params": {
"count": 5
}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "4 advisory-carrying package(s) unaddressed past 90 days; oldest published 145 days ago",
"points": 24.6,
"status": "partial",
"details": [
{
"code": "advisories_stale",
"params": {
"days": 90,
"count": 4,
"oldest": 145
}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 101,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 4
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 58,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"has_llms_txt": true,
"legible_history_share": 0.99,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 1470
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": "llms.txt present",
"points": 15,
"status": "met",
"details": [
{
"code": "llms_txt_present",
"params": {}
}
],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "99 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 99,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 42,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"uv.lock"
],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0.62,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "62 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 62,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 52,
"inputs": {
"primary_language": "Python",
"largest_source_bytes": 677463,
"source_files_sampled": 388,
"oversized_source_files": 19
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Python without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "Python"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "19/388 source files over 60KB",
"points": 52.3,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 388,
"oversized": 19
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "critical",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"example_dirs": [],
"has_mcp_signal": true,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 20,
"status": "met",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"Could not fetch pypi package 'onemancompany' from its registry"
],
"report_type": "repository",
"generated_at": "2026-07-29T19:55:36.495182Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/1/1mancompany/OneManCompany.svg",
"full_name": "1mancompany/OneManCompany",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with 1mancompany/OneManCompany. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
