AccessLint/accesslint holds a health index of 61 out of 100, placing it in the Moderate band. It scores highest on Vitality (81/100) and lowest on Community & Adoption (34/100). It was last updated today. A single contributor accounts for most of its recent work.
61
overall / 100
Moderate
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
61
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Direct dependencies free of known advisories — no direct dependency carries a known advisory
25/25
Indirect dependencies free of known advisories — no indirect dependency carries a known advisory
0/40
No advisories left outstanding — no advisory carries a publication date
Inputs used
source
osv
advisories
0
affected_packages
0
assessed_packages
30
unassessed_packages
0
affected_by_severity
none
direct_affected_packages
0
Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:@accesslint/cli@0.12.0 runtime dependency closure — what installing the published package pulls in — 30 packages. Reachability is not analyzed.
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
Star and fork history 0 ★ / 3 ⇿
0Stars
3Forks
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
OpenSSF Scorecard 3.6 / 10
3.6aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-27 08:27 UTC
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Dependency advisories 0
Installing npm:@accesslint/cli@0.12.0 pulls in 30 packages, direct and transitive: 0 carry known advisories, of which 0 are direct dependencies.
No known advisories affect the assessed dependencies.
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 1160,
"has_wiki": true,
"homepage": null,
"languages": {
"HTML": 5774,
"Shell": 2764,
"JavaScript": 19055,
"TypeScript": 1457059
},
"pushed_at": "2026-07-26T23:45:28Z",
"created_at": "2026-04-16T22:53:08Z",
"owner_type": "Organization",
"updated_at": "2026-07-26T23:45:33Z",
"description": "Accessibility testing tools monorepo — core, CLI, MCP, Playwright, Storybook, Vitest",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "main",
"license_spdx_raw": null,
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript"
]
},
"owner": {
"blog": "https://accesslint.com",
"name": "AccessLint",
"type": "Organization",
"login": "AccessLint",
"company": null,
"location": "United States of America",
"followers": 61,
"avatar_url": "https://avatars.githubusercontent.com/u/10156311?v=4",
"created_at": "2014-12-11T15:32:33Z",
"is_verified": null,
"public_repos": 24,
"account_age_days": 4245
},
"license": {
"state": "absent",
"spdx_id": null,
"raw_spdx": null,
"file_present": false,
"scorecard_found": false,
"profile_has_license": false
},
"activity": {
"releases": [
{
"tag": "playwright/v0.8.0",
"kind": "other",
"published_at": "2026-07-26T23:38:48Z"
},
{
"tag": "storybook-addon/v0.8.13",
"kind": "other",
"published_at": "2026-07-26T23:35:23Z"
},
{
"tag": "vitest/v0.3.2",
"kind": "other",
"published_at": "2026-07-26T23:35:18Z"
},
{
"tag": "jest/v0.1.3",
"kind": "other",
"published_at": "2026-07-26T23:35:18Z"
},
{
"tag": "core/v0.16.0",
"kind": "other",
"published_at": "2026-07-20T17:59:34Z"
},
{
"tag": "playwright/v0.7.0",
"kind": "other",
"published_at": "2026-07-20T17:59:22Z"
},
{
"tag": "cli/v0.12.0",
"kind": "other",
"published_at": "2026-07-20T17:59:10Z"
},
{
"tag": "core/v0.15.0",
"kind": "other",
"published_at": "2026-07-20T17:23:28Z"
},
{
"tag": "cli/v0.11.1",
"kind": "other",
"published_at": "2026-07-20T16:21:51Z"
},
{
"tag": "heal-diff/v0.2.0",
"kind": "other",
"published_at": "2026-07-20T03:03:23Z"
},
{
"tag": "core/v0.14.1",
"kind": "other",
"published_at": "2026-07-20T16:46:49Z"
},
{
"tag": "core/v0.14.0",
"kind": "other",
"published_at": "2026-07-20T03:04:07Z"
},
{
"tag": "cli/v0.11.0",
"kind": "other",
"published_at": "2026-07-20T03:03:43Z"
},
{
"tag": "playwright/v0.6.0",
"kind": "other",
"published_at": "2026-07-20T03:03:42Z"
},
{
"tag": "mcp/v0.10.0",
"kind": "other",
"published_at": "2026-06-05T01:46:23Z"
},
{
"tag": "cli/v0.10.0",
"kind": "other",
"published_at": "2026-06-05T01:43:00Z"
},
{
"tag": "mcp/v0.9.0",
"kind": "other",
"published_at": "2026-06-04T01:43:19Z"
},
{
"tag": "cli/v0.9.0",
"kind": "other",
"published_at": "2026-06-04T01:22:55Z"
},
{
"tag": "cli/v0.8.0",
"kind": "other",
"published_at": "2026-06-04T01:08:43Z"
},
{
"tag": "cli/v0.7.5",
"kind": "other",
"published_at": "2026-06-02T17:05:57Z"
},
{
"tag": "cli/v0.7.4",
"kind": "other",
"published_at": "2026-06-02T15:50:26Z"
},
{
"tag": "cli/v0.7.3",
"kind": "other",
"published_at": "2026-06-02T15:40:36Z"
},
{
"tag": "cli/v0.7.2",
"kind": "other",
"published_at": "2026-06-02T15:30:49Z"
},
{
"tag": "cli/v0.7.1",
"kind": "other",
"published_at": "2026-06-02T15:11:14Z"
},
{
"tag": "core/v0.13.0",
"kind": "other",
"published_at": "2026-06-02T15:04:56Z"
},
{
"tag": "cli/v0.7.0",
"kind": "other",
"published_at": "2026-06-02T15:04:34Z"
},
{
"tag": "playwright/v0.5.0",
"kind": "other",
"published_at": "2026-06-02T15:04:33Z"
},
{
"tag": "cli/v0.6.0",
"kind": "other",
"published_at": "2026-06-02T14:38:50Z"
},
{
"tag": "chrome/v0.2.0",
"kind": "other",
"published_at": "2026-06-02T02:33:00Z"
},
{
"tag": "chrome/v0.1.2",
"kind": "other",
"published_at": "2026-06-02T02:15:53Z"
},
{
"tag": "mcp/v0.8.1",
"kind": "other",
"published_at": "2026-06-02T01:56:31Z"
},
{
"tag": "cli/v0.5.2",
"kind": "other",
"published_at": "2026-06-02T01:56:28Z"
},
{
"tag": "cli/v0.5.1",
"kind": "other",
"published_at": "2026-06-02T01:29:06Z"
},
{
"tag": "cli/v0.5.0",
"kind": "other",
"published_at": "2026-06-02T01:10:09Z"
},
{
"tag": "chrome/v0.1.1",
"kind": "other",
"published_at": "2026-06-02T01:08:51Z"
},
{
"tag": "chrome/v0.1.0",
"kind": "other",
"published_at": "2026-06-02T00:37:15Z"
},
{
"tag": "mcp/v0.8.0",
"kind": "other",
"published_at": "2026-05-02T16:16:52Z"
},
{
"tag": "mcp/v0.7.2",
"kind": "other",
"published_at": "2026-05-02T16:07:50Z"
},
{
"tag": "mcp/v0.7.1",
"kind": "other",
"published_at": "2026-05-01T23:16:45Z"
},
{
"tag": "mcp/v0.7.0",
"kind": "other",
"published_at": "2026-05-01T15:42:30Z"
},
{
"tag": "core/v0.12.1",
"kind": "other",
"published_at": "2026-04-27T22:03:23Z"
},
{
"tag": "core/v0.12.0",
"kind": "other",
"published_at": "2026-04-26T22:59:01Z"
},
{
"tag": "mcp/v0.6.1",
"kind": "other",
"published_at": "2026-04-26T19:50:31Z"
},
{
"tag": "core/v0.11.1",
"kind": "other",
"published_at": "2026-04-26T19:50:51Z"
},
{
"tag": "mcp/v0.6.0",
"kind": "other",
"published_at": "2026-04-26T19:31:19Z"
},
{
"tag": "core/v0.11.0",
"kind": "other",
"published_at": "2026-04-26T19:31:40Z"
},
{
"tag": "mcp/v0.5.0",
"kind": "other",
"published_at": "2026-04-26T18:42:53Z"
},
{
"tag": "core/v0.10.0",
"kind": "other",
"published_at": "2026-04-26T18:38:49Z"
},
{
"tag": "mcp/v0.4.2",
"kind": "other",
"published_at": "2026-04-26T00:56:43Z"
},
{
"tag": "mcp/v0.4.1",
"kind": "other",
"published_at": "2026-04-25T21:45:37Z"
},
{
"tag": "mcp/v0.4.0",
"kind": "other",
"published_at": "2026-04-25T21:15:31Z"
},
{
"tag": "mcp/v0.3.0",
"kind": "other",
"published_at": "2026-04-25T20:44:17Z"
},
{
"tag": "report/v0.1.1",
"kind": "other",
"published_at": "2026-04-18T19:17:42Z"
},
{
"tag": "codemod/v0.1.2",
"kind": "other",
"published_at": "2026-04-18T15:19:37Z"
},
{
"tag": "codemod/v0.1.1",
"kind": "other",
"published_at": "2026-04-18T15:02:41Z"
},
{
"tag": "storybook-addon/v0.8.12",
"kind": "other",
"published_at": "2026-04-18T02:49:23Z"
},
{
"tag": "vitest/v0.3.1",
"kind": "other",
"published_at": "2026-04-18T02:49:16Z"
},
{
"tag": "playwright/v0.4.0",
"kind": "other",
"published_at": "2026-04-18T02:49:11Z"
},
{
"tag": "jest/v0.1.2",
"kind": "other",
"published_at": "2026-04-18T02:09:03Z"
},
{
"tag": "mcp/v0.2.6",
"kind": "other",
"published_at": "2026-04-17T22:05:51Z"
},
{
"tag": "storybook-addon/v0.8.11",
"kind": "other",
"published_at": "2026-04-17T22:05:16Z"
},
{
"tag": "vitest/v0.3.0",
"kind": "other",
"published_at": "2026-04-17T22:04:29Z"
},
{
"tag": "playwright/v0.3.7",
"kind": "other",
"published_at": "2026-04-17T22:04:28Z"
},
{
"tag": "cli/v0.4.0",
"kind": "other",
"published_at": "2026-04-17T22:04:19Z"
},
{
"tag": "core/v0.9.0",
"kind": "other",
"published_at": "2026-04-17T22:01:43Z"
}
],
"recent_commits": [
{
"oid": "f1aab190fb8cf050969823589ca731568eaa56f4",
"body": "…e-healing-b7417a\n\nfix(heal-diff): pair refusal memory, closing the data-testid silent false heal",
"is_bot": false,
"headline": "Merge pull request #8 from AccessLint/claude/accesslint-playwright-e2…",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-26T23:45:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ccd291bd0e015931bf3105818db4b86f1a7263b",
"body": "The root entry runs `expect.extend` when it loads, which makes the audit layer\nunimportable from code driving raw `playwright` rather than `@playwright/test`\n— a scanning service, a crawler, any non-test consumer. Those callers had to\nreimplement injection, traversal, and settle themselves.\n\n`@acces\n[…]\nted there) so the new entry doesn't drag snapshot file I/O along.\n\n`@playwright/test` becomes an optional peer — audit.ts uses it for types only.\n\nCo-Authored-By: Claude Opus 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add a side-effect-free @accesslint/playwright/audit entry point",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-26T23:37:41Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "412b2cc8d07a756566202ebbb35042fdd526c41a",
"body": "`HistoryEvent` here listed only created / ratchet-down / force-update, and\n`isValid` hard-filtered on those three, so every `healed` and `refreshed`\nrecord written since the RFC landed was silently discarded at parse time.\nThe report has never shown a heal.\n\nWiden both, carry `healedTier` and `refre\n[…]\n for the refusal work, and confirmed as\nin-scope for this branch rather than its own change. Prettier reflow in\nemit-html.ts is pre-existing and unrelated; it is here only because the file\nis touched.",
"is_bot": false,
"headline": "fix(report): stop dropping healed and refreshed history records",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-26T23:37:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "39c707abbf7100e7e2e71bbe0cf6a6254650da01",
"body": "The diff engine was deliberately org-scoped on GitHub Packages. It now has\nan outside consumer — the AccessLint runner and app both need the tiered\nmatcher and the HTML normalizer — so it moves to public npm alongside core,\ncli, and playwright.\n\nSwaps the `publishConfig.registry` override for `acces\n[…]\nted-publishing pattern the\nother public packages use (registry.npmjs.org, `--provenance`, id-token\npermission, tests gated ahead of the publish).\n\nCo-Authored-By: Claude Opus 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Publish @accesslint/heal-diff to public npm",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-26T23:36:09Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "77ed513ee1cae395936cee2e1cff1ec9822fc481",
"body": "The end-to-end regression test for pair refusal memory. Both versions carry\nthe same `data-testid`, so both normalize to `getByTestId('hero')` and the\nanchor signal is a strict function of the selector, the exact shape where\nT1's verification used to buy nothing. The `src` change moves the\nhtmlFinge\n[…]\nted it: run with ACCESSLINT_UPDATE=1\n baseline screenshot: impostor-screenshots/..._data-testid-hero_e8dcdd1c.png\n current screenshot: impostor-screenshots/..._data-testid-hero_ce5cb175.png",
"is_bot": false,
"headline": "test(playwright): impostor reusing a data-testid through a live page",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-26T23:34:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d8b6c8d4ca0140344b9e3d71e296b850dc9ff2a5",
"body": "Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Release @accesslint/jest v0.1.3",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-26T23:34:35Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f18ae2b41554aff519fb8bf243830054f2ec27c9",
"body": "Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Release @accesslint/vitest v0.3.2",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-26T23:34:35Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "7bbd56617e21915da0f51eaa87c00b45212a7e14",
"body": "Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Release @accesslint/storybook-addon v0.8.13",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-26T23:34:35Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "474cd249b4f6489375503eaed58428a15e47b7bd",
"body": "`screenshotFilename` derived its discriminator from the anchor whenever one\nexisted, so an element's baseline and impostor images computed the same\npath, and `captureScreenshots` starts each run with a fresh in-use set:\n\n files after run 1: [[\"text-alternatives_img-alt_data-testid-hero.png\", 144]\n[…]\nanchorSlug>_<fp8>.png`. It is already read here, so this\ncosts nothing. Unanchored names are unchanged, and orphans are still GC'd on\nsave, so a passing run keeps exactly one image per baseline entry.",
"is_bot": false,
"headline": "fix(playwright): content-address screenshot filenames",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-26T23:33:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4574c2d077781bc23d2e81e15f63a5fbf1b701c5",
"body": "…ved\"\n\nClosing the silent false heal converts a passing run into a failing one, so\nthe failure has to say something true. The hint layer did not: a refused\npair usually shares `tag` and `relativeLocation`, clearing the likely-moved\nthreshold, and every line it produced was wrong:\n\n likely moved f\n[…]\n block is\nrendered in three places (cli, jest/vitest, playwright); only the update\nhint differs, so the cli passes its own. That also collapses the duplicated\nliteral in the cli's likely-moved branch.",
"is_bot": false,
"headline": "feat(matchers): explain a refused heal instead of guessing \"likely mo…",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-26T23:31:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f40600c7414d2af8995cc04d5441705332565e09",
"body": "…impostor\n\nT1 verifies candidate pairs with `htmlFingerprint` and refuses the pair when\nthe values disagree, releasing both items to the tiers below. Release alone\nwas not enough. `data-testid` is both the `anchor` signal and, since it is\nPlaywright's default testIdAttribute, the `selector`, so for \n[…]\nlativeLocation` often enough\nto clear the hint threshold, and every line of that hint is false: it claims\nthe element moved from its own selector and coaches the developer into\naccepting the impostor.",
"is_bot": false,
"headline": "fix(heal-diff): remember refusals so a weaker tier cannot re-pair an …",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-26T23:26:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "926d34aeecf0745927bcbffac8a5441253e003a4",
"body": "Implements validation strategy item 1 of the multi-signal healing RFC\n(heal-diff/docs/RFC-multi-signal-healing.md, \"synthetic fixture corpus\")\nat the browser level. Until now the heal chain was only tested in\nsegments: browser signal capture in @accesslint/playwright, tier\nsemantics in @accesslint/h\n[…]\nests: commenting out the anchor tier drops\nT2 to healedTier \"role\" and commenting out the htmlFingerprint tier drops\nT5 to \"relativeLocation\". Both failures are caught. No production code\nwas changed.",
"is_bot": false,
"headline": "test(playwright): end-to-end healing tests through a live Chromium page",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-26T22:30:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4100beb6fc48696fb263f89d5d909efa009131b6",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/playwright v0.7.0",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T17:53:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13487e4a87010c706308b1a451cb3fb7c23cb871",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/cli v0.12.0",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T17:53:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e870b41a82f90af01973b813c484c1bae37b5bb",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/core v0.16.0",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T17:53:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f14dd735e230fc1b36f26447aa3a3ccbc7e419d",
"body": "Harden audit metadata contract and expose engine version",
"is_bot": false,
"headline": "Merge pull request #7 from AccessLint/feat/audit-metadata-follow-ups",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T17:50:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d57d6cb8158df49e73a7353739da79770bfe35f0",
"body": "The browser EARL reporter now imports metadata.ts, which runs under\nPlaywright's Node ESM loader in the ACT conformance gate. Node requires\n'with { type: \"json\" }' on JSON module imports there; bundler paths\n(Vite, tsdown, Vitest) transform the import either way.",
"is_bot": false,
"headline": "fix(core): add JSON import attribute for Node ESM consumers",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T17:45:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "23c69c1523b45b70a541deda577268d918c06e5d",
"body": "Follow-ups to #5 (testEngine/testEnvironment metadata):\n\n- playwright: forward testEngine, testEnvironment, and skippedRules\n across the page.evaluate boundary so accesslintAudit results match the\n core contract; normalize with engine-version and sentinel-environment\n fallbacks when the page carr\n[…]\npoints; reuse it in the browser EARL reporter instead of reading\n package.json off disk\n- cli: report the engine version alongside the CLI version in --version\n output, e.g. \"0.11.1 (engine 0.14.1)\"",
"is_bot": false,
"headline": "feat: harden audit metadata contract and expose engine version",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T17:31:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cfd61fda118eb52adf48c2417d24973826f98399",
"body": "The category/rule-name rename (12b1b83) changed the alphabetical order of\nthe two rule IDs in the saveSnapshot round-trip test but the expected\narray kept the old order, breaking the suite on main. Also applies\nPrettier to lines the rename left overlong.",
"is_bot": false,
"headline": "fix(playwright): correct expected sort order after rule ID rename",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T17:31:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15f4343956c3390359743cbe4b8828e16a57d5a6",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/core v0.15.0",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T17:22:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce2799062d032c7a9dc54cb84c889150c2420d56",
"body": "Rules can now declare deprecation via an optional deprecated field:\nmessage, deprecatedSince, availableUntil, and replacedBy (rule IDs).\nModeled on ESLint's DeprecatedInfo, trimmed to a single-registry\nengine. No rule sets it yet; consumers such as the docs site can\nsurface banners once a rule is deprecated.",
"is_bot": false,
"headline": "feat(core): add deprecated lifecycle metadata to the Rule interface",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T17:17:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "44f43e3df23fd1d0aced85898d42995b0599d978",
"body": "Include engine and environment metadata in audit results",
"is_bot": false,
"headline": "Merge pull request #5 from jaimeiniesta/codex/audit-result-metadata",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T17:08:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "12b1b83fc3836853fa457ad602ea0f04e766d913",
"body": "Replace legacy accesslint-NNN rule IDs with the current\ncategory/rule-name schema emitted by @accesslint/core:\n\n- storybook-addon: fix disabledRules to use landmarks/region\n (accesslint-045 matched no current rule, so the landmark-region\n suppression was silently a no-op)\n- playwright: update stale explanatory comments and snapshot\n test fixtures to the new IDs",
"is_bot": false,
"headline": "Update rule ID references to category/rule-name schema",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T16:22:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "835e4dbb03d91dbcb3fd304590ab85fce972d32f",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/cli v0.11.1",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T16:21:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef7c19784f24cb93c3de7a8020a71b47211e67a7",
"body": "Fix Windows path-separator bug in loadCoreIIFE (#4)",
"is_bot": false,
"headline": "Merge pull request #6 from AccessLint/claude/accesslint-issue-4-291c06",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T16:19:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15657b7ac0689167f0a456cc70de642f0c7bb786",
"body": "require.resolve returns backslash-separated paths on Windows, so the\nforward-slash regex that derived core's package.json from the IIFE path\nwas a no-op there, leaving pkgPath pointing at the IIFE bundle itself.\nJSON.parse of `var AccessLint=(...)` then threw and surfaced as a\nmisleading \"CDP error\" on every scan.\n\nDerive the path with path.dirname/join so it is separator-agnostic, and\nextract corePkgPath as a pure helper covered by POSIX and win32 tests.",
"is_bot": false,
"headline": "Fix Windows path-separator bug in loadCoreIIFE (#4)",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T16:15:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "69379e402d3ec86ea76fb4ba5f5ffca4ce695efd",
"body": "Extend the public AuditResult contract with Axe-compatible testEngine and\ntestEnvironment metadata. Source the engine version from the Core package,\nread browser details from the audited document's own realm, and use stable\nfallbacks when DOM implementations expose missing, malformed, or throwing\nho\n[…]\nry,\nexport the new public types, update the Core API documentation, and cover the\nresult contract, fallback behavior, and CLI transport with regression tests.\n\nCo-authored-by: Codex <codex@openai.com>",
"is_bot": false,
"headline": "feat(core): include engine and environment in audit results",
"author_name": "Jaime Iniesta",
"author_login": "jaimeiniesta",
"committed_at": "2026-07-20T11:13:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "20d43a675f94284cd2d2ee26c411ae15faffa58b",
"body": "Add .worktrees/ to the repository ignore rules so isolated checkouts can\nlive inside the project without appearing as untracked content. This keeps\nfeature development separated from main and prevents nested worktree files\nfrom being staged accidentally.\n\nCo-authored-by: Codex <codex@openai.com>",
"is_bot": false,
"headline": "chore(repo): ignore local Git worktrees",
"author_name": "Jaime Iniesta",
"author_login": "jaimeiniesta",
"committed_at": "2026-07-20T11:13:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3c9955c04c19f55a239d344df9e98a5dfecacc08",
"body": "…ckage",
"is_bot": false,
"headline": "build(heal-diff): publish to GitHub Packages as a private registry pa…",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T02:16:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f7455700766f9ddd953b2c60f81db11f8d3f9cca",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/core v0.14.1",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T02:07:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60f107a75b18f0ef705f0380786c005a5b484015",
"body": null,
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/main'",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T02:02:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c9a1f4c88b75e7905ed7549c1fe448c946e0bfc3",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/core v0.14.0",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T02:01:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "032e3e7037ce65203288724a0c3800f48d02d73f",
"body": "…y-content-pseudo-backgrounds\n\nfix(core): honor backgrounds on empty-content pseudo-elements",
"is_bot": false,
"headline": "Merge pull request #3 from jaimeiniesta/codex/fix-color-contrast-empt…",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T01:59:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "48595234de0d22754997e2c058c5c63392a8d58e",
"body": "Integrates the two parallel identity slices. The overlap was in\nmapInPageToSnapshot (cli) and violationToDiffItem (matchers-internal),\nwhere both branches rewrote the same functions. Reconciled so both survive:\n\n- selector identity uses getResilientLocator (from main's resilient-locator\n slice), no\n[…]\na reused selector are refused.\n\nBrings in the browser-safe canonicalizer (pure-JS sha1, NORMALIZE_VERSION,\nURL query stripping), the verifiedBy tier option, and the playwright\ninjected-script cleanup.",
"is_bot": false,
"headline": "Merge heal-diff verifiedBy engine into resilient-locator identity",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T01:56:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "32fb322c324f0e3c3b393b9d9929517fbf4a5362",
"body": "Add getResilientLocator(), a Playwright-style locator ladder (test id →\nrole + accessible name → text → positional CSS floor) that produces a\nstable, human-readable identity string surviving DOM refactors. Add\nisGeneratedId / isStableId heuristics for framework-generated ids (React\nuseId, emotion, R\n[…]\n address as\nseparate concerns; duplicates match by count.\n\nPin the ladder against Playwright's locator.normalize() with a CI oracle\ntest, and raise the core d.ts size budget for the three new exports.",
"is_bot": false,
"headline": "feat(core): resilient human-readable locators for stable identity",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T01:53:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1961679ac751950a8f1b52c1a48906a6b23ff91a",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/playwright v0.6.0",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T01:35:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "573f97c0711d162657186d7212ca3ea7635c96f4",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/cli v0.11.0",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T01:35:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "11329b2928feff5806402634b67b2d3c35f90b4d",
"body": "Apply isFingerprintableTag when mapping in-page violations, so page-scoped\nhtml/body snippets no longer mint a churny htmlFingerprint signal.",
"is_bot": false,
"headline": "feat(cli): skip html/body fingerprints in snapshot identity",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T01:35:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "10c7cdf5a10d1990f2b452d0eb02ba2c54299c2c",
"body": "… stable\n\nThe AccessLint bundle was left in the DOM after injection, but only on runs that\nhad to inject (the global survives setContent, so re-runs skip it). That made the\nhtml element's snippet differ run to run and refused its exact match. Remove the\nscript tag once the bundle has executed, and skip fingerprinting page-scoped\nhtml/body snippets in signal capture.",
"is_bot": false,
"headline": "fix(playwright): remove injected script tag so html fingerprints stay…",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T01:35:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe2a667b77e93c18763affac5f0b9c60c6a137fb",
"body": "…prints\n\nSet verifiedBy: htmlFingerprint on the exact tier so an impostor at a reused\nselector no longer silently matches. Stop minting htmlFingerprint for html/body\nelements (their snippets serialize the whole page); missing-signal leniency then\nkeeps their exact matches standing under verifiedBy.\n\nBump to 0.1.0.",
"is_bot": false,
"headline": "feat(matchers-internal): adopt verifiedBy and skip page-scoped finger…",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T01:35:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "733e15138d22943698bac372755ce9feeb6632bf",
"body": "…ze version\n\nReplace node:crypto with an inline pure-JS SHA-1 (byte-identical output,\nverified against node:crypto in tests) so the fingerprint path has no node\nbuiltins and bundles for the browser. Build as platform: neutral.\n\nAdd URL query/fragment stripping to normalizeHtml and export NORMALIZE_V\n[…]\no later tiers; either side\nlacking the signal leaves the match standing (missing-signal leniency). Catches\nimpostors and swaps at the address tier, healing back to true partners later.\n\nBump to 0.2.0.",
"is_bot": false,
"headline": "feat(heal-diff): browser-safe canonicalizer, verifiedBy tier, normali…",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-07-20T01:35:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d4d0b46e411b060dc9e4a7acf98c8df8e472053b",
"body": "Pseudo-elements can paint a visual background with content: \"\". The contrast helper treated those pseudo-elements as absent, then used the underlying ancestor or body color and produced false 1:1 failures, as seen on 404 Media.\n\nLet the existing background, image, and geometry checks inspect empty-c\n[…]\nckground is unreliable. Add real-browser regressions for both rules plus a control proving non-visual empty pseudo-elements still report genuine low contrast.\n\nCo-authored-by: Codex <codex@openai.com>",
"is_bot": false,
"headline": "fix(core): honor backgrounds on empty-content pseudo-elements",
"author_name": "Jaime Iniesta",
"author_login": "jaimeiniesta",
"committed_at": "2026-07-18T08:05:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bdd9d100a01f596bfa1b88326a6146fe33efd0c3",
"body": "Add --format sarif emitting SARIF 2.1.0 for GitHub code scanning and\nother static-analysis tooling. Each violation maps to a result with\nimpact-derived severity (critical/serious -> error, moderate -> warning,\nminor -> note), axe-style WCAG tags, and a rules[] table deduped by\nruleId with ruleIndex \n[…]\nsnippet. Empty audits emit a valid run with results: [].\n\nEnrich in-page violations with rule.description (reusing the getRuleById\njoin) to populate rules[].fullDescription. Covered by format.test.ts.",
"is_bot": false,
"headline": "feat(cli): add SARIF output format",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-05T02:31:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0385b849c98cc0f07cc81b40680e218f247e5dc3",
"body": "Enrich live-audit violations in-page via getRuleById, attaching each\nrule's wcag criteria and conformance level. Text output prints a WCAG\nline per violation (or \"Best practice\" for rules with no criterion);\nJSON output carries wcag/level fields. Snapshot identity is unchanged.",
"is_bot": false,
"headline": "feat(cli): surface WCAG criteria and level in audit output",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-05T02:07:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb72b9fd1c9afba4ed2341c92129eb9c24f9be13",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Release @accesslint/mcp v0.10.0",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-05T01:42:26Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "21ec721aa4956dd28985fd7be5eb6ba5bf103d16",
"body": "audit_html now ensures Chrome and shells `accesslint scan --stdin` through cli-runner instead of the in-process jsdom auditor, mirroring audit_live. Drops the in-process audit_html unit tests (now a Chrome subprocess); adds scanHtml arg-building tests.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(mcp): audit_html audits via Chrome (cli-runner scanHtml)",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-05T01:41:28Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "20428c0aff64edcb3b45bff89a77f6555147a99d",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Release @accesslint/cli v0.10.0",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-05T01:41:28Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a8db3b1baae422c24f4778fc2d73f560d86949c4",
"body": "scan now loads file/stdin/--stdin HTML into a blank Chrome tab (Page.setDocumentContent) and audits the real DOM via the same IIFE the URL path uses, auto-launching Chrome through @accesslint/chrome when no CDP session is reachable. Adds --stdin and --component-mode.\n\nBREAKING CHANGE: removes the in-process jsdom audit() export (the \".\" entry is now a utility module) and ./inline-css; static HTML audits now require Chrome.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(cli)!: audit HTML via Chrome; drop jsdom",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-05T01:41:03Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "37427ea4e503a295a1c6f26e5422ed8a6b9bbe17",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/mcp v0.9.0",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-04T01:42:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a0d227068a88c5dd19f60a195603b699a71159a",
"body": "Strip the MCP's own Chrome/CDP/diff engine, which duplicated and lagged\n@accesslint/chrome (lifecycle) and @accesslint/cli (CDP audit, JSDOM\naudit, snapshots). The server now delegates instead of reimplementing.\n\n- audit_live: shell out to accesslint-chrome ensure + accesslint scan\n via the new lib\n[…]\nccesslint/chrome\n- repoint mcp/bench audit imports to @accesslint/cli\n\nTools 7 to 4: audit_live, audit_html, list_rules, explain_rule. Diffing\nnow lives in CLI snapshots and the accesslint diff skill.",
"is_bot": false,
"headline": "refactor(mcp): thin subprocess adapter over @accesslint/chrome and cli",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-04T01:35:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b46b5cbfc06103239354e345221764ff66e99696",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Release @accesslint/cli v0.9.0",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-04T01:22:16Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a50d9d2801f97c938baf3251515e87f439cff11d",
"body": "scan resolves a target name, or the default target when no source is given (non-interactively), from accesslint.config.json plus its local overlay, merging the target options under explicit CLI flags. --stdin forces reading stdin in a configured project.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(cli): resolve named targets from accesslint.config.json",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-04T01:22:16Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "c22e30328f71e1d0befb414d7c8fd0e1cc20cb56",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Release @accesslint/cli v0.8.0",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-04T01:00:30Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "649e8e6f4884c78634cc6e3a5fb5784e8e696ba3",
"body": "BREAKING CHANGE: the audit now runs as \"accesslint scan <source>\" instead of \"accesslint <source>\". \"accesslint init\" scaffolds accesslint.config.json with framework-aware named targets (dev/storybook/prod), committed base plus a gitignored local overlay.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(cli)!: add init command; move audit under scan subcommand",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-04T01:00:29Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "0df624d0144755150bff5edeaf37e4e44fc83dad",
"body": null,
"is_bot": false,
"headline": "chore: remove @accesslint/diff package from monorepo",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-03T00:53:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e91f721bff3266a099c18bf59b37cb7b31c7db2f",
"body": "Reframe the attachReactFiberSource docs around which debug metadata the fiber\ncarries (_debugSource vs _debugStack) rather than the React version: Vite's\n__source transform emits _debugSource for both React 18 and 19, and its\nper-module preamble offsets the reported line/column (file and component stay\ncorrect). The _debugStack path (e.g. Next.js dev) resolves through the\nsourcemap and is unaffected. Also condense the README section.",
"is_bot": false,
"headline": "docs(core): clarify React source-attribution limitation",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T23:25:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b1e58544498cc36bd1162e9b631af14e12e2d9b",
"body": "Diffs accessibility violations of a set of routes between two running builds\n(baseline vs candidate) over CDP: warms each origin, audits routes through a\npool of reusable tabs, and compares via matchers-internal's tiered snapshot\ndiff. Reports new/fixed/pre-existing and exits 1 on new violations. In\n[…]\nt-expression + SnapshotViolation identity mapping\nfrom cli/src/cdp.ts into cli/src/cdp-audit.ts (exported as\n@accesslint/cli/cdp-audit) so the CLI and diff produce byte-identical\nviolation identities.",
"is_bot": false,
"headline": "feat(diff): add @accesslint/diff package for route-level a11y diffing",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T21:22:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bd7140a43918800086598a26dfd788a5c22b1bee",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/cli v0.7.5",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T17:05:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d0512fbbd94e6c0c67c38db131d2f5b66c5221c7",
"body": "Switch examples from dev invocations to `npx -y @accesslint/cli`. Add\n--selector, --snapshot, --snapshot-dir, --update-snapshot, and\nACCESSLINT_UPDATE=1 which were missing from the options reference.",
"is_bot": false,
"headline": "docs(cli): update README with npx usage and missing options",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T15:50:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "891115ff12845392b9cfe49de2a45cab978de45a",
"body": "When --snapshot and --format json are combined, output full violation JSON filtered to new violations (with impact, message, source) plus fixed and preExisting counts — instead of the sparse text-only snapshot result. Enables skill-level diffing without a shell script.",
"is_bot": false,
"headline": "Release @accesslint/cli v0.7.4",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T15:49:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "59449bc400c6ef3be070b636d5ff1b69500fb68d",
"body": "Use attw profile: \"esm-only\" for ESM-only packages (chrome, cli, mcp)\nto suppress expected node10/CJS resolution failures, and\nexcludeEntrypoints for sub-paths that intentionally lack node10 support\n(vitest/fixture, storybook-addon/manager). Switch mcp from pkg.main to\npkg.exports to resolve the publint ESM-main warning.",
"is_bot": false,
"headline": "fix: silence build warnings across packages",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T15:48:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dacaea9c0f5f3f3b9ada2552571a6f2b3a9594fc",
"body": "Fix about:blank audit bug — create tab without URL then navigate explicitly via Page.navigate so the load event is always owned and awaited, eliminating the race where about:blank's readyState \"complete\" was mistaken for the target page being ready.",
"is_bot": false,
"headline": "Release @accesslint/cli v0.7.3",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T15:37:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "58505f96299fce59598c555c792eeaed4c8d0f77",
"body": "Fix SyntaxError in in-page expression: backslash-escaped quotes inside a\ntemplate literal are processed by JS escape rules, turning \"...\" into \"\"\n(two adjacent string literals). Use single quotes for the role signal string.",
"is_bot": false,
"headline": "Release @accesslint/cli v0.7.2",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T15:30:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "03924fea6cdac887fc3dbf75b7c653236998e92f",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/cli v0.7.1",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T15:10:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c1a03296f595bd3cdb1255812161685a837e19fb",
"body": "…esslint/cli v0.7.0",
"is_bot": false,
"headline": "Release @accesslint/core v0.13.0, @accesslint/playwright v0.5.0, @acc…",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T15:03:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "86f5b496a2f9ef1bcc51f306f2e52a228b11224a",
"body": "Move buildRelativeLocation into @accesslint/core so it's available in the\nIIFE (window.AccessLint.buildRelativeLocation) for any in-page signal\nextraction — CLI, Playwright, and future consumers — without duplicating\nthe implementation.\n\n- core: add buildRelativeLocation + helpers to selector.ts, ex\n[…]\nlFingerprint in Node.js; add --snapshot, --snapshot-dir,\n --update-snapshot flags backed by evaluateSnapshot from matchers-internal;\n add @accesslint/heal-diff and @accesslint/matchers-internal deps",
"is_bot": false,
"headline": "refactor: move buildRelativeLocation to core; add CLI snapshot support",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T14:58:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "556eca1e1366aa0c87d5af248eac7a15754695a1",
"body": "Add --selector flag to scope live audits to a CSS selector. Auto-waits for the element (respecting --wait-timeout) and post-filters violations by DOM containment across all matched nodes.",
"is_bot": false,
"headline": "Release @accesslint/cli v0.6.0",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T14:38:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2f9d9f0dd4bf504b33b4d9784f5f6edc7a4b6579",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/chrome v0.2.0",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T02:32:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "94ac8e178619424d5d78e86884fa8884954acede",
"body": "… found\n\nensure now resolves the system Chrome first (CHROME_PATH / platform search) and,\nonly when none is found and --download (or ACCESSLINT_CHROME_DOWNLOAD=1) is set,\nfetches a pinned Chrome for Testing via @puppeteer/browsers into a cache dir\n(ACCESSLINT_CHROME_CACHE_DIR, default ~/.cache/accesslint-chrome). The cache is\nreused before any network call and progress is logged to stderr so the JSON on\nstdout stays parseable. A system Chrome always wins; the download is a fallback.",
"is_bot": false,
"headline": "chrome: optional Chrome for Testing download when no system Chrome is…",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T02:32:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2abed8f67a052a2322e66b1ae78741370ce97c55",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/chrome v0.1.2",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T02:15:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "37d30f2cbae72ab1366e68413b6fefe74b03ce3a",
"body": "A pinned port (--port or ACCESSLINT_CDP_PORT) that is occupied but does not\nanswer CDP discovery now fails with an actionable error instead of silently\nstepping to the next free port, which left callers (e.g. @accesslint/cli) still\npointed at the original port. Unpinned ensure keeps stepping past squatters.",
"is_bot": false,
"headline": "chrome: fail ensure on a pinned port held by a non-CDP process",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T02:15:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eaf1a10e41d0bde83db30d370b58b71617e59c5e",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/mcp v0.8.1",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T01:55:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f8e31904c6649d68235d350f742a0426b16ff3c",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/cli v0.5.2",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T01:55:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2fc5c6ab8820df7514ca63d39336a6e1c20af396",
"body": "… from package.json\n\nThe CLI's 'no debug session' error, --port help, and README now direct users to\n'npx @accesslint/chrome ensure' instead of a raw --remote-debugging-port command\nthat launches on the default profile and often won't serve CDP discovery.\n\nBoth CLIs read their version from package.j\n[…]\n had drifted (cli was at 0.5.1, mcp at 0.8.0).\n\nThe cli README drops the nonexistent --component-mode flag (component mode is\nauto-detected from HTML fragments) and documents the real URL/CDP options.",
"is_bot": false,
"headline": "cli, mcp: point Chrome guidance at @accesslint/chrome; derive version…",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T01:54:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4f3b7b2cbe25a3185c17eac942f1dd677c865e23",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/cli v0.5.1",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T01:28:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "526c17b811337baf10954a6353c028b875858e1c",
"body": "JSON output is now emitted on a single line by default for easier\npiping and parsing. Pass --pretty to restore indented output.",
"is_bot": false,
"headline": "cli: add --pretty flag for json output, default to single-line",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T01:28:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38caf51a1fd64b6aa2914cb725f1bcaac1e9870e",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/chrome v0.1.1",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T00:38:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b8778c608ba2ffb97e5f46b5afd3b8bf89be1e2e",
"body": "Ensures a CDP-driveable Chrome (HTTP /json/version discovery, not bare TCP)\nand manages its lifecycle. Launches detached so Chrome outlives a one-shot\nnpx launcher; exposes ensure/stop/status and an accesslint-chrome CLI.",
"is_bot": false,
"headline": "chrome: add @accesslint/chrome package for debuggable Chrome lifecycle",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T00:30:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "12c73ad0ec10468417b076b468ce767827e60b36",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/cli v0.5.0",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T00:26:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "483e72990c4127032e3c02792c19e95cf04ac19d",
"body": null,
"is_bot": false,
"headline": "cli: add Chrome CDP audit path for URLs, drop chrome-launcher",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-06-02T00:24:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a31e2d1c2b5b3c7555b698dee7a7cf24d03e43ce",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/mcp v0.8.0",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-05-02T16:16:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cf9d265fb89833e9d23d6d3e1bcbd73088a9f97a",
"body": "…t_diff\n\nTwo more tools off the surface:\n\n- diff_html — folded into audit_diff via a new optional `before: string`\n param that names a stored baseline to diff against. With `before` set,\n audit_diff skips auto-baseline storage and produces a direct diff —\n same behavior diff_html had, exposed thr\n[…]\n quick_check's tests dropped wholesale.\n\ndist/index.js: 54 KB → 52 KB.\n\nStale references scrubbed from audit-browser-collect and audit-live-page\ndescriptions, the filters.ts comment, and both READMEs.",
"is_bot": false,
"headline": "mcp: drop diff_html and quick_check; fold explicit-baseline into audi…",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-05-02T16:16:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ad2c7429acb271272dc43cbb0434ec3ddaa50d7e",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/mcp v0.7.2",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-05-02T16:07:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9027d9d6f1d4c712e429972b5da58521f62608b5",
"body": "Several spots were stale relative to the chrome-launcher work in 0.7.1:\naudit_live no longer requires `--remote-debugging-port=9222`, the\nexisting-session path is the right framing for audit_browser_script\n(not \"CDP unreachable\"), and the live-page auditing section still\nreferenced audit_url as a final fallback. Setup section now mentions\nthat a Chrome install must be discoverable on the system and points\nexisting-session users at chrome-devtools-mcp.",
"is_bot": false,
"headline": "mcp: refresh README for v0.7.x auto-launch flow",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-05-02T16:06:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9e447da2d35e10dfcf6a12e0b8f1f5b7a04b7a79",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/mcp v0.7.1",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-05-01T23:16:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5907f6417ddc346453f0907af5c259be2c7ce910",
"body": "…rowser MCP\n\n- Add chrome-launcher dep; auto-launch Chrome minimized in runLiveAudit\n when no CDP endpoint is reachable instead of erroring\n- Reuse the managed Chrome instance for the MCP process lifetime\n- Remove all user-facing instructions to start Chrome with --remote-debugging-port\n- Reframe audit_browser_script / audit-live-page as existing-session paths,\n not general fallbacks\n- Trim verbose descriptions on audit_live and audit_browser_script schemas",
"is_bot": false,
"headline": "mcp: auto-launch Chrome via chrome-launcher; prefer audit_live over b…",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-05-01T16:17:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dabdcc174b0d2d66fef5be25d0ec454b9fd01bc2",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/mcp v0.7.0",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-05-01T15:40:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d8800f60d8c5f011bc37c18959523fb444bdfc31",
"body": "Live-DOM auditing now has two paths instead of three. The new audit_live\ntool attaches to Chrome over the DevTools Protocol and pushes\n@accesslint/core into the page through Runtime.evaluate — privileged\ncontext, so no CSP wrangling and no IIFE round-trip through agent\ncontext. The audit_browser_scr\n[…]\nonged in the CLI's own suite).\n153 → 114 total.\n\ndist/index.js: 62 KB → 54 KB.\n\nEnd-to-end smoke against headless Chrome confirmed audit_live finds\nviolations on a test page through the full CDP flow.",
"is_bot": false,
"headline": "mcp: add audit_live (direct CDP) and drop static URL/file audits",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-05-01T15:40:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ce39a2739f81aa80d899c1b35e557955957b04bd",
"body": "Fix frame-focusable-content rule to correctly evaluate srcdoc iframes:\n- Parse srcdoc attribute via DOMParser when contentDocument is not yet\n populated (srcdoc loads asynchronously in the ACT test environment)\n- Detect the HTML hidden attribute via frame.hidden in isHiddenFrame\n- Exclude inner ele\n[…]\ns with tabindex=\"-1\" from the focusable check\n- Skip iframes outside an open modal dialog (focus is trapped inside)\n\nAll 531 ACT browser tests now pass (7 skipped for Shadow DOM/external\nstylesheets).",
"is_bot": false,
"headline": "Release @accesslint/core v0.12.1",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-04-27T22:02:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cabddbbe68d7c095b0b3cd57b267930079aee1cf",
"body": "Add applicable() guards to 33 rules so the ACT runner emits earl:inapplicable\ninstead of earl:passed when no test targets exist in a fixture, fixing ~165\nwrong EARL outcomes that were causing 28 rules to show as \"partial\" on the\nW3C ACT implementations page.\n\nAlso adds the new frame-focusable-content rule (ACT akn7bn) and wires up\nactRuleIds for frame-title-unique (ACT 4b1c6c).",
"is_bot": false,
"headline": "Release @accesslint/core v0.12.0",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-04-26T22:58:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d647fe7ba1ded6369de6b266734bd90544a8e4de",
"body": null,
"is_bot": false,
"headline": "Add root README note linking to @accesslint/mcp and Claude Code plugin",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-04-26T21:45:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4e7446d7965c39fedf38ec0550d4adc2c81f4da6",
"body": null,
"is_bot": false,
"headline": "core: add README note linking to @accesslint/mcp and Claude Code plugin",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-04-26T21:40:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0feaad61131e34ebc8aec3d684597316df0e1acd",
"body": "Adds an entry under API for the React fiber source-mapping\npost-processor, expands the `Violation` type to show the optional\n`source` field, and documents `SourceLocation`. Updates the IIFE\ngzipped-size figure (43 KB → 46 KB) to match the current build.",
"is_bot": false,
"headline": "core: document attachReactFiberSource and Violation.source in README",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-04-26T21:35:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b769f9b01c33d643b9de6b08c23bf0a22f41d594",
"body": "Workflow rewrites `workspace:*` to `^X.Y.Z` instead of an exact pin.\nFuture patch releases of @accesslint/core (0.11.x) flow through to\nfresh `npm install @accesslint/mcp` runs without needing an MCP\nrepublish — the runtime CDN URL is built from whatever core version\nnpm resolved at install time.",
"is_bot": false,
"headline": "mcp: release v0.6.1; publish core dep as caret range",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-04-26T19:49:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "68f6d4c5947172a66b9e3980428aef9b9fcf2beb",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/core v0.11.1",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-04-26T19:49:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e6ee385e8b61ec76a6500257feb4377af6d23d15",
"body": "Switch attachReactFiberSource over to the in-house parser added in the\nprevious commit. Resolves the silent failure on Turbopack/Next 16 dev\nbuilds where trace-mapping@0.3.30+ throws on sectioned (indexed) source\nmaps with `\"TraceMap passed sectioned source map, please use FlattenMap\nexport instead\"\n[…]\nr building test fixtures\n\n@accesslint/core now has zero runtime dependencies.\n\nVerified end-to-end on a Next 16 / React 19 / Turbopack dev build:\n182/182 violations resolved to real source-file paths.",
"is_bot": false,
"headline": "core: drop @jridgewell/trace-mapping; use in-house source-map parser",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-04-26T19:47:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "67b1020bbc80d6c36a2dc64dc493a0545f82573c",
"body": "Implements the subset of the V3 source-map spec needed to resolve a\ngenerated (line, column) to an original (source, line, column, name).\nHandles both flat maps (single `mappings` string) and sectioned/indexed\nmaps (top-level `sections[]`, emitted by Turbopack and some Vite plugins).\n\nPure functions\n[…]\nlution, segment selection, sectioned\ndispatch with line/column offset translation, sourceRoot prefixing, and\nmalformed input.\n\nNot yet wired into react-fiber.ts — that swap follows in the next commit.",
"is_bot": false,
"headline": "core: add in-house V3 source-map parser",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-04-26T19:46:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "332933f4972a5eb96c7ef160287588d4d5ccea3a",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/mcp v0.6.0",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-04-26T19:30:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e30545ea77f58e1bbf02f307cf73feaf69e55e0e",
"body": "Core's React fiber probe is async (sourcemap resolution happens in-page\nvia fetch). The bootstrap was already async, so adding `await` is\nmechanical. Format-test fixtures drop the removed `strategy` /\n`confidence` fields and add `ownerDepth`; rendered output is unchanged.",
"is_bot": false,
"headline": "mcp: await the now-async attachReactFiberSource; align fixtures",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-04-26T19:30:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ac599961d70c788b791f605e43eae8fb25092c8",
"body": null,
"is_bot": false,
"headline": "Release @accesslint/core v0.11.0",
"author_name": "Cameron Cundiff",
"author_login": "ckundo",
"committed_at": "2026-04-26T19:30:21Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 65,
"commits_last_year": 226,
"latest_release_at": "2026-07-26T23:38:48Z",
"latest_release_tag": "playwright/v0.8.0",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 6,
"days_since_latest_release": 0,
"mean_days_between_releases": 0.8
},
"community": {
"has_readme": true,
"has_license": false,
"has_description": true,
"has_contributing": false,
"health_percentage": 37,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "@accesslint/cli",
"exists": true,
"license": "MIT",
"keywords": [],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@accesslint/cli",
"is_deprecated": false,
"latest_version": "0.12.0",
"repository_url": "https://github.com/AccessLint/accesslint",
"versions_count": 26,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 2932,
"first_published_at": "2026-02-24T02:02:42.526000Z",
"latest_published_at": "2026-07-20T17:59:08.874000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 6
},
{
"name": "@accesslint/mcp",
"exists": true,
"license": "MIT",
"keywords": [],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@accesslint/mcp",
"is_deprecated": false,
"latest_version": "0.10.0",
"repository_url": "https://github.com/AccessLint/accesslint",
"versions_count": 22,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 2163,
"first_published_at": "2025-11-05T23:42:19.262000Z",
"latest_published_at": "2026-06-05T01:46:22.001000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 52
},
{
"name": "@accesslint/core",
"exists": true,
"license": "MIT",
"keywords": [],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@accesslint/core",
"is_deprecated": false,
"latest_version": "0.16.0",
"repository_url": "https://github.com/AccessLint/accesslint",
"versions_count": 56,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 32895,
"first_published_at": "2026-02-05T01:09:13.656000Z",
"latest_published_at": "2026-07-20T17:59:32.541000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 6
},
{
"name": "@accesslint/jest",
"exists": true,
"license": "MIT",
"keywords": [
"jest",
"accessibility",
"a11y",
"wcag",
"aria",
"accesslint",
"matcher",
"testing",
"jest-axe-alternative",
"react-testing-library",
"testing-library",
"jsdom"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@accesslint/jest",
"is_deprecated": false,
"latest_version": "0.1.3",
"repository_url": "https://github.com/AccessLint/accesslint",
"versions_count": 4,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 52,
"first_published_at": "2026-04-18T01:58:41.242000Z",
"latest_published_at": "2026-07-26T23:35:15.161000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 0
},
{
"name": "@accesslint/chrome",
"exists": true,
"license": "MIT",
"keywords": [],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@accesslint/chrome",
"is_deprecated": false,
"latest_version": "0.2.0",
"repository_url": "https://github.com/AccessLint/accesslint",
"versions_count": 4,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 1296,
"first_published_at": "2026-06-02T00:34:33.153000Z",
"latest_published_at": "2026-06-02T02:32:58.971000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 55
},
{
"name": "@accesslint/report",
"exists": true,
"license": "MIT",
"keywords": [],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@accesslint/report",
"is_deprecated": false,
"latest_version": "0.1.1",
"repository_url": "https://github.com/AccessLint/accesslint",
"versions_count": 2,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 49,
"first_published_at": "2026-04-18T19:02:42.746000Z",
"latest_published_at": "2026-04-18T19:17:40.880000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 99
},
{
"name": "@accesslint/vitest",
"exists": true,
"license": "MIT",
"keywords": [
"vitest",
"accessibility",
"a11y",
"wcag",
"aria",
"accesslint",
"matcher",
"testing"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@accesslint/vitest",
"is_deprecated": false,
"latest_version": "0.3.2",
"repository_url": "https://github.com/AccessLint/accesslint",
"versions_count": 11,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 24978,
"first_published_at": "2026-02-17T03:04:04.729000Z",
"latest_published_at": "2026-07-26T23:35:17.216000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 0
},
{
"name": "@accesslint/codemod",
"exists": true,
"license": "MIT",
"keywords": [
"accesslint",
"codemod",
"jscodeshift",
"jest-axe",
"migration",
"accessibility",
"a11y",
"jest"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@accesslint/codemod",
"is_deprecated": false,
"latest_version": "0.1.2",
"repository_url": "https://github.com/AccessLint/accesslint",
"versions_count": 3,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 52,
"first_published_at": "2026-04-18T14:59:26.877000Z",
"latest_published_at": "2026-04-18T15:19:35.834000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 99
}
]
},
"popularity": {
"forks": 3,
"stars": 5,
"watchers": 2,
"fork_history": {
"days": [
{
"date": "2026-06-09",
"count": 1
},
{
"date": "2026-06-20",
"count": 1
},
{
"date": "2026-07-17",
"count": 1
}
],
"complete": true,
"collected": 3,
"total_forks": 3
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": true,
"bootstrap_files": [
".mise.toml",
"cli/.mise.toml"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"bench/tsconfig.json",
"chrome/tsconfig.json",
"cli/tsconfig.json",
"codemod/tsconfig.json",
"core/tsconfig.json",
"heal-diff/tsconfig.json",
"jest/tsconfig.json",
"matchers-internal/tsconfig.json",
"mcp/tsconfig.json",
"playwright/tsconfig.json",
"report/tsconfig.json",
"storybook-addon/tsconfig.json",
"vitest/tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 65374,
"source_files_sampled": 394,
"oversized_source_files": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"bench/package.json",
"chrome/package.json",
"cli/package.json",
"codemod/package.json",
"core/package.json",
"heal-diff/package.json",
"jest/package.json",
"matchers-internal/package.json",
"mcp/package.json",
"package.json",
"playwright/package.json",
"report/package.json",
"storybook-addon/package.json",
"vitest/package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 30,
"malicious_count": 0,
"assessed_package": "npm:@accesslint/cli@0.12.0",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "@accesslint/core",
"manifest": "bench/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "axe-core",
"manifest": "bench/package.json",
"ecosystem": "npm",
"version_constraint": "latest"
},
{
"name": "@puppeteer/browsers",
"manifest": "chrome/package.json",
"ecosystem": "npm",
"version_constraint": "^3.0.4"
},
{
"name": "chrome-launcher",
"manifest": "chrome/package.json",
"ecosystem": "npm",
"version_constraint": "^1.2.1"
},
{
"name": "@accesslint/chrome",
"manifest": "cli/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@accesslint/core",
"manifest": "cli/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "chrome-remote-interface",
"manifest": "cli/package.json",
"ecosystem": "npm",
"version_constraint": "^0.34.0"
},
{
"name": "citty",
"manifest": "codemod/package.json",
"ecosystem": "npm",
"version_constraint": "^0.1.6"
},
{
"name": "jscodeshift",
"manifest": "codemod/package.json",
"ecosystem": "npm",
"version_constraint": "^17.1.2"
},
{
"name": "@accesslint/core",
"manifest": "jest/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@accesslint/core",
"manifest": "matchers-internal/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@accesslint/heal-diff",
"manifest": "matchers-internal/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@accesslint/chrome",
"manifest": "mcp/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@accesslint/cli",
"manifest": "mcp/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@accesslint/core",
"manifest": "mcp/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@modelcontextprotocol/sdk",
"manifest": "mcp/package.json",
"ecosystem": "npm",
"version_constraint": "^1.12.1"
},
{
"name": "zod",
"manifest": "mcp/package.json",
"ecosystem": "npm",
"version_constraint": "^3.24.0"
},
{
"name": "@accesslint/core",
"manifest": "playwright/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@accesslint/core",
"manifest": "report/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@accesslint/core",
"manifest": "storybook-addon/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@accesslint/vitest",
"manifest": "storybook-addon/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@accesslint/core",
"manifest": "vitest/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 5,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 2,
"closed_unmerged_prs": 1
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "ckundo",
"commits": 223,
"avatar_url": "https://avatars.githubusercontent.com/u/108163?v=4"
},
{
"type": "User",
"login": "jaimeiniesta",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/2629?v=4"
}
],
"contributors_sampled": 2,
"top_contributor_share": 0.987
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"publish-chrome.yml",
"publish-cli.yml",
"publish-codemod.yml",
"publish-core.yml",
"publish-heal-diff.yml",
"publish-jest.yml",
"publish-mcp.yml",
"publish-playwright.yml",
"publish-report.yml",
"publish-storybook-addon.yml",
"publish-vitest.yml",
"test-core.yml",
"test-mcp.yml",
"web-bench.yml"
],
"has_docs_dir": false,
"linter_configs": [
"eslint.config.js"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "4 out of 4 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 1/18 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 4 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 0,
"reason": "license file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "47 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "f1aab190fb8cf050969823589ca731568eaa56f4",
"ran_at": "2026-07-27T08:27:33Z",
"aggregate_score": 3.6,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-26T23:46:23Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-26T23:45:29Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/AccessLint/accesslint",
"host": "github.com",
"name": "accesslint",
"owner": "AccessLint"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 61,
"inputs": {
"security": 49,
"vitality": 81,
"community": 34,
"governance": 63,
"engineering": 70
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 81,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"commits_last_year": 226,
"human_commit_share": 1,
"days_since_last_push": 0,
"active_weeks_last_year": 6
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "6/52 weeks with commits",
"points": 4.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 6
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "226 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 226
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 65,
"latest_release_tag": "playwright/v0.8.0",
"releases_from_tags": false,
"days_since_latest_release": 0,
"mean_days_between_releases": 0.8
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "65 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 65
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~0.8 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 0.8
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 34,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 12,
"inputs": {
"forks": 3,
"stars": 5,
"watchers": 2,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "5 stars",
"points": 9.8,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 5
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "3 forks",
"points": 2.5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 3
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "2 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 2
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "critical",
"name": "Community health",
"note": null,
"notes": [],
"value": 25,
"inputs": {
"has_readme": true,
"has_license": false,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "no license file detected",
"points": 0,
"status": "missed",
"details": [
{
"code": "license_absent",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "good",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 80,
"inputs": {
"packages": [
"@accesslint/cli",
"@accesslint/mcp",
"@accesslint/core",
"@accesslint/jest",
"@accesslint/chrome",
"@accesslint/report",
"@accesslint/vitest",
"@accesslint/codemod"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 64417
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "64,417 downloads/month across npm",
"points": 64.1,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 64417,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 63,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 22,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 2,
"top_contributor_share": 0.987
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 99% of commits",
"points": 0.3,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 99
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "2 contributors",
"points": 2.7,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 2
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 4 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 79,
"inputs": {
"merged_prs": 5,
"open_issues": 0,
"closed_issues": 2,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 1
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 46.8,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "5/6 decided PRs merged",
"points": 31.9,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 5,
"decided": 6
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 1/18 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"followers": 61,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "AccessLint",
"public_repos": 24,
"account_age_days": 4245
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "61 followers of AccessLint",
"points": 12.9,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 61,
"login": "AccessLint"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "24 public repos, account ~11 yr old",
"points": 22.2,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 24
}
},
{
"code": "account_age_years",
"params": {
"years": 11
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"@accesslint/cli",
"@accesslint/mcp",
"@accesslint/core",
"@accesslint/jest",
"@accesslint/chrome",
"@accesslint/report",
"@accesslint/vitest",
"@accesslint/codemod"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 0
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "8 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 8,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 0 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 0
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "56 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 56
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 70,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "14 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 14
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "eslint.config.js",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.js"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "4 out of 4 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 49,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 36,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 3.6
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "4 out of 4 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 1/18 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 4 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "47 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:@accesslint/cli@0.12.0 runtime dependency closure — what installing the published package pulls in — 30 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "npm:@accesslint/cli@0.12.0",
"assessed": 30
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 30,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 30,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 5
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 57,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 34,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.64,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "64 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 34.1,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 64,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [
".mise.toml",
"cli/.mise.toml"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"bench/tsconfig.json",
"chrome/tsconfig.json",
"cli/tsconfig.json",
"codemod/tsconfig.json",
"core/tsconfig.json",
"heal-diff/tsconfig.json",
"jest/tsconfig.json",
"matchers-internal/tsconfig.json",
"mcp/tsconfig.json",
"playwright/tsconfig.json",
"report/tsconfig.json",
"storybook-addon/tsconfig.json",
"vitest/tsconfig.json"
],
"agent_commit_share": 0.13,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": ".mise.toml, cli/.mise.toml",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".mise.toml, cli/.mise.toml"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "eslint.config.js",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.js"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "bench/tsconfig.json, chrome/tsconfig.json, cli/tsconfig.json, codemod/tsconfig.json, core/tsconfig.json, heal-diff/tsconfig.json, jest/tsconfig.json, matchers-internal/tsconfig.json, mcp/tsconfig.json, playwright/tsconfig.json, report/tsconfig.json, storybook-addon/tsconfig.json, vitest/tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "bench/tsconfig.json, chrome/tsconfig.json, cli/tsconfig.json, codemod/tsconfig.json, core/tsconfig.json, heal-diff/tsconfig.json, jest/tsconfig.json, matchers-internal/tsconfig.json, mcp/tsconfig.json, playwright/tsconfig.json, report/tsconfig.json, storybook-addon/tsconfig.json, vitest/tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "13 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 13,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 65374,
"source_files_sampled": 394,
"oversized_source_files": 1
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "1/394 source files over 60KB",
"points": 54.9,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 394,
"oversized": 1
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "critical",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"example_dirs": [],
"has_mcp_signal": true,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 20,
"status": "met",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-27T08:27:45.589394Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/AccessLint/accesslint.svg",
"full_name": "AccessLint/accesslint",
"license_state": "absent",
"license_spdx": null
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with AccessLint/accesslint. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
