Public recordAt risk
Software health reportschema 0.23.0 · metrics 1.13.0 · 2026-07-21 18:58 UTC
CESARBR2025 / youmindag
CESARBR2025/youmindag holds a health index of 43 out of 100, placing it in the At risk band. It scores highest on Vitality (67/100) and lowest on Security (26/100). It was last updated 4 days ago. A single contributor accounts for most of its recent work.
43
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
43
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
CESARBR2025Personal account
2 followers18 public repossince Aug 2025
This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish | Tags |
|---|---|---|---|---|---|---|
| npm | youmindag | 2.11.5 | 8,712 | 54 | 4 days ago | contextaiopencodeclaudeknowledge-graphgraphify |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
67
Development activity
53Moderate
How it's scored
| 36/36 | Push recency — last push 4 days ago |
| 1.4/36 | Commit cadence — 2/52 weeks with commits |
| 16/18 | Commit volume — 59 commits in the last year |
| 0/10 | OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully |
Inputs used
| commits_last_year | 59 |
| human_commit_share | 1 |
| days_since_last_push | 4 |
| active_weeks_last_year | 2 |
Release discipline
88Excellent
How it's scored
| 16.2/27 | Ships releases — 28 version tags (no GitHub releases) |
| 36/36 | Release recency — latest release 7 days ago |
| 27/27 | Release cadence — a release every ~0.1 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 28 |
| latest_release_tag | v2.6.4 |
| releases_from_tags | yes |
| days_since_latest_release | 7 |
| mean_days_between_releases | 0.1 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
41
Popularity & adoption
1Critical
How it's scored
| 0/60 | Stars — 0 stars |
| 0/25 | Forks — 0 forks |
| 0/15 | Watchers — 1 watchers |
Inputs used
| forks | 0 |
| stars | 0 |
| watchers | 1 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
70Good
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (MIT) |
| 18/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | yes |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Ecosystem adoption (downloads)
66Moderate
How it's scored
| 52.5/80 | Monthly downloads — 8,712 downloads/month across npm |
| 0/20 | Registry dependents — not reported by this ecosystem |
Inputs used
| packages | youmindag |
| dependents | — |
| ecosystems | npm |
| total_downloads | — |
| monthly_downloads | 8,712 |
Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
31
Maintainer resilience (bus factor)
10Critical
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 0/22.5 | Commit distribution — top contributor authored 100% of commits |
| 1.4/13.5 | Contributor breadth — 1 contributors |
| 0/10 | OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
Issue & PR responsiveness
1Critical
How it's scored
| 0/46.8 | Issue resolution — no issues or no data |
| 0/38.3 | PR acceptance — no decided pull requests or no data |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 0 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 0 |
Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.
Ownership & stewardship
31At risk
How it's scored
| 10/30 | Ownership backing — personal (user) account |
| 0/20 | Verified domain — not applicable to user accounts |
| 3.4/25 | Owner reach — 2 followers of CESARBR2025 |
| 11.1/25 | Track record — 18 public repos, account ~0 yr old |
Inputs used
| followers | 2 |
| owner_type | User |
| is_verified | — |
| owner_login | CESARBR2025 |
| public_repos | 18 |
| account_age_days | 335 |
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.
Package maintenance
100Excellent
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on npm |
| 35/35 | Publish recency — latest publish 4 days ago |
| 20/20 | Version history — 54 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | youmindag |
| ecosystems | npm |
| any_deprecated | no |
| min_days_since_publish | 4 |
Engineering Quality
Are baseline engineering and documentation practices in place?
46
Engineering practices
50Moderate
How it's scored
| 0/24 | CI workflows |
| 24/24 | Tests present |
| 16/16 | Linter config — eslint.config.mjs |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — no data |
Inputs used
| has_ci | no |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | yes |
| has_precommit_config | no |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.
Documentation
40At risk
How it's scored
| 30/30 | README |
| 0/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 0/10 | Repository description |
| 0/10 | Topics |
| 10/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | yes |
| homepage | — |
| has_readme | yes |
| has_docs_dir | no |
| has_description | no |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
26
Security posture
26Critical
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — no data |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 0/2.5 | Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
| 0/10 | Dangerous-Workflow — no data |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 0/7.5 | Maintained — project was created within the last 90 days. Please review its contents carefully |
| 0/5 | Packaging — no data |
| 0/5 | Pinned-Dependencies — no data |
| 0/5 | SAST — no SAST tool detected |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — no data |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 12 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 6 |
| scorecard_aggregate | 2.6 |
Excluded from scoring (no data or not applicable): ci_tests, dangerous_workflow, packaging, pinned_dependencies, signed_releases, token_permissions. Remaining weights renormalized.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
63
Agent context & guidance
72Good
How it's scored
| 45/45 | Agent instructions — template/AGENTS.md |
| 0/15 | Machine-readable docs (llms.txt) |
| 27.1/40 | Legible commit history — 30 of 59 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.508 |
| agent_instruction_files | template/AGENTS.md |
| agent_instruction_max_bytes | 11,529 |
Verify loop (build / test / typecheck)
59Moderate
How it's scored
| 0/18 | One-command bootstrap |
| 22/22 | Automated tests |
| 11/11 | Lint / format config — eslint.config.mjs |
| 0/11 | Static type checking |
| 10/10 | Reproducible environment — lockfile |
| 10/10 | Demonstrated agent practice — 6 of the last 59 commits agent-authored or agent-credited |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — no data |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | package-lock.json |
| has_dockerfile | no |
| typed_language | no |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | yes |
| typecheck_configs | — |
| agent_commit_share | 0.102 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.
Code legibility for models
55Moderate
How it's scored
| 0/45 | Type-checkable code — JavaScript without a type-check config |
| 55/55 | Manageable file sizes — 0/56 source files over 60KB |
Inputs used
| primary_language | JavaScript |
| largest_source_bytes | 24,361 |
| source_files_sampled | 56 |
| oversized_source_files | 0 |
Key facts
0GitHub stars
1contributors
59commits, last 12 months
4days since last push
28releases
1bus factor
0open issues
npmpackage ecosystems
Data collection warnings
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
- deps.dev does not index npm:youmindag@2.11.5; advisories assessed against the repository dependency graph instead
More detail
OpenSSF Scorecard 2.6 / 10
2.6aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| n/a | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 0 | Contributors | project has 0 contributing companies or organizations -- score normalized to 0 |
| n/a | Dangerous-Workflow | no workflows found |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 0 | Maintained | project was created within the last 90 days. Please review its contents carefully |
| n/a | Packaging | packaging workflow not detected |
| n/a | Pinned-Dependencies | no dependencies found |
| 0 | SAST | no SAST tool detected |
| 0 | Security-Policy | security policy file not detected |
| n/a | Signed-Releases | no releases found |
| n/a | Token-Permissions | No tokens found |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
All dependencies not collected
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 281,
"has_wiki": true,
"homepage": null,
"languages": {
"JavaScript": 343068
},
"pushed_at": "2026-07-17T02:03:01Z",
"created_at": "2026-07-09T19:39:39Z",
"owner_type": "User",
"updated_at": "2026-07-17T02:03:05Z",
"description": null,
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "JavaScript",
"significant_languages": [
"JavaScript"
]
},
"owner": {
"blog": null,
"name": null,
"type": "User",
"login": "CESARBR2025",
"company": null,
"location": null,
"followers": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/227504602?v=4",
"created_at": "2025-08-20T01:44:01Z",
"is_verified": null,
"public_repos": 18,
"account_age_days": 335
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v2.6.4",
"kind": "patch",
"published_at": "2026-07-14T17:02:55Z"
},
{
"tag": "v2.6.3",
"kind": "patch",
"published_at": "2026-07-14T17:01:25Z"
},
{
"tag": "v2.6.2",
"kind": "patch",
"published_at": "2026-07-14T06:47:01Z"
},
{
"tag": "v2.6.1",
"kind": "patch",
"published_at": "2026-07-14T06:43:35Z"
},
{
"tag": "v2.6.0",
"kind": "minor",
"published_at": "2026-07-14T06:39:31Z"
},
{
"tag": "v2.5.9",
"kind": "patch",
"published_at": "2026-07-14T06:35:04Z"
},
{
"tag": "v2.5.8",
"kind": "patch",
"published_at": "2026-07-14T06:22:43Z"
},
{
"tag": "v2.5.7",
"kind": "patch",
"published_at": "2026-07-14T06:07:01Z"
},
{
"tag": "v2.5.6",
"kind": "patch",
"published_at": "2026-07-14T05:58:09Z"
},
{
"tag": "v2.5.5",
"kind": "patch",
"published_at": "2026-07-14T05:48:24Z"
},
{
"tag": "v2.5.4",
"kind": "patch",
"published_at": "2026-07-14T05:43:15Z"
},
{
"tag": "v2.5.3",
"kind": "patch",
"published_at": "2026-07-14T05:28:30Z"
},
{
"tag": "v2.5.2",
"kind": "patch",
"published_at": "2026-07-14T05:19:42Z"
},
{
"tag": "v2.5.1",
"kind": "patch",
"published_at": "2026-07-14T05:13:32Z"
},
{
"tag": "v2.2.1",
"kind": "patch",
"published_at": "2026-07-13T20:01:05Z"
},
{
"tag": "v2.2.0",
"kind": "minor",
"published_at": "2026-07-13T19:55:40Z"
},
{
"tag": "v2.1.1",
"kind": "patch",
"published_at": "2026-07-13T19:21:21Z"
},
{
"tag": "v2.1.0",
"kind": "minor",
"published_at": "2026-07-13T19:15:28Z"
},
{
"tag": "v2.0.1",
"kind": "patch",
"published_at": "2026-07-13T19:13:07Z"
},
{
"tag": "v2.0.0",
"kind": "major",
"published_at": "2026-07-13T18:09:44Z"
},
{
"tag": "v1.9.0",
"kind": "minor",
"published_at": "2026-07-13T17:54:32Z"
},
{
"tag": "v1.8.1",
"kind": "patch",
"published_at": "2026-07-13T17:46:31Z"
},
{
"tag": "v1.8.0",
"kind": "minor",
"published_at": "2026-07-13T17:40:03Z"
},
{
"tag": "v1.1.0",
"kind": "minor",
"published_at": "2026-07-10T03:43:59Z"
},
{
"tag": "v1.0.4",
"kind": "patch",
"published_at": "2026-07-09T20:25:59Z"
},
{
"tag": "v1.0.3",
"kind": "patch",
"published_at": "2026-07-09T20:23:56Z"
},
{
"tag": "v1.0.2",
"kind": "patch",
"published_at": "2026-07-09T20:16:27Z"
},
{
"tag": "v1.0.1",
"kind": "patch",
"published_at": "2026-07-09T20:06:27Z"
}
],
"recent_commits": [
{
"oid": "9efa3b5f2fc3201bc314c0dd52634a0e53e26a33",
"body": "Verificado en vivo contra seguridad_publica (edición real, no simulada):\nClaude Code pasa tool_input.file_path como ruta ABSOLUTA, no relativa. El\nmatching contra las tablas de Componentes ya lo manejaba bien (toRelative\nya existía para eso), pero el mensaje del nudge mostraba la ruta absoluta\ncompleta en vez de la relativa. Cosmético, pero afecta legibilidad.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "v2.11.5: nudge de doc usa ruta relativa, no absoluta",
"author_name": "César Iván Barcenas Rosales",
"author_login": "CESARBR2025",
"committed_at": "2026-07-17T02:03:00Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ee9f2fa653d959c2f75e11b7287e5cf7fe1fa027",
"body": "El detector de staleness por feature (v2.11.3) solo se veía corriendo\n`doctor` manualmente — el usuario tenía que acordarse de revisarlo. Se\ndecidió explícitamente NO auto-reescribir la prosa narrativa con IA en\nbackground (contenido \"fuente de verdad\" sin supervisión, si se equivoca,\nes peor que co\n[…]\nciona, y archivos no documentados no generan ruido.\n\n10 tests nuevos (test/staleness-hooks.test.mjs) con repos git reales.\n129 tests, 0 fallos.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "v2.11.4: cierra el hueco de staleness narrativa en los hooks",
"author_name": "César Iván Barcenas Rosales",
"author_login": "CESARBR2025",
"committed_at": "2026-07-17T02:00:08Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c5c2951a4460dc180a4ea9f339a3ffa4a1c2175d",
"body": "git-log-distance repo-global mide actividad, no drift de contenido: un\ntypo en cualquier archivo sube el contador igual que reescribir un flujo\ncompleto, y no dice QUÉ parte de la bóveda revisar. Además el chequeo\noriginal solo comparaba contra el primer directorio de código con\nhistorial, no el más\n[…]\nrmato.\n\n7 tests nuevos con un repo git real (init, commits secuenciales, verifica\nque marca/desmarca stale correctamente). 119 tests, 0 fallos.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "v2.11.3: staleness de bóveda por feature, no por repo global",
"author_name": "César Iván Barcenas Rosales",
"author_login": "CESARBR2025",
"committed_at": "2026-07-17T01:41:35Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6b53940e206e3421b36e4de722c42c42a98e84f4",
"body": "ym-hook-posttool.mjs pasó de emitir un recordatorio de texto cada 10\nediciones a lanzar la sincronización real: npx graphify update +\nnode scripts/populate-vault.mjs, en un proceso detached (ym-sync-\nbackground.mjs) que el hook no espera — sale de inmediato para no competir\ncon su propio timeout ni \n[…]\ntests nuevos verificando ejecución real del proceso detached, cooldown,\n recuperación de lock y respeto a autoSync:false. 112 tests, 0 fallos.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "v2.11.2: auto-sync en background en vez de solo recordar",
"author_name": "César Iván Barcenas Rosales",
"author_login": "CESARBR2025",
"committed_at": "2026-07-17T01:28:08Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "5643c8f203d6499a5bb84766c61d3717c1081104",
"body": "El guard de PreToolUse solo interceptaba tool_name==='Bash', así que en\ninstalaciones estándar de Claude Code (con las tools nativas Grep/Glob\nhabilitadas) una búsqueda cruda por esa vía no pasaba por el hook.\n\n- ym-hook-guard.mjs ahora también maneja Grep/Glob: nunca bloquea (no son\n \"crudas\", son\n[…]\n.\n- 4 tests nuevos (nunca bloquea, recuerda al 5º intento, respeta guard=off,\n matcher Grep|Glob presente tras el merge). 107 tests, 0 fallos.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "v2.11.1: cubrir tools nativas Grep/Glob en el enforcement",
"author_name": "César Iván Barcenas Rosales",
"author_login": "CESARBR2025",
"committed_at": "2026-07-17T01:07:30Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f893d39d2ebb70f6067aea4544f8262de8872dc5",
"body": "Bugs corregidos:\n- VERSION del paquete (lib/version.mjs) — help/doctor ya no imprimen \"v?\"\n- Contrato JSONL unificado (lib/jsonl.mjs) — historial/decisiones ya no muestran \"• [?]\"\n- Hint --full ya no se imprime cuando ya estás en --full\n- doctor: \"\\n\" literal, numeración duplicada, y npm view (red) \n[…]\ntes:\n- lint ahora cubre template/scripts/ y el plugin de opencode\n- fixtures de test con el formato JSONL real\n- 103 tests (antes 81), 0 fallos\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "v2.11.0: hardening + enforcement Claude Code",
"author_name": "César Iván Barcenas Rosales",
"author_login": "CESARBR2025",
"committed_at": "2026-07-17T00:56:01Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "fd17439f007dfa8abbffc26fd07bb2d01672b299",
"body": null,
"is_bot": false,
"headline": "v2.10.0: bump version",
"author_name": "César Iván Barcenas Rosales",
"author_login": "CESARBR2025",
"committed_at": "2026-07-16T23:52:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "29a9ff1002ae40e10d32585e15a9cdcd292b7fd2",
"body": "🔴 FALLO 1: Nuevo comando 'architect' — protocolo arquitecto 3-pasos\n (boveda + graphify + historial), carga contextual por modulo\n🔴 FALLO 2: --help contextual con categorias (descubrimiento,\n operaciones, desarrollo) + 'youmindag help <cmd>' + '--examples'\n🔴 FALLO 3: Nuevo comando 'history' + vaul\n[…]\nmpact + getGraphMeta — wrappers\n estructurados del output de graphify\n🟠 FALLO 7: Post-install guidance con 4 pasos claros en lugar\n del mensaje generico anterior\n\nTests: 81 pass (0 fail), lint clean",
"is_bot": false,
"headline": "v2.10.0: UX & descubrimiento — 7 fallos corregidos",
"author_name": "César Iván Barcenas Rosales",
"author_login": "CESARBR2025",
"committed_at": "2026-07-16T23:51:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cc474a944635fe4732f047a3f7bf3724d96b443d",
"body": "The entry guard compared process.argv[1] (relative/symlink path)\ndirectly against fileURLToPath(import.meta.url) (absolute resolved\npath), causing main() to never execute when run via npx. Fix uses\nrealpathSync(resolve()) on both sides.",
"is_bot": false,
"headline": "v2.9.4: Fix entrypoint check when run via npx symlink",
"author_name": "César Iván Barcenas Rosales",
"author_login": "CESARBR2025",
"committed_at": "2026-07-15T21:49:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "57ade4f3975cdfc2d77505713c593c3ef79ea6a1",
"body": null,
"is_bot": false,
"headline": "docs: agregar gráfica real de tokens ahorrados al README",
"author_name": "César Iván Barcenas Rosales",
"author_login": "CESARBR2025",
"committed_at": "2026-07-15T19:51:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1bc7174b2aa292219ad67f235c0afbea57ea2535",
"body": null,
"is_bot": false,
"headline": "docs: rediseñar README como landing page + agregar CONTRIBUTING.md",
"author_name": "César Iván Barcenas Rosales",
"author_login": "CESARBR2025",
"committed_at": "2026-07-15T19:47:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d4a470a87b9f319d5714f6d9fbb450806afcb361",
"body": "Single change: prepublishOnly hook in package.json calls npm run verify.\nnpm publish now auto-blocks on lint failures or test failures.\nConfirmed via --dry-run: tarball generated correctly when code is clean.",
"is_bot": false,
"headline": "v2.9.3: Add prepublishOnly gate — auto-runs lint+test before npm publish",
"author_name": "César Iván Barcenas Rosales",
"author_login": "CESARBR2025",
"committed_at": "2026-07-15T18:58:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "47014905a17f29cbbe8aa0c4c44f83c8a697bd9d",
"body": "…def)\n\nRoot cause: extracted command modules missing fs/path/child_process/readline imports.\n46 ReferenceErrors at runtime, 7 of 14 CLI commands broken or silently failing.\n\nFixes:\n- lib/fs-helpers.mjs: +readFileSync import\n- lib/commands/db.mjs: +createInterface, parseEnvFile, hasPostgres; fix CWD→\n[…]\nion)\n\nPrevention:\n- eslint@^10.7.0 as devDependency with no-undef rule\n- npm run lint (0 errors), npm run verify (lint+test)\n- 58/58 tests passing\n- Full smoke test: all 14 CLI commands verified clean",
"is_bot": false,
"headline": "v2.9.2: Hotfix — 46 missing imports across 7 lib/ files (ESLint no-un…",
"author_name": "César Iván Barcenas Rosales",
"author_login": "CESARBR2025",
"committed_at": "2026-07-15T18:48:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "419dbcf4dc00919af1663352ad256e43ed6573e9",
"body": "…ession tests\n\nBug A: lib/graphify.mjs — missing RESET import (11 uses, 0 imports)\nBug B: lib/populate.mjs — missing RESET import (populateVaultFiles summary lines)\nBug C: lib/commands/misc.mjs — VERSION as parameter to cmdStatus/cmdUninstall/showHelp\n+ isDevScriptWrapped import in bin/run.mjs\n\nNew \n[…]\nes no throws (basic + full deps)\n- test/commands.test.mjs — showHelp/cmdStatus/cmdUninstall contain version, no undefined\n\n58/58 tests passing + smoke test verified (install/help/status/dry-run clean)",
"is_bot": false,
"headline": "v2.9.1: Hotfix — fix 3 runtime ReferenceErrors (RESET/VERSION) + regr…",
"author_name": "César Iván Barcenas Rosales",
"author_login": "CESARBR2025",
"committed_at": "2026-07-15T18:34:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9c6c67d87fcc25f1a7300c8e60b0d5659971635b",
"body": "…ify, lib/commands/\n\n- Paso 1: lib/fs-helpers.mjs — DRY_RUN-aware file helpers with getDryRun()/setDryRun()\n- Paso 2: lib/populate.mjs — 9 vault auto-population functions\n- Paso 3: lib/graphify.mjs — installGraphify + getGraphifyVersion (extracted from inline block)\n- Paso 4: lib/commands/ — split b\n[…]\nommand (db, dev, trace, watch, sync, misc)\n- Paso 5: bin/run.mjs slimmed from 1673→410 lines (orchestrator only: main, freshInstall, upgrade)\n- 50/50 test suite still green after every extraction step",
"is_bot": false,
"headline": "v2.9.0: Full modularization — lib/fs-helpers, lib/populate, lib/graph…",
"author_name": "César Iván Barcenas Rosales",
"author_login": "CESARBR2025",
"committed_at": "2026-07-15T18:25:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c47fb8ca226232a098109e09d226cc4997da700c",
"body": "…tignore dedup) + Bug 2 (kebabCase fallback)\n\n- Extract lib/utils.mjs: kebabCase, pascalCase, colours (kebabCase fallback 'proyecto' on empty/non-latin)\n- Extract lib/detect.mjs: detectLang, hasPostgres, detectDBEngine, getDBMigrationCommands\n- Extract lib/vault.mjs: getBovedaDir, readYoumindagVersi\n[…]\n preserves single entry after repeated calls\n- Bug 2 regression: kebabCase returns 'proyecto' on empty/emoji/non-latin input\n- .gitignore stale comments cleanup (strips any '# YouMindAG' comment line)",
"is_bot": false,
"headline": "v2.8.0: Modularize CLI into lib/ + test suite (50/50). Fix Bug 1 (.gi…",
"author_name": "César Iván Barcenas Rosales",
"author_login": "CESARBR2025",
"committed_at": "2026-07-15T17:55:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "62eca87b758b8baaff5f3151c8aa9382f336037d",
"body": "…& state machine docs, boveda-#project naming\n\n- Remove Mermaid from feature template, enforce fixed sections (Componentes → Páginas/BD → Reglas)\n- New 🗺 FLUJO GENERAL.md: end-to-end data flow with feature/route/table/state links\n- New 🏗 Arquitectura/Máquina de Estados.md: centralized state catalog \n[…]\nility: auto-detect vault dir via .youmindag.json→glob→legacy\n- All populate functions, install, upgrade, uninstall, status, watch updated\n- AGENTS.md: agent instructions for dynamic boveda-* discovery",
"is_bot": false,
"headline": "v2.7.0: Restructure vault for 10/10 — unified feature template, flow …",
"author_name": "César Iván Barcenas Rosales",
"author_login": "CESARBR2025",
"committed_at": "2026-07-15T17:36:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e6712cb39639b2a5ec56ba90ea1ff9ba59256a3f",
"body": "…es with clean .graphify/ line",
"is_bot": false,
"headline": "v2.6.4: Fix .gitignore upgrade — replace old scattered graphify entri…",
"author_name": "César Iván Barcenas Rosales",
"author_login": "CESARBR2025",
"committed_at": "2026-07-14T17:02:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1adad9918f84de77c95a4d9a27fb00a7cdc6205f",
"body": "…r post-merge context rebuild + --hook for automatic git hook",
"is_bot": false,
"headline": "v2.6.3: Ignore .graphify/ entirely (team-safe). Add youmindag sync fo…",
"author_name": "César Iván Barcenas Rosales",
"author_login": "CESARBR2025",
"committed_at": "2026-07-14T17:01:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "36615c864759e292a3d184a53f34fde71e8e4bad",
"body": "…YouMindAG using real project files",
"is_bot": false,
"headline": "v2.6.2: Add A/B test script — simulates token consumption SIN vs CON …",
"author_name": "César Iván Barcenas Rosales",
"author_login": "CESARBR2025",
"committed_at": "2026-07-14T06:47:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3f52afa6d8c958783e0c0c3730bdeb79f3019465",
"body": "… tokens) to .youmindag/token-usage.jsonl + token-summary.mjs for A/B testing",
"is_bot": false,
"headline": "v2.6.1: Add token usage tracking — logs every tool call (input/output…",
"author_name": "César Iván Barcenas Rosales",
"author_login": "CESARBR2025",
"committed_at": "2026-07-14T06:43:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2aaf23c3f76d93cfbbbf1fdb80468d305174589e",
"body": "… files, 30% false starts) and efficient YouMindAG context (2-5% boveda, 1 graphify query, amortized AGENTS.md)",
"is_bot": false,
"headline": "v2.6.0: Calibrated benchmark model — realistic discovery cost (15-30%…",
"author_name": "César Iván Barcenas Rosales",
"author_login": "CESARBR2025",
"committed_at": "2026-07-14T06:39:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a031fcbf8f2d397dc1aaff7c150c498cf3d43a10",
"body": "… with/without YouMindAG",
"is_bot": false,
"headline": "v2.5.9: Add benchmark.mjs — measures estimated token savings per task…",
"author_name": "César Iván Barcenas Rosales",
"author_login": "CESARBR2025",
"committed_at": "2026-07-14T06:35:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac8eeccbf286c4f43b710686163dcfbcbc00d2f9",
"body": "…onID, and cumulative count for Capa 3 diagnostics",
"is_bot": false,
"headline": "v2.5.8: Log grep/glob tool calls in YM-DEBUG — shows tool name, sessi…",
"author_name": "César Iván Barcenas Rosales",
"author_login": "CESARBR2025",
"committed_at": "2026-07-14T06:22:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4473b11a120c7b7d7ea233e920639db3aab9fc10",
"body": "…age), avoids unknown git error",
"is_bot": false,
"headline": "v2.5.7: Fix plugin path — ./ prefix marks as local path (not npm pack…",
"author_name": "César Iván Barcenas Rosales",
"author_login": "CESARBR2025",
"committed_at": "2026-07-14T06:07:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d393c1a27b7c0f4a0d56a434bfedcb0ac46c9135",
"body": "… inside .opencode/, relative paths resolve from there",
"is_bot": false,
"headline": "v2.5.6: Fix double .opencode/ path in plugin array — opencode.json is…",
"author_name": "César Iván Barcenas Rosales",
"author_login": "CESARBR2025",
"committed_at": "2026-07-14T05:58:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "480475ce299a3e762cdc5ad4a4ce2bfee03d4cd0",
"body": "…plugin-heartbeat.log on load to verify plugin execution",
"is_bot": false,
"headline": "v2.5.5: Add plugin heartbeat log — unconditionally writes .youmindag/…",
"author_name": "César Iván Barcenas Rosales",
"author_login": "CESARBR2025",
"committed_at": "2026-07-14T05:48:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8e000ccfa19cdc2e983c59f3786249d22e6c1d84",
"body": "…ites to .youmindag/ym-debug.log so logs survive desktop app launch",
"is_bot": false,
"headline": "v2.5.4: Replace console.error YM-DEBUG with file-based ymDebug() — wr…",
"author_name": "César Iván Barcenas Rosales",
"author_login": "CESARBR2025",
"committed_at": "2026-07-14T05:43:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "334f27cc7240138d64e32f1bf6189ae11bf2693d",
"body": "…message session filtering and subagent graphify injection on real project",
"is_bot": false,
"headline": "v2.5.3: Add gated debug logging (YOUMINDAG_DEBUG=1) to validate chat.…",
"author_name": "César Iván Barcenas Rosales",
"author_login": "CESARBR2025",
"committed_at": "2026-07-14T05:28:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a9cbbc7a6bb5caad8cdd4230305c660f09ea1c4f",
"body": "…pt text from contaminating primary agent's task detection",
"is_bot": false,
"headline": "v2.5.2: Filter chat.message by root sessionID — prevent subagent prom…",
"author_name": "César Iván Barcenas Rosales",
"author_login": "CESARBR2025",
"committed_at": "2026-07-14T05:19:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b826e1cc7a407519caf8f869bb7b2a70c79b358a",
"body": "…for task detection",
"is_bot": false,
"headline": "v2.5.1: Fix plugin hook API — input.args → output.args, chat.message …",
"author_name": "César Iván Barcenas Rosales",
"author_login": "CESARBR2025",
"committed_at": "2026-07-14T05:13:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "48d5aab37d32da32916fc2f4f4acbbab48b22b93",
"body": "…ep/glob block\n\nRoot cause: hooks used wrong names — plugin.tool-execute.before/after\ninstead of tool.execute.before/after (actual OpenCode API). This caused\nsilent hook failure — plugin loaded but never executed.\n\nChanges:\n- tool.execute.before/after — correct hook names (OpenCode docs)\n- Plugin si\n[…]\nission in opencode.json\n- Revert .mjs → .js (Bun handles ESM in .js natively, .mjs was red herring)\n- AGENTS.md: subagent graphify enforcement rules\n- Debug log on first call to verify input structure",
"is_bot": false,
"headline": "v2.5.0: Fix plugin hook names + Capa 2 subagent injection + Capa 3 gr…",
"author_name": "César Iván Barcenas Rosales",
"author_login": "CESARBR2025",
"committed_at": "2026-07-14T04:51:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6230c55e8bb1ea320d1280f881f5dc510d026b30",
"body": "Context-loader plugin uses import/import.meta.url (ESM-only) but had\n.js extension. If target project's package.json lacks type:module,\nNode.js treats it as CommonJS, causing silent load failure.\nPlugin never executes — no D1 pre-load, no graphify injection,\nno session tracking.\n\nFix: rename context-loader.js → context-loader.mjs.\nESM identified by .mjs extension regardless of package.json type.\nbin/run.mjs cleanup: remove legacy .js during upgrades.",
"is_bot": false,
"headline": "v2.4.0: Fix plugin ESM loading — rename to .mjs for Node.js compat",
"author_name": "César Iván Barcenas Rosales",
"author_login": "CESARBR2025",
"committed_at": "2026-07-14T04:32:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "02c6ccba38f64188fbaf9fbe2cdbd6801a55d09b",
"body": null,
"is_bot": false,
"headline": "v2.3.0",
"author_name": "César Iván Barcenas Rosales",
"author_login": "CESARBR2025",
"committed_at": "2026-07-14T04:02:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8cebe7bc5f9fbc076f0776ea0d55fdb4848b12e6",
"body": "…, shortcuts\n\n- isGraphifyAvailable() guard en todas las operaciones graphify\n- extractKeywords() extrae PascalCase/kebab/snake del dominio\n- buildGraphifyQuery() arma query compuesta: describe + files + deps\n- Quick Query shortcut: graphify q '...' → npx graphify query '...'\n- Session cache persist\n[…]\nobrevive a compactaciones)\n- Reporte de uso graphify vs grep al inicio de cada sesión\n- Graphify-first v2: summary + query compuesta con keywords (máx 2 procesos)\n- Shortcuts documentados en AGENTS.md",
"is_bot": false,
"headline": "v2.3.0: Graphify-first v2 — pre-query compuesto, graceful degradation…",
"author_name": "César Iván Barcenas Rosales",
"author_login": "CESARBR2025",
"committed_at": "2026-07-14T04:02:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "69f7523d99dc3cbc4ff8dfc8e4067eca4f4afa1e",
"body": "- Retry graphify install con latest si pin falla\n- watchDirTree maneja creacion/borrado de directorios\n- Cierra watchers huerfanos para evitar fuga de fd",
"is_bot": false,
"headline": "v2.2.1",
"author_name": "César Iván Barcenas Rosales",
"author_login": "CESARBR2025",
"committed_at": "2026-07-13T20:01:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "52b7568ae8f7075c388b3b03a7da718449ec945c",
"body": "- Bloques AUTO-GENERATED en boveda (preserva ediciones manuales)\n- Cache de graphify query con TTL (reduce latencia)\n- --dry-run mode (simular instalacion sin escribir)\n- Plugin state persistente (plugin-state.json)\n- youmindag uninstall (desinstalacion completa)\n- youmindag status --json (output consumible)\n- youmindag watch (fs.watch recursivo manual, multi-plataforma)\n- Pin graphify version (reproducibilidad)\n- Git safety check en uninstall",
"is_bot": false,
"headline": "v2.2.0",
"author_name": "César Iván Barcenas Rosales",
"author_login": "CESARBR2025",
"committed_at": "2026-07-13T19:55:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "335ae6cda5440c5eeab87b07a950972ba7433e5d",
"body": "…E badges y comandos CLI",
"is_bot": false,
"headline": "v2.1.1: Professional metadata — author, homepage, bugs, files + READM…",
"author_name": "CESAR BR",
"author_login": "CESARBR2025",
"committed_at": "2026-07-13T19:21:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3db276c6e5f5f3a07806ca20c7563f9ed6958a91",
"body": "…sparente + dev --wrap/--unwrap",
"is_bot": false,
"headline": "v2.1.0: trace --client (hook shadowing con AST) + ym-dev wrapper tran…",
"author_name": "CESAR BR",
"author_login": "CESARBR2025",
"committed_at": "2026-07-13T19:15:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "389575b2888bbf2595fb383a59e070fa9a8a37a5",
"body": "…s/--status mejorados",
"is_bot": false,
"headline": "v2.0.1: Hotfix — content-search fallback para trace-server, dev --log…",
"author_name": "CESAR BR",
"author_login": "CESARBR2025",
"committed_at": "2026-07-13T19:13:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56df9337021d483d6e6b6a220b0d6ff0fc813938",
"body": "…lback brace count + trace-utils compartido",
"is_bot": false,
"headline": "v2.0.0: trace --server — inyección de logger con AST TypeScript + fal…",
"author_name": "CESAR BR",
"author_login": "CESARBR2025",
"committed_at": "2026-07-13T18:09:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b73cb90b13e6174bf5c3c04607ffdf5c30a29d35",
"body": "… rastreo de símbolos, carga de contexto",
"is_bot": false,
"headline": "v1.9.0: Subcomandos dev, references, context — gestión de dev server,…",
"author_name": "CESAR BR",
"author_login": "CESARBR2025",
"committed_at": "2026-07-13T17:54:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6fed2f6d5cda84a37c884a12ac201882f03a8a4",
"body": "…saltarlo",
"is_bot": false,
"headline": "v1.8.1: trace — git dirty check antes de inyectar, flag --force para …",
"author_name": "CESAR BR",
"author_login": "CESARBR2025",
"committed_at": "2026-07-13T17:46:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f63617e2927de2c97a74a78f68bb822c2e9027f",
"body": null,
"is_bot": false,
"headline": "v1.8.0: Subcomandos CLI — db, trace, status, auto build mode",
"author_name": "CESAR BR",
"author_login": "CESARBR2025",
"committed_at": "2026-07-13T17:40:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "088f744d09d3482a8613a4b8ce527fad9cbbdf2f",
"body": "…, post-install tips\n\nFixes based on real-world testing session feedback:\n\nF1: AGENTS.md §2 expanded with summary/explain/path guidance\n Plugin now uses graphify summary for generic/ambiguous tasks\n\nF2: Comandos.md now includes dynamic DB migration commands\n detectDBEngine() supports: supaba\n[…]\nKEN\n Post-install tip suggests .env.example variables based on detected DB engine\n\nF5: DB Engine Detection (new in run.mjs)\n detectDBEngine() + getDBMigrationCommands() for dynamic Comandos.md",
"is_bot": false,
"headline": "v1.7.0: Polishing — DB-agnostic, graphify guidance, session auto-init…",
"author_name": "CESAR BR",
"author_login": "CESARBR2025",
"committed_at": "2026-07-11T08:20:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3904a1e1fd98c4d6934206474dd9a803274fb3c1",
"body": null,
"is_bot": false,
"headline": "v1.6.2: fix duplicate banner in upgrade output",
"author_name": "CESAR BR",
"author_login": "CESARBR2025",
"committed_at": "2026-07-11T07:48:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2690ab85100137b3570581dddec4f64d959c7db8",
"body": "Bug: copyDir('.opencode') in freshInstall used overwrite=false\nFix: pass overwrite=true so managed files are always updated",
"is_bot": false,
"headline": "v1.6.1: fix context-loader.js not being overwritten on fresh install",
"author_name": "CESAR BR",
"author_login": "CESARBR2025",
"committed_at": "2026-07-11T07:47:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "83136a06d42aedc6e68a49b500f26483835ef095",
"body": "…hify stale guard\n\n- F5: Auto-detect decisions in AI output and suggest logging\n- F6: Scope creep warning when short tasks touch many files\n- F7: Graphify stale guard after 10+ edits without update\n- D1: Pre-load session + pending decisions on first tool call\n- New: --decision, --pending-decisions, --clear-decisions commands\n- AGENTS.md: added scope, graphify, decision registration rules",
"is_bot": false,
"headline": "v1.6.0: Context Armor — decision logging, scope creep detection, grap…",
"author_name": "CESAR BR",
"author_login": "CESARBR2025",
"committed_at": "2026-07-11T07:39:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "35682bfa37bd40cc8f2bed83f75ba27cc6700d63",
"body": "…udget, subagent suggestions\n\n- F1: Verification reminder after 5+ actions without build/typecheck\n- F2: Compaction recovery re-injects golden rules on context reset\n- F3: Token budget tracking (session-checkpoint --budget)\n- F4: Subagent suggestion for research-heavy tasks\n- AGENTS.md: New 'Verificación y subagentes' section\n- New script: session-checkpoint.mjs (4.9KB → 7.5KB)",
"is_bot": false,
"headline": "v1.5.0: Self-Aware Agent — verification, compaction recovery, token b…",
"author_name": "CESAR BR",
"author_login": "CESARBR2025",
"committed_at": "2026-07-11T07:32:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26792b8d8fb3836749bc8ad7a93f9ab059263d21",
"body": null,
"is_bot": false,
"headline": "1.1.0",
"author_name": "CESAR BR",
"author_login": "CESARBR2025",
"committed_at": "2026-07-10T03:43:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "35a094c5902c64624e9b343f70be544d19bbd2f3",
"body": null,
"is_bot": false,
"headline": "1.0.4",
"author_name": "CESAR BR",
"author_login": "CESARBR2025",
"committed_at": "2026-07-09T20:25:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "803149326cf5f5f4e6d7057ce26e1f5b5990184f",
"body": null,
"is_bot": false,
"headline": "fix: studio path + scope",
"author_name": "CESAR BR",
"author_login": "CESARBR2025",
"committed_at": "2026-07-09T20:25:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e27616c6487c6afbefac4c97764efdbf23977973",
"body": null,
"is_bot": false,
"headline": "1.0.3",
"author_name": "CESAR BR",
"author_login": "CESARBR2025",
"committed_at": "2026-07-09T20:23:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "056919ce7eb1fc8bfd07dd0134e0e8284818f062",
"body": null,
"is_bot": false,
"headline": "fix: dynamic version from package.json",
"author_name": "CESAR BR",
"author_login": "CESARBR2025",
"committed_at": "2026-07-09T20:23:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0f6d27754a4de3e99386a758a337c03ef7ed0f60",
"body": null,
"is_bot": false,
"headline": "1.0.2",
"author_name": "CESAR BR",
"author_login": "CESARBR2025",
"committed_at": "2026-07-09T20:16:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9c0751a1b0fda808b536610de563a8fa240ff9b1",
"body": null,
"is_bot": false,
"headline": "fix: update repo URL to CESARBR2025",
"author_name": "CESAR BR",
"author_login": "CESARBR2025",
"committed_at": "2026-07-09T20:16:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f8d3bd66b7c46f2618c94a6c3042f31e76dc39dc",
"body": null,
"is_bot": false,
"headline": "1.0.1",
"author_name": "CESAR BR",
"author_login": "CESARBR2025",
"committed_at": "2026-07-09T20:06:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d2873e1472e874b5e2a9d8d541dacbad6e3a0fb2",
"body": null,
"is_bot": false,
"headline": "feat: auto-generate studio visual + .gitignore update on install",
"author_name": "CESAR BR",
"author_login": "CESARBR2025",
"committed_at": "2026-07-09T20:06:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "06b911ae39ba607f5a651782ed3dc832a9304d6c",
"body": null,
"is_bot": false,
"headline": "🎉 YouMindAG v1.0 — Context intelligence injector",
"author_name": "CESAR BR",
"author_login": "CESARBR2025",
"committed_at": "2026-07-09T19:38:30Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 28,
"commits_last_year": 59,
"latest_release_at": "2026-07-14T17:02:55Z",
"latest_release_tag": "v2.6.4",
"releases_from_tags": true,
"days_since_last_push": 4,
"active_weeks_last_year": 2,
"days_since_latest_release": 7,
"mean_days_between_releases": 0.1
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": false,
"has_contributing": true,
"health_percentage": 42,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "youmindag",
"exists": true,
"license": "MIT",
"keywords": [
"context",
"ai",
"opencode",
"claude",
"knowledge-graph",
"graphify"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/youmindag",
"is_deprecated": false,
"latest_version": "2.11.5",
"repository_url": "https://github.com/CESARBR2025/youmindag",
"versions_count": 54,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 8712,
"first_published_at": "2026-07-09T19:52:59.936000Z",
"latest_published_at": "2026-07-17T02:03:17.474000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 4
}
]
},
"popularity": {
"forks": 0,
"stars": 0,
"watchers": 1,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0
},
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 24361,
"source_files_sampled": 56,
"oversized_source_files": 0,
"agent_instruction_files": [
"template/AGENTS.md"
],
"agent_instruction_max_bytes": 11529
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 0,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "CESARBR2025",
"commits": 59,
"avatar_url": "https://avatars.githubusercontent.com/u/227504602?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": false,
"has_tests": true,
"ci_workflows": [],
"has_docs_dir": false,
"linter_configs": [
"eslint.config.mjs"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": null,
"reason": "no workflows found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": null,
"reason": "no dependencies found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": null,
"reason": "No tokens found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "9efa3b5f2fc3201bc314c0dd52634a0e53e26a33",
"ran_at": "2026-07-21T18:58:25Z",
"aggregate_score": 2.6,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/CESARBR2025/youmindag",
"host": "github.com",
"name": "youmindag",
"owner": "CESARBR2025"
},
"metrics": {
"overall": {
"key": "overall",
"band": "at_risk",
"name": "Overall health",
"note": null,
"notes": [],
"value": 43,
"inputs": {
"security": 26,
"vitality": 67,
"community": 41,
"governance": 31,
"engineering": 46
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 67,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 53,
"inputs": {
"commits_last_year": 59,
"human_commit_share": 1,
"days_since_last_push": 4,
"active_weeks_last_year": 2
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 4 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 4
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "2/52 weeks with commits",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 2
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "59 commits in the last year",
"points": 16,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 59
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 88,
"inputs": {
"releases_count": 28,
"latest_release_tag": "v2.6.4",
"releases_from_tags": true,
"days_since_latest_release": 7,
"mean_days_between_releases": 0.1
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "28 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 28
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 7 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 7
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~0.1 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 0.1
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 41,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 0,
"watchers": 1,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "1 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 1
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 66,
"inputs": {
"packages": [
"youmindag"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 8712
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "8,712 downloads/month across npm",
"points": 52.5,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 8712,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 31,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 10,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "critical",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution",
"pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"merged_prs": 0,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "no decided pull requests or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_decided_prs_or_data",
"params": {}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 31,
"inputs": {
"followers": 2,
"owner_type": "User",
"is_verified": null,
"owner_login": "CESARBR2025",
"public_repos": 18,
"account_age_days": 335
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "2 followers of CESARBR2025",
"points": 3.4,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 2,
"login": "CESARBR2025"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "18 public repos, account ~0 yr old",
"points": 11.1,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 18
}
},
{
"code": "account_age_years",
"params": {
"years": 0
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"youmindag"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 4
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 4 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 4
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "54 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 54
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "at_risk",
"name": "Engineering Quality",
"value": 46,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 50,
"inputs": {
"has_ci": false,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "eslint.config.mjs",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.mjs"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "at_risk",
"name": "Documentation",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "critical",
"name": "Security",
"value": 26,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "critical",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests, Dangerous-Workflow, Packaging, Pinned-Dependencies, Signed-Releases, Token-Permissions. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests",
"dangerous_workflow",
"packaging",
"pinned_dependencies",
"signed_releases",
"token_permissions"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 26,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 12,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 6,
"scorecard_aggregate": 2.6
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no workflows found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "No tokens found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 63,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "good",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.508,
"agent_instruction_files": [
"template/AGENTS.md"
],
"agent_instruction_max_bytes": 11529
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "template/AGENTS.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "template/AGENTS.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "30 of 59 human commits state their intent (structured subject or explanatory body)",
"points": 27.1,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 30,
"sampled": 59
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_pinned_dependencies"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 59,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"package-lock.json"
],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0.102,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "eslint.config.mjs",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.mjs"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "6 of the last 59 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 6,
"sampled": 59
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"primary_language": "JavaScript",
"largest_source_bytes": 24361,
"source_files_sampled": 56,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "JavaScript without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "JavaScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/56 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 56,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"deps.dev does not index npm:youmindag@2.11.5; advisories assessed against the repository dependency graph instead"
],
"report_type": "repository",
"generated_at": "2026-07-21T18:58:29.798365Z",
"schema_version": "0.23.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/c/CESARBR2025/youmindag.svg",
"full_name": "CESARBR2025/youmindag",
"license_state": "standard",
"license_spdx": "MIT"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.23.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — npm.