ChristopherDavenport/unblink holds a health index of 62 out of 100, placing it in the Moderate band. It scores highest on Engineering Quality (84/100) and lowest on Community & Adoption (43/100). It was last updated 4 days ago. A single contributor accounts for most of its recent work.
62
overall / 100
Moderate
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
62
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
Star and fork history 7 ★ / 1 ⇿
7Stars
1Forks
1Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 1Patch 0
OpenSSF Scorecard 5.0 / 10
5.0aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-22 04:27 UTC
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"ai",
"browser",
"golang",
"markdown",
"mcp",
"mcp-server",
"model-context-protocol",
"web-scraping"
],
"is_fork": false,
"size_kb": 1400,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 1869503,
"HTML": 14526,
"Shell": 3558,
"Makefile": 4722,
"Dockerfile": 359,
"JavaScript": 2791
},
"pushed_at": "2026-07-17T06:54:22Z",
"created_at": "2026-07-01T22:56:30Z",
"owner_type": "User",
"updated_at": "2026-07-14T21:26:07Z",
"description": "Pure-Go browser for AI: fetch pages, optionally render JS (no Chromium), get clean token-budgeted Markdown over MCP",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": null,
"name": "Christopher Davenport",
"type": "User",
"login": "ChristopherDavenport",
"company": null,
"location": "Lake Oswego, Oregon",
"followers": 289,
"avatar_url": "https://avatars.githubusercontent.com/u/10272700?v=4",
"created_at": "2014-12-22T18:25:29Z",
"is_verified": null,
"public_repos": 304,
"account_age_days": 4229
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.24.0",
"kind": "minor",
"published_at": "2026-07-06T20:57:50Z"
},
{
"tag": "v0.23.1",
"kind": "patch",
"published_at": "2026-07-05T16:12:02Z"
},
{
"tag": "v0.23.0",
"kind": "minor",
"published_at": "2026-07-05T15:30:32Z"
},
{
"tag": "v0.22.0",
"kind": "minor",
"published_at": "2026-07-04T22:27:12Z"
},
{
"tag": "v0.21.0",
"kind": "minor",
"published_at": "2026-07-04T04:16:00Z"
},
{
"tag": "v0.20.0",
"kind": "minor",
"published_at": "2026-07-04T02:35:36Z"
},
{
"tag": "v0.19.0",
"kind": "minor",
"published_at": "2026-07-03T23:59:50Z"
},
{
"tag": "v0.18.0",
"kind": "minor",
"published_at": "2026-07-03T20:01:43Z"
},
{
"tag": "v0.17.1",
"kind": "patch",
"published_at": "2026-07-03T03:58:07Z"
},
{
"tag": "v0.17.0",
"kind": "minor",
"published_at": "2026-07-03T03:45:04Z"
},
{
"tag": "v0.16.0",
"kind": "minor",
"published_at": "2026-07-01T23:03:23Z"
}
],
"recent_commits": [
{
"oid": "d8372b8ccb93f9d0e1e6d9dae8a15aca7fca2606",
"body": "…unication\n\ndocs: sell the value proposition + refresh head-to-head numbers",
"is_bot": false,
"headline": "Merge pull request #52 from ChristopherDavenport/docs/value-prop-comm…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-06T22:31:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cd060cb27ef5cfa1f9cc71f1f515059a789aeb87",
"body": "The engineering was strong and honest but the README buried its three best\nclaims in a dense Status paragraph. Restructure the pitch so a reader gets it\nin one screen, and re-measure so the numbers are current and sharper.\n\nREADME:\n- Scannable \"Why unblink\" hero: ~100× fewer tokens on real pages, no\n[…]\nthe flag is `--disable-js`, JS is on by default).\n\nVerified: make test eval 48/48; membench module builds + vets; manifests valid.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: sell the value proposition + refresh head-to-head numbers",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-06T22:29:50Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "89a78d90220f510f20dbf37aac2f410079b4fb78",
"body": null,
"is_bot": true,
"headline": "chore: sync release metadata to v0.24.0",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-06T20:58:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "08acbf95513f0f2698273522f7c85b59daa8842a",
"body": "…l/resource-types\n\nMinor release bundling the two PRs merged since v0.23.1:\n\n- #50 goja regex-class-hyphen rewrite (ADR 0017) + per-render module-instance\n registry (ADR 0018): client:only Astro/React islands now hydrate.\n- #51 requests tail-keeping ring buffer + devtools resource-type classification\n and types=[...] filter.\n\nplugin.json + README Status are synced by the sync-release-metadata job after\ngoreleaser.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(release): v0.24.0 — Astro/React island hydration + requests tai…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-06T20:53:41Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "fba6253a5fff66a7a37056d247ef5089a38e0241",
"body": "…ce-type\n\nfeat(requests): tail-keeping ring buffer + devtools resource types",
"is_bot": false,
"headline": "Merge pull request #51 from ChristopherDavenport/feat/requests-resour…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-06T20:50:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2a938cee537d542a42e2800e360aef5d77076358",
"body": "…-hyphen\n\nfix(js): make Astro/React islands render — two goja-engine gaps",
"is_bot": false,
"headline": "Merge pull request #50 from ChristopherDavenport/fix/goja-regex-class…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-06T20:50:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c5fb0c42265477de4e276c659f3063ffd93ed509",
"body": "The requests tool's log capped at 256 head-kept records and reported only\nmethod/url/status. Two problems for the tool's actual job — finding the JSON/API\nendpoint a data-driven page fetched:\n\n- A code-split SPA loads its scripts first and fires its data (fetch/XHR) calls\n last, so a head-keeping c\n[…]\nst-to-newest across the ring wrap. Tests cover the\nclassification table, ring tail-retention at/over the cap, and the type filter.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(requests): tail-keeping ring buffer + devtools resource types",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-06T20:48:31Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4698a139365060a58520f84464001425593300a3",
"body": "…stry\n\nRecord the two engine-policy decisions behind this PR: the goja regex-class\nworkaround (0017) and the dynamic-import module registry (0018), and index both\nin CLAUDE.md's ADR list.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(adr): 0017 regex-class hyphen rewrite, 0018 module-instance regi…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-06T20:46:17Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "82ee41abfcf324b449a69d71e7d71bb4d690dafe",
"body": "… islands)\n\nDynamic import() bundled each call's whole static graph independently (esbuild\nIIFE), so a dependency shared by two import()s was duplicated. An Astro\nclient:only island imports its component chunk and its renderer chunk as two\nseparate import()s that each statically import React, so Rea\n[…]\ny shell. Tests cover dedup across imports and the exact\nshared-singleton-dispatcher shape; make test/vet/eval and -race all clean.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(js): share one module instance across import() calls (fixes React…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-06T18:51:06Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "9fc9de8f81c95edd6b5712799ebe4c601d10b72a",
"body": "A regex character class with a hyphen immediately after a \\s/\\S/\\d/\\D/\\w/\\W\nshorthand — e.g. the ubiquitous camelCase/slugify helper /[\\s-_]+/ — is valid\nECMAScript but goja rejects it at compile time. Its parser.TransformRegExp\nexpands the shorthand to a character set ending in U+FEFF and leaves th\n[…]\nnd), astro_island_test.go (the full astro-island runtime + cross-origin\ndynamic import + the regex). make test/vet/eval all green.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(js): escape shorthand-then-hyphen regex classes goja rejects",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-06T18:15:41Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "5d88dadea85d0271f8037cc786ddfe8b5c14c098",
"body": null,
"is_bot": true,
"headline": "chore: sync release metadata to v0.23.1",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-05T16:12:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "11b594cf075900940d237fd392a5cd2dff171452",
"body": "Patch release: `Version()` derives from build info so `go install …@vX.Y.Z`\nreports its real module version, and the release workflow auto-stamps the README\nStatus headline from the tag. plugin.json + README are synced by the\nsync-release-metadata job after goreleaser.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(release): v0.23.1 — version reporting correct by construction",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-05T16:08:06Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "7e5640d90b435313d60f13d015d4e135258d5c9e",
"body": "…ruction\n\nfix(version): derive server version from build info (correct by construction)",
"is_bot": false,
"headline": "Merge pull request #49 from ChristopherDavenport/fix/version-by-const…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-05T16:07:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a406eea0228398f07957d7f08f8ca7b5885f208",
"body": "…ining it\n\nThe advertised version was a hardcoded `var version = \"0.17.1\"` overridden only\nby the Makefile/goreleaser `-ldflags` stamp. A `go install …@vX.Y.Z` build runs\nno ldflags, so it reported the stale constant (0.17.1) despite being built from a\ncurrent module — the version string lied about \n[…]\ntag alongside plugin.json (renamed the sync job to\n sync-release-metadata; full releases only, prereleases keep the last stable).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(version): derive server version from build info, stop hand-mainta…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-05T16:06:10Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "70729caa594beae951ca35d3d5f4a495649d923b",
"body": "…t-fidelity gap-closure\n\nWPT conformance harness (make wpt, ADR 0016) + the gaps it surfaced: native WHATWG\nURL parser (url 0.11->0.98), TextDecoder/TextEncoder correctness (encoding\n0.50->0.87), DOM conformance (dom 0.49->0.65), plus a Same-Origin-Policy audit +\nhardening (CSP nonce hiding, redirect-CORS revalidation).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_017bTB27JfmYZxp1AUqf2ZBf",
"is_bot": false,
"headline": "chore(release): v0.23.0 — WPT conformance harness + security & conten…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-05T15:26:07Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "473201d05fae1c1ce5d9060eb03c92aa639b00e3",
"body": "…-harness\n\nWPT conformance harness + security & content-fidelity gap-closure",
"is_bot": false,
"headline": "Merge pull request #48 from ChristopherDavenport/feat/wpt-conformance…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-05T15:23:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "32f07759a212d6d44dbd129aa9aea679edaea040",
"body": "url 0.115 -> 0.979, encoding 0.504 -> 0.873, dom 0.488 -> 0.648 (cheap subset;\npassive-by-default + reflected token-lists deferred). Updates the priority\nat-a-glance table with per-directory before/after and status.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_017bTB27JfmYZxp1AUqf2ZBf",
"is_bot": false,
"headline": "docs(wpt): record P1-P3 conformance deltas in the roadmap",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-05T15:14:11Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ea54a8488f6a2290312d809bd6abb3fd121197e5",
"body": "…ance (P3)\n\nClose the high-yield DOM gaps the WPT dom/ suite surfaced, lifting conformance\n0.488 -> 0.648. These are conformance/robustness fixes (they don't change extracted\nMarkdown), so the pass is scoped to the cheap high-value items; passive-by-default\nand the dispatch-ordering refactor are del\n[…]\nr/sizes), and out-of-scope WebIDL interface-object checks.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_017bTB27JfmYZxp1AUqf2ZBf",
"is_bot": false,
"headline": "feat(dom): DOMException + CharacterData/DOMTokenList/dispatch conform…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-05T15:12:37Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "31a29cb148509095652708fda203598a53280051",
"body": "… gap roadmap)\n\nFix the four content-relevant TextDecoder/TextEncoder gaps the WPT encoding/ suite\nsurfaced, lifting conformance 0.504 -> 0.873. All in the prelude JS, plus one native\nlabel helper.\n\n- TextEncoder: encode a lone surrogate as U+FFFD (EF BF BD) instead of WTF-8\n (utf8Encode; also fixe\n[…]\nbpart/streaming-flush tail — all out of this pass's scope.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_017bTB27JfmYZxp1AUqf2ZBf",
"is_bot": false,
"headline": "feat(encoding): WHATWG TextDecoder/TextEncoder correctness (P2 of the…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-05T14:52:50Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "efba4d12261c0e127fe537d4fecdcd818a5e68b1",
"body": "Replace the pure-JS regex URL/URLSearchParams with the native Go WHATWG parser\n(github.com/nlnwa/whatwg-url), bound via the subtle.go native-primitive pattern.\nLifts WPT url/ conformance 0.115 -> 0.979 and removes the per-call interpreter\ncost that timed out the corpus.\n\n- internal/js/urlnative.go: \n[…]\nval + frameworks/spa/nav/history; new TestURLNativeParser.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_017bTB27JfmYZxp1AUqf2ZBf",
"is_bot": false,
"headline": "feat(url): native WHATWG URL parser (P1 of the WPT gap roadmap)",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-05T14:43:39Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "945abbfc72f2b72b5f3d3d18746677942d478461",
"body": "Add an offline web-platform-tests conformance harness and, from what it\nsurfaced, audit and close six security-posture gaps.\n\nWPT harness (wpt/, build tag `wpt`, `make wpt`; ADR 0016):\n- Drives the JS engine directly (parse test HTML -> Render -> recover the\n results a custom testharnessreport.js w\n[…]\nst / make vet / make eval all pass; 13 new security tests.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_017bTB27JfmYZxp1AUqf2ZBf",
"is_bot": false,
"headline": "feat(wpt): WPT conformance harness + security-posture audit/gap-closure",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-05T13:57:20Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a7544f0476d12e0cfb8ebd6574e2f510334061b0",
"body": "…tition\n\nfeat(session): origin-partition Web Storage + consolidate security posture (SOP)",
"is_bot": false,
"headline": "Merge pull request #47 from ChristopherDavenport/feat/sop-storage-par…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-05T01:47:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dc1a8793d95a68f3240c2cd25853422d86ba145a",
"body": "feat(js): enforce Content-Security-Policy over untrusted page JS",
"is_bot": false,
"headline": "Merge pull request #45 from ChristopherDavenport/feat/csp-enforcement",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-05T01:44:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9bc4f5e4e0b7b4271ca8496908cf2a1aabdafbb0",
"body": "feat(js): enforce CORS + Subresource Integrity over untrusted page JS",
"is_bot": false,
"headline": "Merge pull request #43 from ChristopherDavenport/feat/cors-sri",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-05T01:43:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1ce19750f53bb31dd59c390a1b861b2ff8cf0072",
"body": "Add a dedicated \"Security posture\" section stating the coherent model — unblink\nexecutes untrusted page JS and applies browser-parity protections as defaults\nover it (\"gate the page, not the operator\"): SSRF, SOP (CORS + cookies + origin-\npartitioned storage), CORS, CSP, SRI, credential scoping, Sec\n[…]\nd of leaving the stance implicit across scattered bullets.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_017bTB27JfmYZxp1AUqf2ZBf",
"is_bot": false,
"headline": "docs: consolidate the security posture in CLAUDE.md",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-05T01:42:55Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c4dc680dd3d726fa83240482609ce38b7c713b7f",
"body": "Completes the Same-Origin Policy posture (ADR 0015). An audit found SOP is already\nunblink's default in all but one respect: CORS (#43) gives the network-read half,\nand the single-document / one-runtime-per-render architecture makes the entire\ncross-document DOM half moot (no reachable foreign windo\n[…]\ntest still passes. Race-clean; make eval 48/48.\n\nADR 0015.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_017bTB27JfmYZxp1AUqf2ZBf",
"is_bot": false,
"headline": "feat(session): origin-partition Web Storage (Same-Origin Policy default)",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-05T01:42:55Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "68fb162af46372e9debfad73890136c052596484",
"body": "CI's golangci-lint staticcheck (QF category) flagged `!(r >= '0' && r <= '9')`;\nrewrite as `(r < '0' || r > '9')`. Behavior-identical.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_017bTB27JfmYZxp1AUqf2ZBf",
"is_bot": false,
"headline": "fix(csp): satisfy golangci-lint QF1001 (De Morgan) in isBareScheme",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-05T01:42:28Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "62e006b2f505d1daecc2f140d8af9417099f8040",
"body": "Full CSP enforcement, on by default (escape hatch --no-csp). Continues the\nsecurity-header parity series (CORS/SRI #43, Sec-Fetch/isolation #44) and reuses\nthat stack's Env.ResponseHeaders wire and SRI hash helpers.\n\nParser (internal/js/csp.go, pure + fuzzed): each Content-Security-Policy header\n(an\n[…]\nowser_test.go e2e. Race-clean; make eval 48/48.\n\nADR 0014.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_017bTB27JfmYZxp1AUqf2ZBf",
"is_bot": false,
"headline": "feat(js): enforce Content-Security-Policy over untrusted page JS",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-05T01:15:29Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "778fec22275aec55ef2a58f2f4645b9b5538d784",
"body": "…isolation\n\nfeat(js): Sec-Fetch metadata + cross-origin isolation fidelity",
"is_bot": false,
"headline": "Merge pull request #44 from ChristopherDavenport/feat/fetch-metadata-…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-05T01:02:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f02a2edae6e152786a0d3094b42a3aebefbfc602",
"body": "Two browser-parity fidelity features (no render regressions), plus the shared\nresponse-header plumbing the CSP work will also use. Continues CORS/SRI (#43).\n\nShared plumbing: thread the document's HTTP response headers into the engine —\nEnv.ResponseHeaders, populated from page.Page.Header at both En\n[…]\n48.\n\nADR 0013. See ADR 0014 (next PR) for CSP enforcement.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_017bTB27JfmYZxp1AUqf2ZBf",
"is_bot": false,
"headline": "feat(js): Sec-Fetch metadata + cross-origin isolation fidelity",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-05T01:00:20Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "909e1f499ccef551d258ee4aad678216efe3abaa",
"body": "Both were completely absent: page JS could read any cross-origin response\nunconditionally, and the `integrity` attribute was never checked. unblink runs\nthe page's untrusted JavaScript, so both are added as a security posture over\nthat code, on by default — while the agent keeps full visibility of t\n[…]\ned stub so they stay about DNR, not CORS. make eval 48/48.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_017bTB27JfmYZxp1AUqf2ZBf",
"is_bot": false,
"headline": "feat(js): enforce CORS + Subresource Integrity over untrusted page JS",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T23:34:27Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "44c37fefd95868995666d334497c62d371d3eb31",
"body": "docs: refresh README/CLAUDE/docs + manifests for v0.22.0",
"is_bot": false,
"headline": "Merge pull request #42 from ChristopherDavenport/docs/refresh-v0.22.0",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T22:22:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4aeb0f5957610050725a078a753e81377078035e",
"body": "Bring the documentation to the current repo state and lead the v0.22.0 tag\n(WebExtensions runtime loading / ADR 0010; resource-based JS byte budgets +\nconcurrent module-graph warming / ADR 0009).\n\n- CLAUDE.md: add internal/{webext,content,ratelimit,sitemap,search} to the\n package list; complete the\n[…]\notated).\n- server.json: v0.22.0, drop the deprecated --js arg.\n- CHANGELOG.md + plugin.json: v0.22.0 release entry + version bump.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: refresh README/CLAUDE/docs + manifests for v0.22.0",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T22:20:42Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "9bd9492e967efa781289945aa923e95b76c46e71",
"body": "feat(webext): WebExtensions runtime — load uBlock Origin at runtime (Phases 1–5)",
"is_bot": false,
"headline": "Merge pull request #41 from ChristopherDavenport/feat/webextensions",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T19:02:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5eda6cbb6167effbaa51cb74fbe5d39fb6b41c32",
"body": "…s — the answer\n\nThe gorhill/uBlock GitHub releases (both .xpi and chromium .zip) are *full* uBO, MV2 —\nsame architecture that doesn't compile in goja. uBlock Origin *Lite* is the separate\nuBlockOrigin/uBOL-home project (MV3, declarativeNetRequest).\n\nVerified: loading uBOLite_*.chromium.zip compiles\n[…]\n gofmt clean. Extensions remain gitignored (not vendored).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01XvSmg4gm76cedsF2rZ9YWZ",
"is_bot": false,
"headline": "docs(webext): verify uBlock Origin Lite (MV3/DNR) blocks real tracker…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T18:51:47Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "fffa97fdd43378477ef61068a948e6d7070f37f2",
"body": "…; scope full-uBO\n\nPursuing fully-functional uBlock Origin surfaced a real bug and several correct\nimprovements to the MV2 webRequest path, plus a firm scoping conclusion. See ADR 0010.\n\n- Fix (real bug, any extension): the chrome-extension:// URL scheme was rejected by\n ParseMatchPattern, so uBO's\n[…]\nke test/vet/eval (48/48) green; gofmt + staticcheck clean.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01XvSmg4gm76cedsF2rZ9YWZ",
"is_bot": false,
"headline": "feat(webext): per-tab webRequest context; fix WAR-guard match-all bug…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T18:39:20Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f6d65c9e91997c6775de695c0ea8713f5cbe9563",
"body": "…rsisted storage)\n\nThe apparent non-deterministic uBO background hang was NOT an inherent\nincompatibility and NOT triggered by webRequest documentUrl (a red herring). By\ninterrupting the wedged background and dumping the goja stack + esbuild bundle, the\nloop was traced to uBO's cacheStorage read pat\n[…]\nke test/vet/eval (48/48) green; gofmt + staticcheck clean.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01XvSmg4gm76cedsF2rZ9YWZ",
"is_bot": false,
"headline": "fix(webext): root-cause the uBlock Origin \"infinite loop\" (corrupt pe…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T17:44:36Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b2d184accbe757f90dfbffecaf1f4fcd40e773ad",
"body": "Validated the runtime against unmodified real extensions (uBlock Origin 1.72.0 and\nPrivacy Badger, both MV2 with a background *page*), closing the gaps that surfaced.\nSee ADR 0010 (real-extension bring-up amendment). Extensions are never vendored; an\nenv-gated, CI-skipped smoke test (internal/js/rea\n[…]\nke test/vet/eval (48/48) green; gofmt +\nstaticcheck clean.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01XvSmg4gm76cedsF2rZ9YWZ",
"is_bot": false,
"headline": "feat(webext): real-extension bring-up (uBlock Origin, Privacy Badger)",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T17:27:07Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4d4ec33630dad957eafcb5fdf9a16ee667bb025f",
"body": "Manifest-V2 uBlock Origin does its own network filtering in the background: it\nregisters a blocking chrome.webRequest.onBeforeRequest listener and returns\n{cancel:true}/{redirectUrl}. unblink doesn't reimplement that matcher — it delivers\neach subrequest to the background's listeners and honors the \n[…]\n worlds, scriptlets (##+js), IndexedDB/cacheStorage shim.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01XvSmg4gm76cedsF2rZ9YWZ",
"is_bot": false,
"headline": "feat(webext): MV2 webRequest.onBeforeRequest blocking (Phase 5)",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T16:51:59Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ffad81971de3e88f5a93330ca5d9c0c3f4c47100",
"body": "…Phase 4)\n\nFills in the pieces a stock MV3 build (uBlock Origin Lite) leans on. See ADR 0010\n(Phase 4 amendment).\n\n- chrome-extension:// resource serving (internal/js/extresource.go): a content\n script's fetch(chrome.runtime.getURL(...)) now resolves to the packaged file\n instead of the network. e\n[…]\n-script\n worlds, scriptlets, IndexedDB/cacheStorage shim.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01XvSmg4gm76cedsF2rZ9YWZ",
"is_bot": false,
"headline": "feat(webext): extension resources, storage persistence, dynamic DNR (…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T16:45:42Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "2277938a063687645663898ab1aede84786a729d",
"body": "Adds the persistent background context and the message path uBlock Origin's\n*dynamic* cosmetic filtering uses (a content script asks the background which\nselectors apply to the current host, then hides them). See ADR 0010 (Phase 3\namendment).\n\n- Background worker (internal/js/bgworker.go): the exten\n[…]\nDocs: ADR 0010 Phase 3 amendment, README, architecture.md.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01XvSmg4gm76cedsF2rZ9YWZ",
"is_bot": false,
"headline": "feat(webext): background worker + runtime messaging (Phase 3)",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T16:08:40Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3a6ce39a0b971cca83ed0bc6e210d50f58b7176a",
"body": "…ase 2)\n\nAdds the WebExtensions surface that lets an extension modify the page, not just\nblock requests — the biggest Markdown-quality lever, since unblink emits text and\nalready skips image/CSS fetches. See ADR 0010 (Phase 2 amendment).\n\n- Cosmetic filtering (internal/js/cosmetic.go): with no CSSOM\n[…]\ne 2 amendment, README Extensions section, architecture.md.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01XvSmg4gm76cedsF2rZ9YWZ",
"is_bot": false,
"headline": "feat(webext): content scripts, chrome API, and cosmetic filtering (Ph…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T15:50:40Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7c92e0ba81a2d6f6a46e0506f0070b2bfa1d7dda",
"body": "…twork filtering (Phase 1)\n\nLoad user-supplied browser extensions at runtime (--extension <dir|.xpi|.crx|.zip>,\n--extensions-dir) so best-in-class GPL tooling (uBlock Origin Lite, AdGuard MV3)\nextends unblink without entering the MIT tree — the extension stays a separate\nartifact, like a browser add\n[…]\nE Extensions section + flags, architecture.md phase entry.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01XvSmg4gm76cedsF2rZ9YWZ",
"is_bot": false,
"headline": "feat(webext): runtime WebExtension loading + declarativeNetRequest ne…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T15:33:13Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3fddf9dbbf568074ee20593418b2e6fadf056c6e",
"body": "…-loading-byte-budgets\n\nfeat(js): resource-based JS budgets + concurrent module-graph warming",
"is_bot": false,
"headline": "Merge pull request #40 from ChristopherDavenport/feat/parallel-module…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T13:36:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eb74cd51d21febdd27a0f864a9ac0a01c1f5f135",
"body": "Replace the count-shaped JS network caps with resource-based bounds and\nwarm the code-split module graph concurrently, so heavy code-split SPAs\n(Astro/Vite/webpack chunk graphs) render within budget instead of\ntiming out. See ADR 0009.\n\n- Byte budget replaces the request-count budget: guardedTranspo\n[…]\nhe hits.\n Adds no async primitive, so the ADR 0004 settle proof holds.\n- Surface net_bytes render diagnostic.\n\nValidated: gofmt/vet clean, make test + eval (48/48), go test -race\n./internal/js clean.",
"is_bot": false,
"headline": "feat(js): resource-based JS budgets + concurrent module-graph warming",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T13:34:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "408966c71f2dcd848ab35cf0b152208c38d8f7c3",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ghmk4bFbWqsZwSKXGmx7HJ",
"is_bot": false,
"headline": "chore(release): v0.21.0 changelog + plugin manifest",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T04:11:41Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a5cbc73cf283f38f065cc031256358207fa0c88e",
"body": "feat(browse): auto-detect repeating collections + propose extract schemas",
"is_bot": false,
"headline": "Merge pull request #39 from ChristopherDavenport/feat/browse-collections",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T04:07:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9dfe54bf828ae525dfdf1e8a151e4a8b33066097",
"body": "feat(mcp): add extract tool (CSS-schema extraction)",
"is_bot": false,
"headline": "Merge pull request #37 from ChristopherDavenport/feat/extract-tool",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T04:04:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "831b74645716752c042211011c0df4b274b091dc",
"body": "…emas\n\nClose the discovery gap for the extract tool: extract needs CSS selectors,\nbut an agent had no way to find them short of reading raw HTML. browse — where\nan agent already orients — now auto-detects a page's dominant repeating\nrecord-sets (product lists, search results, table-like rows) and re\n[…]\n then extract pulls all records via the\nsuggested schema).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ghmk4bFbWqsZwSKXGmx7HJ",
"is_bot": false,
"headline": "feat(browse): auto-detect repeating collections + propose extract sch…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T04:00:37Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "41cb96b4948a8097aaacd825a4abdc8b3d2089bf",
"body": "Add a caller-directed structured-extraction tool: an agent passes a\nselector->field schema and gets structured records back. This closes the\none Obscura/Lightpanda differentiator (\"CSS-schema extraction\") that fits\nunblink's reduce-to-meaning identity rather than its automation turf.\n\n extract(ur\n[…]\nfence; correct across core/read-only/--disable-js gating).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ghmk4bFbWqsZwSKXGmx7HJ",
"is_bot": false,
"headline": "feat(mcp): add extract tool (CSS-schema extraction)",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T03:13:55Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "9af778b3f8f0e42e7585f4c8b2e6c9851da44d89",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ghmk4bFbWqsZwSKXGmx7HJ",
"is_bot": false,
"headline": "chore(release): v0.20.0 changelog + plugin manifest",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T02:31:25Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "23d7ab1410c189f3defc56d7ac5e5f627beafed0",
"body": "Add requests, console, and cookies inspection tools",
"is_bot": false,
"headline": "Merge pull request #36 from ChristopherDavenport/feat/inspection-tools",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T02:29:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7a9c5218a9228755886849ab857c6c34a7051180",
"body": "Three inspection tools surfaced by the charlotte comparison, all fitting\nthe no-layout-engine mission:\n\n- requests: the network requests a page's JavaScript made while rendering\n (method/url/status). The escape hatch for data-driven pages — render\n once, see the JSON endpoint the page fetched, the\n[…]\nree join the tool registry, presets, and capability gates.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ghmk4bFbWqsZwSKXGmx7HJ",
"is_bot": false,
"headline": "feat(mcp): add requests, console, and cookies tools",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T02:28:02Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "302ca2246cc13cc89fcc6d2093631b999bc15830",
"body": "Configurable tool exposure: presets + capability auto-gating",
"is_bot": false,
"headline": "Merge pull request #35 from ChristopherDavenport/feat/tool-exposure",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T01:54:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "067565cc50a6ae4843ac4edae4b35273d05257db",
"body": "…esentation\n\nCharlotte-inspired structured representation (regions, ARIA state, hash IDs, metadata, outline)",
"is_bot": false,
"headline": "Merge pull request #34 from ChristopherDavenport/feat/structured-repr…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T01:54:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2f1a5198d9c8821dd442fa4edb61c9bd30719651",
"body": "staticcheck SA4000 flagged `hashID(...) != hashID(...)` as identical\nexpressions on both sides of !=. Compare the id of the same button across\ntwo independent parses instead — a genuine determinism check (distinct\nnodes, same inputs) that also satisfies the linter.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ghmk4bFbWqsZwSKXGmx7HJ",
"is_bot": false,
"headline": "test(dom): make hashID determinism check not a self-comparison",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T01:52:46Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "3a597c7973a9e46a815e506fb58de16c26c10337",
"body": "The server advertises 14 tools; every one costs the model context on each\nturn. Two levers to trim the surface to what's useful:\n\n- Capability auto-gating (always on): a tool that can only error when\n unconfigured is never registered. `search` is hidden without a\n `--search-provider`; `interact` i\n[…]\ns routes every tool through a single gated addTool helper.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ghmk4bFbWqsZwSKXGmx7HJ",
"is_bot": false,
"headline": "feat(mcp): configurable tool exposure (presets + capability auto-gating)",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T01:24:05Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3ca81e10e919acf7d07f3273c42a0f71a91f9703",
"body": "Add a semantic region map to the browse result: page.Region records each\nARIA landmark (banner/navigation/main/complementary/contentinfo/form/\nsearch/region) with a role, accessible label, and a per-region\ninteractive inventory (links/forms/controls/headings) — charlotte's\n\"by-landmark\" orientation,\n[…]\n (which was a page-wide cost even on\nlandmark-free pages).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ghmk4bFbWqsZwSKXGmx7HJ",
"is_bot": false,
"headline": "feat(browse): landmark/region map with by-region counts",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T01:08:08Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3d5436ca6ee1af0b2ee6cb5b9c7f232ed64a3b71",
"body": "Surface p.Meta.Headings as a structured `headings[]` (level/text/id) on\nthe browse result, alongside the existing indented-text outline (kept for\nback-compat). Level encodes depth, so a flat list is far cheaper than a\nnested tree while letting an agent rebuild the hierarchy or deep-link via\n`#id`. H\n[…]\n heading-spam page can't bloat\nthe cheap orientation call.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ghmk4bFbWqsZwSKXGmx7HJ",
"is_bot": false,
"headline": "feat(browse): structured heading outline with anchor ids",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T01:07:31Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b8075a1f429a6cbfea2d1380ac9bb04728274eda",
"body": "Extend dom.Extract to read the head metadata already sitting in the meta\nmap — og:image (absolutized), author/article:author, article published &\nmodified times, twitter card/site, favicon (link[rel~=icon]), theme-color\n— and group them, with the long-extracted-but-never-surfaced canonical,\ninto a c\n[…]\nries none; every field omitempty, so it stays token-cheap.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ghmk4bFbWqsZwSKXGmx7HJ",
"is_bot": false,
"headline": "feat(browse): unified page-metadata object",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T01:06:19Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "e2adafab106fcf944d09c4b209dc4f7b7b238f88",
"body": "Add the semantic-accessibility foundation (internal/dom/aria.go): a\ncomputable subset of the WAI-ARIA accessible-name algorithm, ARIA-state\nreads, and mutation-resilient content-hash element ids — all from the\nparsed node tree, no browser (unblink has no layout engine).\n\npage.Control/Field now carry\n[…]\ntable no-nth structural signature, and the collision rule.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ghmk4bFbWqsZwSKXGmx7HJ",
"is_bot": false,
"headline": "feat(dom): interactive ARIA state + stable element ids",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-04T01:04:15Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "0bdcbafb84c4d564a39afb743e706f491033b92b",
"body": "feat(js): broad Web API surface (Web API tiers 1–3 + crypto.subtle) — v0.19.0",
"is_bot": false,
"headline": "Merge pull request #33 from ChristopherDavenport/feat/web-api-tiers",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T23:55:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de2e70e7f8dd7f148f6bac16c310e77b97d4b323",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ghmk4bFbWqsZwSKXGmx7HJ",
"is_bot": false,
"headline": "chore(release): v0.19.0 changelog + plugin manifest",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T23:53:31Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1c33c587cd051f045062d8069ced00615d89e611",
"body": "The \"What it forfeits\" JS bullet claimed canvas/WebGL/Workers/WebSocket make\npages \"not fully materialize\" — no longer accurate now that the crash-avoidance\nWeb API surface (Tiers 1-3) is present. Reframe the ceiling around what actually\nstays forfeit (pixels/layout and second-thread features), note\n[…]\n\" (JS is on by default) in the at-a-glance JavaScript row.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ghmk4bFbWqsZwSKXGmx7HJ",
"is_bot": false,
"headline": "docs(comparison): reflect the broad Web API surface (Phases 24-26)",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T23:49:39Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f01c811b02c4f67c9f333a682ecabc179ef98f29",
"body": "Flip the niche tier from \"leave undefined until a page crashes\" to proactive\ninert stubs, all in preludeAPIJS. None gate textual content, but a page touching\none unconditionally at boot (video.play(), new AudioContext(), new Notification(),\na WebGPU/WebRTC probe) would abort hydration without them. \n[…]\n/webapi_tier3_test.go and js-api-smoke markers\napi-26..27.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ghmk4bFbWqsZwSKXGmx7HJ",
"is_bot": false,
"headline": "feat(js): render Web API tier 3 crash-avoidance stubs (Phase 26)",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T23:47:38Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "37dcfbdbb7209df7827f43a2a6948d7fffb0122c",
"body": "The situational tier, once tier 1 shipped. All in preludeAPIJS except the\ncustom-element lifecycle hook and the crypto.subtle natives:\n\n- FULL: DOMMatrix/DOMPoint/DOMRect/DOMQuad/Path2D (real pure-JS matrix math);\n TextEncoderStream/TextDecoderStream over the tier-1 Streams; disconnectedCallback\n \n[…]\nle_fuzz_test.go, and\njs-api-smoke eval markers api-18..25.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ghmk4bFbWqsZwSKXGmx7HJ",
"is_bot": false,
"headline": "feat(js): render Web API tier 2 + broad crypto.subtle (Phase 25)",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T23:46:48Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "21a8e9186f71c3037ea1f60270f47134a950657c",
"body": "Close the eight highest-frequency browser-API gaps that crash SPA hydration on\nreal/common sites, each by the cheapest treatment that lets content materialize\n(the full/stub/leave-undefined rubric from docs/web-api-priorities.md):\n\n- FULL: CSS.escape/supports; FileReader and ReadableStream/WritableS\n[…]\npi_tier1_test.go and js-api-smoke eval markers api-11..17.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ghmk4bFbWqsZwSKXGmx7HJ",
"is_bot": false,
"headline": "feat(js): render Web API tier 1 (Phase 24)",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T23:46:06Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "733d3aff3ecc577d2696d9e1a50a4465311f56bf",
"body": "…t-drop-js\n\nchore: drop deprecated --js from the plugin manifest",
"is_bot": false,
"headline": "Merge pull request #32 from ChristopherDavenport/chore/plugin-manifes…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T20:05:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a815ecd82003a60c8b650d101310fce99b7cad5a",
"body": "The v0.18.0 release re-pinned the plugin manifest to the 0.18.0 image but kept\nthe --js arg the release sync only maps the image tag, not the arg list. JS is\non by default as of v0.18.0 (--js is a deprecated no-op), so the installed\nexample should not pass it. The sync job never re-adds args, so this is durable.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ghmk4bFbWqsZwSKXGmx7HJ",
"is_bot": false,
"headline": "chore: drop deprecated --js from the plugin manifest",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T20:03:51Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1cc590e2ef2e803c8bcd6356e9b674890c1696db",
"body": null,
"is_bot": true,
"headline": "chore: sync plugin manifest to v0.18.0",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-03T20:01:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "323184d2a41333eff38e54132abd85bd131078d7",
"body": "…tion\n\nComposed Shadow DOM (Phase 23) + JavaScript on by default",
"is_bot": false,
"headline": "Merge pull request #31 from ChristopherDavenport/shadow-dom-encapsula…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T19:57:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f0addd20581d99ea3165d7d5721c5971bebf6fc",
"body": "Two changes for the v0.18.0 minor release.\n\nShadow DOM composition (Phase 23, ADR 0005)\n- Replace the flat, non-encapsulating Shadow DOM with a composed,\n encapsulating one. Each shadow root is a detached *html.Node subtree\n (page-JS document.querySelector respects the boundary); a compose pass\n \n[…]\nslots eval case. make test /\neval / vet / gofmt all green.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01Ghmk4bFbWqsZwSKXGmx7HJ",
"is_bot": false,
"headline": "feat: composed Shadow DOM (Phase 23) + JavaScript on by default",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T19:55:31Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d528a6e75d3a126ded4e1f67ccacba28fa533cf7",
"body": "browser: make the per-host politeness rate limiter opt-in (default off)",
"is_bot": false,
"headline": "Merge pull request #30 from ChristopherDavenport/throughput-improvements",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T16:46:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f34d3d8ed8a95b46226f48f1206ef8b8d38156d",
"body": "--rate-limit now defaults to 0: out of the box unblink runs\nlike-for-like with the other benchmarked tools (none ships a crawl\nlimiter) and throughput is bounded by the site, not by unblink. The\nflag stays — set --rate-limit 5 (with --rate-burst) for the old\npolite-crawl behavior. The crossbench ada\n[…]\nfull window or provably idle by construction). The\ntiming-sensitive settle tests pass 20 consecutive runs; make test +\neval green (47/47 twice).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "browser: make the per-host politeness rate limiter opt-in (default off)",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T16:43:16Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "53d3e50e83eed960a19a5848c9b1b640d2aca825",
"body": "Throughput: provable-idle settle, script prefetch, content-keyed caches, markdown memo, honest crossbench",
"is_bot": false,
"headline": "Merge pull request #29 from ChristopherDavenport/throughput-improvements",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T16:34:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "749b6dc2c981fed2bc65b3eea89dec0cfdbd9fe0",
"body": "Full crossbench re-run (all six tools, median of 3, selfcheck passed):\nunblink's SPA renders drop ~200ms -> 2-10ms — now ahead of the warm\nbrowsers (15-22ms) and level with the embedded-V8 engines — with\nsequential throughput 5 -> ~249 pages/s and a newly published 8-way\nconcurrent row at ~827 pages\n[…]\ncture.md\nPhase 22 entry completed, README headline gains the measured render\nclaim, and settled_idle now rides the render-diagnostics debug log.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: republish measured throughput numbers (Phase 22)",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T16:31:59Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "da170cb212ee256b7545ca737df9f9e2ea0b0ce8",
"body": "Read recomputed reduce+emit+defang on every call — including every\npagination cursor page, which redid the whole document's reduction and\ndiscarded all chunks but one — even when the fetched+parsed page came\nstraight from the 60s cache. Each cache entry now carries a small memo\nkeyed {mode, safeOutp\n[…]\n cursor page\n\nmake test + eval green (47/47), -race clean. Also picks up a gofmt\nalignment fix in internal/js/context.go from the settle change.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "browser: memoize reduced markdown on the page-cache entry",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T16:18:17Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "0edd090a196b3d558254f8c34a4ae958c7e0c90a",
"body": "Two URL-sensitive cache keys made first visits (and any query-varying\nURL) re-pay compile work for byte-identical sources:\n\n- progKey included the script name — the page-position script-N.js for\n initial scripts, chunk:<absURL> for inserted chunks — so the same CDN\n bundle at a different position \n[…]\nnder a unique query per iteration (1.75ms/op with the cached\nbundle vs an esbuild rebuild per iteration before). make test + eval\ngreen (47/47).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "js: content-only program cache keys; bundle key ignores base query",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T16:13:30Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "1c557a0d7d0505f1edb1b489fa7212786ff87875",
"body": "runScripts fetched each classic <script src> synchronously on the loop\ngoroutine in document order: N external scripts = N serial round trips\non the render critical path. startPrefetch (armed right after bridge\ninstall, so fetches also overlap prelude execution) now fetches the\ncollected snapshot's \n[…]\n opens. -race clean; make test +\neval green (47/47). Also refreshes the bench header comment that still\ndescribed the pre-ADR-0004 settle floor.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "js: prefetch initial external script bodies concurrently",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T16:10:05Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "8f4fe372723855e133c6156586aaaa60246b1004",
"body": "The one-shot render semaphore was pinned at js.DefaultMaxConcurrent=4\nwith no knob: browser.New never called js.WithConcurrency, so a fifth\nconcurrent render always queued regardless of machine size. The new\n--js-concurrency flag (0 = auto) defaults to GOMAXPROCS clamped to\n[4, 16] — renders are CPU\n[…]\nlta on this 4-vCPU machine (auto resolves to the old 4);\nthe win is on wider machines and shows in crossbench's 8-way\nconcurrent-throughput row.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "browser: scale JS render concurrency with cores (--js-concurrency)",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T16:05:09Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "1c1a0a51e99d5cfee7176f7bf4247c42f5f3c10b",
"body": "…0004)\n\nEvery JS work source was already visible to the settle check on-loop —\nnetwork via the pending bracket (incremented synchronously before the\nfetch goroutine spawns), macrotasks via the prelude's wrapped-timer\nhandle table (rAF/rIC/postMessage/MessagePort all route through it),\nmicrotasks dra\n[…]\n: idle pages settle fast, and every\nmacrotask source (timers, immediates, message ports, network) holds\nthe settle open until its content lands.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "js: settle on provable idleness, not only the 60ms quiet window (ADR …",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T16:04:14Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b4cf20ab1eff19499c09edc460e0b24e28dffdac",
"body": "…tures\n\nThe unblink adapter never passed --rate-limit, so the default 5 req/s\nper-host limiter paced every cache-busted render against the single\nfixture host at ~200ms/request. The published SPA latency medians\n(201/199/201ms React/Vue/Lit, uniform across frameworks with very\ndifferent engine costs\n[…]\npoliteness limiter, so the fairness\nrules now record this as the one deliberate deviation from tool\ndefaults. Production defaults are unchanged.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "crossbench: disable unblink's politeness limiter against loopback fix…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T15:51:52Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "1160d975a6525a526e6b0c3f07e4733cd8bd0d30",
"body": "docs: reconcile content-boundary table after off-screen strip fix (#27)",
"is_bot": false,
"headline": "Merge pull request #28 from ChristopherDavenport/reconcile-safety-table",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T15:17:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2db265f3e5d3461c403ba973bb102d509dbfe5aa",
"body": "PR #27 closed the off-screen-hidden-text leak in the default article read, so\nre-running `make crossbench ARGS=\"-safety\"` now shows unblink stripping all\nthree hidden-instruction blocks (0/3 leaked, was 1/3). Updates the measured\ntable, the at-a-glance safety row, and the prose — which now credits u\n[…]\nen-text\nfiltering is a heuristic backstopped by the fence on every tool.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_013w44L7nWYretN5cq95mFNu",
"is_bot": false,
"headline": "docs: reconcile content-boundary table after the off-screen strip fix",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T15:15:40Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "2da6111cfce083a0f394610edb6144012e7f9a30",
"body": "reduce: strip off-screen hidden text in the default article read",
"is_bot": false,
"headline": "Merge pull request #27 from ChristopherDavenport/reduce-offscreen-strip",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T15:12:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "78bc4ede66a38fc6541b1622731bbe1c9d0e487a",
"body": "The safe-output hidden-strip ran only after readability extraction, on the\nextracted node. But readability drops inline style attributes while cleaning,\nwhich erases the off-screen-positioning signal (left:-9999px, clip:rect(0…))\nthat StripHidden keys on — so an injected off-screen \"screen-reader\" b\n[…]\nced by the cross-tool content-boundary probe (scripts/membench -safety).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_013w44L7nWYretN5cq95mFNu",
"is_bot": false,
"headline": "reduce: strip off-screen hidden text in the default article read",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T15:11:06Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6219bce85342d42b8770db5ec9369547355389f4",
"body": "…tions/actions/setup-go-6\n\nBump actions/setup-go from 5 to 6",
"is_bot": false,
"headline": "Merge pull request #25 from ChristopherDavenport/dependabot/github_ac…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T15:01:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e1c1f563c29bdc4a9742f59a8a5288dcd6bff11e",
"body": "Cross-tool benchmark harness: measured footprint, latency, and token cost for all five tools",
"is_bot": false,
"headline": "Merge pull request #26 from ChristopherDavenport/cross-tool-benchmarks",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T15:01:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "54c71391638a1e0c573cae0bd4c2c8d2560ac3fa",
"body": "…handling\n\nAdds a `-safety` mode to the membench harness that measures a different axis\nthan the numeric passes: what an untrusted page can smuggle into the model\nthrough each tool's read surface. It drives every tool's read-article against\na fixture carrying three hidden-instruction blocks (display\n[…]\nflated Obscura's browser_markdown path with its canonical snapshot read.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_013w44L7nWYretN5cq95mFNu",
"is_bot": false,
"headline": "Add content-boundary probe (-safety); measure hidden-text/beacon/PDF …",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T14:03:51Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "114df1baf913e7f44996cc8d2fe5952ebaee3e04",
"body": "scripts/membench generalizes from a chromedp-only unblink-vs-Chromium\nbaseline into a generic stdio MCP client with per-tool adapters (unblink,\nPlaywright MCP, Charlotte, Obscura, Lightpanda) driving identical local\nfixtures, plus an offline o200k_base BPE token meter (module-local deps —\nnothing to\n[…]\nred baseline (5× lighter\nidle, 10× faster start than headless Chromium).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_013w44L7nWYretN5cq95mFNu",
"is_bot": false,
"headline": "Add cross-tool benchmark harness; measure all five tools head-to-head",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T13:37:02Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b06c34a3c45a797bc64f6c21f50770eb5acab37b",
"body": "Bumps [actions/setup-go](https://github.com/actions/setup-go) from 5 to 6.\n- [Release notes](https://github.com/actions/setup-go/releases)\n- [Commits](https://github.com/actions/setup-go/compare/v5...v6)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-go\n dependency-version: '6'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "Bump actions/setup-go from 5 to 6",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-03T06:53:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3971eb8164a9d491ecf0382e78fe330455f79e55",
"body": "Adopt golangci-lint; drop retired Go Report Card badge",
"is_bot": false,
"headline": "Merge pull request #24 from ChristopherDavenport/golangci-lint",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T04:21:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1b62f0cf54a564d562dff8ab7c9c620af4e534e6",
"body": "goreportcard.com has sunset and recommends golangci-lint. Adds .golangci.yml\n(v2, default linters; errcheck relaxed for idiomatic Close and test/eval\nHTTP handlers; third_party/ exempt like make vet), a make lint target, and a\nCI lint step (golangci-lint-action@v9, v2.12.2). First run's one real\nfinding — dead js.Context.settleThenClose — removed. Docs updated\n(CLAUDE.md, CONTRIBUTING, PR template, CHANGELOG).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Adopt golangci-lint; drop retired Go Report Card badge",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T04:18:22Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "557701643e2e41642c2263672dcdbcc35dfd2e13",
"body": "…s/checkout-7'",
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/dependabot/github_actions/action…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T04:07:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe0f8194530d6aac725b9b7a87382675e78e8fae",
"body": "…aser/goreleaser-action-7'",
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/dependabot/github_actions/gorele…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T04:06:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "01622aae8b720b5049fa554e6feacf6288bde1e2",
"body": "…/login-action-4'\n\n# Conflicts:\n#\t.github/workflows/release.yml",
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/dependabot/github_actions/docker…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T04:06:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "444cbbb569138c7ba2e56317cc27ef106db852e9",
"body": "…/setup-qemu-action-4'\n\n# Conflicts:\n#\t.github/workflows/release.yml",
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/dependabot/github_actions/docker…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T04:06:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1eff55ecd0aa31391b056814c48bb6cedacefb91",
"body": "…tions/docker/setup-buildx-action-4\n\nBump docker/setup-buildx-action from 3 to 4",
"is_bot": false,
"headline": "Merge pull request #18 from ChristopherDavenport/dependabot/github_ac…",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T04:04:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c06a24a6e410ad3cddacb354fa539b0d88f9d0a2",
"body": null,
"is_bot": true,
"headline": "chore: sync plugin manifest to v0.17.1",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-03T03:58:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "84bdb2b6bbed277215a27074a9a8116dbd0ee90c",
"body": "Fix go install: vendored pdf by in-repo path (v0.17.1)",
"is_bot": false,
"headline": "Merge pull request #23 from ChristopherDavenport/fix-go-install",
"author_name": "Christopher Davenport",
"author_login": "ChristopherDavenport",
"committed_at": "2026-07-03T03:53:19Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 11,
"commits_last_year": 143,
"latest_release_at": "2026-07-06T20:57:50Z",
"latest_release_tag": "v0.24.0",
"releases_from_tags": false,
"days_since_last_push": 4,
"active_weeks_last_year": 1,
"days_since_latest_release": 15,
"mean_days_between_releases": 0.4
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 85,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "github.com/christopherdavenport/unblink",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/christopherdavenport/unblink",
"is_deprecated": false,
"latest_version": "v0.24.0",
"repository_url": "https://github.com/christopherdavenport/unblink",
"versions_count": 11,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-06T20:53:41Z",
"latest_version_yanked": null,
"days_since_latest_publish": 15
}
]
},
"popularity": {
"forks": 1,
"stars": 7,
"watchers": 1,
"fork_history": {
"days": [
{
"date": "2026-07-07",
"count": 1
}
],
"complete": true,
"collected": 1,
"total_forks": 1
},
"star_history": {
"days": [
{
"date": "2026-07-06",
"count": 3
},
{
"date": "2026-07-07",
"count": 3
},
{
"date": "2026-07-14",
"count": 1
}
],
"complete": true,
"collected": 7,
"total_stars": 7
},
"open_issues_and_prs": 5
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": true,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod",
"scripts/membench/go.mod"
],
"largest_source_bytes": 146843,
"source_files_sampled": 300,
"oversized_source_files": 4,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 22109
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "codeberg.org/readeck/go-readability/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.1.2"
},
{
"name": "github.com/JohannesKaufmann/html-to-markdown/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.5.2"
},
{
"name": "github.com/andybalholm/brotli",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.2.2"
},
{
"name": "github.com/andybalholm/cascadia",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.3.4"
},
{
"name": "github.com/dop251/goja",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20260629171413-2a84ae0cf10d"
},
{
"name": "github.com/dop251/goja_nodejs",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.0-20260212111938-1f56ff5bcf14"
},
{
"name": "github.com/evanw/esbuild",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.28.1"
},
{
"name": "github.com/microcosm-cc/bluemonday",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.0.27"
},
{
"name": "github.com/mmcdole/gofeed",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.3.0"
},
{
"name": "github.com/modelcontextprotocol/go-sdk",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.6.1"
},
{
"name": "github.com/nlnwa/whatwg-url",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.6.2"
},
{
"name": "github.com/refraction-networking/utls",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.8.2"
},
{
"name": "golang.org/x/image",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.43.0"
},
{
"name": "golang.org/x/net",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.56.0"
},
{
"name": "golang.org/x/text",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.38.0"
},
{
"name": "golang.org/x/time",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.15.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 5,
"merged_prs": 48,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 4
},
"bus_factor": 1,
"bot_contributors": 2,
"top_contributors": [
{
"type": "User",
"login": "ChristopherDavenport",
"commits": 133,
"avatar_url": "https://avatars.githubusercontent.com/u/10272700?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"publish-mcp-registry.yml",
"release.yml"
],
"has_docs_dir": true,
"linter_configs": [
".golangci.yml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "9 out of 9 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/14 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 9 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 10,
"reason": "project is fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 7,
"reason": "3 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "d8372b8ccb93f9d0e1e6d9dae8a15aca7fca2606",
"ran_at": "2026-07-22T04:27:13Z",
"aggregate_score": 5,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-17T06:54:26Z",
"oldest_open_prs": [
{
"number": 53,
"created_at": "2026-07-10T06:54:17Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 54,
"created_at": "2026-07-10T06:54:26Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 55,
"created_at": "2026-07-10T06:54:32Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 56,
"created_at": "2026-07-17T06:54:18Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 57,
"created_at": "2026-07-17T06:54:22Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-06T22:31:23Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/ChristopherDavenport/unblink",
"host": "github.com",
"name": "unblink",
"owner": "ChristopherDavenport"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 62,
"inputs": {
"security": 50,
"vitality": 69,
"community": 43,
"governance": 59,
"engineering": 84
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 69,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"commits_last_year": 143,
"human_commit_share": 0.95,
"days_since_last_push": 4,
"active_weeks_last_year": 1
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 4 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 4
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "1/52 weeks with commits",
"points": 0.7,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 1
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "143 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 143
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 11,
"latest_release_tag": "v0.24.0",
"releases_from_tags": false,
"days_since_latest_release": 15,
"mean_days_between_releases": 0.4
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "11 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 11
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 15 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 15
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~0.4 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 0.4
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 43,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 13,
"inputs": {
"forks": 1,
"stars": 7,
"watchers": 1,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "below_threshold"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "7 stars",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 7
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "1 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 1
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "1 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 1
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 77,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 59,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 9 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 66,
"inputs": {
"merged_prs": 48,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 4
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "48/52 decided PRs merged",
"points": 35.3,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 48,
"decided": 52
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/14 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 66,
"inputs": {
"followers": 289,
"owner_type": "User",
"is_verified": null,
"owner_login": "ChristopherDavenport",
"public_repos": 304,
"account_age_days": 4229
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "289 followers of ChristopherDavenport",
"points": 17.7,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 289,
"login": "ChristopherDavenport"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "304 public repos, account ~11 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 304
}
},
{
"code": "account_age_years",
"params": {
"years": 11
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/christopherdavenport/unblink"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 15
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 15 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 15
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "11 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 11
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 84,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "3 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 3
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".golangci.yml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "9 out of 9 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"topics": [
"ai",
"browser",
"golang",
"markdown",
"mcp",
"mcp-server",
"model-context-protocol",
"web-scraping"
],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "8 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 8
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 50,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 18,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 0,
"scorecard_aggregate": 5
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "9 out of 9 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/14 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 9 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is fuzzed",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "3 existing vulnerabilities detected",
"points": 5.2,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 2
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 79,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.958,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 22109
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "91 of 95 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 91,
"sampled": 95
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "excellent",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0.61,
"toolchain_manifests": [
"go.mod",
"scripts/membench/go.mod"
],
"dependency_bot_commit_share": 0.01
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".golangci.yml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "61 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 61,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "1 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 1,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 99,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 146843,
"source_files_sampled": 300,
"oversized_source_files": 4
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "4/300 source files over 60KB",
"points": 54.3,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 300,
"oversized": 4
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "critical",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"example_dirs": [],
"has_mcp_signal": true,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 20,
"status": "met",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-22T04:27:26.707416Z",
"schema_version": "0.26.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/c/ChristopherDavenport/unblink.svg",
"full_name": "ChristopherDavenport/unblink",
"license_state": "standard",
"license_spdx": "MIT"
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with ChristopherDavenport/unblink. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.26.0 — full methodology · metrics wiki.
