Elnora-AI / elnora-mcp-server

Full resolved dependency set from the GitHub dependency graph: 6 direct and 221 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.

Installing npm:@elnora-ai/mcp-server@1.7.0 pulls in 115 packages, direct and transitive: 1 carry known advisories, of which 0 are direct dependencies.

An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.

{
  "data": {
    "repo": {
      "topics": [
        "ai-agents",
        "bioprotocol",
        "claude-code",
        "elnora",
        "mcp",
        "mcp-server"
      ],
      "is_fork": false,
      "size_kb": 756,
      "has_wiki": false,
      "homepage": null,
      "languages": {
        "Dockerfile": 1086,
        "TypeScript": 336236
      },
      "pushed_at": "2026-07-23T06:33:35Z",
      "created_at": "2026-02-27T21:20:16Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-22T21:46:30Z",
      "description": "Elnora MCP Server — connect AI agents to the Elnora bioprotocol platform",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "main",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "TypeScript",
      "significant_languages": [
        "TypeScript"
      ]
    },
    "owner": {
      "blog": "elnora.ai",
      "name": "Elnora AI",
      "type": "Organization",
      "login": "Elnora-AI",
      "company": null,
      "location": "United States of America",
      "followers": 7,
      "avatar_url": "https://avatars.githubusercontent.com/u/156024043?v=4",
      "created_at": "2024-01-08T21:14:08Z",
      "is_verified": null,
      "public_repos": 16,
      "account_age_days": 926
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "mcp-server-v1.7.0",
          "kind": "other",
          "published_at": "2026-07-18T13:29:41Z"
        },
        {
          "tag": "mcp-server-v1.6.2",
          "kind": "other",
          "published_at": "2026-07-15T14:34:17Z"
        },
        {
          "tag": "mcp-server-v1.6.1",
          "kind": "other",
          "published_at": "2026-07-14T21:05:20Z"
        },
        {
          "tag": "mcp-server-v1.6.0",
          "kind": "other",
          "published_at": "2026-07-14T14:04:50Z"
        },
        {
          "tag": "mcp-server-v1.5.0",
          "kind": "other",
          "published_at": "2026-07-14T11:25:38Z"
        },
        {
          "tag": "mcp-server-v1.4.0",
          "kind": "other",
          "published_at": "2026-07-13T21:54:28Z"
        },
        {
          "tag": "mcp-server-v1.3.1",
          "kind": "other",
          "published_at": "2026-07-09T09:10:26Z"
        },
        {
          "tag": "mcp-server-v1.3.0",
          "kind": "other",
          "published_at": "2026-07-09T06:39:41Z"
        },
        {
          "tag": "mcp-server-v1.2.0",
          "kind": "other",
          "published_at": "2026-07-09T05:59:32Z"
        },
        {
          "tag": "mcp-server-v1.1.8",
          "kind": "other",
          "published_at": "2026-06-21T23:04:13Z"
        },
        {
          "tag": "mcp-server-v1.1.7",
          "kind": "other",
          "published_at": "2026-06-19T20:05:03Z"
        },
        {
          "tag": "mcp-server-v1.1.6",
          "kind": "other",
          "published_at": "2026-06-17T15:02:20Z"
        },
        {
          "tag": "mcp-server-v1.1.5",
          "kind": "other",
          "published_at": "2026-06-16T21:45:55Z"
        },
        {
          "tag": "mcp-server-v1.1.4",
          "kind": "other",
          "published_at": "2026-06-16T13:20:39Z"
        },
        {
          "tag": "mcp-server-v1.1.3",
          "kind": "other",
          "published_at": "2026-06-05T15:44:58Z"
        },
        {
          "tag": "mcp-server-v1.1.2",
          "kind": "other",
          "published_at": "2026-05-25T19:42:42Z"
        },
        {
          "tag": "mcp-server-v1.1.1",
          "kind": "other",
          "published_at": "2026-05-19T21:34:53Z"
        },
        {
          "tag": "mcp-server-v1.1.0",
          "kind": "other",
          "published_at": "2026-05-15T21:48:52Z"
        },
        {
          "tag": "mcp-server-v1.0.5",
          "kind": "other",
          "published_at": "2026-05-12T20:47:28Z"
        },
        {
          "tag": "mcp-server-v1.0.4",
          "kind": "other",
          "published_at": "2026-05-06T22:01:56Z"
        },
        {
          "tag": "mcp-server-v1.0.3",
          "kind": "other",
          "published_at": "2026-04-28T18:46:54Z"
        },
        {
          "tag": "mcp-server-v1.0.2",
          "kind": "other",
          "published_at": "2026-04-25T20:08:13Z"
        },
        {
          "tag": "mcp-server-v1.0.1",
          "kind": "other",
          "published_at": "2026-04-24T16:16:53Z"
        },
        {
          "tag": "mcp-server-v1.0.0",
          "kind": "other",
          "published_at": "2026-04-21T17:19:10Z"
        },
        {
          "tag": "mcp-server-v0.13.0",
          "kind": "other",
          "published_at": "2026-04-16T17:32:42Z"
        },
        {
          "tag": "mcp-server-v0.12.3",
          "kind": "other",
          "published_at": "2026-04-15T17:18:38Z"
        },
        {
          "tag": "mcp-server-v0.12.2",
          "kind": "other",
          "published_at": "2026-04-08T23:11:19Z"
        },
        {
          "tag": "mcp-server-v0.12.1",
          "kind": "other",
          "published_at": "2026-04-08T21:43:05Z"
        },
        {
          "tag": "mcp-server-v0.12.0",
          "kind": "other",
          "published_at": "2026-04-08T21:33:19Z"
        },
        {
          "tag": "mcp-server-v0.11.1",
          "kind": "other",
          "published_at": "2026-04-08T07:11:57Z"
        },
        {
          "tag": "mcp-server-v0.11.0",
          "kind": "other",
          "published_at": "2026-03-31T22:30:42Z"
        },
        {
          "tag": "mcp-server-v0.10.6",
          "kind": "other",
          "published_at": "2026-03-31T19:18:51Z"
        },
        {
          "tag": "mcp-server-v0.10.5",
          "kind": "other",
          "published_at": "2026-03-30T22:31:51Z"
        },
        {
          "tag": "mcp-server-v0.10.4",
          "kind": "other",
          "published_at": "2026-03-27T19:43:52Z"
        },
        {
          "tag": "mcp-server-v0.10.3",
          "kind": "other",
          "published_at": "2026-03-27T18:41:28Z"
        },
        {
          "tag": "mcp-server-v0.10.2",
          "kind": "other",
          "published_at": "2026-03-26T19:02:02Z"
        },
        {
          "tag": "mcp-server-v0.10.1",
          "kind": "other",
          "published_at": "2026-03-24T17:52:02Z"
        },
        {
          "tag": "mcp-server-v0.10.0",
          "kind": "other",
          "published_at": "2026-03-24T17:30:46Z"
        },
        {
          "tag": "mcp-server-v0.9.1",
          "kind": "other",
          "published_at": "2026-03-23T20:30:12Z"
        },
        {
          "tag": "mcp-server-v0.9.0",
          "kind": "other",
          "published_at": "2026-03-14T06:34:35Z"
        },
        {
          "tag": "mcp-server-v0.8.0",
          "kind": "other",
          "published_at": "2026-03-12T17:45:09Z"
        },
        {
          "tag": "mcp-server-v0.7.0",
          "kind": "other",
          "published_at": "2026-03-09T06:47:27Z"
        },
        {
          "tag": "mcp-server-v0.6.0",
          "kind": "other",
          "published_at": "2026-03-07T19:36:58Z"
        },
        {
          "tag": "mcp-server-v0.5.2",
          "kind": "other",
          "published_at": "2026-03-06T22:14:52Z"
        },
        {
          "tag": "mcp-server-v0.5.1",
          "kind": "other",
          "published_at": "2026-03-06T22:10:53Z"
        },
        {
          "tag": "mcp-server-v0.5.0",
          "kind": "other",
          "published_at": "2026-03-06T22:07:19Z"
        },
        {
          "tag": "v0.4.3",
          "kind": "patch",
          "published_at": "2026-03-06T21:53:30Z"
        },
        {
          "tag": "mcp-server-v0.4.2",
          "kind": "other",
          "published_at": "2026-03-06T07:21:02Z"
        },
        {
          "tag": "mcp-server-v0.4.1",
          "kind": "other",
          "published_at": "2026-03-06T06:40:06Z"
        },
        {
          "tag": "mcp-server-v0.4.0",
          "kind": "other",
          "published_at": "2026-03-06T06:21:02Z"
        },
        {
          "tag": "mcp-server-v0.3.0",
          "kind": "other",
          "published_at": "2026-03-05T21:04:52Z"
        },
        {
          "tag": "v0.2.0",
          "kind": "minor",
          "published_at": "2026-03-04T18:11:35Z"
        },
        {
          "tag": "v0.1.1",
          "kind": "patch",
          "published_at": "2026-03-03T08:05:14Z"
        },
        {
          "tag": "v0.1.0",
          "kind": "minor",
          "published_at": "2026-02-28T09:00:47Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "342568cfddb9d731678bf888cfa1e79f9de39c06",
          "body": "Bumps [`body-parser`](https://github.com/expressjs/body-parser) from\n`2.2.2` to `2.3.0`.\n\nCloses SEC-828\n\nCo-authored-by: elnora-automation-bot[bot] <294956319+elnora-automation-bot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "fix(deps): bump body-parser from 2.2.2 to 2.3.0 (#288)",
          "author_name": "elnora-automation-bot[bot]",
          "author_login": "elnora-automation-bot[bot]",
          "committed_at": "2026-07-22T21:46:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b33dbd8a780a703e1580a0ceeb4bcff64eb22f6c",
          "body": "Bumps [body-parser](https://github.com/expressjs/body-parser) from 2.2.2\nto 2.3.0.\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a\nhref=\"https://github.com/expressjs/body-parser/releases\">body-parser's\nreleases</a>.</em></p>\n<blockquote>\n<h2>v2.3.0</h2>\n<h2>Important: Security</h2>\n[…]\n\n</details>\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Risto Jamul <risto.jamul@elnora.ai>",
          "is_bot": true,
          "headline": "chore(deps): bump body-parser from 2.2.2 to 2.3.0 (#287)",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-21T12:59:37Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b94f0eac1664521e277b6fb0be58e2af834273d9",
          "body": "## Included Bumps\n\n| PR | Ecosystem | Package | Old → New | Type |\n|----|-----------|---------|-----------|------|\n| #282 | npm | express-rate-limit | 8.5.2 → 8.6.0 | minor |\n\n## Skipped — Needs Review\n\n| PR | Package | Reason |\n|----|---------|--------|\n| #281 | actions/setup-node | Major bump — ma\n[…]\nPRs above whose changes are now\nin main.\n\nCo-authored-by: elnora-automation-bot[bot] <294956319+elnora-automation-bot[bot]@users.noreply.github.com>\nCo-authored-by: Risto Jamul <risto.jamul@elnora.ai>",
          "is_bot": true,
          "headline": "chore(deps): batched safe dependency bumps 2026-07-21 (#286)",
          "author_name": "elnora-automation-bot[bot]",
          "author_login": "elnora-automation-bot[bot]",
          "committed_at": "2026-07-21T12:48:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4673faed54d3d71da5863c0f1233701a882abcbf",
          "body": "Thin stub that forwards review-request events to the org's centralized\nreview automation (mirrors the existing `release-dispatch.yml`). No\nlogic lives here; skips fork PRs.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)",
          "is_bot": false,
          "headline": "ci: add PR review dispatch stub (#285)",
          "author_name": "Risto Jamul",
          "author_login": "rjamul-elnora-ai",
          "committed_at": "2026-07-21T12:45:27Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d8a47490959b4dedb8013b0ad9a795fbf7022a46",
          "body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[1.7.0](https://github.com/Elnora-AI/elnora-mcp-server/compare/mcp-server-v1.6.2...mcp-server-v1.7.0)\n(2026-07-18)\n\n\n### Features\n\n* deprecate the project tools; Knowledge Base folder listing unchanged\n([#283](https://github.com/Elnora-AI/elnor\n[…]\ne-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).\n\nCo-authored-by: elnora-automation-bot[bot] <294956319+elnora-automation-bot[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(main): release mcp-server 1.7.0 (#284)",
          "author_name": "elnora-automation-bot[bot]",
          "author_login": "elnora-automation-bot[bot]",
          "committed_at": "2026-07-18T13:28:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0becf1beff3f3e5deaabffb5e67524b2c8af49a5",
          "body": "…anged (#283)\n\n## Summary\n\nCompanion to the elnora-cli change — the `projects` concept is being\nretired. Deprecated **in place**, no breaking changes, minor release.\n\n- The `elnora_projects_*` tools and the legacy project-scoped folder\nlisting stay registered (same names and input schemas, so CLI/MC\n[…]\nnowledge Base folder creation is unchanged.\n\n## Testing\n\n- `npm run build`, test typecheck, `npm test` — 189 passing (incl. new\nno-op coverage)\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: deprecate the project tools; Knowledge Base folder listing unch…",
          "author_name": "Risto Jamul",
          "author_login": "rjamul-elnora-ai",
          "committed_at": "2026-07-18T13:20:12Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "eb7826088cae5ee303edbd5dfb5e12c58879085f",
          "body": "Adds the release-dispatch workflow (triggers the org's centralized\nrelease automation on merge to main) and removes the redundant in-repo\nrelease-please workflow. Releases now come from the centralized flow. No\nchange to the package.\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: centralize releases via release-dispatch (#280)",
          "author_name": "Risto Jamul",
          "author_login": "rjamul-elnora-ai",
          "committed_at": "2026-07-16T14:05:14Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ec43955e11298d155996120d89e6e2178d11efe7",
          "body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[1.6.2](https://github.com/Elnora-AI/elnora-mcp-server/compare/mcp-server-v1.6.1...mcp-server-v1.6.2)\n(2026-07-15)\n\n\n### Bug Fixes\n\n* **formatter:** empty compact result becomes undefined instead of valid\nJSON ([#278](https://github.com/Elnora-\n[…]\n6bffb91da9e4f728a7b8))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
          "is_bot": false,
          "headline": "chore(main): release mcp-server 1.6.2 (#279)",
          "author_name": "Carmen Kivisild",
          "author_login": "ckivisild-elnora-ai",
          "committed_at": "2026-07-15T14:34:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ce3c6729af13ba8bea886bffb91da9e4f728a7b8",
          "body": "…id JSON (#278)\n\n## Bug\n\nA tool called with `compact: true` whose result is an empty array/object\nreturns invalid MCP content and fails the call:\n\n```\n-32602 Invalid tools/call result: content[0].text expected string, received undefined\n```\n\n## Cause\n\nFor `compact`, `formatToolResult` runs `stripEmp\n[…]\ntring. Non-empty\ncompaction is unchanged. Adds regression tests for the formatter.\n\n## Testing\n- `pnpm build` clean; `pnpm test` — 178 passing.\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(formatter): empty compact result becomes undefined instead of val…",
          "author_name": "Risto Jamul",
          "author_login": "rjamul-elnora-ai",
          "committed_at": "2026-07-15T13:59:42Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "46e2c2f7dd8215a13ea8075d9e8298cd6bafbf61",
          "body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[1.6.1](https://github.com/Elnora-AI/elnora-mcp-server/compare/mcp-server-v1.6.0...mcp-server-v1.6.1)\n(2026-07-14)\n\n\n### Bug Fixes\n\n* **auth:** accept an Elnora API key sent as an Authorization: Bearer\ntoken\n([#275](https://github.com/Elnora-AI\n[…]\n6512b728a67e1cc37034))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
          "is_bot": false,
          "headline": "chore(main): release mcp-server 1.6.1 (#276)",
          "author_name": "Carmen Kivisild",
          "author_login": "ckivisild-elnora-ai",
          "committed_at": "2026-07-14T21:05:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "694003c43a7650c032296512b728a67e1cc37034",
          "body": "…token (#275)\n\n## Problem\n\nThe MCP endpoint accepts an API key **only** via the `X-API-Key` header.\nMany MCP client connectors expose just a single \"token\"/bearer field,\nwhich they send as `Authorization: Bearer <token>`. When a user pastes\ntheir Elnora key there, the server treats it as an OAuth ac\n[…]\nplugins` README fix (its \"Generic MCP Client\" auth\nsection told users to pass the key as a Bearer token — which this makes\ncorrect).\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(auth): accept an Elnora API key sent as an Authorization: Bearer …",
          "author_name": "Risto Jamul",
          "author_login": "rjamul-elnora-ai",
          "committed_at": "2026-07-14T21:02:53Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a7a1ae0c960e07271cb24e9ef2e199bdaf44ce7d",
          "body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[1.6.0](https://github.com/Elnora-AI/elnora-mcp-server/compare/mcp-server-v1.5.0...mcp-server-v1.6.0)\n(2026-07-14)\n\n\n### Features\n\n* KB folder-mutation repoint + review queue, auto-tidy & task-lifecycle\ntools\n([#273](https://github.com/Elnora-A\n[…]\n70a4de8f11e76b7b13cd))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
          "is_bot": false,
          "headline": "chore(main): release mcp-server 1.6.0 (#274)",
          "author_name": "Carmen Kivisild",
          "author_login": "ckivisild-elnora-ai",
          "committed_at": "2026-07-14T14:04:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ab53b7589c977df9382e70a4de8f11e76b7b13cd",
          "body": "…ecycle tools (#273)\n\nTwo batches of the CLI/MCP API-coverage plan, combined into one release.\n\n## Part A — repoint folder mutation to the Knowledge Base\n\n`elnora_folders_create/rename/move/delete` targeted the **deprecated\nproject-scoped controller**. They now default to the **closure-table KB\ncont\n[…]\ne round-trip).\n\n## Parity\nPaired elnora-cli PR mirrors this; its MCP-parity check goes green once\nthis merges (**109/109** locally).\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: KB folder-mutation repoint + review queue, auto-tidy & task-lif…",
          "author_name": "Risto Jamul",
          "author_login": "rjamul-elnora-ai",
          "committed_at": "2026-07-14T13:57:33Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f5ed98ec732333ce26f0f4166719290d99bcc9f0",
          "body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[1.5.0](https://github.com/Elnora-AI/elnora-mcp-server/compare/mcp-server-v1.4.0...mcp-server-v1.5.0)\n(2026-07-14)\n\n\n### Features\n\n* **sharing:** file & folder sharing, file move, and member directory\ntools\n([#269](https://github.com/Elnora-AI/\n[…]\nh [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).\n\nCo-authored-by: Risto Jamul <risto.jamul@elnora.ai>",
          "is_bot": false,
          "headline": "chore(main): release mcp-server 1.5.0 (#272)",
          "author_name": "Carmen Kivisild",
          "author_login": "ckivisild-elnora-ai",
          "committed_at": "2026-07-14T11:25:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "38400b6e503ccd127db1bb33259399711dc8dd7b",
          "body": "## Included Bumps\n\n| PR | Ecosystem | Package | Old → New | Type |\n|----|-----------|---------|-----------|------|\n| #265 | npm | vitest | 4.1.9 → 4.1.10 | patch |\n| #263 | npm | tsx | 4.22.5 → 4.23.1 | minor |\n\n## Skipped — Needs Review\n\n| PR | Package | Reason |\n|----|---------|--------|\n| #264 | \n[…]\nPRs above whose changes are now\nin main.\n\nCo-authored-by: elnora-automation-bot[bot] <294956319+elnora-automation-bot[bot]@users.noreply.github.com>\nCo-authored-by: Risto Jamul <risto.jamul@elnora.ai>",
          "is_bot": true,
          "headline": "chore(deps): batched safe dependency bumps 2026-07-14 (#271)",
          "author_name": "elnora-automation-bot[bot]",
          "author_login": "elnora-automation-bot[bot]",
          "committed_at": "2026-07-14T11:21:24Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cbc3e2dbf294c0084560a28ec61fdd1da5814b68",
          "body": "… tools (#269)\n\n## Summary\n\nAdds the **KB Access V2 sharing surface** to the MCP tool set, so\ncallers can manage per-file and per-folder access, move files, and look\nup members to share with.\n\n| Tool | Calls | Notes |\n|---|---|---|\n| `elnora_files_share` | `POST /files/{id}/share` | Grant a role to \n[…]\nParity note\n\nThe paired elnora-cli PR adds the matching commands; its MCP-parity\ncheck goes green once this merges (currently 102/102 locally).\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(sharing): file & folder sharing, file move, and member directory…",
          "author_name": "Risto Jamul",
          "author_login": "rjamul-elnora-ai",
          "committed_at": "2026-07-14T09:47:59Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f5a675a92a61486fa1814161c89d6a538e91077d",
          "body": "Two additive changes to bring this repo to parity with the other public\nElnora repos. No source, deploy, or publish workflow is touched.\n\n## 1. Secret scanning (gitleaks)\n\nNew `.github/workflows/gitleaks.yml` scans the **full git history** for\ncommitted secrets on every push and PR to `main`, plus m\n[…]\n\nREADME Quick Start.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Elnora AI <opensource@elnora.ai>\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: gitleaks secret scanning + INSTALL_FOR_AGENTS.md (#270)",
          "author_name": "Carmen Kivisild",
          "author_login": "ckivisild-elnora-ai",
          "committed_at": "2026-07-14T07:16:04Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3450676515ec7db1337212f73f4f59ad9351e62c",
          "body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[1.4.0](https://github.com/Elnora-AI/elnora-mcp-server/compare/mcp-server-v1.3.1...mcp-server-v1.4.0)\n(2026-07-13)\n\n\n### Features\n\n* **folders:** add Knowledge Base folder read tools\n([#262](https://github.com/Elnora-AI/elnora-mcp-server/issues\n[…]\n8bb0f0305bac410ba09a))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
          "is_bot": false,
          "headline": "chore(main): release mcp-server 1.4.0 (#268)",
          "author_name": "Carmen Kivisild",
          "author_login": "ckivisild-elnora-ai",
          "committed_at": "2026-07-13T21:54:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4dce46d72c2042b3839118f0b4f15d52cc481f26",
          "body": "## Summary\n\nAdds four **read-only** tools for browsing the Knowledge Base folder\ntree, so MCP callers can navigate the current folder model instead of\nonly the legacy project-scoped one.\n\n| Tool | Calls | Returns |\n|---|---|---|\n| `elnora_folders_roots` | `GET /folders/roots` | Top-level folders you\n[…]\nnpm test` — 133 passing\n\n## Parity note\n\nThe paired elnora-cli PR adds the matching commands; its MCP-parity\ncheck goes green once this merges.\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(folders): add Knowledge Base folder read tools (#262)",
          "author_name": "Risto Jamul",
          "author_login": "rjamul-elnora-ai",
          "committed_at": "2026-07-13T21:50:54Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "1d4617a5a6d6f89966893838a6a47a042ff859b2",
          "body": "## Included Bumps\n\n| PR | Ecosystem | Package | Old → New | Type |\n|----|-----------|---------|-----------|------|\n| #253 | npm | tsx | 4.22.4 → 4.22.5 | patch |\n\n## Skipped — Needs Review\n\n| PR | Package | Reason |\n|----|---------|--------|\n| #254 | @types/node | Major bump — manual review required\n[…]\nPRs above whose changes are now\nin main.\n\nCo-authored-by: elnora-automation-bot[bot] <294956319+elnora-automation-bot[bot]@users.noreply.github.com>\nCo-authored-by: Risto Jamul <risto.jamul@elnora.ai>",
          "is_bot": true,
          "headline": "chore(deps): batched safe dependency bumps 2026-07-07 (#255)",
          "author_name": "elnora-automation-bot[bot]",
          "author_login": "elnora-automation-bot[bot]",
          "committed_at": "2026-07-13T20:00:32Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "adc5f1cf0cf185f443898bb0f0305bac410ba09a",
          "body": "Bumps the container base image.\n\nCloses SEC-792\n\nCo-authored-by: elnora-automation-bot[bot] <294956319+elnora-automation-bot[bot]@users.noreply.github.com>\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": true,
          "headline": "fix(docker): bump base image (#267)",
          "author_name": "elnora-automation-bot[bot]",
          "author_login": "elnora-automation-bot[bot]",
          "committed_at": "2026-07-13T19:52:28Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "53a875d2f653a08e19667eea0a64a78df3adf7fe",
          "body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[1.3.1](https://github.com/Elnora-AI/elnora-mcp-server/compare/mcp-server-v1.3.0...mcp-server-v1.3.1)\n(2026-07-09)\n\n\n### Bug Fixes\n\n* correct wrong API routes and verb in account/orgs tools\n([#259](https://github.com/Elnora-AI/elnora-mcp-server\n[…]\n68d01778eb7962477ade))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
          "is_bot": false,
          "headline": "chore(main): release mcp-server 1.3.1 (#261)",
          "author_name": "Carmen Kivisild",
          "author_login": "ckivisild-elnora-ai",
          "committed_at": "2026-07-09T09:10:12Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2f53cea940e9ca44da20506fa64cd37719cc0139",
          "body": "## Summary\n\nFixes several tools that called routes/verbs the API doesn't expose, so\nthey failed at runtime (404/405).\nThese were nominally \"covered\" but broken.\n\n| Tool | Was | Now |\n|---|---|---|\n| `elnora_orgs_setDefault` | `PUT …/{id}/default` | `…/set-default` |\n| `elnora_orgs_listAll` | `GET /a\n[…]\nkes each fixed handler with a spy client\nand asserts the exact path/method,\nso the drift can't silently return. Build + tests green (129 pass).\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: correct wrong API routes and verb in account/orgs tools (#259)",
          "author_name": "Risto Jamul",
          "author_login": "rjamul-elnora-ai",
          "committed_at": "2026-07-09T09:07:41Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "1f45a0db903d1cf3b16868d01778eb7962477ade",
          "body": "## Summary\nThe public docs.elnora.ai MCP catalog generator emitted **every**\nregistered tool — including five SystemAdmin/staff-only ones:\n- `elnora_account_users` (\"List all users (admin)\")\n- `elnora_account_addLegalDoc` / `updateLegalDoc` / `deleteLegalDoc` (\"…\n(SystemAdmin only)\")\n- `elnora_orgs_\n[…]\nkipped ✓.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nhttps://claude.ai/code/session_01Q3VN8ziojcccGj1MonB49s\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(docs): exclude staff-only tools from the public MCP catalog (#260)",
          "author_name": "Carmen Kivisild",
          "author_login": "ckivisild-elnora-ai",
          "committed_at": "2026-07-09T08:47:07Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "fe783e34b55651f7d50157ef397817f637cafe85",
          "body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[1.3.0](https://github.com/Elnora-AI/elnora-mcp-server/compare/mcp-server-v1.2.0...mcp-server-v1.3.0)\n(2026-07-09)\n\n\n### Features\n\n* MCP catalog generator for docs.elnora.ai\n([#251](https://github.com/Elnora-AI/elnora-mcp-server/issues/251))\n([\n[…]\ne1efe1374c3a22138f28))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
          "is_bot": false,
          "headline": "chore(main): release mcp-server 1.3.0 (#258)",
          "author_name": "Carmen Kivisild",
          "author_login": "ckivisild-elnora-ai",
          "committed_at": "2026-07-09T06:39:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "720987d23c7a2caeac79e1efe1374c3a22138f28",
          "body": "Adds `scripts/gen-docs-reference.ts` + an `npm run docs:reference`\nscript.\n\nIt runs all 15 `register*Tools` functions against a mock MCP server to\ncapture the **75 tools across 15 categories** the server actually\nexposes, then generates one MDX page per category (+ a connection guide)\nfor the self-h\n[…]\nshed\npackage.\n\nPart of docs.elnora.ai — Linear ELN-759.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: MCP catalog generator for docs.elnora.ai (#251)",
          "author_name": "Carmen Kivisild",
          "author_login": "ckivisild-elnora-ai",
          "committed_at": "2026-07-09T06:03:52Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0adb8180e30bbaa70b004fb8173c1ff27d4fc15d",
          "body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[1.2.0](https://github.com/Elnora-AI/elnora-mcp-server/compare/mcp-server-v1.1.8...mcp-server-v1.2.0)\n(2026-07-09)\n\n\n### Features\n\n* make project optional on task/file create, list, upload, fork tools\n([#256](https://github.com/Elnora-AI/elnora\n[…]\nebacb4c8ee16e12721b4))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
          "is_bot": false,
          "headline": "chore(main): release mcp-server 1.2.0 (#257)",
          "author_name": "Carmen Kivisild",
          "author_login": "ckivisild-elnora-ai",
          "committed_at": "2026-07-09T05:58:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9be581cd13beddeedfe2ebacb4c8ee16e12721b4",
          "body": "…ools (#256)\n\n## Summary\n\nTask and file tools now accept an **optional** project. When\n`projectId`/`targetProjectId` is omitted, the\nAPI targets the caller's default workspace, so a project UUID is no\nlonger required. Supplying a project\nbehaves exactly as before — **non-breaking**.\n\n## Changes\n\n- `\n[…]\nTool names, params, and descriptions are unchanged. Build and tests pass\n(122).\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: make project optional on task/file create, list, upload, fork t…",
          "author_name": "Risto Jamul",
          "author_login": "rjamul-elnora-ai",
          "committed_at": "2026-07-09T05:53:46Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "767f62a08694299ac0b6daf6e65e1489d5dbeb21",
          "body": "## Included Bumps\n\n| PR | Ecosystem | Package | Old → New | Type |\n|----|-----------|---------|-----------|------|\n| #249 | npm | axios | 1.17.0 → 1.18.1 | minor |\n\n## Skipped — Needs Review\n\n| PR | Package | Reason |\n|----|---------|--------|\n| #250 | @types/node | Major bump — manual review requir\n[…]\nove whose changes are now\nin main.\n\nCo-authored-by: elnora-automation-bot[bot] <294956319+elnora-automation-bot[bot]@users.noreply.github.com>\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": true,
          "headline": "chore(deps): batched safe dependency bumps 2026-06-30 (#252)",
          "author_name": "elnora-automation-bot[bot]",
          "author_login": "elnora-automation-bot[bot]",
          "committed_at": "2026-07-01T16:59:44Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "074048fc7818795f23499c114bb30d196b631189",
          "body": "## Included Bumps\n\n| PR | Ecosystem | Package | Old → New | Type |\n|----|-----------|---------|-----------|------|\n| #241 | npm | vitest | 4.1.8 → 4.1.9 | patch |\n\n## Skipped — Needs Review\n\n| PR | Package | Reason |\n|----|---------|--------|\n| #242 | axios | Minor bump — manual review required |\n\n#\n[…]\nbuild ✓ · test ✓\n\n## How to Merge\n\nMerging closes the individual Dependabot PRs above whose changes are now\nin main.\n\nCo-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): batched safe dependency bumps 2026-06-23 (#248)",
          "author_name": "elnora-automation-bot[bot]",
          "author_login": "elnora-automation-bot[bot]",
          "committed_at": "2026-06-26T14:07:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "390ea6aeda0561d264834c8b816d13380ea0c2e5",
          "body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[1.1.8](https://github.com/Elnora-AI/elnora-mcp-server/compare/mcp-server-v1.1.7...mcp-server-v1.1.8)\n(2026-06-21)\n\n\n### Bug Fixes\n\n* **docker:** bump base image\n([#245](https://github.com/Elnora-AI/elnora-mcp-server/issues/245))\n([65e8db3](htt\n[…]\nd536adc7546c6a80f6fc))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
          "is_bot": false,
          "headline": "chore(main): release mcp-server 1.1.8 (#246)",
          "author_name": "Carmen Kivisild",
          "author_login": "ckivisild-elnora-ai",
          "committed_at": "2026-06-21T23:04:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f0117123537c23bd14c8d536adc7546c6a80f6fc",
          "body": "Bumps the container base image.\n\nCloses SEC-724\n\nCo-authored-by: Elnora Bot <bot@elnora.ai>\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": true,
          "headline": "fix(docker): bump base image (#247)",
          "author_name": "elnora-automation-bot[bot]",
          "author_login": "elnora-automation-bot[bot]",
          "committed_at": "2026-06-21T22:56:05Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "65e8db363573a47262a8ea275a7f1ab6d01f82e8",
          "body": "Bumps the container base image.\n\nCloses SEC-725\n\nCo-authored-by: Elnora Automation <bot@elnora.ai>",
          "is_bot": true,
          "headline": "fix(docker): bump base image (#245)",
          "author_name": "elnora-automation-bot[bot]",
          "author_login": "elnora-automation-bot[bot]",
          "committed_at": "2026-06-20T12:16:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6a83b2ecf2108c6682a4b776719a1e05844d9551",
          "body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[1.1.7](https://github.com/Elnora-AI/elnora-mcp-server/compare/mcp-server-v1.1.6...mcp-server-v1.1.7)\n(2026-06-19)\n\n\n### Bug Fixes\n\n* pin mcp-server ECS deploys to image digest\n([#239](https://github.com/Elnora-AI/elnora-mcp-server/issues/239))\n[…]\nd5f3bd4567a210f32c94))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
          "is_bot": false,
          "headline": "chore(main): release mcp-server 1.1.7 (#244)",
          "author_name": "Carmen Kivisild",
          "author_login": "ckivisild-elnora-ai",
          "committed_at": "2026-06-19T20:04:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "45511ab991d4bd22058dd5f3bd4567a210f32c94",
          "body": "## What\nPin production deploys to an immutable image digest instead of a moving\ntag.\n\nThe deploy job now registers a new ECS task-definition revision whose\ncontainer image is pinned to the `sha256` digest of the image it just\nbuilt and pushed, then points the service at that revision — rather than\nr\n[…]\nigest makes releases traceable and lets a rollback target an exact,\nimmutable image by selecting a prior task-definition revision.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: pin mcp-server ECS deploys to image digest (#239)",
          "author_name": "Risto Jamul",
          "author_login": "rjamul-elnora-ai",
          "committed_at": "2026-06-19T19:59:53Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "de8076a460f0c536dc35ea4a38136b22982a1a04",
          "body": "Removes the `dep-batch-review.yml` workflow — superseded and no longer\nneeded in this repo.",
          "is_bot": false,
          "headline": "chore(ci): remove dep-batch-review workflow (#243)",
          "author_name": "Risto Jamul",
          "author_login": "rjamul-elnora-ai",
          "committed_at": "2026-06-19T11:10:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "63b467a46757174063cf8052c7b97ec19fcf62c9",
          "body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[1.1.6](https://github.com/Elnora-AI/elnora-mcp-server/compare/mcp-server-v1.1.5...mcp-server-v1.1.6)\n(2026-06-17)\n\n\n### Bug Fixes\n\n* **deps:** bump hono from 4.12.21 to 4.12.25\n([#237](https://github.com/Elnora-AI/elnora-mcp-server/issues/237)\n[…]\n1d2bd4472a913d078abb))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
          "is_bot": false,
          "headline": "chore(main): release mcp-server 1.1.6 (#238)",
          "author_name": "Carmen Kivisild",
          "author_login": "ckivisild-elnora-ai",
          "committed_at": "2026-06-17T15:01:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "605ee764acf45f254d3b1d2bd4472a913d078abb",
          "body": "Bumps [`hono`](https://github.com/honojs/hono) from `4.12.21` to\n`4.12.25`.\n\nCloses SEC-700\nCloses SEC-703\nCloses SEC-704\nCloses SEC-705\nCloses SEC-706\n\nCo-authored-by: Elnora Automation <automation@elnora.ai>\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(deps): bump hono from 4.12.21 to 4.12.25 (#237)",
          "author_name": "Risto Jamul",
          "author_login": "rjamul-elnora-ai",
          "committed_at": "2026-06-17T14:25:28Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "29a36f890a33ee27d4565aa6cd52d874329f8162",
          "body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[1.1.5](https://github.com/Elnora-AI/elnora-mcp-server/compare/mcp-server-v1.1.4...mcp-server-v1.1.5)\n(2026-06-16)\n\n\n### Bug Fixes\n\n* **deps:** bump form-data from 4.0.5 to 4.0.6\n([#234](https://github.com/Elnora-AI/elnora-mcp-server/issues/234\n[…]\n0a636185c7b8b22dc5d5))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
          "is_bot": false,
          "headline": "chore(main): release mcp-server 1.1.5 (#235)",
          "author_name": "Carmen Kivisild",
          "author_login": "ckivisild-elnora-ai",
          "committed_at": "2026-06-16T21:45:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fb6f1560291fb1138dcd0a636185c7b8b22dc5d5",
          "body": "Bumps\n[`form-data`](https://github.com/form-data/form-data/blob/master/CHANGELOG.md)\nfrom `4.0.5` to `4.0.6`.\n\nCloses SEC-695\n\nCo-authored-by: Elnora Automation <automation@elnora.ai>",
          "is_bot": false,
          "headline": "fix(deps): bump form-data from 4.0.5 to 4.0.6 (#234)",
          "author_name": "Risto Jamul",
          "author_login": "rjamul-elnora-ai",
          "committed_at": "2026-06-16T21:42:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9216c1d02fb2dd5edaba9251f32a9a5f1169a887",
          "body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[1.1.4](https://github.com/Elnora-AI/elnora-mcp-server/compare/mcp-server-v1.1.3...mcp-server-v1.1.4)\n(2026-06-16)\n\n\n### Bug Fixes\n\n* **docker:** bump base image\n([#229](https://github.com/Elnora-AI/elnora-mcp-server/issues/229))\n([0a6e150](htt\n[…]\n661e982231ece0e42692))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
          "is_bot": false,
          "headline": "chore(main): release mcp-server 1.1.4 (#233)",
          "author_name": "Carmen Kivisild",
          "author_login": "ckivisild-elnora-ai",
          "committed_at": "2026-06-16T13:20:24Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0a6e150e08f67c36cc51661e982231ece0e42692",
          "body": "Bumps the container base image.\n\nCloses SEC-646\nCloses SEC-647\nCloses SEC-648\nCloses SEC-649\nCloses SEC-650\nCloses SEC-651\nCloses SEC-652\nCloses SEC-653\nCloses SEC-654\nCloses SEC-655\nCloses SEC-656\nCloses SEC-657\nCloses SEC-658\nCloses SEC-659\nCloses SEC-660\n\nCo-authored-by: Elnora Automation <automation@elnora.ai>",
          "is_bot": false,
          "headline": "fix(docker): bump base image (#229)",
          "author_name": "Risto Jamul",
          "author_login": "rjamul-elnora-ai",
          "committed_at": "2026-06-16T10:55:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d2431c679474b3ae67e2266e61624606eac495a7",
          "body": "## Included Bumps\n| PR | Package | Old → New | Type |\n|----|---------|-----------|------|\n| #230 | esbuild | 0.28.0 → 0.28.1 | patch |\n\n## Skipped — Needs Review\n| PR | Package | Old → New | Reason |\n|----|---------|-----------|--------|\n| #228 | @types/node | 24.12.0 → 25.9.3 | Major bump — manual \n[…]\n to Merge\nMerging this PR will cause Dependabot to auto-close the individual PRs\nlisted above whose changes appear in main.\n\nCo-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>",
          "is_bot": true,
          "headline": "chore(deps): batched safe dependency bumps 2026-06-16 (#231)",
          "author_name": "claude[bot]",
          "author_login": "claude[bot]",
          "committed_at": "2026-06-16T09:02:12Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "851d40b5b55a4ef501f73ecd6612cdfdc144f709",
          "body": "## Included Bumps\n| PR | Package | Old → New | Type |\n|----|---------|-----------|------|\n| #225 | vitest | 4.1.7 → 4.1.8 | patch |\n| #224 | ioredis | 5.11.0 → 5.11.1 | patch |\n| #223 | axios | 1.16.1 → 1.17.0 | minor |\n| #222 | tsx | 4.22.3 → 4.22.4 | patch |\n\n## Skipped — Needs Review\n_None._\n\n## \n[…]\nose the individual PRs\nlisted above whose changes appear in main.\n\nCo-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": true,
          "headline": "chore(deps): batched safe dependency bumps 2026-06-09 (#227)",
          "author_name": "claude[bot]",
          "author_login": "claude[bot]",
          "committed_at": "2026-06-09T08:34:17Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "468f0088998cf0a37eeb688ddddbdb15adbf0e42",
          "body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[1.1.3](https://github.com/Elnora-AI/elnora-mcp-server/compare/mcp-server-v1.1.2...mcp-server-v1.1.3)\n(2026-06-05)\n\n\n### Bug Fixes\n\n* **deps:** bump hono from 4.12.18 to 4.12.21\n([#221](https://github.com/Elnora-AI/elnora-mcp-server/issues/221)\n[…]\nef875fe28d87f27f232f))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
          "is_bot": false,
          "headline": "chore(main): release mcp-server 1.1.3 (#226)",
          "author_name": "Carmen Kivisild",
          "author_login": "ckivisild-elnora-ai",
          "committed_at": "2026-06-05T15:44:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0fef592f1e716160683cef875fe28d87f27f232f",
          "body": "Bumps [`hono`](https://github.com/honojs/hono) from `4.12.18` to\n`4.12.21`.\n\nCloses SEC-616\nCloses SEC-617\nCloses SEC-618\nCloses SEC-619\n\nCo-authored-by: Elnora Automation <bot@elnora.ai>",
          "is_bot": false,
          "headline": "fix(deps): bump hono from 4.12.18 to 4.12.21 (#221)",
          "author_name": "Risto Jamul",
          "author_login": "rjamul-elnora-ai",
          "committed_at": "2026-06-05T15:22:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "55a797ac39196caa9895895f6b3cde73ea56c42d",
          "body": "## Included Bumps\n| PR | Package | Old → New | Type |\n|----|---------|-----------|------|\n| #218 | ioredis | 5.10.1 → 5.11.0 | minor |\n\n## Skipped — Needs Review\n_None._\n\n## Recommended to Close — Major\n_None._\n\n## Verification\nbuild ✓ · test ✓ · lint —\n\n## How to Merge\nMerging this PR will cause De\n[…]\nose the individual PRs\nlisted above whose changes appear in main.\n\nCo-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": true,
          "headline": "chore(deps): batched safe dependency bumps 2026-06-02 (#219)",
          "author_name": "claude[bot]",
          "author_login": "claude[bot]",
          "committed_at": "2026-06-04T07:46:25Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6d6e2e9e67aaf56ec214266e73a942f0bbddb20f",
          "body": "## Included Bumps\n| PR | Package | Old → New | Type |\n|----|---------|-----------|------|\n| #211 | tsx | 4.22.2 → 4.22.3 | patch |\n| #209 | vitest | 4.1.6 → 4.1.7 | patch |\n\n## Skipped — Needs Review\n| PR | Package | Old → New | Reason |\n|----|---------|-----------|--------|\n| #210 | @types/node | 2\n[…]\nose the individual PRs\nlisted above whose changes appear in main.\n\nCo-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": true,
          "headline": "chore(deps): batched safe dependency bumps 2026-05-26 (#217)",
          "author_name": "claude[bot]",
          "author_login": "claude[bot]",
          "committed_at": "2026-05-26T15:25:17Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "210c637649698bce191955db399458915b480054",
          "body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[1.1.2](https://github.com/Elnora-AI/elnora-mcp-server/compare/mcp-server-v1.1.1...mcp-server-v1.1.2)\n(2026-05-25)\n\n\n### Bug Fixes\n\n* **deps:** bump qs from 6.15.0 to 6.15.2\n([#213](https://github.com/Elnora-AI/elnora-mcp-server/issues/213))\n([\n[…]\n6250435b2857b0824b13))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
          "is_bot": false,
          "headline": "chore(main): release mcp-server 1.1.2 (#216)",
          "author_name": "Carmen Kivisild",
          "author_login": "ckivisild-elnora-ai",
          "committed_at": "2026-05-25T19:42:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cc987341d92f9ca7f70f6250435b2857b0824b13",
          "body": "Bumps [`qs`](https://github.com/ljharb/qs) from `6.15.0` to `6.15.2`.\n\nCloses SEC-578\n\nCo-authored-by: Elnora Automation <automation@elnora.ai>",
          "is_bot": false,
          "headline": "fix(deps): bump qs from 6.15.0 to 6.15.2 (#213)",
          "author_name": "Risto Jamul",
          "author_login": "rjamul-elnora-ai",
          "committed_at": "2026-05-25T19:38:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fd7212290a87c26833b583fcde098a93f83dcfa1",
          "body": "Use npm's [Trusted\nPublishing](https://docs.npmjs.com/trusted-publishers) (GitHub Actions\nOIDC) for `npm publish`.\n\nTrusted Publisher already configured on the npm package side.",
          "is_bot": false,
          "headline": "chore(ci): publish to npm via OIDC trusted publishing (#215)",
          "author_name": "Risto Jamul",
          "author_login": "rjamul-elnora-ai",
          "committed_at": "2026-05-25T18:06:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "14fa90c6e830f17665ec9aaedd2a207eb59e134c",
          "body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[1.1.1](https://github.com/Elnora-AI/elnora-mcp-server/compare/mcp-server-v1.1.0...mcp-server-v1.1.1)\n(2026-05-19)\n\n\n### Bug Fixes\n\n* **orgs:** use stripeCustomerId in set-stripe wire payload\n([#207](https://github.com/Elnora-AI/elnora-mcp-serv\n[…]\nd75159cd3e3dc9eee365))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
          "is_bot": false,
          "headline": "chore(main): release mcp-server 1.1.1 (#208)",
          "author_name": "Carmen Kivisild",
          "author_login": "ckivisild-elnora-ai",
          "committed_at": "2026-05-19T21:34:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6b2f7c635a3487dcea7ad75159cd3e3dc9eee365",
          "body": "## Summary\n\nThe `elnora_orgs_setStripe` MCP tool was sending the Stripe customer ID\nunder the wrong field name in the request payload. The API silently\nignored the unknown field, which left the underlying value unset —\nclearing any previously-stored value rather than updating it.\n\n## Change\n\n- Param\n[…]\n*Merge\nthis first so the CLI PR's parity check goes green.**\n\n## Test plan\n\n- [x] `npm run build` clean (tsc)\n- [x] `npm test` — all tests pass\n\nCo-authored-by: Claude Opus 4.7 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(orgs): use stripeCustomerId in set-stripe wire payload (#207)",
          "author_name": "Risto Jamul",
          "author_login": "rjamul-elnora-ai",
          "committed_at": "2026-05-19T21:32:57Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "994475ae48e504cb018fbf8eae92267869e73091",
          "body": "## Included Bumps\n| PR | Package | Old → New | Type |\n|----|---------|-----------|------|\n| #203 | express-rate-limit | 8.5.1 → 8.5.2 | patch |\n| #201 | vitest | 4.1.5 → 4.1.6 | patch |\n| #200 | axios | 1.16.0 → 1.16.1 | patch |\n| #199 | tsx | 4.21.0 → 4.22.0 | minor |\n\n## Skipped — Needs Review\n| P\n[…]\nose the individual PRs\nlisted above whose changes appear in main.\n\nCo-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": true,
          "headline": "chore(deps): batched safe dependency bumps 2026-05-19 (#206)",
          "author_name": "claude[bot]",
          "author_login": "claude[bot]",
          "committed_at": "2026-05-19T15:18:26Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "45ee395b3c651ec59b2b4b2c6b5321fa27009fd0",
          "body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[1.1.0](https://github.com/Elnora-AI/elnora-mcp-server/compare/mcp-server-v1.0.5...mcp-server-v1.1.0)\n(2026-05-15)\n\n\n### Features\n\n* add periodic heartbeat log task\n([#204](https://github.com/Elnora-AI/elnora-mcp-server/issues/204))\n([5f3744f](\n[…]\nb4287dbe19ab8d1b377d))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
          "is_bot": false,
          "headline": "chore(main): release mcp-server 1.1.0 (#205)",
          "author_name": "Carmen Kivisild",
          "author_login": "ckivisild-elnora-ai",
          "committed_at": "2026-05-15T21:48:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5f3744fe9fe8f96438ddb4287dbe19ab8d1b377d",
          "body": "## Summary\n\nAdds a periodic heartbeat log task.\n\n## Test plan\n\n- [x] `npm run build` — clean\n- [x] `npm test` — ok\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: add periodic heartbeat log task (#204)",
          "author_name": "Risto Jamul",
          "author_login": "rjamul-elnora-ai",
          "committed_at": "2026-05-15T21:45:26Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "abbd1f8100404ca0874822667b6534659d013575",
          "body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[1.0.5](https://github.com/Elnora-AI/elnora-mcp-server/compare/mcp-server-v1.0.4...mcp-server-v1.0.5)\n(2026-05-12)\n\n\n### Bug Fixes\n\n* **deps:** bump 2 dependencies\n([#196](https://github.com/Elnora-AI/elnora-mcp-server/issues/196))\n([1393f88](h\n[…]\nef48c7f476db6ef31dad))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
          "is_bot": false,
          "headline": "chore(main): release mcp-server 1.0.5 (#195)",
          "author_name": "Carmen Kivisild",
          "author_login": "ckivisild-elnora-ai",
          "committed_at": "2026-05-12T20:47:17Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1393f8838e95b6b48286ff3d5d5b45f718030e6b",
          "body": "Bumps multiple dependencies.\n\nCloses SEC-489\nCloses SEC-490\nCloses SEC-491\nCloses SEC-492\nCloses SEC-493\n\nCo-authored-by: Elnora Automation <automation@elnora.ai>\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(deps): bump 2 dependencies (#196)",
          "author_name": "Risto Jamul",
          "author_login": "rjamul-elnora-ai",
          "committed_at": "2026-05-12T18:45:34Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "69ae13dae72dbc119326562179458dc431950079",
          "body": "…pt (#198)\n\n## Summary\n\nTightens the prompt in `dep-batch-review.yml` so the generated artifacts\n(per-PR sticky comments + batch PR body) emit Boolean signals instead of\nchangelog detail, security-release wording, and test/audit counts.\nPrompt text only — no trigger / permission / step changes.\n\n## Test plan\n\n- [ ] After merge, run `gh workflow run dep-batch-review.yml -f\ndry_run=true` and confirm the new sticky comments on open Dependabot PRs\nfollow the constrained template.",
          "is_bot": false,
          "headline": "chore(workflows): tighten public-facing disclosures in dep-batch prom…",
          "author_name": "Risto Jamul",
          "author_login": "rjamul-elnora-ai",
          "committed_at": "2026-05-12T18:26:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "16a91662965b129e114870d2c9b24c21221bb965",
          "body": "## Included Bumps\n\n| PR | Package | Old → New | Type |\n|----|---------|-----------|------|\n| #194 | fast-uri | 3.1.0 → 3.1.2 | patch |\n| #191 | axios | 1.15.2 → 1.16.0 | minor |\n\n## Skipped — Needs Review\n\n| PR | Package | Old → New | Reason |\n|----|---------|-----------|--------|\n| #190 | @types/no\n[…]\nose the individual PRs\nlisted above whose changes appear in main.\n\nCo-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": true,
          "headline": "chore(deps): batched safe dependency bumps 2026-05-12 (#197)",
          "author_name": "claude[bot]",
          "author_login": "claude[bot]",
          "committed_at": "2026-05-12T17:27:45Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "05457ce74b95ac0494b3ef48c7f476db6ef31dad",
          "body": "Bumps [`hono`](https://hono.dev) from `4.12.14` to `4.12.16`.\n\nCloses SEC-475\nCloses SEC-476\n\nCo-authored-by: Elnora Automation <automation@elnora.ai>",
          "is_bot": false,
          "headline": "fix(deps): bump hono from 4.12.14 to 4.12.16 (#192)",
          "author_name": "Risto Jamul",
          "author_login": "rjamul-elnora-ai",
          "committed_at": "2026-05-11T17:27:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8fc6e0663eaf8f00e5d948b49e8f79f737be1487",
          "body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[1.0.4](https://github.com/Elnora-AI/elnora-mcp-server/compare/mcp-server-v1.0.3...mcp-server-v1.0.4)\n(2026-05-06)\n\n\n### Bug Fixes\n\n* **docker:** bump base to debian 13 + refresh deps\n([#188](https://github.com/Elnora-AI/elnora-mcp-server/issue\n[…]\n3f50f5ecce80af551c41))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
          "is_bot": false,
          "headline": "chore(main): release mcp-server 1.0.4 (#189)",
          "author_name": "Carmen Kivisild",
          "author_login": "ckivisild-elnora-ai",
          "committed_at": "2026-05-06T22:01:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "99b0d4ad6a72574e26743f50f5ecce80af551c41",
          "body": "## Summary\n\n- Dockerfile (both stages): `node:24-slim` → `node:24-trixie-slim`. Same\nNode 24.15.0 runtime, newer Debian 13 base OS package set.\n- `express-rate-limit ^8.4.1` → `^8.5.0`. Lock resolves to 8.5.1;\ntransitive `ip-address` refreshes to 10.2.0.\n\n## Verification\n\n- `npm install`: 0 audit is\n[…]\nEC-397\nCloses SEC-432\nCloses SEC-433\nCloses SEC-434\nCloses SEC-444\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(docker): bump base to debian 13 + refresh deps (#188)",
          "author_name": "Risto Jamul",
          "author_login": "rjamul-elnora-ai",
          "committed_at": "2026-05-06T21:58:55Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0e5d70429f51cbfcae11e38d2bb9f6e78cbf6db3",
          "body": "## Included Bumps\n\n| PR | Package | Old | New | Type | Rationale |\n|----|---------|-----|-----|------|-----------|\n| #186 | zod | 4.3.6 | 4.4.1 | minor | Correctness/soundness fixes; none\nof the changed behaviours (tuple defaults, `z.undefined()` in objects,\n`.merge()` with refinements, JSON Schema \n[…]\nose the individual PRs\nlisted above whose changes appear in main.\n\nCo-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": true,
          "headline": "chore(deps): batched safe dependency bumps 2026-05-05 (#187)",
          "author_name": "claude[bot]",
          "author_login": "claude[bot]",
          "committed_at": "2026-05-05T17:16:46Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "bb92685f5f3362ddd558bc8f2bac175a95d679dc",
          "body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[1.0.3](https://github.com/Elnora-AI/elnora-mcp-server/compare/mcp-server-v1.0.2...mcp-server-v1.0.3)\n(2026-04-28)\n\n\n### Bug Fixes\n\n* **docker:** publish openssl upgrade\n([#184](https://github.com/Elnora-AI/elnora-mcp-server/issues/184))\n([3afe\n[…]\n656466728143384b7a02))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
          "is_bot": false,
          "headline": "chore(main): release mcp-server 1.0.3 (#185)",
          "author_name": "Carmen Kivisild",
          "author_login": "ckivisild-elnora-ai",
          "committed_at": "2026-04-28T18:46:43Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3afe4782e1953d50246d656466728143384b7a02",
          "body": "## Summary\nEmpty commit to trigger Release Please for the openssl bump merged in\n#181 (which used a `chore` prefix and didn't bump the release).\n\nNo functional change — diff is empty.\n\n## Test plan\n- [ ] Release Please opens a v1.0.3 PR after this merges\n- [ ] Merging that PR ships v1.0.3 with the openssl change in\nCHANGELOG.md",
          "is_bot": false,
          "headline": "fix(docker): publish openssl upgrade (#184)",
          "author_name": "Risto Jamul",
          "author_login": "rjamul-elnora-ai",
          "committed_at": "2026-04-28T18:40:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7f5c69b0115c87ca7c5a33fbb7accf61f5c82c2f",
          "body": "## Included Bumps\n\n| PR | Package | Old | New | Type | Rationale |\n|----|---------|-----|-----|------|-----------|\n| #171 | axios | 1.15.0 | 1.15.2 | patch | Security hardening\n(prototype-pollution, SSRF mitigation, socket memory-leak fix); no\nbreaking changes |\n| #170 | vitest | 4.1.4 | 4.1.5 | pat\n[…]\nPRs\nlisted above (#171, #170, #169) whose changes appear in main.\n\nCo-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": true,
          "headline": "chore(deps): batched safe dependency bumps 2026-04-28 (#183)",
          "author_name": "claude[bot]",
          "author_login": "claude[bot]",
          "committed_at": "2026-04-28T15:57:30Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "cd3cd8023eb074e03cb8a1acb66e8e33e1a5c0a3",
          "body": "Bumps `libssl3` and `openssl` to 3.6.2 in the Dockerfile builder stage.\n\n## Test results\n122 tests pass, 0 failures.\n\nFixes #174\nFixes #63\nFixes #172\nFixes #142\nFixes #144\nFixes #143\nFixes #128\n\nCo-authored-by: Risto Jamul <risto.jamul@elnora.ai>",
          "is_bot": true,
          "headline": "chore(docker): bump openssl (#181)",
          "author_name": "claude[bot]",
          "author_login": "claude[bot]",
          "committed_at": "2026-04-27T18:24:05Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "1684093958fdef95d5a24b46f57cecee74d10775",
          "body": "## Summary\nRemoves 5 workflow files that are no longer in use.\n\n## Test plan\n- [ ] Remaining workflows pass CI on this branch\n- [ ] Confirm nothing references the removed file paths",
          "is_bot": false,
          "headline": "chore: clean up workflow directory (#182)",
          "author_name": "Risto Jamul",
          "author_login": "rjamul-elnora-ai",
          "committed_at": "2026-04-27T18:10:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "30856146d84a0e417231fe9a3548f2d22f9203b7",
          "body": "## Summary\nAdds a top-level `SECURITY.md` routing external researchers to GitHub's\n'Report a vulnerability' button (Private Vulnerability Reporting) on the\nSecurity tab.\n\n## Test plan\n- [ ] Verify Security tab shows the new policy\n- [ ] Confirm Private Vulnerability Reporting is enabled in repo\nsettings (Settings → Code security and analysis)",
          "is_bot": false,
          "headline": "chore: add SECURITY.md (#180)",
          "author_name": "Risto Jamul",
          "author_login": "rjamul-elnora-ai",
          "committed_at": "2026-04-26T19:33:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cca67f3d552ccc6ca8f45ec6f3fe844b6079220a",
          "body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[1.0.2](https://github.com/Elnora-AI/elnora-mcp-server/compare/mcp-server-v1.0.1...mcp-server-v1.0.2)\n(2026-04-25)\n\n\n### Bug Fixes\n\n* **docker:** upgrade openssl to remediate 8 CVEs\n([#177](https://github.com/Elnora-AI/elnora-mcp-server/issues/\n[…]\nmcp-server/issues/172)\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
          "is_bot": false,
          "headline": "chore(main): release mcp-server 1.0.2 (#178)",
          "author_name": "Carmen Kivisild",
          "author_login": "ckivisild-elnora-ai",
          "committed_at": "2026-04-25T20:08:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8da47f68bf113bdd1af81655675668ebe30e66e6",
          "body": "## Summary\n\nUpgrades the runtime image's OS packages via a full `apt-get upgrade`\nand explicitly installs `libssl3` and `openssl` at the latest\nDebian-provided versions, replacing the prior narrow `--only-upgrade\nlibssl3 openssl` step.\n\n## Fixed\n\n| CVE | Package | Severity | Fix Version | Action |\n|\n[…]\n\nFixes #128\nFixes #63\nFixes #142\nFixes #144\nFixes #143\nFixes #172\n\nCo-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": true,
          "headline": "fix(docker): upgrade openssl to remediate 8 CVEs (#177)",
          "author_name": "claude[bot]",
          "author_login": "claude[bot]",
          "committed_at": "2026-04-25T20:05:12Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "41017408b14cc185c14b4350898ca087b883b6ca",
          "body": "## Summary\n\nUpdates prompt templates used by the three auto-generated PR workflows\n(`inspector-autofix`, `vuln-autofix`, `dep-batch-review`) so generated\nPR bodies and per-PR sticky comments follow a narrower section list. No\nchange to workflow triggers, steps, or permissions.\n\n## Test Plan\n\n- [x] All three workflow files parse as valid YAML.\n- [ ] Verify on the next scheduled run that generated PR bodies follow\nthe new template.",
          "is_bot": false,
          "headline": "chore(workflows): tighten auto-generated PR description format (#176)",
          "author_name": "Risto Jamul",
          "author_login": "rjamul-elnora-ai",
          "committed_at": "2026-04-24T17:10:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "554cf93424a982d21fc9e1245565b3e567a6e654",
          "body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[1.0.1](https://github.com/Elnora-AI/elnora-mcp-server/compare/mcp-server-v1.0.0...mcp-server-v1.0.1)\n(2026-04-24)\n\n\n### Bug Fixes\n\n* **docker:** upgrade openssl to remediate 5 HIGH CVEs (Inspector\nfindings)\n([#167](https://github.com/Elnora-AI\n[…]\nmcp-server/issues/143)\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
          "is_bot": false,
          "headline": "chore(main): release mcp-server 1.0.1 (#175)",
          "author_name": "Carmen Kivisild",
          "author_login": "ckivisild-elnora-ai",
          "committed_at": "2026-04-24T16:16:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2069460718d905e3b4c3e78d3358c3b60cf1d66a",
          "body": "…ings) (#167)\n\n## Summary\n\nRemediates 5 HIGH OpenSSL CVEs identified by AWS Inspector in the\n`node:24-slim` base image by explicitly upgrading `libssl3` and\n`openssl` in the runtime stage.\n\n## Fixed\n\n| CVE | Package | Severity | Fix Version | Action |\n|-----|---------|----------|-------------|------\n[…]\n0 failures\n\nFixes #128\nFixes #63\nFixes #142\nFixes #144\nFixes #143\n\nCo-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": true,
          "headline": "fix(docker): upgrade openssl to remediate 5 HIGH CVEs (Inspector find…",
          "author_name": "claude[bot]",
          "author_login": "claude[bot]",
          "committed_at": "2026-04-24T16:12:58Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5f3dea73cb637a0624ee08cefc3501a469389ad6",
          "body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[1.0.0](https://github.com/Elnora-AI/elnora-mcp-server/compare/mcp-server-v0.13.0...mcp-server-v1.0.0)\n(2026-04-21)\n\n\n### ⚠ BREAKING CHANGES\n\n* **tools:** align tool names with CLI registry (v1.0.0)\n([#163](https://github.com/Elnora-AI/elnora-m\n[…]\n3c2fb3d8bfec02b5fc35))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
          "is_bot": false,
          "headline": "chore(main): release mcp-server 1.0.0 (#165)",
          "author_name": "Carmen Kivisild",
          "author_login": "ckivisild-elnora-ai",
          "committed_at": "2026-04-21T17:18:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5fc3032ed3ba8a50fa72d4269791ebc52d7889fd",
          "body": "## Summary\n- Removes \\`bump-minor-pre-major\\` from \\`release-please-config.json\\`\nso breaking-change commits bump the major version per SemVer.\n- Commits the intentional v1.0.0 bump for the tool-surface work via a\n\\`Release-As: 1.0.0\\` footer.\n\n## Why\nThe previous config caused release-please to cut\n[…]\nng v0.14.0 PR (#165) and open a\nfresh PR targeting v1.0.0. Merging that PR creates the release and\ntriggers deploy to \\`mcp.elnora.ai\\`.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)",
          "is_bot": false,
          "headline": "chore(release): commit v1.0.0 (#166)",
          "author_name": "Risto Jamul",
          "author_login": "rjamul-elnora-ai",
          "committed_at": "2026-04-21T17:16:42Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e6b45c1449de819a3236b9913ebbc1a3a9aac25f",
          "body": "## Included Bumps\n\n| PR | Package | Old | New | Type | Rationale |\n|----|---------|-----|-----|------|-----------|\n| #161 | typescript | 6.0.2 | 6.0.3 | patch | Bug-fix patch release —\nhardened ATA package name filtering, class property initializer fix. No\nbreaking changes. Build ✓, tests ✓. |\n\n## S\n[…]\npear in main.\n\nCo-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>\nCo-authored-by: Risto Jamul <risto.jamul@elnora.ai>",
          "is_bot": true,
          "headline": "chore(deps): batched safe dependency bumps 2026-04-21 (#164)",
          "author_name": "claude[bot]",
          "author_login": "claude[bot]",
          "committed_at": "2026-04-21T17:11:52Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "caa18ec304060a4572953c2fb3d8bfec02b5fc35",
          "body": "## Summary\n- Aligns every MCP tool to the `elnora_{group}_{action}` naming\nconvention used by the Elnora CLI command registry\n- Renames all parameters from `snake_case` to `camelCase` to match CLI\nZod schemas\n- Removes redundant `org_id` tool parameters in favor of the\n`X-Organization-Id` header alr\n[…]\n-parity` CI job that\nrequires mcp-server main to already have these renames)\n3. Then merge the elnora-plugins PR (documentation refresh)\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)",
          "is_bot": false,
          "headline": "feat(tools)!: align tool names with CLI registry (v1.0.0) (#163)",
          "author_name": "Risto Jamul",
          "author_login": "rjamul-elnora-ai",
          "committed_at": "2026-04-21T17:06:24Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "48d7ee2423eee082d04c21299c5fe7b9ec5536b2",
          "body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.13.0](https://github.com/Elnora-AI/elnora-mcp-server/compare/mcp-server-v0.12.3...mcp-server-v0.13.0)\n(2026-04-16)\n\n\n### Features\n\n* **ci:** batch safe Dependabot updates twice weekly\n([#157](https://github.com/Elnora-AI/elnora-mcp-server/is\n[…]\nh [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).\n\nCo-authored-by: Risto Jamul <risto.jamul@elnora.ai>",
          "is_bot": false,
          "headline": "chore(main): release mcp-server 0.13.0 (#152)",
          "author_name": "Carmen Kivisild",
          "author_login": "ckivisild-elnora-ai",
          "committed_at": "2026-04-16T17:32:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4073c2ad93e854c985fff60cad0261e42f6824fb",
          "body": "## Included Bumps\n\n| PR | Package | Old | New | Type | Rationale |\n|----|---------|-----|-----|------|-----------|\n| #137 | vitest | 4.1.2 | 4.1.4 | patch | Bug-fix only releases; no\nbreaking changes; build ✓ test ✓ |\n\n## Skipped — Needs Review\n\n| PR | Package | Old | New | Reason |\n|----|---------|\n[…]\nose the individual PRs\nlisted above whose changes appear in main.\n\nCo-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": true,
          "headline": "chore(deps): batched safe dependency bumps 2026-04-16 (#160)",
          "author_name": "claude[bot]",
          "author_login": "claude[bot]",
          "committed_at": "2026-04-16T17:20:29Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "efd52e8b2b03569b3e2fdb24b5b63bace1592f64",
          "body": "## Summary\n\nThe dry-run test of dep-batch-review failed with:\n```\nCould not fetch an OIDC token. Did you remember to add id-token: write to your workflow permissions?\n```\n\n`anthropics/claude-code-action@v1` requires `id-token: write` for OIDC\nauthentication with the Anthropic API. Same permission is\n[…]\n Test plan\n\n- [ ] Merge this PR\n- [ ] Re-run: `gh workflow run dep-batch-review.yml --repo\nElnora-AI/elnora-mcp-server -f dry_run=true`\n- [ ] Verify the Claude step starts successfully (no OIDC error)",
          "is_bot": false,
          "headline": "fix(ci): add id-token permission for dep-batch-review OIDC auth (#159)",
          "author_name": "Risto Jamul",
          "author_login": "rjamul-elnora-ai",
          "committed_at": "2026-04-16T17:05:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5733de8d06555868ef5fdd5576534d914e479b00",
          "body": "## Summary\n\nAdds a twice-weekly (Tue/Fri 07:00 UTC) workflow that automates the\nmanual \"review every Dependabot PR, batch the safe ones, merge once\"\nprocess:\n\n- **Reviews** every open Dependabot PR (≥24h old, no human comments yet)\nwith a deep analysis: fetches real changelog, greps codebase for pac\n[…]\nhas no `security` label\n- [ ] Wait for the next scheduled Tue/Fri run and confirm sticky\ncomments update in place (no duplicates)\n\n## Rollback\n\nRevert the workflow file. Labels can stay or be deleted.",
          "is_bot": false,
          "headline": "feat(ci): batch safe Dependabot updates twice weekly (#157)",
          "author_name": "Risto Jamul",
          "author_login": "rjamul-elnora-ai",
          "committed_at": "2026-04-16T16:33:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ae9548ae23a27c970857e33c9da742018aeb1d42",
          "body": "## Summary\n\nThree small refinements to the auto-fix pipeline based on operational\nexperience since it went live on 2026-04-08:\n\n- **Source-specific issue labels**: Add `Source: Dependabot` / `Source:\nInspector` alongside the existing `Source: Vulnerability Scan` label.\nDuring triage it matters wheth\n[…]\n commits on this branch. No state migration.\n\n## Out of scope\n\n- Removing `Source: Vulnerability Scan` — deferred until new labels are\nproven in practice.\n- Backfilling labels on existing open issues.",
          "is_bot": false,
          "headline": "chore(ci): label and reviewer refinements for auto-fix PRs (#151)",
          "author_name": "Risto Jamul",
          "author_login": "rjamul-elnora-ai",
          "committed_at": "2026-04-16T16:04:22Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "233d577bd96db60b6ff93da62d44bac666d5cb15",
          "body": "## Vulnerabilities Fixed\n\n| CVE/GHSA | Package | Old Version | New Version | Type |\n|----------|---------|-------------|-------------|------|\n| GHSA-458j-xx4x-4375 | hono | 4.12.12 | 4.12.14 | override (transitive)\n|\n\n## Vulnerabilities Skipped\n\n_None — all reported vulnerabilities have been fixed._\n[…]\ns\n\nFixes #155\n\nCo-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>\nCo-authored-by: Risto Jamul <risto.jamul@elnora.ai>",
          "is_bot": true,
          "headline": "fix(deps): automated vulnerability remediation 2026-04-16 (#156)",
          "author_name": "claude[bot]",
          "author_login": "claude[bot]",
          "committed_at": "2026-04-16T16:00:17Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d89b99b5b50e2b43e4da46099be2dc7961454c4b",
          "body": "## Fixed Vulnerabilities\n\n| CVE / Advisory | Severity | Package | Fix |\n|---|---|---|---|\n| CVE-2026-31790 | HIGH | openssl/openssl 3.5.5 | Base image update →\nOpenSSL 3.6.2 |\n| CVE-2026-28388 | HIGH | openssl/openssl 3.5.5 | Base image update →\nOpenSSL 3.6.2 |\n| CVE-2026-28389 | HIGH | openssl/open\n[…]\n---\n🤖 Generated with [Claude Code](https://claude.ai/claude-code)\n\nCo-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": true,
          "headline": "fix(deps): automated vulnerability remediation 2026-04-15 (#153)",
          "author_name": "claude[bot]",
          "author_login": "claude[bot]",
          "committed_at": "2026-04-16T15:49:59Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ec2d80f7e16b70f7dbed7613f9fc5fd74228d89a",
          "body": "## Summary\n\nAWS Inspector container image scan identified vulnerabilities across OS,\nGENERIC (OpenSSL bundled in Node.js), and NODE packages. This PR fixes\nthe one actionable finding; all others are documented below with risk\nrationale.\n\n---\n\n## Fixed\n\n| CVE / GHSA | Severity | Package | From | To |\n[…]\n`\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": true,
          "headline": "fix(deps): automated vulnerability remediation 2026-04-15 (#150)",
          "author_name": "claude[bot]",
          "author_login": "claude[bot]",
          "committed_at": "2026-04-15T18:55:41Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "13981f44c6ab83abecdc344240d054903de94aee",
          "body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.12.3](https://github.com/Elnora-AI/elnora-mcp-server/compare/mcp-server-v0.12.2...mcp-server-v0.12.3)\n(2026-04-15)\n\n\n### Bug Fixes\n\n* **deps:** automated vulnerability remediation 2026-04-11\n([#141](https://github.com/Elnora-AI/elnora-mcp-se\n[…]\n647dd7d6308da68fc4e2))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
          "is_bot": false,
          "headline": "chore(main): release mcp-server 0.12.3 (#140)",
          "author_name": "Carmen Kivisild",
          "author_login": "ckivisild-elnora-ai",
          "committed_at": "2026-04-15T17:18:23Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "322c58b938eef4bd054c0226a537366a5c952572",
          "body": "## Vulnerabilities Fixed\n\n| CVE/GHSA | Package | Old Version | New Version | Type |\n|----------|---------|-------------|-------------|------|\n| CVE-2025-62718 | axios | ^1.14.0 | ^1.15.0 | minor bump |\n\n## Vulnerabilities Skipped\n\n_None — all alerts had available fixes._\n\n## Risk Assessment\n\n- **CVE\n[…]\ns\n\nFixes #139\n\nCo-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>\nCo-authored-by: Risto Jamul <risto.jamul@elnora.ai>",
          "is_bot": true,
          "headline": "fix(deps): automated vulnerability remediation 2026-04-12 (#147)",
          "author_name": "claude[bot]",
          "author_login": "claude[bot]",
          "committed_at": "2026-04-15T16:54:29Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e7bcece41ceb68c052f16e0e9547daec750e7ce9",
          "body": "## Summary\n\nAWS Inspector found vulnerabilities in the container image. This PR\nfixes the one actionable npm dependency vulnerability and documents the\nremainder as risk-accepted.\n\nBuild and all 111 tests pass. ✅\n\n---\n\n## Fixed\n\n| CVE | Package | From | To | Severity | GitHub Issue |\n|-----|--------\n[…]\nwith clear risk rationale, and the test\nsuite passes.\n\nFixes #139\n\nCo-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": true,
          "headline": "fix(deps): automated vulnerability remediation 2026-04-11 (#141)",
          "author_name": "claude[bot]",
          "author_login": "claude[bot]",
          "committed_at": "2026-04-15T16:43:03Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f589d6aeca3101007f53647dd7d6308da68fc4e2",
          "body": "## Summary\n\nUpdates the `node:24-slim` base image digest to pull a newer image that\nships with OpenSSL ≥3.6.2, remediating two HIGH-severity CVEs in the\nbundled OpenSSL. All 111 tests pass.\n\n## Fixed\n\n| CVE | Severity | Package | Old Version | Fixed Version | Action |\n|-----|----------|---------|---\n[…]\n3\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": true,
          "headline": "fix(docker): update node:24-slim base image to patch OpenSSL CVEs (#133)",
          "author_name": "claude[bot]",
          "author_login": "claude[bot]",
          "committed_at": "2026-04-11T08:20:33Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "82acecd0c4eeb279c2df7608e6d31bc14578ed1a",
          "body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.12.2](https://github.com/Elnora-AI/elnora-mcp-server/compare/mcp-server-v0.12.1...mcp-server-v0.12.2)\n(2026-04-08)\n\n\n### Bug Fixes\n\n* **ci:** add GitHub issue cross-references to auto-fix PRs\n([#132](https://github.com/Elnora-AI/elnora-mcp-s\n[…]\n6948a74ce9d112feb76b))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
          "is_bot": false,
          "headline": "chore(main): release mcp-server 0.12.2 (#130)",
          "author_name": "Carmen Kivisild",
          "author_login": "ckivisild-elnora-ai",
          "committed_at": "2026-04-08T23:11:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "35bb647ad7f9ac6010eb6948a74ce9d112feb76b",
          "body": "## Vulnerabilities Fixed\n\n| CVE/GHSA | Package | Old Version | New Version | Type |\n|----------|---------|-------------|-------------|------|\n| CVE-2026-39410 | hono | 4.12.7 | 4.12.12 | patch |\n| GHSA-26pp-8wgv-hjvm | hono | 4.12.7 | 4.12.12 | patch |\n| CVE-2026-39409 | hono | 4.12.7 | 4.12.12 | pa\n[…]\n/claude-code)\n\nCo-authored-by: claude[bot] <41898282+claude[bot]@users.noreply.github.com>\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>\nCo-authored-by: Risto Jamul <risto.jamul@elnora.ai>",
          "is_bot": true,
          "headline": "fix(deps): automated vulnerability remediation 2026-04-08 (#131)",
          "author_name": "claude[bot]",
          "author_login": "claude[bot]",
          "committed_at": "2026-04-08T23:07:07Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e2fd91790b715ac1b774c59ac4d5179fa59d10f5",
          "body": "## Summary\n\nAuto-fix PRs now include `Fixes #NNN` references for each resolved\nvulnerability, which auto-closes the corresponding GitHub issues (and\ntheir synced Linear issues) when the PR is merged.\n\n### Changes\n\n- Track GitHub issue numbers when creating/finding vulnerability issues\n- Pass `github\n[…]\nhis PR + merge the existing fix PR #131\n- [ ] Trigger vuln-autofix again\n- [ ] Verify new PR body contains `Fixes #NNN` references\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(ci): add GitHub issue cross-references to auto-fix PRs (#132)",
          "author_name": "Risto Jamul",
          "author_login": "rjamul-elnora-ai",
          "committed_at": "2026-04-08T22:59:49Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "cbc249bfc3610f162efb9fec2e0d00e85cd09ea6",
          "body": "## Summary\n\nFixes model ID from `claude-sonnet-4-6-20250514` to\n`claude-sonnet-4-6-latest`. The dated variant is not available via the\ndirect Anthropic API.\n\n## Test plan\n\n- [ ] Merge and re-trigger vuln-autofix workflow\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(ci): use correct model ID for claude-code-action (#127)",
          "author_name": "Risto Jamul",
          "author_login": "rjamul-elnora-ai",
          "committed_at": "2026-04-08T22:28:42Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "9779aa58357705030bc234dd0f554cd0ac50a514",
          "body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.12.1](https://github.com/Elnora-AI/elnora-mcp-server/compare/mcp-server-v0.12.0...mcp-server-v0.12.1)\n(2026-04-08)\n\n\n### Bug Fixes\n\n* **ci:** correct claude-code-action parameters and permissions\n([#125](https://github.com/Elnora-AI/elnora-m\n[…]\n15c3c22578ad55160161))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
          "is_bot": false,
          "headline": "chore(main): release mcp-server 0.12.1 (#126)",
          "author_name": "Carmen Kivisild",
          "author_login": "ckivisild-elnora-ai",
          "committed_at": "2026-04-08T21:42:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e9d2d48f501f1d326d2915c3c22578ad55160161",
          "body": "## Summary\n\nFixes the vuln-autofix and inspector-autofix workflows that failed on\nfirst run due to incorrect Action parameters.\n\n### Changes\n\n- Add `id-token: write` permission to `vuln-autofix.yml` (required by\nclaude-code-action for OIDC token setup)\n- Replace invalid inputs (`model`, `timeout_min\n[…]\nlan\n\n- [ ] Merge this PR\n- [ ] Re-trigger `vuln-autofix` via workflow_dispatch\n- [ ] Verify the Claude Code step runs successfully\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(ci): correct claude-code-action parameters and permissions (#125)",
          "author_name": "Risto Jamul",
          "author_login": "rjamul-elnora-ai",
          "committed_at": "2026-04-08T21:40:03Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "50abada4020a4531b461d8780bbcbfef94c6f795",
          "body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.12.0](https://github.com/Elnora-AI/elnora-mcp-server/compare/mcp-server-v0.11.1...mcp-server-v0.12.0)\n(2026-04-08)\n\n\n### Features\n\n* **ci:** automated vulnerability remediation pipeline\n([#123](https://github.com/Elnora-AI/elnora-mcp-server/\n[…]\nf2c6c7b342b76bd0002a))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
          "is_bot": false,
          "headline": "chore(main): release mcp-server 0.12.0 (#124)",
          "author_name": "Carmen Kivisild",
          "author_login": "ckivisild-elnora-ai",
          "committed_at": "2026-04-08T21:33:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2b322406164a709cce06f2c6c7b342b76bd0002a",
          "body": "## Summary\n\nAdds an automated vulnerability remediation pipeline that detects,\nresearches, fixes, and creates PRs for security vulnerabilities with\nminimal manual intervention.\n\n### New Workflows\n\n- **`vuln-autofix.yml`** — Handles Dependabot dependency alerts\n(scheduled)\n  1. Fetches all open Depen\n[…]\nwith correct labels\n- [ ] Verify: fix PR created with analysis table\n- [ ] Verify: Inspector workflow runs successfully\n\n---------\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(ci): automated vulnerability remediation pipeline (#123)",
          "author_name": "Risto Jamul",
          "author_login": "rjamul-elnora-ai",
          "committed_at": "2026-04-08T21:31:12Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9eaa4b4fe355d4a0fce52dcbab389b64c5682181",
          "body": ":robot: I have created a release *beep* *boop*\n---\n\n\n##\n[0.11.1](https://github.com/Elnora-AI/elnora-mcp-server/compare/mcp-server-v0.11.0...mcp-server-v0.11.1)\n(2026-04-08)\n\n\n### Bug Fixes\n\n* **deps:** patch vite to &gt;=8.0.5 for SEC-304, SEC-305, SEC-306\n([#112](https://github.com/Elnora-AI/elnor\n[…]\n908f8b49be8080a00581))\n\n---\nThis PR was generated with [Release\nPlease](https://github.com/googleapis/release-please). See\n[documentation](https://github.com/googleapis/release-please#release-please).",
          "is_bot": false,
          "headline": "chore(main): release mcp-server 0.11.1 (#116)",
          "author_name": "Carmen Kivisild",
          "author_login": "ckivisild-elnora-ai",
          "committed_at": "2026-04-08T07:11:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        }
      ],
      "releases_count": 54,
      "commits_last_year": 182,
      "latest_release_at": "2026-07-18T13:29:41Z",
      "latest_release_tag": "mcp-server-v1.7.0",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 19,
      "days_since_latest_release": 5,
      "mean_days_between_releases": 3
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 75,
      "has_issue_template": false,
      "has_code_of_conduct": true,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "@elnora-ai/mcp-server",
          "exists": true,
          "license": "Apache-2.0",
          "keywords": [
            "mcp",
            "model-context-protocol",
            "elnora",
            "bioprotocol",
            "ai-agent",
            "lab-protocol"
          ],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@elnora-ai/mcp-server",
          "is_deprecated": false,
          "latest_version": "1.7.0",
          "repository_url": "https://github.com/Elnora-AI/elnora-mcp-server",
          "versions_count": 50,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 2,
          "monthly_downloads": 2410,
          "first_published_at": "2026-02-28T09:00:45.349000Z",
          "latest_published_at": "2026-07-18T13:30:07.812000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 5
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 3,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": null,
      "open_issues_and_prs": 4
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": true,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "tsconfig.json"
      ],
      "toolchain_manifests": [],
      "largest_source_bytes": 23650,
      "source_files_sampled": 60,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "package.json"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [
          {
            "name": "@hono/node-server",
            "direct": false,
            "version": "1.19.14",
            "severity": "moderate",
            "ecosystem": "npm",
            "cvss_score": 5.9,
            "advisory_ids": [
              "GHSA-frvp-7c67-39w9"
            ],
            "fixed_version": "2.0.5",
            "advisory_count": 1,
            "oldest_advisory_days": 2
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "moderate": 1
        },
        "advisory_count": 1,
        "affected_count": 1,
        "assessed_count": 115,
        "malicious_count": 0,
        "assessed_package": "npm:@elnora-ai/mcp-server@1.7.0",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm"
      ],
      "dependencies": [
        {
          "name": "@modelcontextprotocol/sdk",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.29.0"
        },
        {
          "name": "axios",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "1.18.1"
        },
        {
          "name": "express",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^5.1.0"
        },
        {
          "name": "express-rate-limit",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^8.6.0"
        },
        {
          "name": "ioredis",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^5.11.1"
        },
        {
          "name": "zod",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^4.4.1"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "@modelcontextprotocol/sdk",
            "direct": true,
            "version": "1.29.0",
            "ecosystem": "npm"
          },
          {
            "name": "axios",
            "direct": true,
            "version": "1.18.1",
            "ecosystem": "npm"
          },
          {
            "name": "express",
            "direct": true,
            "version": "5.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "express-rate-limit",
            "direct": true,
            "version": "8.6.0",
            "ecosystem": "npm"
          },
          {
            "name": "ioredis",
            "direct": true,
            "version": "5.11.1",
            "ecosystem": "npm"
          },
          {
            "name": "zod",
            "direct": true,
            "version": "4.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "@emnapi/core",
            "direct": false,
            "version": "1.11.1",
            "ecosystem": "npm"
          },
          {
            "name": "@emnapi/runtime",
            "direct": false,
            "version": "1.11.1",
            "ecosystem": "npm"
          },
          {
            "name": "@emnapi/wasi-threads",
            "direct": false,
            "version": "1.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/aix-ppc64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-arm",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/darwin-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/darwin-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/freebsd-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/freebsd-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-arm",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-ia32",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-loong64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-mips64el",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-ppc64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-riscv64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-s390x",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/netbsd-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/netbsd-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openbsd-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openbsd-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openharmony-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/sunos-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-ia32",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@hono/node-server",
            "direct": false,
            "version": "1.19.13",
            "ecosystem": "npm"
          },
          {
            "name": "@ioredis/commands",
            "direct": false,
            "version": "1.10.0",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/sourcemap-codec",
            "direct": false,
            "version": "1.5.5",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/wasm-runtime",
            "direct": false,
            "version": "1.1.6",
            "ecosystem": "npm"
          },
          {
            "name": "@oxc-project/types",
            "direct": false,
            "version": "0.139.0",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-android-arm64",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-darwin-arm64",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-darwin-x64",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-freebsd-x64",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-arm-gnueabihf",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-arm64-gnu",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-arm64-musl",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-ppc64-gnu",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-s390x-gnu",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-x64-gnu",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-x64-musl",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-openharmony-arm64",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-wasm32-wasi",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-win32-arm64-msvc",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-win32-x64-msvc",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/pluginutils",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@standard-schema/spec",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "@tybys/wasm-util",
            "direct": false,
            "version": "0.10.3",
            "ecosystem": "npm"
          },
          {
            "name": "@types/body-parser",
            "direct": false,
            "version": "1.19.6",
            "ecosystem": "npm"
          },
          {
            "name": "@types/chai",
            "direct": false,
            "version": "5.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "@types/connect",
            "direct": false,
            "version": "3.4.38",
            "ecosystem": "npm"
          },
          {
            "name": "@types/deep-eql",
            "direct": false,
            "version": "4.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@types/estree",
            "direct": false,
            "version": "1.0.9",
            "ecosystem": "npm"
          },
          {
            "name": "@types/express",
            "direct": false,
            "version": "5.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "@types/express-serve-static-core",
            "direct": false,
            "version": "5.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "@types/http-errors",
            "direct": false,
            "version": "2.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "@types/node",
            "direct": false,
            "version": "24.12.0",
            "ecosystem": "npm"
          },
          {
            "name": "@types/qs",
            "direct": false,
            "version": "6.14.0",
            "ecosystem": "npm"
          },
          {
            "name": "@types/range-parser",
            "direct": false,
            "version": "1.2.7",
            "ecosystem": "npm"
          },
          {
            "name": "@types/send",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "@types/serve-static",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/expect",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/mocker",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/pretty-format",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/runner",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/snapshot",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/spy",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/utils",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "accepts",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "agent-base",
            "direct": false,
            "version": "6.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "ajv",
            "direct": false,
            "version": "8.18.0",
            "ecosystem": "npm"
          },
          {
            "name": "ajv-formats",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "assertion-error",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "asynckit",
            "direct": false,
            "version": "0.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "body-parser",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "bytes",
            "direct": false,
            "version": "3.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "call-bind-apply-helpers",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "call-bound",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "chai",
            "direct": false,
            "version": "6.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "cluster-key-slot",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "combined-stream",
            "direct": false,
            "version": "1.0.8",
            "ecosystem": "npm"
          },
          {
            "name": "content-disposition",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "content-type",
            "direct": false,
            "version": "1.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "content-type",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "convert-source-map",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "cookie",
            "direct": false,
            "version": "0.7.2",
            "ecosystem": "npm"
          },
          {
            "name": "cookie-signature",
            "direct": false,
            "version": "1.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "cors",
            "direct": false,
            "version": "2.8.6",
            "ecosystem": "npm"
          },
          {
            "name": "cross-spawn",
            "direct": false,
            "version": "7.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "debug",
            "direct": false,
            "version": "4.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "delayed-stream",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "denque",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "depd",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "detect-libc",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "dunder-proto",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "ee-first",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "encodeurl",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "es-define-property",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "es-errors",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "es-module-lexer",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "es-object-atoms",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "es-set-tostringtag",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "esbuild",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "escape-html",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "estree-walker",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "etag",
            "direct": false,
            "version": "1.8.1",
            "ecosystem": "npm"
          },
          {
            "name": "eventsource",
            "direct": false,
            "version": "3.0.7",
            "ecosystem": "npm"
          },
          {
            "name": "eventsource-parser",
            "direct": false,
            "version": "3.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "expect-type",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "fast-deep-equal",
            "direct": false,
            "version": "3.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "fast-uri",
            "direct": false,
            "version": "3.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "fdir",
            "direct": false,
            "version": "6.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "finalhandler",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "follow-redirects",
            "direct": false,
            "version": "1.16.0",
            "ecosystem": "npm"
          },
          {
            "name": "form-data",
            "direct": false,
            "version": "4.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "forwarded",
            "direct": false,
            "version": "0.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "fresh",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "fsevents",
            "direct": false,
            "version": "2.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "function-bind",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "get-intrinsic",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "get-proto",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "gopd",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "has-symbols",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "has-tostringtag",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "hasown",
            "direct": false,
            "version": "2.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "hono",
            "direct": false,
            "version": "4.12.25",
            "ecosystem": "npm"
          },
          {
            "name": "http-errors",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "https-proxy-agent",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "iconv-lite",
            "direct": false,
            "version": "0.7.2",
            "ecosystem": "npm"
          },
          {
            "name": "inherits",
            "direct": false,
            "version": "2.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "ip-address",
            "direct": false,
            "version": "10.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "ipaddr.js",
            "direct": false,
            "version": "1.9.1",
            "ecosystem": "npm"
          },
          {
            "name": "is-promise",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "isexe",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "jose",
            "direct": false,
            "version": "6.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "json-schema-traverse",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "json-schema-typed",
            "direct": false,
            "version": "8.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-android-arm64",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-darwin-arm64",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-darwin-x64",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-freebsd-x64",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-arm-gnueabihf",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-arm64-gnu",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-arm64-musl",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-x64-gnu",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-x64-musl",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-win32-arm64-msvc",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-win32-x64-msvc",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "magic-string",
            "direct": false,
            "version": "0.30.21",
            "ecosystem": "npm"
          },
          {
            "name": "math-intrinsics",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "media-typer",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "merge-descriptors",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "mime-db",
            "direct": false,
            "version": "1.52.0",
            "ecosystem": "npm"
          },
          {
            "name": "mime-db",
            "direct": false,
            "version": "1.54.0",
            "ecosystem": "npm"
          },
          {
            "name": "mime-types",
            "direct": false,
            "version": "2.1.35",
            "ecosystem": "npm"
          },
          {
            "name": "mime-types",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "ms",
            "direct": false,
            "version": "2.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "nanoid",
            "direct": false,
            "version": "3.3.16",
            "ecosystem": "npm"
          },
          {
            "name": "negotiator",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "object-assign",
            "direct": false,
            "version": "4.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "object-inspect",
            "direct": false,
            "version": "1.13.4",
            "ecosystem": "npm"
          },
          {
            "name": "obug",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "on-finished",
            "direct": false,
            "version": "2.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "once",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "parseurl",
            "direct": false,
            "version": "1.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "path-key",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "path-to-regexp",
            "direct": false,
            "version": "8.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "pathe",
            "direct": false,
            "version": "2.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "picocolors",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "picomatch",
            "direct": false,
            "version": "4.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "pkce-challenge",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "postcss",
            "direct": false,
            "version": "8.5.19",
            "ecosystem": "npm"
          },
          {
            "name": "proxy-addr",
            "direct": false,
            "version": "2.0.7",
            "ecosystem": "npm"
          },
          {
            "name": "proxy-from-env",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "qs",
            "direct": false,
            "version": "6.15.2",
            "ecosystem": "npm"
          },
          {
            "name": "range-parser",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "raw-body",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "redis-errors",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "redis-parser",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "require-from-string",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "rolldown",
            "direct": false,
            "version": "1.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "router",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "safer-buffer",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "send",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "serve-static",
            "direct": false,
            "version": "2.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "setprototypeof",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "shebang-command",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "shebang-regex",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "side-channel",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "side-channel-list",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "side-channel-map",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "side-channel-weakmap",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "siginfo",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "source-map-js",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "stackback",
            "direct": false,
            "version": "0.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "standard-as-callback",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "statuses",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "std-env",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "tinybench",
            "direct": false,
            "version": "2.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "tinyexec",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "tinyglobby",
            "direct": false,
            "version": "0.2.17",
            "ecosystem": "npm"
          },
          {
            "name": "tinyrainbow",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "toidentifier",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "tslib",
            "direct": false,
            "version": "2.8.1",
            "ecosystem": "npm"
          },
          {
            "name": "tsx",
            "direct": false,
            "version": "4.23.1",
            "ecosystem": "npm"
          },
          {
            "name": "type-is",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "typescript",
            "direct": false,
            "version": "6.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "undici-types",
            "direct": false,
            "version": "7.16.0",
            "ecosystem": "npm"
          },
          {
            "name": "unpipe",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "vary",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "vite",
            "direct": false,
            "version": "8.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "vitest",
            "direct": false,
            "version": "4.1.10",
            "ecosystem": "npm"
          },
          {
            "name": "which",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "why-is-node-running",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "wrappy",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "zod-to-json-schema",
            "direct": false,
            "version": "3.25.1",
            "ecosystem": "npm"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 227,
        "direct_count": 6,
        "indirect_count": 221
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 4,
        "merged_prs": 164,
        "open_issues": 0,
        "closed_ratio": 1,
        "closed_issues": 1,
        "closed_unmerged_prs": 68
      },
      "bus_factor": 1,
      "bot_contributors": 3,
      "top_contributors": [
        {
          "type": "User",
          "login": "ckivisild-elnora-ai",
          "commits": 77,
          "avatar_url": "https://avatars.githubusercontent.com/u/220780862?v=4"
        },
        {
          "type": "User",
          "login": "rjamul-elnora-ai",
          "commits": 65,
          "avatar_url": "https://avatars.githubusercontent.com/u/183586356?v=4"
        }
      ],
      "contributors_sampled": 2,
      "top_contributor_share": 0.542
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "codeql.yml",
        "deploy.yml",
        "gitleaks.yml",
        "pr-review-dispatch.yml",
        "pr-title.yml",
        "publish.yml",
        "release-dispatch.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "package-lock.json"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 5,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 10,
            "reason": "all changesets reviewed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 6,
            "reason": "project has 2 contributing companies or organizations -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 4,
            "reason": "dependency not pinned by hash detected -- score normalized to 4",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 10,
            "reason": "SAST tool is run on all commits",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 9,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 4,
            "reason": "6 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "342568cfddb9d731678bf888cfa1e79f9de39c06",
        "ran_at": "2026-07-23T21:14:10Z",
        "aggregate_score": 7.9,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": true,
      "has_security_policy": true,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-23T05:40:54Z",
      "oldest_open_prs": [
        {
          "number": 289,
          "created_at": "2026-07-22T21:51:54Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 290,
          "created_at": "2026-07-23T05:40:49Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 291,
          "created_at": "2026-07-23T05:40:51Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 292,
          "created_at": "2026-07-23T06:06:10Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-07-22T21:46:16Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/Elnora-AI/elnora-mcp-server",
    "host": "github.com",
    "name": "elnora-mcp-server",
    "owner": "Elnora-AI"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 69,
      "inputs": {
        "security": 81,
        "vitality": 86,
        "community": 46,
        "governance": 63,
        "engineering": 71
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 86,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 77,
            "inputs": {
              "commits_last_year": 182,
              "human_commit_share": 0.69,
              "days_since_last_push": 0,
              "active_weeks_last_year": 19
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "19/52 weeks with commits",
                "points": 13.2,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 19
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "182 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 182
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "releases_count": 54,
              "latest_release_tag": "mcp-server-v1.7.0",
              "releases_from_tags": false,
              "days_since_latest_release": 5,
              "mean_days_between_releases": 3
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "54 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 54
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~3 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 3
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 46,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 5,
            "inputs": {
              "forks": 0,
              "stars": 3,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "3 stars",
                "points": 4.9,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "excellent",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": true,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 13.5,
                "status": "met",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 56,
            "inputs": {
              "packages": [
                "@elnora-ai/mcp-server"
              ],
              "dependents": null,
              "ecosystems": "npm",
              "total_downloads": null,
              "monthly_downloads": 2410
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "2,410 downloads/month across npm",
                "points": 45.1,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 2410,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 63,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 28,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 2,
              "top_contributor_share": 0.542
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 54% of commits",
                "points": 10.3,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 54
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "2 contributors",
                "points": 2.7,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "excellent",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 89,
            "inputs": {
              "merged_prs": 164,
              "open_issues": 0,
              "closed_issues": 1,
              "issue_closed_ratio": 1,
              "closed_unmerged_prs": 68
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "100% of issues closed",
                "points": 46.8,
                "status": "met",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "164/232 decided PRs merged",
                "points": 27,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 164,
                      "decided": 232
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "all changesets reviewed",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "followers": 7,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "Elnora-AI",
              "public_repos": 16,
              "account_age_days": 926
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "7 followers of Elnora-AI",
                "points": 6.5,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 7,
                      "login": "Elnora-AI"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "16 public repos, account ~2 yr old",
                "points": 14,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 16
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 2
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "@elnora-ai/mcp-server"
              ],
              "ecosystems": "npm",
              "any_deprecated": false,
              "min_days_since_publish": 5
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 5 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "50 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 50
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 71,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "8 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "good",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "topics": [
                "ai-agents",
                "bioprotocol",
                "claude-code",
                "elnora",
                "mcp",
                "mcp-server"
              ],
              "has_wiki": false,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "6 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 6
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "good",
        "name": "Security",
        "value": 81,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "good",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 79,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 7.9
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 3.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "all changesets reviewed",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 4",
                "points": 2,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is run on all commits",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 6.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "6 existing vulnerabilities detected",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Matched the npm:@elnora-ai/mcp-server@1.7.0 runtime dependency closure — what installing the published package pulls in — 115 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "npm:@elnora-ai/mcp-server@1.7.0",
                  "assessed": 115
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 88,
            "inputs": {
              "source": "osv",
              "advisories": 1,
              "affected_packages": 1,
              "assessed_packages": 115,
              "unassessed_packages": 0,
              "affected_by_severity": "moderate 1",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "1 affected: @hono/node-server 1.19.14 (moderate 5.9)",
                "points": 13.2,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 1,
                      "packages": "@hono/node-server 1.19.14 (moderate 5.9)"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory has been public longer than 90 days",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "advisories_none_stale",
                    "params": {
                      "days": 90
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 115,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 4
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 56,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "69 of 69 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 69,
                      "sampled": 69
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "package-lock.json"
              ],
              "has_dockerfile": true,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [
                "tsconfig.json"
              ],
              "agent_commit_share": 0.48,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0.01
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "48 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 48,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "1 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 1,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 4",
                "points": 4,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "TypeScript",
              "largest_source_bytes": 23650,
              "source_files_sampled": 60,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "TypeScript (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "TypeScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/60 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 60,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "critical",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 20,
            "inputs": {
              "example_dirs": [],
              "has_mcp_signal": true,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-23T21:14:28.822022Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/e/Elnora-AI/elnora-mcp-server.svg",
  "full_name": "Elnora-AI/elnora-mcp-server",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}