Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-24 13:15 UTC
InnerOpen / marvin-cli

Official CLI for Marvin CMS - interact with the Marvin Publishing API
TypeScriptNo license detected★ 0 stars⑂ 0 forkssince Jul 2026View on GitHub ↗
InnerOpen/marvin-cli holds a health index of 58 out of 100, placing it in the Moderate band. It scores highest on Vitality (74/100) and lowest on Community & Adoption (32/100). It was last updated today. A single contributor accounts for most of its recent work.
overall / 100
Moderate
Software health index

Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile

Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership

InnerOpenOrganization
0 followers8 public repossince Jun 2026
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Package ecosystems

Registry	Package	Version	Downloads / mo	Versions	Last publish	Tags
npm	@inneropen/marvin-cli	2.7.0	6,692	47	5 days ago	marvin cms cli publishing headless-cms
Metrics by category

Vitality

Is the project alive — is code being written and are releases shipping?
74Good · 22% of overall
Development activity

56Moderate
How it's scored
36/36	Push recency — last push 0 days ago
2.1/36	Commit cadence — 3/52 weeks with commits
18/18	Commit volume — 148 commits in the last year
0/10	OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully
Inputs used
commits_last_year	148
human_commit_share	1
days_since_last_push	0
active_weeks_last_year	3
Release discipline

100Excellent
How it's scored
27/27	Ships releases — 26 releases published
36/36	Release recency — latest release 5 days ago
27/27	Release cadence — a release every ~0.5 days
0/10	OpenSSF Scorecard: Signed-Releases — no data
Inputs used
releases_count	26
latest_release_tag	v2.7.0
releases_from_tags	no
days_since_latest_release	5
mean_days_between_releases	0.5
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption

Does the project have users, downloads, attention, and a welcoming setup for contributors?
32At risk · 18% of overall
Popularity & adoption

1Critical
How it's scored
0/60	Stars — 0 stars
0/25	Forks — 0 forks
0/15	Watchers — 0 watchers
Inputs used
forks	0
stars	0
watchers	0
growth_state	unverified
growth_factor_pct	100
growth_unverified_reason	no_history
Community health

45At risk
How it's scored
22.5/22.5	README
0/22.5	License — no license file detected
18/18	CONTRIBUTING guide
0/13.5	Code of conduct
0/7.2	Issue template
0/6.3	PR template
Inputs used
has_readme	yes
has_license	no
has_contributing	yes
has_issue_template	no
has_code_of_conduct	no
has_pull_request_template	no
Ecosystem adoption (downloads)

64Moderate
How it's scored
51/80	Monthly downloads — 6,692 downloads/month across npm
0/20	Registry dependents — not reported by this ecosystem
Inputs used
packages	@inneropen/marvin-cli
dependents	—
ecosystems	npm
total_downloads	—
monthly_downloads	6,692
Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.
Sustainability & Governance

Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
54Moderate · 24% of overall
Maintainer resilience (bus factor)

22Critical
How it's scored
9/54	Bus factor — 1 contributor(s) cover half of all commits
4.8/22.5	Commit distribution — top contributor authored 79% of commits
2.7/13.5	Contributor breadth — 2 contributors
6/10	OpenSSF Scorecard: Contributors — project has 2 contributing companies or organizations -- score normalized to 6
Inputs used
bus_factor	1
contributors_sampled	2
top_contributor_share	0.788
Issue & PR responsiveness

72Good
How it's scored
0/46.8	Issue resolution — no issues or no data
38.2/38.3	PR acceptance — 1/1 decided PRs merged
0/15	OpenSSF Scorecard: Code-Review — Found 0/2 approved changesets -- score normalized to 0
Inputs used
merged_prs	1
open_issues	0
closed_issues	0
issue_closed_ratio	—
closed_unmerged_prs	0
Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.
Ownership & stewardship

37At risk
How it's scored
30/30	Ownership backing — organization-owned
0/20	Verified domain
0/25	Owner reach — 0 followers of InnerOpen
7.1/25	Track record — 8 public repos, account ~0 yr old
Inputs used
followers	0
owner_type	Organization
is_verified	—
owner_login	InnerOpen
public_repos	8
account_age_days	31
Package maintenance

100Excellent
How it's scored
25/25	Published & resolvable — 1 package(s) on npm
35/35	Publish recency — latest publish 5 days ago
20/20	Version history — 47 published versions
20/20	Not deprecated — active, not deprecated or yanked
Inputs used
packages	@inneropen/marvin-cli
ecosystems	npm
any_deprecated	no
min_days_since_publish	5
Engineering Quality

Are baseline engineering and documentation practices in place?
71Good · 20% of overall
Engineering practices

68Moderate
How it's scored
24/24	CI workflows — 4 workflow(s)
24/24	Tests present
0/16	Linter config
0/9.6	Pre-commit hooks
0/6.4	.editorconfig
20/20	OpenSSF Scorecard: CI-Tests — 1 out of 1 merged PRs checked by a CI test -- score normalized to 10
Inputs used
has_ci	yes
has_tests	yes
has_editorconfig	no
has_linter_config	no
has_precommit_config	no
Documentation

75Good
How it's scored
30/30	README
25/25	Documentation directory
0/15	Documentation / homepage site
10/10	Repository description
0/10	Topics
10/10	Wiki
Inputs used
topics	—
has_wiki	yes
homepage	—
has_readme	yes
has_docs_dir	yes
has_description	yes
Security

Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
53Moderate · 16% of overall
Security posture

41At risk
How it's scored
7.5/7.5	Binary-Artifacts — no binaries found in the repo
0.8/7.5	Branch-Protection — branch protection is not maximal on development and all release branches
2.5/2.5	CI-Tests — 1 out of 1 merged PRs checked by a CI test -- score normalized to 10
0/2.5	CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5	Code-Review — Found 0/2 approved changesets -- score normalized to 0
1.5/2.5	Contributors — project has 2 contributing companies or organizations -- score normalized to 6
10/10	Dangerous-Workflow — no dangerous workflow patterns detected
0/7.5	Dependency-Update-Tool — no update tool detected
0/5	Fuzzing — project is not fuzzed
0/2.5	License — license file not detected
0/7.5	Maintained — project was created within the last 90 days. Please review its contents carefully
5/5	Packaging — packaging workflow detected
0.5/5	Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 1
0/5	SAST — SAST tool is not run on all commits -- score normalized to 0
5/5	Security-Policy — security policy file detected
0/7.5	Signed-Releases — no data
0/7.5	Token-Permissions — detected GitHub workflow tokens with excessive permissions
7.5/7.5	Vulnerabilities — 0 existing vulnerabilities detected
Inputs used
source	openssf_scorecard
checks_evaluated	17
scorecard_version	v5.5.0
checks_inconclusive	1
scorecard_aggregate	4.1
Excluded from scoring (no data or not applicable): signed_releases. Remaining weights renormalized.
Dependency advisories

100Excellent
How it's scored
35/35	Direct dependencies free of known advisories — no direct dependency carries a known advisory
25/25	Indirect dependencies free of known advisories — no indirect dependency carries a known advisory
0/40	No advisories left outstanding — no advisory carries a publication date
Inputs used
source	osv
advisories	0
affected_packages	0
assessed_packages	5
unassessed_packages	0
affected_by_severity	none
direct_affected_packages	0
Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:@inneropen/marvin-cli@2.7.0 runtime dependency closure — what installing the published package pulls in — 5 packages. Reachability is not analyzed.
AI Readiness

How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
55Moderate · 0% of overall
Agent context & guidance

40At risk
How it's scored
0/45	Agent instructions — no CLAUDE.md / AGENTS.md / editor rules
0/15	Machine-readable docs (llms.txt)
40/40	Legible commit history — 94 of 100 human commits state their intent (structured subject or explanatory body)
Inputs used
has_llms_txt	no
legible_history_share	0.94
agent_instruction_files	—
agent_instruction_max_bytes	—
Verify loop (build / test / typecheck)

54Moderate
How it's scored
0/18	One-command bootstrap
22/22	Automated tests
0/11	Lint / format config
11/11	Static type checking — tsconfig.json
10/10	Reproducible environment — lockfile
10/10	Demonstrated agent practice — 47 of the last 100 commits agent-authored or agent-credited
0/8	Automated maintenance — no automated dependency updates observed
1/10	OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 1
Inputs used
has_nix	no
has_tests	yes
lockfiles	package-lock.json
has_dockerfile	no
typed_language	yes
bootstrap_files	—
has_devcontainer	no
has_linter_config	no
typecheck_configs	tsconfig.json
agent_commit_share	0.47
toolchain_manifests	—
dependency_bot_commit_share	0
Code legibility for models

100Excellent
How it's scored
45/45	Type-checkable code — TypeScript (statically typed)
55/55	Manageable file sizes — 0/67 source files over 60KB
Inputs used
primary_language	TypeScript
largest_source_bytes	13,750
source_files_sampled	67
oversized_source_files	0
Machine-readable interfaces

40At risk
How it's scored
0/40	API schema (OpenAPI/GraphQL/proto)
0/20	MCP server
40/40	Runnable examples — examples
Inputs used
example_dirs	examples
has_mcp_signal	no
api_schema_files	—
Key facts

0GitHub stars
2contributors
148commits, last 12 months
0days since last push
26releases
1bus factor
0open issues
npm, PyPIpackage ecosystems
Data collection warnings

GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail

OpenSSF Scorecard 4.1 / 10
4.1aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-24 13:15 UTC
10	Binary-Artifacts	no binaries found in the repo
1	Branch-Protection	branch protection is not maximal on development and all release branches
10	CI-Tests	1 out of 1 merged PRs checked by a CI test -- score normalized to 10
0	CII-Best-Practices	no effort to earn an OpenSSF best practices badge detected
0	Code-Review	Found 0/2 approved changesets -- score normalized to 0
6	Contributors	project has 2 contributing companies or organizations -- score normalized to 6
10	Dangerous-Workflow	no dangerous workflow patterns detected
0	Dependency-Update-Tool	no update tool detected
0	Fuzzing	project is not fuzzed
0	License	license file not detected
0	Maintained	project was created within the last 90 days. Please review its contents carefully
10	Packaging	packaging workflow detected
1	Pinned-Dependencies	dependency not pinned by hash detected -- score normalized to 1
0	SAST	SAST tool is not run on all commits -- score normalized to 0
10	Security-Policy	security policy file detected
n/a	Signed-Releases	no releases found
0	Token-Permissions	detected GitHub workflow tokens with excessive permissions
10	Vulnerabilities	0 existing vulnerabilities detected
Direct dependencies 4
Registry	Package	Version constraint	Manifest
npm	@inneropen/marvin-sdk	`^3.2.0-next.23`	package.json
npm	chalk	`^5.6.2`	package.json
npm	commander	`^12.1.0`	package.json
npm	dotenv	`^16.4.5`	package.json
All dependencies not collected
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Dependency advisories 0
Installing npm:@inneropen/marvin-cli@2.7.0 pulls in 5 packages, direct and transitive: 0 carry known advisories, of which 0 are direct dependencies.
No known advisories affect the assessed dependencies.
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 2357,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "JavaScript": 14983,
        "TypeScript": 292017
      },
      "pushed_at": "2026-07-24T04:00:30Z",
      "created_at": "2026-07-07T00:27:35Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-19T00:30:37Z",
      "description": "Official CLI for Marvin CMS - interact with the Marvin Publishing API",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": null,
      "default_branch": "main",
      "license_spdx_raw": null,
      "primary_language": "TypeScript",
      "significant_languages": [
        "TypeScript"
      ]
    },
    "owner": {
      "blog": "https://www.inneropen.com",
      "name": "InnerOpen",
      "type": "Organization",
      "login": "InnerOpen",
      "company": null,
      "location": "United States of America",
      "followers": 0,
      "avatar_url": "https://avatars.githubusercontent.com/u/295994472?v=4",
      "created_at": "2026-06-22T22:55:23Z",
      "is_verified": null,
      "public_repos": 8,
      "account_age_days": 31
    },
    "license": {
      "state": "absent",
      "spdx_id": null,
      "raw_spdx": null,
      "file_present": false,
      "scorecard_found": false,
      "profile_has_license": false
    },
    "activity": {
      "releases": [
        {
          "tag": "v2.7.0",
          "kind": "minor",
          "published_at": "2026-07-19T00:30:39Z"
        },
        {
          "tag": "v2.6.0-next.23",
          "kind": "prerelease",
          "published_at": "2026-07-18T20:32:55Z"
        },
        {
          "tag": "v2.6.0-next.22",
          "kind": "prerelease",
          "published_at": "2026-07-16T17:59:13Z"
        },
        {
          "tag": "v2.6.0-next.21",
          "kind": "prerelease",
          "published_at": "2026-07-16T16:44:45Z"
        },
        {
          "tag": "v2.6.0-next.20",
          "kind": "prerelease",
          "published_at": "2026-07-16T16:39:59Z"
        },
        {
          "tag": "v2.6.0-next.19",
          "kind": "prerelease",
          "published_at": "2026-07-16T16:36:43Z"
        },
        {
          "tag": "v2.6.0-next.18",
          "kind": "prerelease",
          "published_at": "2026-07-16T16:27:03Z"
        },
        {
          "tag": "v2.6.0-next.17",
          "kind": "prerelease",
          "published_at": "2026-07-16T16:19:34Z"
        },
        {
          "tag": "v2.6.0-next.16",
          "kind": "prerelease",
          "published_at": "2026-07-14T21:38:41Z"
        },
        {
          "tag": "v2.6.0-next.15",
          "kind": "prerelease",
          "published_at": "2026-07-14T21:35:31Z"
        },
        {
          "tag": "v2.6.0-next.14",
          "kind": "prerelease",
          "published_at": "2026-07-14T21:11:50Z"
        },
        {
          "tag": "v2.6.0-next.13",
          "kind": "prerelease",
          "published_at": "2026-07-14T04:39:42Z"
        },
        {
          "tag": "v2.6.0-next.12",
          "kind": "prerelease",
          "published_at": "2026-07-12T20:29:58Z"
        },
        {
          "tag": "v2.6.0-next.11",
          "kind": "prerelease",
          "published_at": "2026-07-11T21:36:12Z"
        },
        {
          "tag": "v2.6.0-next.10",
          "kind": "prerelease",
          "published_at": "2026-07-11T17:04:59Z"
        },
        {
          "tag": "v2.6.0-next.9",
          "kind": "prerelease",
          "published_at": "2026-07-11T16:54:30Z"
        },
        {
          "tag": "v2.6.0-next.8",
          "kind": "prerelease",
          "published_at": "2026-07-11T16:46:43Z"
        },
        {
          "tag": "v2.6.1",
          "kind": "patch",
          "published_at": "2026-07-10T17:23:23Z"
        },
        {
          "tag": "v2.6.0-next.7",
          "kind": "prerelease",
          "published_at": "2026-07-10T17:22:49Z"
        },
        {
          "tag": "v2.6.0-next.6",
          "kind": "prerelease",
          "published_at": "2026-07-10T17:17:07Z"
        },
        {
          "tag": "v2.6.0",
          "kind": "minor",
          "published_at": "2026-07-10T17:17:02Z"
        },
        {
          "tag": "v2.6.0-next.5",
          "kind": "prerelease",
          "published_at": "2026-07-10T16:53:31Z"
        },
        {
          "tag": "v2.6.0-next.4",
          "kind": "prerelease",
          "published_at": "2026-07-10T02:48:18Z"
        },
        {
          "tag": "v2.6.0-next.3",
          "kind": "prerelease",
          "published_at": "2026-07-10T00:52:40Z"
        },
        {
          "tag": "v2.6.0-next.2",
          "kind": "prerelease",
          "published_at": "2026-07-09T02:28:45Z"
        },
        {
          "tag": "v2.6.0-next.1",
          "kind": "prerelease",
          "published_at": "2026-07-08T16:50:59Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "b3def4969ef40e69427fc2377777bb6bb4e24d60",
          "body": "# [2.7.0](https://github.com/inneropen/marvin-cli/compare/v2.6.1...v2.7.0) (2026-07-19)\n\n### Bug Fixes\n\n* Add null check for collection.get() return value ([d362859](https://github.com/inneropen/marvin-cli/commit/d36285996b315c7d4e18433b99cf5025853cfab7))\n* camelCase column specs in email-subscripti\n[…]\nca9b5e00b4ecb9c2eb90c8f9d18b626e))\n* Rename publish entry-types → publish renderers, add --all flag ([fdb6ba8](https://github.com/inneropen/marvin-cli/commit/fdb6ba8e040a4981cd12e9b6eadec2e7cf7594b1))",
          "is_bot": false,
          "headline": "chore(release): 2.7.0 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-19T00:30:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "003972557c3ba8c6b9ad69a863fba5c72a081d19",
          "body": "develop carries the refactored CLI (80 files, large cleanup) plus the\nPUBLISHING_TOKEN fix; main only had release-bookkeeping commits (2.6.0,\n2.6.1 version bumps). Merge develop's tree so the stable release ships\nthe current code. semantic-release will cut the next stable version.",
          "is_bot": false,
          "headline": "chore: reconcile develop into main for stable release",
          "author_name": "Jared Mashburn",
          "author_login": "jmashburn",
          "committed_at": "2026-07-19T00:28:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e98b1dec15ef1d49c35b7cc22fd3cbb6e5236cf8",
          "body": null,
          "is_bot": false,
          "headline": "🔧 chore(deps): bump marvin-sdk to 3.2.0-next.23",
          "author_name": "Jared Mashburn",
          "author_login": "jmashburn",
          "committed_at": "2026-07-18T21:16:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "06a0f6b34bdfff48d5b6cd4514ac8c9818c5444a",
          "body": "# [2.6.0-next.23](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.22...v2.6.0-next.23) (2026-07-18)\n\n### Bug Fixes\n\n* **release:** parse gitmoji-prefixed commit subjects ([da9ee93](https://github.com/inneropen/marvin-cli/commit/da9ee933bfd2f4a852915e91a53255a75a3e27f4))\n\n### Features\n\n* cover all backend endpoints in the CLI ([99d9801](https://github.com/inneropen/marvin-cli/commit/99d98013722ae4306192c0ff93481ce7ef6e6045))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.23 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-18T20:32:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "713fcf0cb8d0ed6eb18cbcdabfb960db95653f87",
          "body": null,
          "is_bot": false,
          "headline": "👷 ci: install latest SDK develop tag instead of stale lockfile pin",
          "author_name": "Jared Mashburn",
          "author_login": "jmashburn",
          "committed_at": "2026-07-18T20:19:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "da9ee933bfd2f4a852915e91a53255a75a3e27f4",
          "body": null,
          "is_bot": false,
          "headline": "🐛 fix(release): parse gitmoji-prefixed commit subjects",
          "author_name": "Jared Mashburn",
          "author_login": "jmashburn",
          "committed_at": "2026-07-18T20:19:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c22f1be530700794a9268a18ca397d6019f61586",
          "body": null,
          "is_bot": false,
          "headline": "📝 docs: add status badges",
          "author_name": "Jared Mashburn",
          "author_login": "jmashburn",
          "committed_at": "2026-07-18T18:43:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "99d98013722ae4306192c0ff93481ce7ef6e6045",
          "body": "Add ~76 commands so the CLI wraps every non-excluded backend operation:\n- platform ai: providers (+ nested models), operations, executions, settings\n  (nested under `platform` to mirror the SDK's platform.ai.* namespace)\n- admin: new backups, scheduled-tasks, email (+templates), groups and\n  workspa\n[…]\nn/webhook logs and\n  types; email-template event-connections\n- user: api-token get/update\n- auth: public register / forgot-password / reset-password via a new\n  AuthClient factory in shared/clients.ts",
          "is_bot": false,
          "headline": "✨ feat: cover all backend endpoints in the CLI",
          "author_name": "Jared Mashburn",
          "author_login": "jmashburn",
          "committed_at": "2026-07-18T17:53:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7d4b6ec3919c1600e059af6054902af424f3dae1",
          "body": "# [2.6.0-next.22](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.21...v2.6.0-next.22) (2026-07-16)\n\n### Features\n\n* centralized table-schemas.ts — single source of truth for column specs, typed against SDK schema ([a671164](https://github.com/inneropen/marvin-cli/commit/a671164bea234aa2bd06ec0f118bb7b5e52e60ae))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.22 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-16T17:59:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a671164bea234aa2bd06ec0f118bb7b5e52e60ae",
          "body": "…n specs, typed against SDK schema\n\nAll platform command renderList column specs moved to src/shared/table-schemas.ts.\nString field names use `satisfies ColSpec<T>` to type-check against SDK schema types\nat compile time. Mixed schemas (strings + functions) use `satisfies ColumnSpec<T>`.\nTest updated to use per-command fixtures built from TABLE_SCHEMAS entries.",
          "is_bot": false,
          "headline": "feat: centralized table-schemas.ts — single source of truth for colum…",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-16T17:58:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "82e4248529b3da38230de3ba64a9ddb623b73561",
          "body": "- webhooks log/logs: fix column spec from snake_case (webhook_id, event_type,\n  created_at) to correct camelCase (webhookId, httpStatusCode, executedAt)\n  matching the WebhookExecutionLogRead API schema\n- event-log list/entity/user: fix column spec from snake_case (event_id,\n  occurred_at, user_id, \n[…]\nests for each; the table test acts as drift detection and\n  will fail if a column spec references a wrong field name; adding a new\n  command automatically gets all three tests with no manual additions",
          "is_bot": false,
          "headline": "test: fully dynamic output format tests; fix log column field names",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-16T17:26:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4d0771260994a456a574cf640168d3db7113b3e7",
          "body": "Adds Vitest test suite (89 tests) covering three layers:\n\n1. Explicit per-command tests (72) — secrets, variables, webhooks,\n   email-subscriptions, entry-types, entries, collections, api-clients,\n   assets, resources, notifications, forms, scheduled-tasks list/log,\n   event-log, invites, email-temp\n[…]\nurn for empty bypassed --json mode,\n  outputting human text instead of []\n- invites list: trailing Total: line appended after JSON body made\n  output unparseable; empty early-return also bypassed mode",
          "is_bot": false,
          "headline": "test: comprehensive output format tests for all platform list commands",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-16T17:10:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "76ca7719ef65826823c74addb237d8721f358bdc",
          "body": "# [2.6.0-next.21](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.20...v2.6.0-next.21) (2026-07-16)\n\n### Bug Fixes\n\n* getOutputMode + handleCommandError across all 16 command files; fix camelCase column specs ([61d6838](https://github.com/inneropen/marvin-cli/commit/61d6838c79c9a6f93edc19d1bbd0cb1c410fffa2))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.21 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-16T16:44:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "61d6838c79c9a6f93edc19d1bbd0cb1c410fffa2",
          "body": "…fix camelCase column specs\n\n- All commands now respect --json/--yaml/--csv flags via getOutputMode()\n- All commands use handleCommandError for consistent structured error output\n- Fixed snake_case column specs: eventType, webhookId, createdAt, templateType etc\n- email-templates list shows Scope as 'workspace'/'system' instead of raw groupId",
          "is_bot": false,
          "headline": "fix: getOutputMode + handleCommandError across all 16 command files; …",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-16T16:44:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cfba4c5313df3fca3aeb4a6d7746a1ae4d7dd5fb",
          "body": "# [2.6.0-next.20](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.19...v2.6.0-next.20) (2026-07-16)\n\n### Bug Fixes\n\n* entry-types list — renderingJson/capabilitiesJson field names, add isSystem, empty when null ([ea2722c](https://github.com/inneropen/marvin-cli/commit/ea2722ca22f5dec4ad537359f310525f259cb41f))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.20 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-16T16:39:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ea2722ca22f5dec4ad537359f310525f259cb41f",
          "body": "…dd isSystem, empty when null",
          "is_bot": false,
          "headline": "fix: entry-types list — renderingJson/capabilitiesJson field names, a…",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-16T16:39:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dd2316074895b0332178b1b6f951295ed9212130",
          "body": "# [2.6.0-next.19](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.18...v2.6.0-next.19) (2026-07-16)\n\n### Bug Fixes\n\n* camelCase column specs in email-subscriptions list; default recipient_type to admins ([7b1d3d7](https://github.com/inneropen/marvin-cli/commit/7b1d3d7f6a5badbd51e283e3421e00ef8930706f))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.19 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-16T16:36:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7b1d3d7f6a5badbd51e283e3421e00ef8930706f",
          "body": "…pient_type to admins",
          "is_bot": false,
          "headline": "fix: camelCase column specs in email-subscriptions list; default reci…",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-16T16:36:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "03d8cf066bb7ad311d3c8025f4b35762f1265f70",
          "body": "# [2.6.0-next.18](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.17...v2.6.0-next.18) (2026-07-16)\n\n### Bug Fixes\n\n* machine-mode errors to stdout (json/yaml/csv all pipe cleanly to jq/yq) ([4fdd3b6](https://github.com/inneropen/marvin-cli/commit/4fdd3b6f732bda2a5a731144261b7ce899c4810a))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.18 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-16T16:26:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4fdd3b6f732bda2a5a731144261b7ce899c4810a",
          "body": "… jq/yq)",
          "is_bot": false,
          "headline": "fix: machine-mode errors to stdout (json/yaml/csv all pipe cleanly to…",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-16T16:26:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "91dd384e82a087ad2f1e3210dd7dcbe757c96c3a",
          "body": "# [2.6.0-next.17](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.16...v2.6.0-next.17) (2026-07-16)\n\n### Bug Fixes\n\n* global structured error output matching --json/--yaml/--csv flags; slug normalization ([9b77358](https://github.com/inneropen/marvin-cli/commit/9b7735844a3b39b2dc8c3a1ba4\n[…]\nns, events, webhook logs, workspace import/prefs, entry-type write ops, entry collection membership ([59ec311](https://github.com/inneropen/marvin-cli/commit/59ec3110a89430952ac287dfd25e4ed43c2ffcc2))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.17 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-16T16:19:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9b7735844a3b39b2dc8c3a1ba4af61bfb3b8da4e",
          "body": "…s; slug normalization\n\n- handleCommandError: respects output format flag for ALL commands\n  --json: stderr {\"error\":\"msg\",\"status\":N}\n  --yaml: stderr valid YAML error block\n  --csv/default: plain text or styled chalk\n- FastAPI 422 array detail rendered properly (was [object Object])\n- secrets + variables create: slug auto-normalized to UPPER_SNAKE_CASE",
          "is_bot": false,
          "headline": "fix: global structured error output matching --json/--yaml/--csv flag…",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-16T16:19:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "650b26550d6a67f937c5dc397e5363d45c8211d8",
          "body": "…ents, webhook logs, workspace import/prefs, entry-type write ops, entry collection ops\n\nNew commands:\n- secrets list/get/slugs/reveal/create/update/delete\n- variables list/get/create/update/delete\n- email-subscriptions list/get/create/delete\n- webhooks log / webhooks logs <id>\n- workspace import --\n[…]\nreferences / workspace preferences update\n- entry-types create/update/delete\n- entries collections <id> / add-to-collection / remove-from-collection\n- tasks log\n- user profile update\n- event-log types",
          "is_bot": false,
          "headline": "feat: fill all CLI gaps — secrets, variables, email-subscriptions, ev…",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-16T14:53:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "59ec3110a89430952ac287dfd25e4ed43c2ffcc2",
          "body": "…, webhook logs, workspace import/prefs, entry-type write ops, entry collection membership\n\nCo-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: fill CLI gaps — secrets, variables, email-subscriptions, events…",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-16T14:49:03Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "57103e9ce543dab0b4d66a87603678240edc2ec7",
          "body": "…ma type errors\n\n- health.ts: raw fetch replaced with PlatformClient.app.health()\n- email-templates.ts: snake_case keys updated to camelCase (templateType, headerText etc)\n- forms.ts: getPublishedForm/submitForm now pass workspace slug (SDK signature fix)\n- webhooks.ts: updated to match new test() response shape {message}\n- workspaces.ts: null-safe slug access for setActive/getSiteToken\n- tokens.ts: integrationId now required in createApiToken payload",
          "is_bot": false,
          "headline": "fix: replace raw fetch in health command with SDK AppModule; fix sche…",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-16T14:34:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "75ee703ff84df65382e0e32544ce2e0f15b30af8",
          "body": "- Define EntryLike, CollectionLike, ResourceLike, AssetLike interfaces\n  for column specs instead of MarvinEntry/MarvinCollection etc. — allows\n  CollectionEntry, Entry, PublishedCollectionSummary etc. to flow through\n  without casts\n- collection <slug> now builds output from Collection class getter\n[…]\nh a Slug column\n  instead of misusing entryColumns on non-entry data\n- entry <slug> uses toJSON() instead of broken Entry[] cast\n\nCo-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Properly type column specs and fix collection <slug> entries shape",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-14T23:41:05Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "bb43dc67e4b499339d8f94448927c2a3b3b0fc4a",
          "body": "# [2.6.0-next.16](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.15...v2.6.0-next.16) (2026-07-14)\n\n### Bug Fixes\n\n* Render single items as table rows, not raw JSON objects ([8bf2e8b](https://github.com/inneropen/marvin-cli/commit/8bf2e8bf80c7f2ac41bb0cd414266338bceab894))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.16 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-14T21:38:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8bf2e8bf80c7f2ac41bb0cd414266338bceab894",
          "body": "collection, resource, asset single-item commands now use renderList\nwith column specs in table/CSV mode. JSON and YAML still return the\nfull object. Also fixes renderData fallthrough to console.dir which\nwas producing JSON-like output in table mode.\n\nCo-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Render single items as table rows, not raw JSON objects",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-14T21:38:13Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "3f0c52a4de4f54d5813ba41d556dc8a2635dab20",
          "body": "# [2.6.0-next.15](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.14...v2.6.0-next.15) (2026-07-14)\n\n### Features\n\n* Persist apiUrl in credentials, consistent empty output across all modes ([97a27f0](https://github.com/inneropen/marvin-cli/commit/97a27f0fca9b5e00b4ecb9c2eb90c8f9d18b626e))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.15 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-14T21:35:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "97a27f0fca9b5e00b4ecb9c2eb90c8f9d18b626e",
          "body": "…ll modes\n\n- Save apiUrl to ~/.marvin/credentials.json on login so marvin works\n  outside any project directory without MARVIN_API_URL env var\n- --api-url flag is now read from global opts in login command\n- Empty list results: --json returns [], --yaml returns [], --csv shows\n  headers only, table \n[…]\ne,\n  asset, and collection commands\n- renderJson falls back to [] for undefined data (was 'undefined')\n- renderList is null-safe\n\nCo-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Persist apiUrl in credentials, consistent empty output across a…",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-14T21:34:59Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8b88b0eaf04e21853bba5217def0880232df22bb",
          "body": "# [2.6.0-next.14](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.13...v2.6.0-next.14) (2026-07-14)\n\n### Features\n\n* Auth-aware CLI — site-token login, command visibility, credential precedence ([34dce56](https://github.com/inneropen/marvin-cli/commit/34dce565073f05742d5edac2dae6437aa89bbe58))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.14 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-14T21:11:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "34dce565073f05742d5edac2dae6437aa89bbe58",
          "body": "…al precedence\n\n- marvin login accepts --site-token with live validation against publish API\n- marvin logout --site-token/--all/bare for scoped credential clearing\n- marvin --help shows auth status line and hides commands based on token availability\n- workspace hidden when no user token; slug passable via --workspace or env\n- Site token precedence: CLI flag > stored credentials > env var\n\nCo-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Auth-aware CLI — site-token login, command visibility, credenti…",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-14T21:11:12Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "41b3125e71380d8e4c9dbc6b5e2f5a80fe6c6265",
          "body": "# [2.6.0-next.13](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.12...v2.6.0-next.13) (2026-07-14)\n\n### Bug Fixes\n\n* Return empty array instead of [null] when slug not found ([96cdb88](https://github.com/inneropen/marvin-cli/commit/96cdb88eb5deccfb71e8875d544a6f5800ed9ece))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.13 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-14T04:39:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "96cdb88eb5deccfb71e8875d544a6f5800ed9ece",
          "body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Return empty array instead of [null] when slug not found",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-14T04:38:57Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5e44dfcd9d3852516ee3bfb0213be204fa94f05d",
          "body": "Document the marvin publish renderers command with --all flag and\nisRendered filtering behavior.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: Add publish renderers command documentation",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-12T22:40:18Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "2ac42242ed8521ccf93c53882e12ba9b7e26c6cd",
          "body": "# [2.6.0-next.12](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.11...v2.6.0-next.12) (2026-07-12)\n\n### Bug Fixes\n\n* Update marvin-sdk dependency to next.20 with renderers rename ([fe591f6](https://github.com/inneropen/marvin-cli/commit/fe591f687e79665f6ae4728bef8d09ea9e4d8ceb))\n\n### Fe\n[…]\n875fcd1d38286c8494112cc4f43c170d))\n* Rename publish entry-types → publish renderers, add --all flag ([fdb6ba8](https://github.com/inneropen/marvin-cli/commit/fdb6ba8e040a4981cd12e9b6eadec2e7cf7594b1))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.12 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-12T20:29:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fe591f687e79665f6ae4728bef8d09ea9e4d8ceb",
          "body": "The lockfile was pinned to next.18 which lacked the renderers module.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Update marvin-sdk dependency to next.20 with renderers rename",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-12T20:29:10Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "fdb6ba8e040a4981cd12e9b6eadec2e7cf7594b1",
          "body": "Command now shows only entry types with isRendered=true by default.\nUse --all to include non-rendered types. Renamed entryTypeColumns →\nrendererColumns.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Rename publish entry-types → publish renderers, add --all flag",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-12T20:18:25Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a11126be875fcd1d38286c8494112cc4f43c170d",
          "body": "Adds `marvin publish entry-types` to list entry types with rendering\ninfo via the publishing API. Updates platform entry-types list to show\nrendering and capabilities columns.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Add publish entry-types command and update platform entry-types",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-12T19:33:40Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "52ad904abd20dcb6de366a313c4a7854baaf6099",
          "body": "# [2.6.0-next.11](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.10...v2.6.0-next.11) (2026-07-11)\n\n### Bug Fixes\n\n* Add null check for collection.get() return value ([d362859](https://github.com/inneropen/marvin-cli/commit/d36285996b315c7d4e18433b99cf5025853cfab7))\n\n### Features\n\n* Add workspace export command ([b6bce79](https://github.com/inneropen/marvin-cli/commit/b6bce79b592e36f556984b53d409b589604a74f8))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.11 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-11T21:36:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d36285996b315c7d4e18433b99cf5025853cfab7",
          "body": "Fixes TypeScript error TS18047 after SDK update where collections.get()\ncan return null.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Add null check for collection.get() return value",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-11T21:35:38Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b6bce79b592e36f556984b53d409b589604a74f8",
          "body": "Adds 'marvin workspace export' to download workspace data as JSON.\nSupports --output <file>, --include-system-types, and --no-pretty flags.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Add workspace export command",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-11T21:35:23Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "6794a4d4d04fe9418f8bd035fa6fef143cde8c8a",
          "body": "Documentation Updates:\n- Add MIGRATION.md - Comprehensive upgrade guide from v2.5.x\n- Add SECURITY.md - Security features and best practices\n- Add DOCUMENTATION_UPDATES.md - Summary of all changes\n- Update README.md - Security features, new command syntax, examples\n- Update CHANGELOG.md - Complete v\n[…]\n fixed (error messages, help text)\n\nBreaking changes, migration paths, and security improvements\nare now fully documented for v2.6.0 release.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: Complete v2.6.0 documentation and fix command inconsistencies",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-11T17:29:14Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c09312724db60e43c7b1e4de85a5348f4bcc47b7",
          "body": "# [2.6.0-next.10](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.9...v2.6.0-next.10) (2026-07-11)\n\n### Bug Fixes\n\n* **quality:** Pin SDK version and add token validation (LOW priority) ([cbd1579](https://github.com/inneropen/marvin-cli/commit/cbd157941119c4fbed3ad604d4a51a41fa804fc9)), \n[…]\ninneropen/marvin-cli/issues/11) [#12](https://github.com/inneropen/marvin-cli/issues/12) [#4](https://github.com/inneropen/marvin-cli/issues/4) [#13](https://github.com/inneropen/marvin-cli/issues/13)",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.10 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-11T17:04:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5af2dcd1079d35fe9dddacc8b5b214d81e9b9ec9",
          "body": "Complete documentation of security audit and remediation:\n- 17 issues identified (4 CRITICAL, 6 MEDIUM, 7 LOW)\n- 15 issues fixed (88% resolution rate)\n- Risk level: HIGH → LOW\n- Production ready\n\nFiles changed: 21 (7 new docs, 14 modified source)\nLines: +2,200 added, -70 removed\n\nExecutive summary for stakeholders and deployment checklist.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: Add comprehensive security audit summary",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-11T17:04:32Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "cbd157941119c4fbed3ad604d4a51a41fa804fc9",
          "body": "LOW-priority quality improvements:\n\nIssue #16: SDK dependency pinned to specific version\n- Changed from \"develop\" branch to \"^2.0.1\"\n- Provides supply chain predictability\n- Allows semver patch/minor updates\n- Works with package-lock.json\n\nIssue #17: Login token validated before saving\n- Calls clien\n[…]\n test coverage: recommendations provided\n\nFiles changed: 3 (2 modified, 1 new doc)\nResolution: 15/17 issues fixed (88%)\nFinal risk level: LOW\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(quality): Pin SDK version and add token validation (LOW priority)",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-11T17:00:25Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "00ab45756a53bdabe91a22813402dca076834d1c",
          "body": "# [2.6.0-next.9](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.8...v2.6.0-next.9) (2026-07-11)\n\n### Bug Fixes\n\n* **security:** Add input validation and fix error handling (MEDIUM priority) ([f1cc4d6](https://github.com/inneropen/marvin-cli/commit/f1cc4d6c5c44e19047d95743ca11c80a2c3b863d))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.9 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-11T16:54:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f1cc4d6c5c44e19047d95743ca11c80a2c3b863d",
          "body": "…iority)\n\nMEDIUM-priority security improvements addressing 6 vulnerabilities:\n\n1. Path validation on --file option\n   - Validate file exists and is not a directory\n   - Warn when reading from sensitive paths (SSH keys, credentials)\n   - Prevent path traversal in automation scenarios\n\n2. Input valida\n[…]\nNew utilities:\n- src/shared/validation.ts - Comprehensive validation functions\n\nFiles changed: 9 (2 new, 7 modified)\nRisk level: MEDIUM → LOW\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(security): Add input validation and fix error handling (MEDIUM pr…",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-11T16:54:03Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "06199021f39389d7cf131f8202a307efa08beb27",
          "body": "# [2.6.0-next.8](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.7...v2.6.0-next.8) (2026-07-11)\n\n### Bug Fixes\n\n* **security:** Eliminate critical credential exposure vulnerabilities ([a96a86a](https://github.com/inneropen/marvin-cli/commit/a96a86a4c7f4238828a14b6cbe05160daf5e0543)), closes [HI#priority](https://github.com/HI/issues/priority)",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.8 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-11T16:46:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a96a86a4c7f4238828a14b6cbe05160daf5e0543",
          "body": "CRITICAL security fixes addressing 4 HIGH-priority vulnerabilities:\n\n1. Password visibility in shell history\n   - Removed password CLI flags from change-password command\n   - Implemented secure interactive prompts with hidden input\n   - Added password confirmation to prevent typos\n\n2. Token exposure\n[…]\nactively (use --from-stdin for scripts)\n\nFiles changed: 9 (3 new, 6 modified)\nRisk level: HIGH → LOW\nSecurity posture: Significantly improved\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(security): Eliminate critical credential exposure vulnerabilities",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-11T16:45:40Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "abb1d9281dedeac652d84c8bf7c57286be6135df",
          "body": "## [2.6.1](https://github.com/inneropen/marvin-cli/compare/v2.6.0...v2.6.1) (2026-07-10)\n\n### Bug Fixes\n\n* Use PUBLISHING_TOKEN parameter name ([0acb56e](https://github.com/inneropen/marvin-cli/commit/0acb56e76a10b7b88f62f8324ef2e49f85849210))",
          "is_bot": false,
          "headline": "chore(release): 2.6.1 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-10T17:23:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0acb56e76a10b7b88f62f8324ef2e49f85849210",
          "body": "Rename from GITHUB_TOKEN to PUBLISHING_TOKEN to avoid collision\nwith GitHub's reserved system token name.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Use PUBLISHING_TOKEN parameter name",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-10T17:22:53Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "87259d5be9a0644ee7dbab67839e592f93fba120",
          "body": "# [2.6.0-next.7](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.6...v2.6.0-next.7) (2026-07-10)\n\n### Bug Fixes\n\n* Use PUBLISHING_TOKEN parameter name ([1596319](https://github.com/inneropen/marvin-cli/commit/15963195450f0f2658d169abc55b44b10dc16db5))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.7 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-10T17:22:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "15963195450f0f2658d169abc55b44b10dc16db5",
          "body": "Rename from GITHUB_TOKEN to PUBLISHING_TOKEN to avoid collision\nwith GitHub's reserved system token name.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Use PUBLISHING_TOKEN parameter name",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-10T17:22:17Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "87a4827f5d06922aa5889dea743831b681f05005",
          "body": "# [2.6.0-next.6](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.5...v2.6.0-next.6) (2026-07-10)\n\n### Bug Fixes\n\n* Map INNEROPEN_IO_TOKEN to GITHUB_TOKEN parameter ([7f96be8](https://github.com/inneropen/marvin-cli/commit/7f96be883566fa00ee995e02b2846d5fa0825679))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.6 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-10T17:17:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1cf235098decf42888c83b041c253c67229ed5c4",
          "body": "# [2.6.0](https://github.com/inneropen/marvin-cli/compare/v2.5.7...v2.6.0) (2026-07-10)\n\n### Bug Fixes\n\n* Add npm-production environment to release workflow ([c00de05](https://github.com/inneropen/marvin-cli/commit/c00de050fc79ae71d888a7c97fb1c58d1a180a96))\n* Adding deps to develop ([8a4fb5e](https:\n[…]\narvin-cli/commit/5f199faba7dc72d8caa2800fba75f7200ade118b))\n* Apply error handling to auth commands ([ce20a21](https://github.com/inneropen/marvin-cli/commit/ce20a2194f80117b002162912289e3b84f778ca8))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-10T17:16:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7f96be883566fa00ee995e02b2846d5fa0825679",
          "body": "The reusable workflow expects GITHUB_TOKEN as a secret parameter.\nExplicitly map the org-level INNEROPEN_IO_TOKEN to this parameter\ninstead of using secrets: inherit.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Map INNEROPEN_IO_TOKEN to GITHUB_TOKEN parameter",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-10T17:16:31Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "954a7d54d5169ffd89d6049b6a2977b5a60b7163",
          "body": "# [2.6.0-next.5](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.4...v2.6.0-next.5) (2026-07-10)\n\n### Features\n\n* Add automatic publishing to inneropen.io ([4170b64](https://github.com/inneropen/marvin-cli/commit/4170b6479a97daa1bd9a83145df3e7f2ce205c76))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.5 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-10T16:53:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4170b6479a97daa1bd9a83145df3e7f2ce205c76",
          "body": "Add GitHub Actions workflow to automatically publish releases to the\nInnerOpen engineering site.\n\nWhen a release is published, this workflow:\n- Calls the reusable workflow in inneropen.io\n- Generates a markdown update with release details\n- Opens a pull request for human review\n- Labels it as automa\n[…]\nediting before publication and prevents duplicate posts\nfor the same version.\n\nRequires org-level secret INNEROPEN_IO_TOKEN to be configured.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Add automatic publishing to inneropen.io",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-10T16:52:42Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c1679c213ce664066873cfbd4005951901104437",
          "body": "- Add mkdocs.yml with Material theme configuration\n- Add 38 documentation files across 6 sections\n- Add Getting Started guides (installation, quickstart, configuration)\n- Add 20 command reference pages (Publishing, Platform, Admin APIs)\n- Add usage guides (filtering, scripting, pipelines, CI/CD)\n- A\n[…]\nping)\n- Add GitHub Actions workflow for auto-deployment\n- Add requirements.txt for mkdocs dependencies\n- Update package.json with docs scripts\n\nTotal: 38 Markdown files with complete CLI documentation",
          "is_bot": false,
          "headline": "docs: Add comprehensive mkdocs documentation structure",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-10T14:27:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9776a0f2302d7572b47cd018f95cedd3b10bdfdc",
          "body": null,
          "is_bot": false,
          "headline": "docs: Add comprehensive mkdocs documentation structure",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-10T14:21:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5a4e3d3959df4ef20b77f59d2ccbf67a28433cf8",
          "body": "# [2.6.0-next.4](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.3...v2.6.0-next.4) (2026-07-10)\n\n### Bug Fixes\n\n* Adding deps to develop ([8a4fb5e](https://github.com/inneropen/marvin-cli/commit/8a4fb5ed2c35d568e4fc50b2720ab2375b865546))\n\n### Features\n\n* Add Forms module to Platform CLI\n[…]\nli/commit/d5f52bad7ec1766ef3531f6026f03945a24bb449))\n* Add scheduled-tasks commands to platform CLI ([269523b](https://github.com/inneropen/marvin-cli/commit/269523b259e6161a5df11d755194792b6dc46fa5))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.4 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-10T02:48:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8a4fb5ed2c35d568e4fc50b2720ab2375b865546",
          "body": null,
          "is_bot": false,
          "headline": "fix: Adding deps to develop",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-10T02:47:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d5f52bad7ec1766ef3531f6026f03945a24bb449",
          "body": "- Implement forms CRUD commands (list, get, create, update, delete)\n- Add submissions command to view form submissions\n- Add Publishing API commands (get-published, submit)\n- Follow existing patterns from entries/collections modules",
          "is_bot": false,
          "headline": "feat: Add Forms module to Platform CLI",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-10T02:41:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "269523b259e6161a5df11d755194792b6dc46fa5",
          "body": "- Implement 9 commands: list, get, create, update, delete, run, history, types, stats\n- Support filtering (enabled-only, failed-only)\n- Add quick enable/disable shortcuts\n- Support all output formats (table, json, yaml, csv)\n\nPart of scheduled tasks feature - CLI integration",
          "is_bot": false,
          "headline": "feat: Add scheduled-tasks commands to platform CLI",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-10T02:01:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "85908be53637a26f0ddd9ea5b220dece4746a678",
          "body": "# [2.6.0-next.3](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.2...v2.6.0-next.3) (2026-07-10)\n\n### Bug Fixes\n\n* Update email templates commands to match CLI patterns and fix type errors ([0153166](https://github.com/inneropen/marvin-cli/commit/01531668691cc60f1610c728fe46c3594b79ca96))\n\n### Features\n\n* Add email templates commands to marvin-cli ([709097b](https://github.com/inneropen/marvin-cli/commit/709097b96aa8c38f6bfd4881286fb5e646a7c65e))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.3 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-10T00:52:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "01531668691cc60f1610c728fe46c3594b79ca96",
          "body": "…pe errors",
          "is_bot": false,
          "headline": "fix: Update email templates commands to match CLI patterns and fix ty…",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-10T00:52:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "709097b96aa8c38f6bfd4881286fb5e646a7c65e",
          "body": "Add complete email template management commands to the CLI platform group.\n\nCommands:\n- marvin platform email-templates list - List all templates\n- marvin platform email-templates get <id> - Get template details\n- marvin platform email-templates create - Create new template\n- marvin platform email-t\n[…]\nated into platform command group alongside other workspace resources.\nNote: CLI has pre-existing TypeScript errors to be resolved separately.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Add email templates commands to marvin-cli",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-10T00:40:44Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "532b0ce85e1df68f9e5b084061cb7fbd53abbb22",
          "body": "# [2.6.0-next.2](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.1...v2.6.0-next.2) (2026-07-09)\n\n### Bug Fixes\n\n* Call toJSON() on Collection objects before rendering ([c0942e6](https://github.com/inneropen/marvin-cli/commit/c0942e6d7d5ad56dda074c0bc411bebbea2cc6e7))\n* Complete error ha\n[…]\narvin-cli/commit/728fca38ff97685bd0ebf38506d07bee1d1416ec))\n* Apply error handling to auth commands ([ce20a21](https://github.com/inneropen/marvin-cli/commit/ce20a2194f80117b002162912289e3b84f778ca8))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.2 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-09T02:28:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "42fc506af94f33baf9422c1101f38600e1ab0ff8",
          "body": "The dependency value should just be \"develop\", not the full package@tag.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Use correct dist-tag format in CI workflows",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-09T02:28:17Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "eeb2909c539cb1386bf3b3cad271819c079a3ad6",
          "body": "Use full package@tag format: @inneropen/marvin-sdk@develop\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Correct SDK dependency format in CI workflows",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-09T02:27:58Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "f9e7c152d619a8c624fa0714ffc8f3cd22d6b87e",
          "body": "Replace file dependency with @develop dist-tag in CI workflows.\nThe file:../marvin-sdk dependency only works locally where both\nrepos are checked out side-by-side.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Update GitHub Actions workflows to use published SDK",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-09T02:27:08Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "91da5ea5a129b30c2b2f482c28a3de313a3661bf",
          "body": "- Import Marvin error classes from main SDK package instead of core/errors\n- Fix collection entries command to use proper column spec format\n- Display order, ID, title, status, and published date for entries\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Update error imports and collection entries display",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-09T02:22:01Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "728fca38ff97685bd0ebf38506d07bee1d1416ec",
          "body": "Display the order field as the first column when listing entries in a\ncollection, showing the sort_order from the collection relationship.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Add order column to collection-entries command output",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-09T02:10:08Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "1f630939e343535501162d87c52cb3d8376c4e58",
          "body": "Add CLI commands:\n- marvin collections entries <id> - list entries in order\n- marvin collections reorder <id> - bulk reorder entries\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Add collection entries and reorder commands",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-09T01:32:21Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c0942e6d7d5ad56dda074c0bc411bebbea2cc6e7",
          "body": "Fixed issue where 'marvin publish collection <slug>' was returning\nthe full Collection class with private MarvinHttpClient instead of\njust the collection data.\n\nChanges:\n- Call toJSON() on Collection objects before rendering\n- Applied error handler to all publish commands\n- Collections, assets, and resources now properly serialize\n\nBefore: Returns Collection { http: MarvinHttpClient {...}, ... }\nAfter: Returns clean JSON data object\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Call toJSON() on Collection objects before rendering",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-09T00:19:29Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "709ebce160f8af887e022f940ee18244d5749d4f",
          "body": "Replaced remaining console.error calls with handleCommandError\nfor consistent error messaging.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Complete error handling migration in auth commands",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-09T00:11:24Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ce20a2194f80117b002162912289e3b84f778ca8",
          "body": "Updated login and logout commands to use the new error handler\nfor consistent, helpful error messages across all CLI commands.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Apply error handling to auth commands",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-09T00:11:15Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b0f154b13c04430609df410821b9c481dbd5dc65",
          "body": "Created error-handler utility module with:\n- Specific handling for MarvinAuthError (401/403)\n- MarvinApiError with status code-based suggestions\n- MarvinConfigError for missing configuration\n- MarvinValidationError for input validation\n- Helpful suggestions for common errors:\n  * 401: Login expired \n[…]\nes.\nErrors now show:\n  ✗ Error Type (Status Code)\n  Helpful error message\n  Suggestions for resolution\n\nSupports DEBUG mode for stack traces.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Add comprehensive error handling for CLI commands",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-09T00:10:50Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c53b38ad8eca2a9d0313467919b7ae737225bd6c",
          "body": "- Created event-log command group with 4 subcommands:\n  - list: Query events with filtering by type, entity, user, date range\n  - get: Get single event by ID\n  - entity: Get complete event history for an entity\n  - user: Get activity history for a user\n- Added alias \"events\" for \"event-log\"\n- Integrated with EventLogModule from SDK\n- Full support for all filter parameters and pagination\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Add event-log commands to Platform CLI",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T21:23:17Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "db2b54b600df8ba9d2627fef2e0b8a059b85ec36",
          "body": "Changed @inneropen/marvin-sdk dependency from pinned version\nto 'develop' tag to automatically track latest develop branch.\n\nThis ensures CLI always uses the latest SDK features from develop.",
          "is_bot": false,
          "headline": "chore: Update SDK dependency to use @develop tag",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T19:02:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "efed8ab053f716e6e710d2d7c670f18ba0d82006",
          "body": "Highlights the ability to create invitation tokens with specific workspace roles (VIEWER, AUTHOR, EDITOR, ADMIN, OWNER) using the --role parameter.",
          "is_bot": false,
          "headline": "docs: Add workspace roles feature to README",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T18:44:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cb0357aa32c6840a429136133916bfbf1444fbc2",
          "body": "Updated to latest SDK with workspace role support.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: Update SDK to 1.11.0-next.1 (develop tag)",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T17:06:56Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "74cf439242229959794d276734832fe33c770c58",
          "body": "Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: Remove old publish workflow (replaced by semantic-release)",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T16:52:57Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "46f8678eeef4e597934eacb4cbeaffd432ce317c",
          "body": "# [2.6.0-next.1](https://github.com/inneropen/marvin-cli/compare/v2.5.7...v2.6.0-next.1) (2026-07-08)\n\n### Bug Fixes\n\n* Add npm-production environment to release workflow ([c00de05](https://github.com/inneropen/marvin-cli/commit/c00de050fc79ae71d888a7c97fb1c58d1a180a96))\n* Update Node.js version to \n[…]\n/commit/d7247ed92540196c9b529f08ca93b96ad333229f))\n\n### Features\n\n* Add semantic-release automation ([5f199fa](https://github.com/inneropen/marvin-cli/commit/5f199faba7dc72d8caa2800fba75f7200ade118b))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.1 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-08T16:50:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c00de050fc79ae71d888a7c97fb1c58d1a180a96",
          "body": "Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Add npm-production environment to release workflow",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T16:50:16Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d7247ed92540196c9b529f08ca93b96ad333229f",
          "body": "Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Update Node.js version to 22.14 in release workflow",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T16:45:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5f199faba7dc72d8caa2800fba75f7200ade118b",
          "body": "- Automatic versioning based on conventional commits\n- Publish @next tag from develop branch\n- Publish stable releases from main branch\n- Auto-generate CHANGELOG.md\n- Create GitHub releases with release notes\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Add semantic-release automation",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T16:42:20Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "f1b9035b83fc9db4e06948f0407b6c79ce7b4e52",
          "body": null,
          "is_bot": false,
          "headline": "2.5.7",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T16:37:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4cfa4dcef7d0fbfa811728a5cafce7047c24ffb6",
          "body": "Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: Update SDK to 1.10.6 for workspace role support",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T16:36:26Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "0f3a7bb71081ab69a428944c1df6b197ed5935d8",
          "body": "- Added --role option to 'platform invites invite' command\n- Supports all workspace roles: VIEWER, AUTHOR, EDITOR, ADMIN, OWNER\n- Display workspace role in list and create outputs\n- Default role is EDITOR\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Add --role option to invites command",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T16:29:04Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "adff6333cf952224c1caa331bce1addec31378d2",
          "body": "Updates SDK to include fixed auth endpoints and registration schema.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: Bump to 2.5.6 with SDK 1.10.4",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T15:11:32Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "4e4ab7bdf3e11e033f76b50efd5bca5497c769ed",
          "body": "Updates SDK to fix invitation URL generation (now uses frontend URL).\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: Bump to 2.5.5 with SDK 1.10.3",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T14:57:11Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "057b4f77806a2e6d9e4466c865a29e733ec7775f",
          "body": "Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: Bump to 2.5.4",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T14:48:40Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ded989ce7e4ac402f612c40b00fc9b4e754d6a1b",
          "body": "Fixes 'Unknown' creation date by checking both camelCase and snake_case\nfield names from API response.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Handle both createdAt and created_at in invite token display",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T14:48:30Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ecd671ab5d9e63c635dc097cb8d57728f241f2ae",
          "body": "Updates to marvin-sdk@next (v1.10.2) which includes invites API.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: Bump to 2.5.3 for SDK 1.10.2 compatibility",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T14:41:09Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "579fa1687c3d9ca97c25803ec7d3398eade3d471",
          "body": "New commands under 'marvin platform invites':\n- list - Show all invitation tokens\n- invite [--email] - Create token and optionally send email\n  - Without --email: just shows the link to copy/paste\n  - With --email: sends email and shows link as backup\n- link --token - Generate URL from existing toke\n[…]\nexample.com  # Send email\n  marvin platform invites list\n  marvin platform invites revoke --id <id> --yes\n\nTested and working with local API.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Add platform invites CLI commands",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T14:27:41Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "537fcdbd312cce430b85825ed86d4786f22a14b1",
          "body": "New commands under 'marvin platform invites':\n- list - Show all invitation tokens\n- create - Create a new token (shows link)\n- invite [--email] - Create token and optionally send email\n  - Without --email: just shows the link to copy/paste\n  - With --email: sends email and shows link as backup\n- lin\n[…]\nlatform invites invite --email user@example.com  # Send email\n  marvin platform invites list\n  marvin platform invites revoke --id <id> --yes\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Add platform invites CLI commands",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T14:13:39Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6c05ab29291aa4fe89b4c0349aabdfec231a9d61",
          "body": null,
          "is_bot": false,
          "headline": "Merge main into develop - take main version for conflicts",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T08:16:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7ce90ef44a76e9c18892945926afbc7035d090b3",
          "body": null,
          "is_bot": false,
          "headline": "chore: Bump version to 2.2.2",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T04:31:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 26,
      "commits_last_year": 148,
      "latest_release_at": "2026-07-19T00:30:39Z",
      "latest_release_tag": "v2.7.0",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 3,
      "days_since_latest_release": 5,
      "mean_days_between_releases": 0.5
    },
    "community": {
      "has_readme": true,
      "has_license": false,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 62,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "@inneropen/marvin-cli",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "marvin",
            "cms",
            "cli",
            "publishing",
            "headless-cms"
          ],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@inneropen/marvin-cli",
          "is_deprecated": false,
          "latest_version": "2.7.0",
          "repository_url": "https://github.com/inneropen/marvin-cli",
          "versions_count": 47,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 6692,
          "first_published_at": "2026-07-07T00:31:28.888000Z",
          "latest_published_at": "2026-07-19T00:30:38.987000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 5
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 0,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0,
        "collected_at": null
      },
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "tsconfig.json"
      ],
      "toolchain_manifests": [],
      "largest_source_bytes": 13750,
      "source_files_sampled": 67,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "package.json",
        "requirements.txt"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 5,
        "malicious_count": 0,
        "assessed_package": "npm:@inneropen/marvin-cli@2.7.0",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm",
        "pypi"
      ],
      "dependencies": [
        {
          "name": "@inneropen/marvin-sdk",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^3.2.0-next.23"
        },
        {
          "name": "chalk",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^5.6.2"
        },
        {
          "name": "commander",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^12.1.0"
        },
        {
          "name": "dotenv",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^16.4.5"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 1,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "semantic-release-bot",
          "commits": 26,
          "avatar_url": "https://avatars.githubusercontent.com/u/32174276?v=4"
        },
        {
          "type": "User",
          "login": "jmashburn",
          "commits": 7,
          "avatar_url": "https://avatars.githubusercontent.com/u/231223?v=4"
        }
      ],
      "contributors_sampled": 2,
      "top_contributor_share": 0.788
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "docs.yml",
        "publish-release.yml",
        "release.yml",
        "test.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "package-lock.json"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 1,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "1 out of 1 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/2 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 6,
            "reason": "project has 2 contributing companies or organizations -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 0,
            "reason": "license file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 1,
            "reason": "dependency not pinned by hash detected -- score normalized to 1",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 10,
            "reason": "0 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "b3def4969ef40e69427fc2377777bb6bb4e24d60",
        "ran_at": "2026-07-24T13:15:21Z",
        "aggregate_score": 4.1,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": null,
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-07-19T00:30:05Z",
      "ci_last_conclusion": null,
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/InnerOpen/marvin-cli",
    "host": "github.com",
    "name": "marvin-cli",
    "owner": "InnerOpen"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 58,
      "inputs": {
        "security": 53,
        "vitality": 74,
        "community": 32,
        "governance": 54,
        "engineering": 71
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 74,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 56,
            "inputs": {
              "commits_last_year": 148,
              "human_commit_share": 1,
              "days_since_last_push": 0,
              "active_weeks_last_year": 3
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "3/52 weeks with commits",
                "points": 2.1,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 3
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "148 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 148
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "releases_count": 26,
              "latest_release_tag": "v2.7.0",
              "releases_from_tags": false,
              "days_since_latest_release": 5,
              "mean_days_between_releases": 0.5
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "26 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 26
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~0.5 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 0.5
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 32,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 0,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "at_risk",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 45,
            "inputs": {
              "has_readme": true,
              "has_license": false,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "no license file detected",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "license_absent",
                    "params": {}
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 64,
            "inputs": {
              "packages": [
                "@inneropen/marvin-cli"
              ],
              "dependents": null,
              "ecosystems": "npm",
              "total_downloads": null,
              "monthly_downloads": 6692
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "6,692 downloads/month across npm",
                "points": 51,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 6692,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 54,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 22,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 2,
              "top_contributor_share": 0.788
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 79% of commits",
                "points": 4.8,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 79
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "2 contributors",
                "points": 2.7,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 72,
            "inputs": {
              "merged_prs": 1,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "1/1 decided PRs merged",
                "points": 38.2,
                "status": "met",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 1,
                      "decided": 1
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/2 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "at_risk",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 37,
            "inputs": {
              "followers": 0,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "InnerOpen",
              "public_repos": 8,
              "account_age_days": 31
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "0 followers of InnerOpen",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 0,
                      "login": "InnerOpen"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "8 public repos, account ~0 yr old",
                "points": 7.1,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 8
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 0
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "@inneropen/marvin-cli"
              ],
              "ecosystems": "npm",
              "any_deprecated": false,
              "min_days_since_publish": 5
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 5 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "47 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 47
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 71,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "4 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "1 out of 1 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "good",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 53,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 41,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 4.1
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 0.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "1 out of 1 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/2 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 1",
                "points": 0.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "0 existing vulnerabilities detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:@inneropen/marvin-cli@2.7.0 runtime dependency closure — what installing the published package pulls in — 5 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "npm:@inneropen/marvin-cli@2.7.0",
                  "assessed": 5
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 0,
              "affected_packages": 0,
              "assessed_packages": 5,
              "unassessed_packages": 0,
              "affected_by_severity": "none",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "no indirect dependency carries a known advisory",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "no_indirect_advisories",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 5,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 3
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 55,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.94,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "94 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 94,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 54,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "package-lock.json"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [
                "tsconfig.json"
              ],
              "agent_commit_share": 0.47,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "47 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 47,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 1",
                "points": 1,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "TypeScript",
              "largest_source_bytes": 13750,
              "source_files_sampled": 67,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "TypeScript (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "TypeScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/67 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 67,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-24T13:15:37.615701Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/i/InnerOpen/marvin-cli.svg",
  "full_name": "InnerOpen/marvin-cli",
  "license_state": "absent",
  "license_spdx": null
}
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — npm.
Software health index

Score profile

Ownership

Package ecosystems

Metrics by category

Key facts

Data collection warnings

More detail

Related records
