Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-27 20:39 UTC
InsForge / insta-cli

TypeScriptApache-2.0★ 1 star⑂ 0 forkssince Jun 2026View on GitHub ↗
InsForge/insta-cli holds a health index of 58 out of 100, placing it in the Moderate band. It scores highest on AI Readiness (74/100) and lowest on Community & Adoption (32/100). It was last updated today. A single contributor accounts for most of its recent work.
overall / 100
Moderate
Software health index

Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile

Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership

InsForgeOrganization
184 followers29 public repossince Feb 2025
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Package ecosystems

Registry	Package	Version	Downloads / mo	Versions	Last publish	Tags
npm	insta	0.0.22	2,912	21	6 days ago	insta insforge cli backend baas platform
Metrics by category

Vitality

Is the project alive — is code being written and are releases shipping?
70Good · 22% of overall
Development activity

57Moderate
How it's scored
36/36	Push recency — last push 0 days ago
2.8/36	Commit cadence — 4/52 weeks with commits
18/18	Commit volume — 114 commits in the last year
0/10	OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully
Inputs used
commits_last_year	114
human_commit_share	1
days_since_last_push	0
active_weeks_last_year	4
Release discipline

90Excellent
How it's scored
27/27	Ships releases — 20 releases published
36/36	Release recency — latest release 6 days ago
27/27	Release cadence — a release every ~0.7 days
0/10	OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases.
Inputs used
releases_count	20
latest_release_tag	v0.0.22
releases_from_tags	no
days_since_latest_release	6
mean_days_between_releases	0.7
Community & Adoption

Does the project have users, downloads, attention, and a welcoming setup for contributors?
32At risk · 18% of overall
Popularity & adoption

1Critical
How it's scored
0/60	Stars — 1 stars
0/25	Forks — 0 forks
0/15	Watchers — 0 watchers
Inputs used
forks	0
stars	1
watchers	0
growth_state	unverified
growth_factor_pct	100
growth_unverified_reason	no_history
Community health

50Moderate
How it's scored
22.5/22.5	README
22.5/22.5	License — recognized license (Apache-2.0)
0/18	CONTRIBUTING guide
0/13.5	Code of conduct
0/7.2	Issue template
0/6.3	PR template
Inputs used
has_readme	yes
has_license	yes
has_contributing	no
has_issue_template	no
has_code_of_conduct	no
has_pull_request_template	no
Ecosystem adoption (downloads)

58Moderate
How it's scored
46.2/80	Monthly downloads — 2,912 downloads/month across npm
0/20	Registry dependents — not reported by this ecosystem
Inputs used
packages	insta
dependents	—
ecosystems	npm
total_downloads	—
monthly_downloads	2,912
Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.
Sustainability & Governance

Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
68Moderate · 24% of overall
Maintainer resilience (bus factor)

28Critical
How it's scored
9/54	Bus factor — 1 contributor(s) cover half of all commits
8.5/22.5	Commit distribution — top contributor authored 62% of commits
4.1/13.5	Contributor breadth — 3 contributors
6/10	OpenSSF Scorecard: Contributors — project has 2 contributing companies or organizations -- score normalized to 6
Inputs used
bus_factor	1
contributors_sampled	3
top_contributor_share	0.623
Issue & PR responsiveness

100Excellent
How it's scored
0/46.8	Issue resolution — no issues or no data
38.2/38.3	PR acceptance — 64/64 decided PRs merged
15/15	OpenSSF Scorecard: Code-Review — all changesets reviewed
Inputs used
merged_prs	64
open_issues	0
closed_issues	0
issue_closed_ratio	—
closed_unmerged_prs	0
Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.
Ownership & stewardship

60Moderate
How it's scored
30/30	Ownership backing — organization-owned
0/20	Verified domain
16.3/25	Owner reach — 184 followers of InsForge
13.7/25	Track record — 29 public repos, account ~1 yr old
Inputs used
followers	184
owner_type	Organization
is_verified	—
owner_login	InsForge
public_repos	29
account_age_days	533
Package maintenance

100Excellent
How it's scored
25/25	Published & resolvable — 1 package(s) on npm
35/35	Publish recency — latest publish 6 days ago
20/20	Version history — 21 published versions
20/20	Not deprecated — active, not deprecated or yanked
Inputs used
packages	insta
ecosystems	npm
any_deprecated	no
min_days_since_publish	6
Engineering Quality

Are baseline engineering and documentation practices in place?
57Moderate · 20% of overall
Engineering practices

68Moderate
How it's scored
24/24	CI workflows — 2 workflow(s)
24/24	Tests present
0/16	Linter config
0/9.6	Pre-commit hooks
0/6.4	.editorconfig
20/20	OpenSSF Scorecard: CI-Tests — 15 out of 15 merged PRs checked by a CI test -- score normalized to 10
Inputs used
has_ci	yes
has_tests	yes
has_editorconfig	no
has_linter_config	no
has_precommit_config	no
Documentation

40At risk
How it's scored
30/30	README
0/25	Documentation directory
0/15	Documentation / homepage site
0/10	Repository description
0/10	Topics
10/10	Wiki
Inputs used
topics	—
has_wiki	yes
homepage	—
has_readme	yes
has_docs_dir	no
has_description	no
Security

Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
54Moderate · 16% of overall
Security posture

42At risk
How it's scored
7.5/7.5	Binary-Artifacts — no binaries found in the repo
0/7.5	Branch-Protection — no data
2.5/2.5	CI-Tests — 15 out of 15 merged PRs checked by a CI test -- score normalized to 10
0/2.5	CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
7.5/7.5	Code-Review — all changesets reviewed
1.5/2.5	Contributors — project has 2 contributing companies or organizations -- score normalized to 6
10/10	Dangerous-Workflow — no dangerous workflow patterns detected
0/7.5	Dependency-Update-Tool — no update tool detected
0/5	Fuzzing — project is not fuzzed
2.5/2.5	License — license file detected
0/7.5	Maintained — project was created within the last 90 days. Please review its contents carefully
5/5	Packaging — packaging workflow detected
1.5/5	Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 3
0/5	SAST — SAST tool is not run on all commits -- score normalized to 0
0/5	Security-Policy — security policy file not detected
0/7.5	Signed-Releases — Project has not signed or included provenance with any releases.
0/7.5	Token-Permissions — detected GitHub workflow tokens with excessive permissions
3/7.5	Vulnerabilities — 6 existing vulnerabilities detected
Inputs used
source	openssf_scorecard
checks_evaluated	17
scorecard_version	v5.5.0
checks_inconclusive	1
scorecard_aggregate	4.2
Excluded from scoring (no data or not applicable): branch_protection. Remaining weights renormalized.
Dependency advisories

100Excellent
How it's scored
35/35	Direct dependencies free of known advisories — no direct dependency carries a known advisory
25/25	Indirect dependencies free of known advisories — no indirect dependency carries a known advisory
0/40	No advisories left outstanding — no advisory carries a publication date
Inputs used
source	osv
advisories	0
affected_packages	0
assessed_packages	1
unassessed_packages	0
affected_by_severity	none
direct_affected_packages	0
Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:insta@0.0.22 runtime dependency closure — what installing the published package pulls in — 1 packages. Reachability is not analyzed.
AI Readiness

How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
74Good · 0% of overall
Agent context & guidance

85Excellent
How it's scored
45/45	Agent instructions — AGENTS.md, CLAUDE.md
0/15	Machine-readable docs (llms.txt)
40/40	Legible commit history — 92 of 100 human commits state their intent (structured subject or explanatory body)
Inputs used
has_llms_txt	no
legible_history_share	0.92
agent_instruction_files	AGENTS.md, CLAUDE.md
agent_instruction_max_bytes	1,248
Verify loop (build / test / typecheck)

56Moderate
How it's scored
0/18	One-command bootstrap
22/22	Automated tests
0/11	Lint / format config
11/11	Static type checking — tsconfig.json
10/10	Reproducible environment — lockfile
10/10	Demonstrated agent practice — 62 of the last 100 commits agent-authored or agent-credited
0/8	Automated maintenance — no automated dependency updates observed
3/10	OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 3
Inputs used
has_nix	no
has_tests	yes
lockfiles	package-lock.json
has_dockerfile	no
typed_language	yes
bootstrap_files	—
has_devcontainer	no
has_linter_config	no
typecheck_configs	tsconfig.json
agent_commit_share	0.62
toolchain_manifests	—
dependency_bot_commit_share	0
Code legibility for models

100Excellent
How it's scored
45/45	Type-checkable code — TypeScript (statically typed)
55/55	Manageable file sizes — 0/50 source files over 60KB
Inputs used
primary_language	TypeScript
largest_source_bytes	16,790
source_files_sampled	50
oversized_source_files	0
Key facts

1GitHub stars
3contributors
114commits, last 12 months
0days since last push
20releases
1bus factor
0open issues
npmpackage ecosystems
Data collection warnings

Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail

OpenSSF Scorecard 4.2 / 10
4.2aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-27 20:39 UTC
10	Binary-Artifacts	no binaries found in the repo
n/a	Branch-Protection	internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
10	CI-Tests	15 out of 15 merged PRs checked by a CI test -- score normalized to 10
0	CII-Best-Practices	no effort to earn an OpenSSF best practices badge detected
10	Code-Review	all changesets reviewed
6	Contributors	project has 2 contributing companies or organizations -- score normalized to 6
10	Dangerous-Workflow	no dangerous workflow patterns detected
0	Dependency-Update-Tool	no update tool detected
0	Fuzzing	project is not fuzzed
10	License	license file detected
0	Maintained	project was created within the last 90 days. Please review its contents carefully
10	Packaging	packaging workflow detected
3	Pinned-Dependencies	dependency not pinned by hash detected -- score normalized to 3
0	SAST	SAST tool is not run on all commits -- score normalized to 0
0	Security-Policy	security policy file not detected
0	Signed-Releases	Project has not signed or included provenance with any releases.
0	Token-Permissions	detected GitHub workflow tokens with excessive permissions
4	Vulnerabilities	6 existing vulnerabilities detected
Direct dependencies 1
Registry	Package	Version constraint	Manifest
npm	commander	`^12.1.0`	package.json
All dependencies not collected
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Dependency advisories 0
Installing npm:insta@0.0.22 pulls in 1 packages, direct and transitive: 0 carry known advisories, of which 0 are direct dependencies.
No known advisories affect the assessed dependencies.
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 308,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "Shell": 10291,
        "JavaScript": 16821,
        "TypeScript": 169762
      },
      "pushed_at": "2026-07-27T15:36:05Z",
      "created_at": "2026-06-29T02:55:47Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-25T11:01:14Z",
      "description": null,
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "main",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "TypeScript",
      "significant_languages": [
        "TypeScript"
      ]
    },
    "owner": {
      "blog": "https://insforge.dev",
      "name": "InsForge",
      "type": "Organization",
      "login": "InsForge",
      "company": null,
      "location": "United States of America",
      "followers": 184,
      "avatar_url": "https://avatars.githubusercontent.com/u/198419463?v=4",
      "created_at": "2025-02-09T04:44:27Z",
      "is_verified": null,
      "public_repos": 29,
      "account_age_days": 533
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.0.22",
          "kind": "patch",
          "published_at": "2026-07-21T01:53:33Z"
        },
        {
          "tag": "v0.0.21",
          "kind": "patch",
          "published_at": "2026-07-17T15:06:48Z"
        },
        {
          "tag": "v0.0.20",
          "kind": "patch",
          "published_at": "2026-07-17T00:39:05Z"
        },
        {
          "tag": "v0.0.19",
          "kind": "patch",
          "published_at": "2026-07-15T15:36:59Z"
        },
        {
          "tag": "v0.0.18",
          "kind": "patch",
          "published_at": "2026-07-15T14:50:53Z"
        },
        {
          "tag": "v0.0.17",
          "kind": "patch",
          "published_at": "2026-07-15T14:24:36Z"
        },
        {
          "tag": "v0.0.16",
          "kind": "patch",
          "published_at": "2026-07-15T14:13:01Z"
        },
        {
          "tag": "v0.0.15",
          "kind": "patch",
          "published_at": "2026-07-15T13:29:11Z"
        },
        {
          "tag": "v0.0.14",
          "kind": "patch",
          "published_at": "2026-07-15T09:25:02Z"
        },
        {
          "tag": "v0.0.13",
          "kind": "patch",
          "published_at": "2026-07-15T01:52:59Z"
        },
        {
          "tag": "v0.0.12",
          "kind": "patch",
          "published_at": "2026-07-15T01:42:35Z"
        },
        {
          "tag": "v0.0.11",
          "kind": "patch",
          "published_at": "2026-07-12T10:53:34Z"
        },
        {
          "tag": "v0.0.10",
          "kind": "patch",
          "published_at": "2026-07-12T10:26:49Z"
        },
        {
          "tag": "v0.0.9",
          "kind": "patch",
          "published_at": "2026-07-12T10:08:40Z"
        },
        {
          "tag": "v0.0.8",
          "kind": "patch",
          "published_at": "2026-07-12T10:00:59Z"
        },
        {
          "tag": "v0.0.7",
          "kind": "patch",
          "published_at": "2026-07-12T09:32:38Z"
        },
        {
          "tag": "v0.0.6",
          "kind": "patch",
          "published_at": "2026-07-09T01:01:30Z"
        },
        {
          "tag": "v0.0.5",
          "kind": "patch",
          "published_at": "2026-07-04T19:22:16Z"
        },
        {
          "tag": "v0.0.4",
          "kind": "patch",
          "published_at": "2026-07-04T04:52:38Z"
        },
        {
          "tag": "v0.0.3",
          "kind": "patch",
          "published_at": "2026-07-03T18:40:58Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "f2dac1ce558652668ab38716ce6b37fb2a13e4b5",
          "body": "fix(observe): no-op the Claude hook when .insta/observe/hook.js is absent",
          "is_bot": false,
          "headline": "Merge pull request #40 from InsForge/fix/observe-hook-guard",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-25T11:00:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "653c2425ddc0e3eeede5e72dbc2c4f1bf837b3ec",
          "body": "insta logs --deploy (compute deploy events)",
          "is_bot": false,
          "headline": "Merge pull request #64 from InsForge/feat/compute-deploy-events",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-24T21:32:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6fcfd0bb5ac85bcb3a275aaceae3cd676b21f1e6",
          "body": null,
          "is_bot": false,
          "headline": "feat(logs): --deploy flag to fetch compute deploy events",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-24T20:39:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "658aac3809d61b0c005ddffb37e3e6b71f531eff",
          "body": "feat: add service rename command",
          "is_bot": false,
          "headline": "Merge pull request #62 from InsForge/feat/service-rename",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-21T00:13:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "95d960e280c5c0c9522fc4399828e15678189c14",
          "body": null,
          "is_bot": false,
          "headline": "Merge origin/main into feat/service-rename",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-21T00:12:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "98fe669a0970381b0cac0f10485e30ebddd9a9ac",
          "body": "feat: services add --region + insta regions",
          "is_bot": false,
          "headline": "Merge pull request #61 from InsForge/devel",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-21T00:11:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "432213df06fdab4614b9cbf39e169f8394342956",
          "body": "…--port)\n\nBoth PRs extended 'services add': #61 added --region + client-side region\nguard; #63 (on main) added --image/--port + servicesAddRequestBody.\nResolved by folding region into servicesAddRequestBody and the servicesAdd\nvalidation/output; dropped the now-redundant buildAddServiceBody + its test,\nmoved region coverage into test/services.test.ts.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Merge origin/main into devel: unify services add (--region + --image/…",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-21T00:09:16Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "fea548ec70c1b6e8bbe1749913a6e3144c588d15",
          "body": "services add compute --image/--port (create-with-image CLI)",
          "is_bot": false,
          "headline": "Merge pull request #63 from InsForge/feat/compute-service-image",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-21T00:02:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cd3f5fe318faa93a88eecbb49583a13b1d3bb7d9",
          "body": "… list\n\nservices add <compute> <name> now accepts --image <url> and --port <n>,\nforwarded to POST /projects/:id/services as image/port. Both are rejected\nclient-side for non-compute types (mirrors the existing --public/storage-only\ncheck), throwing before any network/config access. Extracted\nservice\n[…]\ned without mocking the API client.\n\nservices list now shows the running image (and port, if any) on compute\nrows via a new serviceListLine helper, extracted for the same reason\n(mirrors billingLines).",
          "is_bot": false,
          "headline": "feat(services): --image/--port on services add; show running image in…",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-20T23:51:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c7c3e68e73b9b2020306c19a8fd4bc1c5132b0ba",
          "body": null,
          "is_bot": false,
          "headline": "feat(services): add rename command",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-20T23:12:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "59362f4812c4389a6dc6bb9066dcb6b274dc64a5",
          "body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(cli): validate services-add flags before network/project resolution",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-20T22:49:47Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "02aee9f783dc30f12b85fdbffa5d7ba2a2e8ee23",
          "body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): services add --region + insta regions command",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-20T22:43:15Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "257311d3ebe342350f67b539202cadab7f0ada75",
          "body": "bump version to 0.0.22",
          "is_bot": false,
          "headline": "Merge pull request #60 from InsForge/devel",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-17T22:44:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f10b20c73f2c3cdfb774a5d4d099833580192ea1",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.0.22",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-17T22:42:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "da9944f8ef38d195f8f826aea9b8f35056bcd43f",
          "body": "Secret ⇄ service binding (CLI)",
          "is_bot": false,
          "headline": "Merge pull request #59 from InsForge/feat/secret-service-binding",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-17T22:35:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eafb706a3d8ce641e62ee5ce60be1ed6ae2d920f",
          "body": "… secrets\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(secrets): --service on set; grouped list; secrets tree; services…",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-17T21:25:22Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "975e08079a71e5347a81c4f1ece0a275cd4d2223",
          "body": "Co-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "bump version to 0.0.21 (#58)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-17T15:05:56Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "61ae3ab4d86a8d52944ea359b476b3b5066296f4",
          "body": "…setup agent (#57)\n\n* feat(setup): register the insta-cloud remote MCP server during `insta setup agent`\n\nRailway-parity: after the user-global skill install, setup now also registers\nhttps://mcp.instacloud.com/mcp with Claude Code (--transport http --scope user),\nauthenticated by a durable insta_ A\n[…]\n only when the table is\nabsent; idempotent re-runs report already-configured.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(setup): register the insta-cloud remote MCP server during insta …",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-17T15:01:28Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "af36fa32ed2dcfb79947edaa75678c7b4720f987",
          "body": "bump version to 0.0.20",
          "is_bot": false,
          "headline": "Merge pull request #56 from InsForge/devel",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-17T00:36:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1d6c6324014756d5ff262a24d1944061f7cc4d5e",
          "body": null,
          "is_bot": false,
          "headline": "bump version to 0.0.20",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-17T00:30:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "26b590ff52266be3138432a5b9ff29df9ad19626",
          "body": "Branch-scoped services: --branch flags + insta branch merge",
          "is_bot": false,
          "headline": "Merge pull request #55 from InsForge/feat/branch-scoped-services",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-16T23:49:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8798a45e42f202e3ea7c13ef8bdf8c3d6e375233",
          "body": "- register --branch on compute start/stop/suspend/status (was consumed by\n  LifeOpts but never registered → \"unknown option\") and on services\n  scale/upgrade (now accept opts.branch ?? p.branch)\n- branchMerge: default target to opts.into ?? p.branch (drop hardcoded\n  'main'); guard the created/skipp\n[…]\nort q() from services.ts and reuse it in compute.ts\n\ntypecheck + build clean; 79 tests pass; --branch verified on compute + scale.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(cli): address PR #55 review feedback",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-16T23:48:17Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "814ed5166e9b1cea5f3a424af12515de3d2c64da",
          "body": "Resolve conflicts combining --branch/branch-merge with PR #54 (storage\n--public + services set-access):\n- servicesAdd carries both --branch and --public (POST body branch+public;\n  output shows branch + storage access label)\n- services add/list/remove keep --branch; add keeps --public; set-access\n  \n[…]\n public/private + stays branch-scoped\n- policy set description includes service.setAccess\n\ntypecheck + build clean; 79 tests pass.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Merge origin/main into feat/branch-scoped-services",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-16T23:44:00Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a686c857f134bf7a51a3f96d128fd58486d682a0",
          "body": "Structurally merges source's services into target (default: current\nbranch) via POST /projects/:id/branches/:branch/merge. Prints the\nplatform's per-item skip reason (exists|cap|secret-collision) instead\nof a generic message.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(branch): insta branch merge <source> --into <target>",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-16T22:47:51Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "223da153c9f8c26510693b45d9a34be388192840",
          "body": "…n current branch\n\nThreads --branch through `services add|list|remove` (default: current linked\nbranch), branch-scopes the GET /services list used by `services scale|upgrade`\nand by compute lifecycle (start/stop/suspend/status), so resolveServiceId /\nresolveComputeServiceId resolve against the right\n[…]\nnscoped list. deploy.ts already resolved its branch directly in the\nrequest body (no /services fetch to scope), so it's unchanged.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(services): --branch on add/list/remove; resolve compute/deploy o…",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-16T22:42:09Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9ad59d7c73962185f1e0f0459ea596715f8c88b1",
          "body": "feat(services): --public flag + services set-access command",
          "is_bot": false,
          "headline": "Merge pull request #54 from InsForge/feat/storage-public-bucket",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-16T18:40:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "855c81a9eb96a4d5f10091d9a8d3ad29320a8627",
          "body": "- `insta services add storage <name> --public` (storage only; rejected elsewhere)\n- `insta services set-access storage <name> public|private`\n- `services list` shows public/private for storage services\n- policy help lists the new service.setAccess action\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(services): --public on add + `services set-access` command",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-16T18:32:15Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "40dc5c7b0abfbbc62dfdfdf636d82beca2c491ba",
          "body": "…(#53)\n\nShips PR #52.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.0.19 (quiet per-project skill install in project create) …",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T15:36:07Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b6c23c7e30622fd786aa69b17ee4ed87044a4c72",
          "body": "…ck UI (#52)\n\ninsta project create shells npx skills add for the stack skills (insta,\nneon-postgres, tigris, better-auth) with stdio='inherit' — dumping the same\nclone-spinner/banner noise we already removed from insta setup agent. Run it\nsilent instead; the per-skill ✓/failed line is the clean outp\n[…]\n…\n  insta ✓\n  neon-postgres ✓\n  tigris ✓\n  better-auth ✓\n\n77/77 green.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(project create): don't stream the per-project skill install's cla…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T15:32:32Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c0bcd5fa123879ab87e0a691e2c8580ece377f87",
          "body": "…(#51)\n\nShips PR #50.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.0.18 (project create guides instead of inventing a name) …",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T14:49:24Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "3a79323f0c21c49bf3c63719de0fc069d8a85aeb",
          "body": "…ed project (#50)\n\nFollow-up to the no-prompt fix. Bare `insta project create` in a generic dir\n(~/projects, /tmp, the home dir) previously auto-generated a random name and\nprovisioned real postgres/storage/compute under it — surprising for a bare\ncommand. Now it guides instead:\n\n  name your project\n[…]\ns string|null (null = guide); removed the name generator. 77/77 green.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(project create): guide to name it instead of inventing a junk-nam…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T14:46:43Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "01887c81b3d78601ad215051b1c42ad8bc93ab9b",
          "body": "Ships PR #48: fresh installs default to the instacloud.com brand domain instead\nof the legacy beta-api.insta.insforge.dev host.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.0.17 (default cloud API = api.instacloud.com) (#49)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T14:23:47Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "7f8cec78ded3d0ab5f40815695ff0aa5f9c4eea2",
          "body": "…-api.insta.insforge.dev) (#48)\n\nOnboarding is agents.instacloud.com but the CLI's hardcoded DEFAULT_API still\npointed at the legacy beta host beta-api.insta.insforge.dev — so a fresh install\ntalked to an insforge.dev domain, not the instacloud.com brand. Verified same\nbackend: identical 401 {\"error\n[…]\nogin) or INSTA_API_URL\nstill wins, so existing logins are undisturbed.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(config): default cloud API to api.instacloud.com (not legacy beta…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T14:20:13Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "caf94eec4fc6a8ed60dcfc4ea7f1aefef00932c7",
          "body": "Ships PR #46: insta project create auto-generates a friendly name instead of\nhanging on an interactive prompt.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.0.16 (project create never prompts for a name) (#47)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T14:12:05Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "dfd013a602e5b6cfb564419c8b3d31d48ebbb490",
          "body": "…n the dir name is useless (#46)\n\n`insta project create` (no arg) dropped into an interactive `project name [projects]:`\nprompt — so `curl … | sh && insta project create` and any run from ~/projects just\nHANGS, with a nonsense default (the cwd basename 'projects'). Railway-grade onboarding\nshouldn't\n[…]\nme later if you want something specific. 77/77 tests green, tsc clean.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(project create): never block on a name prompt — auto-generate whe…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T14:09:24Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "398c5e49a0f23804c8c1396031ab83216f045975",
          "body": "… PATH warning) (#45)\n\nShips PR #44 in the binary: stdin='ignore' so the piped install script's\nGet-started guidance is no longer eaten; false 'another insta on PATH' warning\nsuppressed for our own symlink; '(~20s)' label dropped.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.0.15 (onboarding: guidance prints under curl|sh, no false…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T13:28:24Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "94901fc476738777bc3ac10178d779269f6426e0",
          "body": "…ipt; drop false PATH warning + '(~20s)' (#44)\n\nThree onboarding papercuts surfaced comparing `curl agents.instacloud.com | sh`\nto Railway's:\n\n1. The 'Get started' guidance never printed under `curl | sh`. `insta setup\n   agent` spawned `npx skills` with stdin='inherit'; since the piped install\n   s\n[…]\n now know InstaCloud — just ask them').\n\n75/75 tests green, tsc clean.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(onboarding): stop skill-install from eating the piped install scr…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T13:23:59Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "715fe33c5bda58b7d2b5d0302526c6f23c2d7d8b",
          "body": "Ships the captured-and-summarized skill-install output (PR #42) in the binary.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.0.14 (Railway-clean onboarding output) (#43)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T08:30:14Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "1568cc775c8f779cc5a6b7747200ec77fabdb210",
          "body": "…, don't stream it (#42)\n\n* fix(install): symlink into an on-PATH dir so `insta` runs immediately\n\nRoot cause of 'command not found: insta' after the one-liner: we installed\nonly to ~/.insta/bin (never on PATH), so the recommended\n'curl … | sh && insta project create' chain called insta in a shell w\n[…]\nreen.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(setup): Railway-clean onboarding output — summarize skill install…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T08:25:03Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "fa5bdadb7df39cd8ef28336f652b7b07ab5534bd",
          "body": "… (#41)\n\nRoot cause of 'command not found: insta' after the one-liner: we installed\nonly to ~/.insta/bin (never on PATH), so the recommended\n'curl … | sh && insta project create' chain called insta in a shell whose\nPATH the piped script can't change. Railway avoids this by installing where\nPATH alre\n[…]\n fresh install → 'command -v insta' resolves,\nv0.0.13, no manual step.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(install): symlink into an on-PATH dir so `insta` runs immediately…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T07:33:25Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "4a9875f1eb0391d1ed226c279c36305f73b42726",
          "body": "docs: AGENTS.md + CLAUDE.md; enrich developing-insta-cli",
          "is_bot": false,
          "headline": "Merge pull request #35 from InsForge/docs/claude-dev-skills",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-15T02:44:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9b6d7fe49ad48e8e36bca437efde0d2b961cc518",
          "body": "Split repo-local agent notes into AGENTS.md (read by Claude Code, Codex, and other AGENTS.md-aware tools); CLAUDE.md imports it via @AGENTS.md, matching the frontend/ convention. The developing-* skill stays in .claude/skills/ (Claude Code's skill dir); AGENTS.md points to the SKILL.md file so other agents can read it directly.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: move always-on notes to AGENTS.md; CLAUDE.md -> @AGENTS.md",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-15T02:01:21Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "4b52fd016e5b48057bb675b54492776722680e2f",
          "body": "…sent\n\n.claude/settings.json is often committed while ./.insta stays local-only,\nso a fresh clone (cloud code session, teammate checkout) gets the observe\nhook registered without the script. Every tool call then fails with\n'PostToolUse hook error: node:internal/modules/cjs/loader:1386'\n(MODULE_NOT_F\n[…]\n command on file existence so those\ncheckouts no-op instead of erroring.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_015PdkPrifSPAYEEX4QF89z4",
          "is_bot": false,
          "headline": "fix(observe): no-op the Claude hook when .insta/observe/hook.js is ab…",
          "author_name": "yaowenc2",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T01:57:00Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6b29c3bdb4fe5b58f4a282743707d10c0e949432",
          "body": "Claude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.0.13 — gzipped binaries (~20MB) + install progress (#39)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T01:51:54Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "689ce59c7e19d840046c4b692e3acfea946ed0cf",
          "body": "… (#38)\n\nBun --compile embeds the full runtime, so each binary is ~60MB — the\ndownload looked frozen and was slow. release.yml now gzips the unix\nbinaries (Bun compresses ~3×); install.sh fetches <asset>.gz and gunzips,\nwith a raw-binary fallback for older releases. Checksums cover the\nDECOMPRESSED \n[…]\nxe stays raw (manual download). Verified the gzip→verify flow\nlocally.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "perf(install): gzip binaries (~60MB → ~20MB) + progress already shown…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T01:51:03Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c9abc40a0dbfa97175e358a6e2a294a50460793b",
          "body": "install.sh downloaded the ~60MB Bun binary with 'curl -fsSL' (silent), so\nafter 'Installing insta…' it showed nothing for the whole download and read\nas a hang (user report). Now --progress-bar to a TTY (quiet when piped\nwithout one), and the message states the size.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(install): show download progress — 60MB binary looked frozen (#37)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T01:48:39Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d445b2f55e8ff12b07a8c34eb06d491dc7adc576",
          "body": "Ships: optional project-create name (paste-runnable one-liner, #34),\nnext-action Next: hints (#32), insta compute start/stop/suspend/status\nlifecycle commands, agents.instacloud.com canonical docs (#31).\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.0.12 (#36)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T01:41:45Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "7507d327ee47850be5a9798e3410679d1d90dec1",
          "body": "… paste-run (#34)\n\nThe console's empty-state onboarding recommended\n'curl … | sh && insta project create <app-name>', but the <app-name>\nplaceholder is unrunnable: zsh reads <…> as redirection → 'parse error\nnear \\n'. The RECOMMENDED command couldn't be pasted. Name is now\noptional: explicit arg win\n[…]\no 'insta project create'\nruns clean. TDD: slugify + resolver, 4 cases.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: insta project create name is optional — recommended one-liner is…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-15T01:26:50Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "51387c807574d813a2902f759189447c9133cbea",
          "body": "Add a repo-local CLAUDE.md (always-on rules + pointer to the skill) and\nfold a src/ architecture map + the cli-reference.md sync rule into the\nexisting developing-insta-cli skill.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: add CLAUDE.md; enrich developing-insta-cli with src/ architecture",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-15T01:17:45Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "4e2b6cd459be1955b7d5835bb928b8be6247d9ea",
          "body": "Devel",
          "is_bot": false,
          "headline": "Merge pull request #33 from InsForge/devel",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-14T21:12:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "80da15e6e619c6af9f17f771e7c69c9dc3b002ba",
          "body": "feat(nextactions): send Insta-Hints and render Next: affordance",
          "is_bot": false,
          "headline": "Merge pull request #32 from InsForge/feature/next-actions",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-14T21:01:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c6d4949add5963214965c066c317b93fd905c317",
          "body": null,
          "is_bot": false,
          "headline": "fix(nextactions): render metrics/logs hints with the compute target",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-14T18:45:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a985c4adb19b2941ab1d4bc5b8a3fb489f7b6906",
          "body": null,
          "is_bot": false,
          "headline": "feat(nextactions): send Insta-Hints and render Next: affordance",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-14T18:33:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dfbaf53ba796e5b1e9c9e3fe80dcd7ac378b5efd",
          "body": "CloudFront edge cache of agents.sh (rate-limit-proof vs raw.github);\nraw URL stays documented as the transparent fallback. Repo skill gains\nthe cache-invalidation note per its keep-true rule.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: agents.instacloud.com is the canonical onboarding one-liner (#31)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-14T01:02:15Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d2d2b8b62f6d7399958c805184218336908a14f7",
          "body": "Adds resolveComputeServiceId (services.ts) — resolve by name, or the\nsole compute service in the project when name is omitted — and four\nlifecycle subcommands wired into the existing `compute` group:\nstart/stop/suspend (mutating, via rawRequest + handleApproval, gated\nfor future-proofing) and status (plain read via request).",
          "is_bot": false,
          "headline": "feat(cli): insta compute start/stop/suspend/status",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-14T00:25:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "32d51663086bd702089cf0c8e8ad83234511af62",
          "body": "Claude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.0.11 — Railway-grade install moment (#30)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T10:52:38Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "04a65dff4afe60d60a0d2373c4c8ff6ce31b666e",
          "body": "install.sh: skips the download when the installed binary already matches\nthe latest release, warns when another insta shadows ours on PATH (with\nnpm-specific advice), and ends with the 3-command get-started (create →\ndeploy → branch = the isolated-clone wow). setup agent: filters the skills\ntool's e\n[…]\nred noise (real\nfailures still surface), summarizing what was skipped.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Railway-grade install moment (#29)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T10:51:25Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "1c7582f5bfe839e1f05a388e555905d74745bb27",
          "body": "Auto-link on first use, insta run (per-request secret injection),\nINSTA_PROJECT_ID linkless targeting, .env auto-gitignore.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.0.10 — the just-works release (#28)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T10:25:56Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "53831a7060094289ee85dfca8947f08763389c0c",
          "body": "…roring (#27)\n\nOne project → picked silently; several + TTY → one-keystroke picker;\nseveral + no TTY → actionable error (ids + INSTA_PROJECT_ID hint); zero →\npoints at project create. Choice persists to ./.insta/project.json so it\nhappens at most once per directory. Live-verified against insta-oss.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: auto-link — unlinked commands resolve the project instead of er…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T10:24:43Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "aa5ce0e11fc6a62af7fd3ef1e4a7e05eb3302bd6",
          "body": "…es .env (#26)\n\nThe Railway model: 'insta run -- <cmd>' fetches the branch bundle per\ninvocation and injects it into the child environment only — no .env on\ndisk, nothing committable, credentials live exactly as long as the\nprocess. And when 'insta secrets' does write an env file, it now\ngitignores what it wrote (git repos only, idempotent).\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: insta run — per-request secret injection; secrets auto-gitignor…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T10:18:17Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "8bfc5426ef38e413f4cc69de9166deab93c78bc2",
          "body": "…G_ID (#25)\n\nRailway-parity env resolution: target any project from anywhere with no\n.insta/project.json (CI, one-off commands, agents); env beats a link file.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: linkless targeting — INSTA_PROJECT_ID / INSTA_BRANCH / INSTA_OR…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T10:12:25Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "bc086ee7a2b43fc47dee0ecb3934a00b4bee90d0",
          "body": "Claude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.0.9 — link-once walk-up resolution (#24)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T10:07:49Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "0cd1e520de82b870aaa992da5f08c89ef47ed6e7",
          "body": "…n (#23)\n\nreadProject resolves the nearest ancestor link, so every command works\nfrom any subdirectory of a linked project; writeProject targets the found\nroot (branch switch in src/ no longer mints a nested link). Fresh links\nin unlinked trees still bind cwd.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: link once — git-style walk-up resolution for .insta/project.jso…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T10:06:37Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "674433d118e8efc3a87c80102ce8b5dbb3e4c85e",
          "body": "First fully-automated release: OIDC trusted publishing ships npm alongside\nthe binaries. Carries the agent one-liner, observe-hook fix, repo skill,\nand the auto-publish pipeline itself.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.0.8 (#22)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T10:00:03Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "160fcd575840bc587cccdbc24e0498cfcb78db3c",
          "body": "Swaps the NPM_TOKEN requirement for npm's Trusted Publisher flow: the\nworkflow identity (InsForge/insta-cli release.yml) is trusted directly\non npmjs.com. npm upgraded on the runner (OIDC exchange needs ≥11.5).\nSkill release section updated in the same PR per its keep-true rule.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: npm publish via OIDC trusted publishing (no token secret) (#21)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T09:57:19Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a8fb9c8b77a614ff01f445af4c002e3a0c50b6d4",
          "body": "publish-npm job in release.yml: gated on the binaries, tag pushes only,\ngranular NPM_TOKEN secret (bypasses interactive 2FA), --provenance\nattestation, and a clear error when the secret is missing. Skill updated\nin the same PR per its keep-this-skill-true rule.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: auto-publish npm on release tags (granular automation token) (#20)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T09:54:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "19b72b723faffe0f2b87f650b11c4515368f2bfb",
          "body": "Baseline-tested (agent without it guessed wrong on review flow, merge\ntype, bump-via-PR, and assumed npm publish might be in CI); with the\nskill a fresh agent answers both flows exactly. Includes the keep-this-\nskill-true rule: flow changes must update the skill in the same PR.\nGitignore: repo-owned skills tracked; installed skills stay ignored.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: repo skill — how agents develop and ship this CLI (#19)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T09:49:10Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5ac989de6fc76ce127b1ffeba7432d6f978c0b82",
          "body": "observe-hook fix (broken Claude Code config after every tool call), agent\none-liner (insta setup agent + agents.sh), INSTA_API_URL env precedence,\nEXPOSE-derived --port default, insta upgrade + autoupdate, test CI.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "release: v0.0.7 (#18)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T09:31:43Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "3cde0e47f278d9f1ecd274d1f470f81e094896d3",
          "body": "…(#17)\n\nThe installer emitted command:'node' + an args array containing a\n${CLAUDE_PROJECT_DIR} template — Claude Code's hooks schema has no args\nfield and only shell-expands the command string, so node received the\ntemplate verbatim and threw MODULE_NOT_FOUND after EVERY tool call in\nevery linked p\n[…]\nker-based upsert), so 'insta observe install' heals\nexisting projects.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(observe): Claude Code hook must be a single shell-string command …",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T09:29:11Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "94d9c989c65c5cb827b95be2e0aaaecebd43da00",
          "body": "…nts.sh shim (#16)\n\nThe Railway onboarding pattern (curl agents.railway.com | sh): agents.sh pipes\ninstall.sh --agents -y, which installs the checksum-verified binary then runs\nthe new 'insta setup agent' — user-GLOBAL install of the insta skill for every\ncoding agent (the skill is pure product know\n[…]\nris/better-auth) intentionally stay per-project as the\nstack manifest.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: agent one-liner — insta setup agent + install.sh --agents + age…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-12T09:28:44Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "7332665b6391d898107cdb3e84c1db895684372f",
          "body": "…eploys (#11)\n\nDocs already call the port mismatch 'the #1 deploy mistake' — and it still\nhappened in live dogfooding (bare 'insta deploy .' with EXPOSE 3000 silently\nserviced 8080; every request refused). The Dockerfile states the truth, so\nread it: last EXPOSE wins, --port still overrides, prints what it picked.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(deploy): default --port from the Dockerfile's EXPOSE on source d…",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-10T01:01:11Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5896746fbe51d22cf7357dedac816743e5fa46e6",
          "body": "Once any login wrote ~/.insta/config.json, the env var was silently\nignored (parsed.apiUrl always won). Found while driving the platform\ndev server with the stock CLI.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(config): INSTA_API_URL env var overrides the persisted apiUrl (#10)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-10T00:55:08Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "97799bc7b0f8867d2e7e6a6fa7bf787131fcd2ce",
          "body": "The repo had only release.yml — PRs merged with cubic review alone and the\ntest suite never ran in CI.\n\n\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: run typecheck + the 33-test suite on every push/PR (#15)",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-10T00:54:52Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "2869f5ed9bbb7b6531534ae117ee562114b36510",
          "body": "Devel",
          "is_bot": false,
          "headline": "Merge pull request #14 from InsForge/devel",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-09T01:00:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "131405de1989b364fbdf614873649e91a52fafb4",
          "body": "feat: insta billing uses /billing/overview (credits, forecast, breakdowns)",
          "is_bot": false,
          "headline": "Merge pull request #13 from InsForge/feat/billing-overview",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-09T00:57:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0a9f660a3cbee9a28764bcade1dea2c8d4e2e5e4",
          "body": null,
          "is_bot": false,
          "headline": "bump version",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-09T00:56:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "31bccea289699ffb13ea9e04f8bf3faac7010952",
          "body": "…t, breakdowns)\n\nRepoint 'insta billing' from /orgs/:id/billing to /orgs/:id/billing/overview and\nrender the richer payload: totals + credits + forecast + per-dimension and\nper-project breakdown. Adds a pure billingLines() (unit-tested) that reuses\ncycleLine + a newly-extracted pure dimensionLines() from metrics.ts (insta usage\noutput unchanged). --json still dumps the raw overview.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(billing): insta billing uses /billing/overview (credits, forecas…",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-09T00:51:09Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "2e7762067df80ab0dc6e1879170df0a4601f2b7f",
          "body": "feat(deploy): add --websocket flag",
          "is_bot": false,
          "headline": "Merge pull request #12 from InsForge/devel",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-08T04:40:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eaf9935161fb2a9c3e4dc0eccf17964f03f0d46e",
          "body": "Threads a --websocket boolean option through `insta deploy` into the\nplatform's POST /projects/:id/deploy request body, via a new pure\ndeployRequestBody() helper that's unit-tested. Only sent when set, so\nplain deploys are unchanged.",
          "is_bot": false,
          "headline": "feat(deploy): add --websocket flag",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-07T17:28:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ddaf2e367557a52df89c6ec4b66460215b93cb9d",
          "body": "Suppress repeated skills-CLI banner on install (+ version bump)",
          "is_bot": false,
          "headline": "Merge pull request #9 from InsForge/devel",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-04T20:46:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f2addaf050eed78896547d3e8acc48306cbca5b5",
          "body": null,
          "is_bot": false,
          "headline": "update version",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-04T19:05:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4a4f64c48632eaf90e43592a54f5e5221b81fd57",
          "body": "`npx skills add` prints a full-screen ASCII banner at the top of every\ninvocation, so installing the 4 related skill repos stacked 4 banners.\nInject AI_AGENT into the child env so the skills CLI enters agent mode and\nskips the banner (it's already non-interactive; this only quiets output).\nPreserve a caller's existing AI_AGENT rather than clobbering it.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(ensure-skills): suppress repeated skills-CLI banner during install",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-04T18:01:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "68e27a0db4f49293c3b7feb9575202bcbf29ef92",
          "body": "feat: insta upgrade + autoupdate (on by default while pre-1.0)",
          "is_bot": false,
          "headline": "Merge pull request #8 from InsForge/self-update",
          "author_name": "Tony Chang",
          "author_login": "tonychang04",
          "committed_at": "2026-07-04T13:29:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "294b1ae126f0c7f358c4a3390b412f2ac0940738",
          "body": "Self-update, channel-aware: native binary re-runs the release installer into\nits own install dir (INSTA_INSTALL_DIR); npm runs npm i -g insta@latest;\nsource checkouts get a git-pull hint. A detached background check caches the\nregistry's latest version (24h TTL, ~/.insta/update-check.json); on start\n[…]\ne: nudge on stderr for normal commands,\nhelp entries, autoupdate status.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01GMbAe5K1RfwaAcge5inX7P",
          "is_bot": false,
          "headline": "feat: insta upgrade + autoupdate (on by default while pre-1.0)",
          "author_name": "Claude",
          "author_login": "claude",
          "committed_at": "2026-07-04T09:54:14Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "47bffff3f81d5a1d3c2ca1b317b597877730549a",
          "body": "Devel",
          "is_bot": false,
          "headline": "Merge pull request #7 from InsForge/devel",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-04T04:55:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a535e25fb55b8deb985c42396905b26c45827c0f",
          "body": null,
          "is_bot": false,
          "headline": "update version",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-04T04:49:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "acf01c84d633662861b7001897bb2e80fa1e4019",
          "body": "Add `insta secrets set <name> [value] [--branch]` and `secrets unset <name>\n[--branch]`, project-wide by default; value comes from the argument or stdin\n(keeps secrets out of shell history). Both are handleApproval-aware (202).\nExtend `policy set`'s help text with the secrets.write action.\n\nAlso fix\n[…]\ne parent group (secrets, billing) declares the\nsame flag name for its own default action — enable positional options so a\nflag written after the subcommand name binds to the subcommand, not the\ngroup.",
          "is_bot": false,
          "headline": "feat: insta secrets set/unset (user-managed secrets)",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-03T23:11:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3243be6609cd4c851aff18e982903bae86e9adcc",
          "body": "CLI: source-directory deploy · compute custom domains · auto-install skills",
          "is_bot": false,
          "headline": "Merge pull request #6 from InsForge/devel",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-03T18:37:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5681a64cb4dfc7bcb9d9c9e0c5bdeb5497bd6ca8",
          "body": "- Translate README fully to English (public-facing package)\n- Bump version 0.0.2 -> 0.0.3\n- Switch license MIT -> Apache-2.0, add LICENSE file\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Prep for public release: English README, v0.0.3, Apache-2.0",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-03T18:28:49Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d94a56ced708cec6b89c3a1339fc75ffad80bac3",
          "body": "- name insta-cli → insta; drop private:true (was blocking publish)\n- files → dist/**/*.js so the ~440MB bun binaries in dist/bin are not shipped\n- add engines(node>=18), prepublishOnly build, repo/homepage/bugs/keywords,\n  publishConfig.access=public, license\n- --version now reads the installed package.json (npm/node) instead of\n  reporting 0.0.0; standalone binary still uses INSTA_CLI_VERSION\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Publish as the 'insta' npm package",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-03T18:17:20Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "afe8c1560c789ebdfa0d3422bbe2509211b2affe",
          "body": "Default `insta usage` to whole-org usage (org of the linked project) with a\nper-project cost breakdown; `--proj [id]` shows one project — the linked one,\nor a given project id. Both over the current billing cycle.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "insta usage: show the org by default, --proj for a single project",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-03T18:10:03Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "57a05a532f06f09b544fc1db8faecc71e1c21a47",
          "body": "The usage window now defaults to the current billing cycle; show it as\n'billing cycle <start> → <end-1d>' (to is the exclusive next-cycle start).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "insta usage: label the window as the billing cycle (inclusive end date)",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-03T18:05:08Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c464fb4c9f3270a39083be811c6e2a40f934bbee",
          "body": "Render the customer-facing dimensions (cpu/memory/volume/egress/storage) the\nplatform now returns, with ram labelled 'memory'. Follows the platform\n/projects/:id/usage change to a { dimensions, totalCostUsd } response.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "insta usage: show the 5 billing dimensions, not raw provider meters",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-03T17:50:16Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "2305e97ba5b8ca87f59255832efc280503450fe9",
          "body": "`insta compute set-domain <host>` attaches a bring-your-own domain to a branch's\ncompute service and prints the DNS records to set in your own registrar;\n`check-domain` re-checks cert status, `remove-domain` detaches. Fly issues the\ncert + routes — the CLI just relays the platform's records/status.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Add `insta compute set-domain` for developer custom domains",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-03T04:49:46Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c4aa6ecf17785d986ac9a0a83f7f69ac8f46df41",
          "body": "deploy now takes either a prebuilt --image (unchanged) or a source directory\n(positional <dir>). Source mode: mint a short-lived app-scoped Fly deploy token\nfrom the platform (POST /deploy-token), build+push <dir> with flyctl's remote\nbuilder (`flyctl deploy --build-only --push`, token via FLY_API_T\n[…]\nld/push helper + ensureFlyctl) + tests. The CLI never\nholds a standing Fly credential — the platform mints a scoped, expiring one.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Support source-directory deploy: `insta deploy <dir>`",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-03T04:15:17Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "993bbb49777dd1e26b01fb8b10ee6ec299f1e659",
          "body": "Devel",
          "is_bot": false,
          "headline": "Merge pull request #5 from InsForge/devel",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-03T00:51:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "75a028b53f39f4d4064d670ee3c35fa944b8c0ab",
          "body": "`insta project create` and `insta project link` now also install the related\nagent skills into the linked directory (in addition to the observe hook), so a\ncoding agent has provider context out of the box. Runs `npx skills add`\n(vercel-labs/skills) fully non-interactively — agents pinned (-a claude-\n[…]\ne command. Installed dirs (.claude/skills, .agents/skills,\n.github/skills) are gitignored — regenerable agent context, not source.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Auto-install related agent skills on project create/link",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-03T00:28:46Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "32936582bce23782dfcda23f254cccc17766ab72",
          "body": null,
          "is_bot": false,
          "headline": "update default api url to staging",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-03T00:09:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "057a4be0b4b76fb00c1ef3b18ac535ba571ab695",
          "body": "insta services add/list/remove/scale/upgrade",
          "is_bot": false,
          "headline": "Merge pull request #4 from InsForge/feat/services-model",
          "author_name": "jfeng",
          "author_login": "jwfing",
          "committed_at": "2026-07-02T19:25:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1a25228ae95a4acbce4bcf444d24d9d85079846a",
          "body": null,
          "is_bot": false,
          "headline": "Merge remote-tracking branch 'origin/devel' into feat/services-model",
          "author_name": "jwfing",
          "author_login": "jwfing",
          "committed_at": "2026-07-02T19:20:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 20,
      "commits_last_year": 114,
      "latest_release_at": "2026-07-21T01:53:33Z",
      "latest_release_tag": "v0.0.22",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 4,
      "days_since_latest_release": 6,
      "mean_days_between_releases": 0.7
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": false,
      "has_contributing": false,
      "health_percentage": 25,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "insta",
          "exists": true,
          "license": "Apache-2.0",
          "keywords": [
            "insta",
            "insforge",
            "cli",
            "backend",
            "baas",
            "platform"
          ],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/insta",
          "is_deprecated": false,
          "latest_version": "0.0.22",
          "repository_url": "https://github.com/InsForge/insta-cli",
          "versions_count": 21,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 3,
          "monthly_downloads": 2912,
          "first_published_at": "2016-12-19T09:55:39.763000Z",
          "latest_published_at": "2026-07-21T01:53:59.839000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 6
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 1,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": null,
      "open_issues_and_prs": 1
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "tsconfig.json"
      ],
      "toolchain_manifests": [],
      "largest_source_bytes": 16790,
      "source_files_sampled": 50,
      "oversized_source_files": 0,
      "agent_instruction_files": [
        "AGENTS.md",
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 1248
    },
    "dependencies": {
      "manifests": [
        "package.json"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 1,
        "malicious_count": 0,
        "assessed_package": "npm:insta@0.0.22",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm"
      ],
      "dependencies": [
        {
          "name": "commander",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^12.1.0"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 1,
        "merged_prs": 64,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "jwfing",
          "commits": 71,
          "avatar_url": "https://avatars.githubusercontent.com/u/985038?v=4"
        },
        {
          "type": "User",
          "login": "tonychang04",
          "commits": 42,
          "avatar_url": "https://avatars.githubusercontent.com/u/26497075?v=4"
        },
        {
          "type": "User",
          "login": "claude",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/81847?v=4"
        }
      ],
      "contributors_sampled": 3,
      "top_contributor_share": 0.623
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "release.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "package-lock.json"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "15 out of 15 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 10,
            "reason": "all changesets reviewed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 6,
            "reason": "project has 2 contributing companies or organizations -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 3,
            "reason": "dependency not pinned by hash detected -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 4,
            "reason": "6 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "f2dac1ce558652668ab38716ce6b37fb2a13e4b5",
        "ran_at": "2026-07-27T20:39:12Z",
        "aggregate_score": 4.2,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-25T11:01:25Z",
      "oldest_open_prs": [
        {
          "number": 65,
          "created_at": "2026-07-27T15:22:09Z",
          "last_comment_at": "2026-07-27T15:36:25Z",
          "last_comment_author": "tonychang04"
        }
      ],
      "last_merged_pr_at": "2026-07-25T11:00:58Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/InsForge/insta-cli",
    "host": "github.com",
    "name": "insta-cli",
    "owner": "InsForge"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 58,
      "inputs": {
        "security": 54,
        "vitality": 70,
        "community": 32,
        "governance": 68,
        "engineering": 57
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 70,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 57,
            "inputs": {
              "commits_last_year": 114,
              "human_commit_share": 1,
              "days_since_last_push": 0,
              "active_weeks_last_year": 4
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "4/52 weeks with commits",
                "points": 2.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 4
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "114 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 114
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "releases_count": 20,
              "latest_release_tag": "v0.0.22",
              "releases_from_tags": false,
              "days_since_latest_release": 6,
              "mean_days_between_releases": 0.7
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "20 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 20
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 6 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 6
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~0.7 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 0.7
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 32,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 1,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "1 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 58,
            "inputs": {
              "packages": [
                "insta"
              ],
              "dependents": null,
              "ecosystems": "npm",
              "total_downloads": null,
              "monthly_downloads": 2912
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "2,912 downloads/month across npm",
                "points": 46.2,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 2912,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 68,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 28,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 3,
              "top_contributor_share": 0.623
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 62% of commits",
                "points": 8.5,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 62
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "3 contributors",
                "points": 4.1,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "excellent",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "merged_prs": 64,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "64/64 decided PRs merged",
                "points": 38.2,
                "status": "met",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 64,
                      "decided": 64
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "all changesets reviewed",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 60,
            "inputs": {
              "followers": 184,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "InsForge",
              "public_repos": 29,
              "account_age_days": 533
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "184 followers of InsForge",
                "points": 16.3,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 184,
                      "login": "InsForge"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "29 public repos, account ~1 yr old",
                "points": 13.7,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 29
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 1
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "insta"
              ],
              "ecosystems": "npm",
              "any_deprecated": false,
              "min_days_since_publish": 6
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 6 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 6
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "21 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 21
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 57,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "2 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "15 out of 15 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "at_risk",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 54,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 42,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 4.2
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "15 out of 15 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "all changesets reviewed",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 3",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "6 existing vulnerabilities detected",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:insta@0.0.22 runtime dependency closure — what installing the published package pulls in — 1 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "npm:insta@0.0.22",
                  "assessed": 1
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 0,
              "affected_packages": 0,
              "assessed_packages": 1,
              "unassessed_packages": 0,
              "affected_by_severity": "none",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "no indirect dependency carries a known advisory",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "no_indirect_advisories",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 1,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 4
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 74,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.92,
              "agent_instruction_files": [
                "AGENTS.md",
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 1248
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "AGENTS.md, CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "AGENTS.md, CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "92 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 92,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 56,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "package-lock.json"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [
                "tsconfig.json"
              ],
              "agent_commit_share": 0.62,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "62 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 62,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 3",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "TypeScript",
              "largest_source_bytes": 16790,
              "source_files_sampled": 50,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "TypeScript (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "TypeScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/50 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 50,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-27T20:39:32.931899Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/i/InsForge/insta-cli.svg",
  "full_name": "InsForge/insta-cli",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — npm.
Software health index

Score profile

Ownership

Package ecosystems

Metrics by category

Key facts

Data collection warnings

More detail

Related records
