Public recordModerate
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-27 01:07 UTC
KarmaloopAI / Jiva
Jiva is a CLI-first, open source autonomous AI agent and open alternative to Claude. Written in TypeScript with native support for Sarvam-105B and gpt-oss-120b, it autonomously plans and executes tasks from your terminal. Supports MCP servers, a built-in Skills system, and Jiva Personas - a plugin framework fully compatible with Claude Plugins.
KarmaloopAI/Jiva holds a health index of 64 out of 100, placing it in the Moderate band. It scores highest on Vitality (86/100) and lowest on AI Readiness (42/100). It was last updated 6 days ago. A single contributor accounts for most of its recent work.
64
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
64
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
Karmaloop AIOrganization
2 followers9 public repossince Jan 2018
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish | Tags |
|---|---|---|---|---|---|---|
| npm | jiva-core | 0.3.51 | 2,206 | 53 | 6 days ago | aiagentautonomousmcpmodel-context-protocolgpt-ossgpt-oss-120bclichatbotassistantautomationllmkrutrimharmonyconversationtool-calling |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
86
Development activity
76Good
How it's scored
| 36/36 | Push recency — last push 6 days ago |
| 12.5/36 | Commit cadence — 18/52 weeks with commits |
| 17.3/18 | Commit volume — 84 commits in the last year |
| 10/10 | OpenSSF Scorecard: Maintained — 23 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
Inputs used
| commits_last_year | 84 |
| human_commit_share | 0.83 |
| days_since_last_push | 6 |
| active_weeks_last_year | 18 |
Release discipline
100Excellent
How it's scored
| 27/27 | Ships releases — 17 releases published |
| 36/36 | Release recency — latest release 6 days ago |
| 27/27 | Release cadence — a release every ~14.3 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 17 |
| latest_release_tag | v0.3.51 |
| releases_from_tags | no |
| days_since_latest_release | 6 |
| mean_days_between_releases | 14.3 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
51
Popularity & adoption
31At risk
How it's scored
| 24.8/60 | Stars — 35 stars |
| 5.8/25 | Forks — 6 forks |
| 0/15 | Watchers — 0 watchers |
Inputs used
| forks | 6 |
| stars | 35 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
70Good
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (MIT) |
| 18/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | yes |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Ecosystem adoption (downloads)
56Moderate
How it's scored
| 44.6/80 | Monthly downloads — 2,206 downloads/month across npm |
| 0/20 | Registry dependents — not reported by this ecosystem |
Inputs used
| packages | jiva-core |
| dependents | — |
| ecosystems | npm |
| total_downloads | — |
| monthly_downloads | 2,206 |
Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
56
Maintainer resilience (bus factor)
13Critical
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 0/22.5 | Commit distribution — top contributor authored 100% of commits |
| 1.4/13.5 | Contributor breadth — 1 contributors |
| 3/10 | OpenSSF Scorecard: Contributors — project has 1 contributing companies or organizations -- score normalized to 3 |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
How it's scored
| 44.1/46.8 | Issue resolution — 94% of issues closed |
| 33.1/38.3 | PR acceptance — 32/37 decided PRs merged |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/7 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 32 |
| open_issues | 1 |
| closed_issues | 17 |
| issue_closed_ratio | 0.944 |
| closed_unmerged_prs | 5 |
Ownership & stewardship
53Moderate
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 3.4/25 | Owner reach — 2 followers of KarmaloopAI |
| 19.3/25 | Track record — 9 public repos, account ~8 yr old |
Inputs used
| followers | 2 |
| owner_type | Organization |
| is_verified | — |
| owner_login | KarmaloopAI |
| public_repos | 9 |
| account_age_days | 3,112 |
Package maintenance
100Excellent
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on npm |
| 35/35 | Publish recency — latest publish 6 days ago |
| 20/20 | Version history — 53 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | jiva-core |
| ecosystems | npm |
| any_deprecated | no |
| min_days_since_publish | 6 |
Engineering Quality
Are baseline engineering and documentation practices in place?
66
Engineering practices
44At risk
How it's scored
| 24/24 | CI workflows — 2 workflow(s) |
| 0/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 7 out of 7 merged PRs checked by a CI test -- score normalized to 10 |
Inputs used
| has_ci | yes |
| has_tests | no |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Documentation
100Excellent
How it's scored
| 30/30 | README |
| 25/25 | Documentation directory |
| 15/15 | Documentation / homepage site — https://www.karmaloop.ai |
| 10/10 | Repository description |
| 10/10 | Topics — 8 topics |
| 10/10 | Wiki |
Inputs used
| topics | agent, autonomous, claude-plugins, claude-skills, cli, gpt-oss-120b, mcp-servers, sarvam-105b |
| has_wiki | yes |
| homepage | https://www.karmaloop.ai |
| has_readme | yes |
| has_docs_dir | yes |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
57
Security posture
52Moderate
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 2.2/7.5 | Branch-Protection — branch protection is not maximal on development and all release branches |
| 2.5/2.5 | CI-Tests — 7 out of 7 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/7 approved changesets -- score normalized to 0 |
| 0.8/2.5 | Contributors — project has 1 contributing companies or organizations -- score normalized to 3 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 7.5/7.5 | Maintained — 23 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 5/5 | Packaging — packaging workflow detected |
| 1.5/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 3 |
| 4/5 | SAST — SAST tool is not run on all commits -- score normalized to 8 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — no data |
| 6.8/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 57 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 17 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 1 |
| scorecard_aggregate | 5.2 |
Excluded from scoring (no data or not applicable): signed_releases. Remaining weights renormalized.
Dependency advisories
76Good
How it's scored
| 35/35 | Direct dependencies free of known advisories — no direct dependency carries a known advisory |
| 7.5/25 | Indirect dependencies free of known advisories — 3 affected: brace-expansion 2.1.2 (high 7.5), uuid 9.0.1 (high 7.5), @hono/node-server 1.19.15 (moderate 5.9) |
| 33.7/40 | No advisories left outstanding — 1 advisory-carrying package(s) unaddressed past 90 days; oldest published 95 days ago |
Inputs used
| source | osv |
| advisories | 3 |
| affected_packages | 3 |
| assessed_packages | 365 |
| unassessed_packages | 0 |
| affected_by_severity | high 2, moderate 1 |
| direct_affected_packages | 0 |
Matched the npm:jiva-core@0.3.51 runtime dependency closure — what installing the published package pulls in — 365 packages. Reachability is not analyzed.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
42
Agent context & guidance
30At risk
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 29.6/40 | Legible commit history — 46 of 83 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.554 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Verify loop (build / test / typecheck)
24Critical
How it's scored
| 0/18 | One-command bootstrap |
| 0/22 | Automated tests |
| 0/11 | Lint / format config |
| 11/11 | Static type checking — tsconfig.json |
| 10/10 | Reproducible environment — Dockerfile, lockfile |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 100 |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 3/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 3 |
Inputs used
| has_nix | no |
| has_tests | no |
| lockfiles | package-lock.json |
| has_dockerfile | yes |
| typed_language | yes |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | tsconfig.json |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
Code legibility for models
99Excellent
How it's scored
| 45/45 | Type-checkable code — TypeScript (statically typed) |
| 54.4/55 | Manageable file sizes — 1/96 source files over 60KB |
Inputs used
| primary_language | TypeScript |
| largest_source_bytes | 65,634 |
| source_files_sampled | 96 |
| oversized_source_files | 1 |
Machine-readable interfaces
60Moderate
How it's scored
| 0/40 | API schema (OpenAPI/GraphQL/proto) |
| 20/20 | MCP server |
| 40/40 | Runnable examples — examples |
Inputs used
| example_dirs | examples |
| has_mcp_signal | yes |
| api_schema_files | — |
Key facts
35GitHub stars
1contributors
84commits, last 12 months
6days since last push
17releases
1bus factor
1open issues
npmpackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
More detail
Star and fork history 0 ★ / 6 ⇿
0Stars
6Forks
6Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 0Patch 6
Each point covers 2 days.
OpenSSF Scorecard 5.2 / 10
5.2aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 3 | Branch-Protection | branch protection is not maximal on development and all release branches |
| 10 | CI-Tests | 7 out of 7 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/7 approved changesets -- score normalized to 0 |
| 3 | Contributors | project has 1 contributing companies or organizations -- score normalized to 3 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 23 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 10 | Packaging | packaging workflow detected |
| 3 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 3 |
| 8 | SAST | SAST tool is not run on all commits -- score normalized to 8 |
| 0 | Security-Policy | security policy file not detected |
| n/a | Signed-Releases | no releases found |
| 9 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 57 existing vulnerabilities detected |
Direct dependencies 21
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| npm | @google-cloud/storage | ^7.0.0 | package.json |
| npm | @modelcontextprotocol/sdk | ^1.0.4 | package.json |
| npm | @modelcontextprotocol/server-filesystem | ^2025.11.25 | package.json |
| npm | archiver | ^7.0.1 | package.json |
| npm | chalk | ^5.3.0 | package.json |
| npm | commander | ^12.1.0 | package.json |
| npm | conf | ^13.0.1 | package.json |
| npm | diff | ^8.0.3 | package.json |
| npm | express | ^4.18.2 | package.json |
| npm | gpt-tokenizer | ^3.4.0 | package.json |
| npm | inquirer | ^12.0.1 | package.json |
| npm | jsonwebtoken | ^9.0.2 | package.json |
| npm | marked | ^15.0.12 | package.json |
| npm | marked-terminal | ^7.3.0 | package.json |
| npm | ora | ^8.1.1 | package.json |
| npm | unzipper | ^0.12.3 | package.json |
| npm | vscode-jsonrpc | ^8.2.1 | package.json |
| npm | vscode-languageserver-types | ^3.17.5 | package.json |
| npm | ws | ^8.16.0 | package.json |
| npm | yaml | ^2.6.1 | package.json |
| npm | zod | ^3.24.1 | package.json |
All dependencies 411
Full resolved dependency set from the GitHub dependency graph: 26 direct and 385 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|---|---|---|
| npm | @google-cloud/storage | 7.19.0 | direct |
| npm | @modelcontextprotocol/sdk | 1.27.1 | direct |
| npm | @modelcontextprotocol/server-filesystem | 2025.11.25 | direct |
| npm | archiver | 7.0.1 | direct |
| npm | chalk | 4.1.2 | direct |
| npm | chalk | 5.6.2 | direct |
| npm | commander | 12.1.0 | direct |
| npm | conf | 13.1.0 | direct |
| npm | diff | 4.0.4 | direct |
| npm | diff | 5.2.2 | direct |
| npm | diff | 8.0.3 | direct |
| npm | express | 4.22.1 | direct |
| npm | express | 5.2.1 | direct |
| npm | gpt-tokenizer | 3.4.0 | direct |
| npm | inquirer | 12.11.1 | direct |
| npm | jsonwebtoken | 9.0.3 | direct |
| npm | marked | 11.2.0 | direct |
| npm | marked | 15.0.12 | direct |
| npm | marked-terminal | 7.3.0 | direct |
| npm | ora | 8.2.0 | direct |
| npm | unzipper | 0.12.3 | direct |
| npm | vscode-jsonrpc | 8.2.1 | direct |
| npm | vscode-languageserver-types | 3.17.5 | direct |
| npm | ws | 8.19.0 | direct |
| npm | yaml | 2.8.2 | direct |
| npm | zod | 3.25.76 | direct |
| npm | @colors/colors | 1.5.0 | indirect |
| npm | @cspotcode/source-map-support | 0.8.1 | indirect |
| npm | @esbuild/aix-ppc64 | 0.27.1 | indirect |
| npm | @esbuild/android-arm | 0.27.1 | indirect |
| npm | @esbuild/android-arm64 | 0.27.1 | indirect |
| npm | @esbuild/android-x64 | 0.27.1 | indirect |
| npm | @esbuild/darwin-arm64 | 0.27.1 | indirect |
| npm | @esbuild/darwin-x64 | 0.27.1 | indirect |
| npm | @esbuild/freebsd-arm64 | 0.27.1 | indirect |
| npm | @esbuild/freebsd-x64 | 0.27.1 | indirect |
| npm | @esbuild/linux-arm | 0.27.1 | indirect |
| npm | @esbuild/linux-arm64 | 0.27.1 | indirect |
| npm | @esbuild/linux-ia32 | 0.27.1 | indirect |
| npm | @esbuild/linux-loong64 | 0.27.1 | indirect |
| npm | @esbuild/linux-mips64el | 0.27.1 | indirect |
| npm | @esbuild/linux-ppc64 | 0.27.1 | indirect |
| npm | @esbuild/linux-riscv64 | 0.27.1 | indirect |
| npm | @esbuild/linux-s390x | 0.27.1 | indirect |
| npm | @esbuild/linux-x64 | 0.27.1 | indirect |
| npm | @esbuild/netbsd-arm64 | 0.27.1 | indirect |
| npm | @esbuild/netbsd-x64 | 0.27.1 | indirect |
| npm | @esbuild/openbsd-arm64 | 0.27.1 | indirect |
| npm | @esbuild/openbsd-x64 | 0.27.1 | indirect |
| npm | @esbuild/openharmony-arm64 | 0.27.1 | indirect |
| npm | @esbuild/sunos-x64 | 0.27.1 | indirect |
| npm | @esbuild/win32-arm64 | 0.27.1 | indirect |
| npm | @esbuild/win32-ia32 | 0.27.1 | indirect |
| npm | @esbuild/win32-x64 | 0.27.1 | indirect |
| npm | @google-cloud/paginator | 5.0.2 | indirect |
| npm | @google-cloud/projectify | 4.0.0 | indirect |
| npm | @google-cloud/promisify | 4.0.0 | indirect |
| npm | @hono/node-server | 1.19.9 | indirect |
| npm | @inquirer/ansi | 1.0.2 | indirect |
| npm | @inquirer/checkbox | 4.3.2 | indirect |
| npm | @inquirer/confirm | 5.1.21 | indirect |
| npm | @inquirer/core | 10.3.2 | indirect |
| npm | @inquirer/editor | 4.2.23 | indirect |
| npm | @inquirer/expand | 4.0.23 | indirect |
| npm | @inquirer/external-editor | 1.0.3 | indirect |
| npm | @inquirer/figures | 1.0.15 | indirect |
| npm | @inquirer/input | 4.3.1 | indirect |
| npm | @inquirer/number | 3.0.23 | indirect |
| npm | @inquirer/password | 4.0.23 | indirect |
| npm | @inquirer/prompts | 7.10.1 | indirect |
| npm | @inquirer/rawlist | 4.1.11 | indirect |
| npm | @inquirer/search | 3.2.2 | indirect |
| npm | @inquirer/select | 4.4.2 | indirect |
| npm | @inquirer/type | 3.0.10 | indirect |
| npm | @jridgewell/resolve-uri | 3.1.2 | indirect |
| npm | @jridgewell/sourcemap-codec | 1.5.5 | indirect |
| npm | @jridgewell/trace-mapping | 0.3.9 | indirect |
| npm | @sindresorhus/is | 4.6.0 | indirect |
| npm | @tootallnate/once | 2.0.0 | indirect |
| npm | @tsconfig/node10 | 1.0.12 | indirect |
| npm | @tsconfig/node12 | 1.0.11 | indirect |
| npm | @tsconfig/node14 | 1.0.3 | indirect |
| npm | @tsconfig/node16 | 1.0.4 | indirect |
| npm | @types/archiver | 6.0.4 | indirect |
| npm | @types/body-parser | 1.19.6 | indirect |
| npm | @types/cardinal | 2.1.1 | indirect |
| npm | @types/caseless | 0.12.5 | indirect |
| npm | @types/connect | 3.4.38 | indirect |
| npm | @types/express | 4.17.25 | indirect |
| npm | @types/express-serve-static-core | 4.19.8 | indirect |
| npm | @types/http-errors | 2.0.5 | indirect |
| npm | @types/inquirer | 9.0.9 | indirect |
| npm | @types/jsonwebtoken | 9.0.10 | indirect |
| npm | @types/marked-terminal | 6.1.1 | indirect |
| npm | @types/mime | 1.3.5 | indirect |
| npm | @types/ms | 2.1.0 | indirect |
| npm | @types/node | 22.19.1 | indirect |
| npm | @types/qs | 6.14.0 | indirect |
| npm | @types/range-parser | 1.2.7 | indirect |
| npm | @types/readdir-glob | 1.1.5 | indirect |
| npm | @types/request | 2.48.13 | indirect |
| npm | @types/send | 0.17.6 | indirect |
| npm | @types/send | 1.2.1 | indirect |
| npm | @types/serve-static | 1.15.10 | indirect |
| npm | @types/through | 0.0.33 | indirect |
| npm | @types/tough-cookie | 4.0.5 | indirect |
| npm | @types/unzipper | 0.10.11 | indirect |
| npm | @types/ws | 8.18.1 | indirect |
| npm | abort-controller | 3.0.0 | indirect |
| npm | accepts | 1.3.8 | indirect |
| npm | accepts | 2.0.0 | indirect |
| npm | acorn | 8.15.0 | indirect |
| npm | acorn-walk | 8.3.4 | indirect |
| npm | agent-base | 6.0.2 | indirect |
| npm | agent-base | 7.1.4 | indirect |
| npm | ajv | 8.18.0 | indirect |
| npm | ajv-formats | 3.0.1 | indirect |
| npm | ansi-escapes | 7.2.0 | indirect |
| npm | ansi-regex | 5.0.1 | indirect |
| npm | ansi-regex | 6.2.2 | indirect |
| npm | ansi-styles | 4.3.0 | indirect |
| npm | any-promise | 1.3.0 | indirect |
| npm | archiver-utils | 5.0.2 | indirect |
| npm | arg | 4.1.3 | indirect |
| npm | array-flatten | 1.1.1 | indirect |
| npm | arrify | 2.0.1 | indirect |
| npm | async | 3.2.6 | indirect |
| npm | async-retry | 1.3.3 | indirect |
| npm | asynckit | 0.4.0 | indirect |
| npm | atomically | 2.1.0 | indirect |
| npm | b4a | 1.7.4 | indirect |
| npm | balanced-match | 1.0.2 | indirect |
| npm | balanced-match | 4.0.4 | indirect |
| npm | bare-events | 2.8.2 | indirect |
| npm | base64-js | 1.5.1 | indirect |
| npm | bignumber.js | 9.3.1 | indirect |
| npm | bluebird | 3.7.2 | indirect |
| npm | body-parser | 1.20.4 | indirect |
| npm | body-parser | 2.2.2 | indirect |
| npm | brace-expansion | 2.0.2 | indirect |
| npm | brace-expansion | 5.0.3 | indirect |
| npm | buffer | 6.0.3 | indirect |
| npm | buffer-crc32 | 1.0.0 | indirect |
| npm | buffer-equal-constant-time | 1.0.1 | indirect |
| npm | bytes | 3.1.2 | indirect |
| npm | call-bind-apply-helpers | 1.0.2 | indirect |
| npm | call-bound | 1.0.4 | indirect |
| npm | char-regex | 1.0.2 | indirect |
| npm | chardet | 2.1.1 | indirect |
| npm | cli-cursor | 5.0.0 | indirect |
| npm | cli-highlight | 2.1.11 | indirect |
| npm | cli-spinners | 2.9.2 | indirect |
| npm | cli-table3 | 0.6.5 | indirect |
| npm | cli-width | 4.1.0 | indirect |
| npm | cliui | 7.0.4 | indirect |
| npm | color-convert | 2.0.1 | indirect |
| npm | color-name | 1.1.4 | indirect |
| npm | combined-stream | 1.0.8 | indirect |
| npm | compress-commons | 6.0.2 | indirect |
| npm | content-disposition | 0.5.4 | indirect |
| npm | content-disposition | 1.0.1 | indirect |
| npm | content-type | 1.0.5 | indirect |
| npm | cookie | 0.7.2 | indirect |
| npm | cookie-signature | 1.0.7 | indirect |
| npm | cookie-signature | 1.2.2 | indirect |
| npm | core-util-is | 1.0.3 | indirect |
| npm | cors | 2.8.5 | indirect |
| npm | crc-32 | 1.2.2 | indirect |
| npm | crc32-stream | 6.0.0 | indirect |
| npm | create-require | 1.1.1 | indirect |
| npm | cross-spawn | 7.0.6 | indirect |
| npm | debounce-fn | 6.0.0 | indirect |
| npm | debug | 2.6.9 | indirect |
| npm | debug | 4.4.3 | indirect |
| npm | delayed-stream | 1.0.0 | indirect |
| npm | depd | 2.0.0 | indirect |
| npm | destroy | 1.2.0 | indirect |
| npm | dot-prop | 9.0.0 | indirect |
| npm | dunder-proto | 1.0.1 | indirect |
| npm | duplexer2 | 0.1.4 | indirect |
| npm | duplexify | 4.1.3 | indirect |
| npm | ecdsa-sig-formatter | 1.0.11 | indirect |
| npm | ee-first | 1.1.1 | indirect |
| npm | emoji-regex | 10.6.0 | indirect |
| npm | emoji-regex | 8.0.0 | indirect |
| npm | emojilib | 2.4.0 | indirect |
| npm | encodeurl | 2.0.0 | indirect |
| npm | end-of-stream | 1.4.5 | indirect |
| npm | env-paths | 3.0.0 | indirect |
| npm | environment | 1.1.0 | indirect |
| npm | es-define-property | 1.0.1 | indirect |
| npm | es-errors | 1.3.0 | indirect |
| npm | es-object-atoms | 1.1.1 | indirect |
| npm | es-set-tostringtag | 2.1.0 | indirect |
| npm | esbuild | 0.27.1 | indirect |
| npm | escalade | 3.2.0 | indirect |
| npm | escape-html | 1.0.3 | indirect |
| npm | etag | 1.8.1 | indirect |
| npm | event-target-shim | 5.0.1 | indirect |
| npm | events | 3.3.0 | indirect |
| npm | events-universal | 1.0.1 | indirect |
| npm | eventsource | 3.0.7 | indirect |
| npm | eventsource-parser | 3.0.6 | indirect |
| npm | express-rate-limit | 8.2.1 | indirect |
| npm | extend | 3.0.2 | indirect |
| npm | fast-deep-equal | 3.1.3 | indirect |
| npm | fast-fifo | 1.3.2 | indirect |
| npm | fast-uri | 3.1.0 | indirect |
| npm | fast-xml-parser | 5.3.6 | indirect |
| npm | finalhandler | 1.3.2 | indirect |
| npm | finalhandler | 2.1.1 | indirect |
| npm | form-data | 2.5.5 | indirect |
| npm | forwarded | 0.2.0 | indirect |
| npm | fresh | 0.5.2 | indirect |
| npm | fresh | 2.0.0 | indirect |
| npm | fs-extra | 11.3.3 | indirect |
| npm | fsevents | 2.3.3 | indirect |
| npm | function-bind | 1.1.2 | indirect |
| npm | gaxios | 6.7.1 | indirect |
| npm | gcp-metadata | 6.1.1 | indirect |
| npm | get-caller-file | 2.0.5 | indirect |
| npm | get-east-asian-width | 1.4.0 | indirect |
| npm | get-intrinsic | 1.3.0 | indirect |
| npm | get-proto | 1.0.1 | indirect |
| npm | get-tsconfig | 4.13.0 | indirect |
| npm | glob | 13.0.6 | indirect |
| npm | google-auth-library | 9.15.1 | indirect |
| npm | google-logging-utils | 0.0.2 | indirect |
| npm | gopd | 1.2.0 | indirect |
| npm | graceful-fs | 4.2.11 | indirect |
| npm | gtoken | 7.1.0 | indirect |
| npm | has-flag | 4.0.0 | indirect |
| npm | has-symbols | 1.1.0 | indirect |
| npm | has-tostringtag | 1.0.2 | indirect |
| npm | hasown | 2.0.2 | indirect |
| npm | highlight.js | 10.7.3 | indirect |
| npm | hono | 4.12.2 | indirect |
| npm | html-entities | 2.6.0 | indirect |
| npm | http-errors | 2.0.1 | indirect |
| npm | http-proxy-agent | 5.0.0 | indirect |
| npm | https-proxy-agent | 5.0.1 | indirect |
| npm | https-proxy-agent | 7.0.6 | indirect |
| npm | iconv-lite | 0.4.24 | indirect |
| npm | iconv-lite | 0.7.0 | indirect |
| npm | ieee754 | 1.2.1 | indirect |
| npm | inherits | 2.0.4 | indirect |
| npm | ip-address | 10.0.1 | indirect |
| npm | ipaddr.js | 1.9.1 | indirect |
| npm | is-fullwidth-code-point | 3.0.0 | indirect |
| npm | is-interactive | 2.0.0 | indirect |
| npm | is-promise | 4.0.0 | indirect |
| npm | is-stream | 2.0.1 | indirect |
| npm | is-unicode-supported | 1.3.0 | indirect |
| npm | is-unicode-supported | 2.1.0 | indirect |
| npm | isarray | 1.0.0 | indirect |
| npm | isexe | 2.0.0 | indirect |
| npm | jose | 6.1.3 | indirect |
| npm | json-bigint | 1.0.0 | indirect |
| npm | json-schema-traverse | 1.0.0 | indirect |
| npm | json-schema-typed | 8.0.2 | indirect |
| npm | jsonfile | 6.2.0 | indirect |
| npm | jwa | 2.0.1 | indirect |
| npm | jws | 4.0.1 | indirect |
| npm | lazystream | 1.0.1 | indirect |
| npm | lodash | 4.17.23 | indirect |
| npm | lodash.includes | 4.3.0 | indirect |
| npm | lodash.isboolean | 3.0.3 | indirect |
| npm | lodash.isinteger | 4.0.4 | indirect |
| npm | lodash.isnumber | 3.0.3 | indirect |
| npm | lodash.isplainobject | 4.0.6 | indirect |
| npm | lodash.isstring | 4.0.1 | indirect |
| npm | lodash.once | 4.1.1 | indirect |
| npm | log-symbols | 6.0.0 | indirect |
| npm | lru-cache | 11.2.6 | indirect |
| npm | make-error | 1.3.6 | indirect |
| npm | math-intrinsics | 1.1.0 | indirect |
| npm | media-typer | 0.3.0 | indirect |
| npm | media-typer | 1.1.0 | indirect |
| npm | merge-descriptors | 1.0.3 | indirect |
| npm | merge-descriptors | 2.0.0 | indirect |
| npm | methods | 1.1.2 | indirect |
| npm | mime | 1.6.0 | indirect |
| npm | mime | 3.0.0 | indirect |
| npm | mime-db | 1.52.0 | indirect |
| npm | mime-db | 1.54.0 | indirect |
| npm | mime-types | 2.1.35 | indirect |
| npm | mime-types | 3.0.2 | indirect |
| npm | mimic-function | 5.0.1 | indirect |
| npm | minimatch | 10.2.3 | indirect |
| npm | minimatch | 5.1.8 | indirect |
| npm | minipass | 7.1.3 | indirect |
| npm | ms | 2.0.0 | indirect |
| npm | ms | 2.1.3 | indirect |
| npm | mute-stream | 2.0.0 | indirect |
| npm | mz | 2.7.0 | indirect |
| npm | negotiator | 0.6.3 | indirect |
| npm | negotiator | 1.0.0 | indirect |
| npm | node-emoji | 2.2.0 | indirect |
| npm | node-fetch | 2.7.0 | indirect |
| npm | node-int64 | 0.4.0 | indirect |
| npm | normalize-path | 3.0.0 | indirect |
| npm | object-assign | 4.1.1 | indirect |
| npm | object-inspect | 1.13.4 | indirect |
| npm | on-finished | 2.4.1 | indirect |
| npm | once | 1.4.0 | indirect |
| npm | onetime | 7.0.0 | indirect |
| npm | p-limit | 3.1.0 | indirect |
| npm | parse5 | 5.1.1 | indirect |
| npm | parse5 | 6.0.1 | indirect |
| npm | parse5-htmlparser2-tree-adapter | 6.0.1 | indirect |
| npm | parseurl | 1.3.3 | indirect |
| npm | path-key | 3.1.1 | indirect |
| npm | path-scurry | 2.0.2 | indirect |
| npm | path-to-regexp | 0.1.12 | indirect |
| npm | path-to-regexp | 8.3.0 | indirect |
| npm | pkce-challenge | 5.0.1 | indirect |
| npm | process | 0.11.10 | indirect |
| npm | process-nextick-args | 2.0.1 | indirect |
| npm | proxy-addr | 2.0.7 | indirect |
| npm | punycode | 2.3.1 | indirect |
| npm | qs | 6.14.2 | indirect |
| npm | range-parser | 1.2.1 | indirect |
| npm | raw-body | 2.5.3 | indirect |
| npm | raw-body | 3.0.2 | indirect |
| npm | readable-stream | 2.3.8 | indirect |
| npm | readable-stream | 3.6.2 | indirect |
| npm | readable-stream | 4.7.0 | indirect |
| npm | readdir-glob | 1.1.3 | indirect |
| npm | require-directory | 2.1.1 | indirect |
| npm | require-from-string | 2.0.2 | indirect |
| npm | resolve-pkg-maps | 1.0.0 | indirect |
| npm | restore-cursor | 5.1.0 | indirect |
| npm | retry | 0.13.1 | indirect |
| npm | retry-request | 7.0.2 | indirect |
| npm | router | 2.2.0 | indirect |
| npm | run-async | 4.0.6 | indirect |
| npm | rxjs | 7.8.2 | indirect |
| npm | safe-buffer | 5.1.2 | indirect |
| npm | safe-buffer | 5.2.1 | indirect |
| npm | safer-buffer | 2.1.2 | indirect |
| npm | semver | 7.7.3 | indirect |
| npm | send | 0.19.2 | indirect |
| npm | send | 1.2.1 | indirect |
| npm | serve-static | 1.16.3 | indirect |
| npm | serve-static | 2.2.1 | indirect |
| npm | setprototypeof | 1.2.0 | indirect |
| npm | shebang-command | 2.0.0 | indirect |
| npm | shebang-regex | 3.0.0 | indirect |
| npm | side-channel | 1.1.0 | indirect |
| npm | side-channel-list | 1.0.0 | indirect |
| npm | side-channel-map | 1.0.1 | indirect |
| npm | side-channel-weakmap | 1.0.2 | indirect |
| npm | signal-exit | 4.1.0 | indirect |
| npm | skin-tone | 2.0.0 | indirect |
| npm | statuses | 2.0.2 | indirect |
| npm | stdin-discarder | 0.2.2 | indirect |
| npm | stream-events | 1.0.5 | indirect |
| npm | stream-shift | 1.0.3 | indirect |
| npm | streamx | 2.23.0 | indirect |
| npm | string-width | 4.2.3 | indirect |
| npm | string-width | 7.2.0 | indirect |
| npm | string_decoder | 1.1.1 | indirect |
| npm | string_decoder | 1.3.0 | indirect |
| npm | strip-ansi | 6.0.1 | indirect |
| npm | strip-ansi | 7.1.2 | indirect |
| npm | strnum | 2.1.2 | indirect |
| npm | stubborn-fs | 2.0.0 | indirect |
| npm | stubborn-utils | 1.0.2 | indirect |
| npm | stubs | 3.0.0 | indirect |
| npm | supports-color | 7.2.0 | indirect |
| npm | supports-hyperlinks | 3.2.0 | indirect |
| npm | tar-stream | 3.1.7 | indirect |
| npm | teeny-request | 9.0.0 | indirect |
| npm | text-decoder | 1.2.6 | indirect |
| npm | thenify | 3.3.1 | indirect |
| npm | thenify-all | 1.6.0 | indirect |
| npm | toidentifier | 1.0.1 | indirect |
| npm | tr46 | 3.0.0 | indirect |
| npm | ts-node | 10.9.2 | indirect |
| npm | tslib | 2.8.1 | indirect |
| npm | tsx | 4.21.0 | indirect |
| npm | type-fest | 4.41.0 | indirect |
| npm | type-is | 1.6.18 | indirect |
| npm | type-is | 2.0.1 | indirect |
| npm | typescript | 5.9.3 | indirect |
| npm | uint8array-extras | 1.5.0 | indirect |
| npm | undici-types | 6.21.0 | indirect |
| npm | unicode-emoji-modifier-base | 1.0.0 | indirect |
| npm | universalify | 2.0.1 | indirect |
| npm | unpipe | 1.0.0 | indirect |
| npm | util-deprecate | 1.0.2 | indirect |
| npm | utils-merge | 1.0.1 | indirect |
| npm | uuid | 8.3.2 | indirect |
| npm | uuid | 9.0.1 | indirect |
| npm | v8-compile-cache-lib | 3.0.1 | indirect |
| npm | vary | 1.1.2 | indirect |
| npm | webidl-conversions | 3.0.1 | indirect |
| npm | whatwg-url | 5.0.0 | indirect |
| npm | when-exit | 2.1.5 | indirect |
| npm | which | 2.0.2 | indirect |
| npm | wrap-ansi | 6.2.0 | indirect |
| npm | wrap-ansi | 7.0.0 | indirect |
| npm | wrappy | 1.0.2 | indirect |
| npm | y18n | 5.0.8 | indirect |
| npm | yargs | 16.2.0 | indirect |
| npm | yargs-parser | 20.2.9 | indirect |
| npm | yn | 3.1.1 | indirect |
| npm | yocto-queue | 0.1.0 | indirect |
| npm | yoctocolors-cjs | 2.1.3 | indirect |
| npm | zip-stream | 6.0.1 | indirect |
| npm | zod-to-json-schema | 3.25.1 | indirect |
Dependency advisories 3
Installing npm:jiva-core@0.3.51 pulls in 365 packages, direct and transitive: 3 carry known advisories, of which 0 are direct dependencies.
| Package | Version | Relation | Severity | Advisories | Fixed in |
|---|---|---|---|---|---|
| brace-expansion | 2.1.2 | indirect | high | 1 | 5.0.8 |
| uuid | 9.0.1 | indirect | high | 1 | 13.0.1 |
| @hono/node-server | 1.19.15 | indirect | moderate | 1 | 2.0.5 |
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"agent",
"autonomous",
"claude-plugins",
"claude-skills",
"cli",
"gpt-oss-120b",
"mcp-servers",
"sarvam-105b"
],
"is_fork": false,
"size_kb": 30757,
"has_wiki": true,
"homepage": "https://www.karmaloop.ai",
"languages": {
"Shell": 4769,
"Dockerfile": 1752,
"JavaScript": 102260,
"TypeScript": 703528
},
"pushed_at": "2026-07-20T14:52:10Z",
"created_at": "2024-08-17T13:19:42Z",
"owner_type": "Organization",
"updated_at": "2026-07-20T14:52:30Z",
"description": "Jiva is a CLI-first, open source autonomous AI agent and open alternative to Claude. Written in TypeScript with native support for Sarvam-105B and gpt-oss-120b, it autonomously plans and executes tasks from your terminal. Supports MCP servers, a built-in Skills system, and Jiva Personas - a plugin framework fully compatible with Claude Plugins.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript",
"JavaScript"
]
},
"owner": {
"blog": "https://www.karmaloop.ai",
"name": "Karmaloop AI",
"type": "Organization",
"login": "KarmaloopAI",
"company": null,
"location": "India",
"followers": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/35539817?v=4",
"created_at": "2018-01-17T18:38:48Z",
"is_verified": null,
"public_repos": 9,
"account_age_days": 3112
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.3.51",
"kind": "patch",
"published_at": "2026-07-20T14:51:09Z"
},
{
"tag": "v0.3.50",
"kind": "patch",
"published_at": "2026-07-14T09:27:37Z"
},
{
"tag": "v0.3.48",
"kind": "patch",
"published_at": "2026-06-30T07:35:50Z"
},
{
"tag": "v0.3.47",
"kind": "patch",
"published_at": "2026-05-19T09:55:10Z"
},
{
"tag": "v0.3.46",
"kind": "patch",
"published_at": "2026-05-15T07:58:42Z"
},
{
"tag": "v0.3.44",
"kind": "patch",
"published_at": "2026-04-28T11:45:06Z"
},
{
"tag": "v0.3.43",
"kind": "patch",
"published_at": "2026-04-06T07:34:21Z"
},
{
"tag": "v0.3.42",
"kind": "patch",
"published_at": "2026-03-28T10:57:08Z"
},
{
"tag": "v0.3.41",
"kind": "patch",
"published_at": "2026-03-14T12:23:53Z"
},
{
"tag": "v0.3.4",
"kind": "patch",
"published_at": "2026-03-13T12:26:21Z"
},
{
"tag": "v0.3.3",
"kind": "patch",
"published_at": "2026-03-12T07:33:07Z"
},
{
"tag": "v0.3.23",
"kind": "patch",
"published_at": "2026-02-28T18:34:39Z"
},
{
"tag": "v0.3.22",
"kind": "patch",
"published_at": "2026-02-25T11:48:05Z"
},
{
"tag": "v0.3.2",
"kind": "patch",
"published_at": "2026-02-16T10:57:13Z"
},
{
"tag": "v0.3.1",
"kind": "patch",
"published_at": "2026-02-16T04:40:44Z"
},
{
"tag": "v0.2.3",
"kind": "patch",
"published_at": "2025-12-22T13:23:17Z"
},
{
"tag": "v0.1.3",
"kind": "patch",
"published_at": "2025-12-10T05:56:02Z"
}
],
"recent_commits": [
{
"oid": "15ba543c372773b9b8464a431aacc7e79e90298e",
"body": "v0.3.51: detailed tool-call argument logging in Code mode",
"is_bot": false,
"headline": "Merge pull request #56 from KarmaloopAI/develop",
"author_name": "Abhishek Chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-07-20T14:50:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ccfe9a572aacbd039d937aacf22c820d19870a8",
"body": "CodeAgent's \"Tool: <name>\" log line now includes the actual call\narguments (path, command, etc.), truncated per-value at 500 chars, so\nthe CLI, HTTP interface logs, and any embedding consumer (e.g. Jivam)\ncan show what a tool call actually did instead of just its name.\n\nAlso fixes a real, independen\n[…]\n\ncould leak a stale [PersonaName] prefix onto Code mode's log lines,\ncorrupting any log-line parser expecting a plain [CodeAgent] tag.\nCodeAgent now resets persona context at the start of its own run.",
"is_bot": false,
"headline": "v0.3.51: detailed tool-call argument logging in Code mode",
"author_name": "abi-chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-07-20T14:50:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a6985640fb7252b7d16599e835b3ccd9adedae2f",
"body": "v0.3.50",
"is_bot": false,
"headline": "Merge pull request #55 from KarmaloopAI/develop",
"author_name": "Abhishek Chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-07-14T09:26:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e1d51d77337122607cb6027a507864bbf6b3b600",
"body": null,
"is_bot": false,
"headline": "Jiva v0.3.50 release readiness",
"author_name": "abi-chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-07-14T09:25:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "99abb7bfb9fb60b70359e169949313922fefd933",
"body": null,
"is_bot": false,
"headline": "Conversation title generation bug fix",
"author_name": "abi-chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-07-06T18:35:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "087cdfa44d938024ac06173900d62b835f986e63",
"body": null,
"is_bot": false,
"headline": "Bump version to 0.3.50, add release notes",
"author_name": "Abhishek Chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-07-06T13:59:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38cc64becd5c35b89748552b3a11ffabeb155367",
"body": "…models\n\n1. Conversation metadata for code-mode tasks. ConversationMetadata\n (unified into storage/types.ts — it was previously duplicated with\n a second, drifting copy in conversation-manager.ts, which is now\n just a re-export) gains mcpServers, maxIterations, and harness.\n harness is a fre\n[…]\n byte-for-byte\n identical. Verified end-to-end: replacing one section left the\n others untouched, and the zero-match/multiple-match error paths\n behave the same as the existing exact-match mode.",
"is_bot": false,
"headline": "Record code-mode task context; skeleton-first guidance for low-token …",
"author_name": "Abhishek Chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-07-06T13:58:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e00d34ee8dbad7db37ae30c5f586a8b74c208039",
"body": "…rough\n\nSarvam's standard plan caps requests at 40/min and output at 4096\ntokens. Two fixes, both model-agnostic (not Sarvam-specific):\n\n1. Proactive rate limiting — ModelClientConfig gains\n maxRequestsPerMinute. ModelClient tracks request timestamps in a\n trailing 60s window and waits BEFORE se\n[…]\nreal Sarvam endpoint to observe live\n429 behavior, but the provided test key had no credits\n(insufficient_quota_error) — implemented based on documented behavior\nand standard HTTP conventions instead.",
"is_bot": false,
"headline": "Add model-agnostic rate limiting; fix missing defaultMaxTokens passth…",
"author_name": "Abhishek Chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-07-06T13:58:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cb91f484b2b3dbd874b3d53fbb7efc185bb4ad64",
"body": "Jiva's CLI config previously lived at a platform-specific location via\nthe conf package's default resolution (~/Library/Preferences/jiva-nodejs\non macOS, %APPDATA%/jiva-nodejs/Config on Windows, ~/.config/jiva-nodejs\non Linux) - a different file entirely from what the local (non-cloud)\nHTTP interfac\n[…]\nas\nauthoritative and migration is skipped on all subsequent runs.\n\nThe CLI prints the migration result on the next jiva invocation\n(console.log); the HTTP interface logs it via logger.warn on startup.",
"is_bot": false,
"headline": "Store config.json in ~/.jiva for all interfaces, migrate legacy configs",
"author_name": "Abhishek Chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-07-06T12:43:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c565f70334f038d046f8b58054272aa1358058d8",
"body": "v0.3.49 added hasVision support for reasoning/tool-calling models, but\nthe CLI setup wizard never asked for it — the flag could only be set\nby hand-editing config.json.\n\nAdds src/utils/vision-detection.ts: matches a model name against known\nvision-capable model families (Llama 4 Maverick/Scout, Qwen\n[…]\nand tool-calling model setup flows, defaulting to the\ndetection result and showing the matched reason (e.g. 'Llama 4\nMaverick supports vision'). Also added a Vision: Yes/No line to\njiva config --show.",
"is_bot": false,
"headline": "Auto-detect vision capability during setup, prompt y/n to confirm",
"author_name": "Abhishek Chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-07-06T12:40:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cedf6daca6a3384fb5fff6bbbca8da938de89128",
"body": "Covers the three fixes just cherry-picked onto develop: Manager\ndouble system-message crash on strict providers (Qwen3.6), CodeAgent\ngiving up early due to a compaction deadlock, and hasVision support\nfor reasoning/tool-calling models with native vision.",
"is_bot": false,
"headline": "Bump version to 0.3.49, add release notes",
"author_name": "Abhishek Chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-07-06T07:37:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3254e6af69cc8f8eb5c6418e17d21ee2fa338d52",
"body": "…ations\n\nRoot cause: in-loop context compaction was gated on the response having\ntool calls (`response.toolCalls && response.toolCalls.length > 0`).\nThis created a deadlock — once the model starts returning truly empty\nresponses (no content, no tool calls), that gate can never be true\nagain, so cont\n[…]\nlem on the next attempt. CodeAgent now forces an immediate\n compaction in that case (bypassing the normal token threshold) and\n uses a shorter, more direct recovery nudge instead of the generic one.",
"is_bot": false,
"headline": "Fix CodeAgent giving up after 4 empty responses despite ample maxIter…",
"author_name": "Abhishek Chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-07-06T07:31:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a9ef79eb6219f819e6e35200da01eb83f5fdb9d0",
"body": "…te multimodal model\n\nSome providers (e.g. Groq's llama-4-maverick, Krutrim's vision-enabled\nmodels) offer a single model that handles both reasoning and vision,\nmaking the separate dedicated multimodal-model configuration and its\nimage-captioning detour unnecessary and wasteful for those setups.\n\nA\n[…]\n delegate entirely to\nModelOrchestrator.chat()/chatWithFallback(), so fixing routing at the\norchestrator is sufficient for both to pick up native vision support\nwith no changes needed in either agent.",
"is_bot": false,
"headline": "Support vision-capable reasoning/tool-calling models without a separa…",
"author_name": "Abhishek Chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-07-06T07:31:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2bfa5054e1cbe865b37e4b6efe7c38fe68f486c9",
"body": "…ding system message\n\ngetSystemMessages() previously appended the directive as a second\n'developer'-role message when one was present, which becomes a second\n'system' message after role conversion. Some providers (e.g. Krutrim's\nQwen3.6) reject any request where the system message isn't first/only,\n\n[…]\n— merging the directive\ninto the single system message is safe for every provider and fixes\nthe double-message issue for providers stricter than Krutrim's\ngpt-oss-120b (which happened to tolerate it).",
"is_bot": false,
"headline": "Fix Manager double system-message on providers requiring a single lea…",
"author_name": "Abhishek Chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-07-06T07:31:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "12d1d332f3ff8877b6966afd8f1444a3c5d295b4",
"body": "Built-in Benchmarking Suite",
"is_bot": false,
"headline": "Merge pull request #53 from KarmaloopAI/develop",
"author_name": "Abhishek Chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-06-30T07:34:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0fd3c658dc9aeb0fde96b0c1cd837224b5f2e740",
"body": "…onfiguration works with Jiva",
"is_bot": false,
"headline": "Built-in Benchmarking suite to quickly test out how well your model c…",
"author_name": "abi-chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-06-29T12:40:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ab1b34e1367574421e059d7e7e9b0d922478322",
"body": "v0.3.47",
"is_bot": false,
"headline": "Merge pull request #51 from KarmaloopAI/develop",
"author_name": "Abhishek Chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-05-19T09:54:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8b6cd072aaaa29ec8758d8ed126fa2b3706f5914",
"body": null,
"is_bot": false,
"headline": "v0.3.47",
"author_name": "abi-chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-05-19T09:48:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "12efdb05a3e1ceb435cc109c3ad5431f1df9fd1b",
"body": "…gle ADC support\n\n- Fix Groq 400 error when image-only tool results produce empty tool message content\n- Isolate manager synthesis from planning context to prevent JSON bleed-through\n- Add rawHarmonyContent to ModelResponse so Harmony providers see their own tokens in history\n- Parse Vertex AI Harmo\n[…]\nsession-manager\n- Fix model || defaultModel fallback in CLI model client construction\n- Bump default sub-agent maxIterations from 10 to 20\n- Rename JIVA_STORAGE_PROVIDER default from gcp to gcp-bucket",
"is_bot": false,
"headline": "Fix multimodal empty tool content, Harmony/Vertex AI parsing, and Goo…",
"author_name": "abi-chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-05-19T09:42:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c041cce73fa8fe78cc7aaad6ee425e5800039c57",
"body": "Bug fix release v0.3.46",
"is_bot": false,
"headline": "Merge pull request #50 from KarmaloopAI/develop",
"author_name": "Abhishek Chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-05-15T07:56:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f6c17ab68e52022a6abba418511a7a745a3e0468",
"body": null,
"is_bot": false,
"headline": "v0.3.46",
"author_name": "abi-chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-05-15T07:42:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "53be99d34083d39eba921b00e92a3d4d155a9f70",
"body": null,
"is_bot": false,
"headline": "Bug fix release 0.3.45",
"author_name": "abi-chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-05-08T10:13:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "72622a6fc818fa8fa722d8f79e5fca71afe543f4",
"body": "v0.3.44 with Code Mode MCP, Skills in non-persona mode, and Sarvam-105B tool calling fixes",
"is_bot": false,
"headline": "Merge pull request #49 from KarmaloopAI/develop",
"author_name": "Abhishek Chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-04-28T11:42:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8e9bcaaae525b92c5f47c06c0fe5090d96992abb",
"body": "…5B tool calling fixes",
"is_bot": false,
"headline": "v0.3.44 with Code Mode MCP, Skills in non-persona mode, and Sarvam-10…",
"author_name": "abi-chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-04-27T07:14:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "44577247f50facefe508a74a6d6d6bab4873488e",
"body": null,
"is_bot": false,
"headline": "Improved worker agent",
"author_name": "abi-chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-04-17T08:09:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5aadef748dd2e9b46f96227b096286ceed71f9cc",
"body": "v0.3.43",
"is_bot": false,
"headline": "Merge pull request #48 from KarmaloopAI/develop",
"author_name": "Abhishek Chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-04-06T07:33:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4101dc10bbdaa62110579ac776e944c843bd9a09",
"body": null,
"is_bot": false,
"headline": "Updated documentation and a guide to harnesses",
"author_name": "abi-chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-04-06T07:31:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "00a530afbfcc94a30d5b5faaebe3d267ce398562",
"body": null,
"is_bot": false,
"headline": "Release notes v0.3.43",
"author_name": "abi-chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-04-06T07:14:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56e1934653bea292cfc3e8889263d7d7404c7fc3",
"body": " - Implement TokenUsageSnapshot interface and token tracking infrastructure\n - Add tokenUsage to AgentResponse interface for tracking consumption\n - Update CodeAgent to capture and report token usage from orchestrator\n - Increase MAX_CONSECUTIVE_READS threshold from 5 to 15 to accommodate longer sessions\n - Add workspace directive support in conversation summarization for better context retention\n - Update agent configuration to include token tracking parameters",
"is_bot": false,
"headline": "feat: Add token tracking and usage monitoring to agent system",
"author_name": "abi-chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-04-06T07:10:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "45d94e58f9e9a24c13a90a058f1e23e1fd36ba8c",
"body": "- Dry run assumption prevention",
"is_bot": false,
"headline": "- Evaluator Harness",
"author_name": "abi-chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-03-31T07:54:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c31139e0c475967f6a6c31a28199e4c5c9d5c5b3",
"body": "v0.3.42",
"is_bot": false,
"headline": "Merge pull request #47 from KarmaloopAI/develop",
"author_name": "Abhishek Chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-03-28T10:52:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b6b238d9e56aae27d2b7043ae1ce2902a1468b3c",
"body": null,
"is_bot": false,
"headline": "Fixed security issue with Math.random() usage",
"author_name": "abi-chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-03-28T10:51:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c44c7255374104fbdfb054c6468325ede9800769",
"body": "- Stop feature enabled\n- Sarvam 105B a first class supported model",
"is_bot": false,
"headline": "- Conversation aware of it's type e.g. chat versus code",
"author_name": "abi-chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-03-28T10:41:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe3b51996dfb92fb7c9891514ef4c23fc24b281a",
"body": "Model client:\n- New src/models/model-client.ts with ModelClientConfig / ModelClient /\n createModelClient — generic OpenAI-compatible client for any provider\n- krutrim.ts now re-exports the new names as deprecated aliases (no breaking change)\n- Fix reasoning_content field: normalise Groq (.reasoning\n[…]\nshown warning that it has no multimodal model\n- Krutrim: sets useHarmonyFormat=true, reasoningEffortStrategy=system_prompt\n- Groq/Sarvam: sets useHarmonyFormat=false, reasoningEffortStrategy=api_param",
"is_bot": false,
"headline": "refactor: rename KrutrimModel→ModelClient; provider-aware setup wizard",
"author_name": "abi-chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-03-27T11:00:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8704ac896afd98dc86b06cdfbec380e55cad9d14",
"body": "Session-manager was hardcoding useHarmonyFormat=true (Krutrim-specific)\nand reading .model field, ignoring .defaultModel alias. Now respects\nthe config value for useHarmonyFormat and falls back to defaultModel\nso non-Krutrim providers (e.g. Groq) work correctly.",
"is_bot": false,
"headline": "fix(http): read useHarmonyFormat and model name from bucket config",
"author_name": "abi-chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-03-23T11:24:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "54af204e0c85514b114d66ae1d6cbf30f6df87cb",
"body": "v0.3.41",
"is_bot": false,
"headline": "Merge pull request #46 from KarmaloopAI/develop",
"author_name": "Abhishek Chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-03-14T12:22:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe6fe48e9684fb5c8937f57ebbe4c46d0c1a9b3e",
"body": null,
"is_bot": false,
"headline": "v0.3.41",
"author_name": "abi-chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-03-14T12:20:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d585a7528a7e8bf2f2275d8d17c730198ed7b0bf",
"body": "v0.3.4 - Code mode plus Agent upgrade",
"is_bot": false,
"headline": "Merge pull request #45 from KarmaloopAI/develop",
"author_name": "Abhishek Chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-03-13T12:25:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3c78d8bead5287fb3eee929a944ea4eb74a8202f",
"body": null,
"is_bot": false,
"headline": "Updated release notes",
"author_name": "abi-chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-03-13T12:25:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "945ddfc71004fdff6c650f70a9a37392a84aefb6",
"body": null,
"is_bot": false,
"headline": "Code mode plus Agent upgrade",
"author_name": "abi-chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-03-13T12:17:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a8573ff12973e0498b3843218dc6c776039708b",
"body": "v0.3.3",
"is_bot": false,
"headline": "Merge pull request #44 from KarmaloopAI/develop",
"author_name": "Abhishek Chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-03-12T07:31:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bd250bde638f861397631898958658d3befb35b9",
"body": "- Added a dedicated tool-calling model to improve the reliability of tool call formatting as standard JSON.\n- Updated the WorkerAgent to utilize the tool-calling model as the primary model for tool execution, with the reasoning model as a fallback.\n- Enhanced error handling for tool call failures, i\n[…]\nonfiguration of the tool-calling model, including endpoint, API key, and model name.\n- Improved logging and user feedback mechanisms to provide clearer insights into tool execution and error handling.",
"is_bot": false,
"headline": "feat: introduce tool-calling model support for enhanced tool execution",
"author_name": "abi-chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-03-10T09:01:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dc3cf0395988f1d953cfc01062ec0f8baed9195e",
"body": "… deduplication logic for corrections",
"is_bot": false,
"headline": "refactor(dual-agent): remove artificial limits on recent messages and…",
"author_name": "abi-chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-03-01T04:33:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "24b219d92da856db718dcede56676f43893c8340",
"body": "…ocumentation\n\ndocs: add Context & Persona Alignment Plan architecture document",
"is_bot": false,
"headline": "Merge pull request #41 from KarmaloopAI/copilot/create-architecture-d…",
"author_name": "Abhishek Chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-03-01T03:51:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "694bef20b5e95df0fb6468443114f8fe0b583d4e",
"body": "…n-0-3-3\n\nImplement Context & Persona Alignment Plan (v0.3.3)",
"is_bot": false,
"headline": "Merge pull request #43 from KarmaloopAI/copilot/update-package-versio…",
"author_name": "Abhishek Chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-03-01T03:50:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d4b1fb00141d5166205570f6f7486aa2bcc73403",
"body": "Co-authored-by: abi-chatterjee <35539779+abi-chatterjee@users.noreply.github.com>",
"is_bot": true,
"headline": "Sync package-lock.json version to 0.3.3",
"author_name": "copilot-swe-agent[bot]",
"author_login": "Copilot",
"committed_at": "2026-02-28T19:02:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f8296d2e44b1868d52d82dfaa4f7aadca79e260",
"body": "…ignal, per-call directive injection, persona-aware validation, and per-subtask retry budget\n\nCo-authored-by: abi-chatterjee <35539779+abi-chatterjee@users.noreply.github.com>",
"is_bot": true,
"headline": "Implement Context & Persona Alignment Plan: AgentContext, CompletionS…",
"author_name": "copilot-swe-agent[bot]",
"author_login": "Copilot",
"committed_at": "2026-02-28T19:00:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "96114c138f0760d8c53bb1748d8c90fb05ae5449",
"body": "Co-authored-by: abi-chatterjee <35539779+abi-chatterjee@users.noreply.github.com>",
"is_bot": true,
"headline": "Initial analysis of context and persona alignment plan",
"author_name": "copilot-swe-agent[bot]",
"author_login": "Copilot",
"committed_at": "2026-02-28T18:51:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "777fbb83efa40abb6bd415ac31600757cae94103",
"body": null,
"is_bot": true,
"headline": "Initial plan",
"author_name": "copilot-swe-agent[bot]",
"author_login": "Copilot",
"committed_at": "2026-02-28T18:49:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ea4885b437b5e92a4d7b89e53704bb332d26b3f",
"body": "Merge main",
"is_bot": false,
"headline": "Merge pull request #42 from KarmaloopAI/main",
"author_name": "Abhishek Chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-02-28T18:41:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3dbccaf20a0d7f725d5610e361cf1429052720aa",
"body": "Release v0.3.23",
"is_bot": false,
"headline": "Merge pull request #39 from KarmaloopAI/develop",
"author_name": "Abhishek Chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-02-28T18:33:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "72bb87b17f2d084cd44e1f37b4aa2efb6c297977",
"body": "Co-authored-by: abi-chatterjee <35539779+abi-chatterjee@users.noreply.github.com>",
"is_bot": true,
"headline": "docs: add CONTEXT_AND_PERSONA_ALIGNMENT_PLAN.md architecture document",
"author_name": "copilot-swe-agent[bot]",
"author_login": "Copilot",
"committed_at": "2026-02-28T18:13:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6cc638e7970ef39e6ef5bf98b6c309d3b52515f5",
"body": null,
"is_bot": true,
"headline": "Initial plan",
"author_name": "copilot-swe-agent[bot]",
"author_login": "Copilot",
"committed_at": "2026-02-28T18:10:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1bedff6fb7af7f6ff3d861e9c4a5119dd8b3044b",
"body": "docs: Add v0.3.23 release notes and update README version references",
"is_bot": false,
"headline": "Merge pull request #40 from KarmaloopAI/copilot/sub-pr-39",
"author_name": "Abhishek Chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-02-27T11:57:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2c632db0a34d9ba0f9a9e535c3fb89ab76cc5fee",
"body": "Co-authored-by: abi-chatterjee <35539779+abi-chatterjee@users.noreply.github.com>",
"is_bot": true,
"headline": "Add v0.3.23 release notes and update README files",
"author_name": "copilot-swe-agent[bot]",
"author_login": "Copilot",
"committed_at": "2026-02-27T10:39:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "07171bffdea88ece09d4542aabc7b57bbdba8ba5",
"body": null,
"is_bot": true,
"headline": "Initial plan",
"author_name": "copilot-swe-agent[bot]",
"author_login": "Copilot",
"committed_at": "2026-02-27T10:37:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "322ee7ed5a45c8ebeb66a4695d73b6ca97d122fd",
"body": "…ath-logic\n\nFix Linux filesystem path bug, centralize platform-specific path logic, and fix client agent mustUseTools crash",
"is_bot": false,
"headline": "Merge pull request #38 from KarmaloopAI/copilot/refactor-filesystem-p…",
"author_name": "Abhishek Chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-02-26T08:44:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d9325bd5ad29376dda2ad38e554c52939b8eedd8",
"body": null,
"is_bot": false,
"headline": "Bump version from 0.3.22 to 0.3.23",
"author_name": "Abhishek Chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-02-26T08:43:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "294a287df2ca29b52a9dc26c355a363edffe7616",
"body": "…rror\n\nCo-authored-by: abi-chatterjee <35539779+abi-chatterjee@users.noreply.github.com>",
"is_bot": true,
"headline": "Fix workspace dir in filesystem allowed paths and mustUseTools type e…",
"author_name": "copilot-swe-agent[bot]",
"author_login": "Copilot",
"committed_at": "2026-02-26T08:35:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "21889a815255e6c53136bc265e11732291602afa",
"body": "… support\n\nCo-authored-by: abi-chatterjee <35539779+abi-chatterjee@users.noreply.github.com>",
"is_bot": true,
"headline": "Refactor filesystem path logic: add platform.ts utility and fix Linux…",
"author_name": "copilot-swe-agent[bot]",
"author_login": "Copilot",
"committed_at": "2026-02-26T08:11:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3c6791bd55d65cf96df47bdf596dc314ef248723",
"body": null,
"is_bot": true,
"headline": "Initial plan",
"author_name": "copilot-swe-agent[bot]",
"author_login": "Copilot",
"committed_at": "2026-02-26T08:07:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c2acb194eab4a3a28665f48ae5ae021f6c02f4e3",
"body": "…pm-publish\n\nAdd dev npm publish workflow and fix punycode deprecation warning via lazy @google-cloud/storage import",
"is_bot": false,
"headline": "Merge pull request #36 from KarmaloopAI/copilot/add-github-workflow-n…",
"author_name": "Abhishek Chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-02-26T07:50:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "84022473a958e181e52833367c6d0d7b9424854b",
"body": "Co-authored-by: abi-chatterjee <35539779+abi-chatterjee@users.noreply.github.com>",
"is_bot": true,
"headline": "Fix punycode deprecation warning by lazy-loading @google-cloud/storage",
"author_name": "copilot-swe-agent[bot]",
"author_login": "Copilot",
"committed_at": "2026-02-26T07:03:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cfbfd3a543e3089c72f2668811af90e99ae89531",
"body": "…anch merge\n\nCo-authored-by: abi-chatterjee <35539779+abi-chatterjee@users.noreply.github.com>",
"is_bot": true,
"headline": "Add GitHub workflow to publish npm package with dev tag on develop br…",
"author_name": "copilot-swe-agent[bot]",
"author_login": "Copilot",
"committed_at": "2026-02-25T13:40:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b55075e3071b3aa810610fcc1a0a938968118e9",
"body": null,
"is_bot": true,
"headline": "Initial plan",
"author_name": "copilot-swe-agent[bot]",
"author_login": "Copilot",
"committed_at": "2026-02-25T13:34:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1b80134c3709f1656be4754e63be3227bc19ec43",
"body": "…nd-updates\n\nv0.3.22: Fix deprecated transitive deps (glob, punycode) and add npm publish CI",
"is_bot": false,
"headline": "Merge pull request #34 from KarmaloopAI/copilot/fix-security-issues-a…",
"author_name": "Abhishek Chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-02-25T11:36:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5e48e3c96e3c5a80b3c8eab583def8b701467b50",
"body": "… workflow\n\nCo-authored-by: abi-chatterjee <35539779+abi-chatterjee@users.noreply.github.com>",
"is_bot": true,
"headline": "feat: v0.3.22 - security updates, npm overrides for glob/punycode, CI…",
"author_name": "copilot-swe-agent[bot]",
"author_login": "Copilot",
"committed_at": "2026-02-25T11:25:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "75f01f7eb1e8dc3ad19653a872a64eb56459b5ac",
"body": "Co-authored-by: abi-chatterjee <35539779+abi-chatterjee@users.noreply.github.com>",
"is_bot": true,
"headline": "chore: initial plan for v0.3.22 security updates and CI",
"author_name": "copilot-swe-agent[bot]",
"author_login": "Copilot",
"committed_at": "2026-02-25T11:22:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b91c54faa28a43d81322ef52f502b622aa8f448d",
"body": null,
"is_bot": true,
"headline": "Initial plan",
"author_name": "copilot-swe-agent[bot]",
"author_login": "Copilot",
"committed_at": "2026-02-25T11:19:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e8f5eeaf0479ed814e651f4799ce37eac5525bf",
"body": null,
"is_bot": false,
"headline": "Bug fixes for Release v0.3.21",
"author_name": "abi-chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-02-25T10:36:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ecf3676a4dc1383f62a69f87ed16f0c72da02404",
"body": "…dressing critical issues with multi-agent persona management, workspace context propagation, model temperature settings, and HTTP/cloud deployment compatibility. Additionally, it introduces significant enhancements to Client agent validation through LLM-based semantic analysis and coherence checking",
"is_bot": false,
"headline": "Version 0.3.2 is a focused bug fix and quality improvement release ad…",
"author_name": "abi-chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-02-16T08:00:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5156f1a7d18af62cbd8e5a7ba40c27766922c7c9",
"body": "…ew features",
"is_bot": false,
"headline": "chore(release): Bump version to v0.3.1 and update documentation for n…",
"author_name": "abi-chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-02-15T17:37:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "999ad5b2c47bea61fdcf67e6c84f13c8f1f620a0",
"body": "…functionality\n\n- Ensure base filesystem MCP servers are always available to all agents and personas.\n- Simplify persona configuration by removing the need for filesystem entries in `.mcp.json`.\n- Introduce automatic initialization of filesystem MCP server.\n- Enhance agent spawning with depth control and inheritance of MCP servers.\n- Update documentation and release notes to reflect these changes.",
"is_bot": false,
"headline": "feat(mcp): Implement base MCP server architecture for improved agent …",
"author_name": "abi-chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-02-15T17:33:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f0177c5fdbc2bd217960f0646054597cd3b6a30d",
"body": "- Added a new module for managing personas, including loading, validation, and lifecycle management.\n- Implemented skill loading with YAML frontmatter support, including validation and packaging.\n- Enhanced MCP client to support both stdio and HTTP/SSE transports for server connections.\n- Created ut\n[…]\nds, agents, and hooks within personas.\n- Introduced comprehensive validation logic for skill metadata and frontmatter keys.\n- Added logging for better traceability during persona and skill operations.",
"is_bot": false,
"headline": "feat(personas): Introduce personas and skills system",
"author_name": "abi-chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-02-15T12:05:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "172f47fbefa01b44f062ebec25a00bfb38b4667e",
"body": "…yment support",
"is_bot": false,
"headline": "v0.3.0 initial commit introducing 3-agent pattern and Cloud Run deplo…",
"author_name": "abi-chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2026-02-15T09:15:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1c23e642475e8558a66f0912643932e113eee4e1",
"body": "…options",
"is_bot": false,
"headline": "Implement orchestration logging for dual-agent system and update CLI …",
"author_name": "abi-chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2025-12-22T13:18:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4b3ff7c694022239236ee563cc52e7b56ae92c46",
"body": null,
"is_bot": false,
"headline": "Image support with multimodal model in Dual-agent mode",
"author_name": "Abi Chatterjee",
"author_login": null,
"committed_at": "2025-12-14T17:09:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b5b87b4335a550905963bec9e82597ae7efb7b37",
"body": null,
"is_bot": false,
"headline": "Updated documentation and added release notes",
"author_name": "Abi Chatterjee",
"author_login": null,
"committed_at": "2025-12-14T11:09:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "edc8b08e622fc663b6752b3a1a7216cc7944efd5",
"body": null,
"is_bot": false,
"headline": "Two-agent pattern implemented for Jiva",
"author_name": "Abi Chatterjee",
"author_login": null,
"committed_at": "2025-12-14T11:00:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c89b91c56fa1cce0223279c710794431aa722c45",
"body": null,
"is_bot": false,
"headline": "Version 2 with proper support for non-Krutrim providers",
"author_name": "Abi Chatterjee",
"author_login": null,
"committed_at": "2025-12-11T18:09:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "47a5b8e6ff051599d5e77cf67b42316e5c8e9344",
"body": null,
"is_bot": false,
"headline": "Added new features, conversation saving and pretty print on CLI",
"author_name": "Abi Chatterjee",
"author_login": null,
"committed_at": "2025-12-10T05:44:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "43dd2863200f0e8ea886c7217510ef40caf10d62",
"body": null,
"is_bot": false,
"headline": "Update package.json",
"author_name": "Abi Chatterjee",
"author_login": null,
"committed_at": "2025-12-09T13:57:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2298cb3688ed259d158fcf45c223a2da1e4d5d41",
"body": null,
"is_bot": false,
"headline": "Update package.json",
"author_name": "Abi Chatterjee",
"author_login": null,
"committed_at": "2025-12-09T11:35:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b081e93de343e123e23e1f5992ef5c372fb9cf0",
"body": "This is a brand new version of Jiva, written in Node JS/TypeScript and optimised for the CLI",
"is_bot": false,
"headline": "Brand new gpt-oss-120b based Jiva rebirth",
"author_name": "Abi Chatterjee",
"author_login": null,
"committed_at": "2025-12-09T11:28:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ee1f281efa67c610b58271b27e037b74d4869a84",
"body": null,
"is_bot": false,
"headline": "Remove test files",
"author_name": "Abi Chatterjee",
"author_login": null,
"committed_at": "2025-03-09T22:48:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "21aa72efb17e96ad2523fab215a637b5fbf4bb31",
"body": "…olve-complex-problems\n\n30-python-coding-ability-to-solve-complex-problems",
"is_bot": false,
"headline": "Merge pull request #31 from KarmaloopAI/30-python-coding-ability-to-s…",
"author_name": "Abhishek Chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2025-03-09T22:46:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ca7cd2adbdf0c2cc35f8dd3da2d66338a119ba43",
"body": null,
"is_bot": false,
"headline": "30-python-coding-ability-to-solve-complex-problems",
"author_name": "Abi Chatterjee",
"author_login": null,
"committed_at": "2025-03-09T22:44:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0338ed4e1ac7caa978f5864036e74cfe381e6a1b",
"body": "…per-and-has-exception\n\n28-shutdown-behavior-is-improper-and-has-exception",
"is_bot": false,
"headline": "Merge pull request #29 from KarmaloopAI/28-shutdown-behavior-is-impro…",
"author_name": "Abhishek Chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2025-02-16T23:07:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "06606d212f46501049c82e21f3f4f7d643c16b57",
"body": null,
"is_bot": false,
"headline": "28-shutdown-behavior-is-improper-and-has-exception",
"author_name": "Abi Chatterjee",
"author_login": null,
"committed_at": "2025-02-16T23:05:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "40d0e060a802df19c00c78997dd18bec3147b0e9",
"body": "26 create a prompts manager",
"is_bot": false,
"headline": "Merge pull request #27 from KarmaloopAI/26-create-a-prompts-manager",
"author_name": "Abhishek Chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2025-02-16T18:27:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f1976e528cedaecb81b75196b02e4639b4fdee0",
"body": null,
"is_bot": false,
"headline": "26-create-a-prompts-manager",
"author_name": "Abi Chatterjee",
"author_login": null,
"committed_at": "2025-02-16T18:01:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "875dfaf04b80fd5be77eed54e27a9eabc645ef02",
"body": null,
"is_bot": false,
"headline": "Added Fluen Docs for code reference",
"author_name": "Abi Chatterjee",
"author_login": null,
"committed_at": "2025-02-08T21:24:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe577ea54ef245da4b80b33846e5db8f01a8e564",
"body": "New re-run and sleep actions",
"is_bot": false,
"headline": "Merge pull request #25 from KarmaloopAI/feat_sleep_rerun",
"author_name": "Abhishek Chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2025-02-02T15:00:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a756eb216059a1a76c723ffa04591377d33867e2",
"body": null,
"is_bot": false,
"headline": "New re-run and sleep actions",
"author_name": "Abi Chatterjee",
"author_login": null,
"committed_at": "2025-02-01T12:13:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b49a22b881a595444feb4d7e65279ca989e3eb67",
"body": "…ch-will-kick-start-the-agent\n\n20-add-a-trigger-endpoint-which-will-kick-start-the-agent",
"is_bot": false,
"headline": "Merge pull request #21 from KarmaloopAI/20-add-a-trigger-endpoint-whi…",
"author_name": "Abhishek Chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2024-12-10T18:07:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d303cdf6c08cb89e6ccaad0d0f040f7112d0bc3",
"body": null,
"is_bot": false,
"headline": "20-add-a-trigger-endpoint-which-will-kick-start-the-agent",
"author_name": "Abi Chatterjee",
"author_login": null,
"committed_at": "2024-11-10T11:40:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3fb362335a2f6bc9a943e834e16c63d8a670169c",
"body": "10-rest-api-for-jiva",
"is_bot": false,
"headline": "Merge pull request #19 from KarmaloopAI/10-rest-api-for-jiva",
"author_name": "Abhishek Chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2024-11-09T19:24:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "178ad9aaa97748eeddb2732a4bc3b269ff10248a",
"body": null,
"is_bot": false,
"headline": "10-rest-api-for-jiva",
"author_name": "Abi Chatterjee",
"author_login": null,
"committed_at": "2024-11-09T19:23:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "23d4002fc91d67e5d98326d46dc128e3379130fa",
"body": "…rate-comms-interface\n\n9 non blocking main loop separate comms interface",
"is_bot": false,
"headline": "Merge pull request #18 from KarmaloopAI/9-non-blocking-main-loop-sepa…",
"author_name": "Abhishek Chatterjee",
"author_login": "abi-chatterjee",
"committed_at": "2024-11-09T17:56:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ff2ea0b33d3bbdd810823a98a2d259abd4e0ca56",
"body": null,
"is_bot": false,
"headline": "Fixed a bug when only a single action was returned",
"author_name": "Abi Chatterjee",
"author_login": null,
"committed_at": "2024-11-09T17:54:27Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 17,
"commits_last_year": 84,
"latest_release_at": "2026-07-20T14:51:09Z",
"latest_release_tag": "v0.3.51",
"releases_from_tags": false,
"days_since_last_push": 6,
"active_weeks_last_year": 18,
"days_since_latest_release": 6,
"mean_days_between_releases": 14.3
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 62,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "jiva-core",
"exists": true,
"license": "MIT",
"keywords": [
"ai",
"agent",
"autonomous",
"mcp",
"model-context-protocol",
"gpt-oss",
"gpt-oss-120b",
"cli",
"chatbot",
"assistant",
"automation",
"llm",
"krutrim",
"harmony",
"conversation",
"tool-calling"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/jiva-core",
"is_deprecated": false,
"latest_version": "0.3.51",
"repository_url": "https://github.com/KarmaloopAI/Jiva",
"versions_count": 53,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 2206,
"first_published_at": "2025-12-09T11:45:06.712000Z",
"latest_published_at": "2026-07-20T14:51:40.319000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 6
}
]
},
"popularity": {
"forks": 6,
"stars": 35,
"watchers": 0,
"fork_history": {
"days": [
{
"date": "2024-09-06",
"count": 1
},
{
"date": "2024-10-10",
"count": 1
},
{
"date": "2024-10-14",
"count": 1
},
{
"date": "2024-10-21",
"count": 1
},
{
"date": "2025-02-12",
"count": 1
},
{
"date": "2026-03-10",
"count": 1
}
],
"complete": true,
"collected": 6,
"total_forks": 6
},
"star_history": null,
"open_issues_and_prs": 2
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": true,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 65634,
"source_files_sampled": 96,
"oversized_source_files": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [
{
"name": "brace-expansion",
"direct": false,
"version": "2.1.2",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-mh99-v99m-4gvg"
],
"fixed_version": "5.0.8",
"advisory_count": 1,
"oldest_advisory_days": 2
},
{
"name": "uuid",
"direct": false,
"version": "9.0.1",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-w5hq-g745-h8pq"
],
"fixed_version": "13.0.1",
"advisory_count": 1,
"oldest_advisory_days": 95
},
{
"name": "@hono/node-server",
"direct": false,
"version": "1.19.15",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 5.9,
"advisory_ids": [
"GHSA-frvp-7c67-39w9"
],
"fixed_version": "2.0.5",
"advisory_count": 1,
"oldest_advisory_days": 5
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"high": 2,
"moderate": 1
},
"advisory_count": 3,
"affected_count": 3,
"assessed_count": 365,
"malicious_count": 0,
"assessed_package": "npm:jiva-core@0.3.51",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "@google-cloud/storage",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^7.0.0"
},
{
"name": "@modelcontextprotocol/sdk",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.0.4"
},
{
"name": "@modelcontextprotocol/server-filesystem",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^2025.11.25"
},
{
"name": "archiver",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^7.0.1"
},
{
"name": "chalk",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^5.3.0"
},
{
"name": "commander",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^12.1.0"
},
{
"name": "conf",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^13.0.1"
},
{
"name": "diff",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^8.0.3"
},
{
"name": "express",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.18.2"
},
{
"name": "gpt-tokenizer",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^3.4.0"
},
{
"name": "inquirer",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^12.0.1"
},
{
"name": "jsonwebtoken",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^9.0.2"
},
{
"name": "marked",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^15.0.12"
},
{
"name": "marked-terminal",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^7.3.0"
},
{
"name": "ora",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^8.1.1"
},
{
"name": "unzipper",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^0.12.3"
},
{
"name": "vscode-jsonrpc",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^8.2.1"
},
{
"name": "vscode-languageserver-types",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^3.17.5"
},
{
"name": "ws",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^8.16.0"
},
{
"name": "yaml",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^2.6.1"
},
{
"name": "zod",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^3.24.1"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "@google-cloud/storage",
"direct": true,
"version": "7.19.0",
"ecosystem": "npm"
},
{
"name": "@modelcontextprotocol/sdk",
"direct": true,
"version": "1.27.1",
"ecosystem": "npm"
},
{
"name": "@modelcontextprotocol/server-filesystem",
"direct": true,
"version": "2025.11.25",
"ecosystem": "npm"
},
{
"name": "archiver",
"direct": true,
"version": "7.0.1",
"ecosystem": "npm"
},
{
"name": "chalk",
"direct": true,
"version": "4.1.2",
"ecosystem": "npm"
},
{
"name": "chalk",
"direct": true,
"version": "5.6.2",
"ecosystem": "npm"
},
{
"name": "commander",
"direct": true,
"version": "12.1.0",
"ecosystem": "npm"
},
{
"name": "conf",
"direct": true,
"version": "13.1.0",
"ecosystem": "npm"
},
{
"name": "diff",
"direct": true,
"version": "4.0.4",
"ecosystem": "npm"
},
{
"name": "diff",
"direct": true,
"version": "5.2.2",
"ecosystem": "npm"
},
{
"name": "diff",
"direct": true,
"version": "8.0.3",
"ecosystem": "npm"
},
{
"name": "express",
"direct": true,
"version": "4.22.1",
"ecosystem": "npm"
},
{
"name": "express",
"direct": true,
"version": "5.2.1",
"ecosystem": "npm"
},
{
"name": "gpt-tokenizer",
"direct": true,
"version": "3.4.0",
"ecosystem": "npm"
},
{
"name": "inquirer",
"direct": true,
"version": "12.11.1",
"ecosystem": "npm"
},
{
"name": "jsonwebtoken",
"direct": true,
"version": "9.0.3",
"ecosystem": "npm"
},
{
"name": "marked",
"direct": true,
"version": "11.2.0",
"ecosystem": "npm"
},
{
"name": "marked",
"direct": true,
"version": "15.0.12",
"ecosystem": "npm"
},
{
"name": "marked-terminal",
"direct": true,
"version": "7.3.0",
"ecosystem": "npm"
},
{
"name": "ora",
"direct": true,
"version": "8.2.0",
"ecosystem": "npm"
},
{
"name": "unzipper",
"direct": true,
"version": "0.12.3",
"ecosystem": "npm"
},
{
"name": "vscode-jsonrpc",
"direct": true,
"version": "8.2.1",
"ecosystem": "npm"
},
{
"name": "vscode-languageserver-types",
"direct": true,
"version": "3.17.5",
"ecosystem": "npm"
},
{
"name": "ws",
"direct": true,
"version": "8.19.0",
"ecosystem": "npm"
},
{
"name": "yaml",
"direct": true,
"version": "2.8.2",
"ecosystem": "npm"
},
{
"name": "zod",
"direct": true,
"version": "3.25.76",
"ecosystem": "npm"
},
{
"name": "@colors/colors",
"direct": false,
"version": "1.5.0",
"ecosystem": "npm"
},
{
"name": "@cspotcode/source-map-support",
"direct": false,
"version": "0.8.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/aix-ppc64",
"direct": false,
"version": "0.27.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/android-arm",
"direct": false,
"version": "0.27.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/android-arm64",
"direct": false,
"version": "0.27.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/android-x64",
"direct": false,
"version": "0.27.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/darwin-arm64",
"direct": false,
"version": "0.27.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/darwin-x64",
"direct": false,
"version": "0.27.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/freebsd-arm64",
"direct": false,
"version": "0.27.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/freebsd-x64",
"direct": false,
"version": "0.27.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-arm",
"direct": false,
"version": "0.27.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-arm64",
"direct": false,
"version": "0.27.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-ia32",
"direct": false,
"version": "0.27.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-loong64",
"direct": false,
"version": "0.27.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-mips64el",
"direct": false,
"version": "0.27.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-ppc64",
"direct": false,
"version": "0.27.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-riscv64",
"direct": false,
"version": "0.27.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-s390x",
"direct": false,
"version": "0.27.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-x64",
"direct": false,
"version": "0.27.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/netbsd-arm64",
"direct": false,
"version": "0.27.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/netbsd-x64",
"direct": false,
"version": "0.27.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/openbsd-arm64",
"direct": false,
"version": "0.27.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/openbsd-x64",
"direct": false,
"version": "0.27.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/openharmony-arm64",
"direct": false,
"version": "0.27.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/sunos-x64",
"direct": false,
"version": "0.27.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/win32-arm64",
"direct": false,
"version": "0.27.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/win32-ia32",
"direct": false,
"version": "0.27.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/win32-x64",
"direct": false,
"version": "0.27.1",
"ecosystem": "npm"
},
{
"name": "@google-cloud/paginator",
"direct": false,
"version": "5.0.2",
"ecosystem": "npm"
},
{
"name": "@google-cloud/projectify",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "@google-cloud/promisify",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "@hono/node-server",
"direct": false,
"version": "1.19.9",
"ecosystem": "npm"
},
{
"name": "@inquirer/ansi",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "@inquirer/checkbox",
"direct": false,
"version": "4.3.2",
"ecosystem": "npm"
},
{
"name": "@inquirer/confirm",
"direct": false,
"version": "5.1.21",
"ecosystem": "npm"
},
{
"name": "@inquirer/core",
"direct": false,
"version": "10.3.2",
"ecosystem": "npm"
},
{
"name": "@inquirer/editor",
"direct": false,
"version": "4.2.23",
"ecosystem": "npm"
},
{
"name": "@inquirer/expand",
"direct": false,
"version": "4.0.23",
"ecosystem": "npm"
},
{
"name": "@inquirer/external-editor",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "@inquirer/figures",
"direct": false,
"version": "1.0.15",
"ecosystem": "npm"
},
{
"name": "@inquirer/input",
"direct": false,
"version": "4.3.1",
"ecosystem": "npm"
},
{
"name": "@inquirer/number",
"direct": false,
"version": "3.0.23",
"ecosystem": "npm"
},
{
"name": "@inquirer/password",
"direct": false,
"version": "4.0.23",
"ecosystem": "npm"
},
{
"name": "@inquirer/prompts",
"direct": false,
"version": "7.10.1",
"ecosystem": "npm"
},
{
"name": "@inquirer/rawlist",
"direct": false,
"version": "4.1.11",
"ecosystem": "npm"
},
{
"name": "@inquirer/search",
"direct": false,
"version": "3.2.2",
"ecosystem": "npm"
},
{
"name": "@inquirer/select",
"direct": false,
"version": "4.4.2",
"ecosystem": "npm"
},
{
"name": "@inquirer/type",
"direct": false,
"version": "3.0.10",
"ecosystem": "npm"
},
{
"name": "@jridgewell/resolve-uri",
"direct": false,
"version": "3.1.2",
"ecosystem": "npm"
},
{
"name": "@jridgewell/sourcemap-codec",
"direct": false,
"version": "1.5.5",
"ecosystem": "npm"
},
{
"name": "@jridgewell/trace-mapping",
"direct": false,
"version": "0.3.9",
"ecosystem": "npm"
},
{
"name": "@sindresorhus/is",
"direct": false,
"version": "4.6.0",
"ecosystem": "npm"
},
{
"name": "@tootallnate/once",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "@tsconfig/node10",
"direct": false,
"version": "1.0.12",
"ecosystem": "npm"
},
{
"name": "@tsconfig/node12",
"direct": false,
"version": "1.0.11",
"ecosystem": "npm"
},
{
"name": "@tsconfig/node14",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "@tsconfig/node16",
"direct": false,
"version": "1.0.4",
"ecosystem": "npm"
},
{
"name": "@types/archiver",
"direct": false,
"version": "6.0.4",
"ecosystem": "npm"
},
{
"name": "@types/body-parser",
"direct": false,
"version": "1.19.6",
"ecosystem": "npm"
},
{
"name": "@types/cardinal",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "@types/caseless",
"direct": false,
"version": "0.12.5",
"ecosystem": "npm"
},
{
"name": "@types/connect",
"direct": false,
"version": "3.4.38",
"ecosystem": "npm"
},
{
"name": "@types/express",
"direct": false,
"version": "4.17.25",
"ecosystem": "npm"
},
{
"name": "@types/express-serve-static-core",
"direct": false,
"version": "4.19.8",
"ecosystem": "npm"
},
{
"name": "@types/http-errors",
"direct": false,
"version": "2.0.5",
"ecosystem": "npm"
},
{
"name": "@types/inquirer",
"direct": false,
"version": "9.0.9",
"ecosystem": "npm"
},
{
"name": "@types/jsonwebtoken",
"direct": false,
"version": "9.0.10",
"ecosystem": "npm"
},
{
"name": "@types/marked-terminal",
"direct": false,
"version": "6.1.1",
"ecosystem": "npm"
},
{
"name": "@types/mime",
"direct": false,
"version": "1.3.5",
"ecosystem": "npm"
},
{
"name": "@types/ms",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "@types/node",
"direct": false,
"version": "22.19.1",
"ecosystem": "npm"
},
{
"name": "@types/qs",
"direct": false,
"version": "6.14.0",
"ecosystem": "npm"
},
{
"name": "@types/range-parser",
"direct": false,
"version": "1.2.7",
"ecosystem": "npm"
},
{
"name": "@types/readdir-glob",
"direct": false,
"version": "1.1.5",
"ecosystem": "npm"
},
{
"name": "@types/request",
"direct": false,
"version": "2.48.13",
"ecosystem": "npm"
},
{
"name": "@types/send",
"direct": false,
"version": "0.17.6",
"ecosystem": "npm"
},
{
"name": "@types/send",
"direct": false,
"version": "1.2.1",
"ecosystem": "npm"
},
{
"name": "@types/serve-static",
"direct": false,
"version": "1.15.10",
"ecosystem": "npm"
},
{
"name": "@types/through",
"direct": false,
"version": "0.0.33",
"ecosystem": "npm"
},
{
"name": "@types/tough-cookie",
"direct": false,
"version": "4.0.5",
"ecosystem": "npm"
},
{
"name": "@types/unzipper",
"direct": false,
"version": "0.10.11",
"ecosystem": "npm"
},
{
"name": "@types/ws",
"direct": false,
"version": "8.18.1",
"ecosystem": "npm"
},
{
"name": "abort-controller",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "accepts",
"direct": false,
"version": "1.3.8",
"ecosystem": "npm"
},
{
"name": "accepts",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "acorn",
"direct": false,
"version": "8.15.0",
"ecosystem": "npm"
},
{
"name": "acorn-walk",
"direct": false,
"version": "8.3.4",
"ecosystem": "npm"
},
{
"name": "agent-base",
"direct": false,
"version": "6.0.2",
"ecosystem": "npm"
},
{
"name": "agent-base",
"direct": false,
"version": "7.1.4",
"ecosystem": "npm"
},
{
"name": "ajv",
"direct": false,
"version": "8.18.0",
"ecosystem": "npm"
},
{
"name": "ajv-formats",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "ansi-escapes",
"direct": false,
"version": "7.2.0",
"ecosystem": "npm"
},
{
"name": "ansi-regex",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "ansi-regex",
"direct": false,
"version": "6.2.2",
"ecosystem": "npm"
},
{
"name": "ansi-styles",
"direct": false,
"version": "4.3.0",
"ecosystem": "npm"
},
{
"name": "any-promise",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "archiver-utils",
"direct": false,
"version": "5.0.2",
"ecosystem": "npm"
},
{
"name": "arg",
"direct": false,
"version": "4.1.3",
"ecosystem": "npm"
},
{
"name": "array-flatten",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "arrify",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "async",
"direct": false,
"version": "3.2.6",
"ecosystem": "npm"
},
{
"name": "async-retry",
"direct": false,
"version": "1.3.3",
"ecosystem": "npm"
},
{
"name": "asynckit",
"direct": false,
"version": "0.4.0",
"ecosystem": "npm"
},
{
"name": "atomically",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "b4a",
"direct": false,
"version": "1.7.4",
"ecosystem": "npm"
},
{
"name": "balanced-match",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "balanced-match",
"direct": false,
"version": "4.0.4",
"ecosystem": "npm"
},
{
"name": "bare-events",
"direct": false,
"version": "2.8.2",
"ecosystem": "npm"
},
{
"name": "base64-js",
"direct": false,
"version": "1.5.1",
"ecosystem": "npm"
},
{
"name": "bignumber.js",
"direct": false,
"version": "9.3.1",
"ecosystem": "npm"
},
{
"name": "bluebird",
"direct": false,
"version": "3.7.2",
"ecosystem": "npm"
},
{
"name": "body-parser",
"direct": false,
"version": "1.20.4",
"ecosystem": "npm"
},
{
"name": "body-parser",
"direct": false,
"version": "2.2.2",
"ecosystem": "npm"
},
{
"name": "brace-expansion",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "brace-expansion",
"direct": false,
"version": "5.0.3",
"ecosystem": "npm"
},
{
"name": "buffer",
"direct": false,
"version": "6.0.3",
"ecosystem": "npm"
},
{
"name": "buffer-crc32",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "buffer-equal-constant-time",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "bytes",
"direct": false,
"version": "3.1.2",
"ecosystem": "npm"
},
{
"name": "call-bind-apply-helpers",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "call-bound",
"direct": false,
"version": "1.0.4",
"ecosystem": "npm"
},
{
"name": "char-regex",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "chardet",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "cli-cursor",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "cli-highlight",
"direct": false,
"version": "2.1.11",
"ecosystem": "npm"
},
{
"name": "cli-spinners",
"direct": false,
"version": "2.9.2",
"ecosystem": "npm"
},
{
"name": "cli-table3",
"direct": false,
"version": "0.6.5",
"ecosystem": "npm"
},
{
"name": "cli-width",
"direct": false,
"version": "4.1.0",
"ecosystem": "npm"
},
{
"name": "cliui",
"direct": false,
"version": "7.0.4",
"ecosystem": "npm"
},
{
"name": "color-convert",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "color-name",
"direct": false,
"version": "1.1.4",
"ecosystem": "npm"
},
{
"name": "combined-stream",
"direct": false,
"version": "1.0.8",
"ecosystem": "npm"
},
{
"name": "compress-commons",
"direct": false,
"version": "6.0.2",
"ecosystem": "npm"
},
{
"name": "content-disposition",
"direct": false,
"version": "0.5.4",
"ecosystem": "npm"
},
{
"name": "content-disposition",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "content-type",
"direct": false,
"version": "1.0.5",
"ecosystem": "npm"
},
{
"name": "cookie",
"direct": false,
"version": "0.7.2",
"ecosystem": "npm"
},
{
"name": "cookie-signature",
"direct": false,
"version": "1.0.7",
"ecosystem": "npm"
},
{
"name": "cookie-signature",
"direct": false,
"version": "1.2.2",
"ecosystem": "npm"
},
{
"name": "core-util-is",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "cors",
"direct": false,
"version": "2.8.5",
"ecosystem": "npm"
},
{
"name": "crc-32",
"direct": false,
"version": "1.2.2",
"ecosystem": "npm"
},
{
"name": "crc32-stream",
"direct": false,
"version": "6.0.0",
"ecosystem": "npm"
},
{
"name": "create-require",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "cross-spawn",
"direct": false,
"version": "7.0.6",
"ecosystem": "npm"
},
{
"name": "debounce-fn",
"direct": false,
"version": "6.0.0",
"ecosystem": "npm"
},
{
"name": "debug",
"direct": false,
"version": "2.6.9",
"ecosystem": "npm"
},
{
"name": "debug",
"direct": false,
"version": "4.4.3",
"ecosystem": "npm"
},
{
"name": "delayed-stream",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "depd",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "destroy",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "dot-prop",
"direct": false,
"version": "9.0.0",
"ecosystem": "npm"
},
{
"name": "dunder-proto",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "duplexer2",
"direct": false,
"version": "0.1.4",
"ecosystem": "npm"
},
{
"name": "duplexify",
"direct": false,
"version": "4.1.3",
"ecosystem": "npm"
},
{
"name": "ecdsa-sig-formatter",
"direct": false,
"version": "1.0.11",
"ecosystem": "npm"
},
{
"name": "ee-first",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "emoji-regex",
"direct": false,
"version": "10.6.0",
"ecosystem": "npm"
},
{
"name": "emoji-regex",
"direct": false,
"version": "8.0.0",
"ecosystem": "npm"
},
{
"name": "emojilib",
"direct": false,
"version": "2.4.0",
"ecosystem": "npm"
},
{
"name": "encodeurl",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "end-of-stream",
"direct": false,
"version": "1.4.5",
"ecosystem": "npm"
},
{
"name": "env-paths",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "environment",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "es-define-property",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "es-errors",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "es-object-atoms",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "es-set-tostringtag",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "esbuild",
"direct": false,
"version": "0.27.1",
"ecosystem": "npm"
},
{
"name": "escalade",
"direct": false,
"version": "3.2.0",
"ecosystem": "npm"
},
{
"name": "escape-html",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "etag",
"direct": false,
"version": "1.8.1",
"ecosystem": "npm"
},
{
"name": "event-target-shim",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "events",
"direct": false,
"version": "3.3.0",
"ecosystem": "npm"
},
{
"name": "events-universal",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "eventsource",
"direct": false,
"version": "3.0.7",
"ecosystem": "npm"
},
{
"name": "eventsource-parser",
"direct": false,
"version": "3.0.6",
"ecosystem": "npm"
},
{
"name": "express-rate-limit",
"direct": false,
"version": "8.2.1",
"ecosystem": "npm"
},
{
"name": "extend",
"direct": false,
"version": "3.0.2",
"ecosystem": "npm"
},
{
"name": "fast-deep-equal",
"direct": false,
"version": "3.1.3",
"ecosystem": "npm"
},
{
"name": "fast-fifo",
"direct": false,
"version": "1.3.2",
"ecosystem": "npm"
},
{
"name": "fast-uri",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "fast-xml-parser",
"direct": false,
"version": "5.3.6",
"ecosystem": "npm"
},
{
"name": "finalhandler",
"direct": false,
"version": "1.3.2",
"ecosystem": "npm"
},
{
"name": "finalhandler",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "form-data",
"direct": false,
"version": "2.5.5",
"ecosystem": "npm"
},
{
"name": "forwarded",
"direct": false,
"version": "0.2.0",
"ecosystem": "npm"
},
{
"name": "fresh",
"direct": false,
"version": "0.5.2",
"ecosystem": "npm"
},
{
"name": "fresh",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "fs-extra",
"direct": false,
"version": "11.3.3",
"ecosystem": "npm"
},
{
"name": "fsevents",
"direct": false,
"version": "2.3.3",
"ecosystem": "npm"
},
{
"name": "function-bind",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "gaxios",
"direct": false,
"version": "6.7.1",
"ecosystem": "npm"
},
{
"name": "gcp-metadata",
"direct": false,
"version": "6.1.1",
"ecosystem": "npm"
},
{
"name": "get-caller-file",
"direct": false,
"version": "2.0.5",
"ecosystem": "npm"
},
{
"name": "get-east-asian-width",
"direct": false,
"version": "1.4.0",
"ecosystem": "npm"
},
{
"name": "get-intrinsic",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "get-proto",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "get-tsconfig",
"direct": false,
"version": "4.13.0",
"ecosystem": "npm"
},
{
"name": "glob",
"direct": false,
"version": "13.0.6",
"ecosystem": "npm"
},
{
"name": "google-auth-library",
"direct": false,
"version": "9.15.1",
"ecosystem": "npm"
},
{
"name": "google-logging-utils",
"direct": false,
"version": "0.0.2",
"ecosystem": "npm"
},
{
"name": "gopd",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "graceful-fs",
"direct": false,
"version": "4.2.11",
"ecosystem": "npm"
},
{
"name": "gtoken",
"direct": false,
"version": "7.1.0",
"ecosystem": "npm"
},
{
"name": "has-flag",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "has-symbols",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "has-tostringtag",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "hasown",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "highlight.js",
"direct": false,
"version": "10.7.3",
"ecosystem": "npm"
},
{
"name": "hono",
"direct": false,
"version": "4.12.2",
"ecosystem": "npm"
},
{
"name": "html-entities",
"direct": false,
"version": "2.6.0",
"ecosystem": "npm"
},
{
"name": "http-errors",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "http-proxy-agent",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "https-proxy-agent",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "https-proxy-agent",
"direct": false,
"version": "7.0.6",
"ecosystem": "npm"
},
{
"name": "iconv-lite",
"direct": false,
"version": "0.4.24",
"ecosystem": "npm"
},
{
"name": "iconv-lite",
"direct": false,
"version": "0.7.0",
"ecosystem": "npm"
},
{
"name": "ieee754",
"direct": false,
"version": "1.2.1",
"ecosystem": "npm"
},
{
"name": "inherits",
"direct": false,
"version": "2.0.4",
"ecosystem": "npm"
},
{
"name": "ip-address",
"direct": false,
"version": "10.0.1",
"ecosystem": "npm"
},
{
"name": "ipaddr.js",
"direct": false,
"version": "1.9.1",
"ecosystem": "npm"
},
{
"name": "is-fullwidth-code-point",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "is-interactive",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "is-promise",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "is-stream",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "is-unicode-supported",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "is-unicode-supported",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "isarray",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "isexe",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "jose",
"direct": false,
"version": "6.1.3",
"ecosystem": "npm"
},
{
"name": "json-bigint",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "json-schema-traverse",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "json-schema-typed",
"direct": false,
"version": "8.0.2",
"ecosystem": "npm"
},
{
"name": "jsonfile",
"direct": false,
"version": "6.2.0",
"ecosystem": "npm"
},
{
"name": "jwa",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "jws",
"direct": false,
"version": "4.0.1",
"ecosystem": "npm"
},
{
"name": "lazystream",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "lodash",
"direct": false,
"version": "4.17.23",
"ecosystem": "npm"
},
{
"name": "lodash.includes",
"direct": false,
"version": "4.3.0",
"ecosystem": "npm"
},
{
"name": "lodash.isboolean",
"direct": false,
"version": "3.0.3",
"ecosystem": "npm"
},
{
"name": "lodash.isinteger",
"direct": false,
"version": "4.0.4",
"ecosystem": "npm"
},
{
"name": "lodash.isnumber",
"direct": false,
"version": "3.0.3",
"ecosystem": "npm"
},
{
"name": "lodash.isplainobject",
"direct": false,
"version": "4.0.6",
"ecosystem": "npm"
},
{
"name": "lodash.isstring",
"direct": false,
"version": "4.0.1",
"ecosystem": "npm"
},
{
"name": "lodash.once",
"direct": false,
"version": "4.1.1",
"ecosystem": "npm"
},
{
"name": "log-symbols",
"direct": false,
"version": "6.0.0",
"ecosystem": "npm"
},
{
"name": "lru-cache",
"direct": false,
"version": "11.2.6",
"ecosystem": "npm"
},
{
"name": "make-error",
"direct": false,
"version": "1.3.6",
"ecosystem": "npm"
},
{
"name": "math-intrinsics",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "media-typer",
"direct": false,
"version": "0.3.0",
"ecosystem": "npm"
},
{
"name": "media-typer",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "merge-descriptors",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "merge-descriptors",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "methods",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "mime",
"direct": false,
"version": "1.6.0",
"ecosystem": "npm"
},
{
"name": "mime",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "mime-db",
"direct": false,
"version": "1.52.0",
"ecosystem": "npm"
},
{
"name": "mime-db",
"direct": false,
"version": "1.54.0",
"ecosystem": "npm"
},
{
"name": "mime-types",
"direct": false,
"version": "2.1.35",
"ecosystem": "npm"
},
{
"name": "mime-types",
"direct": false,
"version": "3.0.2",
"ecosystem": "npm"
},
{
"name": "mimic-function",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "minimatch",
"direct": false,
"version": "10.2.3",
"ecosystem": "npm"
},
{
"name": "minimatch",
"direct": false,
"version": "5.1.8",
"ecosystem": "npm"
},
{
"name": "minipass",
"direct": false,
"version": "7.1.3",
"ecosystem": "npm"
},
{
"name": "ms",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "ms",
"direct": false,
"version": "2.1.3",
"ecosystem": "npm"
},
{
"name": "mute-stream",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "mz",
"direct": false,
"version": "2.7.0",
"ecosystem": "npm"
},
{
"name": "negotiator",
"direct": false,
"version": "0.6.3",
"ecosystem": "npm"
},
{
"name": "negotiator",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "node-emoji",
"direct": false,
"version": "2.2.0",
"ecosystem": "npm"
},
{
"name": "node-fetch",
"direct": false,
"version": "2.7.0",
"ecosystem": "npm"
},
{
"name": "node-int64",
"direct": false,
"version": "0.4.0",
"ecosystem": "npm"
},
{
"name": "normalize-path",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "object-assign",
"direct": false,
"version": "4.1.1",
"ecosystem": "npm"
},
{
"name": "object-inspect",
"direct": false,
"version": "1.13.4",
"ecosystem": "npm"
},
{
"name": "on-finished",
"direct": false,
"version": "2.4.1",
"ecosystem": "npm"
},
{
"name": "once",
"direct": false,
"version": "1.4.0",
"ecosystem": "npm"
},
{
"name": "onetime",
"direct": false,
"version": "7.0.0",
"ecosystem": "npm"
},
{
"name": "p-limit",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "parse5",
"direct": false,
"version": "5.1.1",
"ecosystem": "npm"
},
{
"name": "parse5",
"direct": false,
"version": "6.0.1",
"ecosystem": "npm"
},
{
"name": "parse5-htmlparser2-tree-adapter",
"direct": false,
"version": "6.0.1",
"ecosystem": "npm"
},
{
"name": "parseurl",
"direct": false,
"version": "1.3.3",
"ecosystem": "npm"
},
{
"name": "path-key",
"direct": false,
"version": "3.1.1",
"ecosystem": "npm"
},
{
"name": "path-scurry",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "path-to-regexp",
"direct": false,
"version": "0.1.12",
"ecosystem": "npm"
},
{
"name": "path-to-regexp",
"direct": false,
"version": "8.3.0",
"ecosystem": "npm"
},
{
"name": "pkce-challenge",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "process",
"direct": false,
"version": "0.11.10",
"ecosystem": "npm"
},
{
"name": "process-nextick-args",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "proxy-addr",
"direct": false,
"version": "2.0.7",
"ecosystem": "npm"
},
{
"name": "punycode",
"direct": false,
"version": "2.3.1",
"ecosystem": "npm"
},
{
"name": "qs",
"direct": false,
"version": "6.14.2",
"ecosystem": "npm"
},
{
"name": "range-parser",
"direct": false,
"version": "1.2.1",
"ecosystem": "npm"
},
{
"name": "raw-body",
"direct": false,
"version": "2.5.3",
"ecosystem": "npm"
},
{
"name": "raw-body",
"direct": false,
"version": "3.0.2",
"ecosystem": "npm"
},
{
"name": "readable-stream",
"direct": false,
"version": "2.3.8",
"ecosystem": "npm"
},
{
"name": "readable-stream",
"direct": false,
"version": "3.6.2",
"ecosystem": "npm"
},
{
"name": "readable-stream",
"direct": false,
"version": "4.7.0",
"ecosystem": "npm"
},
{
"name": "readdir-glob",
"direct": false,
"version": "1.1.3",
"ecosystem": "npm"
},
{
"name": "require-directory",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "require-from-string",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "resolve-pkg-maps",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "restore-cursor",
"direct": false,
"version": "5.1.0",
"ecosystem": "npm"
},
{
"name": "retry",
"direct": false,
"version": "0.13.1",
"ecosystem": "npm"
},
{
"name": "retry-request",
"direct": false,
"version": "7.0.2",
"ecosystem": "npm"
},
{
"name": "router",
"direct": false,
"version": "2.2.0",
"ecosystem": "npm"
},
{
"name": "run-async",
"direct": false,
"version": "4.0.6",
"ecosystem": "npm"
},
{
"name": "rxjs",
"direct": false,
"version": "7.8.2",
"ecosystem": "npm"
},
{
"name": "safe-buffer",
"direct": false,
"version": "5.1.2",
"ecosystem": "npm"
},
{
"name": "safe-buffer",
"direct": false,
"version": "5.2.1",
"ecosystem": "npm"
},
{
"name": "safer-buffer",
"direct": false,
"version": "2.1.2",
"ecosystem": "npm"
},
{
"name": "semver",
"direct": false,
"version": "7.7.3",
"ecosystem": "npm"
},
{
"name": "send",
"direct": false,
"version": "0.19.2",
"ecosystem": "npm"
},
{
"name": "send",
"direct": false,
"version": "1.2.1",
"ecosystem": "npm"
},
{
"name": "serve-static",
"direct": false,
"version": "1.16.3",
"ecosystem": "npm"
},
{
"name": "serve-static",
"direct": false,
"version": "2.2.1",
"ecosystem": "npm"
},
{
"name": "setprototypeof",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "shebang-command",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "shebang-regex",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "side-channel",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "side-channel-list",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "side-channel-map",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "side-channel-weakmap",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "signal-exit",
"direct": false,
"version": "4.1.0",
"ecosystem": "npm"
},
{
"name": "skin-tone",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "statuses",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "stdin-discarder",
"direct": false,
"version": "0.2.2",
"ecosystem": "npm"
},
{
"name": "stream-events",
"direct": false,
"version": "1.0.5",
"ecosystem": "npm"
},
{
"name": "stream-shift",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "streamx",
"direct": false,
"version": "2.23.0",
"ecosystem": "npm"
},
{
"name": "string-width",
"direct": false,
"version": "4.2.3",
"ecosystem": "npm"
},
{
"name": "string-width",
"direct": false,
"version": "7.2.0",
"ecosystem": "npm"
},
{
"name": "string_decoder",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "string_decoder",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "strip-ansi",
"direct": false,
"version": "6.0.1",
"ecosystem": "npm"
},
{
"name": "strip-ansi",
"direct": false,
"version": "7.1.2",
"ecosystem": "npm"
},
{
"name": "strnum",
"direct": false,
"version": "2.1.2",
"ecosystem": "npm"
},
{
"name": "stubborn-fs",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "stubborn-utils",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "stubs",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "supports-color",
"direct": false,
"version": "7.2.0",
"ecosystem": "npm"
},
{
"name": "supports-hyperlinks",
"direct": false,
"version": "3.2.0",
"ecosystem": "npm"
},
{
"name": "tar-stream",
"direct": false,
"version": "3.1.7",
"ecosystem": "npm"
},
{
"name": "teeny-request",
"direct": false,
"version": "9.0.0",
"ecosystem": "npm"
},
{
"name": "text-decoder",
"direct": false,
"version": "1.2.6",
"ecosystem": "npm"
},
{
"name": "thenify",
"direct": false,
"version": "3.3.1",
"ecosystem": "npm"
},
{
"name": "thenify-all",
"direct": false,
"version": "1.6.0",
"ecosystem": "npm"
},
{
"name": "toidentifier",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "tr46",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "ts-node",
"direct": false,
"version": "10.9.2",
"ecosystem": "npm"
},
{
"name": "tslib",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "tsx",
"direct": false,
"version": "4.21.0",
"ecosystem": "npm"
},
{
"name": "type-fest",
"direct": false,
"version": "4.41.0",
"ecosystem": "npm"
},
{
"name": "type-is",
"direct": false,
"version": "1.6.18",
"ecosystem": "npm"
},
{
"name": "type-is",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "typescript",
"direct": false,
"version": "5.9.3",
"ecosystem": "npm"
},
{
"name": "uint8array-extras",
"direct": false,
"version": "1.5.0",
"ecosystem": "npm"
},
{
"name": "undici-types",
"direct": false,
"version": "6.21.0",
"ecosystem": "npm"
},
{
"name": "unicode-emoji-modifier-base",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "universalify",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "unpipe",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "util-deprecate",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "utils-merge",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "uuid",
"direct": false,
"version": "8.3.2",
"ecosystem": "npm"
},
{
"name": "uuid",
"direct": false,
"version": "9.0.1",
"ecosystem": "npm"
},
{
"name": "v8-compile-cache-lib",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "vary",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "webidl-conversions",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "whatwg-url",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "when-exit",
"direct": false,
"version": "2.1.5",
"ecosystem": "npm"
},
{
"name": "which",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "wrap-ansi",
"direct": false,
"version": "6.2.0",
"ecosystem": "npm"
},
{
"name": "wrap-ansi",
"direct": false,
"version": "7.0.0",
"ecosystem": "npm"
},
{
"name": "wrappy",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "y18n",
"direct": false,
"version": "5.0.8",
"ecosystem": "npm"
},
{
"name": "yargs",
"direct": false,
"version": "16.2.0",
"ecosystem": "npm"
},
{
"name": "yargs-parser",
"direct": false,
"version": "20.2.9",
"ecosystem": "npm"
},
{
"name": "yn",
"direct": false,
"version": "3.1.1",
"ecosystem": "npm"
},
{
"name": "yocto-queue",
"direct": false,
"version": "0.1.0",
"ecosystem": "npm"
},
{
"name": "yoctocolors-cjs",
"direct": false,
"version": "2.1.3",
"ecosystem": "npm"
},
{
"name": "zip-stream",
"direct": false,
"version": "6.0.1",
"ecosystem": "npm"
},
{
"name": "zod-to-json-schema",
"direct": false,
"version": "3.25.1",
"ecosystem": "npm"
}
],
"collected": true,
"truncated": false,
"total_count": 411,
"direct_count": 26,
"indirect_count": 385
}
},
"maintainership": {
"issues": {
"open_prs": 1,
"merged_prs": 32,
"open_issues": 1,
"closed_ratio": 0.944,
"closed_issues": 17,
"closed_unmerged_prs": 5
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "abi-chatterjee",
"commits": 90,
"avatar_url": "https://avatars.githubusercontent.com/u/35539779?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": false,
"ci_workflows": [
"npm-publish-dev.yml",
"npm-publish.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 3,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "7 out of 7 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/7 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "23 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 3,
"reason": "dependency not pinned by hash detected -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 8,
"reason": "SAST tool is not run on all commits -- score normalized to 8",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 9,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "57 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "15ba543c372773b9b8464a431aacc7e79e90298e",
"ran_at": "2026-07-27T01:07:31Z",
"aggregate_score": 5.2,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-25T14:30:56Z",
"oldest_open_prs": [
{
"number": 54,
"created_at": "2026-06-30T07:37:27Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-20T14:50:50Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 37,
"created_at": "2026-02-26T08:07:37Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/KarmaloopAI/Jiva",
"host": "github.com",
"name": "Jiva",
"owner": "KarmaloopAI"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"security": 57,
"vitality": 86,
"community": 51,
"governance": 56,
"engineering": 66
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 86,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"commits_last_year": 84,
"human_commit_share": 0.83,
"days_since_last_push": 6,
"active_weeks_last_year": 18
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 6 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 6
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "18/52 weeks with commits",
"points": 12.5,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 18
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "84 commits in the last year",
"points": 17.3,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 84
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "23 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 17,
"latest_release_tag": "v0.3.51",
"releases_from_tags": false,
"days_since_latest_release": 6,
"mean_days_between_releases": 14.3
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "17 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 17
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 6 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 6
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~14.3 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 14.3
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 6,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 6 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 6
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 51,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 31,
"inputs": {
"forks": 6,
"stars": 35,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "35 stars",
"points": 24.8,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 35
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "6 forks",
"points": 5.8,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 6
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 56,
"inputs": {
"packages": [
"jiva-core"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 2206
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "2,206 downloads/month across npm",
"points": 44.6,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 2206,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 56,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 13,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 77,
"inputs": {
"merged_prs": 32,
"open_issues": 1,
"closed_issues": 17,
"issue_closed_ratio": 0.944,
"closed_unmerged_prs": 5
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "94% of issues closed",
"points": 44.1,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 94
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "32/37 decided PRs merged",
"points": 33.1,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 32,
"decided": 37
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/7 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 53,
"inputs": {
"followers": 2,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "KarmaloopAI",
"public_repos": 9,
"account_age_days": 3112
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "2 followers of KarmaloopAI",
"points": 3.4,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 2,
"login": "KarmaloopAI"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "9 public repos, account ~8 yr old",
"points": 19.3,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 9
}
},
{
"code": "account_age_years",
"params": {
"years": 8
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"jiva-core"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 6
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 6 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 6
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "53 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 53
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 66,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "at_risk",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 44,
"inputs": {
"has_ci": true,
"has_tests": false,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "2 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 2
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "7 out of 7 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"topics": [
"agent",
"autonomous",
"claude-plugins",
"claude-skills",
"cli",
"gpt-oss-120b",
"mcp-servers",
"sarvam-105b"
],
"has_wiki": true,
"homepage": "https://www.karmaloop.ai",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://www.karmaloop.ai",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "8 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 8
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 57,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 52,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 5.2
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "7 out of 7 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/7 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "23 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 3",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 8",
"points": 4,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "57 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "good",
"name": "Dependency advisories",
"note": "Matched the npm:jiva-core@0.3.51 runtime dependency closure — what installing the published package pulls in — 365 packages. Reachability is not analyzed.",
"notes": [
{
"code": "advisories_scope_published",
"params": {
"package": "npm:jiva-core@0.3.51",
"assessed": 365
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 76,
"inputs": {
"source": "osv",
"advisories": 3,
"affected_packages": 3,
"assessed_packages": 365,
"unassessed_packages": 0,
"affected_by_severity": "high 2, moderate 1",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "3 affected: brace-expansion 2.1.2 (high 7.5), uuid 9.0.1 (high 7.5), @hono/node-server 1.19.15 (moderate 5.9)",
"points": 7.5,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 3,
"packages": "brace-expansion 2.1.2 (high 7.5), uuid 9.0.1 (high 7.5), @hono/node-server 1.19.15 (moderate 5.9)"
}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "1 advisory-carrying package(s) unaddressed past 90 days; oldest published 95 days ago",
"points": 33.7,
"status": "partial",
"details": [
{
"code": "advisories_stale",
"params": {
"days": 90,
"count": 1,
"oldest": 95
}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 365,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 2
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "at_risk",
"name": "AI Readiness",
"value": 42,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 30,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.554,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "46 of 83 human commits state their intent (structured subject or explanatory body)",
"points": 29.6,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 46,
"sampled": 83
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "critical",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 24,
"inputs": {
"has_nix": false,
"has_tests": false,
"lockfiles": [
"package-lock.json"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
"tsconfig.json"
],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 99,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 65634,
"source_files_sampled": 96,
"oversized_source_files": 1
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "1/96 source files over 60KB",
"points": 54.4,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 96,
"oversized": 1
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "moderate",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": true,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 20,
"status": "met",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-27T01:07:47.917503Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/k/KarmaloopAI/Jiva.svg",
"full_name": "KarmaloopAI/Jiva",
"license_state": "standard",
"license_spdx": "MIT"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — npm.