Public recordModerate
Software health reportschema 0.27.0 · metrics 2.5.0 · 2026-07-31 23:55 UTC
Neuron-Mr-White / UniPi
Neuron-Mr-White/UniPi holds a health index of 59 out of 100, placing it in the Moderate band. It scores highest on Vitality (74/100) and lowest on Community & Adoption (45/100). It was last updated 9 days ago. A single contributor accounts for most of its recent work.
59
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.
59
Exceptional93-100The record's top tier (≈ top 5%); essentially all checked criteria met
Excellent80-92Strong across the board; minor gaps
Good65-79Healthy; gaps are limited and manageable
Moderate50-64Acceptable with notable gaps; review recommended
Weak35-49Material weaknesses across several areas
At Risk20-34Significant weaknesses; adoption warrants caution
Critical1-19Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
The weighted overall 56 is calibrated to 59 on the published index scale (record calibration 2026-08-02).
Ownership
Mr WhitePersonal account
0 followers17 public repossince Aug 2018
This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish | Tags |
|---|---|---|---|---|---|---|
| npm | @pi-unipi/unipi | 2.1.3 | 1,025 | 33 | 9 days ago | pi-packagepi-extensionpi-coding-agentunipi |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
74
Development activity
64Moderate
How it's scored
| 28.8/36 | Push recency — last push 9 days ago |
| 6.9/36 | Commit cadence — 10/52 weeks with commits |
| 18/18 | Commit volume — 463 commits in the last year |
| 10/10 | OpenSSF Scorecard: Maintained — 30 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10 |
Inputs used
| commits_last_year | 463 |
| human_commit_share | 1 |
| days_since_last_push | 9 |
| active_weeks_last_year | 10 |
Release discipline
88Excellent
How it's scored
| 16.2/27 | Ships releases — 26 version tags (no GitHub releases) |
| 36/36 | Release recency — latest release 9 days ago |
| 27/27 | Release cadence — a release every ~6.5 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 26 |
| latest_release_tag | v2.1.3 |
| releases_from_tags | yes |
| days_since_latest_release | 9 |
| mean_days_between_releases | 6.5 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
45
Popularity & adoption
37Weak
How it's scored
| 28/60 | Stars — 54 stars |
| 8.7/25 | Forks — 12 forks |
| 0/15 | Watchers — 2 watchers |
Inputs used
| forks | 12 |
| stars | 54 |
| watchers | 2 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
50Moderate
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (MIT) |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| readme_badges | — |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| readme_badge_services | — |
| has_pull_request_template | no |
Ecosystem adoption (downloads)
50Moderate
How it's scored
| 40.1/80 | Monthly downloads — 1,025 downloads/month across npm |
| 0/20 | Registry dependents — not reported by this ecosystem |
Inputs used
| packages | @pi-unipi/unipi |
| dependents | — |
| ecosystems | npm |
| total_downloads | — |
| monthly_downloads | 1,025 |
Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
53
Maintainer resilience (bus factor)
22At Risk
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 8.4/22.5 | Commit distribution — top contributor authored 62% of commits |
| 4.1/13.5 | Contributor breadth — 3 contributors |
| 0/10 | OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 3 |
| top_contributor_share | 0.625 |
How it's scored
| 39.4/42 | Issue resolution — 94% of issues closed |
| 20/30 | PR acceptance — 6/9 decided PRs merged |
| 0/13 | Newcomer PR acceptance — no first-time contributor's PR decided in 30d |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 2/29 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 6 |
| open_issues | 1 |
| closed_issues | 15 |
| prs_merged_7d | — |
| prs_decided_7d | — |
| prs_merged_30d | — |
| prs_decided_30d | — |
| issue_closed_ratio | 0.938 |
| closed_unmerged_prs | 3 |
| first_time_authors_30d | — |
| first_time_prs_merged_30d | — |
| first_time_prs_decided_30d | — |
Excluded from scoring (no data or not applicable): newcomer_pr_acceptance. Remaining weights renormalized.
Ownership & stewardship
39Weak
How it's scored
| 10/30 | Ownership backing — personal (user) account |
| 0/20 | Verified domain — not applicable to user accounts |
| 0/25 | Owner reach — 0 followers of Neuron-Mr-White |
| 21.1/25 | Track record — 17 public repos, account ~7 yr old |
Inputs used
| followers | 0 |
| owner_type | User |
| is_verified | — |
| owner_login | Neuron-Mr-White |
| public_repos | 17 |
| account_age_days | 2,901 |
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.
Package maintenance
100Exceptional
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on npm |
| 35/35 | Publish recency — latest publish 9 days ago |
| 20/20 | Version history — 33 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | @pi-unipi/unipi |
| ecosystems | npm |
| any_deprecated | no |
| min_days_since_publish | 9 |
Engineering Quality
Are baseline engineering and documentation practices in place?
55
Engineering practices
48Weak
How it's scored
| 24/24 | CI workflows — 1 workflow(s) |
| 24/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — 0 out of 2 merged PRs checked by a CI test -- score normalized to 0 |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Documentation
65Good
How it's scored
| 30/30 | README |
| 25/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 0/10 | Repository description |
| 0/10 | Topics |
| 10/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | yes |
| homepage | — |
| has_readme | yes |
| has_docs_dir | yes |
| has_description | no |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
47
Security posture
40Weak
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — 0 out of 2 merged PRs checked by a CI test -- score normalized to 0 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 2/29 approved changesets -- score normalized to 0 |
| 0/2.5 | Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — no data |
| 2/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 4 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — no data |
| 7.5/7.5 | Token-Permissions — GitHub workflow tokens follow principle of least privilege |
| 0/7.5 | Vulnerabilities — 12 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 4 |
Excluded from scoring (no data or not applicable): packaging, signed_releases. Remaining weights renormalized.
Dependency advisories
74Good
How it's scored
| 35/35 | Direct dependencies free of known advisories — no direct dependency carries a known advisory |
| 8.8/25 | Indirect dependencies free of known advisories — 2 affected: uuid 8.3.2 (high 7.5), diff 7.0.0 (moderate 5.3) |
| 30.3/40 | No advisories left outstanding — 2 advisory-carrying package(s) unaddressed past 90 days; oldest published 198 days ago |
Inputs used
| source | osv |
| advisories | 2 |
| affected_packages | 2 |
| assessed_packages | 259 |
| unassessed_packages | 0 |
| affected_by_severity | high 1, moderate 1 |
| direct_affected_packages | 0 |
Matched the npm:@pi-unipi/unipi@2.1.3 runtime dependency closure — what installing the published package pulls in — 259 packages. Reachability is not analyzed.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.
56
Agent context & guidance
40Weak
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 89 of 100 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.89 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
How it's scored
| 18/18 | One-command bootstrap — mise.toml |
| 22/22 | Automated tests |
| 0/11 | Lint / format config |
| 11/11 | Static type checking — packages/cocoindex/tsconfig.json, packages/compactor/tests/tsconfig.json, packages/compactor/tsconfig.json, packages/footer/tsconfig.json, packages/input-shortcuts/tsconfig.json, packages/subagents/tsconfig.json, packages/utility/tsconfig.json, tsconfig.json |
| 10/10 | Reproducible environment — lockfile |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 100 |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 4/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 4 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | package-lock.json |
| has_dockerfile | no |
| typed_language | yes |
| bootstrap_files | mise.toml |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | packages/cocoindex/tsconfig.json, packages/compactor/tests/tsconfig.json, packages/compactor/tsconfig.json, packages/footer/tsconfig.json, packages/input-shortcuts/tsconfig.json, packages/subagents/tsconfig.json, packages/utility/tsconfig.json, tsconfig.json |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
Code legibility for models
100Exceptional
How it's scored
| 45/45 | Type-checkable code — TypeScript (statically typed) |
| 54.8/55 | Manageable file sizes — 1/339 source files over 60KB |
Inputs used
| primary_language | TypeScript |
| largest_source_bytes | 62,951 |
| source_files_sampled | 339 |
| oversized_source_files | 1 |
Machine-readable interfaces
20At Risk
How it's scored
| 0/40 | API schema (OpenAPI/GraphQL/proto) |
| 20/20 | MCP server |
| 0/40 | Runnable examples |
Inputs used
| example_dirs | — |
| has_mcp_signal | yes |
| api_schema_files | — |
Key facts
54GitHub stars
3contributors
463commits, last 12 months
9days since last push
26releases
1bus factor
1open issues
npmpackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
Star and fork history 0 ★ / 12 ⇿
0Stars
12Forks
25Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 1Minor 1Patch 23
OpenSSF Scorecard 4.0 / 10
4.0aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 0 | CI-Tests | 0 out of 2 merged PRs checked by a CI test -- score normalized to 0 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 2/29 approved changesets -- score normalized to 0 |
| 0 | Contributors | project has 0 contributing companies or organizations -- score normalized to 0 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10 |
| n/a | Packaging | packaging workflow not detected |
| 4 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 4 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| n/a | Signed-Releases | no releases found |
| 10 | Token-Permissions | GitHub workflow tokens follow principle of least privilege |
| 0 | Vulnerabilities | 12 existing vulnerabilities detected |
Direct dependencies 20
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| npm | @pi-unipi/ask-user | 2.1.3 | package.json |
| npm | @pi-unipi/btw | 2.1.3 | package.json |
| npm | @pi-unipi/compactor | 2.1.3 | package.json |
| npm | @pi-unipi/notify | 2.1.3 | package.json |
| npm | @pi-unipi/command-enchantment | 2.1.3 | package.json |
| npm | @pi-unipi/core | 2.1.3 | package.json |
| npm | @pi-unipi/info-screen | 2.1.3 | package.json |
| npm | @pi-unipi/mcp | 2.1.3 | package.json |
| npm | @pi-unipi/memory | 2.1.3 | package.json |
| npm | @pi-unipi/ralph | 2.1.3 | package.json |
| npm | @pi-unipi/subagents | 2.1.3 | package.json |
| npm | @pi-unipi/utility | 2.1.3 | package.json |
| npm | @pi-unipi/milestone | 2.1.3 | package.json |
| npm | @pi-unipi/kanboard | 2.1.3 | package.json |
| npm | @pi-unipi/web-api | 2.1.3 | package.json |
| npm | @pi-unipi/workflow | 2.1.3 | package.json |
| npm | @pi-unipi/footer | 2.1.3 | package.json |
| npm | @pi-unipi/updater | 2.1.3 | package.json |
| npm | @pi-unipi/input-shortcuts | 2.1.3 | package.json |
| npm | @pi-unipi/cocoindex | 2.1.3 | package.json |
All dependencies not collected
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Dependency advisories 2
Installing npm:@pi-unipi/unipi@2.1.3 pulls in 259 packages, direct and transitive: 2 carry known advisories, of which 0 are direct dependencies.
| Package | Version | Relation | Severity | Advisories | Fixed in |
|---|---|---|---|---|---|
| uuid | 8.3.2 | indirect | high | 1 | 13.0.1 |
| diff | 7.0.0 | indirect | moderate | 1 | 8.0.3 |
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 2887,
"has_wiki": true,
"homepage": null,
"languages": {
"CSS": 14787,
"Python": 51825,
"JavaScript": 7142,
"TypeScript": 1974265
},
"pushed_at": "2026-07-22T16:02:31Z",
"created_at": "2026-04-26T07:35:13Z",
"owner_type": "User",
"updated_at": "2026-07-31T20:13:10Z",
"description": null,
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript"
]
},
"owner": {
"blog": "https://neuron.my",
"name": "Mr White",
"type": "User",
"login": "Neuron-Mr-White",
"company": null,
"location": "Kuala Lumpur",
"followers": 0,
"avatar_url": "https://avatars.githubusercontent.com/u/42571711?v=4",
"created_at": "2018-08-21T09:32:39Z",
"is_verified": null,
"public_repos": 17,
"account_age_days": 2901
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v2.1.3",
"kind": "patch",
"published_at": "2026-07-22T15:59:44Z"
},
{
"tag": "v2.1.2",
"kind": "patch",
"published_at": "2026-07-06T02:29:43Z"
},
{
"tag": "v2.1.1",
"kind": "patch",
"published_at": "2026-07-01T16:51:04Z"
},
{
"tag": "v2.1.0",
"kind": "minor",
"published_at": "2026-06-27T04:15:23Z"
},
{
"tag": "v2.0.13",
"kind": "patch",
"published_at": "2026-06-01T04:31:41Z"
},
{
"tag": "v2.0.12",
"kind": "patch",
"published_at": "2026-06-01T04:22:49Z"
},
{
"tag": "v2.0.11",
"kind": "patch",
"published_at": "2026-06-01T04:01:25Z"
},
{
"tag": "v2.0.10",
"kind": "patch",
"published_at": "2026-06-01T03:38:35Z"
},
{
"tag": "v2.0.9",
"kind": "patch",
"published_at": "2026-05-28T08:20:19Z"
},
{
"tag": "v2.0.8",
"kind": "patch",
"published_at": "2026-05-25T08:24:37Z"
},
{
"tag": "v2.0.7",
"kind": "patch",
"published_at": "2026-05-23T17:20:11Z"
},
{
"tag": "v2.0.6",
"kind": "patch",
"published_at": "2026-05-19T09:54:44Z"
},
{
"tag": "v2.0.5",
"kind": "patch",
"published_at": "2026-05-19T07:01:04Z"
},
{
"tag": "v2.0.4",
"kind": "patch",
"published_at": "2026-05-17T18:51:22Z"
},
{
"tag": "v2.0.3",
"kind": "patch",
"published_at": "2026-05-16T09:03:56Z"
},
{
"tag": "v2.0.2",
"kind": "patch",
"published_at": "2026-05-16T06:43:02Z"
},
{
"tag": "v2.0.1",
"kind": "patch",
"published_at": "2026-05-15T06:49:51Z"
},
{
"tag": "v2.0.0",
"kind": "major",
"published_at": "2026-05-06T07:12:44Z"
},
{
"tag": "v0.1.18",
"kind": "patch",
"published_at": "2026-05-01T19:47:20Z"
},
{
"tag": "v0.1.16",
"kind": "patch",
"published_at": "2026-05-01T09:51:43Z"
},
{
"tag": "v0.1.15",
"kind": "patch",
"published_at": "2026-04-30T19:22:29Z"
},
{
"tag": "v0.1.14",
"kind": "patch",
"published_at": "2026-04-29T17:51:26Z"
},
{
"tag": "v0.1.13",
"kind": "patch",
"published_at": "2026-04-28T17:58:11Z"
},
{
"tag": "v0.1.12",
"kind": "patch",
"published_at": "2026-04-28T12:56:03Z"
},
{
"tag": "v0.1.11",
"kind": "patch",
"published_at": "2026-04-28T10:51:49Z"
},
{
"tag": "v0.1.9",
"kind": "patch",
"published_at": "2026-04-27T20:17:18Z"
}
],
"recent_commits": [
{
"oid": "3134be4c5c8babd5248a23d7cc932f1d07bd24cb",
"body": null,
"is_bot": false,
"headline": "chore: bump versions to 2.1.3 and update release docs",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-07-22T15:59:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f7e70b7983cde4a0758bbbac02ffd1cda58236b",
"body": "Closes #24",
"is_bot": false,
"headline": "feat(notify): support agent settled event",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-07-22T15:21:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a648496bd4ac0cb1c5ef1a8bcc09aa952ea34fc",
"body": null,
"is_bot": false,
"headline": "chore: bump versions to 2.1.2 and update changelog",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-07-06T02:29:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e39a8e18737c3f95c2180dfb54f103a819de1ff3",
"body": "…ompactor ext (closes #23)",
"is_bot": false,
"headline": "fix(compactor): populate pi extension/skills mounts so Pi loads the c…",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-07-06T02:25:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a66f5126d3c76f69d15468fe6343a2a51de7e10b",
"body": null,
"is_bot": false,
"headline": "chore: update full-release last-run to v2.1.1",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-07-01T16:52:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a6e3984fb0ac9b84cdb236b57db61c2b9e10d2c6",
"body": null,
"is_bot": false,
"headline": "chore: bump versions to 2.1.1 and update changelog",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-07-01T16:51:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6b60f3a4ff83d7738e848065db0c4ebdf521c321",
"body": "The herdr pi integration already listens to the 'herdr:blocked' event\n(active/inactive with refcounting) to surface agent_status='blocked' in\nherdr's sidebar, but nothing emitted it. During ask_user the tool was\nexecuting so herdr showed 'working' instead of 'blocked'.\n\nAdd withHerdrBlocked(pi, labe\n[…]\nd slash-command overlays (settings, info-screen, updater,\nmcp, notify, input-shortcuts, utility, footer) are intentionally NOT\nwrapped — the user is already in control there, not waiting on the\nagent.",
"is_bot": false,
"headline": "feat(herdr): report blocked status for ask_user + helper viewer UIs",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-07-01T15:00:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6057519d67cce3a156b43f62986805affb008e26",
"body": "…oot toggle\n\n- info-screen overlay: defer all group dataProvider fetches to background\n macrotasks with _destroyed guard; constructor returns instantly.\n Startup cost 4750ms -> 1ms (data loads reactively).\n- info-screen settings: add 'Show on boot' toggle row (index 0) at top\n of /unipi:info-sett\n[…]\nc when recently verified via\n ~/.unipi/memory/.mempalace-ping-verified flag (24h TTL).\n Add memPalaceCall wrapper that invalidates flag on null result.\n Warm-start saving ~484ms (2238ms -> 1754ms).",
"is_bot": false,
"headline": "perf(startup): non-blocking info overlay + mempalace ping caching + b…",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-07-01T14:53:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fd350e315f08efb57b2158202a76d2fe1704a049",
"body": "- Bump all 21 packages 2.0.13/2.0.15 -> 2.1.0 (minor: new MemPalace backend)\n- Update internal @pi-unipi/* dependency pins to 2.1.0\n- CHANGELOG: move [Unreleased] -> [2.1.0] with Breaking Changes section\n (SDK peer bump ^0.78->^0.80; memory MemPalace backend + uv prerequisite)\n- chore doc: refresh package inventory + last-run to 2.1.0\n- .gitignore: ignore __pycache__/\n- Record ralph loop state files (sdk-bump-and-mempalace-backend, prior\n mempalace-memory-migration planning loop)",
"is_bot": false,
"headline": "chore: bump versions to 2.1.0 and update docs for release",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-06-27T04:15:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5f59cf02facf4a9f4963e79fd6b1cd15f01ec44",
"body": "…one-way auto-migration\n\nMemPalace is now the primary storage backend for @pi-unipi/memory.\n\nBackend selection (MemoryStorage.init):\n- Detect MemPalace; if missing and uv is available, auto-install via\n 'uv tool install mempalace' (cached at ~/.unipi/memory/.mempalace-install).\n- Ping the bundled b\n[…]\ns pass; end-to-end\nTS smoke (migrate 1189 memories across 14 projects, store/search/list/\nget/delete/find_similar) passes; warm init 464ms; SQLite fallback path\nverified when uv/mempalace unavailable.",
"is_bot": false,
"headline": "feat(memory): replace SQLite backend with MemPalace + auto-install + …",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-06-27T02:44:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6a76035dd565adf99e976d24c1a74b75fb8a41a7",
"body": "Pull newest pi-coding-agent SDK (0.78.0 -> 0.80.2) across\npi-coding-agent, pi-ai, pi-tui, pi-agent-core in root and all\npackages/* peerDependencies. Typecheck and all 180 workspace tests pass.\n\nNotable 0.80 changes reviewed: pi-ai global API moved to /compat (unipi\nonly imports core types from the root, unaffected); /base entrypoints\nremoved (unused); ExecutionEnvExecOptions renamed to ShellExecOptions\n(unused); session_compact events gained reason/willRetry (additive).",
"is_bot": false,
"headline": "chore: bump @earendil-works/* to ^0.80.0",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-06-27T02:28:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cfcb3a9c693e4c04ecd7dcf2fc278ffc6e8d87be",
"body": "Commit 32a9b11 intentionally registered notify's ./index.ts extension,\nbut the manifest test still asserted all split packages had empty pi\nfields. Update the test to permit explicitly-listed package-internal\nextensions while keeping the no-auto-discovery intent for\nskills/prompts/themes (umbrella-owned).",
"is_bot": false,
"headline": "test: allow split packages to register package-internal extensions",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-06-27T02:27:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dee9d0129e970aed51173a432973c6f039789846",
"body": "…orrectness\n\nOn Windows, new URL('.', import.meta.url).pathname produces /C:/Users/...\nwhich, when resolved via path.resolve(), picks up the cwd drive letter\n(e.g. E:) and generates malformed paths like E:\\C:\\Users\\....\n\nReplace all occurrences with the correct pattern:\n dirname(fileURLToPath(impor\n[…]\ny, milestone, notify,\nralph, updater, utility, web-api, workflow.\n\nAlso removed a stale resources_discover skill registration from the\ninstalled @pi-unipi/notify that duplicated the umbrella manifest.",
"is_bot": false,
"headline": "fix: replace new URL().pathname with fileURLToPath for Windows path c…",
"author_name": "hhelibeb",
"author_login": "hhelibeb",
"committed_at": "2026-06-13T01:59:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "32a9b113eb16cbbc64c4033ae5b08e5ea84b62e5",
"body": "Fixes #18",
"is_bot": false,
"headline": "fix(notify): register package extension",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-06-12T17:44:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c62cd1038f8f6c26072116d22a068049b7ba0f9",
"body": "Closes #17",
"is_bot": false,
"headline": "chore: close issue 17",
"author_name": "White",
"author_login": "Neuron-Mr-White",
"committed_at": "2026-06-07T03:00:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9c8fc652a8116079398cbc86aee7d714f0ca427b",
"body": null,
"is_bot": false,
"headline": "fix: stop duplicate skill resource discovery",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-06-01T04:31:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a8399ca188d4eee929c4a9e7301458de129499b",
"body": null,
"is_bot": false,
"headline": "fix: pin internal dependency versions",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-06-01T04:22:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d914a251e4aee7bd81682562191b6fc54450fcab",
"body": null,
"is_bot": false,
"headline": "fix: disable split package resource discovery",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-06-01T04:01:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "71c6828ce65b852d0ca9d0a0a505c3fb39e4cf58",
"body": null,
"is_bot": false,
"headline": "fix: prevent duplicate skills and updater false positives",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-06-01T03:38:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7b37096bb6abb97c5796069d898d1b78bf0893ba",
"body": "Closes #16",
"is_bot": false,
"headline": "chore: close issue 16",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-28T08:23:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "861907004cbe5cbaac682bc6bfb74bde9fade070",
"body": null,
"is_bot": false,
"headline": "fix: include kanboard runtime files in npm package",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-28T08:20:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "907bf567ca09b162798b7c4799823a4614efefe0",
"body": null,
"is_bot": false,
"headline": "chore: release v2.0.8",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-25T08:24:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "33055ea1eb668d4c9e71f9ea16ca80da8c2b9bfb",
"body": "…ution\n\nThe all-in-one @pi-unipi/unipi extension imports sub-packages like\n@pi-unipi/utility as standard Node.js modules. Without a 'main' field,\nNode.js ESM resolution fails with 'Cannot find module' when the packages\nare installed via npm (they worked in the monorepo via workspace links\nand tsx's TypeScript-aware resolution).\n\nAdds 'main' pointing to the pi.extensions[0] entry for 17 packages.",
"is_bot": false,
"headline": "fix: add 'main' field to all packages for proper Node.js module resol…",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-25T08:04:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cbe863bc91ef6c4c68bf139ba810a738aa79830e",
"body": null,
"is_bot": false,
"headline": "chore: release v2.0.8",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-24T15:30:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "78980d31eda83f3e2de36b4ea78e5c2141151455",
"body": null,
"is_bot": false,
"headline": "chore: update UniPi for Pi extension base",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-24T15:00:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "329c5e9784525aa604e279e31846b5cc77836f52",
"body": null,
"is_bot": false,
"headline": "chore: release v2.0.7",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-23T17:20:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c561f49fe5065c83959ef43714319779e9e5650a",
"body": "Fixes #14",
"is_bot": false,
"headline": "fix(unipi): use package-internal umbrella manifest paths",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-23T17:06:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b9e931c65b373df05af6a4d09648f24e5ff65934",
"body": null,
"is_bot": false,
"headline": "fix(notify): harden ask-user prompt payload handling",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-23T17:06:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2229499a3a89811a3b977a66cdbcd4c1a8e4dd21",
"body": null,
"is_bot": false,
"headline": "Merge pull request #15 from hhelibeb/fix/ask-user-prompt-event",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-23T16:58:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "84de7687c2e3ce2d430d39c5bb6722051e037eb1",
"body": "…contract\n\n- Listen for rpiv:ask-user:prompt from @juicesharp/rpiv-ask-user-question\n- Use lossless payload format (questions array) instead of flattened fields\n- type-only import + satisfies for compile-time event name drift detection\n- type-only import of AskUserPromptEventPayload + type alias for\n[…]\ne-test step so drift detection is enforced in CI\n- Add 9 unit tests covering normal, multi, malformed, edge-case payloads\n- Test fixtures use satisfies AskUserPromptEventPayload for contract alignment",
"is_bot": false,
"headline": "fix(notify): adapt rpiv:ask-user:prompt listener to lossless payload …",
"author_name": "hhelibeb",
"author_login": "hhelibeb",
"committed_at": "2026-05-23T03:03:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "47577c4e4fd2ad74e1a45aa9841f07250fb48d58",
"body": null,
"is_bot": false,
"headline": "Merge pull request #12 from hhelibeb/fix/ask-user-prompt-event",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-22T12:32:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fff9f6b8f56d53d133fa726d9890e35bb99578e3",
"body": null,
"is_bot": false,
"headline": "test(notify): run event bus regression tests",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-22T12:32:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a0eefe0d43ebe7f9b480841805713ca5a1781556",
"body": null,
"is_bot": false,
"headline": "fix(notify): unregister old EventBus listeners before re-registering",
"author_name": "hhelibeb",
"author_login": "hhelibeb",
"committed_at": "2026-05-22T11:11:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "58a3b8f64af1ed9eb7418328edbb9ae3f071d40d",
"body": null,
"is_bot": false,
"headline": "chore: release updater fix v2.0.6",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-19T09:54:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c6eedafe8933677a4c36e50e30aa4cc0858c600c",
"body": null,
"is_bot": false,
"headline": "fix(updater): ignore stale downgrade cache",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-19T07:12:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6660d266b8a82ac67724d079b347dd5ce62f4ca",
"body": null,
"is_bot": false,
"headline": "chore: release v2.0.5",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-19T07:01:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "202ebe637f25d487ac38c821e450be5755e4408a",
"body": "fix: improve unipi command display and terminal color fallback",
"is_bot": false,
"headline": "Merge pull request #9 from Junda10/main",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-19T06:55:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "86c34d7385e6d2284c63a58785e9f71a97238456",
"body": null,
"is_bot": false,
"headline": "fix(footer): add terminal-aware color fallback",
"author_name": "TerryM",
"author_login": "Junda10",
"committed_at": "2026-05-19T03:35:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "46a5545c71c0f2d6d94c83dd81efcddb45f34bb4",
"body": null,
"is_bot": false,
"headline": "fix(autocomplete): hide pi source tag for unipi commands",
"author_name": "TerryM",
"author_login": "Junda10",
"committed_at": "2026-05-19T03:15:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f018a7800d0a1db0aab71ad03f8dfe6f483d2d00",
"body": null,
"is_bot": false,
"headline": "chore: release v2.0.4",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-17T18:51:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9927648057ca93fdac7927a4813d1b39633eaef2",
"body": null,
"is_bot": false,
"headline": "fix: apply compactor pipeline presets",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-17T18:20:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0b8ca6eb963bce3a12f59f6211c5cb477106fdd6",
"body": null,
"is_bot": false,
"headline": "docs: add review remarks for compactor percent trigger",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-17T17:36:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "672ac941f2cc2cfac1a5c7bb8c66284302a8246c",
"body": null,
"is_bot": false,
"headline": "feat: add compactor percent auto-trigger",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-17T17:14:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82faf2e42f7c7fed840de855e629b8be4c17d117",
"body": null,
"is_bot": false,
"headline": "fix: validate notify focus suppression",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-17T09:58:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2657f991f591baaf4ca3b437d89054115c4d363",
"body": "…45e0298284cdff6b38ae978",
"is_bot": false,
"headline": "Merge bdc0b1cc273d525bb5bc3875a6d8cbc6874d33ac into 33f7ffd9401432428…",
"author_name": "He H",
"author_login": "hhelibeb",
"committed_at": "2026-05-17T07:50:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bdc0b1cc273d525bb5bc3875a6d8cbc6874d33ac",
"body": "Adds a native.suppressWhenFocused config option that skips desktop\nnotifications when the terminal window is in the foreground.\n\nWindows implementation:\n - Gets foreground window PID via Win32 GetForegroundWindow +\n GetWindowThreadProcessId\n - Walks the WMI Win32_Process parent chain upward fro\n[…]\nression\n - tui/settings-overlay.ts - toggle in settings UI\n - core/events.ts - suppressedPlatforms in event payload\n\nmacOS/Linux not implemented - focus.ts returns false on those platforms.",
"is_bot": false,
"headline": "feat(notify): add suppressWhenFocused for native notifications",
"author_name": "He H",
"author_login": "hhelibeb",
"committed_at": "2026-05-17T07:41:12Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "33f7ffd940143242845e0298284cdff6b38ae978",
"body": null,
"is_bot": false,
"headline": "chore: release v2.0.3",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-16T09:03:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "366292237ca92544cb313cbde8a034938350d5f9",
"body": null,
"is_bot": false,
"headline": "Improve ask-user history and cache worktree completions",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-16T08:00:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6eac7836ecd8cd6df4eb70934b0c9d33c483c506",
"body": null,
"is_bot": false,
"headline": "chore: release v2.0.2",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-16T06:43:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "210157c2359776da84afe17b6ebc670f6e03ca5c",
"body": null,
"is_bot": false,
"headline": "fix(autocomplete): audit registered command registry",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-16T05:46:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6278b874058ce1bb541987414988fa61997a739a",
"body": "Fixes #4",
"is_bot": false,
"headline": "fix(compactor): recall compacted session history",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-16T05:30:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b16fb671bd84cddb90aea3436df409433d4f3c35",
"body": null,
"is_bot": false,
"headline": "chore: release v2.0.1",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-15T06:49:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4e49e03a994299077aaeb9f83ae6d0266595d210",
"body": "Workflow and Ralph now require @pi-unipi/core ^2.0.0 so npm does not install incompatible nested 0.1.x core copies.\n\nFixes #3",
"is_bot": false,
"headline": "fix: align workflow core dependency range",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-14T17:29:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c5e49993ab49ad454f5da0c43ede4c027bd1d8a",
"body": null,
"is_bot": false,
"headline": "docs: clarify unreleased changelog section after v2 release",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-06T07:52:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "40601bdb1f4595fbed0daf7a66c7f51866758aaa",
"body": null,
"is_bot": false,
"headline": "chore(release): prepare v2.0.0 for cocoindex migration",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-06T07:12:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e99336458e0f1e3aa8e6659baf218ba1b25c0efc",
"body": null,
"is_bot": false,
"headline": "Verify ask-user handoff workflow docs",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-06T06:59:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c6bc71231b3a7bd34fe335944fbb937378ecc667",
"body": null,
"is_bot": false,
"headline": "Fix ask-user queued handoff",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-06T06:54:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a09e2a5efb561588b869b6245efcb0c50cab684",
"body": null,
"is_bot": false,
"headline": "Fix CocoIndex search fallback for text-only indexes",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-06T05:07:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "20f7279029db0fafcf203f044b9d7b7ae66556f0",
"body": null,
"is_bot": false,
"headline": "chore: prepare CocoIndex release notes",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-05T18:59:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aeef0060a0aa33a068fc53942cd6ccb444ca3d8e",
"body": null,
"is_bot": false,
"headline": "fix(workflow): preserve extension tools in sandboxes",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-05T18:59:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "90330306a5a8ccb4b5c52d83df9a5190822783b6",
"body": null,
"is_bot": false,
"headline": "Validate CocoIndex auto-install flow",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-05T18:15:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ea29c488d955b3136c1761e51a52f5dcaf687fc3",
"body": null,
"is_bot": false,
"headline": "Update CocoIndex tool install guidance",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-05T18:14:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "32725ed53285676b5f97b20755704c55cd2ff77b",
"body": null,
"is_bot": false,
"headline": "Wire CocoIndex installer into commands",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-05T18:13:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "436678702fe489932ce7f356bc3a4e53641635ae",
"body": null,
"is_bot": false,
"headline": "Add consent-based CocoIndex ensure flow",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-05T18:13:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95a2d6809e8cf00717c1565634c80157c0f2ba9e",
"body": null,
"is_bot": false,
"headline": "Add CocoIndex installer planning helpers",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-05T18:12:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "492aa5eb3faaeb634aaf83a2d59ac7ee2f0f2c22",
"body": null,
"is_bot": false,
"headline": "Add CocoIndex version detection primitives",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-05T18:11:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3816b944d5d180715198579ab291ab4e78b6c7f1",
"body": "…config\n\n- Add /unipi:cocoindex-search <query> for TUI vector search\n- Fix default embedding model to qwen/qwen3-embedding-8b (4096-dim)\n- Read OPENROUTER_API_KEY from env (not just config file)\n- Update memory config.json with correct model/dimensions\n- Pipeline now embeds via async httpx (no litellm dependency)",
"is_bot": false,
"headline": "feat(cocoindex): add /unipi:cocoindex-search command + fix embedding …",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-05T04:20:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "359067ee4deba57784d74ab0570c0b1199363469",
"body": "The old parser looked for 'chunks' in output but v1.0+ reports:\n ✅ process_file: 604 total | 604 added\n\nNow extracts the count from the last process_file line matching\n'added' or 'reprocessed', with fallback to old format.",
"is_bot": false,
"headline": "fix(cocoindex): parse files-processed count from v1.0+ output format",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-05T03:41:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e9061a42efc26f9481dd723ded906b6cebc9c8cf",
"body": "CocoIndex v1.0 completely redesigned the API, removing flow_def,\nFlowBuilder, sources, transforms, and targets modules.\n\nChanges:\n- Rewrite .unipi/cocoindex/main.py for new App/fn/mount API\n - @coco.lifespan for async environment setup (LanceDB connection)\n - @coco.fn for memoized chunking and fil\n[…]\node\n- Add resolveCocoindexBin() for CLI discovery on mise-managed systems\n- Update README with new architecture and prerequisites\n\nVerified: 604 files indexed, incremental update works (~1s memoized).",
"is_bot": false,
"headline": "fix(cocoindex): rewrite pipeline for v1.0+ API (flow_def removed)",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-05T03:04:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e78a9ac4a2890246104064b409fbd8dff2083014",
"body": "Added cocoindex to package inventory table, command registry\nverification step, and all-in-one entry check in full-release chore.",
"is_bot": false,
"headline": "docs(chore): add cocoindex to full-release pipeline",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-05T02:41:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c047d79067081e6fd7e10f9a76269b5c3cb5d5cb",
"body": "Cocoindex commands were being sent as strings to the LLM instead of\nbeing handled by registered command handlers because:\n\n1. @pi-unipi/cocoindex was not installed in node_modules (fixed via npm install)\n2. packages/unipi/index.ts did not import/call the cocoindex extension\n\nAdded cocoindex import and invocation to the all-in-one entry point.",
"is_bot": false,
"headline": "fix(cocoindex): add cocoindex to unipi all-in-one entry",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-05T02:39:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "99b15e86ec447832363f44569abdcf5eb76e305a",
"body": "…_start\n\nCommands must be registered synchronously at the top level of the\nextension export function. Pi needs them available immediately when\nthe user types them — registering inside session_start (async, deferred)\ncaused commands to be unrecognized and sent as plain text instead.\n\nPattern follows updater, kanboard, milestone, notify, etc.\n- commands.ts: no longer takes deps param, resolves projectDir from ctx.cwd\n- index.ts: calls registerCocoindexCommands(pi) at top level",
"is_bot": false,
"headline": "fix(cocoindex): register commands at extension load time, not session…",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-05T02:31:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "093750947678f3b295849caa4803bca9db7b96b4",
"body": "…ex commands\n\n- Remove compact-index, compact-search, compact-purge from command map and descriptions\n- Add cocoindex-update, cocoindex-status, cocoindex-init, cocoindex-settings\n- Add cocoindex to PACKAGE_ORDER and PACKAGE_COLORS\n- Update compactor command count 10 → 7",
"is_bot": false,
"headline": "fix(autocomplete): remove old compactor content commands, add cocoind…",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-05T02:22:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "51b6e716a7df369d3b2c3979242ea50dcbc5b84d",
"body": "- Add ts-ignore for optional @lancedb/lancedb dependency\n- Update compactor package description (remove FTS5 reference)\n- All 11 tasks complete\n- npm run typecheck passes with zero errors",
"is_bot": false,
"headline": "chore: final typecheck fixes, update descriptions",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-04T18:13:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0e918a1b929826bcc058c8fd040c5a7e62719586",
"body": "- Rename indexed_docs → cocoindex_status in compactor segments\n- Update help.ts, presets.ts, renderer.ts references\n- Task 9 complete",
"is_bot": false,
"headline": "refactor(footer): replace indexed_docs segment with cocoindex_status",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-04T18:11:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aeeab5c67fa297a742bfe7d024dff6fba92fe042",
"body": "- Add @pi-unipi/cocoindex to dependencies\n- Add extension and skills paths to pi config\n- Task 8 complete",
"is_bot": false,
"headline": "feat(cocoindex): wire into umbrella package",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-04T18:10:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "779ce97a7151c15998492ab6ebfaa35a078a9b13",
"body": "- Delete store/ directory (chunking.ts, index.ts, db-base.ts, unified.ts)\n- Delete content tools (ctx-index.ts, ctx-search.ts, ctx-fetch-and-index.ts)\n- Remove content_index, content_search, content_fetch tools from register.ts\n- Remove content-index, content-search, content-purge commands\n- Remove \n[…]\ne only)\n- Remove FTS5 section from settings overlay\n- Update preset descriptions to remove FTS5 references\n- Remove content-related types from types.ts\n- Delete store-fuzzy.test.ts\n- Task 6-7 complete",
"is_bot": false,
"headline": "refactor(compactor): remove FTS5 content store, tools, and commands",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-04T18:10:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dbb6bcd139345e8e31a59d272d0c2649cbfe3c40",
"body": "…constants\n\n- Create @pi-unipi/cocoindex package with bridge.ts, tools.ts, commands.ts\n- Add MODULES.COCOINDEX, COCOINDEX_TOOLS, COCOINDEX_COMMANDS to core\n- Add cocoindex events to core/events.ts\n- Remove FTS5-related COMPACTOR_TOOLS and COMPACTOR_COMMANDS from core\n- Remove indexedDocs from UnipiCompactorStatsEvent\n- Remove FTS5_CHUNK_SIZE from COMPACTOR_DEFAULTS\n- Add cocoindex skill (SKILL.md)\n- Task 1-5 complete",
"is_bot": false,
"headline": "feat(cocoindex): scaffold package, bridge, tools, commands, and core …",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-04T18:05:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "48296f91c8d66e3699b9911ee04d06ea4218c88d",
"body": null,
"is_bot": false,
"headline": "docs: add cocoindex integration brainstorm spec",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-04T17:37:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c92a12643c09a1493c0cd5b443f88586761fb8e2",
"body": "…ety net\n\nThe previous fix (2026-05-02) added truncateToWidth in layout methods but\nthe crash still occurred intermittently. This adds defense-in-depth:\n\n1. Widget render() safety net: hard truncateToWidth at the widget boundary\n - Every line returned to pi-tui is guaranteed to fit terminal width\n\n[…]\n' with fallback to 200 chars.\n\n4. Recalculate adjLeftWidth after left-zone dropping for correct\n center-zone overflow calculation.\n\nFixes: intermittent 'Rendered line N exceeds terminal width' crash",
"is_bot": false,
"headline": "fix: harden footer width overflow protection with widget boundary saf…",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-04T14:01:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d735700607cca10b27c2a66cf73ac82033488dbd",
"body": "…hain\n\nsandboxRuns and searchQueries were purely in-memory counters that reset\non every Pi restart. Now:\n- V2 migration adds sandbox_runs/search_queries columns to session_meta\n- DB increment on every tool invocation ensures crash-safe persistence\n- ctxStats() has 3-level fallback: counter → session\n[…]\nromToolResult() tracks sandbox/search/index events\n- Footer segments now render actual counts instead of returning hidden()\n\nFixes: compactor stats always showing 0 for sandbox runs and search queries",
"is_bot": false,
"headline": "fix(compactor): persist sandbox/search counters to DB with fallback c…",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-03T07:35:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e04b488ab74eb4f2bf967953d200a89afa5f8fd9",
"body": "…peline\n\nTwo bugs fixed:\n\nBug A: end_turn action caused unnecessary LLM reply, wasting tokens.\n- Now calls ctx.abort() so the agent stops immediately after the tool\n result is recorded, with no LLM follow-up.\n\nBug B: 'Compact & run' in session launcher didn't use compactor and\ncould hang indefinite\n[…]\nackages/compactor/src/compaction/hooks.ts: import from core, startsWith\n- packages/compactor/src/commands/index.ts: import from core\n- packages/ask-user/tools.ts: abort on end_turn, sentinel + timeout",
"is_bot": false,
"headline": "fix(ask-user): end_turn aborts agent, compact & run uses compactor pi…",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-03T06:55:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "27c8ab94ceff3b4a4f2a2035f91d610af4e3ac0e",
"body": "getFocusedGroupId() always returned groups[0] instead of the actually\nfocused group because SettingsList doesn't expose getSelectedId().\nFixed by accessing SettingsList internals via type assertion.",
"is_bot": false,
"headline": "fix(footer): segments page shows correct group on drill-down",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-02T14:07:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a07d340f9d7160486ac16e35d2895d8af3aeb15",
"body": "…actor segments, add missing cost icon",
"is_bot": false,
"headline": "fix(footer): replace hardcoded emoji with icon-system lookups in comp…",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-02T09:19:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a2e809356f4cab82bdba2d5299b5886a2a2bd90",
"body": "…active preset\n\nWhen a user toggles a segment on in the footer settings TUI (e.g.\nthinking_level, tps), it was saved to config but never rendered because\ncomputeLayout() only iterated over segments defined in the active preset.\n\nAdded post-preset collection of explicitly user-enabled segments that are\nnot in the preset arrays, so they appear in their defined zone.",
"is_bot": false,
"headline": "fix(footer): render segments toggled on in settings even when not in …",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-02T08:15:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5dde2372710ece94aff2a0bc6003f6e3be6b60d2",
"body": "67% reduction in explicit any types (222 → 73)",
"is_bot": false,
"headline": "docs: update plan with task completion status",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-02T06:51:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c3775fb21edae1927cefda1f6a65a48cb4d1cf21",
"body": "- Type (s: any) → (s: string) in mcp add-overlay\n- Type tuiRef as TUI | null | undefined in footer\n- Type setupUI callback parameter as ExtensionContext",
"is_bot": false,
"headline": "refactor: fix remaining any types in mcp and footer overlays",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-02T06:50:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91866dff98b46bbb43bdc54130e6d3463b9d9bf7",
"body": "- Replace Promise<any> with Promise<AgentToolResult<unknown>> in tool execute functions\n- params: any and registerTool as any retained due to SDK signature mismatch",
"is_bot": false,
"headline": "refactor: type tool execute return types (Task 15 partial)",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-02T06:47:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "03008d3b5d83cc29025857249f6f45fe064fdd0a",
"body": "- OwnCutResult.messages: any[] → Message[]\n- content.ts: (c: any) → (c: Record<string, unknown>) with typed access\n- recall-scope.ts: branchEntries: any[] → typed array",
"is_bot": false,
"headline": "refactor: fix compactor core types (Task 20)",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-02T06:45:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6150b5aae69dccfcd99f04285af1294dac7456ce",
"body": "- Replace ...(overrides.xxx as any) with ...(overrides.xxx ?? {}) in presets\n- Remaining as any in manager.ts deepMerge are necessary for generic spread typing",
"is_bot": false,
"headline": "refactor: fix config spread merging in presets (Task 17 partial)",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-02T06:43:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6537ee9339c283ff6af1ea9f23e04b87e8085cee",
"body": "- shikiHighlighter: any → import('shiki').Highlighter | null\n- wreqModule/defuddleModule: any → Record<string, unknown> | null\n- lodashModule: any → Record<string, unknown> | null\n- mimeTypesModule: any → typeof import('mime-types') | null",
"is_bot": false,
"headline": "refactor: type lazy-loaded modules (Task 14)",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-02T06:40:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e8eb309d7754a11a64f965d2dea49e72e576e594",
"body": "- Define MemoryRow and SearchResultRow interfaces\n- Replace all 'as any[]' query casts with typed row interfaces\n- Replace 'as any' query result casts with typed row types\n- Type body: any → Record<string, unknown> in embedding.ts\n- Type hasEmbeddings parameter with minimal DB interface\n- Add proper nullish coalescing for optional row fields",
"is_bot": false,
"headline": "refactor: type memory database layer (Task 13)",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-02T06:39:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b2486575e02d7d17a0b8f8a8956297d0012a1cd9",
"body": "- Type sqliteLib as unknown instead of any\n- Type PreparedStatement methods with unknown instead of any\n- Add SqliteDatabase interface with exec/prepare\n- Type applyWALPragmas parameter\n- Type isSQLiteCorruptionError parameter as unknown\n- Type getDb() return with specific interface\n- Type chunkObject parameter as unknown",
"is_bot": false,
"headline": "refactor: type compactor database layer (Task 12)",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-02T06:35:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "25b40036d0a62d0a3e46465df86b4a514eb5dd59",
"body": "- Remove 'any' from overlay callback parameters (tui, theme, kb, done)\n- Use TUI from @mariozechner/pi-tui, Theme/KeybindingsManager from SDK\n- Fix tui.width → tui.terminal?.columns for proper typing\n- Use ctx.ui.custom<void>() for void-result overlays\n- Type kanboard overlay's non-standard tui methods with assertions\n- Packages: ask-user, notify, updater, compactor, mcp, kanboard, footer, utility",
"is_bot": false,
"headline": "refactor: type overlay callbacks across all packages (Tasks 9-11)",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-02T06:29:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dba354d480ea84a31e86347f72994354cbd11c4f",
"body": "…uards (Task 18)\n\n- All 20 catch (err: any) / catch (e: any) replaced with unknown\n- err.message → err instanceof Error ? err.message : String(err)\n- err.code → (err as NodeJS.ErrnoException).code with instanceof check\n- err.stderr → proper type narrowing for spawn errors\n- Packages: compactor, kanboard, memory, updater",
"is_bot": false,
"headline": "refactor: replace catch (err: any) with catch (err: unknown) + type g…",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-02T06:19:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aa8ba862ac4fcafd78b8bef45ff4ae3cb1785b48",
"body": "- piApi in info-screen/core-groups.ts → ExtensionAPI | null\n- sessionCtx in subagents/index.ts → ExtensionContext | null\n- firstInputCtx already typed in Task 5",
"is_bot": false,
"headline": "refactor: type module-level any variables (Task 8)",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-02T06:15:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "79b53699d300910840a8c07bdb88c61a7573e3f8",
"body": "…ext in command handlers (Task 7)\n\n- Replace all handler: async (args, ctx: any) with ctx: ExtensionCommandContext\n- Fix footer setupUI to use ExtensionContext (called from event handlers)\n- Fix info-screen showOverlay to use ExtensionContext\n- Type subagents widget uiCtx as ExtensionUIContext\n- Fix overlayOptions type narrowing (as const for SizeValue/OverlayAnchor)\n- Fix footer settings-tui overlay options (verticalAlign→anchor)",
"is_bot": false,
"headline": "refactor: replace ctx: any with ExtensionCommandContext/ExtensionCont…",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-02T06:14:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1c55011ce57a90c868a8e1fdc8d0c841422876d7",
"body": "- Replace (event: any, ctx: any) with typed InputEvent and AgentEndEvent\n- Type firstInputCtx as ExtensionContext | null\n- Use proper type narrowing for message content filtering\n- Import types from @mariozechner/pi-coding-agent",
"is_bot": false,
"headline": "refactor: type pi SDK event listeners in utility package (Task 5)",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-02T06:06:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c792c01e1b4ee02829d59f6c8a284b428f82c011",
"body": "- Replace all (event: any) / (payload: any) in pi.events.on(UNIPI_EVENTS.*, ...) with typed casts\n- Add loadTimeMs to UnipiModuleEvent\n- Import specific event types from @pi-unipi/core\n- Packages affected: info-screen, updater, workflow, subagents",
"is_bot": false,
"headline": "refactor: type UNIPI_EVENTS listeners with proper event types (Task 4)",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-02T06:01:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "19024c4f1aa0b1f1afea07a497de59028599d432",
"body": "ExtensionAPI is structurally compatible with emitEvent's parameter type.\nAll 10 emitEvent(pi as any, ...) calls replaced with emitEvent(pi, ...).",
"is_bot": false,
"headline": "refactor: remove 'pi as any' casts from emitEvent calls (Task 3)",
"author_name": "Pi User",
"author_login": null,
"committed_at": "2026-05-02T05:56:28Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 26,
"commits_last_year": 463,
"latest_release_at": "2026-07-22T15:59:44Z",
"latest_release_tag": "v2.1.3",
"releases_from_tags": true,
"days_since_last_push": 9,
"active_weeks_last_year": 10,
"days_since_latest_release": 9,
"mean_days_between_releases": 6.5
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": false,
"has_contributing": false,
"health_percentage": 28,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "@pi-unipi/unipi",
"exists": true,
"license": "MIT",
"keywords": [
"pi-package",
"pi-extension",
"pi-coding-agent",
"unipi"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@pi-unipi/unipi",
"is_deprecated": false,
"latest_version": "2.1.3",
"repository_url": "https://github.com/Neuron-Mr-White/unipi",
"versions_count": 33,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 1025,
"first_published_at": "2026-04-26T15:50:27.158000Z",
"latest_published_at": "2026-07-22T16:01:29.748000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 9
}
]
},
"popularity": {
"forks": 12,
"stars": 54,
"watchers": 2,
"fork_history": {
"days": [
{
"date": "2026-04-27",
"count": 1
},
{
"date": "2026-04-29",
"count": 1
},
{
"date": "2026-05-06",
"count": 1
},
{
"date": "2026-05-17",
"count": 1
},
{
"date": "2026-05-18",
"count": 1
},
{
"date": "2026-05-29",
"count": 1
},
{
"date": "2026-06-11",
"count": 1
},
{
"date": "2026-06-13",
"count": 1
},
{
"date": "2026-06-18",
"count": 1
},
{
"date": "2026-06-27",
"count": 1
},
{
"date": "2026-07-04",
"count": 1
},
{
"date": "2026-07-11",
"count": 1
}
],
"complete": true,
"collected": 12,
"total_forks": 12
},
"star_history": null,
"open_issues_and_prs": 1
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": true,
"bootstrap_files": [
"mise.toml"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"packages/cocoindex/tsconfig.json",
"packages/compactor/tests/tsconfig.json",
"packages/compactor/tsconfig.json",
"packages/footer/tsconfig.json",
"packages/input-shortcuts/tsconfig.json",
"packages/subagents/tsconfig.json",
"packages/utility/tsconfig.json",
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 62951,
"source_files_sampled": 339,
"oversized_source_files": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [
{
"name": "uuid",
"direct": false,
"version": "8.3.2",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-w5hq-g745-h8pq"
],
"fixed_version": "13.0.1",
"advisory_count": 1,
"oldest_advisory_days": 100
},
{
"name": "diff",
"direct": false,
"version": "7.0.0",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-73rr-hh4g-fpgx"
],
"fixed_version": "8.0.3",
"advisory_count": 1,
"oldest_advisory_days": 198
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"high": 1,
"moderate": 1
},
"advisory_count": 2,
"affected_count": 2,
"assessed_count": 259,
"malicious_count": 0,
"assessed_package": "npm:@pi-unipi/unipi@2.1.3",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "@pi-unipi/ask-user",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "2.1.3"
},
{
"name": "@pi-unipi/btw",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "2.1.3"
},
{
"name": "@pi-unipi/compactor",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "2.1.3"
},
{
"name": "@pi-unipi/notify",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "2.1.3"
},
{
"name": "@pi-unipi/command-enchantment",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "2.1.3"
},
{
"name": "@pi-unipi/core",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "2.1.3"
},
{
"name": "@pi-unipi/info-screen",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "2.1.3"
},
{
"name": "@pi-unipi/mcp",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "2.1.3"
},
{
"name": "@pi-unipi/memory",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "2.1.3"
},
{
"name": "@pi-unipi/ralph",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "2.1.3"
},
{
"name": "@pi-unipi/subagents",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "2.1.3"
},
{
"name": "@pi-unipi/utility",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "2.1.3"
},
{
"name": "@pi-unipi/milestone",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "2.1.3"
},
{
"name": "@pi-unipi/kanboard",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "2.1.3"
},
{
"name": "@pi-unipi/web-api",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "2.1.3"
},
{
"name": "@pi-unipi/workflow",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "2.1.3"
},
{
"name": "@pi-unipi/footer",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "2.1.3"
},
{
"name": "@pi-unipi/updater",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "2.1.3"
},
{
"name": "@pi-unipi/input-shortcuts",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "2.1.3"
},
{
"name": "@pi-unipi/cocoindex",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "2.1.3"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 6,
"open_issues": 1,
"closed_ratio": 0.938,
"closed_issues": 15,
"closed_unmerged_prs": 3
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "hhelibeb",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/16676760?v=4"
},
{
"type": "User",
"login": "Junda10",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/119513588?v=4"
},
{
"type": "User",
"login": "Neuron-Mr-White",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/42571711?v=4"
}
],
"contributors_sampled": 3,
"top_contributor_share": 0.625
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 0,
"reason": "0 out of 2 merged PRs checked by a CI test -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 2/29 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 4,
"reason": "dependency not pinned by hash detected -- score normalized to 4",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 10,
"reason": "GitHub workflow tokens follow principle of least privilege",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "12 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "3134be4c5c8babd5248a23d7cc932f1d07bd24cb",
"ran_at": "2026-07-31T23:55:12Z",
"aggregate_score": 4,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-22T16:03:39Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-06-13T02:26:00Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 25,
"created_at": "2026-07-23T00:37:42Z",
"last_comment_at": "2026-07-31T11:24:34Z",
"last_comment_author": "JasonLandbridge"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/Neuron-Mr-White/UniPi",
"host": "github.com",
"name": "UniPi",
"owner": "Neuron-Mr-White"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": "The weighted overall 56 is calibrated to 59 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 56,
"calibrated": 59,
"calibration": "2026-08-02"
}
}
],
"value": 59,
"inputs": {
"security": 47,
"vitality": 74,
"community": 45,
"governance": 53,
"calibration": "2026-08-02",
"engineering": 55,
"ai_readiness": 56,
"weighted_overall_raw": 56
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 74,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"commits_last_year": 463,
"human_commit_share": 1,
"days_since_last_push": 9,
"active_weeks_last_year": 10
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 9 days ago",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 9
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "10/52 weeks with commits",
"points": 6.9,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 10
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "463 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 463
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 88,
"inputs": {
"releases_count": 26,
"latest_release_tag": "v2.1.3",
"releases_from_tags": true,
"days_since_latest_release": 9,
"mean_days_between_releases": 6.5
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "26 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 26
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 9 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 9
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~6.5 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 6.5
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "weak",
"name": "Community & Adoption",
"value": 45,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "weak",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 37,
"inputs": {
"forks": 12,
"stars": 54,
"watchers": 2,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "54 stars",
"points": 28,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 54
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "12 forks",
"points": 8.7,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 12
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "2 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 2
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 50,
"inputs": {
"packages": [
"@pi-unipi/unipi"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 1025
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "1,025 downloads/month across npm",
"points": 40.1,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 1025,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 53,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 22,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 3,
"top_contributor_share": 0.625
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 62% of commits",
"points": 8.4,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 62
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "3 contributors",
"points": 4.1,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 3
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 68,
"inputs": {
"merged_prs": 6,
"open_issues": 1,
"closed_issues": 15,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 0.938,
"closed_unmerged_prs": 3,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "94% of issues closed",
"points": 39.4,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 94
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "6/9 decided PRs merged",
"points": 20,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 6,
"decided": 9
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 2/29 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "weak",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 39,
"inputs": {
"followers": 0,
"owner_type": "User",
"is_verified": null,
"owner_login": "Neuron-Mr-White",
"public_repos": 17,
"account_age_days": 2901
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "0 followers of Neuron-Mr-White",
"points": 0,
"status": "missed",
"details": [
{
"code": "owner_followers",
"params": {
"count": 0,
"login": "Neuron-Mr-White"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "17 public repos, account ~7 yr old",
"points": 21.1,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 17
}
},
{
"code": "account_age_years",
"params": {
"years": 7
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"@pi-unipi/unipi"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 9
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 9 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 9
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "33 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 33
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 55,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "weak",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 48,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "0 out of 2 merged PRs checked by a CI test -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "weak",
"name": "Security",
"value": 47,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "weak",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 40,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 4
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "0 out of 2 merged PRs checked by a CI test -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 2/29 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 12 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 4",
"points": 2,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "GitHub workflow tokens follow principle of least privilege",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "12 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "good",
"name": "Dependency advisories",
"note": "Matched the npm:@pi-unipi/unipi@2.1.3 runtime dependency closure — what installing the published package pulls in — 259 packages. Reachability is not analyzed.",
"notes": [
{
"code": "advisories_scope_published",
"params": {
"package": "npm:@pi-unipi/unipi@2.1.3",
"assessed": 259
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 74,
"inputs": {
"source": "osv",
"advisories": 2,
"affected_packages": 2,
"assessed_packages": 259,
"unassessed_packages": 0,
"affected_by_severity": "high 1, moderate 1",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "2 affected: uuid 8.3.2 (high 7.5), diff 7.0.0 (moderate 5.3)",
"points": 8.8,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 2,
"packages": "uuid 8.3.2 (high 7.5), diff 7.0.0 (moderate 5.3)"
}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "2 advisory-carrying package(s) unaddressed past 90 days; oldest published 198 days ago",
"points": 30.3,
"status": "partial",
"details": [
{
"code": "advisories_stale",
"params": {
"days": 90,
"count": 2,
"oldest": 198
}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 259,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 3
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 56,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "weak",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.89,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "89 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 89,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"package-lock.json"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [
"mise.toml"
],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
"packages/cocoindex/tsconfig.json",
"packages/compactor/tests/tsconfig.json",
"packages/compactor/tsconfig.json",
"packages/footer/tsconfig.json",
"packages/input-shortcuts/tsconfig.json",
"packages/subagents/tsconfig.json",
"packages/utility/tsconfig.json",
"tsconfig.json"
],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "mise.toml",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "mise.toml"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "packages/cocoindex/tsconfig.json, packages/compactor/tests/tsconfig.json, packages/compactor/tsconfig.json, packages/footer/tsconfig.json, packages/input-shortcuts/tsconfig.json, packages/subagents/tsconfig.json, packages/utility/tsconfig.json, tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "packages/cocoindex/tsconfig.json, packages/compactor/tests/tsconfig.json, packages/compactor/tsconfig.json, packages/footer/tsconfig.json, packages/input-shortcuts/tsconfig.json, packages/subagents/tsconfig.json, packages/utility/tsconfig.json, tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 4",
"points": 4,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "exceptional",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 62951,
"source_files_sampled": 339,
"oversized_source_files": 1
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "1/339 source files over 60KB",
"points": 54.8,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 339,
"oversized": 1
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"example_dirs": [],
"has_mcp_signal": true,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 20,
"status": "met",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"top": [
"library"
],
"labels": [
"library"
],
"scores": {
"library": 6,
"mcp-server": 3
},
"primary": "library",
"evidence": [
{
"tier": "distribution",
"label": "library",
"source": "registry:npm",
"weight": 6
},
{
"tier": "structure",
"label": "mcp-server",
"source": "mcp_signal",
"weight": 3
}
],
"artifacts": [],
"confidence": "medium",
"host_extension": false,
"runs_as_process": false,
"consumed_by_code": true
},
"metrics_version": "2.5.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-31T23:55:19.802600Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/n/Neuron-Mr-White/UniPi.svg",
"full_name": "Neuron-Mr-White/UniPi",
"license_state": "standard",
"license_spdx": "MIT"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.5.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — npm.