Public recordModerate
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-26 14:49 UTC
Opus-Aether-AI / legion-core
The orchestration engine under the hood of an AI agent: models, harnesses, loops, self-improving agents. The stack, not another wrapper. Model-agnostic multi-model delegation, telemetry, and self-healing loops for Codex, Claude, Cursor & opencode.
Opus-Aether-AI/legion-core holds a health index of 60 out of 100, placing it in the Moderate band. It scores highest on Engineering Quality (76/100) and lowest on Community & Adoption (39/100). It was last updated 3 days ago. A single contributor accounts for most of its recent work.
60
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
60
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
Opus Aether AIOrganization
3 followers3 public repossince Jun 2025
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish | Tags |
|---|---|---|---|---|---|---|
| npm | @opus-aether-ai/legion-core | 0.18.0 | 2,981 | 17 | 6 days ago | ai-agentsagent-orchestrationorchestration-enginemulti-modelllm-orchestrationai-agent-stackagent-harnessagenticself-improving-agentsself-healingcodexclaudecursoropencodeopentelemetrymodel-agnosticlegion |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
70
Development activity
57Moderate
How it's scored
| 36/36 | Push recency — last push 3 days ago |
| 3.5/36 | Commit cadence — 5/52 weeks with commits |
| 17.4/18 | Commit volume — 86 commits in the last year |
| 0/10 | OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully |
Inputs used
| commits_last_year | 86 |
| human_commit_share | 0.605 |
| days_since_last_push | 3 |
| active_weeks_last_year | 5 |
Release discipline
90Excellent
How it's scored
| 27/27 | Ships releases — 34 releases published |
| 36/36 | Release recency — latest release 6 days ago |
| 27/27 | Release cadence — a release every ~1.6 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases. |
Inputs used
| releases_count | 34 |
| latest_release_tag | v0.18.0 |
| releases_from_tags | no |
| days_since_latest_release | 6 |
| mean_days_between_releases | 1.6 |
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
39
Popularity & adoption
1Critical
How it's scored
| 0/60 | Stars — 0 stars |
| 0/25 | Forks — 0 forks |
| 0/15 | Watchers — 0 watchers |
Inputs used
| forks | 0 |
| stars | 0 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
70Good
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (Apache-2.0) |
| 18/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | yes |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Ecosystem adoption (downloads)
58Moderate
How it's scored
| 46.3/80 | Monthly downloads — 2,981 downloads/month across npm |
| 0/20 | Registry dependents — not reported by this ecosystem |
Inputs used
| packages | @opus-aether-ai/legion-core |
| dependents | — |
| ecosystems | npm |
| total_downloads | — |
| monthly_downloads | 2,981 |
Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
59
Maintainer resilience (bus factor)
26Critical
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 3.8/22.5 | Commit distribution — top contributor authored 83% of commits |
| 2.7/13.5 | Contributor breadth — 2 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 6 contributing companies or organizations |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 2 |
| top_contributor_share | 0.83 |
How it's scored
| 46.8/46.8 | Issue resolution — 100% of issues closed |
| 35.2/38.3 | PR acceptance — 81/88 decided PRs merged |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 1/18 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 81 |
| open_issues | 0 |
| closed_issues | 9 |
| issue_closed_ratio | 1 |
| closed_unmerged_prs | 7 |
Ownership & stewardship
41At risk
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 4.3/25 | Owner reach — 3 followers of Opus-Aether-AI |
| 6.5/25 | Track record — 3 public repos, account ~1 yr old |
Inputs used
| followers | 3 |
| owner_type | Organization |
| is_verified | — |
| owner_login | Opus-Aether-AI |
| public_repos | 3 |
| account_age_days | 393 |
Package maintenance
100Excellent
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on npm |
| 35/35 | Publish recency — latest publish 6 days ago |
| 20/20 | Version history — 17 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | @opus-aether-ai/legion-core |
| ecosystems | npm |
| any_deprecated | no |
| min_days_since_publish | 6 |
Engineering Quality
Are baseline engineering and documentation practices in place?
76
Engineering practices
60Moderate
How it's scored
| 24/24 | CI workflows — 7 workflow(s) |
| 24/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 12/20 | OpenSSF Scorecard: CI-Tests — 18 out of 30 merged PRs checked by a CI test -- score normalized to 6 |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Documentation
100Excellent
How it's scored
| 30/30 | README |
| 25/25 | Documentation directory |
| 15/15 | Documentation / homepage site — https://legion.opusaether.com |
| 10/10 | Repository description |
| 10/10 | Topics — 16 topics |
| 10/10 | Wiki |
Inputs used
| topics | agent-orchestration, agentic, ai-agents, claude, codex, cursor, developer-tools, llm-orchestration, model-agnostic, multi-model, opencode, opentelemetry, orchestration-engine, self-healing, self-improving-agents, ai-agent-stack |
| has_wiki | yes |
| homepage | https://legion.opusaether.com |
| has_readme | yes |
| has_docs_dir | yes |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
51
Security posture
39At risk
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 3/7.5 | Branch-Protection — branch protection is not maximal on development and all release branches |
| 1.5/2.5 | CI-Tests — 18 out of 30 merged PRs checked by a CI test -- score normalized to 6 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 1/18 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 6 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 0/7.5 | Maintained — project was created within the last 90 days. Please review its contents carefully |
| 5/5 | Packaging — packaging workflow detected |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 2/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — Project has not signed or included provenance with any releases. |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 6.8/7.5 | Vulnerabilities — 1 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 18 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 0 |
| scorecard_aggregate | 3.9 |
Dependency advisories
100Excellent
How it's scored
| 35/35 | Direct dependencies free of known advisories — no direct dependency carries a known advisory |
| 25/25 | Indirect dependencies free of known advisories — no indirect dependency carries a known advisory |
| 0/40 | No advisories left outstanding — no advisory carries a publication date |
Inputs used
| source | osv |
| advisories | 0 |
| affected_packages | 0 |
| assessed_packages | 7 |
| unassessed_packages | 0 |
| affected_by_severity | none |
| direct_affected_packages | 0 |
Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:@opus-aether-ai/legion-core@0.18.0 runtime dependency closure — what installing the published package pulls in — 7 packages. Reachability is not analyzed.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
59
Agent context & guidance
85Excellent
How it's scored
| 45/45 | Agent instructions — AGENTS.md, CLAUDE.md |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 52 of 52 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 1 |
| agent_instruction_files | AGENTS.md, CLAUDE.md |
| agent_instruction_max_bytes | 1,528 |
How it's scored
| 0/18 | One-command bootstrap |
| 22/22 | Automated tests |
| 0/11 | Lint / format config |
| 0/11 | Static type checking |
| 10/10 | Reproducible environment — lockfile |
| 10/10 | Demonstrated agent practice — 18 of the last 86 commits agent-authored or agent-credited |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | uv.lock |
| has_dockerfile | no |
| typed_language | no |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | — |
| agent_commit_share | 0.209 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
Code legibility for models
52Moderate
How it's scored
| 0/45 | Type-checkable code — Python without a type-check config |
| 51.8/55 | Manageable file sizes — 3/52 source files over 60KB |
Inputs used
| primary_language | Python |
| largest_source_bytes | 117,207 |
| source_files_sampled | 52 |
| oversized_source_files | 3 |
Key facts
0GitHub stars
2contributors
86commits, last 12 months
3days since last push
34releases
1bus factor
0open issues
npm, PyPIpackage ecosystems
Data collection warnings
- Could not fetch pypi package 'legion-core-dev' from its registry
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
OpenSSF Scorecard 3.9 / 10
3.9aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 4 | Branch-Protection | branch protection is not maximal on development and all release branches |
| 6 | CI-Tests | 18 out of 30 merged PRs checked by a CI test -- score normalized to 6 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 1/18 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 6 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 0 | Maintained | project was created within the last 90 days. Please review its contents carefully |
| 10 | Packaging | packaging workflow detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 4 | Security-Policy | security policy file detected |
| 0 | Signed-Releases | Project has not signed or included provenance with any releases. |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 9 | Vulnerabilities | 1 existing vulnerabilities detected |
All dependencies not collected
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Dependency advisories 0
Installing npm:@opus-aether-ai/legion-core@0.18.0 pulls in 7 packages, direct and transitive: 0 carry known advisories, of which 0 are direct dependencies.
No known advisories affect the assessed dependencies.
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"agent-orchestration",
"agentic",
"ai-agents",
"claude",
"codex",
"cursor",
"developer-tools",
"llm-orchestration",
"model-agnostic",
"multi-model",
"opencode",
"opentelemetry",
"orchestration-engine",
"self-healing",
"self-improving-agents",
"ai-agent-stack"
],
"is_fork": false,
"size_kb": 1365,
"has_wiki": true,
"homepage": "https://legion.opusaether.com",
"languages": {
"Awk": 2410,
"HTML": 15219,
"Shell": 598369,
"Python": 751171,
"JavaScript": 7710,
"TypeScript": 34266
},
"pushed_at": "2026-07-22T16:42:54Z",
"created_at": "2026-06-21T14:49:42Z",
"owner_type": "Organization",
"updated_at": "2026-07-20T10:29:39Z",
"description": "The orchestration engine under the hood of an AI agent: models, harnesses, loops, self-improving agents. The stack, not another wrapper. Model-agnostic multi-model delegation, telemetry, and self-healing loops for Codex, Claude, Cursor & opencode.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Python",
"significant_languages": [
"Python",
"Shell"
]
},
"owner": {
"blog": null,
"name": "Opus Aether AI",
"type": "Organization",
"login": "Opus-Aether-AI",
"company": null,
"location": null,
"followers": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/218289460?v=4",
"created_at": "2025-06-27T18:15:07Z",
"is_verified": null,
"public_repos": 3,
"account_age_days": 393
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.18.0",
"kind": "minor",
"published_at": "2026-07-20T10:29:44Z"
},
{
"tag": "v0.17.1",
"kind": "patch",
"published_at": "2026-07-19T16:24:50Z"
},
{
"tag": "v0.17.0",
"kind": "minor",
"published_at": "2026-07-19T09:16:01Z"
},
{
"tag": "v0.16.0",
"kind": "minor",
"published_at": "2026-07-18T19:18:54Z"
},
{
"tag": "v0.15.0",
"kind": "minor",
"published_at": "2026-07-10T18:27:51Z"
},
{
"tag": "v0.14.1",
"kind": "patch",
"published_at": "2026-07-08T10:47:24Z"
},
{
"tag": "v0.14.0",
"kind": "minor",
"published_at": "2026-07-08T07:26:37Z"
},
{
"tag": "v0.13.1",
"kind": "patch",
"published_at": "2026-07-07T08:07:32Z"
},
{
"tag": "v0.13.0",
"kind": "minor",
"published_at": "2026-07-05T23:11:53Z"
},
{
"tag": "v0.12.0",
"kind": "minor",
"published_at": "2026-07-05T21:47:28Z"
},
{
"tag": "v0.11.1",
"kind": "patch",
"published_at": "2026-07-05T20:14:18Z"
},
{
"tag": "v0.11.0",
"kind": "minor",
"published_at": "2026-07-05T19:28:40Z"
},
{
"tag": "v0.10.2",
"kind": "patch",
"published_at": "2026-07-02T15:50:22Z"
},
{
"tag": "v0.10.1",
"kind": "patch",
"published_at": "2026-07-02T15:37:38Z"
},
{
"tag": "v0.10.0",
"kind": "minor",
"published_at": "2026-07-02T15:21:46Z"
},
{
"tag": "v0.9.2",
"kind": "patch",
"published_at": "2026-06-27T15:25:48Z"
},
{
"tag": "v0.9.1",
"kind": "patch",
"published_at": "2026-06-26T22:57:15Z"
},
{
"tag": "v0.9.0",
"kind": "minor",
"published_at": "2026-06-26T22:38:40Z"
},
{
"tag": "v0.8.2",
"kind": "patch",
"published_at": "2026-06-26T21:52:24Z"
},
{
"tag": "v0.8.1",
"kind": "patch",
"published_at": "2026-06-26T21:09:53Z"
},
{
"tag": "v0.8.0",
"kind": "minor",
"published_at": "2026-06-26T19:40:55Z"
},
{
"tag": "v0.7.3",
"kind": "patch",
"published_at": "2026-06-24T19:08:45Z"
},
{
"tag": "v0.7.2",
"kind": "patch",
"published_at": "2026-06-23T18:55:34Z"
},
{
"tag": "v0.7.1",
"kind": "patch",
"published_at": "2026-06-23T15:01:37Z"
},
{
"tag": "v0.7.0",
"kind": "minor",
"published_at": "2026-06-22T17:30:27Z"
},
{
"tag": "v0.6.0",
"kind": "minor",
"published_at": "2026-06-22T08:39:46Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2026-06-22T05:59:44Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2026-06-22T05:58:27Z"
},
{
"tag": "v0.3.1",
"kind": "patch",
"published_at": "2026-06-22T05:54:46Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2026-06-21T21:09:28Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2026-06-21T19:02:59Z"
},
{
"tag": "v0.1.3",
"kind": "patch",
"published_at": "2026-06-21T19:01:25Z"
},
{
"tag": "v0.1.2",
"kind": "patch",
"published_at": "2026-06-21T16:17:21Z"
},
{
"tag": "v0.1.1",
"kind": "patch",
"published_at": "2026-06-21T16:16:27Z"
}
],
"recent_commits": [
{
"oid": "a95a90885094c09be479c15e19abf8b9cec0c983",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.18.0 (#97)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-20T10:29:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9e9ddce6dfb22634a1937cf9f9c44768a1d694bb",
"body": "* feat(orchestrate): enforce explicit ADW lifecycle\n\n* fix(bench): align ADW routing contracts\n\n* docs(router): clarify independent final review\n\n* fix(bench): exercise current review lifecycle",
"is_bot": false,
"headline": "feat(orchestrate): enforce explicit ADW lifecycle (#96)",
"author_name": "Ithihas Madala",
"author_login": "ithihasmadala",
"committed_at": "2026-07-20T10:21:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b9158d9f61e72fabf20fc343d5b299e1da908e74",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.17.1 (#95)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-19T16:24:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a219049466a308dbf4013b45682a1ed625c35411",
"body": "…(#94)\n\n* fix(install): read plugin list after clone sync + auto-wire opencode\n\nTwo gaps surfaced upgrading a live install from 0.16.0 → 0.17.0:\n\n1. On `install.sh all`, the plugin list was computed by `list_all`\n (→ `fetch_plugins`, which reads `$SOURCE_CLONE/.claude-plugin/marketplace.json`)\n \n[…]\ne Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01SyGyfi1G6FnvFBsdAVuUVN\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(install): read plugin list after clone sync + auto-wire opencode …",
"author_name": "Ithihas Madala",
"author_login": "ithihasmadala",
"committed_at": "2026-07-19T16:07:20Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7e197aca846cb4105c58366718ad976e75b0bbac",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.17.0 (#92)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-19T09:15:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d9619affb8ae80a64a23a56d69f5727a8899f6b6",
"body": "…ting, storage fixes (#91)\n\nCut the release for the work merged in #90, which was squash-merged with a\nnon-conventional subject (\"Make legion-core truly harness-generic …\") and so\nwas not picked up by release-please.\n\nContents of this release:\n- Symmetric primaries: any harness (claude/codex/cursor/\n[…]\nes: bench .pyc explosion, run/worktree/registry pruning.\n\n\nClaude-Session: https://claude.ai/code/session_01SyGyfi1G6FnvFBsdAVuUVN\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: harness-generic core — opencode/hermes, frontend Opus/Fable rou…",
"author_name": "Ithihas Madala",
"author_login": "ithihasmadala",
"committed_at": "2026-07-19T09:14:55Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6ea6ae51207892782504de522578bd3b61d1baf6",
"body": "…e/hermes + storage fixes (#90)\n\n* fix(storage): stop bench .pyc explosion, prune runs, close worktree leaks\n\nWS6 storage-hardening from a leak/growth audit of legion-core runtime state.\n\n- bench: set PYTHONDONTWRITEBYTECODE=1 in the three case-runner env dicts.\n Each case points HOME into its own \n[…]\ne Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01SyGyfi1G6FnvFBsdAVuUVN\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Make legion-core truly harness-generic: symmetric primaries + opencod…",
"author_name": "Ithihas Madala",
"author_login": "ithihasmadala",
"committed_at": "2026-07-19T08:53:06Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "af016f3a206f37ea912d22bc03d8b911cb18ec94",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.16.0 (#89)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-18T19:18:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "87801c404d43ccf7d5a080533b472e1b48b4064b",
"body": "* feat: harden legion-run self-learning\n\n* test: loosen stable bench rollup count\n\n---------\n\nCo-authored-by: Shashank M <shaw@shashanks-macbook-pro.tail8382e8.ts.net>",
"is_bot": false,
"headline": "feat: harden legion-run self-learning (#88)",
"author_name": "Shashank Madhusudhan",
"author_login": "shashank-m",
"committed_at": "2026-07-14T11:07:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9bc85f1cc9b6b734f3ca89360502b5397e5d6f68",
"body": "restructure models.toml as named model ROLES (categories) that route\npolicy references by name, and grow the list so there's a sensible role\nto pick per provider/tier:\n\n claude: orchestrator / default / flagship / sonnet / fast\n codex: workhorse / review / default\n cursor: default / composer ·\n[…]\nw\nresolves models from config so it survives future default swaps.\n\nverified: pytest 202, bats 319, legion-doctor 0 fail / 0 warn.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(router): bigger, generic model-role catalog (#87)",
"author_name": "Ithihas Madala",
"author_login": "ithihasmadala",
"committed_at": "2026-07-11T06:45:39Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "090720d21b2933835d97c0f71b2509d72075c720",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.15.0 (#85)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-10T18:27:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f57269427ba8790b3d375e695b3a14a5cfdf90ee",
"body": "* feat: add legion-run direct benchmark\n\n* feat: add live legion-run benchmark\n\n* chore: rename live benchmark to codex live\n\n* docs: explain validation-led benchmark learning\n\n---------\n\nCo-authored-by: Shashank M <shaw@shashanks-macbook-pro.tail8382e8.ts.net>",
"is_bot": false,
"headline": "feat: add legion-run direct benchmark (#86)",
"author_name": "Shashank Madhusudhan",
"author_login": "shashank-m",
"committed_at": "2026-07-09T10:32:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cd5200dfefcf35fbea8b5ca2fe45ce055da91031",
"body": "…ermetic router tests (#84)\n\n* docs(seo): align to \"the AI-agent stack under the hood, not another wrapper\"\n\nLead the README tagline with the \"models · harnesses · loops · self-improving\nagents / under the hood, not a wrapper\" framing and add the pillars paragraph;\nsharpen the npm package descriptio\n[…]\n two invocations so they\ntest what they mean to, regardless of environment.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(seo): align messaging to \"the AI-agent stack under the hood\" + h…",
"author_name": "Ithihas Madala",
"author_login": "ithihasmadala",
"committed_at": "2026-07-08T11:41:12Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "5c61b5a1c2f34963bbab9c85bf511cc0de2d0a2b",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.14.1 (#83)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-08T10:47:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fac6cf0de7946e49c9a83875842e5e0c17e15e25",
"body": "legion-delegate review/run/resume failed when invoked with no tty on\nstdin/stdout (backgrounded, nohup, piped, or under `script -q`), printing\n`BrokenPipeError: [Errno 32] Broken pipe` and exiting early — while leaving\nthe codex child orphaned (still billing, its stream.jsonl still growing).\n\nTwo ro\n[…]\nan; bats tests/legion-router.bats\n55/55; legion-doctor 0 fail / 0 warn; and non-interactive smokes no longer\nleak BrokenPipeError.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: make legion-delegate robust under non-interactive stdio (#82)",
"author_name": "Ithihas Madala",
"author_login": "ithihasmadala",
"committed_at": "2026-07-08T10:46:32Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d5c8e7044ef0d14d5997e09f46d3811430c0b40d",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.14.0 (#81)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-08T07:26:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "48e8c76f2a3a714eba614b2b4cb5c2d21be4e249",
"body": "Co-authored-by: Shashank M <shaw@shashanks-macbook-pro.tail8382e8.ts.net>",
"is_bot": false,
"headline": "feat: support multiple legion-run plan files (#80)",
"author_name": "Shashank Madhusudhan",
"author_login": "shashank-m",
"committed_at": "2026-07-08T07:25:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "94fd3bf471cbc0fe171fe771be54cdd5b70d3991",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.13.1 (#78)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-07T08:07:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "22225f550b5f4aaa5bda0a78725ae4dc630d1b0a",
"body": "Co-authored-by: Shashank M <shaw@shashanks-macbook-pro.tail8382e8.ts.net>",
"is_bot": false,
"headline": "fix: harden legion run orchestration (#79)",
"author_name": "Shashank Madhusudhan",
"author_login": "shashank-m",
"committed_at": "2026-07-06T06:52:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cbdb6bb2f25300023d7a63eed5af52b9f829955d",
"body": "Co-authored-by: Shashank M <shaw@shashanks-macbook-pro.tail8382e8.ts.net>",
"is_bot": false,
"headline": "docs: explain legion usage modes (#77)",
"author_name": "Shashank Madhusudhan",
"author_login": "shashank-m",
"committed_at": "2026-07-06T02:41:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3a898550c38af1e1b9fb81a32527b08559be187e",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.13.0 (#76)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-05T23:11:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "605aad3d2ba0e0227e9eca1179082fea896cf377",
"body": "Co-authored-by: Shashank M <shaw@shashanks-macbook-pro.tail8382e8.ts.net>",
"is_bot": false,
"headline": "feat: generate domain plugin TDD slices from briefs (#75)",
"author_name": "Shashank Madhusudhan",
"author_login": "shashank-m",
"committed_at": "2026-07-05T22:51:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "327a952c602917ed7af6ac0c8683f8eb5bc05713",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.12.0 (#73)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-05T21:47:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "14ca1733e29a612751494780d02c199728aced73",
"body": "* feat: enforce domain plugin pipeline runner\n\n* docs: show how to create domain plugins\n\n* test: cover installed-style domain plugin\n\n* test: harden legion-run JSON parsing\n\n* test: select legion-run JSON payload in CI\n\n---------\n\nCo-authored-by: Shashank M <shaw@shashanks-macbook-pro.tail8382e8.ts.net>",
"is_bot": false,
"headline": "feat: enforce domain plugin pipeline runner (#72)",
"author_name": "Shashank Madhusudhan",
"author_login": "shashank-m",
"committed_at": "2026-07-05T21:45:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf72f49ae8fb8a5d098b87fa30baba82fc8c6ed4",
"body": "* fix: make legion demo gate reliable\n\n* test: lock python test environment\n\n* test: add full pipeline legion benchmark\n\n* docs: expand legion demo pipeline report\n\n* docs: add new app repo setup\n\n* feat: add zero-config legion state\n\n* fix: keep benchmark state paths coherent\n\n* test: extend live fieldops benchmark timeout\n\n* fix: resolve model refs in optimize routing\n\n---------\n\nCo-authored-by: Shashank M <shaw@shashanks-macbook-pro.tail8382e8.ts.net>",
"is_bot": false,
"headline": "[codex] make Legion demo gate reliable (#66)",
"author_name": "Shashank Madhusudhan",
"author_login": "shashank-m",
"committed_at": "2026-07-05T20:31:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ea4e3cf2d4f9e2c42991ef337f18c129f8c1a955",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.11.1 (#71)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-05T20:14:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bbda644bdf53e12daeafd246efa3ce7a7f61033f",
"body": "…F (#68)\n\n* docs(enterprise): flesh out the offering for VPC, SDLC gates, and AWS WAF\n\nRewrite ENTERPRISE.md into a real enterprise offering, mapped to what a\nstrict-VPC, Sonar-gated services CTO asked for: no Legion cloud (code stays in\nyour env), agent PRs pass the same quality gates as human code\n[…]\ndocs(enterprise): note harness-agnostic (Claude Code/Codex/Cursor/opencode)\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(enterprise): enterprise offering for VPC, SDLC gates, and AWS WA…",
"author_name": "Ithihas Madala",
"author_login": "ithihasmadala",
"committed_at": "2026-07-05T20:13:35Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "857ffe3ee57da2590d5a6df353502cf0daa85f49",
"body": "* fix(router): centralize model defaults\n\n* fix(router): keep model refs portable",
"is_bot": false,
"headline": "fix(router): centralize model defaults (#70)",
"author_name": "Ithihas Madala",
"author_login": "ithihasmadala",
"committed_at": "2026-07-05T20:13:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a6ad189760aeb9a5ead224d99410534b41228266",
"body": "* chore(install): install from the latest release, not main HEAD\n\n- install.sh resolves the latest release tag (LEGION_REF override; falls back to\n main if none/offline) and pins the raw base + source clone to it — so a bad\n `main` commit can no longer break installs.\n- README one-liner serves the\n[…]\ned mode ran — cascading the bats bin-path tests. Fall back to\nmain cleanly.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(install): install from the latest release, not main HEAD (#67)",
"author_name": "Ithihas Madala",
"author_login": "ithihasmadala",
"committed_at": "2026-07-05T20:10:34Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f453250a7ed977f282f0ab2d9bb1366a8720c5af",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.11.0 (#69)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-05T19:28:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "71efcca87c2e7072933e2217ff5b9bbea54bae84",
"body": null,
"is_bot": false,
"headline": "feat(code-intel): add optional diagnostic gate (#65)",
"author_name": "Ithihas Madala",
"author_login": "ithihasmadala",
"committed_at": "2026-07-05T19:27:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5efd432d1d3c4a15ed83c89311eb61be7e503a54",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.10.2 (#63)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-02T15:50:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c84daba0588b52dc12abb2d63506dd2d31d75fd1",
"body": "* fix(observability): pin best-model live metering\n\n* fix(ci): avoid secret scan false positive",
"is_bot": false,
"headline": "fix(observability): pin best-model live metering (#62)",
"author_name": "Ithihas Madala",
"author_login": "ithihasmadala",
"committed_at": "2026-07-02T15:49:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fd20efdcbb7ac62beb45b58e30824aee7f1fe57f",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.10.1 (#61)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-02T15:37:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cd1cfa4a318f8407774db589875d1b199fdc2fac",
"body": "… (#60)\n\n- ENTERPRISE.md: enterprise support + pilot offer, linked from README\n- .gitignore: remove awspex block inherited from the parent marketplace\n (legion-core ships no awspex tool)",
"is_bot": false,
"headline": "docs(enterprise): add ENTERPRISE.md; drop awspex ignore bleed-through…",
"author_name": "Ithihas Madala",
"author_login": "ithihasmadala",
"committed_at": "2026-07-02T15:30:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e42c0c6e657c113b601b3351b44528db4476efb9",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.10.0 (#59)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-02T15:21:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d92a2b0fc45fe119b6758a9468721cf7a9ec8dc1",
"body": "* feat(observability): add heldout live bench lane\n\n* fix(observability): preserve auth for live bench adapters\n\n* docs(observability): record heldout live bench results\n\n* docs(observability): update heldout claude result\n\n* feat(observability): emit real cost/token spans from direct bench adapters\n[…]\ne importer +\n self-filter, with the full control documented for local runs\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(observability): add heldout live bench lane (#54)",
"author_name": "Ithihas Madala",
"author_login": "ithihasmadala",
"committed_at": "2026-07-02T15:17:20Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "1aeafb7775fe3ab8bd60974953375c77408885d3",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.9.2 (#58)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-27T15:25:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0b6a8e9850c9b2c058ad32f0f36e60ca71105761",
"body": "- the npm-downloads badge rendered 'package not found or too new' (npm/dm has\n no stats for the new scoped package) and the badges sat left-aligned tight\n under the centered banner. Replace with a centered, spaced badge row of\n working badges: npm version, latest release, CI status, license, and \n[…]\nthe redundant 'bash -s all' from the curl install line (install.sh\n already defaults MODE to all), so the pipe is no longer pushed off-screen.\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(readme): fix header badge row and shorten install one-liner (#57)",
"author_name": "Ithihas Madala",
"author_login": "ithihasmadala",
"committed_at": "2026-06-27T15:23:04Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "01abc3ab4a7d3d3d7aad8becc243edda4b9a37dc",
"body": null,
"is_bot": false,
"headline": "ci(release): guard release pr auto-merge parsing (#56)",
"author_name": "Ithihas Madala",
"author_login": "ithihasmadala",
"committed_at": "2026-06-27T13:17:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c83fdefed22ca48a12656e0f03efb80c90cca051",
"body": null,
"is_bot": false,
"headline": "ci(release): align published package automation (#55)",
"author_name": "Ithihas Madala",
"author_login": "ithihasmadala",
"committed_at": "2026-06-27T13:12:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e3cf37b6e63ef856ab09c9639530cb519d254e79",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.9.1 (#53)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-26T22:57:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1d0c94df8dcf0f6c1f6cdbe552118f9dd5c5b3e6",
"body": null,
"is_bot": false,
"headline": "fix(release): publish legion through opus aether scope (#52)",
"author_name": "Ithihas Madala",
"author_login": "ithihasmadala",
"committed_at": "2026-06-26T22:55:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "119aa84f6026356399ab2213b1fc5d930e5c281e",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.9.0 (#51)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-26T22:38:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b2c7c324957a55e695d3936f5d71a035aadfe97",
"body": "* feat(observability): add legion-bench offline scorecard\n\n* feat(observability): add fixture-backed bench tasks\n\n* feat(observability): report learning lift in bench\n\n* feat(observability): add stable bench suite\n\n* feat(observability): add corpus bench runner\n\n* feat(router): generalize issue inta\n[…]\nlity): add real PR benchmark contracts\n\n* docs(observability): record PR benchmark results\n\n* docs(observability): refresh merged benchmark report\n\n* docs(observability): clarify benchmark merge scope",
"is_bot": false,
"headline": "feat(observability): add legion-bench workbench and stable gates (#47)",
"author_name": "Ithihas Madala",
"author_login": "ithihasmadala",
"committed_at": "2026-06-26T22:36:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3ce4eee173dc82906534ef940d8eaefbe9aa9554",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.8.2 (#50)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-26T21:52:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "29fa9fe548bc09705ebce7b8698423fd6aabe3b0",
"body": "* fix(intake): make AFK lane Legion-generic\n\n* fix(intake): avoid workflow expression fallback\n\n* fix(intake): use runner temp in step env",
"is_bot": false,
"headline": "fix(intake): make AFK lane Legion-generic (#49)",
"author_name": "Ithihas Madala",
"author_login": "ithihasmadala",
"committed_at": "2026-06-26T21:45:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b5c8eafa42dabb513f687a79aafcb65780b939b6",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.8.1 (#48)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-26T21:09:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bdbe293082c64fab07793a42b63fb2b02de02958",
"body": "* docs(identity): improve Legion Core banner\n\n* docs(identity): refine Legion Core banner\n\n* docs(identity): add Higgsfield Legion banner\n\n* docs(identity): use plain Legion banner\n\n* docs(identity): remove old Legion banner svg\n\n* docs(readme): hide banner fallback text",
"is_bot": false,
"headline": "docs(identity): improve Legion Core banner (#46)",
"author_name": "Ithihas Madala",
"author_login": "ithihasmadala",
"committed_at": "2026-06-26T20:54:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f35d6fc1d217b4e5282e41b9b7e76b9e28d9e53f",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.8.0 (#45)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-26T19:40:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "759e054c1819fe8967e43f0d09c16b019f54d1ad",
"body": null,
"is_bot": false,
"headline": "feat(observability): auto-record session feedback (#44)",
"author_name": "Ithihas Madala",
"author_login": "ithihasmadala",
"committed_at": "2026-06-26T19:30:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f56d8fd6ac2965bda88df639a341afd2a02236aa",
"body": "* chore(oss): add credits and public hardening\n\n* docs(credits): link harness bench workbench\n\n* docs(credits): correct harness bench attribution",
"is_bot": false,
"headline": "chore(oss): add credits and public hardening (#43)",
"author_name": "Ithihas Madala",
"author_login": "ithihasmadala",
"committed_at": "2026-06-26T18:59:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c0811b9c4cc7fb9ae168702dc47606538562c359",
"body": null,
"is_bot": false,
"headline": "chore(oss): prepare public release (#42)",
"author_name": "Ithihas Madala",
"author_login": "ithihasmadala",
"committed_at": "2026-06-25T08:37:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4743e965c649df764fa9621febc716cc6feb4bb0",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.7.3 (#41)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-24T19:08:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b08cee029ec732e42e6f20c9efb2c0184dc6b7c6",
"body": "* fix(router): emit opus baseline spans\n\n* fix(orchestrate): resolve fanout commands from path\n\n* feat(router): audit copied sandbox secrets\n\n* fix(router): stabilize streaming proxy",
"is_bot": false,
"headline": "fix: resolve open legion-core issues (#40)",
"author_name": "Ithihas Madala",
"author_login": "ithihasmadala",
"committed_at": "2026-06-24T19:07:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f12b1c4acc7f47f01352ee7e170258a4e3708e9",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.7.2 (#35)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-23T18:55:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "97e9d59e9bfb71992a1b2dbc2c849ecd7e06984f",
"body": null,
"is_bot": false,
"headline": "refactor(observability): load dynamic context profile groups (#34)",
"author_name": "Ithihas Madala",
"author_login": "ithihasmadala",
"committed_at": "2026-06-23T18:53:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "23abde8dc9b07163fe7eabbe6615dc36ceb91fe1",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.7.1 (#33)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-23T15:01:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c8aee610505d0060fa36e7999a1c5abbcfb1f1f0",
"body": "Merge PR #31 after green CI. Includes router forced-proxy guard, MCP timeout/setup repairs, context profile trimming, and session-learn guardrails.",
"is_bot": false,
"headline": "fix(router): guard forced proxy configuration",
"author_name": "Ithihas Madala",
"author_login": "ithihasmadala",
"committed_at": "2026-06-23T13:13:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a596135029b085a9e3c01d1b1344401d798b4714",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.7.0 (#30)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-22T17:30:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4372be075f1f4feaa96b92b97f92976fb97bab9a",
"body": "…ance (#29)\n\n`legion-share` could only report/recommend; nothing turned an off-target share\ninto an actionable signal a harness hook could act on. Add a `gate` subcommand:\na one-line directive plus exit code (1 = under target -> delegate the next\neligible slice to codex; 0 = on balance / no data / u\n[…]\nnce hook\nin legion-code consumes it to nudge delegation and auto-logs Opus self-work so\nthe share is measurable in the first place.\n\nCloses #25\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(observability): add `legion-share gate` to enforce the codex bal…",
"author_name": "Ithihas Madala",
"author_login": "ithihasmadala",
"committed_at": "2026-06-22T17:26:49Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "8a89dd1dca15504d5daed85f497a6d874afc2448",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.6.0 (#24)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-22T08:39:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a20a2783cbb94006673df8fc6670d2cc98b8089",
"body": "* feat(router): sandbox/worktree lifecycle — setup + teardown\n\n* fix(router): lifecycle review fixes (PID/order/copy-anchor/path-guard)",
"is_bot": false,
"headline": "feat(router): sandbox/worktree lifecycle — setup + teardown (#23)",
"author_name": "Ithihas Madala",
"author_login": "ithihasmadala",
"committed_at": "2026-06-22T08:35:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4950cf02a8960318618e280b5049d79d82eb8d83",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.5.0 (#22)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-22T05:59:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bca383ebfa87cba16400175de10b6037a8a26bcd",
"body": "…) (#19)\n\n* feat(intake): GitHub issue/label AFK agent intake lane (P10 loop edge)\n\nCloses the missing intake edge: label an issue agent:explore or agent:implement\nand an AFK agent picks it off the queue.\n- legion-intake.sh: issue -> legion-delegate (read-only explore posts an\n assessment comment; \n[…]\n fire in CI.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n* fix(intake): scrub agent env + retry-safe branch per review\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(intake): GitHub issue/label AFK agent intake lane (P10 loop edge…",
"author_name": "Ithihas Madala",
"author_login": "ithihasmadala",
"committed_at": "2026-06-22T05:58:52Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "bda583ecd9d2682722ede75a5be75558390f9c68",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.4.0 (#21)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-22T05:58:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1cb7b6de30f889f5509d878a329e6cc8477eb7a1",
"body": "…P16) (#18)\n\n* feat(router): optional container/VM sandbox via @ai-hero/sandcastle (P16)\n\nAdds true OS/VM isolation as an OPT-IN backend for legion-delegate, without\nbloating the default path:\n- legion-delegate --sandbox docker|podman|vercel routes through a thin\n sandcastle-run.mjs bridge (uses sa\n[…]\n-budget-tokens). null usage is flagged 'unmeasured' rather than silently 0.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(router): optional container/VM sandbox via @ai-hero/sandcastle (…",
"author_name": "Ithihas Madala",
"author_login": "ithihasmadala",
"committed_at": "2026-06-22T05:57:16Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ee1d90efe685bb9adaa6717063b5017944ab9a8a",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.3.1 (#20)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-22T05:54:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "41f96fac780a44821a94fa40121b3f274d57f03f",
"body": "* fix: resolve legion-core issues #1, #3, #7\n\n- #1 install.sh: drop stale opus/vendored profile references from help/usage\n (dead code already removed; trim docs + guard in tests).\n- #3 legion-router: portable credential storage — macOS security (default),\n Linux secret-tool, then 0600 file fallba\n[…]\nuites green (router, marketplace-root 3/3, codex+cursor 21, self-learn 20).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: resolve open legion-core issues (#1 #2 #3 #7) (#17)",
"author_name": "Ithihas Madala",
"author_login": "ithihasmadala",
"committed_at": "2026-06-22T05:52:55Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "8293ec22c91d84444f3d615546dcd973e03dfac2",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.3.0 (#16)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-21T21:09:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8144551e4ca689633943ee6ef74ab13d2cdcf6b6",
"body": "* feat(core): skill taxonomy + AGENTS/CONTEXT + opt-in cron (anti-bloat)\n\n- Tag first-party skills kind: procedure|ability; disable-model-invocation on\n legion-setup; legion-orchestrate kept invocable (cross-harness entrypoint);\n tighten legion-observability description.\n- validate.yml: enforce ki\n[…]\n.json + plugin.json in sync, per CLAUDE.md. Addresses GPT-5.5\nfinal-review.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: skill taxonomy + AGENTS/CONTEXT + opt-in cron (anti-bloat) (#15)",
"author_name": "Ithihas Madala",
"author_login": "ithihasmadala",
"committed_at": "2026-06-21T21:08:41Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "15e5c82c32f6e6b9a996e58a3333b69bf7f03714",
"body": "…pendency (#14)\n\nThe package is published and consumable; the only thing the planned PAT bought\nwas working around GITHUB_TOKEN not triggering events. The publish half doesn't\nneed a token at all — fold it into the release-please workflow.\n\n- release-please.yml: the release-please step now has `id: \n[…]\nlease raised by\n release-please's GITHUB_TOKEN never fires it.\n\nNet: releases now auto-publish the npm package with zero secrets to provision.\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: auto-publish on release_created, drop the RELEASE_PLEASE_TOKEN de…",
"author_name": "Ithihas Madala",
"author_login": "ithihasmadala",
"committed_at": "2026-06-21T19:16:08Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6ad044a363ad85432dd9b33bdc34ed8060190492",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.2.0 (#13)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-21T19:02:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c9b4581e7ce430422ea96d281e8be6c598b3272c",
"body": "…(#11)\n\nAdds an additive distribution channel so moneyball and other downstream agents\ncan pin a versioned copy of the engine (24 bins + scripts + 5 plugins) with\n`npm install @opus-aether-ai/legion-core`, instead of cloning. The Claude Code\nmarketplace and source-clone paths are unchanged.\n\n- packa\n[…]\nEADME: \"Install as a package\" section.\n\n`npm pack --dry-run`: 95 files, 161.7 kB; all bin paths resolve; tests/docs/\nnode_modules/pyc excluded.\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(package): publish legion-core to GitHub Packages (npm, private) …",
"author_name": "Ithihas Madala",
"author_login": "ithihasmadala",
"committed_at": "2026-06-21T19:02:04Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f0394eea181d3b35375904321c76c997872a1c5d",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.1.3 (#12)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-21T19:01:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bff188fb02cc2a310e1e35d9215d93a909983b5b",
"body": "…ustness (#10)\n\nAdversarial review of the legion-core/legion-code split surfaced one HIGH\nregression in the auto-heal gate plus a cluster of robustness gaps. Fixes all,\nwith coverage.\n\nH1 — heal-gate deletion bypass: legion-doctor's costs/telemetry-schema checks\nnow WARN (exit 0) when the artifact i\n[…]\nse PRs trigger the required CI checks; documented the secret to provision.\n\nTests: 231 bats + 137 pytest pass; shellcheck clean at CI severity.\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(engine): close heal-gate bypass, finish rename, portability + rob…",
"author_name": "Ithihas Madala",
"author_login": "ithihasmadala",
"committed_at": "2026-06-21T18:55:30Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "db3bf3865b7807969a6bb763cd5cffb4dae004d3",
"body": "…xistence (#9)\n\n* chore: distinct marketplace identity so legion-core can coexist as a dependency\n\nSlug legion→legion-core, clone ~/.agents/sources/legion→legion-core, cron tag\nlegion-refresh→legion-core-refresh, and real repo default Opus-Aether-AI/legion-core\n(env-overridable via LEGION_REPO/LEGIO\n[…]\nne\nchecked in legion-core), and only FAIL when present-but-invalid. Lets the engine's\ndoctor/self-learn run cleanly against a consumer repo. bats 230/2, pytest 137.\n\n---------\n\nCo-authored-by: t <t@t>",
"is_bot": false,
"headline": "chore: distinct marketplace identity (slug/clone legion-core) for coe…",
"author_name": "Ithihas Madala",
"author_login": "ithihasmadala",
"committed_at": "2026-06-21T17:04:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "75a7c9e5da4d11058cefa263481b7bac33de870c",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.1.2 (#8)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-21T16:17:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a3af601beabdee01b21b3b4e1d66c96c272070b9",
"body": "The costs, telemetry-schema, and bridges checks hardcoded top-level sibling\npaths ($LEGION_ROOT/legion-router/config/...). When legion-core is vendored\ninto a downstream marketplace the engine lives under vendored/legion-*, so those\nchecks falsely failed. Locate each file by glob under LEGION_ROOT so the doctor\nworks both standalone and vendored.\n\nCo-authored-by: t <t@t>",
"is_bot": false,
"headline": "fix(doctor): locate costs/telemetry/bridge files vendor-aware (#6)",
"author_name": "Ithihas Madala",
"author_login": "ithihasmadala",
"committed_at": "2026-06-21T16:16:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "edf6584dc1e934a44ba5a571d052e8fd5c2567c7",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release 0.1.1 (#5)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-21T16:16:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f5c165f5a2036340e6fe671db64aa0f2bffbe52",
"body": "* chore(governance): add CODEOWNERS + release-please, reset version to 0.1.0\n\n- .github/CODEOWNERS → @ithihasmadala\n- release-please (simple release-type; bumps marketplace.json $.version, tags, GitHub Release)\n- reset marketplace version 0.49.0 (inherited) → 0.1.0 for a clean base history\n\n* docs: sync-back model — legion-code vendors legion-core (one source of truth)\n\n---------\n\nCo-authored-by: t <t@t>",
"is_bot": false,
"headline": "chore(governance): CODEOWNERS + release-please + version reset (#4)",
"author_name": "Ithihas Madala",
"author_login": "ithihasmadala",
"committed_at": "2026-06-21T15:39:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "25950bfe64b6fbc0546a5c01316ce8bbd5778939",
"body": "… fresh core)",
"is_bot": false,
"headline": "chore(install): drop legacy pre-rename migration shim (dead code in a…",
"author_name": "t",
"author_login": null,
"committed_at": "2026-06-21T15:17:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "16842a51683bd6a850a18caa15524ad242ba0eaa",
"body": "…-observability",
"is_bot": false,
"headline": "test(install): assert minimal profile installs legion-router + legion…",
"author_name": "t",
"author_login": null,
"committed_at": "2026-06-21T15:07:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0f30122a03675c6deff5cd079fec1fa50aa48076",
"body": null,
"is_bot": false,
"headline": "fix(install): point the minimal profile at core plugins (was opus-core)",
"author_name": "t",
"author_login": null,
"committed_at": "2026-06-21T15:02:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "51cda21f7f6ea2e6cf94fa41c977982ff406e33c",
"body": "The shipped eval datasets were calibrated for the full 75-plugin marketplace, so\nagainst legion-core's 5 skills precision collapsed (P@1=0.33) and\ntest_legion_eval failed CI. Trim both datasets to the 5 legion-* skills (reusing\nthe proven 'clear win' prompts). P@1 back to 1.0; 137 python tests pass.",
"is_bot": false,
"headline": "fix(eval): recalibrate trigger datasets to the legion-core skill surface",
"author_name": "t",
"author_login": null,
"committed_at": "2026-06-21T14:59:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "adf205590c84a4e2d7b7065afe2d639a35ec2e57",
"body": "The 5 legion-* plugins (router, observability, orchestrate, setup, codex-mode)\n+ schemas, config, install/bridge scripts, and the bats suite — sanitized of\norg-specific references, Apache-2.0, doctor + tests green (230 pass, 2 skip).\nIntended as the reusable base for domain agents (see docs/building-an-agent.md).",
"is_bot": false,
"headline": "legion-core: model-agnostic orchestration engine extracted from Legion",
"author_name": "t",
"author_login": null,
"committed_at": "2026-06-21T14:30:42Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 34,
"commits_last_year": 86,
"latest_release_at": "2026-07-20T10:29:44Z",
"latest_release_tag": "v0.18.0",
"releases_from_tags": false,
"days_since_last_push": 3,
"active_weeks_last_year": 5,
"days_since_latest_release": 6,
"mean_days_between_releases": 1.6
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 75,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "@opus-aether-ai/legion-core",
"exists": true,
"license": "Apache-2.0",
"keywords": [
"ai-agents",
"agent-orchestration",
"orchestration-engine",
"multi-model",
"llm-orchestration",
"ai-agent-stack",
"agent-harness",
"agentic",
"self-improving-agents",
"self-healing",
"codex",
"claude",
"cursor",
"opencode",
"opentelemetry",
"model-agnostic",
"legion"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@opus-aether-ai/legion-core",
"is_deprecated": false,
"latest_version": "0.18.0",
"repository_url": "https://github.com/Opus-Aether-AI/legion-core",
"versions_count": 17,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 3,
"monthly_downloads": 2981,
"first_published_at": "2026-06-27T11:35:57.462000Z",
"latest_published_at": "2026-07-20T10:30:05.778000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 6
}
]
},
"popularity": {
"forks": 0,
"stars": 0,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0,
"collected_at": null
},
"open_issues_and_prs": 1
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 117207,
"source_files_sampled": 52,
"oversized_source_files": 3,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md"
],
"agent_instruction_max_bytes": 1528
},
"dependencies": {
"manifests": [
"package.json",
"pyproject.toml"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 7,
"malicious_count": 0,
"assessed_package": "npm:@opus-aether-ai/legion-core@0.18.0",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm",
"pypi"
],
"dependencies": [],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 1,
"merged_prs": 81,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 9,
"closed_unmerged_prs": 7
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "ithihasmadala",
"commits": 39,
"avatar_url": "https://avatars.githubusercontent.com/u/58927988?v=4"
},
{
"type": "User",
"login": "shashank-m",
"commits": 8,
"avatar_url": "https://avatars.githubusercontent.com/u/39821560?v=4"
}
],
"contributors_sampled": 2,
"top_contributor_share": 0.83
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"agent-intake-trigger.yml",
"agent-intake.yml",
"bench-live.yml",
"legion-ci.yml",
"publish-package.yml",
"release-please.yml",
"validate.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"uv.lock"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 4,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 6,
"reason": "18 out of 30 merged PRs checked by a CI test -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 1/18 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 6 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 4,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 9,
"reason": "1 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "a95a90885094c09be479c15e19abf8b9cec0c983",
"ran_at": "2026-07-26T14:49:31Z",
"aggregate_score": 3.9,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-20T10:30:06Z",
"oldest_open_prs": [
{
"number": 98,
"created_at": "2026-07-22T16:43:11Z",
"last_comment_at": "2026-07-22T16:43:15Z",
"last_comment_author": "cursor"
}
],
"last_merged_pr_at": "2026-07-20T10:29:34Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/Opus-Aether-AI/legion-core",
"host": "github.com",
"name": "legion-core",
"owner": "Opus-Aether-AI"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"security": 51,
"vitality": 70,
"community": 39,
"governance": 59,
"engineering": 76
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 70,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 57,
"inputs": {
"commits_last_year": 86,
"human_commit_share": 0.605,
"days_since_last_push": 3,
"active_weeks_last_year": 5
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 3 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 3
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "5/52 weeks with commits",
"points": 3.5,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 5
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "86 commits in the last year",
"points": 17.4,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 86
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 34,
"latest_release_tag": "v0.18.0",
"releases_from_tags": false,
"days_since_latest_release": 6,
"mean_days_between_releases": 1.6
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "34 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 34
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 6 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 6
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~1.6 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 1.6
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 39,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 0,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 58,
"inputs": {
"packages": [
"@opus-aether-ai/legion-core"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 2981
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "2,981 downloads/month across npm",
"points": 46.3,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 2981,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 59,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 26,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 2,
"top_contributor_share": 0.83
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 83% of commits",
"points": 3.8,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 83
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "2 contributors",
"points": 2.7,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 2
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 6 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"merged_prs": 81,
"open_issues": 0,
"closed_issues": 9,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 7
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 46.8,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "81/88 decided PRs merged",
"points": 35.2,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 81,
"decided": 88
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 1/18 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 41,
"inputs": {
"followers": 3,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "Opus-Aether-AI",
"public_repos": 3,
"account_age_days": 393
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "3 followers of Opus-Aether-AI",
"points": 4.3,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 3,
"login": "Opus-Aether-AI"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "3 public repos, account ~1 yr old",
"points": 6.5,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 3
}
},
{
"code": "account_age_years",
"params": {
"years": 1
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"@opus-aether-ai/legion-core"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 6
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 6 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 6
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "17 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 17
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 76,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "7 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 7
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "18 out of 30 merged PRs checked by a CI test -- score normalized to 6",
"points": 12,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"topics": [
"agent-orchestration",
"agentic",
"ai-agents",
"claude",
"codex",
"cursor",
"developer-tools",
"llm-orchestration",
"model-agnostic",
"multi-model",
"opencode",
"opentelemetry",
"orchestration-engine",
"self-healing",
"self-improving-agents",
"ai-agent-stack"
],
"has_wiki": true,
"homepage": "https://legion.opusaether.com",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://legion.opusaether.com",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "16 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 16
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 51,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": null,
"notes": [],
"value": 39,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 18,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 0,
"scorecard_aggregate": 3.9
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 3,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "18 out of 30 merged PRs checked by a CI test -- score normalized to 6",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 1/18 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 6 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 2,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "1 existing vulnerabilities detected",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:@opus-aether-ai/legion-core@0.18.0 runtime dependency closure — what installing the published package pulls in — 7 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "npm:@opus-aether-ai/legion-core@0.18.0",
"assessed": 7
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 7,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 7,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 6
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 59,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md"
],
"agent_instruction_max_bytes": 1528
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "AGENTS.md, CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "AGENTS.md, CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "52 of 52 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 52,
"sampled": 52
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 42,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"uv.lock"
],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0.209,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "18 of the last 86 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 18,
"sampled": 86
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 52,
"inputs": {
"primary_language": "Python",
"largest_source_bytes": 117207,
"source_files_sampled": 52,
"oversized_source_files": 3
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Python without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "Python"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "3/52 source files over 60KB",
"points": 51.8,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 52,
"oversized": 3
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Could not fetch pypi package 'legion-core-dev' from its registry",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-26T14:49:48.196911Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/o/Opus-Aether-AI/legion-core.svg",
"full_name": "Opus-Aether-AI/legion-core",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — npm.