Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 2797,
"has_wiki": false,
"homepage": null,
"languages": {
"Dockerfile": 359,
"JavaScript": 61665,
"TypeScript": 687263
},
"pushed_at": "2026-07-23T16:35:40Z",
"created_at": "2025-04-02T19:55:54Z",
"owner_type": "Organization",
"updated_at": "2026-07-23T16:35:43Z",
"description": "A Model Context Protocol (MCP) server for interacting with Microsoft 365 and Office services through the Graph API",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript"
]
},
"owner": {
"blog": "https://www.softeria.com",
"name": "Softeria",
"type": "Organization",
"login": "Softeria",
"company": null,
"location": null,
"followers": 24,
"avatar_url": "https://avatars.githubusercontent.com/u/33659169?v=4",
"created_at": "2017-11-14T12:59:37Z",
"is_verified": null,
"public_repos": 4,
"account_age_days": 3173
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.132.0",
"kind": "minor",
"published_at": "2026-07-21T16:19:29Z"
},
{
"tag": "v0.131.3",
"kind": "patch",
"published_at": "2026-07-21T12:13:24Z"
},
{
"tag": "v0.131.2",
"kind": "patch",
"published_at": "2026-07-17T21:58:37Z"
},
{
"tag": "v0.131.1",
"kind": "patch",
"published_at": "2026-07-11T10:24:31Z"
},
{
"tag": "v0.131.0",
"kind": "minor",
"published_at": "2026-07-10T12:33:14Z"
},
{
"tag": "v0.130.0",
"kind": "minor",
"published_at": "2026-07-10T09:04:04Z"
},
{
"tag": "v0.129.1",
"kind": "patch",
"published_at": "2026-07-09T07:34:44Z"
},
{
"tag": "v0.129.0",
"kind": "minor",
"published_at": "2026-07-08T05:57:12Z"
},
{
"tag": "v0.128.2",
"kind": "patch",
"published_at": "2026-06-24T20:45:36Z"
},
{
"tag": "v0.128.1",
"kind": "patch",
"published_at": "2026-06-23T08:33:40Z"
},
{
"tag": "v0.128.0",
"kind": "minor",
"published_at": "2026-06-22T20:29:09Z"
},
{
"tag": "v0.127.0",
"kind": "minor",
"published_at": "2026-06-22T20:22:13Z"
},
{
"tag": "v0.126.0",
"kind": "minor",
"published_at": "2026-06-21T19:31:38Z"
},
{
"tag": "v0.125.1",
"kind": "patch",
"published_at": "2026-06-18T10:22:36Z"
},
{
"tag": "v0.125.0",
"kind": "minor",
"published_at": "2026-06-17T18:53:51Z"
},
{
"tag": "v0.124.1",
"kind": "patch",
"published_at": "2026-06-16T15:06:47Z"
},
{
"tag": "v0.124.0",
"kind": "minor",
"published_at": "2026-06-15T20:39:52Z"
},
{
"tag": "v0.123.0",
"kind": "minor",
"published_at": "2026-06-15T20:12:14Z"
},
{
"tag": "v0.122.0",
"kind": "minor",
"published_at": "2026-06-15T12:25:46Z"
},
{
"tag": "v0.121.0",
"kind": "minor",
"published_at": "2026-06-15T12:11:51Z"
},
{
"tag": "v0.120.1",
"kind": "patch",
"published_at": "2026-06-15T10:23:18Z"
},
{
"tag": "v0.120.0",
"kind": "minor",
"published_at": "2026-06-15T07:30:24Z"
},
{
"tag": "v0.119.0",
"kind": "minor",
"published_at": "2026-06-11T15:16:56Z"
},
{
"tag": "v0.118.2",
"kind": "patch",
"published_at": "2026-06-11T15:09:21Z"
},
{
"tag": "v0.118.1",
"kind": "patch",
"published_at": "2026-06-09T21:54:21Z"
},
{
"tag": "v0.118.0",
"kind": "minor",
"published_at": "2026-06-09T21:17:33Z"
},
{
"tag": "v0.117.0",
"kind": "minor",
"published_at": "2026-06-09T21:02:25Z"
},
{
"tag": "v0.116.1",
"kind": "patch",
"published_at": "2026-06-09T20:50:12Z"
},
{
"tag": "v0.116.0",
"kind": "minor",
"published_at": "2026-06-09T20:36:27Z"
},
{
"tag": "v0.115.0",
"kind": "minor",
"published_at": "2026-06-09T20:13:03Z"
},
{
"tag": "v0.114.6",
"kind": "patch",
"published_at": "2026-06-09T19:08:44Z"
},
{
"tag": "v0.114.5",
"kind": "patch",
"published_at": "2026-06-08T07:03:29Z"
},
{
"tag": "v0.114.4",
"kind": "patch",
"published_at": "2026-06-06T07:13:08Z"
},
{
"tag": "v0.114.3",
"kind": "patch",
"published_at": "2026-06-06T06:44:44Z"
},
{
"tag": "v0.114.2",
"kind": "patch",
"published_at": "2026-06-06T04:06:21Z"
},
{
"tag": "v0.114.1",
"kind": "patch",
"published_at": "2026-06-06T00:16:48Z"
},
{
"tag": "v0.114.0",
"kind": "minor",
"published_at": "2026-05-28T10:15:37Z"
},
{
"tag": "v0.113.0",
"kind": "minor",
"published_at": "2026-05-23T21:34:29Z"
},
{
"tag": "v0.112.2",
"kind": "patch",
"published_at": "2026-05-22T10:58:46Z"
},
{
"tag": "v0.112.1",
"kind": "patch",
"published_at": "2026-05-22T09:36:29Z"
},
{
"tag": "v0.111.0",
"kind": "minor",
"published_at": "2026-05-19T12:33:46Z"
},
{
"tag": "v0.110.0",
"kind": "minor",
"published_at": "2026-05-18T19:49:37Z"
},
{
"tag": "v0.109.0",
"kind": "minor",
"published_at": "2026-05-18T10:23:34Z"
},
{
"tag": "v0.108.0",
"kind": "minor",
"published_at": "2026-05-14T20:16:09Z"
},
{
"tag": "v0.107.2",
"kind": "patch",
"published_at": "2026-05-13T11:52:21Z"
},
{
"tag": "v0.107.1",
"kind": "patch",
"published_at": "2026-05-09T08:40:00Z"
},
{
"tag": "v0.107.0",
"kind": "minor",
"published_at": "2026-05-09T07:16:07Z"
},
{
"tag": "v0.106.2",
"kind": "patch",
"published_at": "2026-05-08T18:29:26Z"
},
{
"tag": "v0.106.1",
"kind": "patch",
"published_at": "2026-05-08T11:37:52Z"
},
{
"tag": "v0.106.0",
"kind": "minor",
"published_at": "2026-05-08T11:26:54Z"
},
{
"tag": "v0.105.0",
"kind": "minor",
"published_at": "2026-05-08T09:37:17Z"
},
{
"tag": "v0.104.0",
"kind": "minor",
"published_at": "2026-05-08T09:13:34Z"
},
{
"tag": "v0.103.0",
"kind": "minor",
"published_at": "2026-05-08T08:57:47Z"
},
{
"tag": "v0.102.0",
"kind": "minor",
"published_at": "2026-05-08T08:49:20Z"
},
{
"tag": "v0.101.0",
"kind": "minor",
"published_at": "2026-05-08T08:20:31Z"
},
{
"tag": "v0.100.0",
"kind": "minor",
"published_at": "2026-05-08T08:03:17Z"
},
{
"tag": "v0.99.1",
"kind": "patch",
"published_at": "2026-05-06T09:50:24Z"
},
{
"tag": "v0.99.0",
"kind": "minor",
"published_at": "2026-05-06T08:50:53Z"
},
{
"tag": "v0.98.0",
"kind": "minor",
"published_at": "2026-05-06T07:54:17Z"
},
{
"tag": "v0.97.0",
"kind": "minor",
"published_at": "2026-05-06T07:11:38Z"
},
{
"tag": "v0.96.0",
"kind": "minor",
"published_at": "2026-05-04T13:23:05Z"
},
{
"tag": "v0.95.0",
"kind": "minor",
"published_at": "2026-04-30T21:35:04Z"
},
{
"tag": "v0.94.0",
"kind": "minor",
"published_at": "2026-04-30T21:30:10Z"
},
{
"tag": "v0.93.0",
"kind": "minor",
"published_at": "2026-04-30T21:10:35Z"
},
{
"tag": "v0.92.0",
"kind": "minor",
"published_at": "2026-04-29T20:21:37Z"
},
{
"tag": "v0.91.0",
"kind": "minor",
"published_at": "2026-04-28T06:12:48Z"
},
{
"tag": "v0.90.0",
"kind": "minor",
"published_at": "2026-04-27T20:29:36Z"
},
{
"tag": "v0.89.0",
"kind": "minor",
"published_at": "2026-04-27T19:22:54Z"
},
{
"tag": "v0.88.2",
"kind": "patch",
"published_at": "2026-04-27T07:28:00Z"
},
{
"tag": "v0.88.1",
"kind": "patch",
"published_at": "2026-04-26T11:18:53Z"
},
{
"tag": "v0.88.0",
"kind": "minor",
"published_at": "2026-04-25T18:53:22Z"
},
{
"tag": "v0.87.1",
"kind": "patch",
"published_at": "2026-04-25T14:45:08Z"
},
{
"tag": "v0.87.0",
"kind": "minor",
"published_at": "2026-04-25T13:39:28Z"
},
{
"tag": "v0.86.0",
"kind": "minor",
"published_at": "2026-04-25T09:42:43Z"
},
{
"tag": "v0.85.2",
"kind": "patch",
"published_at": "2026-04-25T06:47:23Z"
},
{
"tag": "v0.85.1",
"kind": "patch",
"published_at": "2026-04-22T21:28:35Z"
},
{
"tag": "v0.85.0",
"kind": "minor",
"published_at": "2026-04-21T11:43:22Z"
},
{
"tag": "v0.84.0",
"kind": "minor",
"published_at": "2026-04-21T05:23:20Z"
},
{
"tag": "v0.83.0",
"kind": "minor",
"published_at": "2026-04-20T10:51:29Z"
},
{
"tag": "v0.82.0",
"kind": "minor",
"published_at": "2026-04-20T07:04:15Z"
},
{
"tag": "v0.81.0",
"kind": "minor",
"published_at": "2026-04-17T21:24:35Z"
},
{
"tag": "v0.80.0",
"kind": "minor",
"published_at": "2026-04-17T12:58:39Z"
},
{
"tag": "v0.79.6",
"kind": "patch",
"published_at": "2026-04-16T21:24:16Z"
},
{
"tag": "v0.79.5",
"kind": "patch",
"published_at": "2026-04-15T10:08:06Z"
},
{
"tag": "v0.79.4",
"kind": "patch",
"published_at": "2026-04-14T21:49:32Z"
},
{
"tag": "v0.79.3",
"kind": "patch",
"published_at": "2026-04-14T21:39:51Z"
},
{
"tag": "v0.79.2",
"kind": "patch",
"published_at": "2026-04-14T21:35:26Z"
},
{
"tag": "v0.79.1",
"kind": "patch",
"published_at": "2026-04-14T21:33:36Z"
},
{
"tag": "v0.79.0",
"kind": "minor",
"published_at": "2026-04-14T21:28:35Z"
},
{
"tag": "v0.78.0",
"kind": "minor",
"published_at": "2026-04-14T20:54:28Z"
},
{
"tag": "v0.77.0",
"kind": "minor",
"published_at": "2026-04-14T20:25:45Z"
},
{
"tag": "v0.76.0",
"kind": "minor",
"published_at": "2026-04-13T16:18:59Z"
},
{
"tag": "v0.75.0",
"kind": "minor",
"published_at": "2026-04-10T12:37:16Z"
},
{
"tag": "v0.74.0",
"kind": "minor",
"published_at": "2026-04-10T12:26:16Z"
},
{
"tag": "v0.73.1",
"kind": "patch",
"published_at": "2026-04-05T20:25:52Z"
},
{
"tag": "v0.73.0",
"kind": "minor",
"published_at": "2026-04-05T13:56:01Z"
},
{
"tag": "v0.72.0",
"kind": "minor",
"published_at": "2026-04-05T13:48:19Z"
},
{
"tag": "v0.71.0",
"kind": "minor",
"published_at": "2026-04-05T13:44:10Z"
},
{
"tag": "v0.70.0",
"kind": "minor",
"published_at": "2026-04-05T13:42:11Z"
},
{
"tag": "v0.69.0",
"kind": "minor",
"published_at": "2026-04-05T10:42:43Z"
}
],
"recent_commits": [
{
"oid": "daf61b02ca551a70845dbaff42e9d57098638184",
"body": "Code-defined utility tools (download-bytes, get-download-url, parse-teams-url) carry no presets in endpoints.json, so every --preset filter stripped them: --preset files exposed get-drive-item but no downloader, leaving a found file unreadable.\n\ndownload-bytes is now universal (any app can return fe\n[…]\nble content), get-download-url rides the drive-backed presets, and parse-teams-url stays on teams/work. The empty-preset guard now checks endpoint count, and scoped preset names are validated at load.",
"is_bot": false,
"headline": "fix: include download utilities in tool presets (#590)",
"author_name": "Eirik Brandtzæg",
"author_login": "eirikb",
"committed_at": "2026-07-23T16:35:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bd8ef4999e2e4eef4b0616d3836e5e0df21f5094",
"body": "Bumps [undici](https://github.com/nodejs/undici) to 7.28.0 and updates ancestor dependencies [undici](https://github.com/nodejs/undici) and [@redocly/cli](https://github.com/Redocly/redocly-cli). These dependencies need to be updated together.\n\n\nUpdates `undici` from 7.24.6 to 7.28.0\n- [Release note\n[…]\nci\n dependency-version: 7.28.0\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump undici and @redocly/cli (#585)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-21T20:53:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "eb999f303600a9bef3b993f20fdfc8345ed5b867",
"body": "Bumps [tar](https://github.com/isaacs/node-tar) and [npm](https://github.com/npm/cli). These dependencies needed to be updated together.\n\nUpdates `tar` from 7.5.16 to 7.5.19\n- [Release notes](https://github.com/isaacs/node-tar/releases)\n- [Changelog](https://github.com/isaacs/node-tar/blob/main/CHAN\n[…]\nar\n dependency-version: 7.5.19\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump tar and npm (#584)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-21T20:53:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "13899244bb62a5db43a4ab72457c873c42b534ec",
"body": "Bumps [hono](https://github.com/honojs/hono) from 4.12.25 to 4.12.31.\n- [Release notes](https://github.com/honojs/hono/releases)\n- [Commits](https://github.com/honojs/hono/compare/v4.12.25...v4.12.31)\n\n---\nupdated-dependencies:\n- dependency-name: hono\n dependency-version: 4.12.31\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump hono from 4.12.25 to 4.12.31 (#583)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-21T20:53:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61bfc27d84b872f094f57161b386a8f4254055bc",
"body": "Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.2.0 to 4.3.0.\n- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/nodeca/js-yaml/compare/4.2.0...4.3.0)\n\n---\nupdated-dependencies:\n- dependency-name: js-yaml\n dependency-version: 4.3.0\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump js-yaml from 4.2.0 to 4.3.0 (#582)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-21T20:47:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f0b4b47bfcf21750e0d568e6ff61ada99a771d31",
"body": "Bumps [body-parser](https://github.com/expressjs/body-parser) from 2.2.2 to 2.3.0.\n- [Release notes](https://github.com/expressjs/body-parser/releases)\n- [Changelog](https://github.com/expressjs/body-parser/blob/master/HISTORY.md)\n- [Commits](https://github.com/expressjs/body-parser/compare/v2.2.2..\n[…]\nser\n dependency-version: 2.3.0\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump body-parser from 2.2.2 to 2.3.0 (#581)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-21T20:17:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f65b6e0432d4d4665481c58e5d270c3e7db09b12",
"body": "Bumps [brace-expansion](https://github.com/juliangruber/brace-expansion) from 1.1.13 to 1.1.16.\n- [Release notes](https://github.com/juliangruber/brace-expansion/releases)\n- [Commits](https://github.com/juliangruber/brace-expansion/compare/v1.1.13...v1.1.16)\n\n---\nupdated-dependencies:\n- dependency-n\n[…]\non\n dependency-version: 1.1.16\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps-dev): bump brace-expansion from 1.1.13 to 1.1.16 (#577)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-21T19:09:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e2b6e385f7615ac2328d54d000f8308a20d0d811",
"body": "… (#580)\n\nAdd a Features bullet linking to the presets and discovery sections (both were buried far down), and replace the stale 90+/200+ tool counts with drift-proof wording and the current 300+. Motivated by #579.",
"is_bot": false,
"headline": "docs: surface tool presets/discovery in README, fix stale tool counts…",
"author_name": "Eirik Brandtzæg",
"author_login": "eirikb",
"committed_at": "2026-07-21T18:02:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "177a8e94acb0ba421f2b1b498271f3e30cd4443b",
"body": "…(#575) (#578)\n\nget-excel-range-format reads a range's format (alignment, wrap, sizing, and\nfont/fill/borders via $expand); format-excel-range-font/-fill/-border set them.",
"is_bot": false,
"headline": "feat(excel): add get/set tools for cell styles (font, fill, borders) …",
"author_name": "Eirik Brandtzæg",
"author_login": "eirikb",
"committed_at": "2026-07-21T16:17:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bd1a67ca83b6deeec428b54bbe9097cb7ff8c9a3",
"body": "Strict JSON-Schema MCP clients (e.g. Kimi/Moonshot) reject the entire\ntools/list when a tool inputSchema contains a $ref that isn't anchored\nunder #/$defs/. The MCP SDK converts Zod schemas with zod-to-json-schema's\ndefault root strategy, which emits root-relative refs for recursive and\nshared Micro\n[…]\nhe emitted schemas at the tools/list boundary: hoist every\nreferenced sub-schema into a top-level $defs and repoint the refs. This\nis content-preserving and keeps the payload compact, unlike inlining.",
"is_bot": false,
"headline": "fix: normalize tool inputSchema $refs to #/$defs (#571) (#576)",
"author_name": "Eirik Brandtzæg",
"author_login": "eirikb",
"committed_at": "2026-07-21T12:11:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c6ee55ccabcb3ee20434645d52b6f40f93388f66",
"body": "…ry (#3) (#572)\n\nThese two endpoints ship with only the bare Graph docstring ('Update\nthe properties of a todoTask object.'), while every sibling To Do\nendpoint carries an llmTip. Since tool search ranks BM25 over name,\ndescription, and llmTip, natural queries like 'mark to do item\ncomplete' fail to\n[…]\nl. Give both endpoints\nkeyword-rich tips matching the style of their siblings.\n\n\nClaude-Session: https://claude.ai/code/session_01VFzZ23K1v7HBqbb5JgLy2M\n\nCo-authored-by: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add llmTips to update-todo-task and create-todo-task for tool discove…",
"author_name": "Cam Soper",
"author_login": "CamSoper",
"committed_at": "2026-07-21T10:10:51Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "0dd76d275dbf58366a8f349c7cc86bf0b970bdc3",
"body": "* fix: stop dropping flattened body-field params in tool calls (#569)\n\nMCP clients flatten message fields (subject, toRecipients) into top-level\ntool params; these were silently dropped before the request was built,\nso create-draft-email sent only the body field and Graph returned 400\nUnableToDeseri\n[…]\nmeant it as message.body. Read-only entity fields are excluded,\n explicit body values win over stray duplicates, and z.lazy schemas\n (chatMessage tools) are unwrapped too.\n\n* chore: tighten comments",
"is_bot": false,
"headline": "fix: stop dropping flattened body-field params in tool calls #569 (#570)",
"author_name": "Eirik Brandtzæg",
"author_login": "eirikb",
"committed_at": "2026-07-17T21:57:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f52b3f1282a79818718388d1e871bdc96b62dcff",
"body": "…568)\n\nMentions already flow through to Graph (the chatMessage schema is\npassthrough), so the 400 'value without a type name' was really a\nguidance gap: nothing told the model to add the <at id> tag and\nmentioned.user.userIdentityType. Extend the four Teams send/reply\nllmTips with the exact shape, plus tests for the guidance text and\nthe passthrough round-trip.",
"is_bot": false,
"headline": "fix(teams): document @mention shape in send/reply tool tips (#558) (#…",
"author_name": "Eirik Brandtzæg",
"author_login": "eirikb",
"committed_at": "2026-07-11T10:23:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f5ab94d6a0a6cb5b5d9bac3548388742f3bc3fc9",
"body": "Bumps [ws](https://github.com/websockets/ws) from 7.5.10 to 7.5.11.\n- [Release notes](https://github.com/websockets/ws/releases)\n- [Commits](https://github.com/websockets/ws/compare/7.5.10...7.5.11)\n\n---\nupdated-dependencies:\n- dependency-name: ws\n dependency-version: 7.5.11\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps-dev): bump ws from 7.5.10 to 7.5.11 (#564)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-11T08:04:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6912b22b729271ea513ffef52096542e432b30b8",
"body": "Adds create/update/delete parity for site-hosted notebooks:\ncreate-sharepoint-site-onenote-notebook, -section,\n-section-group-section, -section-page,\nupdate-sharepoint-site-onenote-page-content and\ndelete-sharepoint-site-onenote-page.\n\nSite-scoped OneNote is work-only, so scopes go in workScopes\n(No\n[…]\n for creates, Notes.ReadWrite for update/delete). The\npage-content PATCH takes a patchContentCommand array, declared via\nrequestBodySchema so the generated body is an array not an object.\n\nCloses #559",
"is_bot": false,
"headline": "feat(onenote): add SharePoint site-hosted OneNote write tools (#565)",
"author_name": "Eirik Brandtzæg",
"author_login": "eirikb",
"committed_at": "2026-07-10T12:31:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ec41b98ba3d21221df3217e1382912426a3e2ff8",
"body": "…#563)\n\nAdds update-channel-message, update-chat-message and\nupdate-channel-message-reply (PATCH). Editing is work/school only per\nGraph docs, so scopes go in workScopes (ChannelMessage.ReadWrite /\nChat.ReadWrite).\n\nCloses #557",
"is_bot": false,
"headline": "feat(teams): add tools for editing posted channel and chat messages (…",
"author_name": "Eirik Brandtzæg",
"author_login": "eirikb",
"committed_at": "2026-07-10T09:02:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b3dd67ad269f8273190fabf40d0d33982caa362d",
"body": "Bumps [js-yaml](https://github.com/nodeca/js-yaml) and [@redocly/openapi-core](https://github.com/Redocly/redocly-cli). These dependencies needed to be updated together.\n\nUpdates `js-yaml` from 4.1.1 to 4.2.0\n- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)\n- [Commits](https\n[…]\n\"\n dependency-version: 1.34.17\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump js-yaml and @redocly/openapi-core (#562)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-10T09:01:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "15088f43da72364b284d06bd0dab3cea49d8318b",
"body": "…ges and get-download-url (#561)\n\nTwo tools parsed a graphRequest response body as JSON, but under --toon\n(MS365_MCP_OUTPUT_FORMAT=toon) graph-client had already TOON-encoded it, so the\nparse threw:\n\n- fetchAllPages: the pagination merge JSON.parse()'d each page, the error was\n only logged, and mul\n[…]\nts forceJsonOutput on its\ninternal metadata request; it returns its own JSON payload, so its output is\nunchanged. serialize() defaults to compact, keeping JSON-mode output byte-identical.\n\nCloses #560",
"is_bot": false,
"headline": "fix(toon): stop JSON.parse of TOON-encoded bodies breaking fetchAllPa…",
"author_name": "Eirik Brandtzæg",
"author_login": "eirikb",
"committed_at": "2026-07-09T07:33:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c6e6eac7795ec98e5209ebf9c9b337af20a8b7c4",
"body": "… Client Registration (#465)\n\n* feat(security): add MS365_MCP_DISABLE_DCR env-var opt-out for Dynamic Client Registration\n\nAdds an environment-variable alternative to the existing\n`--no-dynamic-registration` CLI flag, so a container platform can close\nthe anonymous OAuth `/register` (Dynamic Client \n[…]\nr width; the wrapped form failed CI format:check.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(security): add MS365_MCP_DISABLE_DCR env-var opt-out for Dynamic…",
"author_name": "Marc Bourget",
"author_login": "okapi-ca",
"committed_at": "2026-07-08T05:55:41Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "5b193b5df80d6ec2f04a7203fd83f587cf63ef06",
"body": "…#463)\n\n* feat(security): confirm:true server-side gate for destructive tools (CT-03)\n\nDefense-in-depth: every POST/PATCH/PUT/DELETE tool now returns\n{ error: \"confirmation_required\" } unless the caller passes\n\"confirm\": true alongside its other params. POST endpoints flagged\nreadOnly in endpoints.j\n[…]\nand a\nnew test asserts the default-off behaviour.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(security): require explicit confirm:true for destructive tools (…",
"author_name": "Marc Bourget",
"author_login": "okapi-ca",
"committed_at": "2026-07-08T05:55:27Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a9ca914cb1311570c867ffc4c58261af9be040a2",
"body": "…nt processes (#545) (#553)\n\n* fix(auth): keep file-backed MSAL cache coherent across concurrent processes\n\nRegister an MSAL cachePlugin so MSAL reloads the newest persisted token\ncache before every access and persists rotations after. In the common\nstdio deployment several MCP processes share one t\n[…]\ne modes (fail-closed rethrow / best-effort swallow), and an\nintegration test driving the real cache plugin through a simulated MSAL client\nto prove a rejected pinned login leaves no account persisted.",
"is_bot": false,
"headline": "fix(auth): keep file-backed MSAL token cache coherent across concurre…",
"author_name": "Eirik Brandtzæg",
"author_login": "eirikb",
"committed_at": "2026-06-24T20:44:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f3d7eecfbf4b36917130ffce1e99c35e106d1c4f",
"body": "…lossy re-serialization (#551)\n\ndownload-bytes on a /content body that parses as JSON ran the bytes through\nJSON.parse -> JSON.stringify, dropping whitespace, trailing newlines, key\norder and number formatting, and changing the response shape to a bare value.\n\nSet rawResponse on the download-bytes g\n[…]\n already used for .md/.css/.svg. Both\nchanges are required: without rawResponse the tool never hits the new branch,\nand without the branch the parsed object is still re-serialized lossily.\n\nFixes #546",
"is_bot": false,
"headline": "fix(download-bytes): return JSON /content bodies verbatim instead of …",
"author_name": "Eirik Brandtzæg",
"author_login": "eirikb",
"committed_at": "2026-06-23T08:32:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "eb6863075c68643dae68436510f9250b46831a0c",
"body": "…547)\n\n* Fix create-calendar-event tool discovery via descriptionOverride (#1)\n\nThe create-calendar-event tool was effectively undiscoverable through\nsemantic search. Its base description is auto-generated from Microsoft's\nGraph OpenAPI spec, which for POST /me/events incorrectly opens with\n\"Create \n[…]\ns) now pass.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_015HNHMYeNVt7MWsKRMbvQ1R\n\n---------\n\nCo-authored-by: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix tool discovery for create-calendar-event and sync package-lock (#…",
"author_name": "Cam Soper",
"author_login": "CamSoper",
"committed_at": "2026-06-23T06:52:02Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "94cdf4998ccbdb5d4345cb7979a4b1a47d379411",
"body": "* Support path prefix on --public-url\n\nThis change makes the resource_metadata field of the WWW-Authorization\nresponse header support the case when the service is hosted under a\nsub-path. Making use of how RFC 9728 handles multiple resources per host.\n\n* Make oauth-protected-resource handler support\n[…]\nect public-url\n\nIf the service is hosted on a sub-path the resource field need to\ninclude the path under witch the service is exposed under.\n\n* Make /token endpoint be published on public URL as well.",
"is_bot": false,
"headline": "feat(auth): Support path suffix on --public-url (#544)",
"author_name": "David Tennander",
"author_login": "dtennander",
"committed_at": "2026-06-22T20:27:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "37a773b0b40314c1002f73b21e579b2588902e2c",
"body": null,
"is_bot": false,
"headline": "feat(tools): add get-download-url for drive downloads (#500)",
"author_name": "lestephen",
"author_login": "lestephen",
"committed_at": "2026-06-22T20:20:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4fd74959416074cee71994e89bdd4e310662ab41",
"body": null,
"is_bot": false,
"headline": "feat(planner): add task chat message tools (#499)",
"author_name": "lestephen",
"author_login": "lestephen",
"committed_at": "2026-06-21T19:30:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c1cb047d31426dddd4eccb0d812481c45b9df7e1",
"body": "Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.10 to 3.4.11.\n- [Release notes](https://github.com/cure53/DOMPurify/releases)\n- [Commits](https://github.com/cure53/DOMPurify/compare/3.4.10...3.4.11)\n\n---\nupdated-dependencies:\n- dependency-name: dompurify\n dependency-version: 3.4.11\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps-dev): bump dompurify from 3.4.10 to 3.4.11 (#548)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-21T19:17:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3537ce054816e5db938bdbb61c299d7b98e9fd12",
"body": "…emas (#479)\n\n* fix: preserve @odata.deltaLink in responses and strip $top from delta endpoint schemas\n\nTwo related bug fixes affecting all delta endpoints (mail, calendar,\ndrive, sharepoint, etc.):\n\n1. Response serializer was stripping @odata.deltaLink alongside other\n OData properties, making de\n[…]\nP_UNSUPPORTED_DELTA_TOOLS allowlist shared by the schema and runtime\nstrip sites, preserving $top for the delta endpoints that accept it.\n\n---------\n\nCo-authored-by: Eirik Brandtzæg <eirikb@eirikb.no>",
"is_bot": false,
"headline": "fix: preserve @odata.deltaLink and strip $top from delta endpoint sch…",
"author_name": "mikemrozek",
"author_login": "mikemrozek",
"committed_at": "2026-06-18T10:21:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ae40eb90ac00c607a43792370623376008ce719b",
"body": "* feat(generator): dual-generator support for Graph beta endpoints\n\nAdds a per-endpoint \"apiVersion\" field in endpoints.json (default \"v1.0\").\nEndpoints flagged \"beta\" are trimmed from Microsoft's parallel /beta OpenAPI\nspec into a second generated client (client-beta.ts) and routed to the /beta\nsur\n[…]\nthe login scopes from the group that actually satisfied the\nallowlist instead of unconditionally the first group; with no allowlist\nthe primary group is still used (least-privilege default unchanged).",
"is_bot": false,
"headline": "feat(generator): dual-generator support for Graph beta endpoints (#537)",
"author_name": "Eirik Brandtzæg",
"author_login": "eirikb",
"committed_at": "2026-06-17T18:52:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a90d6c88dd6d01588469e506dded8510350426e7",
"body": "Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 4.1.1 to 4.2.0.\n- [Changelog](https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md)\n- [Commits](https://github.com/nodeca/js-yaml/commits)\n\n---\nupdated-dependencies:\n- dependency-name: js-yaml\n dependency-version: 4.2.0\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump js-yaml from 4.1.1 to 4.2.0 (#540)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-17T11:19:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13f2466e32a5bf449f41f8e99bba4877e07ffafe",
"body": "Bumps [hono](https://github.com/honojs/hono) from 4.12.23 to 4.12.25.\n- [Release notes](https://github.com/honojs/hono/releases)\n- [Commits](https://github.com/honojs/hono/compare/v4.12.23...v4.12.25)\n\n---\nupdated-dependencies:\n- dependency-name: hono\n dependency-version: 4.12.25\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump hono from 4.12.23 to 4.12.25 (#541)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-17T11:19:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6fbc1c9e6e2161e3b1323f22e5171b1758635d0f",
"body": "Removes [tar](https://github.com/isaacs/node-tar). It's no longer used after updating ancestor dependency [npm](https://github.com/npm/cli). These dependencies need to be updated together.\n\n\nRemoves `tar`\n\nUpdates `npm` from 11.12.0 to 11.17.0\n- [Release notes](https://github.com/npm/cli/releases)\n-\n[…]\nm\n dependency-version: 11.17.0\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump tar and npm (#542)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-17T11:19:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "75235ed891f1f26ba12347c409df14b44302c81e",
"body": "Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.4.3 to 3.4.10.\n- [Release notes](https://github.com/cure53/DOMPurify/releases)\n- [Commits](https://github.com/cure53/DOMPurify/compare/3.4.3...3.4.10)\n\n---\nupdated-dependencies:\n- dependency-name: dompurify\n dependency-version: 3.4.10\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps-dev): bump dompurify from 3.4.3 to 3.4.10 (#539)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-17T08:06:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3419f702d10666d4fbf71b37e8cf8617b4dc520b",
"body": "…538)\n\nWhen a recognised OData param ($filter, $skip, $top, etc.) was passed at\nruntime but had no matching paramDef entry — because the generated client\nomitted it for that endpoint — the value was silently dropped after the\npath-param fallback chain without ever reaching queryParams.\n\nAdd an `else if (isOdataParam)` branch that forwards the param to\nqueryParams using the already-computed fixedParamName.\n\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: don't silently drop OData params absent from generated client (#…",
"author_name": "Steffen Heil | secforge",
"author_login": "steffen-heil-secforge",
"committed_at": "2026-06-16T15:05:16Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "fa0b9f635857a4c807e944719d58da5089e10e65",
"body": "…ernatives (#536)\n\nSome endpoints accept alternative permission sets rather than one fixed set.\ncopilot-retrieve is the motivating case: per the Microsoft Graph Copilot Retrieval\nAPI, dataSource sharePoint/oneDriveBusiness need Files.Read.All + Sites.Read.All,\nwhile externalItem needs ExternalItem.R\n[…]\nopes ExternalItem.Read.All.\n- llmTip and the gate now agree (previously the tip described OR while the gate ANDed).\n- Validation now checks scope groups are well-formed; adds unit + integration tests.",
"is_bot": false,
"headline": "feat(auth): support OR-group scopes for endpoints with permission alt…",
"author_name": "Eirik Brandtzæg",
"author_login": "eirikb",
"committed_at": "2026-06-15T20:38:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ddc0bd59bb9d6c2c429569b2a2c57df18466d1e8",
"body": "* refactor(tools): make copilot-retrieve a first-class endpoints.json endpoint\n\nMigrates copilot-retrieve from a hardcoded utility tool to an endpoints.json entry, so it participates in presets (search/work), OAuth scope requests + gating, and org-mode (work-only) gating like every other Graph tool \n[…]\nretrieve queryString,\n restoring the whitespace-only guard the hand-rolled handler had.\n- tests: cover the copilot-retrieve guards through the generated client and the\n read-only POST hint behavior.",
"is_bot": false,
"headline": "feat: copilot retrieve endpoint (#533)",
"author_name": "Eirik Brandtzæg",
"author_login": "eirikb",
"committed_at": "2026-06-15T20:10:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ed1293d90b437b399cbd8665746497564e53e08d",
"body": "…quest (#535)\n\nAdds --extra-scopes / MS365_MCP_EXTRA_SCOPES to request additional Graph scopes beyond those derived from the enabled tools. Scopes are appended verbatim to the token request, independent of the tool surface and the --allowed-scopes filter. Intended for use with a custom app registrat\n[…]\no users can request scopes the default app does not declare (e.g. CopilotPackages.ReadWrite.All) and call the endpoints via graph-batch, without expanding the shared app's permission set.\n\nCloses #505",
"is_bot": false,
"headline": "feat(auth): add --extra-scopes to append Graph scopes to the token re…",
"author_name": "Eirik Brandtzæg",
"author_login": "eirikb",
"committed_at": "2026-06-15T12:24:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9dd01015c9ba81825f014c567d7c40b819864152",
"body": "Adds list tools for section groups under a SharePoint site notebook, and for the sections and nested section groups inside a section group, so the full OneNote hierarchy on a site is traversable without falling back to raw graph-batch calls.\n\nCloses #529",
"is_bot": false,
"headline": "feat(endpoints): add site-scoped OneNote section group tools (#534)",
"author_name": "Eirik Brandtzæg",
"author_login": "eirikb",
"committed_at": "2026-06-15T12:10:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "41f27bf6e43b51d8ab6d50ae5dd5d9e8ab7f4c6d",
"body": "…dies (#532)\n\nSchemas referenced only via anyOf: [{$ref}, {nullable object}] nested inside an inline request body were not traced by findUsedSchemas, so pruneUnusedSchemas removed them and the later pass stripped the dangling ref as \"broken\" — degrading the request body to a bare object.\n\nRestores t\n[…]\n share-drive-item, create-upload-session, create-mail-attachment-upload-session and send-my-activity-notification. Adds a regression test asserting the rescued schemas survive in the generated client.",
"is_bot": false,
"headline": "fix(generator): trace nested anyOf refs in inline request/response bo…",
"author_name": "Eirik Brandtzæg",
"author_login": "eirikb",
"committed_at": "2026-06-15T10:22:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a893be53c246ae69f130eb21db3cff5afa7402da",
"body": "Add a read-only utility tool that wraps the Microsoft 365 Copilot Retrieval\nAPI (POST /copilot/retrieval). It grounds a natural-language query against the\nsame hybrid index that powers Microsoft 365 Copilot and returns relevant,\npermission-trimmed text extracts with their source URLs — complementing\n[…]\negistration counts updated in the read-only,\n tool-filtering, and calendar-view suites.\n\nRefs: https://learn.microsoft.com/en-us/microsoft-365/copilot/extensibility/api/ai-services/retrieval/overview",
"is_bot": false,
"headline": "feat(tools): add copilot-retrieve semantic search tool (#501)",
"author_name": "lestephen",
"author_login": "lestephen",
"committed_at": "2026-06-15T07:29:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7347e36550b41b349f98a81129254fb880e05105",
"body": null,
"is_bot": false,
"headline": "docs: clarify redirect URI platform type depends on client secret (#531)",
"author_name": "Eirik Brandtzæg",
"author_login": "eirikb",
"committed_at": "2026-06-11T19:20:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e575554a6edbfcb6c0ad85eefe3f758d33c7122e",
"body": "Lets an MCP gateway enumerate the tool catalog (initialize, tools/list,\nprompts/list, resources/list, ping) before any user has authenticated,\nwhile tools/call still requires a valid per-user bearer token (passed\nthrough to Graph).\n\nOff by default and opt-in via --allow-unauthenticated-discovery (or\n[…]\n rejected with 401 like any other request.\nComplements --trust-proxy-auth, which instead skips auth entirely and\nuses a single cached identity.\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(http): add --allow-unauthenticated-discovery flag (#514)",
"author_name": "feifeigood",
"author_login": "feifeigood",
"committed_at": "2026-06-11T15:15:35Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "fdf289f1ff9146447e3b110c96e943a539ecbd39",
"body": "…is rejected on common (#528)\n\nPersonal Microsoft accounts signed in via the default 'common' authority\nget their refresh tokens rejected at the first refresh (invalid_grant /\nAADSTS70000), so sessions die roughly an hour after login. The same login\nvia the 'consumers' authority refreshes fine - ver\n[…]\nrant, MSA home\ntenant, common authority), the error and log now point at\nMS365_MCP_TENANT_ID=consumers. README documents the same on the env var.\n\nCo-authored-by: Matt Whelan <matt.whelan@outlook.com>",
"is_bot": false,
"headline": "fix(auth): suggest the consumers authority when an MSA refresh token …",
"author_name": "koopatroopa",
"author_login": "koopatroopa",
"committed_at": "2026-06-11T15:08:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a004cee19b8c1d2c23e7203d39ef37d98782442e",
"body": "…s (#525)\n\nThe OAuth-field pattern matched any `code` substring followed by = or :,\nso diagnostics like `statusCode: 401` and `\"code\":\"ECONNRESET\"` were\nredacted when MS365_MCP_REDACT_PII was enabled. Anchor the field names\nwith a word boundary and only redact `code` in its query-string form\n(?code=... / &code=...), where OAuth authorization codes actually appear.",
"is_bot": false,
"headline": "fix(logging): stop PII redaction from scrubbing status and error code…",
"author_name": "Eirik Brandtzæg",
"author_login": "eirikb",
"committed_at": "2026-06-09T21:53:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f573b49d85fe79cd12921f39497685ff21d1818",
"body": "Error messages bubbled up from MSAL, fetch, and the Graph SDK routinely\ninterpolate request URLs, Authorization headers, and token payloads into\ntheir message strings. When those reach a log file or the console they\nexpose bearer/refresh tokens and user identifiers.\n\nThis adds an opt-in redaction fi\n[…]\nnEnabled),\nwired into logger.ts, with unit tests covering each pattern and the\nenable/default behaviour. Documented in the README.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(security): optional PII/secret redaction for log output (#521)",
"author_name": "Marc Bourget",
"author_login": "okapi-ca",
"committed_at": "2026-06-09T21:16:08Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6696d2a71764c02bcf3642f917c1d5b9fa36a5c1",
"body": "…mode (#520)\n\nHTTP mode exposes an Express app (OAuth surface + the /mcp endpoint) with\nno security headers and no flood protection. This adds two standard\nhardening layers, both safe defaults for the common single-proxy\ndeployment:\n\nhelmet\n- Sensible security headers on every HTTP response. CSP is \n[…]\n-limit ^7.5.1, a\nrate-limit smoke test (no new test dependency — uses native fetch), and\ndocuments the new env vars in the README.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(security): add helmet headers and per-IP rate limiting for HTTP …",
"author_name": "Marc Bourget",
"author_login": "okapi-ca",
"committed_at": "2026-06-09T21:00:53Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f01fe2567bae2edf34b71c47c4738a6f6f3c8451",
"body": "…… (#524)\n\n* fix(config): hide fetchAllPages when pagination is disabled and reflect MS365_MCP_MAX_PAGES in its description\n\nWhen MS365_MCP_ALLOW_PAGINATION disables multi-page following, the\nfetchAllPages parameter was still advertised to the model and silently\nignored, with only a server-side log \n[…]\no interpolate the configured page cap into\nthe parameter description rather than hardcoding 100 (follow-up to #519).\n\n* test(graph-tools): assert fetchAllPages is advertised when pagination is enabled",
"is_bot": false,
"headline": "fix(config): hide fetchAllPages when pagination is disabled and refle…",
"author_name": "Eirik Brandtzæg",
"author_login": "eirikb",
"committed_at": "2026-06-09T20:48:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7c1357f36ad81e6b64a05f9f0d7713af63d6cab3",
"body": "…MCP_MAX_ITEMS (#519)\n\n`fetchAllPages: true` previously followed @odata.nextLink with hardcoded\ncaps (maxPages = 100, maxItems = 10_000) in graph-tools.ts. Operators\ndeploying this server with concurrent users may want a smaller memory\nfootprint per request (10K items × ~5KB ≈ 50MB), or to disable\nm\n[…]\nree unit tests (MAX_PAGES below default, MAX_ITEMS below default,\nALLOW_PAGINATION disabled) and documents the vars in the README.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(config): bound fetchAllPages with MS365_MCP_MAX_PAGES and MS365_…",
"author_name": "Marc Bourget",
"author_login": "okapi-ca",
"committed_at": "2026-06-09T20:35:12Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a6af555eb69f4280fb09c5f8bb93790e367b4c08",
"body": "… tool discovery (#518)\n\nThe list-mail-messages and list-mail-folder-messages tips both open with\n\"CRITICAL: When searching emails, …\". That guidance is valuable at\nexecution time, but the BM25 tool-discovery index only reads the first\n12 tokens of each llmTip (TIP_EXCERPT_TOKENS in graph-tools.ts),\n[…]\nh my Outlook emails across folders.\"\n- list-mail-folder-messages: \"List read search Outlook emails within a specific mail folder.\"\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(endpoints): prepend intent verbs to mail-listing tips for better…",
"author_name": "Marc Bourget",
"author_login": "okapi-ca",
"committed_at": "2026-06-09T20:11:54Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "32a065e7ec40bff5c56d3cb7a7a0c5d71bb2fd3b",
"body": "…523)\n\nBoth acquireTokenSilent sites swallowed the AuthError and rethrew a\ngeneric message, leaving invalid_grant, interaction_required and a\nlocal cache miss indistinguishable in the logs. Bind the error and\nlog its errorCode, subError and correlationId. Diagnostics only; no\nchange to token behaviour.\n\nRefs #522\n\nCo-authored-by: Matt Whelan <matt.whelan@outlook.com>",
"is_bot": false,
"headline": "fix(auth): log MSAL error code when silent token acquisition fails (#…",
"author_name": "koopatroopa",
"author_login": "koopatroopa",
"committed_at": "2026-06-09T19:07:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b3671a3c8542abc4552cf9b6416b6cf497ae797e",
"body": "…(#517)\n\nThe oauth-authorization-server discovery handler returned raw Graph\nscopes unconditionally while its oauth-protected-resource sibling\nadvertised the GUID-form resource scope in OBO mode (since #508). RFC\n8414 clients (e.g. OpenAI Codex) followed the AS metadata, requested\nthe Graph scopes, and got a token with aud=Microsoft Graph that the OBO\nexchange rejects, failing at initialize. Give the AS handler the same\nOBO branch so both discovery docs agree (#516).",
"is_bot": false,
"headline": "fix(obo): advertise GUID-form scope in authorization-server metadata …",
"author_name": "Eirik Brandtzæg",
"author_login": "eirikb",
"committed_at": "2026-06-08T07:02:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "42254006eb80e93173cdd0294c009c65152d5781",
"body": "…ignoring it (#512)\n\nIn HTTP/OAuth bearer mode the account parameter was silently ignored and\nthe bearer user's data returned, making multi-account switching appear\nbroken (discussion #467). Now:\n\n- Tool calls with an account that doesn't match the bearer identity return\n a clear error explaining a\n[…]\nt-accounts explains that cached accounts are not reachable via the\n account parameter when serving OAuth-authenticated requests\n\nstdio mode and HTTP with --trust-proxy-auth keep full account routing.",
"is_bot": false,
"headline": "fix: refuse account parameter in HTTP/OAuth mode instead of silently …",
"author_name": "Eirik Brandtzæg",
"author_login": "eirikb",
"committed_at": "2026-06-06T07:11:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5c76aba7c4d5a4d724612d32df6125c78b00b0b0",
"body": "…(#483) (#498)\n\nThe builder stage already runs node:24 (npm 11); only the release stage\nwas left on node:20-alpine (npm 10). The committed package-lock.json is\nin a shape that npm 10's strict `npm ci` rejects (\"Missing: yaml@2.9.0\nfrom lock file\") but npm 11 accepts, so the release stage's\n`npm ci -\n[…]\n.\n\nAligning the release stage to node:24 fixes the build and, since Node 20\nreached end-of-security-support on 2026-04-30, also moves the shipped\nruntime off an EOL base onto Active LTS.\n\nCloses #483.",
"is_bot": false,
"headline": "fix(docker): bump release stage to node:24-alpine so npm ci succeeds …",
"author_name": "lestephen",
"author_login": "lestephen",
"committed_at": "2026-06-06T06:43:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d0fc464a3a6202eab26367a984932ab1a902aa7a",
"body": "* feat: add app-scoped presets (outlook, onedrive, teams)\n\nAdds three presets that expose exactly one Microsoft app each, for\nunambiguous single-app deployments:\n\n- outlook: mail + calendar + contacts\n- onedrive: drive/file operations (excluding Excel)\n- teams: chats, channels, meetings, presence (r\n[…]\nst' substring,\n and now includes org tools the regex missed (groups, presence)\n\ngraph-batch and subscription tools are intentionally untagged and only\navailable via the all preset or --enabled-tools.",
"is_bot": false,
"headline": "Feature/eirikb/app presets (#511)",
"author_name": "Eirik Brandtzæg",
"author_login": "eirikb",
"committed_at": "2026-06-06T06:07:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "34fd5c6b169ff5ee7ecc85ad519a4f04000f4af3",
"body": "The app registration section told operators to register the server's\nown callback URL as the redirect URI. The server has no callback\nendpoint in HTTP mode: /authorize forwards the MCP client's\nredirect_uri to Microsoft Entra, which delivers the authorization code\ndirectly to the client. Registering\n[…]\nomain instead breaks\nsign-in with AADSTS50011 after the user authenticates (verified\nagainst Entra).\n\nDocument the client-callback requirement, the claude.ai callback URL,\nand the AADSTS50011 pitfall.",
"is_bot": false,
"headline": "docs: fix redirect URI guidance for custom app registrations (#510)",
"author_name": "Eirik Brandtzæg",
"author_login": "eirikb",
"committed_at": "2026-06-06T04:16:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "aa23b0650407192514a912a75db660d897e73181",
"body": "In --obo mode the protected-resource metadata advertised the OBO scope\nas api://<clientId>/access_as_user. With a single Entra app acting as\nboth the API and the OBO confidential client, the user token's aud is\nthe app itself, and Azure rejects refreshing such self-tokens unless\nthe resource is the \n[…]\nso this only surfaced when the access token\nexpired ~60-90 minutes in.\n\nAdvertise <clientId>/access_as_user instead so refresh tokens bind to\nthe GUID resource and silent refresh succeeds.\n\nFixes #502",
"is_bot": false,
"headline": "fix(obo): advertise GUID-form scope so silent token refresh works (#508)",
"author_name": "Eirik Brandtzæg",
"author_login": "eirikb",
"committed_at": "2026-06-06T04:05:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b909d1ff6f375972a25b719ada718defabad792a",
"body": "…licate tool names (#509)\n\nendpoints.json contained two identical get-drive-root-item entries\n(introduced by the get-root-folder rename in dafb435). Harmless at\nruntime since generation dedupes, but confusing to read. Removed one\nand added a validation test so duplicate toolNames fail CI.\n\nRegenerating produces no diff in src/generated/, confirming no\nbehavior change.\n\nNoted in #507.",
"is_bot": false,
"headline": "fix: remove duplicate get-drive-root-item endpoint, guard against dup…",
"author_name": "Eirik Brandtzæg",
"author_login": "eirikb",
"committed_at": "2026-06-06T00:15:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4f1e77cb116b38a324ad8a51066cc14aeef044a0",
"body": "* chore(deps-dev): bump vitest and @vitest/coverage-v8\n\nBumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) and [@vitest/coverage-v8](https://github.com/vitest-dev/vitest/tree/HEAD/packages/coverage-v8). These dependencies needed to be updated together.\n\nUpdates `vitest` f\n[…]\n4\n\n---------\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Eirik Brandtzæg <eirikb@eirikb.no>",
"is_bot": true,
"headline": "chore(deps-dev): bump vitest and @vitest/coverage-v8 (#503)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-05T20:53:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "539e65d25d68ff58a5b303bb6205e08e1000787e",
"body": "Bumps [hono](https://github.com/honojs/hono) from 4.12.18 to 4.12.23.\n- [Release notes](https://github.com/honojs/hono/releases)\n- [Commits](https://github.com/honojs/hono/compare/v4.12.18...v4.12.23)\n\n---\nupdated-dependencies:\n- dependency-name: hono\n dependency-version: 4.12.23\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump hono from 4.12.18 to 4.12.23 (#506)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-05T20:42:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26806573ea91079566eceb7b1d15cc93f38a7e57",
"body": "…(#466)\n\n* feat(resilience): retry budget + circuit breaker for Microsoft Graph\n\nWraps `graph-client.ts:performRequest` with a new\n`src/lib/graph-resilience.ts` module that folds three concerns into\none call:\n\n1. **Fetch timeout** via AbortController — default 30 s, overrideable\n with MS365_MCP_GR\n[…]\ns isMethodIdempotent() helper (RFC 7231 sec 4.2.2 + RFC 5789 sec 1\nfor PATCH) and 8 new tests covering POST/PATCH/PUT/DELETE retry paths.\n\n---------\n\nCo-authored-by: Eirik Brandtzæg <eirikb@eirikb.no>",
"is_bot": false,
"headline": "feat(resilience): retry budget + circuit breaker for Microsoft Graph …",
"author_name": "Marc Bourget",
"author_login": "okapi-ca",
"committed_at": "2026-05-28T10:14:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3e5601238cc906e4ed528572a64c08a0ad68e6f9",
"body": "* feat(security): structured JSON audit log for tool invocations\n\nAdds a dedicated audit-log module that emits one JSON line per Graph\ntool invocation on stdout (captured by the container platform's log\ncollector) and to `~/.ms-365-mcp-server/logs/audit.log` (mode 0o600).\n\nForms the \"who accessed wh\n[…]\nts to stderr without\ndisturbing the production sink — Container Apps / App Service / Docker\ncapture both stdout and stderr and forward both to Log Analytics, so\nthe operational pipeline is unaffected.",
"is_bot": false,
"headline": "feat(logging): structured JSON audit log + auditLog() helper (#464)",
"author_name": "Marc Bourget",
"author_login": "okapi-ca",
"committed_at": "2026-05-23T21:33:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8da8374bb55ff7759ad20bfc1425219129183709",
"body": "Bumps [qs](https://github.com/ljharb/qs) from 6.15.0 to 6.15.2.\n- [Changelog](https://github.com/ljharb/qs/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/ljharb/qs/compare/v6.15.0...v6.15.2)\n\n---\nupdated-dependencies:\n- dependency-name: qs\n dependency-version: 6.15.2\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump qs from 6.15.0 to 6.15.2 (#495)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-23T21:15:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b271f37b769a9ab3fd28405c852e71d808d4549e",
"body": "Adds process-level unhandledRejection/uncaughtException handlers and wires\nStdioServerTransport.onerror to the logger so silent stdio crashes leave a\ndiagnostic dump (recursive cause walk, own properties, active event-loop\nresources) on stderr before the process exits.\n\nNote for #486 reporter: the p\n[…]\nefreshed on-demand via acquireTokenSilent\nfrom MCP tool calls. The silent-death symptom is real, but the trigger is\nelsewhere. These handlers give us the first actual stack trace next time\nit happens.",
"is_bot": false,
"headline": "fix: log unhandled rejections and stdio transport errors (#486) (#493)",
"author_name": "Eirik Brandtzæg",
"author_login": "eirikb",
"committed_at": "2026-05-22T10:57:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1f45fd6aeb18c3b73ad10064db95fb583e052dd3",
"body": "Sigstore provenance signed during OIDC publishing carries the GitHub\nrepo claim with its canonical casing (\"Softeria\"), and npm rejects the\npackage if package.json's repository.url differs. The mismatched\nlowercase URL was blocking the 0.112.0 publish.",
"is_bot": false,
"headline": "fix(release): use canonical Softeria casing in repository.url (#492)",
"author_name": "Eirik Brandtzæg",
"author_login": "eirikb",
"committed_at": "2026-05-22T09:35:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d82652dbfd7b7a619b4c97efb126eb2255d0fde",
"body": "Node 22 ships with npm 10.9.7, and `npm install -g npm@latest` was\ncrashing mid-upgrade (MODULE_NOT_FOUND: promise-retry), blocking every\nrelease since #487. Node 24 ships with npm 11.5.x already, so the\nexplicit upgrade step is no longer needed for OIDC trusted publishing.",
"is_bot": false,
"headline": "ci: use Node 24 on release runner to fix broken npm self-upgrade (#491)",
"author_name": "Eirik Brandtzæg",
"author_login": "eirikb",
"committed_at": "2026-05-22T08:47:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "59359a80a3dbeac9d97681133d3b53a338587a18",
"body": "The /token catch block used to flatten every Entra response to HTTP 500\nwith \"Internal server error during token exchange\", so OAuth clients\ncould not see invalid_grant / AADSTS70043 from a Conditional Access\nsign-in frequency lapse and never restarted with prompt=login.\n\nParse the upstream OAuth error body and re-emit it as a spec-compliant\n400 with error / error_description / suberror per RFC 6749 §5.2.\nNon-OAuth-shaped errors still fall through to the generic 500.",
"is_bot": false,
"headline": "fix(http): surface upstream OAuth errors from /token (#485) (#490)",
"author_name": "Eirik Brandtzæg",
"author_login": "eirikb",
"committed_at": "2026-05-22T05:04:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a041967cdcb97b767c5b268b1649ea0c34eb65a8",
"body": "- Expand --trust-proxy-auth help to note that forwarded Authorization\n headers are ignored and all callers share the locally cached identity.\n- Error at startup on --obo + --trust-proxy-auth (the pass-through skips\n the incoming bearer token that OBO would exchange).\n- Add MS365_MCP_TRUST_PROXY_AUTH env var, matching the other deployment\n flags.",
"is_bot": false,
"headline": "feat(http): trust-proxy-auth follow-ups (#489)",
"author_name": "Eirik Brandtzæg",
"author_login": "eirikb",
"committed_at": "2026-05-21T20:40:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4bcb0b7bba796960cb96fe58708eb02a92d7760d",
"body": "* Add --trust-proxy-auth to skip /mcp Bearer check in HTTP mode\n\nWhen the server runs behind a reverse proxy that has already authenticated\nthe caller, requiring the in-process Bearer middleware on /mcp forces\neither a separate OAuth flow per backend or a supergateway stdio wrap to\nwork around it. N\n[…]\nis not.\n\n* Trim --trust-proxy-auth help text to one sentence\n\n* chore: prettier\n\n---------\n\nCo-authored-by: Mizu <salmon-21@users.noreply.github.com>\nCo-authored-by: Eirik Brandtzæg <eirikb@eirikb.no>",
"is_bot": false,
"headline": "feat(http): add --trust-proxy-auth to skip Bearer check on /mcp (#482)",
"author_name": "Mizu",
"author_login": "salmon-21",
"committed_at": "2026-05-21T20:33:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "07cb363ea6b286e6c2f4c7c05a30def3e5fd8207",
"body": "Removes [uuid](https://github.com/uuidjs/uuid). It's no longer used after updating ancestor dependencies [uuid](https://github.com/uuidjs/uuid) and [@azure/msal-node](https://github.com/AzureAD/microsoft-authentication-library-for-js). These dependencies need to be updated together.\n\n\nRemoves `uuid`\n[…]\nde\"\n dependency-version: 5.2.2\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump uuid and @azure/msal-node (#488)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-21T20:16:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ceb67e071cfd9b72ced3769d1117df18e83dce33",
"body": "Drops the long-lived NPM_TOKEN secret in favor of npm's trusted\npublisher flow. Adds id-token: write permission and bumps the\nrunner's npm to >= 11.5.1 (required for OIDC publishing).",
"is_bot": false,
"headline": "ci: publish to npm via OIDC trusted publishing (#487)",
"author_name": "Eirik Brandtzæg",
"author_login": "eirikb",
"committed_at": "2026-05-21T19:25:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab368a95fd5fdc2fa506b75656dcea096e339e0b",
"body": "Lock file dropped tsup/vite-node/vitest nested yaml@2.9.0 entries in\na dependabot regen on npm 11, breaking `npm ci` (and the Dockerfile\nbuild) on Node 20 / npm 10. Re-adds the three entries so `npm ci\n--omit=dev` succeeds again on node:20-alpine. Closes #483.",
"is_bot": false,
"headline": "fix: restore nested yaml deps in package-lock.json (#484)",
"author_name": "Eirik Brandtzæg",
"author_login": "eirikb",
"committed_at": "2026-05-20T16:49:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "27c9d438a129be71313051c28a876278e7c79889",
"body": "* feat(auth): add pluggable auth cache storage\n\nAdd a provider-neutral auth cache storage abstraction with an opt-in\nexternal command provider for headless local MSAL deployments. The\ncommand protocol stores token-cache and selected-account payloads as\nopaque stamped envelopes, fails closed on stora\n[…]\nback on default storage so HTTP-mode callers do\nnot accidentally re-enable command storage.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>\n\n---------\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "feat(auth): add pluggable auth cache storage (#481)",
"author_name": "Chris Staples",
"author_login": "castaples",
"committed_at": "2026-05-19T12:32:26Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "13ce2de164cb9dcd2f6dc0bea55de9b04dbaea1a",
"body": "Add opt-in expected account pins for local MSAL authentication so\nheadless deployments fail closed instead of silently using a different\ncached account. Pinning now validates cache lookup, silent token\nselection, login persistence, and multi-account tool exposure while\nleaving HTTP, OBO, and BYOT Graph calls stateless.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "feat(auth): add strict account pinning (#480)",
"author_name": "Chris Staples",
"author_login": "castaples",
"committed_at": "2026-05-18T19:48:20Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "5bad2a54cd8a217ad21ef5af2d0c1cc7f485e775",
"body": "* feat(auth): add explicit auth scopes\n\nAdd a CLI and environment override for MSAL auth scopes so\nenterprise deployments can request a narrower consent surface than the\nenabled tool set implies. Preserve default scope derivation when no\noverride is configured and add diagnostics for missing or extr\n[…]\nscovery collect disabled-tool\nlogging from the same registry pass it uses for registration.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>\n\n---------\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "feat(auth): filter tools by allowed scopes (#478)",
"author_name": "Chris Staples",
"author_login": "castaples",
"committed_at": "2026-05-18T10:22:24Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "0dea0278e054ba01234ec2884c911b7cfcfe17d7",
"body": "Bumps [fast-xml-builder](https://github.com/NaturalIntelligence/fast-xml-builder) from 1.1.4 to 1.2.0.\n- [Changelog](https://github.com/NaturalIntelligence/fast-xml-builder/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/NaturalIntelligence/fast-xml-builder/compare/v1.1.4...v1.2.0)\n\n---\nupdat\n[…]\nder\n dependency-version: 1.2.0\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps-dev): bump fast-xml-builder from 1.1.4 to 1.2.0 (#473)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-18T08:28:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "17ca66501ab195e57cc9286637a9ee39f8727276",
"body": "Bumps [postcss](https://github.com/postcss/postcss) to 8.5.14 and updates ancestor dependencies [postcss](https://github.com/postcss/postcss) and [@redocly/cli](https://github.com/Redocly/redocly-cli). These dependencies need to be updated together.\n\n\nUpdates `postcss` from 8.5.8 to 8.5.14\n- [Releas\n[…]\ndency-version: 2.30.6\n dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump postcss and @redocly/cli (#474)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-18T08:27:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d484440c68c9a918aaff2b8199d4d96057ade495",
"body": "Bumps [dompurify](https://github.com/cure53/DOMPurify) from 3.3.3 to 3.4.3.\n- [Release notes](https://github.com/cure53/DOMPurify/releases)\n- [Commits](https://github.com/cure53/DOMPurify/compare/3.3.3...3.4.3)\n\n---\nupdated-dependencies:\n- dependency-name: dompurify\n dependency-version: 3.4.3\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps-dev): bump dompurify from 3.3.3 to 3.4.3 (#475)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-18T08:27:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1304dbc71a3e9ed36b681f7a54cc6e3e8565cca0",
"body": "Bumps [fast-xml-parser](https://github.com/NaturalIntelligence/fast-xml-parser) from 5.5.9 to 5.8.0.\n- [Release notes](https://github.com/NaturalIntelligence/fast-xml-parser/releases)\n- [Changelog](https://github.com/NaturalIntelligence/fast-xml-parser/blob/master/CHANGELOG.md)\n- [Commits](https://g\n[…]\nser\n dependency-version: 5.8.0\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps-dev): bump fast-xml-parser from 5.5.9 to 5.8.0 (#476)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-18T08:27:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "38c95afa2505bfbbe84b25fc3934500d0c1ba7dc",
"body": "Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.0 to 3.1.2.\n- [Release notes](https://github.com/fastify/fast-uri/releases)\n- [Commits](https://github.com/fastify/fast-uri/compare/v3.1.0...v3.1.2)\n\n---\nupdated-dependencies:\n- dependency-name: fast-uri\n dependency-version: 3.1.2\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump fast-uri from 3.1.0 to 3.1.2 (#469)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-15T10:53:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f5558267d6fc610bd5c04f0a815210aa7daec45",
"body": "Bumps [hono](https://github.com/honojs/hono) from 4.12.12 to 4.12.18.\n- [Release notes](https://github.com/honojs/hono/releases)\n- [Commits](https://github.com/honojs/hono/compare/v4.12.12...v4.12.18)\n\n---\nupdated-dependencies:\n- dependency-name: hono\n dependency-version: 4.12.18\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump hono from 4.12.12 to 4.12.18 (#472)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-15T10:51:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1160d978621085f8d48380002eabd7567c0443d5",
"body": "Bumps [protobufjs](https://github.com/protobufjs/protobuf.js) from 7.5.4 to 7.5.8.\n- [Release notes](https://github.com/protobufjs/protobuf.js/releases)\n- [Changelog](https://github.com/protobufjs/protobuf.js/blob/protobufjs-v7.5.8/CHANGELOG.md)\n- [Commits](https://github.com/protobufjs/protobuf.js/\n[…]\nfjs\n dependency-version: 7.5.8\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps-dev): bump protobufjs from 7.5.4 to 7.5.8 (#470)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-05-15T10:45:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f8e1e5bed0f38f855e12718635e57a981db80604",
"body": "…ts (#424)\n\n* feat: targeted Excel range formatting + merge/clear/usedRange endpoints\n\nFollow-up to #423 (Excel range write endpoints) — closes additional\ngaps where Graph supports the operation but the MCP either had a\nbroken/unaddressed endpoint or no endpoint at all.\n\nEndpoint changes\n- format-ex\n[…]\nprops).\n- get-excel-used-range: Files.Read to Files.ReadWrite, matching the\n documented delegated permission for workbook GET endpoints.\n\n---------\n\nCo-authored-by: Eirik Brandtzæg <eirikb@eirikb.no>",
"is_bot": false,
"headline": "feat: targeted Excel range formatting + merge/clear/usedRange endpoin…",
"author_name": "Bruce",
"author_login": "BruceGao20",
"committed_at": "2026-05-14T20:14:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ec9acfc9d8b05746c97d77a7a0dcd8c5dbfff385",
"body": "* fix(oauth): derive /authorize fallback scopes from configured flags\n\nThe /authorize handler fell back to a hardcoded\n\"User.Read Files.Read Mail.Read offline_access\" scope set when the MCP\nclient didn't pass scope, ignoring --preset, --enabled-tools, --org-mode,\nand --read-only. Tenants whose app r\n[…]\nt of\nscopes_supported so MCP clients don't surface it on the consent line).\nUnify the two branches (client-provided scope vs. computed fallback)\nsince both now augment the base scope set the same way.",
"is_bot": false,
"headline": "fix(oauth): honor preset/enabled-tools/read-only on /authorize (#460)",
"author_name": "Eirik Brandtzæg",
"author_login": "eirikb",
"committed_at": "2026-05-13T11:51:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fc532afb2de17dbb070ff58777478b7b7168c059",
"body": "…-601) (#456)\n\n* fix(oauth): validate redirect_uri before forwarding to Microsoft (CWE-601)\n\nThe HTTP /authorize endpoint forwarded the client-supplied redirect_uri\nparameter directly to Microsoft's authorization endpoint without any\nlocal validation. Microsoft Entra performs its own redirect URI ch\n[…]\nt src/server.ts import to satisfy prettier --check (CI build)\n- Add 'Redirect URI Validation' section to docs/deployment.md covering\n default behaviour and the MS365_MCP_ALLOWED_REDIRECT_URIS env var",
"is_bot": false,
"headline": "fix(oauth): validate redirect_uri before forwarding to Microsoft (CWE…",
"author_name": "Sebastion",
"author_login": "sebastiondev",
"committed_at": "2026-05-09T08:38:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "54525a1720f60d230674df63269e51521b4b0c67",
"body": "The server already exposes reply-mail-message, reply-all-mail-message and\nforward-mail-message for personal mailboxes via /me/messages/{id}/{action},\nplus send-shared-mailbox-mail and create-shared-mailbox-draft for shared\nmailboxes. The matching reply/replyAll/forward operations on shared\nmailboxes\n[…]\n-mailbox-mail.\n\nRefs:\nhttps://learn.microsoft.com/en-us/graph/api/message-reply\nhttps://learn.microsoft.com/en-us/graph/api/message-replyall\nhttps://learn.microsoft.com/en-us/graph/api/message-forward",
"is_bot": false,
"headline": "feat: add reply, replyAll and forward tools for shared mailboxes (#457)",
"author_name": "Eliott",
"author_login": "EliottDelhaye",
"committed_at": "2026-05-09T07:14:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "25e52e8e496f5b30a92cd4467e41e4794be45bf0",
"body": "…455)\n\nLog files written to MS365_MCP_LOG_DIR (default ~/.ms-365-mcp-server/logs)\nwere created with the process default umask, which on many systems leaves\nthem group/world-readable. Log lines can incidentally include error\nmessages from MSAL or fetch that contain token fragments or other\nsensitive \n[…]\nteStream options, and chmod existing files/directories on\nstartup to tighten permissions in place. chmod is best-effort to remain\ncompatible with platforms (e.g. Windows) that don't honor POSIX modes.",
"is_bot": false,
"headline": "fix(logger): restrict log file permissions to owner-only (CWE-532) (#…",
"author_name": "Sebastion",
"author_login": "sebastiondev",
"committed_at": "2026-05-08T18:28:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a9acd8b5a41eb45383a6e8126f96ad1b6a59207d",
"body": "* chore: ignore local DEPLOY.md (LCI-internal deployment notes)\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>\n\n* chore: use npm ci and add .dockerignore\n\n- Switch `npm i` -> `npm ci` in both build stages: deterministic\n installs from package-lock.json that fail fast on lockfile drift.\n- \n[…]\n contributor-local\n deployment notes, not relevant to upstream Docker hardening.\n\n---------\n\nCo-authored-by: Claude Opus 4.7 <noreply@anthropic.com>\nCo-authored-by: Eirik Brandtzæg <eirikb@eirikb.no>",
"is_bot": false,
"headline": "chore: use npm ci and add .dockerignore (#444)",
"author_name": "Marc Bourget",
"author_login": "okapi-ca",
"committed_at": "2026-05-08T12:16:18Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a0f309967ab7be67e7bdb0add1ffe5c0e79f0862",
"body": "* fix: correct llmTip inaccuracies in recently-added endpoints\n\nCleanup pass over PRs #445-#451. Each llmTip claim verified against\nMicrosoft Learn v1.0 docs.\n\nFunctional bugs (would cause LLM runtime errors):\n- list-supported-time-zones: TimeZoneStandard is Windows/Iana (PascalCase)\n- list-onenote-\n[…]\nence, set-my-status-message,\nget-onenote-notebook-from-web-url, send-my-activity-notification all\nkeep it). The removal in 5643fb0 was a stylistic call, not a doc\nfact, and broke the local convention.",
"is_bot": false,
"headline": "fix: correct llmTip inaccuracies in recently-added endpoints (#454)",
"author_name": "Eirik Brandtzæg",
"author_login": "eirikb",
"committed_at": "2026-05-08T11:36:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5c190e694931487feca966bb386ee4a77acd3d4e",
"body": "…(#445)\n\n* chore: ignore local DEPLOY.md (LCI-internal deployment notes)\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>\n\n* feat: add presence write actions and teamwork activity notifications\n\nAdds 8 delegated endpoints in two complementary clusters:\n\nPresence write (5):\n- set-my-presence \n[…]\n on any of these eight\nendpoints, so each entry uses workScopes only (no scopes).\n\n---------\n\nCo-authored-by: Claude Opus 4.7 <noreply@anthropic.com>\nCo-authored-by: Eirik Brandtzæg <eirikb@eirikb.no>",
"is_bot": false,
"headline": "feat: add presence write actions and teamwork activity notifications …",
"author_name": "Marc Bourget",
"author_login": "okapi-ca",
"committed_at": "2026-05-08T11:25:37Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "9e2126a691d97c39c14a2319a4089c2ed433a5a8",
"body": "…s (#446)\n\n* chore: ignore local DEPLOY.md (LCI-internal deployment notes)\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>\n\n* feat: add OneNote transverse list and shared-link resolution endpoints\n\nAdds 3 OneNote endpoints that fill clear gaps in the current coverage:\n\n- list-onenote-pages \n[…]\ns.Read (least privileged for reads in this server's\nexisting OneNote convention).\n\n---------\n\nCo-authored-by: Claude Opus 4.7 <noreply@anthropic.com>\nCo-authored-by: Eirik Brandtzæg <eirikb@eirikb.no>",
"is_bot": false,
"headline": "feat: add OneNote transverse list and shared-link resolution endpoint…",
"author_name": "Marc Bourget",
"author_login": "okapi-ca",
"committed_at": "2026-05-08T09:36:21Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "180466360ea405ae81817dbc18e409e3c9d27633",
"body": "* chore: ignore local DEPLOY.md (LCI-internal deployment notes)\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>\n\n* feat: add profile photo upload and To Do list CRUD endpoints\n\nAdds 4 delegated endpoints in two complementary clusters:\n\nProfile photo (1):\n- upload-my-profile-photo PUT /me/p\n[…]\natching the convention used by the\nexisting todoTask CRUD endpoints in this file.\n\n---------\n\nCo-authored-by: Claude Opus 4.7 <noreply@anthropic.com>\nCo-authored-by: Eirik Brandtzæg <eirikb@eirikb.no>",
"is_bot": false,
"headline": "feat: add profile photo upload and To Do list CRUD endpoints (#447)",
"author_name": "Marc Bourget",
"author_login": "okapi-ca",
"committed_at": "2026-05-08T09:12:12Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "bcb44969fd52c29d7bcd0a3d492df895ab25d814",
"body": "* chore: ignore local DEPLOY.md (LCI-internal deployment notes)\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>\n\n* feat: add contact folder CRUD and folder-scoped contact endpoints\n\nAdds 6 delegated endpoints that complete the contact-organization\nstory for Outlook contacts:\n\nContact folder\n[…]\n is intentionally not exposed in this PR — happy to\nadd as a follow-up if useful.\n\n---------\n\nCo-authored-by: Claude Opus 4.7 <noreply@anthropic.com>\nCo-authored-by: Eirik Brandtzæg <eirikb@eirikb.no>",
"is_bot": false,
"headline": "feat: add contact folder CRUD and folder-scoped contact endpoints (#448)",
"author_name": "Marc Bourget",
"author_login": "okapi-ca",
"committed_at": "2026-05-08T08:56:25Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "66abf38fd35e2e84e7a6c80756c74cae56f99420",
"body": "* chore: ignore local DEPLOY.md (LCI-internal deployment notes)\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>\n\n* feat: add contact sub-folder list and create endpoints\n\nAdds 2 endpoints to traverse and extend the contact-folder hierarchy\nexposed by the parent contactFolders surface:\n\n- li\n[…]\nact-folder convention:\n- list uses Contacts.Read\n- create uses Contacts.ReadWrite\n\n---------\n\nCo-authored-by: Claude Opus 4.7 <noreply@anthropic.com>\nCo-authored-by: Eirik Brandtzæg <eirikb@eirikb.no>",
"is_bot": false,
"headline": "feat: add contact sub-folder list and create endpoints (#449)",
"author_name": "Marc Bourget",
"author_login": "okapi-ca",
"committed_at": "2026-05-08T08:48:05Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ad3fcee50a8b9b3415de49e3a99cab728699eeb8",
"body": "Adds 4 delegated endpoints that enable agents to drive the Outlook\ncalendar-sharing surface:\n\n- list-my-calendar-permissions GET /me/calendar/calendarPermissions\n- create-my-calendar-permission POST /me/calendar/calendarPermissions\n- update-my-calendar-permission PATCH /me/calendar/cale\n[…]\nlete llmTip warns about this.\n\nPermissions match the existing calendar convention:\n- list uses Calendars.Read\n- writes use Calendars.ReadWrite\n\nBoth work and personal Microsoft accounts are supported.",
"is_bot": false,
"headline": "feat: add calendar sharing and delegate permission endpoints (#450)",
"author_name": "Marc Bourget",
"author_login": "okapi-ca",
"committed_at": "2026-05-08T08:19:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9888874a38a39d60334b676898014d3aded28a5a",
"body": "* chore: ignore local DEPLOY.md (LCI-internal deployment notes)\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>\n\n* feat: add MailTips and supported time zone/language lookups\n\nAdds 3 delegated endpoints that surface Outlook server-side reference\ndata and pre-send recipient context — small b\n[…]\n User.Read (mailbox-server reference\n data tied to the user resource)\n\nAll three support both work and personal Microsoft accounts.\n\n---------\n\nCo-authored-by: Claude Opus 4.7 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add MailTips and supported time zone/language lookups (#451)",
"author_name": "Marc Bourget",
"author_login": "okapi-ca",
"committed_at": "2026-05-08T08:01:53Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "9158e1b18491c3d47df6650c4a3d767ef8ab0bd7",
"body": "…y regexes (#442)\n\nSurfaces get-schedule and find-meeting-times for category=calendar in\nsearch-tools and for --preset calendar/work, where the previous regexes\nmatched neither the tool names nor (for find-meeting-times) the path.",
"is_bot": false,
"headline": "fix(discovery): include schedule and meeting in calendar/work categor…",
"author_name": "Eirik Brandtzæg",
"author_login": "eirikb",
"committed_at": "2026-05-06T09:49:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0dd7b5a16f6ddf5d8e16abef395fe503a8861cee",
"body": "POST /users/{user-id}/messages creates a draft in another user's\nmailbox. Fixes #400 — create-draft-email is hardcoded to /me/messages\nwhich fails under app-only auth. Matches the pattern used by other\nshared-mailbox tools (list/get/send).",
"is_bot": false,
"headline": "feat: add create-shared-mailbox-draft endpoint (#441)",
"author_name": "Eirik Brandtzæg",
"author_login": "eirikb",
"committed_at": "2026-05-06T08:49:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13f2b74a8fa9f35e3fca2de242ae534f78c278a1",
"body": "Discovery mode now respects --enabled-tools (previously the regex was passed\nto registerGraphTools but ignored by registerDiscoveryTools, so a user running\n--discovery --preset mail still saw every tool in search-tools). The regex\nfilter is now threaded through buildToolsRegistry and applied to util\n[…]\ns by their readOnlyHint, so future\nwrite-utility additions don't slip past --read-only. Both current utilities\n(download-bytes, parse-teams-url) have readOnlyHint: true so behavior is\nunchanged today.",
"is_bot": false,
"headline": "feat: --enabled-tools applies to discovery mode and utility tools (#440)",
"author_name": "Eirik Brandtzæg",
"author_login": "eirikb",
"committed_at": "2026-05-06T07:53:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e9e89dc3c27d7149876abb2eeeb9d3deba059d78",
"body": "…#439)\n\nCloses #414. Upload body now accepts a base64 string (was z.instanceof(File),\nunusable from JSON-RPC clients). Generator post-processes the openapi-zod-client\noutput to swap the schema; runtime decodes to bytes before PUT.\n\nReplaces 6 per-entity download tools (download-onedrive-file-content\n[…]\nntent). Discovery mode\nsurfaces it through a UTILITY_TOOLS registry shared with regular mode;\nparse-teams-url moves into the same registry. Listing-tool llmTips updated\nto direct LLMs at the new path.",
"is_bot": false,
"headline": "feat: replace per-entity file downloads with generic download-bytes (…",
"author_name": "Eirik Brandtzæg",
"author_login": "eirikb",
"committed_at": "2026-05-06T07:10:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5a3122b3e21277cfc2b3687274a818d3b1ef318a",
"body": "* feat: targeted Excel range formatting + merge/clear/usedRange endpoints\n\nFollow-up to #423 (Excel range write endpoints) — closes additional\ngaps where Graph supports the operation but the MCP either had a\nbroken/unaddressed endpoint or no endpoint at all.\n\nEndpoint changes\n- format-excel-range: f\n[…]\nis PR will\nbe a clean diff; otherwise these two changes can be combined.\n\nVerification\n- npm run generate: clean\n- npm run build: success; graph-batch surfaces in client.js\n- npm test: 173/173 passing",
"is_bot": false,
"headline": "feat: $batch meta-endpoint for combining Graph requests (#426)",
"author_name": "Bruce",
"author_login": "BruceGao20",
"committed_at": "2026-05-04T13:22:01Z",
"body_truncated": true,
"is_coding_agent": false
}
],
"releases_count": 100,
"commits_last_year": 327,
"latest_release_at": "2026-07-21T16:19:29Z",
"latest_release_tag": "v0.132.0",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 42,
"days_since_latest_release": 2,
"mean_days_between_releases": 3.1
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 50,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "@softeria/ms-365-mcp-server",
"exists": true,
"license": "MIT",
"keywords": [
"microsoft",
"365",
"mcp",
"server"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@softeria/ms-365-mcp-server",
"is_deprecated": false,
"latest_version": "0.132.1",
"repository_url": "https://github.com/Softeria/ms-365-mcp-server",
"versions_count": 257,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 108703,
"first_published_at": "2025-04-03T19:33:15.961000Z",
"latest_published_at": "2026-07-23T16:36:54.450000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 0
}
]
},
"popularity": {
"forks": 336,
"stars": 868,
"watchers": 9,
"fork_history": {
"days": [
{
"date": "2025-04-22",
"count": 1
},
{
"date": "2025-04-24",
"count": 1
},
{
"date": "2025-04-27",
"count": 1
},
{
"date": "2025-05-01",
"count": 1
},
{
"date": "2025-05-08",
"count": 1
},
{
"date": "2025-05-13",
"count": 1
},
{
"date": "2025-05-17",
"count": 1
},
{
"date": "2025-05-23",
"count": 1
},
{
"date": "2025-05-27",
"count": 2
},
{
"date": "2025-05-29",
"count": 1
},
{
"date": "2025-06-05",
"count": 2
},
{
"date": "2025-06-07",
"count": 1
},
{
"date": "2025-06-12",
"count": 2
},
{
"date": "2025-06-15",
"count": 2
},
{
"date": "2025-06-16",
"count": 1
},
{
"date": "2025-06-19",
"count": 2
},
{
"date": "2025-06-20",
"count": 1
},
{
"date": "2025-06-25",
"count": 3
},
{
"date": "2025-06-28",
"count": 1
},
{
"date": "2025-06-30",
"count": 4
},
{
"date": "2025-07-01",
"count": 2
},
{
"date": "2025-07-02",
"count": 2
},
{
"date": "2025-07-03",
"count": 1
},
{
"date": "2025-07-07",
"count": 1
},
{
"date": "2025-07-13",
"count": 2
},
{
"date": "2025-07-14",
"count": 3
},
{
"date": "2025-07-16",
"count": 1
},
{
"date": "2025-07-17",
"count": 1
},
{
"date": "2025-07-24",
"count": 2
},
{
"date": "2025-07-25",
"count": 1
},
{
"date": "2025-07-31",
"count": 1
},
{
"date": "2025-08-03",
"count": 1
},
{
"date": "2025-08-04",
"count": 2
},
{
"date": "2025-08-07",
"count": 1
},
{
"date": "2025-08-10",
"count": 1
},
{
"date": "2025-08-11",
"count": 1
},
{
"date": "2025-08-16",
"count": 1
},
{
"date": "2025-08-19",
"count": 1
},
{
"date": "2025-08-20",
"count": 3
},
{
"date": "2025-08-22",
"count": 1
},
{
"date": "2025-08-25",
"count": 2
},
{
"date": "2025-08-27",
"count": 2
},
{
"date": "2025-08-31",
"count": 1
},
{
"date": "2025-09-04",
"count": 1
},
{
"date": "2025-09-05",
"count": 1
},
{
"date": "2025-09-12",
"count": 2
},
{
"date": "2025-09-13",
"count": 1
},
{
"date": "2025-09-14",
"count": 1
},
{
"date": "2025-09-15",
"count": 1
},
{
"date": "2025-09-17",
"count": 1
},
{
"date": "2025-09-27",
"count": 1
},
{
"date": "2025-09-29",
"count": 2
},
{
"date": "2025-09-30",
"count": 1
},
{
"date": "2025-10-06",
"count": 1
},
{
"date": "2025-10-09",
"count": 1
},
{
"date": "2025-10-10",
"count": 1
},
{
"date": "2025-10-13",
"count": 1
},
{
"date": "2025-10-15",
"count": 1
},
{
"date": "2025-10-17",
"count": 1
},
{
"date": "2025-10-18",
"count": 1
},
{
"date": "2025-10-23",
"count": 2
},
{
"date": "2025-10-25",
"count": 2
},
{
"date": "2025-10-29",
"count": 1
},
{
"date": "2025-11-03",
"count": 1
},
{
"date": "2025-11-04",
"count": 2
},
{
"date": "2025-11-05",
"count": 1
},
{
"date": "2025-11-06",
"count": 1
},
{
"date": "2025-11-07",
"count": 2
},
{
"date": "2025-11-08",
"count": 2
},
{
"date": "2025-11-11",
"count": 2
},
{
"date": "2025-11-14",
"count": 1
},
{
"date": "2025-11-16",
"count": 1
},
{
"date": "2025-11-17",
"count": 1
},
{
"date": "2025-11-20",
"count": 1
},
{
"date": "2025-11-21",
"count": 1
},
{
"date": "2025-11-30",
"count": 2
},
{
"date": "2025-12-01",
"count": 3
},
{
"date": "2025-12-02",
"count": 2
},
{
"date": "2025-12-04",
"count": 1
},
{
"date": "2025-12-11",
"count": 1
},
{
"date": "2025-12-13",
"count": 1
},
{
"date": "2025-12-19",
"count": 1
},
{
"date": "2025-12-20",
"count": 1
},
{
"date": "2025-12-22",
"count": 1
},
{
"date": "2026-01-06",
"count": 1
},
{
"date": "2026-01-07",
"count": 1
},
{
"date": "2026-01-13",
"count": 1
},
{
"date": "2026-01-14",
"count": 1
},
{
"date": "2026-01-15",
"count": 1
},
{
"date": "2026-01-16",
"count": 1
},
{
"date": "2026-01-19",
"count": 1
},
{
"date": "2026-01-22",
"count": 1
},
{
"date": "2026-01-26",
"count": 1
},
{
"date": "2026-01-27",
"count": 1
},
{
"date": "2026-01-30",
"count": 2
},
{
"date": "2026-01-31",
"count": 1
},
{
"date": "2026-02-01",
"count": 1
},
{
"date": "2026-02-02",
"count": 1
},
{
"date": "2026-02-04",
"count": 2
},
{
"date": "2026-02-08",
"count": 1
},
{
"date": "2026-02-10",
"count": 1
},
{
"date": "2026-02-11",
"count": 1
},
{
"date": "2026-02-12",
"count": 1
},
{
"date": "2026-02-13",
"count": 1
},
{
"date": "2026-02-14",
"count": 2
},
{
"date": "2026-02-15",
"count": 1
},
{
"date": "2026-02-16",
"count": 1
},
{
"date": "2026-02-17",
"count": 1
},
{
"date": "2026-02-18",
"count": 1
},
{
"date": "2026-02-21",
"count": 1
},
{
"date": "2026-02-22",
"count": 1
},
{
"date": "2026-02-23",
"count": 3
},
{
"date": "2026-02-26",
"count": 1
},
{
"date": "2026-02-27",
"count": 2
},
{
"date": "2026-02-28",
"count": 3
},
{
"date": "2026-03-02",
"count": 1
},
{
"date": "2026-03-03",
"count": 3
},
{
"date": "2026-03-04",
"count": 2
},
{
"date": "2026-03-05",
"count": 1
},
{
"date": "2026-03-06",
"count": 1
},
{
"date": "2026-03-08",
"count": 1
},
{
"date": "2026-03-10",
"count": 1
},
{
"date": "2026-03-11",
"count": 1
},
{
"date": "2026-03-15",
"count": 2
},
{
"date": "2026-03-16",
"count": 3
},
{
"date": "2026-03-17",
"count": 1
},
{
"date": "2026-03-18",
"count": 1
},
{
"date": "2026-03-19",
"count": 2
},
{
"date": "2026-03-20",
"count": 5
},
{
"date": "2026-03-22",
"count": 1
},
{
"date": "2026-03-23",
"count": 5
},
{
"date": "2026-03-24",
"count": 2
},
{
"date": "2026-03-25",
"count": 4
},
{
"date": "2026-03-27",
"count": 4
},
{
"date": "2026-03-28",
"count": 1
},
{
"date": "2026-03-29",
"count": 1
},
{
"date": "2026-03-30",
"count": 2
},
{
"date": "2026-03-31",
"count": 1
},
{
"date": "2026-04-01",
"count": 5
},
{
"date": "2026-04-02",
"count": 1
},
{
"date": "2026-04-04",
"count": 2
},
{
"date": "2026-04-05",
"count": 1
},
{
"date": "2026-04-08",
"count": 2
},
{
"date": "2026-04-09",
"count": 3
},
{
"date": "2026-04-10",
"count": 1
},
{
"date": "2026-04-12",
"count": 2
},
{
"date": "2026-04-13",
"count": 2
},
{
"date": "2026-04-14",
"count": 2
},
{
"date": "2026-04-15",
"count": 2
},
{
"date": "2026-04-17",
"count": 1
},
{
"date": "2026-04-18",
"count": 1
},
{
"date": "2026-04-19",
"count": 2
},
{
"date": "2026-04-20",
"count": 1
},
{
"date": "2026-04-21",
"count": 2
},
{
"date": "2026-04-23",
"count": 1
},
{
"date": "2026-04-24",
"count": 2
},
{
"date": "2026-04-25",
"count": 3
},
{
"date": "2026-04-27",
"count": 3
},
{
"date": "2026-04-28",
"count": 1
},
{
"date": "2026-04-30",
"count": 2
},
{
"date": "2026-05-02",
"count": 2
},
{
"date": "2026-05-04",
"count": 1
},
{
"date": "2026-05-05",
"count": 1
},
{
"date": "2026-05-06",
"count": 3
},
{
"date": "2026-05-08",
"count": 6
},
{
"date": "2026-05-09",
"count": 2
},
{
"date": "2026-05-11",
"count": 1
},
{
"date": "2026-05-12",
"count": 1
},
{
"date": "2026-05-13",
"count": 3
},
{
"date": "2026-05-15",
"count": 6
},
{
"date": "2026-05-17",
"count": 1
},
{
"date": "2026-05-19",
"count": 1
},
{
"date": "2026-05-20",
"count": 2
},
{
"date": "2026-05-21",
"count": 5
},
{
"date": "2026-05-22",
"count": 1
},
{
"date": "2026-05-23",
"count": 1
},
{
"date": "2026-05-25",
"count": 1
},
{
"date": "2026-05-26",
"count": 1
},
{
"date": "2026-05-27",
"count": 1
},
{
"date": "2026-05-28",
"count": 1
},
{
"date": "2026-05-30",
"count": 2
},
{
"date": "2026-06-03",
"count": 3
},
{
"date": "2026-06-04",
"count": 1
},
{
"date": "2026-06-06",
"count": 1
},
{
"date": "2026-06-08",
"count": 1
},
{
"date": "2026-06-09",
"count": 2
},
{
"date": "2026-06-10",
"count": 1
},
{
"date": "2026-06-11",
"count": 2
},
{
"date": "2026-06-16",
"count": 2
},
{
"date": "2026-06-18",
"count": 3
},
{
"date": "2026-06-22",
"count": 1
},
{
"date": "2026-06-23",
"count": 2
},
{
"date": "2026-06-25",
"count": 6
},
{
"date": "2026-06-26",
"count": 1
},
{
"date": "2026-06-29",
"count": 1
},
{
"date": "2026-06-30",
"count": 2
},
{
"date": "2026-07-01",
"count": 2
},
{
"date": "2026-07-03",
"count": 1
},
{
"date": "2026-07-05",
"count": 1
},
{
"date": "2026-07-06",
"count": 1
},
{
"date": "2026-07-07",
"count": 2
},
{
"date": "2026-07-09",
"count": 1
},
{
"date": "2026-07-14",
"count": 3
},
{
"date": "2026-07-16",
"count": 2
},
{
"date": "2026-07-17",
"count": 1
},
{
"date": "2026-07-19",
"count": 1
},
{
"date": "2026-07-20",
"count": 1
},
{
"date": "2026-07-22",
"count": 2
}
],
"complete": true,
"collected": 334,
"total_forks": 336
},
"star_history": null,
"open_issues_and_prs": 5
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": true,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 76016,
"source_files_sampled": 92,
"oversized_source_files": 2,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "fast-uri",
"direct": false,
"version": "3.1.2",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-4c8g-83qw-93j6",
"GHSA-v2hh-gcrm-f6hx"
],
"fixed_version": "4.1.1",
"advisory_count": 2,
"oldest_advisory_days": 1
},
{
"name": "@hono/node-server",
"direct": false,
"version": "1.19.13",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 5.9,
"advisory_ids": [
"GHSA-frvp-7c67-39w9"
],
"fixed_version": "2.0.5",
"advisory_count": 1,
"oldest_advisory_days": 1
},
{
"name": "esbuild",
"direct": false,
"version": "0.27.4",
"severity": "low",
"ecosystem": "npm",
"cvss_score": 2.5,
"advisory_ids": [
"GHSA-g7r4-m6w7-qqqr"
],
"fixed_version": "0.28.1",
"advisory_count": 1,
"oldest_advisory_days": 40
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"low": 1,
"high": 1,
"moderate": 1
},
"advisory_count": 4,
"affected_count": 3,
"assessed_count": 864,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "@azure/msal-node",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^5.2.2"
},
{
"name": "@modelcontextprotocol/sdk",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.29.0"
},
{
"name": "@toon-format/toon",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^0.8.0"
},
{
"name": "commander",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^11.1.0"
},
{
"name": "dotenv",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^17.0.1"
},
{
"name": "express",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^5.2.1"
},
{
"name": "express-rate-limit",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^7.5.1"
},
{
"name": "helmet",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^8.1.0"
},
{
"name": "js-yaml",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.1.0"
},
{
"name": "open",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^11.0.0"
},
{
"name": "winston",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^3.17.0"
},
{
"name": "zod",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^3.24.2"
},
{
"name": "zod-to-json-schema",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^3.25.1"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "@azure/msal-node",
"direct": true,
"version": "5.2.2",
"ecosystem": "npm"
},
{
"name": "@modelcontextprotocol/sdk",
"direct": true,
"version": "1.29.0",
"ecosystem": "npm"
},
{
"name": "@toon-format/toon",
"direct": true,
"version": "0.8.0",
"ecosystem": "npm"
},
{
"name": "commander",
"direct": true,
"version": "11.1.0",
"ecosystem": "npm"
},
{
"name": "commander",
"direct": true,
"version": "4.1.1",
"ecosystem": "npm"
},
{
"name": "dotenv",
"direct": true,
"version": "17.3.1",
"ecosystem": "npm"
},
{
"name": "express",
"direct": true,
"version": "5.2.1",
"ecosystem": "npm"
},
{
"name": "express-rate-limit",
"direct": true,
"version": "7.5.1",
"ecosystem": "npm"
},
{
"name": "express-rate-limit",
"direct": true,
"version": "8.5.2",
"ecosystem": "npm"
},
{
"name": "helmet",
"direct": true,
"version": "8.2.0",
"ecosystem": "npm"
},
{
"name": "js-yaml",
"direct": true,
"version": "4.3.0",
"ecosystem": "npm"
},
{
"name": "open",
"direct": true,
"version": "10.2.0",
"ecosystem": "npm"
},
{
"name": "open",
"direct": true,
"version": "11.0.0",
"ecosystem": "npm"
},
{
"name": "winston",
"direct": true,
"version": "3.19.0",
"ecosystem": "npm"
},
{
"name": "zod",
"direct": true,
"version": "3.25.76",
"ecosystem": "npm"
},
{
"name": "zod-to-json-schema",
"direct": true,
"version": "3.25.1",
"ecosystem": "npm"
},
{
"name": "@actions/core",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "@actions/exec",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "@actions/http-client",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "@actions/io",
"direct": false,
"version": "3.0.2",
"ecosystem": "npm"
},
{
"name": "@azure-rest/core-client",
"direct": false,
"version": "2.5.1",
"ecosystem": "npm"
},
{
"name": "@azure/abort-controller",
"direct": false,
"version": "2.1.2",
"ecosystem": "npm"
},
{
"name": "@azure/core-auth",
"direct": false,
"version": "1.10.1",
"ecosystem": "npm"
},
{
"name": "@azure/core-client",
"direct": false,
"version": "1.10.1",
"ecosystem": "npm"
},
{
"name": "@azure/core-http-compat",
"direct": false,
"version": "2.3.2",
"ecosystem": "npm"
},
{
"name": "@azure/core-lro",
"direct": false,
"version": "2.7.2",
"ecosystem": "npm"
},
{
"name": "@azure/core-paging",
"direct": false,
"version": "1.6.2",
"ecosystem": "npm"
},
{
"name": "@azure/core-rest-pipeline",
"direct": false,
"version": "1.23.0",
"ecosystem": "npm"
},
{
"name": "@azure/core-tracing",
"direct": false,
"version": "1.3.1",
"ecosystem": "npm"
},
{
"name": "@azure/core-util",
"direct": false,
"version": "1.13.1",
"ecosystem": "npm"
},
{
"name": "@azure/identity",
"direct": false,
"version": "4.13.1",
"ecosystem": "npm"
},
{
"name": "@azure/keyvault-common",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "@azure/keyvault-secrets",
"direct": false,
"version": "4.10.0",
"ecosystem": "npm"
},
{
"name": "@azure/logger",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "@azure/msal-browser",
"direct": false,
"version": "5.6.1",
"ecosystem": "npm"
},
{
"name": "@azure/msal-common",
"direct": false,
"version": "16.4.0",
"ecosystem": "npm"
},
{
"name": "@azure/msal-common",
"direct": false,
"version": "16.6.2",
"ecosystem": "npm"
},
{
"name": "@babel/code-frame",
"direct": false,
"version": "7.29.0",
"ecosystem": "npm"
},
{
"name": "@babel/helper-string-parser",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/helper-validator-identifier",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/parser",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/types",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@bcoe/v8-coverage",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "@colors/colors",
"direct": false,
"version": "1.5.0",
"ecosystem": "npm"
},
{
"name": "@colors/colors",
"direct": false,
"version": "1.6.0",
"ecosystem": "npm"
},
{
"name": "@dabh/diagnostics",
"direct": false,
"version": "2.0.8",
"ecosystem": "npm"
},
{
"name": "@emnapi/core",
"direct": false,
"version": "1.10.0",
"ecosystem": "npm"
},
{
"name": "@emnapi/runtime",
"direct": false,
"version": "1.10.0",
"ecosystem": "npm"
},
{
"name": "@emnapi/wasi-threads",
"direct": false,
"version": "1.2.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/aix-ppc64",
"direct": false,
"version": "0.27.4",
"ecosystem": "npm"
},
{
"name": "@esbuild/android-arm",
"direct": false,
"version": "0.27.4",
"ecosystem": "npm"
},
{
"name": "@esbuild/android-arm64",
"direct": false,
"version": "0.27.4",
"ecosystem": "npm"
},
{
"name": "@esbuild/android-x64",
"direct": false,
"version": "0.27.4",
"ecosystem": "npm"
},
{
"name": "@esbuild/darwin-arm64",
"direct": false,
"version": "0.27.4",
"ecosystem": "npm"
},
{
"name": "@esbuild/darwin-x64",
"direct": false,
"version": "0.27.4",
"ecosystem": "npm"
},
{
"name": "@esbuild/freebsd-arm64",
"direct": false,
"version": "0.27.4",
"ecosystem": "npm"
},
{
"name": "@esbuild/freebsd-x64",
"direct": false,
"version": "0.27.4",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-arm",
"direct": false,
"version": "0.27.4",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-arm64",
"direct": false,
"version": "0.27.4",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-ia32",
"direct": false,
"version": "0.27.4",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-loong64",
"direct": false,
"version": "0.27.4",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-mips64el",
"direct": false,
"version": "0.27.4",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-ppc64",
"direct": false,
"version": "0.27.4",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-riscv64",
"direct": false,
"version": "0.27.4",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-s390x",
"direct": false,
"version": "0.27.4",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-x64",
"direct": false,
"version": "0.27.4",
"ecosystem": "npm"
},
{
"name": "@esbuild/netbsd-arm64",
"direct": false,
"version": "0.27.4",
"ecosystem": "npm"
},
{
"name": "@esbuild/netbsd-x64",
"direct": false,
"version": "0.27.4",
"ecosystem": "npm"
},
{
"name": "@esbuild/openbsd-arm64",
"direct": false,
"version": "0.27.4",
"ecosystem": "npm"
},
{
"name": "@esbuild/openbsd-x64",
"direct": false,
"version": "0.27.4",
"ecosystem": "npm"
},
{
"name": "@esbuild/openharmony-arm64",
"direct": false,
"version": "0.27.4",
"ecosystem": "npm"
},
{
"name": "@esbuild/sunos-x64",
"direct": false,
"version": "0.27.4",
"ecosystem": "npm"
},
{
"name": "@esbuild/win32-arm64",
"direct": false,
"version": "0.27.4",
"ecosystem": "npm"
},
{
"name": "@esbuild/win32-ia32",
"direct": false,
"version": "0.27.4",
"ecosystem": "npm"
},
{
"name": "@esbuild/win32-x64",
"direct": false,
"version": "0.27.4",
"ecosystem": "npm"
},
{
"name": "@eslint-community/eslint-utils",
"direct": false,
"version": "4.9.1",
"ecosystem": "npm"
},
{
"name": "@eslint-community/regexpp",
"direct": false,
"version": "4.12.2",
"ecosystem": "npm"
},
{
"name": "@eslint/config-array",
"direct": false,
"version": "0.21.2",
"ecosystem": "npm"
},
{
"name": "@eslint/config-helpers",
"direct": false,
"version": "0.4.2",
"ecosystem": "npm"
},
{
"name": "@eslint/core",
"direct": false,
"version": "0.17.0",
"ecosystem": "npm"
},
{
"name": "@eslint/eslintrc",
"direct": false,
"version": "3.3.5",
"ecosystem": "npm"
},
{
"name": "@eslint/js",
"direct": false,
"version": "9.39.4",
"ecosystem": "npm"
},
{
"name": "@eslint/object-schema",
"direct": false,
"version": "2.1.7",
"ecosystem": "npm"
},
{
"name": "@eslint/plugin-kit",
"direct": false,
"version": "0.4.1",
"ecosystem": "npm"
},
{
"name": "@gar/promise-retry",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "@hono/node-server",
"direct": false,
"version": "1.19.13",
"ecosystem": "npm"
},
{
"name": "@humanfs/core",
"direct": false,
"version": "0.19.1",
"ecosystem": "npm"
},
{
"name": "@humanfs/node",
"direct": false,
"version": "0.16.7",
"ecosystem": "npm"
},
{
"name": "@humanwhocodes/module-importer",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "@humanwhocodes/retry",
"direct": false,
"version": "0.4.3",
"ecosystem": "npm"
},
{
"name": "@isaacs/fs-minipass",
"direct": false,
"version": "4.0.1",
"ecosystem": "npm"
},
{
"name": "@isaacs/string-locale-compare",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "@jridgewell/gen-mapping",
"direct": false,
"version": "0.3.13",
"ecosystem": "npm"
},
{
"name": "@jridgewell/resolve-uri",
"direct": false,
"version": "3.1.2",
"ecosystem": "npm"
},
{
"name": "@jridgewell/sourcemap-codec",
"direct": false,
"version": "1.5.5",
"ecosystem": "npm"
},
{
"name": "@jridgewell/trace-mapping",
"direct": false,
"version": "0.3.31",
"ecosystem": "npm"
},
{
"name": "@napi-rs/wasm-runtime",
"direct": false,
"version": "1.1.4",
"ecosystem": "npm"
},
{
"name": "@npmcli/agent",
"direct": false,
"version": "4.0.2",
"ecosystem": "npm"
},
{
"name": "@npmcli/arborist",
"direct": false,
"version": "9.9.0",
"ecosystem": "npm"
},
{
"name": "@npmcli/config",
"direct": false,
"version": "10.12.0",
"ecosystem": "npm"
},
{
"name": "@npmcli/fs",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "@npmcli/git",
"direct": false,
"version": "7.0.2",
"ecosystem": "npm"
},
{
"name": "@npmcli/installed-package-contents",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "@npmcli/map-workspaces",
"direct": false,
"version": "5.0.3",
"ecosystem": "npm"
},
{
"name": "@npmcli/metavuln-calculator",
"direct": false,
"version": "9.0.3",
"ecosystem": "npm"
},
{
"name": "@npmcli/name-from-folder",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "@npmcli/node-gyp",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "@npmcli/package-json",
"direct": false,
"version": "7.0.5",
"ecosystem": "npm"
},
{
"name": "@npmcli/promise-spawn",
"direct": false,
"version": "9.0.1",
"ecosystem": "npm"
},
{
"name": "@npmcli/query",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "@npmcli/redact",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "@npmcli/run-script",
"direct": false,
"version": "10.0.4",
"ecosystem": "npm"
},
{
"name": "@octokit/auth-token",
"direct": false,
"version": "6.0.0",
"ecosystem": "npm"
},
{
"name": "@octokit/core",
"direct": false,
"version": "7.0.6",
"ecosystem": "npm"
},
{
"name": "@octokit/endpoint",
"direct": false,
"version": "11.0.3",
"ecosystem": "npm"
},
{
"name": "@octokit/graphql",
"direct": false,
"version": "9.0.3",
"ecosystem": "npm"
},
{
"name": "@octokit/openapi-types",
"direct": false,
"version": "26.0.0",
"ecosystem": "npm"
},
{
"name": "@octokit/openapi-types",
"direct": false,
"version": "27.0.0",
"ecosystem": "npm"
},
{
"name": "@octokit/plugin-paginate-rest",
"direct": false,
"version": "13.2.1",
"ecosystem": "npm"
},
{
"name": "@octokit/plugin-paginate-rest",
"direct": false,
"version": "14.0.0",
"ecosystem": "npm"
},
{
"name": "@octokit/plugin-retry",
"direct": false,
"version": "8.1.0",
"ecosystem": "npm"
},
{
"name": "@octokit/plugin-throttling",
"direct": false,
"version": "11.0.3",
"ecosystem": "npm"
},
{
"name": "@octokit/request",
"direct": false,
"version": "10.0.8",
"ecosystem": "npm"
},
{
"name": "@octokit/request-error",
"direct": false,
"version": "7.1.0",
"ecosystem": "npm"
},
{
"name": "@octokit/types",
"direct": false,
"version": "15.0.2",
"ecosystem": "npm"
},
{
"name": "@octokit/types",
"direct": false,
"version": "16.0.0",
"ecosystem": "npm"
},
{
"name": "@oxc-project/types",
"direct": false,
"version": "0.133.0",
"ecosystem": "npm"
},
{
"name": "@pnpm/config.env-replace",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "@pnpm/network.ca-file",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "@pnpm/npm-conf",
"direct": false,
"version": "3.0.2",
"ecosystem": "npm"
},
{
"name": "@redocly/cli",
"direct": false,
"version": "2.40.0",
"ecosystem": "npm"
},
{
"name": "@rolldown/binding-android-arm64",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "@rolldown/binding-darwin-arm64",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "@rolldown/binding-darwin-x64",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "@rolldown/binding-freebsd-x64",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "@rolldown/binding-linux-arm-gnueabihf",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "@rolldown/binding-linux-arm64-gnu",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "@rolldown/binding-linux-arm64-musl",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "@rolldown/binding-linux-ppc64-gnu",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "@rolldown/binding-linux-s390x-gnu",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "@rolldown/binding-linux-x64-gnu",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "@rolldown/binding-linux-x64-musl",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "@rolldown/binding-openharmony-arm64",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "@rolldown/binding-wasm32-wasi",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "@rolldown/binding-win32-arm64-msvc",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "@rolldown/binding-win32-x64-msvc",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "@rolldown/pluginutils",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-android-arm-eabi",
"direct": false,
"version": "4.60.0",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-android-arm64",
"direct": false,
"version": "4.60.0",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-darwin-arm64",
"direct": false,
"version": "4.60.0",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-darwin-x64",
"direct": false,
"version": "4.60.0",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-freebsd-arm64",
"direct": false,
"version": "4.60.0",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-freebsd-x64",
"direct": false,
"version": "4.60.0",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-linux-arm-gnueabihf",
"direct": false,
"version": "4.60.0",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-linux-arm-musleabihf",
"direct": false,
"version": "4.60.0",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-linux-arm64-gnu",
"direct": false,
"version": "4.60.0",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-linux-arm64-musl",
"direct": false,
"version": "4.60.0",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-linux-loong64-gnu",
"direct": false,
"version": "4.60.0",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-linux-loong64-musl",
"direct": false,
"version": "4.60.0",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-linux-ppc64-gnu",
"direct": false,
"version": "4.60.0",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-linux-ppc64-musl",
"direct": false,
"version": "4.60.0",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-linux-riscv64-gnu",
"direct": false,
"version": "4.60.0",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-linux-riscv64-musl",
"direct": false,
"version": "4.60.0",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-linux-s390x-gnu",
"direct": false,
"version": "4.60.0",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-linux-x64-gnu",
"direct": false,
"version": "4.60.0",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-linux-x64-musl",
"direct": false,
"version": "4.60.0",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-openbsd-x64",
"direct": false,
"version": "4.60.0",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-openharmony-arm64",
"direct": false,
"version": "4.60.0",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-win32-arm64-msvc",
"direct": false,
"version": "4.60.0",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-win32-ia32-msvc",
"direct": false,
"version": "4.60.0",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-win32-x64-gnu",
"direct": false,
"version": "4.60.0",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-win32-x64-msvc",
"direct": false,
"version": "4.60.0",
"ecosystem": "npm"
},
{
"name": "@sec-ant/readable-stream",
"direct": false,
"version": "0.4.1",
"ecosystem": "npm"
},
{
"name": "@semantic-release/commit-analyzer",
"direct": false,
"version": "13.0.1",
"ecosystem": "npm"
},
{
"name": "@semantic-release/error",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "@semantic-release/error",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "@semantic-release/exec",
"direct": false,
"version": "7.1.0",
"ecosystem": "npm"
},
{
"name": "@semantic-release/git",
"direct": false,
"version": "10.0.1",
"ecosystem": "npm"
},
{
"name": "@semantic-release/github",
"direct": false,
"version": "11.0.6",
"ecosystem": "npm"
},
{
"name": "@semantic-release/github",
"direct": false,
"version": "12.0.6",
"ecosystem": "npm"
},
{
"name": "@semantic-release/npm",
"direct": false,
"version": "13.1.5",
"ecosystem": "npm"
},
{
"name": "@semantic-release/release-notes-generator",
"direct": false,
"version": "14.1.0",
"ecosystem": "npm"
},
{
"name": "@sigstore/bundle",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "@sigstore/core",
"direct": false,
"version": "3.2.1",
"ecosystem": "npm"
},
{
"name": "@sigstore/protobuf-specs",
"direct": false,
"version": "0.5.1",
"ecosystem": "npm"
},
{
"name": "@sigstore/sign",
"direct": false,
"version": "4.1.1",
"ecosystem": "npm"
},
{
"name": "@sigstore/tuf",
"direct": false,
"version": "4.0.2",
"ecosystem": "npm"
},
{
"name": "@sigstore/verify",
"direct": false,
"version": "3.1.1",
"ecosystem": "npm"
},
{
"name": "@simple-libs/stream-utils",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "@sindresorhus/is",
"direct": false,
"version": "4.6.0",
"ecosystem": "npm"
},
{
"name": "@sindresorhus/merge-streams",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "@so-ric/colorspace",
"direct": false,
"version": "1.1.6",
"ecosystem": "npm"
},
{
"name": "@standard-schema/spec",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "@tufjs/canonical-json",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "@tufjs/models",
"direct": false,
"version": "4.1.0",
"ecosystem": "npm"
},
{
"name": "@tybys/wasm-util",
"direct": false,
"version": "0.10.2",
"ecosystem": "npm"
},
{
"name": "@types/body-parser",
"direct": false,
"version": "1.19.6",
"ecosystem": "npm"
},
{
"name": "@types/chai",
"direct": false,
"version": "5.2.3",
"ecosystem": "npm"
},
{
"name": "@types/connect",
"direct": false,
"version": "3.4.38",
"ecosystem": "npm"
},
{
"name": "@types/deep-eql",
"direct": false,
"version": "4.0.2",
"ecosystem": "npm"
},
{
"name": "@types/estree",
"direct": false,
"version": "1.0.8",
"ecosystem": "npm"
},
{
"name": "@types/express",
"direct": false,
"version": "5.0.6",
"ecosystem": "npm"
},
{
"name": "@types/express-serve-static-core",
"direct": false,
"version": "5.1.1",
"ecosystem": "npm"
},
{
"name": "@types/http-errors",
"direct": false,
"version": "2.0.5",
"ecosystem": "npm"
},
{
"name": "@types/json-schema",
"direct": false,
"version": "7.0.15",
"ecosystem": "npm"
},
{
"name": "@types/node",
"direct": false,
"version": "22.19.15",
"ecosystem": "npm"
},
{
"name": "@types/normalize-package-data",
"direct": false,
"version": "2.4.4",
"ecosystem": "npm"
},
{
"name": "@types/qs",
"direct": false,
"version": "6.15.0",
"ecosystem": "npm"
},
{
"name": "@types/range-parser",
"direct": false,
"version": "1.2.7",
"ecosystem": "npm"
},
{
"name": "@types/send",
"direct": false,
"version": "1.2.1",
"ecosystem": "npm"
},
{
"name": "@types/serve-static",
"direct": false,
"version": "2.2.0",
"ecosystem": "npm"
},
{
"name": "@types/triple-beam",
"direct": false,
"version": "1.3.5",
"ecosystem": "npm"
},
{
"name": "@typescript-eslint/eslint-plugin",
"direct": false,
"version": "8.57.2",
"ecosystem": "npm"
},
{
"name": "@typescript-eslint/parser",
"direct": false,
"version": "8.57.2",
"ecosystem": "npm"
},
{
"name": "@typescript-eslint/project-service",
"direct": false,
"version": "8.57.2",
"ecosystem": "npm"
},
{
"name": "@typescript-eslint/scope-manager",
"direct": false,
"version": "8.57.2",
"ecosystem": "npm"
},
{
"name": "@typescript-eslint/tsconfig-utils",
"direct": false,
"version": "8.57.2",
"ecosystem": "npm"
},
{
"name": "@typescript-eslint/type-utils",
"direct": false,
"version": "8.57.2",
"ecosystem": "npm"
},
{
"name": "@typescript-eslint/types",
"direct": false,
"version": "8.57.2",
"ecosystem": "npm"
},
{
"name": "@typescript-eslint/typescript-estree",
"direct": false,
"version": "8.57.2",
"ecosystem": "npm"
},
{
"name": "@typescript-eslint/utils",
"direct": false,
"version": "8.57.2",
"ecosystem": "npm"
},
{
"name": "@typescript-eslint/visitor-keys",
"direct": false,
"version": "8.57.2",
"ecosystem": "npm"
},
{
"name": "@typespec/ts-http-runtime",
"direct": false,
"version": "0.3.4",
"ecosystem": "npm"
},
{
"name": "@vitest/coverage-v8",
"direct": false,
"version": "4.1.8",
"ecosystem": "npm"
},
{
"name": "@vitest/expect",
"direct": false,
"version": "4.1.8",
"ecosystem": "npm"
},
{
"name": "@vitest/mocker",
"direct": false,
"version": "4.1.8",
"ecosystem": "npm"
},
{
"name": "@vitest/pretty-format",
"direct": false,
"version": "4.1.8",
"ecosystem": "npm"
},
{
"name": "@vitest/runner",
"direct": false,
"version": "4.1.8",
"ecosystem": "npm"
},
{
"name": "@vitest/snapshot",
"direct": false,
"version": "4.1.8",
"ecosystem": "npm"
},
{
"name": "@vitest/spy",
"direct": false,
"version": "4.1.8",
"ecosystem": "npm"
},
{
"name": "@vitest/utils",
"direct": false,
"version": "4.1.8",
"ecosystem": "npm"
},
{
"name": "abbrev",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "accepts",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "acorn",
"direct": false,
"version": "8.16.0",
"ecosystem": "npm"
},
{
"name": "acorn-jsx",
"direct": false,
"version": "5.3.2",
"ecosystem": "npm"
},
{
"name": "agent-base",
"direct": false,
"version": "7.1.4",
"ecosystem": "npm"
},
{
"name": "aggregate-error",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "aggregate-error",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "ajv",
"direct": false,
"version": "6.14.0",
"ecosystem": "npm"
},
{
"name": "ajv",
"direct": false,
"version": "8.18.0",
"ecosystem": "npm"
},
{
"name": "ajv-formats",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "ansi-escapes",
"direct": false,
"version": "7.3.0",
"ecosystem": "npm"
},
{
"name": "ansi-regex",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "ansi-regex",
"direct": false,
"version": "6.2.2",
"ecosystem": "npm"
},
{
"name": "ansi-styles",
"direct": false,
"version": "3.2.1",
"ecosystem": "npm"
},
{
"name": "ansi-styles",
"direct": false,
"version": "4.3.0",
"ecosystem": "npm"
},
{
"name": "ansi-styles",
"direct": false,
"version": "6.2.3",
"ecosystem": "npm"
},
{
"name": "any-promise",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "aproba",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "archy",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "argparse",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "argv-formatter",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "array-ify",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "assertion-error",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "ast-v8-to-istanbul",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "async",
"direct": false,
"version": "3.2.6",
"ecosystem": "npm"
},
{
"name": "balanced-match",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "balanced-match",
"direct": false,
"version": "4.0.4",
"ecosystem": "npm"
},
{
"name": "base64-js",
"direct": false,
"version": "1.5.1",
"ecosystem": "npm"
},
{
"name": "before-after-hook",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "bin-links",
"direct": false,
"version": "6.0.2",
"ecosystem": "npm"
},
{
"name": "binary-extensions",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "bl",
"direct": false,
"version": "4.1.0",
"ecosystem": "npm"
},
{
"name": "body-parser",
"direct": false,
"version": "2.3.0",
"ecosystem": "npm"
},
{
"name": "bottleneck",
"direct": false,
"version": "2.19.5",
"ecosystem": "npm"
},
{
"name": "brace-expansion",
"direct": false,
"version": "1.1.16",
"ecosystem": "npm"
},
{
"name": "brace-expansion",
"direct": false,
"version": "5.0.7",
"ecosystem": "npm"
},
{
"name": "braces",
"direct": false,
"version": "3.0.3",
"ecosystem": "npm"
},
{
"name": "buffer",
"direct": false,
"version": "5.7.1",
"ecosystem": "npm"
},
{
"name": "buffer-equal-constant-time",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "bundle-name",
"direct": false,
"version": "4.1.0",
"ecosystem": "npm"
},
{
"name": "bundle-require",
"direct": false,
"version": "5.1.0",
"ecosystem": "npm"
},
{
"name": "bytes",
"direct": false,
"version": "3.1.2",
"ecosystem": "npm"
},
{
"name": "cac",
"direct": false,
"version": "6.7.14",
"ecosystem": "npm"
},
{
"name": "cacache",
"direct": false,
"version": "20.0.4",
"ecosystem": "npm"
},
{
"name": "call-bind-apply-helpers",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "call-bound",
"direct": false,
"version": "1.0.4",
"ecosystem": "npm"
},
{
"name": "callsites",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "chai",
"direct": false,
"version": "6.2.2",
"ecosystem": "npm"
},
{
"name": "chalk",
"direct": false,
"version": "2.4.2",
"ecosystem": "npm"
},
{
"name": "chalk",
"direct": false,
"version": "4.1.2",
"ecosystem": "npm"
},
{
"name": "chalk",
"direct": false,
"version": "5.6.2",
"ecosystem": "npm"
},
{
"name": "char-regex",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "chokidar",
"direct": false,
"version": "4.0.3",
"ecosystem": "npm"
},
{
"name": "chownr",
"direct": false,
"version": "1.1.4",
"ecosystem": "npm"
},
{
"name": "chownr",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "ci-info",
"direct": false,
"version": "4.4.0",
"ecosystem": "npm"
},
{
"name": "cidr-regex",
"direct": false,
"version": "5.0.5",
"ecosystem": "npm"
},
{
"name": "clean-stack",
"direct": false,
"version": "2.2.0",
"ecosystem": "npm"
},
{
"name": "clean-stack",
"direct": false,
"version": "5.3.0",
"ecosystem": "npm"
},
{
"name": "cli-highlight",
"direct": false,
"version": "2.1.11",
"ecosystem": "npm"
},
{
"name": "cli-table3",
"direct": false,
"version": "0.6.5",
"ecosystem": "npm"
},
{
"name": "cliui",
"direct": false,
"version": "7.0.4",
"ecosystem": "npm"
},
{
"name": "cliui",
"direct": false,
"version": "9.0.1",
"ecosystem": "npm"
},
{
"name": "cmd-shim",
"direct": false,
"version": "8.0.0",
"ecosystem": "npm"
},
{
"name": "color",
"direct": false,
"version": "5.0.3",
"ecosystem": "npm"
},
{
"name": "color-convert",
"direct": false,
"version": "1.9.3",
"ecosystem": "npm"
},
{
"name": "color-convert",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "color-convert",
"direct": false,
"version": "3.1.3",
"ecosystem": "npm"
},
{
"name": "color-name",
"direct": false,
"version": "1.1.3",
"ecosystem": "npm"
},
{
"name": "color-name",
"direct": false,
"version": "1.1.4",
"ecosystem": "npm"
},
{
"name": "color-name",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "color-string",
"direct": false,
"version": "2.1.4",
"ecosystem": "npm"
},
{
"name": "common-ancestor-path",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "compare-func",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "concat-map",
"direct": false,
"version": "0.0.1",
"ecosystem": "npm"
},
{
"name": "confbox",
"direct": false,
"version": "0.1.8",
"ecosystem": "npm"
},
{
"name": "config-chain",
"direct": false,
"version": "1.1.13",
"ecosystem": "npm"
},
{
"name": "consola",
"direct": false,
"version": "3.4.2",
"ecosystem": "npm"
},
{
"name": "content-disposition",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "content-type",
"direct": false,
"version": "1.0.5",
"ecosystem": "npm"
},
{
"name": "content-type",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "conventional-changelog-angular",
"direct": false,
"version": "8.3.0",
"ecosystem": "npm"
},
{
"name": "conventional-changelog-writer",
"direct": false,
"version": "8.4.0",
"ecosystem": "npm"
},
{
"name": "conventional-commits-filter",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "conventional-commits-parser",
"direct": false,
"version": "6.3.0",
"ecosystem": "npm"
},
{
"name": "convert-hrtime",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "convert-source-map",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "cookie",
"direct": false,
"version": "0.7.2",
"ecosystem": "npm"
},
{
"name": "cookie-signature",
"direct": false,
"version": "1.2.2",
"ecosystem": "npm"
},
{
"name": "core-util-is",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "cors",
"direct": false,
"version": "2.8.6",
"ecosystem": "npm"
},
{
"name": "cosmiconfig",
"direct": false,
"version": "9.0.1",
"ecosystem": "npm"
},
{
"name": "cross-spawn",
"direct": false,
"version": "7.0.6",
"ecosystem": "npm"
},
{
"name": "crypto-random-string",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "cssesc",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "debug",
"direct": false,
"version": "4.4.3",
"ecosystem": "npm"
},
{
"name": "decompress-response",
"direct": false,
"version": "6.0.0",
"ecosystem": "npm"
},
{
"name": "deep-extend",
"direct": false,
"version": "0.6.0",
"ecosystem": "npm"
},
{
"name": "deep-is",
"direct": false,
"version": "0.1.4",
"ecosystem": "npm"
},
{
"name": "default-browser",
"direct": false,
"version": "5.5.0",
"ecosystem": "npm"
},
{
"name": "default-browser-id",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "define-lazy-prop",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "depd",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "detect-libc",
"direct": false,
"version": "2.1.2",
"ecosystem": "npm"
},
{
"name": "diff",
"direct": false,
"version": "8.0.4",
"ecosystem": "npm"
},
{
"name": "dir-glob",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "dot-prop",
"direct": false,
"version": "5.3.0",
"ecosystem": "npm"
},
{
"name": "dunder-proto",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "duplexer2",
"direct": false,
"version": "0.1.4",
"ecosystem": "npm"
},
{
"name": "ecdsa-sig-formatter",
"direct": false,
"version": "1.0.11",
"ecosystem": "npm"
},
{
"name": "ee-first",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "emoji-regex",
"direct": false,
"version": "10.6.0",
"ecosystem": "npm"
},
{
"name": "emoji-regex",
"direct": false,
"version": "8.0.0",
"ecosystem": "npm"
},
{
"name": "emojilib",
"direct": false,
"version": "2.4.0",
"ecosystem": "npm"
},
{
"name": "enabled",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "encodeurl",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "end-of-stream",
"direct": false,
"version": "1.4.5",
"ecosystem": "npm"
},
{
"name": "env-ci",
"direct": false,
"version": "11.2.0",
"ecosystem": "npm"
},
{
"name": "env-paths",
"direct": false,
"version": "2.2.1",
"ecosystem": "npm"
},
{
"name": "environment",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "error-ex",
"direct": false,
"version": "1.3.4",
"ecosystem": "npm"
},
{
"name": "es-define-property",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "es-errors",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "es-module-lexer",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "es-object-atoms",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "esbuild",
"direct": false,
"version": "0.27.4",
"ecosystem": "npm"
},
{
"name": "escalade",
"direct": false,
"version": "3.2.0",
"ecosystem": "npm"
},
{
"name": "escape-html",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "escape-string-regexp",
"direct": false,
"version": "1.0.5",
"ecosystem": "npm"
},
{
"name": "escape-string-regexp",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "escape-string-regexp",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "eslint",
"direct": false,
"version": "9.39.4",
"ecosystem": "npm"
},
{
"name": "eslint-scope",
"direct": false,
"version": "8.4.0",
"ecosystem": "npm"
},
{
"name": "eslint-visitor-keys",
"direct": false,
"version": "3.4.3",
"ecosystem": "npm"
},
{
"name": "eslint-visitor-keys",
"direct": false,
"version": "4.2.1",
"ecosystem": "npm"
},
{
"name": "eslint-visitor-keys",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "espree",
"direct": false,
"version": "10.4.0",
"ecosystem": "npm"
},
{
"name": "esquery",
"direct": false,
"version": "1.7.0",
"ecosystem": "npm"
},
{
"name": "esrecurse",
"direct": false,
"version": "4.3.0",
"ecosystem": "npm"
},
{
"name": "estraverse",
"direct": false,
"version": "5.3.0",
"ecosystem": "npm"
},
{
"name": "estree-walker",
"direct": false,
"version": "3.0.3",
"ecosystem": "npm"
},
{
"name": "esutils",
"direct": false,
"version": "2.0.3",
"ecosystem": "npm"
},
{
"name": "etag",
"direct": false,
"version": "1.8.1",
"ecosystem": "npm"
},
{
"name": "eventsource",
"direct": false,
"version": "3.0.7",
"ecosystem": "npm"
},
{
"name": "eventsource-parser",
"direct": false,
"version": "3.0.6",
"ecosystem": "npm"
},
{
"name": "execa",
"direct": false,
"version": "5.1.1",
"ecosystem": "npm"
},
{
"name": "execa",
"direct": false,
"version": "8.0.1",
"ecosystem": "npm"
},
{
"name": "execa",
"direct": false,
"version": "9.6.1",
"ecosystem": "npm"
},
{
"name": "expand-template",
"direct": false,
"version": "2.0.3",
"ecosystem": "npm"
},
{
"name": "expect-type",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "exponential-backoff",
"direct": false,
"version": "3.1.3",
"ecosystem": "npm"
},
{
"name": "fast-content-type-parse",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "fast-deep-equal",
"direct": false,
"version": "3.1.3",
"ecosystem": "npm"
},
{
"name": "fast-json-stable-stringify",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "fast-levenshtein",
"direct": false,
"version": "2.0.6",
"ecosystem": "npm"
},
{
"name": "fast-uri",
"direct": false,
"version": "3.1.2",
"ecosystem": "npm"
},
{
"name": "fastest-levenshtein",
"direct": false,
"version": "1.0.16",
"ecosystem": "npm"
},
{
"name": "fdir",
"direct": false,
"version": "6.5.0",
"ecosystem": "npm"
},
{
"name": "fecha",
"direct": false,
"version": "4.2.3",
"ecosystem": "npm"
},
{
"name": "figures",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "figures",
"direct": false,
"version": "6.1.0",
"ecosystem": "npm"
},
{
"name": "file-entry-cache",
"direct": false,
"version": "8.0.0",
"ecosystem": "npm"
},
{
"name": "fill-range",
"direct": false,
"version": "7.1.1",
"ecosystem": "npm"
},
{
"name": "finalhandler",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "find-up",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "find-up",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "find-up-simple",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "find-versions",
"direct": false,
"version": "6.0.0",
"ecosystem": "npm"
},
{
"name": "fix-dts-default-cjs-exports",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "flat-cache",
"direct": false,
"version": "4.0.1",
"ecosystem": "npm"
},
{
"name": "flatted",
"direct": false,
"version": "3.4.2",
"ecosystem": "npm"
},
{
"name": "fn.name",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "forwarded",
"direct": false,
"version": "0.2.0",
"ecosystem": "npm"
},
{
"name": "fresh",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "from2",
"direct": false,
"version": "2.3.0",
"ecosystem": "npm"
},
{
"name": "fs-constants",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "fs-extra",
"direct": false,
"version": "11.3.4",
"ecosystem": "npm"
},
{
"name": "fs-minipass",
"direct": false,
"version": "3.0.3",
"ecosystem": "npm"
},
{
"name": "fsevents",
"direct": false,
"version": "2.3.3",
"ecosystem": "npm"
},
{
"name": "function-bind",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "function-timeout",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "get-caller-file",
"direct": false,
"version": "2.0.5",
"ecosystem": "npm"
},
{
"name": "get-east-asian-width",
"direct": false,
"version": "1.5.0",
"ecosystem": "npm"
},
{
"name": "get-intrinsic",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "get-proto",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "get-stream",
"direct": false,
"version": "6.0.1",
"ecosystem": "npm"
},
{
"name": "get-stream",
"direct": false,
"version": "7.0.1",
"ecosystem": "npm"
},
{
"name": "get-stream",
"direct": false,
"version": "8.0.1",
"ecosystem": "npm"
},
{
"name": "get-stream",
"direct": false,
"version": "9.0.1",
"ecosystem": "npm"
},
{
"name": "get-tsconfig",
"direct": false,
"version": "4.13.7",
"ecosystem": "npm"
},
{
"name": "git-log-parser",
"direct": false,
"version": "1.2.1",
"ecosystem": "npm"
},
{
"name": "github-from-package",
"direct": false,
"version": "0.0.0",
"ecosystem": "npm"
},
{
"name": "glob",
"direct": false,
"version": "13.0.6",
"ecosystem": "npm"
},
{
"name": "glob-parent",
"direct": false,
"version": "6.0.2",
"ecosystem": "npm"
},
{
"name": "globals",
"direct": false,
"version": "14.0.0",
"ecosystem": "npm"
},
{
"name": "globals",
"direct": false,
"version": "16.5.0",
"ecosystem": "npm"
},
{
"name": "gopd",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "graceful-fs",
"direct": false,
"version": "4.2.10",
"ecosystem": "npm"
},
{
"name": "graceful-fs",
"direct": false,
"version": "4.2.11",
"ecosystem": "npm"
},
{
"name": "handlebars",
"direct": false,
"version": "4.7.9",
"ecosystem": "npm"
},
{
"name": "has-flag",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "has-flag",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "has-symbols",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "hasown",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "highlight.js",
"direct": false,
"version": "10.7.3",
"ecosystem": "npm"
},
{
"name": "hono",
"direct": false,
"version": "4.12.31",
"ecosystem": "npm"
},
{
"name": "hook-std",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "hosted-git-info",
"direct": false,
"version": "7.0.2",
"ecosystem": "npm"
},
{
"name": "hosted-git-info",
"direct": false,
"version": "9.0.2",
"ecosystem": "npm"
},
{
"name": "hosted-git-info",
"direct": false,
"version": "9.0.3",
"ecosystem": "npm"
},
{
"name": "html-escaper",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "http-cache-semantics",
"direct": false,
"version": "4.2.0",
"ecosystem": "npm"
},
{
"name": "http-errors",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "http-proxy-agent",
"direct": false,
"version": "7.0.2",
"ecosystem": "npm"
},
{
"name": "https-proxy-agent",
"direct": false,
"version": "7.0.6",
"ecosystem": "npm"
},
{
"name": "human-signals",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "human-signals",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "human-signals",
"direct": false,
"version": "8.0.1",
"ecosystem": "npm"
},
{
"name": "iconv-lite",
"direct": false,
"version": "0.7.2",
"ecosystem": "npm"
},
{
"name": "ieee754",
"direct": false,
"version": "1.2.1",
"ecosystem": "npm"
},
{
"name": "ignore",
"direct": false,
"version": "5.3.2",
"ecosystem": "npm"
},
{
"name": "ignore",
"direct": false,
"version": "7.0.5",
"ecosystem": "npm"
},
{
"name": "ignore-walk",
"direct": false,
"version": "8.0.0",
"ecosystem": "npm"
},
{
"name": "import-fresh",
"direct": false,
"version": "3.3.1",
"ecosystem": "npm"
},
{
"name": "import-from-esm",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "import-meta-resolve",
"direct": false,
"version": "4.2.0",
"ecosystem": "npm"
},
{
"name": "imurmurhash",
"direct": false,
"version": "0.1.4",
"ecosystem": "npm"
},
{
"name": "indent-string",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "indent-string",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "index-to-position",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "inherits",
"direct": false,
"version": "2.0.4",
"ecosystem": "npm"
},
{
"name": "ini",
"direct": false,
"version": "1.3.8",
"ecosystem": "npm"
},
{
"name": "ini",
"direct": false,
"version": "6.0.0",
"ecosystem": "npm"
},
{
"name": "init-package-json",
"direct": false,
"version": "8.2.5",
"ecosystem": "npm"
},
{
"name": "into-stream",
"direct": false,
"version": "7.0.0",
"ecosystem": "npm"
},
{
"name": "ip-address",
"direct": false,
"version": "10.2.0",
"ecosystem": "npm"
},
{
"name": "ipaddr.js",
"direct": false,
"version": "1.9.1",
"ecosystem": "npm"
},
{
"name": "is-arrayish",
"direct": false,
"version": "0.2.1",
"ecosystem": "npm"
},
{
"name": "is-cidr",
"direct": false,
"version": "6.0.4",
"ecosystem": "npm"
},
{
"name": "is-docker",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "is-extglob",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "is-fullwidth-code-point",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "is-glob",
"direct": false,
"version": "4.0.3",
"ecosystem": "npm"
},
{
"name": "is-in-ssh",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "is-inside-container",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "is-number",
"direct": false,
"version": "7.0.0",
"ecosystem": "npm"
},
{
"name": "is-obj",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "is-plain-obj",
"direct": false,
"version": "4.1.0",
"ecosystem": "npm"
},
{
"name": "is-promise",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "is-stream",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "is-stream",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "is-stream",
"direct": false,
"version": "4.0.1",
"ecosystem": "npm"
},
{
"name": "is-unicode-supported",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "is-wsl",
"direct": false,
"version": "3.1.1",
"ecosystem": "npm"
},
{
"name": "isarray",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "isexe",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "isexe",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "issue-parser",
"direct": false,
"version": "7.0.1",
"ecosystem": "npm"
},
{
"name": "istanbul-lib-coverage",
"direct": false,
"version": "3.2.2",
"ecosystem": "npm"
},
{
"name": "istanbul-lib-report",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "istanbul-reports",
"direct": false,
"version": "3.2.0",
"ecosystem": "npm"
},
{
"name": "java-properties",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "jose",
"direct": false,
"version": "6.2.2",
"ecosystem": "npm"
},
{
"name": "joycon",
"direct": false,
"version": "3.1.1",
"ecosystem": "npm"
},
{
"name": "js-tokens",
"direct": false,
"version": "10.0.0",
"ecosystem": "npm"
},
{
"name": "js-tokens",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "json-buffer",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "json-parse-better-errors",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "json-parse-even-better-errors",
"direct": false,
"version": "2.3.1",
"ecosystem": "npm"
},
{
"name": "json-parse-even-better-errors",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "json-schema-traverse",
"direct": false,
"version": "0.4.1",
"ecosystem": "npm"
},
{
"name": "json-schema-traverse",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "json-schema-typed",
"direct": false,
"version": "8.0.2",
"ecosystem": "npm"
},
{
"name": "json-stable-stringify-without-jsonify",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "json-stringify-nice",
"direct": false,
"version": "1.1.4",
"ecosystem": "npm"
},
{
"name": "json-with-bigint",
"direct": false,
"version": "3.5.8",
"ecosystem": "npm"
},
{
"name": "jsonfile",
"direct": false,
"version": "6.2.0",
"ecosystem": "npm"
},
{
"name": "jsonparse",
"direct": false,
"version": "1.3.1",
"ecosystem": "npm"
},
{
"name": "jsonwebtoken",
"direct": false,
"version": "9.0.3",
"ecosystem": "npm"
},
{
"name": "just-diff",
"direct": false,
"version": "6.0.2",
"ecosystem": "npm"
},
{
"name": "just-diff-apply",
"direct": false,
"version": "5.5.0",
"ecosystem": "npm"
},
{
"name": "jwa",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "jws",
"direct": false,
"version": "4.0.1",
"ecosystem": "npm"
},
{
"name": "keytar",
"direct": false,
"version": "7.9.0",
"ecosystem": "npm"
},
{
"name": "keyv",
"direct": false,
"version": "4.5.4",
"ecosystem": "npm"
},
{
"name": "kuler",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "levn",
"direct": false,
"version": "0.4.1",
"ecosystem": "npm"
},
{
"name": "libnpmaccess",
"direct": false,
"version": "10.0.3",
"ecosystem": "npm"
},
{
"name": "libnpmdiff",
"direct": false,
"version": "8.1.11",
"ecosystem": "npm"
},
{
"name": "libnpmexec",
"direct": false,
"version": "10.3.1",
"ecosystem": "npm"
},
{
"name": "libnpmfund",
"direct": false,
"version": "7.0.25",
"ecosystem": "npm"
},
{
"name": "libnpmorg",
"direct": false,
"version": "8.0.1",
"ecosystem": "npm"
},
{
"name": "libnpmpack",
"direct": false,
"version": "9.1.11",
"ecosystem": "npm"
},
{
"name": "libnpmpublish",
"direct": false,
"version": "11.2.0",
"ecosystem": "npm"
},
{
"name": "libnpmsearch",
"direct": false,
"version": "9.0.1",
"ecosystem": "npm"
},
{
"name": "libnpmteam",
"direct": false,
"version": "8.0.2",
"ecosystem": "npm"
},
{
"name": "libnpmversion",
"direct": false,
"version": "8.0.4",
"ecosystem": "npm"
},
{
"name": "lightningcss",
"direct": false,
"version": "1.32.0",
"ecosystem": "npm"
},
{
"name": "lightningcss-android-arm64",
"direct": false,
"version": "1.32.0",
"ecosystem": "npm"
},
{
"name": "lightningcss-darwin-arm64",
"direct": false,
"version": "1.32.0",
"ecosystem": "npm"
},
{
"name": "lightningcss-darwin-x64",
"direct": false,
"version": "1.32.0",
"ecosystem": "npm"
},
{
"name": "lightningcss-freebsd-x64",
"direct": false,
"version": "1.32.0",
"ecosystem": "npm"
},
{
"name": "lightningcss-linux-arm-gnueabihf",
"direct": false,
"version": "1.32.0",
"ecosystem": "npm"
},
{
"name": "lightningcss-linux-arm64-gnu",
"direct": false,
"version": "1.32.0",
"ecosystem": "npm"
},
{
"name": "lightningcss-linux-arm64-musl",
"direct": false,
"version": "1.32.0",
"ecosystem": "npm"
},
{
"name": "lightningcss-linux-x64-gnu",
"direct": false,
"version": "1.32.0",
"ecosystem": "npm"
},
{
"name": "lightningcss-linux-x64-musl",
"direct": false,
"version": "1.32.0",
"ecosystem": "npm"
},
{
"name": "lightningcss-win32-arm64-msvc",
"direct": false,
"version": "1.32.0",
"ecosystem": "npm"
},
{
"name": "lightningcss-win32-x64-msvc",
"direct": false,
"version": "1.32.0",
"ecosystem": "npm"
},
{
"name": "lilconfig",
"direct": false,
"version": "3.1.3",
"ecosystem": "npm"
},
{
"name": "lines-and-columns",
"direct": false,
"version": "1.2.4",
"ecosystem": "npm"
},
{
"name": "load-json-file",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "load-tsconfig",
"direct": false,
"version": "0.2.5",
"ecosystem": "npm"
},
{
"name": "locate-path",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "locate-path",
"direct": false,
"version": "6.0.0",
"ecosystem": "npm"
},
{
"name": "lodash",
"direct": false,
"version": "4.18.1",
"ecosystem": "npm"
},
{
"name": "lodash-es",
"direct": false,
"version": "4.18.1",
"ecosystem": "npm"
},
{
"name": "lodash.capitalize",
"direct": false,
"version": "4.2.1",
"ecosystem": "npm"
},
{
"name": "lodash.escaperegexp",
"direct": false,
"version": "4.1.2",
"ecosystem": "npm"
},
{
"name": "lodash.includes",
"direct": false,
"version": "4.3.0",
"ecosystem": "npm"
},
{
"name": "lodash.isboolean",
"direct": false,
"version": "3.0.3",
"ecosystem": "npm"
},
{
"name": "lodash.isinteger",
"direct": false,
"version": "4.0.4",
"ecosystem": "npm"
},
{
"name": "lodash.isnumber",
"direct": false,
"version": "3.0.3",
"ecosystem": "npm"
},
{
"name": "lodash.isplainobject",
"direct": false,
"version": "4.0.6",
"ecosystem": "npm"
},
{
"name": "lodash.isstring",
"direct": false,
"version": "4.0.1",
"ecosystem": "npm"
},
{
"name": "lodash.merge",
"direct": false,
"version": "4.6.2",
"ecosystem": "npm"
},
{
"name": "lodash.once",
"direct": false,
"version": "4.1.1",
"ecosystem": "npm"
},
{
"name": "lodash.uniqby",
"direct": false,
"version": "4.7.0",
"ecosystem": "npm"
},
{
"name": "logform",
"direct": false,
"version": "2.7.0",
"ecosystem": "npm"
},
{
"name": "lru-cache",
"direct": false,
"version": "10.4.3",
"ecosystem": "npm"
},
{
"name": "lru-cache",
"direct": false,
"version": "11.2.7",
"ecosystem": "npm"
},
{
"name": "lru-cache",
"direct": false,
"version": "11.5.1",
"ecosystem": "npm"
},
{
"name": "magic-string",
"direct": false,
"version": "0.30.21",
"ecosystem": "npm"
},
{
"name": "magicast",
"direct": false,
"version": "0.5.3",
"ecosystem": "npm"
},
{
"name": "make-asynchronous",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "make-dir",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "make-fetch-happen",
"direct": false,
"version": "15.0.6",
"ecosystem": "npm"
},
{
"name": "marked",
"direct": false,
"version": "15.0.12",
"ecosystem": "npm"
},
{
"name": "marked",
"direct": false,
"version": "4.3.0",
"ecosystem": "npm"
},
{
"name": "marked-terminal",
"direct": false,
"version": "7.3.0",
"ecosystem": "npm"
},
{
"name": "math-intrinsics",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "media-typer",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "meow",
"direct": false,
"version": "13.2.0",
"ecosystem": "npm"
},
{
"name": "merge-descriptors",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "merge-stream",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "micromatch",
"direct": false,
"version": "4.0.8",
"ecosystem": "npm"
},
{
"name": "mime",
"direct": false,
"version": "4.1.0",
"ecosystem": "npm"
},
{
"name": "mime-db",
"direct": false,
"version": "1.54.0",
"ecosystem": "npm"
},
{
"name": "mime-types",
"direct": false,
"version": "3.0.2",
"ecosystem": "npm"
},
{
"name": "mimic-fn",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "mimic-fn",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "mimic-response",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "minimatch",
"direct": false,
"version": "10.2.4",
"ecosystem": "npm"
},
{
"name": "minimatch",
"direct": false,
"version": "10.2.5",
"ecosystem": "npm"
},
{
"name": "minimatch",
"direct": false,
"version": "3.1.5",
"ecosystem": "npm"
},
{
"name": "minimist",
"direct": false,
"version": "1.2.8",
"ecosystem": "npm"
},
{
"name": "minipass",
"direct": false,
"version": "3.3.6",
"ecosystem": "npm"
},
{
"name": "minipass",
"direct": false,
"version": "7.1.3",
"ecosystem": "npm"
},
{
"name": "minipass-collect",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "minipass-fetch",
"direct": false,
"version": "5.0.2",
"ecosystem": "npm"
},
{
"name": "minipass-flush",
"direct": false,
"version": "1.0.6",
"ecosystem": "npm"
},
{
"name": "minipass-pipeline",
"direct": false,
"version": "1.2.4",
"ecosystem": "npm"
},
{
"name": "minipass-sized",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "minizlib",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "mkdirp-classic",
"direct": false,
"version": "0.5.3",
"ecosystem": "npm"
},
{
"name": "mlly",
"direct": false,
"version": "1.8.2",
"ecosystem": "npm"
},
{
"name": "ms",
"direct": false,
"version": "2.1.3",
"ecosystem": "npm"
},
{
"name": "mute-stream",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "mz",
"direct": false,
"version": "2.7.0",
"ecosystem": "npm"
},
{
"name": "nanoid",
"direct": false,
"version": "3.3.12",
"ecosystem": "npm"
},
{
"name": "napi-build-utils",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "natural-compare",
"direct": false,
"version": "1.4.0",
"ecosystem": "npm"
},
{
"name": "negotiator",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "neo-async",
"direct": false,
"version": "2.6.2",
"ecosystem": "npm"
},
{
"name": "nerf-dart",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "node-abi",
"direct": false,
"version": "3.89.0",
"ecosystem": "npm"
},
{
"name": "node-addon-api",
"direct": false,
"version": "4.3.0",
"ecosystem": "npm"
},
{
"name": "node-emoji",
"direct": false,
"version": "2.2.0",
"ecosystem": "npm"
},
{
"name": "node-gyp",
"direct": false,
"version": "12.4.0",
"ecosystem": "npm"
},
{
"name": "nopt",
"direct": false,
"version": "9.0.0",
"ecosystem": "npm"
},
{
"name": "normalize-package-data",
"direct": false,
"version": "6.0.2",
"ecosystem": "npm"
},
{
"name": "normalize-package-data",
"direct": false,
"version": "8.0.0",
"ecosystem": "npm"
},
{
"name": "normalize-url",
"direct": false,
"version": "9.0.0",
"ecosystem": "npm"
},
{
"name": "npm",
"direct": false,
"version": "11.18.0",
"ecosystem": "npm"
},
{
"name": "npm-audit-report",
"direct": false,
"version": "7.0.0",
"ecosystem": "npm"
},
{
"name": "npm-bundled",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "npm-install-checks",
"direct": false,
"version": "8.0.0",
"ecosystem": "npm"
},
{
"name": "npm-normalize-package-bin",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "npm-package-arg",
"direct": false,
"version": "13.0.2",
"ecosystem": "npm"
},
{
"name": "npm-packlist",
"direct": false,
"version": "10.0.4",
"ecosystem": "npm"
},
{
"name": "npm-pick-manifest",
"direct": false,
"version": "11.0.3",
"ecosystem": "npm"
},
{
"name": "npm-profile",
"direct": false,
"version": "12.0.2",
"ecosystem": "npm"
},
{
"name": "npm-registry-fetch",
"direct": false,
"version": "19.1.1",
"ecosystem": "npm"
},
{
"name": "npm-run-path",
"direct": false,
"version": "4.0.1",
"ecosystem": "npm"
},
{
"name": "npm-run-path",
"direct": false,
"version": "5.3.0",
"ecosystem": "npm"
},
{
"name": "npm-run-path",
"direct": false,
"version": "6.0.0",
"ecosystem": "npm"
},
{
"name": "npm-user-validate",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "object-assign",
"direct": false,
"version": "4.1.1",
"ecosystem": "npm"
},
{
"name": "object-inspect",
"direct": false,
"version": "1.13.4",
"ecosystem": "npm"
},
{
"name": "obug",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "on-finished",
"direct": false,
"version": "2.4.1",
"ecosystem": "npm"
},
{
"name": "once",
"direct": false,
"version": "1.4.0",
"ecosystem": "npm"
},
{
"name": "one-time",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "onetime",
"direct": false,
"version": "5.1.2",
"ecosystem": "npm"
},
{
"name": "onetime",
"direct": false,
"version": "6.0.0",
"ecosystem": "npm"
},
{
"name": "optionator",
"direct": false,
"version": "0.9.4",
"ecosystem": "npm"
},
{
"name": "p-each-series",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "p-event",
"direct": false,
"version": "6.0.1",
"ecosystem": "npm"
},
{
"name": "p-filter",
"direct": false,
"version": "4.1.0",
"ecosystem": "npm"
},
{
"name": "p-is-promise",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "p-limit",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "p-limit",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "p-locate",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "p-locate",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "p-map",
"direct": false,
"version": "7.0.4",
"ecosystem": "npm"
},
{
"name": "p-reduce",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "p-reduce",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "p-timeout",
"direct": false,
"version": "6.1.4",
"ecosystem": "npm"
},
{
"name": "p-try",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "pacote",
"direct": false,
"version": "21.5.1",
"ecosystem": "npm"
},
{
"name": "parent-module",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "parse-conflict-json",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "parse-json",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "parse-json",
"direct": false,
"version": "5.2.0",
"ecosystem": "npm"
},
{
"name": "parse-json",
"direct": false,
"version": "8.3.0",
"ecosystem": "npm"
},
{
"name": "parse-ms",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "parse5",
"direct": false,
"version": "5.1.1",
"ecosystem": "npm"
},
{
"name": "parse5",
"direct": false,
"version": "6.0.1",
"ecosystem": "npm"
},
{
"name": "parse5-htmlparser2-tree-adapter",
"direct": false,
"version": "6.0.1",
"ecosystem": "npm"
},
{
"name": "parseurl",
"direct": false,
"version": "1.3.3",
"ecosystem": "npm"
},
{
"name": "path-exists",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "path-exists",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "path-key",
"direct": false,
"version": "3.1.1",
"ecosystem": "npm"
},
{
"name": "path-key",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "path-scurry",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "path-to-regexp",
"direct": false,
"version": "8.4.0",
"ecosystem": "npm"
},
{
"name": "path-type",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "pathe",
"direct": false,
"version": "2.0.3",
"ecosystem": "npm"
},
{
"name": "picocolors",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "picomatch",
"direct": false,
"version": "2.3.2",
"ecosystem": "npm"
},
{
"name": "picomatch",
"direct": false,
"version": "4.0.4",
"ecosystem": "npm"
},
{
"name": "pify",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "pirates",
"direct": false,
"version": "4.0.7",
"ecosystem": "npm"
},
{
"name": "pkce-challenge",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "pkg-conf",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "pkg-types",
"direct": false,
"version": "1.3.1",
"ecosystem": "npm"
},
{
"name": "postcss",
"direct": false,
"version": "8.5.15",
"ecosystem": "npm"
},
{
"name": "postcss-load-config",
"direct": false,
"version": "6.0.1",
"ecosystem": "npm"
},
{
"name": "postcss-selector-parser",
"direct": false,
"version": "7.1.4",
"ecosystem": "npm"
},
{
"name": "powershell-utils",
"direct": false,
"version": "0.1.0",
"ecosystem": "npm"
},
{
"name": "prebuild-install",
"direct": false,
"version": "7.1.3",
"ecosystem": "npm"
},
{
"name": "prelude-ls",
"direct": false,
"version": "1.2.1",
"ecosystem": "npm"
},
{
"name": "prettier",
"direct": false,
"version": "3.8.1",
"ecosystem": "npm"
},
{
"name": "pretty-ms",
"direct": false,
"version": "9.3.0",
"ecosystem": "npm"
},
{
"name": "proc-log",
"direct": false,
"version": "6.1.0",
"ecosystem": "npm"
},
{
"name": "process-nextick-args",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "proggy",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "promise-all-reject-late",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "promise-call-limit",
"direct": false,
"version": "3.0.2",
"ecosystem": "npm"
},
{
"name": "promzard",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "proto-list",
"direct": false,
"version": "1.2.4",
"ecosystem": "npm"
},
{
"name": "proxy-addr",
"direct": false,
"version": "2.0.7",
"ecosystem": "npm"
},
{
"name": "pump",
"direct": false,
"version": "3.0.4",
"ecosystem": "npm"
},
{
"name": "punycode",
"direct": false,
"version": "2.3.1",
"ecosystem": "npm"
},
{
"name": "qrcode-terminal",
"direct": false,
"version": "0.12.0",
"ecosystem": "npm"
},
{
"name": "qs",
"direct": false,
"version": "6.15.2",
"ecosystem": "npm"
},
{
"name": "range-parser",
"direct": false,
"version": "1.2.1",
"ecosystem": "npm"
},
{
"name": "raw-body",
"direct": false,
"version": "3.0.2",
"ecosystem": "npm"
},
{
"name": "rc",
"direct": false,
"version": "1.2.8",
"ecosystem": "npm"
},
{
"name": "read",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "read-cmd-shim",
"direct": false,
"version": "6.0.0",
"ecosystem": "npm"
},
{
"name": "read-package-up",
"direct": false,
"version": "11.0.0",
"ecosystem": "npm"
},
{
"name": "read-package-up",
"direct": false,
"version": "12.0.0",
"ecosystem": "npm"
},
{
"name": "read-pkg",
"direct": false,
"version": "10.1.0",
"ecosystem": "npm"
},
{
"name": "read-pkg",
"direct": false,
"version": "9.0.1",
"ecosystem": "npm"
},
{
"name": "readable-stream",
"direct": false,
"version": "2.3.8",
"ecosystem": "npm"
},
{
"name": "readable-stream",
"direct": false,
"version": "3.6.2",
"ecosystem": "npm"
},
{
"name": "readdirp",
"direct": false,
"version": "4.1.2",
"ecosystem": "npm"
},
{
"name": "registry-auth-token",
"direct": false,
"version": "5.1.1",
"ecosystem": "npm"
},
{
"name": "require-directory",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "require-from-string",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "resolve-from",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "resolve-from",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "resolve-pkg-maps",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "rolldown",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "rollup",
"direct": false,
"version": "4.60.0",
"ecosystem": "npm"
},
{
"name": "router",
"direct": false,
"version": "2.2.0",
"ecosystem": "npm"
},
{
"name": "run-applescript",
"direct": false,
"version": "7.1.0",
"ecosystem": "npm"
},
{
"name": "safe-buffer",
"direct": false,
"version": "5.1.2",
"ecosystem": "npm"
},
{
"name": "safe-buffer",
"direct": false,
"version": "5.2.1",
"ecosystem": "npm"
},
{
"name": "safe-stable-stringify",
"direct": false,
"version": "2.5.0",
"ecosystem": "npm"
},
{
"name": "safer-buffer",
"direct": false,
"version": "2.1.2",
"ecosystem": "npm"
},
{
"name": "semantic-release",
"direct": false,
"version": "25.0.3",
"ecosystem": "npm"
},
{
"name": "semver",
"direct": false,
"version": "7.7.4",
"ecosystem": "npm"
},
{
"name": "semver",
"direct": false,
"version": "7.8.5",
"ecosystem": "npm"
},
{
"name": "semver-regex",
"direct": false,
"version": "4.0.5",
"ecosystem": "npm"
},
{
"name": "send",
"direct": false,
"version": "1.2.1",
"ecosystem": "npm"
},
{
"name": "serve-static",
"direct": false,
"version": "2.2.1",
"ecosystem": "npm"
},
{
"name": "setprototypeof",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "shebang-command",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "shebang-regex",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "side-channel",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "side-channel-list",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "side-channel-map",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "side-channel-weakmap",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "siginfo",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "signal-exit",
"direct": false,
"version": "3.0.7",
"ecosystem": "npm"
},
{
"name": "signal-exit",
"direct": false,
"version": "4.1.0",
"ecosystem": "npm"
},
{
"name": "signale",
"direct": false,
"version": "1.4.0",
"ecosystem": "npm"
},
{
"name": "sigstore",
"direct": false,
"version": "4.1.1",
"ecosystem": "npm"
},
{
"name": "simple-concat",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "simple-get",
"direct": false,
"version": "4.0.1",
"ecosystem": "npm"
},
{
"name": "skin-tone",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "smart-buffer",
"direct": false,
"version": "4.2.0",
"ecosystem": "npm"
},
{
"name": "socks",
"direct": false,
"version": "2.8.9",
"ecosystem": "npm"
},
{
"name": "socks-proxy-agent",
"direct": false,
"version": "8.0.5",
"ecosystem": "npm"
},
{
"name": "source-map",
"direct": false,
"version": "0.6.1",
"ecosystem": "npm"
},
{
"name": "source-map",
"direct": false,
"version": "0.7.6",
"ecosystem": "npm"
},
{
"name": "source-map-js",
"direct": false,
"version": "1.2.1",
"ecosystem": "npm"
},
{
"name": "spawn-error-forwarder",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "spdx-correct",
"direct": false,
"version": "3.2.0",
"ecosystem": "npm"
},
{
"name": "spdx-exceptions",
"direct": false,
"version": "2.5.0",
"ecosystem": "npm"
},
{
"name": "spdx-expression-parse",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "spdx-expression-parse",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "spdx-license-ids",
"direct": false,
"version": "3.0.23",
"ecosystem": "npm"
},
{
"name": "split2",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "ssri",
"direct": false,
"version": "13.0.1",
"ecosystem": "npm"
},
{
"name": "stack-trace",
"direct": false,
"version": "0.0.10",
"ecosystem": "npm"
},
{
"name": "stackback",
"direct": false,
"version": "0.0.2",
"ecosystem": "npm"
},
{
"name": "statuses",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "std-env",
"direct": false,
"version": "4.1.0",
"ecosystem": "npm"
},
{
"name": "stream-combiner2",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "string-width",
"direct": false,
"version": "4.2.3",
"ecosystem": "npm"
},
{
"name": "string-width",
"direct": false,
"version": "7.2.0",
"ecosystem": "npm"
},
{
"name": "string_decoder",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "strip-ansi",
"direct": false,
"version": "6.0.1",
"ecosystem": "npm"
},
{
"name": "strip-ansi",
"direct": false,
"version": "7.2.0",
"ecosystem": "npm"
},
{
"name": "strip-bom",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "strip-final-newline",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "strip-final-newline",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "strip-final-newline",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "strip-json-comments",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "strip-json-comments",
"direct": false,
"version": "3.1.1",
"ecosystem": "npm"
},
{
"name": "sucrase",
"direct": false,
"version": "3.35.1",
"ecosystem": "npm"
},
{
"name": "super-regex",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "supports-color",
"direct": false,
"version": "10.2.2",
"ecosystem": "npm"
},
{
"name": "supports-color",
"direct": false,
"version": "5.5.0",
"ecosystem": "npm"
},
{
"name": "supports-color",
"direct": false,
"version": "7.2.0",
"ecosystem": "npm"
},
{
"name": "supports-hyperlinks",
"direct": false,
"version": "3.2.0",
"ecosystem": "npm"
},
{
"name": "tagged-tag",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "tar",
"direct": false,
"version": "7.5.19",
"ecosystem": "npm"
},
{
"name": "tar-fs",
"direct": false,
"version": "2.1.4",
"ecosystem": "npm"
},
{
"name": "tar-stream",
"direct": false,
"version": "2.2.0",
"ecosystem": "npm"
},
{
"name": "temp-dir",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "tempy",
"direct": false,
"version": "3.2.0",
"ecosystem": "npm"
},
{
"name": "text-hex",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "text-table",
"direct": false,
"version": "0.2.0",
"ecosystem": "npm"
},
{
"name": "thenify",
"direct": false,
"version": "3.3.1",
"ecosystem": "npm"
},
{
"name": "thenify-all",
"direct": false,
"version": "1.6.0",
"ecosystem": "npm"
},
{
"name": "through2",
"direct": false,
"version": "2.0.5",
"ecosystem": "npm"
},
{
"name": "time-span",
"direct": false,
"version": "5.1.0",
"ecosystem": "npm"
},
{
"name": "tiny-relative-date",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "tinybench",
"direct": false,
"version": "2.9.0",
"ecosystem": "npm"
},
{
"name": "tinyexec",
"direct": false,
"version": "0.3.2",
"ecosystem": "npm"
},
{
"name": "tinyexec",
"direct": false,
"version": "1.2.4",
"ecosystem": "npm"
},
{
"name": "tinyglobby",
"direct": false,
"version": "0.2.17",
"ecosystem": "npm"
},
{
"name": "tinyrainbow",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "to-regex-range",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "toidentifier",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "traverse",
"direct": false,
"version": "0.6.8",
"ecosystem": "npm"
},
{
"name": "tree-kill",
"direct": false,
"version": "1.2.2",
"ecosystem": "npm"
},
{
"name": "treeverse",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "triple-beam",
"direct": false,
"version": "1.4.1",
"ecosystem": "npm"
},
{
"name": "ts-api-utils",
"direct": false,
"version": "2.5.0",
"ecosystem": "npm"
},
{
"name": "ts-interface-checker",
"direct": false,
"version": "0.1.13",
"ecosystem": "npm"
},
{
"name": "tslib",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "tsup",
"direct": false,
"version": "8.5.1",
"ecosystem": "npm"
},
{
"name": "tsx",
"direct": false,
"version": "4.21.0",
"ecosystem": "npm"
},
{
"name": "tuf-js",
"direct": false,
"version": "4.1.0",
"ecosystem": "npm"
},
{
"name": "tunnel",
"direct": false,
"version": "0.0.6",
"ecosystem": "npm"
},
{
"name": "tunnel-agent",
"direct": false,
"version": "0.6.0",
"ecosystem": "npm"
},
{
"name": "type-check",
"direct": false,
"version": "0.4.0",
"ecosystem": "npm"
},
{
"name": "type-fest",
"direct": false,
"version": "1.4.0",
"ecosystem": "npm"
},
{
"name": "type-fest",
"direct": false,
"version": "2.19.0",
"ecosystem": "npm"
},
{
"name": "type-fest",
"direct": false,
"version": "4.41.0",
"ecosystem": "npm"
},
{
"name": "type-fest",
"direct": false,
"version": "5.5.0",
"ecosystem": "npm"
},
{
"name": "type-is",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "typescript",
"direct": false,
"version": "5.9.3",
"ecosystem": "npm"
},
{
"name": "ufo",
"direct": false,
"version": "1.6.3",
"ecosystem": "npm"
},
{
"name": "uglify-js",
"direct": false,
"version": "3.19.3",
"ecosystem": "npm"
},
{
"name": "undici",
"direct": false,
"version": "6.27.0",
"ecosystem": "npm"
},
{
"name": "undici",
"direct": false,
"version": "7.28.0",
"ecosystem": "npm"
},
{
"name": "undici-types",
"direct": false,
"version": "6.21.0",
"ecosystem": "npm"
},
{
"name": "unicode-emoji-modifier-base",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "unicorn-magic",
"direct": false,
"version": "0.1.0",
"ecosystem": "npm"
},
{
"name": "unicorn-magic",
"direct": false,
"version": "0.3.0",
"ecosystem": "npm"
},
{
"name": "unicorn-magic",
"direct": false,
"version": "0.4.0",
"ecosystem": "npm"
},
{
"name": "unique-string",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "universal-user-agent",
"direct": false,
"version": "7.0.3",
"ecosystem": "npm"
},
{
"name": "universalify",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "unpipe",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "uri-js",
"direct": false,
"version": "4.4.1",
"ecosystem": "npm"
},
{
"name": "url-join",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "util-deprecate",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "validate-npm-package-license",
"direct": false,
"version": "3.0.4",
"ecosystem": "npm"
},
{
"name": "validate-npm-package-name",
"direct": false,
"version": "7.0.2",
"ecosystem": "npm"
},
{
"name": "vary",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "vite",
"direct": false,
"version": "8.0.16",
"ecosystem": "npm"
},
{
"name": "vitest",
"direct": false,
"version": "4.1.8",
"ecosystem": "npm"
},
{
"name": "walk-up-path",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "web-worker",
"direct": false,
"version": "1.5.0",
"ecosystem": "npm"
},
{
"name": "which",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "which",
"direct": false,
"version": "6.0.1",
"ecosystem": "npm"
},
{
"name": "why-is-node-running",
"direct": false,
"version": "2.3.0",
"ecosystem": "npm"
},
{
"name": "winston-transport",
"direct": false,
"version": "4.9.0",
"ecosystem": "npm"
},
{
"name": "word-wrap",
"direct": false,
"version": "1.2.5",
"ecosystem": "npm"
},
{
"name": "wordwrap",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "wrap-ansi",
"direct": false,
"version": "7.0.0",
"ecosystem": "npm"
},
{
"name": "wrap-ansi",
"direct": false,
"version": "9.0.2",
"ecosystem": "npm"
},
{
"name": "wrappy",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "write-file-atomic",
"direct": false,
"version": "7.0.1",
"ecosystem": "npm"
},
{
"name": "wsl-utils",
"direct": false,
"version": "0.1.0",
"ecosystem": "npm"
},
{
"name": "wsl-utils",
"direct": false,
"version": "0.3.1",
"ecosystem": "npm"
},
{
"name": "xtend",
"direct": false,
"version": "4.0.2",
"ecosystem": "npm"
},
{
"name": "y18n",
"direct": false,
"version": "5.0.8",
"ecosystem": "npm"
},
{
"name": "yallist",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "yallist",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "yargs",
"direct": false,
"version": "16.2.0",
"ecosystem": "npm"
},
{
"name": "yargs",
"direct": false,
"version": "18.0.0",
"ecosystem": "npm"
},
{
"name": "yargs-parser",
"direct": false,
"version": "20.2.9",
"ecosystem": "npm"
},
{
"name": "yargs-parser",
"direct": false,
"version": "22.0.0",
"ecosystem": "npm"
},
{
"name": "yocto-queue",
"direct": false,
"version": "0.1.0",
"ecosystem": "npm"
},
{
"name": "yoctocolors",
"direct": false,
"version": "2.1.2",
"ecosystem": "npm"
}
],
"collected": true,
"truncated": false,
"total_count": 864,
"direct_count": 16,
"indirect_count": 848
}
},
"maintainership": {
"issues": {
"open_prs": 4,
"merged_prs": 341,
"open_issues": 1,
"closed_ratio": 0.994,
"closed_issues": 159,
"closed_unmerged_prs": 63
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "eirikb",
"commits": 294,
"avatar_url": "https://avatars.githubusercontent.com/u/241706?v=4"
},
{
"type": "User",
"login": "okapi-ca",
"commits": 77,
"avatar_url": "https://avatars.githubusercontent.com/u/197928399?v=4"
},
{
"type": "User",
"login": "BruceGao20",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/161088851?v=4"
},
{
"type": "User",
"login": "christiet",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/1181260?v=4"
},
{
"type": "User",
"login": "lestephen",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/30328443?v=4"
},
{
"type": "User",
"login": "castaples",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/6000384?v=4"
},
{
"type": "User",
"login": "davidrudduck",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/47308254?v=4"
},
{
"type": "User",
"login": "steffen-heil-secforge",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/156903037?v=4"
},
{
"type": "User",
"login": "ctcanbol",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/103742287?v=4"
},
{
"type": "User",
"login": "fatemerhmi",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/16163952?v=4"
}
],
"contributors_sampled": 52,
"top_contributor_share": 0.653
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"build.yml",
"release.yml"
],
"has_docs_dir": true,
"linter_configs": [
"eslint.config.js"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 3,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 4,
"reason": "Found 8/20 approved changesets -- score normalized to 4",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 3 contributing companies or organizations -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 3,
"reason": "dependency not pinned by hash detected -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 4,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 6,
"reason": "4 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "daf61b02ca551a70845dbaff42e9d57098638184",
"ran_at": "2026-07-23T16:37:13Z",
"aggregate_score": 6,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-23T16:35:45Z",
"oldest_open_prs": [
{
"number": 556,
"created_at": "2026-07-06T10:23:39Z",
"last_comment_at": "2026-07-14T07:25:23Z",
"last_comment_author": "eirikb"
},
{
"number": 573,
"created_at": "2026-07-20T11:07:19Z",
"last_comment_at": "2026-07-21T10:44:14Z",
"last_comment_author": "eirikb"
},
{
"number": 587,
"created_at": "2026-07-22T14:32:57Z",
"last_comment_at": "2026-07-23T06:30:42Z",
"last_comment_author": "eirikb"
},
{
"number": 589,
"created_at": "2026-07-22T15:50:49Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-23T16:35:39Z",
"ci_last_conclusion": null,
"oldest_open_issues": [
{
"number": 574,
"created_at": "2026-07-20T16:05:26Z",
"last_comment_at": "2026-07-21T13:25:35Z",
"last_comment_author": "eirikb"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/Softeria/ms-365-mcp-server",
"host": "github.com",
"name": "ms-365-mcp-server",
"owner": "Softeria"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"security": 68,
"vitality": 96,
"community": 68,
"governance": 68,
"engineering": 76
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 96,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 93,
"inputs": {
"commits_last_year": 327,
"human_commit_share": 0.76,
"days_since_last_push": 0,
"active_weeks_last_year": 42
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "42/52 weeks with commits",
"points": 29.1,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 42
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "327 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 327
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 100,
"latest_release_tag": "v0.132.0",
"releases_from_tags": false,
"days_since_latest_release": 2,
"mean_days_between_releases": 3.1
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "100 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 100
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 2 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 2
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~3.1 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 3.1
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 0,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 0 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 0
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 68,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "good",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 74,
"inputs": {
"forks": 336,
"stars": 868,
"watchers": 9,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "868 stars",
"points": 47.7,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 868
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "336 forks",
"points": 21,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 336
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "9 watchers",
"points": 5,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 9
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "good",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 84,
"inputs": {
"packages": [
"@softeria/ms-365-mcp-server"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 108703
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "108,703 downloads/month across npm",
"points": 67.1,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 108703,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 68,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 52,
"top_contributor_share": 0.653
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 65% of commits",
"points": 7.8,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 65
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "52 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 52
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 3 contributing companies or organizations -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "excellent",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"merged_prs": 341,
"open_issues": 1,
"closed_issues": 159,
"issue_closed_ratio": 0.994,
"closed_unmerged_prs": 63
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "99% of issues closed",
"points": 46.5,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 99
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "341/404 decided PRs merged",
"points": 32.3,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 341,
"decided": 404
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 8/20 approved changesets -- score normalized to 4",
"points": 6,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 57,
"inputs": {
"followers": 24,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "Softeria",
"public_repos": 4,
"account_age_days": 3173
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "24 followers of Softeria",
"points": 10.1,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 24,
"login": "Softeria"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "4 public repos, account ~8 yr old",
"points": 17.1,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 4
}
},
{
"code": "account_age_years",
"params": {
"years": 8
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"@softeria/ms-365-mcp-server"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 0
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 0 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 0
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "257 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 257
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 76,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "2 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 2
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "eslint.config.js",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.js"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 68,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 60,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 6
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 8/20 approved changesets -- score normalized to 4",
"points": 3,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 3 contributing companies or organizations -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 3",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 2,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "4 existing vulnerabilities detected",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 864 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories",
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 864
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 4,
"affected_packages": 3,
"assessed_packages": 864,
"unassessed_packages": 0,
"affected_by_severity": "high 1, moderate 1, low 1",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 864,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 7
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 66,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "76 of 76 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 76,
"sampled": 76
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"package-lock.json"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"tsconfig.json"
],
"agent_commit_share": 0.2,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0.24
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "eslint.config.js",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.js"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "20 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 20,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "24 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 24,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 99,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 76016,
"source_files_sampled": 92,
"oversized_source_files": 2
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "2/92 source files over 60KB",
"points": 53.8,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 92,
"oversized": 2
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "moderate",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": true,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 20,
"status": "met",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"deps.dev does not index npm:@softeria/ms-365-mcp-server@0.132.1; advisories assessed against the repository dependency graph instead"
],
"report_type": "repository",
"generated_at": "2026-07-23T16:37:43.518574Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/Softeria/ms-365-mcp-server.svg",
"full_name": "Softeria/ms-365-mcp-server",
"license_state": "standard",
"license_spdx": "MIT"
}