Public recordModerate
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-25 03:38 UTC
Start9Labs / mempool-startos
Mempool for StartOS
Start9Labs/mempool-startos holds a health index of 59 out of 100, placing it in the Moderate band. It scores highest on Vitality (88/100) and lowest on Community & Adoption (32/100). It was last updated today. 2 contributors account for most of its recent work.
59
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
59
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
Start9Organization
589 followers111 public repossince Jul 2019
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
88
Development activity
86Excellent
How it's scored
| 36/36 | Push recency — last push 0 days ago |
| 21.5/36 | Commit cadence — 31/52 weeks with commits |
| 18/18 | Commit volume — 108 commits in the last year |
| 10/10 | OpenSSF Scorecard: Maintained — 25 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10 |
Inputs used
| commits_last_year | 108 |
| human_commit_share | 1 |
| days_since_last_push | 0 |
| active_weeks_last_year | 31 |
Release discipline
90Excellent
How it's scored
| 27/27 | Ships releases — 34 releases published |
| 36/36 | Release recency — latest release 0 days ago |
| 27/27 | Release cadence — a release every ~5.7 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases. |
Inputs used
| releases_count | 34 |
| latest_release_tag | v3.3.1_18 |
| releases_from_tags | no |
| days_since_latest_release | 0 |
| mean_days_between_releases | 5.7 |
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
32
Popularity & adoption
21Critical
How it's scored
| 11.3/60 | Stars — 6 stars |
| 10/25 | Forks — 17 forks |
| 0/15 | Watchers — 1 watchers |
Inputs used
| forks | 17 |
| stars | 6 |
| watchers | 1 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
44At risk
How it's scored
| 22.5/22.5 | README |
| 16.9/22.5 | License — license file present, not a recognized license |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
72
Maintainer resilience (bus factor)
63Moderate
How it's scored
| 25.2/54 | Bus factor — 2 contributor(s) cover half of all commits |
| 14.4/22.5 | Commit distribution — top contributor authored 36% of commits |
| 13.5/13.5 | Contributor breadth — 13 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 4 contributing companies or organizations |
Inputs used
| bus_factor | 2 |
| contributors_sampled | 13 |
| top_contributor_share | 0.359 |
How it's scored
| 44/46.8 | Issue resolution — 94% of issues closed |
| 31.9/38.3 | PR acceptance — 40/48 decided PRs merged |
| 3/15 | OpenSSF Scorecard: Code-Review — Found 6/29 approved changesets -- score normalized to 2 |
Inputs used
| merged_prs | 40 |
| open_issues | 1 |
| closed_issues | 16 |
| issue_closed_ratio | 0.941 |
| closed_unmerged_prs | 8 |
Ownership & stewardship
75Good
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 19.9/25 | Owner reach — 589 followers of Start9Labs |
| 25/25 | Track record — 111 public repos, account ~6 yr old |
Inputs used
| followers | 589 |
| owner_type | Organization |
| is_verified | — |
| owner_login | Start9Labs |
| public_repos | 111 |
| account_age_days | 2,553 |
Engineering Quality
Are baseline engineering and documentation practices in place?
42
Engineering practices
44At risk
How it's scored
| 24/24 | CI workflows — 3 workflow(s) |
| 0/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 7 out of 7 merged PRs checked by a CI test -- score normalized to 10 |
Inputs used
| has_ci | yes |
| has_tests | no |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Documentation
40At risk
How it's scored
| 30/30 | README |
| 0/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 10/10 | Repository description |
| 0/10 | Topics |
| 0/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | no |
| homepage | — |
| has_readme | yes |
| has_docs_dir | no |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
52
Security posture
40At risk
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0.8/7.5 | Branch-Protection — branch protection is not maximal on development and all release branches |
| 2.5/2.5 | CI-Tests — 7 out of 7 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 1.5/7.5 | Code-Review — Found 6/29 approved changesets -- score normalized to 2 |
| 2.5/2.5 | Contributors — project has 4 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.2/2.5 | License — license file detected |
| 7.5/7.5 | Maintained — 25 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — no data |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — Project has not signed or included provenance with any releases. |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 5.2/7.5 | Vulnerabilities — 3 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 17 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 1 |
| scorecard_aggregate | 4 |
Excluded from scoring (no data or not applicable): packaging. Remaining weights renormalized.
Dependency advisories
100Excellent
How it's scored
| 35/35 | Direct dependencies free of known advisories — no direct dependency carries a known advisory |
| 0/25 | Indirect dependencies free of known advisories — transitive set not separable from development and test dependencies in this scope |
| 0/40 | No advisories left outstanding — no advisory carries a publication date |
Inputs used
| source | osv |
| advisories | 5 |
| affected_packages | 3 |
| assessed_packages | 143 |
| unassessed_packages | 0 |
| affected_by_severity | high 3 |
| direct_affected_packages | 0 |
Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 143 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
63
Agent context & guidance
62Moderate
How it's scored
| 45/45 | Agent instructions — AGENTS.md, CLAUDE.md |
| 0/15 | Machine-readable docs (llms.txt) |
| 16.5/40 | Legible commit history — 31 of 100 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.31 |
| agent_instruction_files | AGENTS.md, CLAUDE.md |
| agent_instruction_max_bytes | 3,423 |
How it's scored
| 18/18 | One-command bootstrap — Makefile |
| 0/22 | Automated tests |
| 0/11 | Lint / format config |
| 11/11 | Static type checking — tsconfig.json |
| 10/10 | Reproducible environment — lockfile |
| 10/10 | Demonstrated agent practice — 36 of the last 100 commits agent-authored or agent-credited |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Inputs used
| has_nix | no |
| has_tests | no |
| lockfiles | package-lock.json |
| has_dockerfile | no |
| typed_language | yes |
| bootstrap_files | Makefile |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | tsconfig.json |
| agent_commit_share | 0.36 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
Code legibility for models
100Excellent
How it's scored
| 45/45 | Type-checkable code — TypeScript (statically typed) |
| 55/55 | Manageable file sizes — 0/27 source files over 60KB |
Inputs used
| primary_language | TypeScript |
| largest_source_bytes | 28,222 |
| source_files_sampled | 27 |
| oversized_source_files | 0 |
Key facts
6GitHub stars
13contributors
108commits, last 12 months
0days since last push
34releases
2bus factor
1open issues
npmpackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- Could not fetch npm package 'mempool-startos' from its registry
More detail
Star and fork history 0 ★ / 17 ⇿
0Stars
17Forks
27Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 0Patch 2
Each point covers 4 days.
OpenSSF Scorecard 4.0 / 10
4.0aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 1 | Branch-Protection | branch protection is not maximal on development and all release branches |
| 10 | CI-Tests | 7 out of 7 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 2 | Code-Review | Found 6/29 approved changesets -- score normalized to 2 |
| 10 | Contributors | project has 4 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 9 | License | license file detected |
| 10 | Maintained | 25 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10 |
| n/a | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| 0 | Signed-Releases | Project has not signed or included provenance with any releases. |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 7 | Vulnerabilities | 3 existing vulnerabilities detected |
Direct dependencies 4
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| npm | @start9labs/start-sdk | 2.0.7 | package.json |
| npm | bitcoin-core-startos | github:Start9Labs/bitcoin-core-startos#next/28.x | package.json |
| npm | cln-startos | github:Start9Labs/cln-startos#next | package.json |
| npm | lnd-startos | github:Start9Labs/lnd-startos#next | package.json |
All dependencies 143
Full resolved dependency set from the GitHub dependency graph: 1 direct and 142 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|---|---|---|
| npm | @start9labs/start-sdk | 2.0.7 | direct |
| npm | @eslint-community/eslint-utils | 4.9.1 | indirect |
| npm | @eslint-community/regexpp | 4.12.2 | indirect |
| npm | @eslint/config-array | 0.21.2 | indirect |
| npm | @eslint/config-helpers | 0.4.2 | indirect |
| npm | @eslint/core | 0.17.0 | indirect |
| npm | @eslint/eslintrc | 3.3.5 | indirect |
| npm | @eslint/js | 9.39.4 | indirect |
| npm | @eslint/object-schema | 2.1.7 | indirect |
| npm | @eslint/plugin-kit | 0.4.1 | indirect |
| npm | @humanfs/core | 0.19.2 | indirect |
| npm | @humanfs/node | 0.16.8 | indirect |
| npm | @humanfs/types | 0.15.0 | indirect |
| npm | @humanwhocodes/module-importer | 1.0.1 | indirect |
| npm | @humanwhocodes/retry | 0.4.3 | indirect |
| npm | @iarna/toml | 3.0.0 | indirect |
| npm | @noble/curves | 1.9.7 | indirect |
| npm | @noble/hashes | 1.8.0 | indirect |
| npm | @nodable/entities | 2.2.0 | indirect |
| npm | @types/estree | 1.0.9 | indirect |
| npm | @types/ini | 4.1.1 | indirect |
| npm | @types/json-schema | 7.0.15 | indirect |
| npm | @types/node | 22.20.0 | indirect |
| npm | @typescript-eslint/eslint-plugin | 8.61.0 | indirect |
| npm | @typescript-eslint/parser | 8.61.0 | indirect |
| npm | @typescript-eslint/project-service | 8.61.0 | indirect |
| npm | @typescript-eslint/scope-manager | 8.61.0 | indirect |
| npm | @typescript-eslint/tsconfig-utils | 8.61.0 | indirect |
| npm | @typescript-eslint/type-utils | 8.61.0 | indirect |
| npm | @typescript-eslint/types | 8.61.0 | indirect |
| npm | @typescript-eslint/typescript-estree | 8.61.0 | indirect |
| npm | @typescript-eslint/utils | 8.61.0 | indirect |
| npm | @typescript-eslint/visitor-keys | 8.61.0 | indirect |
| npm | @vercel/ncc | 0.38.4 | indirect |
| npm | acorn | 8.16.0 | indirect |
| npm | acorn-jsx | 5.3.2 | indirect |
| npm | ajv | 6.15.0 | indirect |
| npm | ansi-styles | 4.3.0 | indirect |
| npm | anynum | 1.0.1 | indirect |
| npm | argparse | 2.0.1 | indirect |
| npm | balanced-match | 1.0.2 | indirect |
| npm | balanced-match | 4.0.4 | indirect |
| npm | brace-expansion | 1.1.15 | indirect |
| npm | brace-expansion | 5.0.6 | indirect |
| npm | callsites | 3.1.0 | indirect |
| npm | chalk | 4.1.2 | indirect |
| npm | color-convert | 2.0.1 | indirect |
| npm | color-name | 1.1.4 | indirect |
| npm | concat-map | 0.0.1 | indirect |
| npm | cross-spawn | 7.0.6 | indirect |
| npm | debug | 4.4.3 | indirect |
| npm | deep-equality-data-structures | 2.0.0 | indirect |
| npm | deep-is | 0.1.4 | indirect |
| npm | diskusage | 1.2.0 | indirect |
| npm | dotenv | 17.4.2 | indirect |
| npm | es6-promise | 4.2.8 | indirect |
| npm | escape-string-regexp | 4.0.0 | indirect |
| npm | eslint | 9.39.4 | indirect |
| npm | eslint-scope | 8.4.0 | indirect |
| npm | eslint-visitor-keys | 3.4.3 | indirect |
| npm | eslint-visitor-keys | 4.2.1 | indirect |
| npm | eslint-visitor-keys | 5.0.1 | indirect |
| npm | espree | 10.4.0 | indirect |
| npm | esquery | 1.7.0 | indirect |
| npm | esrecurse | 4.3.0 | indirect |
| npm | estraverse | 5.3.0 | indirect |
| npm | esutils | 2.0.3 | indirect |
| npm | fast-deep-equal | 3.1.3 | indirect |
| npm | fast-json-stable-stringify | 2.1.0 | indirect |
| npm | fast-levenshtein | 2.0.6 | indirect |
| npm | fast-xml-builder | 1.2.1 | indirect |
| npm | fast-xml-parser | 5.7.3 | indirect |
| npm | fdir | 6.5.0 | indirect |
| npm | file-entry-cache | 8.0.0 | indirect |
| npm | find-up | 5.0.0 | indirect |
| npm | flat-cache | 4.0.1 | indirect |
| npm | flatted | 3.4.2 | indirect |
| npm | glob-parent | 6.0.2 | indirect |
| npm | globals | 14.0.0 | indirect |
| npm | has-flag | 4.0.0 | indirect |
| npm | ignore | 5.3.2 | indirect |
| npm | ignore | 7.0.5 | indirect |
| npm | import-fresh | 3.3.1 | indirect |
| npm | imurmurhash | 0.1.4 | indirect |
| npm | ini | 5.0.0 | indirect |
| npm | is-extglob | 2.1.1 | indirect |
| npm | is-glob | 4.0.3 | indirect |
| npm | isexe | 2.0.0 | indirect |
| npm | isomorphic-fetch | 3.0.0 | indirect |
| npm | js-yaml | 4.2.0 | indirect |
| npm | json-buffer | 3.0.1 | indirect |
| npm | json-schema-traverse | 0.4.1 | indirect |
| npm | json-stable-stringify-without-jsonify | 1.0.1 | indirect |
| npm | keyv | 4.5.4 | indirect |
| npm | levn | 0.4.1 | indirect |
| npm | locate-path | 6.0.0 | indirect |
| npm | lodash.merge | 4.6.2 | indirect |
| npm | mime | 4.1.0 | indirect |
| npm | minimatch | 10.2.5 | indirect |
| npm | minimatch | 3.1.5 | indirect |
| npm | ms | 2.1.3 | indirect |
| npm | nan | 2.28.0 | indirect |
| npm | natural-compare | 1.4.0 | indirect |
| npm | node-fetch | 2.7.0 | indirect |
| npm | node-forge | 1.4.0 | indirect |
| npm | object-hash | 3.0.0 | indirect |
| npm | optionator | 0.9.4 | indirect |
| npm | p-limit | 3.1.0 | indirect |
| npm | p-locate | 5.0.0 | indirect |
| npm | parent-module | 1.0.1 | indirect |
| npm | path-exists | 4.0.0 | indirect |
| npm | path-expression-matcher | 1.6.1 | indirect |
| npm | path-key | 3.1.1 | indirect |
| npm | picomatch | 4.0.4 | indirect |
| npm | prelude-ls | 1.2.1 | indirect |
| npm | prettier | 3.9.4 | indirect |
| npm | punycode | 2.3.1 | indirect |
| npm | resolve-from | 4.0.0 | indirect |
| npm | rfc4648 | 1.5.4 | indirect |
| npm | semver | 7.8.3 | indirect |
| npm | shebang-command | 2.0.0 | indirect |
| npm | shebang-regex | 3.0.0 | indirect |
| npm | strip-json-comments | 3.1.1 | indirect |
| npm | strnum | 2.4.1 | indirect |
| npm | supports-color | 7.2.0 | indirect |
| npm | tinyglobby | 0.2.17 | indirect |
| npm | tr46 | 0.0.3 | indirect |
| npm | ts-api-utils | 2.5.0 | indirect |
| npm | type-check | 0.4.0 | indirect |
| npm | typescript | 6.0.3 | indirect |
| npm | typescript-eslint | 8.61.0 | indirect |
| npm | undici-types | 6.21.0 | indirect |
| npm | uri-js | 4.4.1 | indirect |
| npm | webidl-conversions | 3.0.1 | indirect |
| npm | whatwg-fetch | 3.6.20 | indirect |
| npm | whatwg-url | 5.0.0 | indirect |
| npm | which | 2.0.2 | indirect |
| npm | word-wrap | 1.2.5 | indirect |
| npm | xml-naming | 0.1.0 | indirect |
| npm | yaml | 2.9.0 | indirect |
| npm | yocto-queue | 0.1.0 | indirect |
| npm | zod | 4.4.3 | indirect |
| npm | zod-deep-partial | 1.4.4 | indirect |
Dependency advisories 3
This repository publishes no package the index resolves, so its own dependency graph was assessed — 143 packages, which also include development and test pins that never ship: 3 carry known advisories, of which 0 are direct.
| Package | Version | Relation | Severity | Advisories | Fixed in |
|---|---|---|---|---|---|
| brace-expansion | 1.1.15 | indirect | high | 2 | 5.0.8 |
| brace-expansion | 5.0.6 | indirect | high | 2 | 5.0.8 |
| js-yaml | 4.2.0 | indirect | high | 1 | 4.3.0 |
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 16529,
"has_wiki": false,
"homepage": null,
"languages": {
"Makefile": 127,
"TypeScript": 95209
},
"pushed_at": "2026-07-25T02:33:11Z",
"created_at": "2021-04-22T10:31:09Z",
"owner_type": "Organization",
"updated_at": "2026-07-24T06:20:27Z",
"description": "Mempool for StartOS",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "master",
"license_spdx_raw": "NOASSERTION",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript"
]
},
"owner": {
"blog": "https://start9.com",
"name": "Start9",
"type": "Organization",
"login": "Start9Labs",
"company": null,
"location": "Denver, CO",
"followers": 589,
"avatar_url": "https://avatars.githubusercontent.com/u/53387992?v=4",
"created_at": "2019-07-28T03:58:26Z",
"is_verified": null,
"public_repos": 111,
"account_age_days": 2553
},
"license": {
"state": "custom",
"spdx_id": null,
"raw_spdx": "NOASSERTION",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v3.3.1_18",
"kind": "other",
"published_at": "2026-07-24T06:28:10Z"
},
{
"tag": "v3.3.1_17",
"kind": "other",
"published_at": "2026-07-23T00:46:06Z"
},
{
"tag": "v3.3.1_15",
"kind": "other",
"published_at": "2026-07-11T17:55:03Z"
},
{
"tag": "v3.3.1_14",
"kind": "other",
"published_at": "2026-07-03T21:07:39Z"
},
{
"tag": "v3.3.1_13",
"kind": "other",
"published_at": "2026-06-29T21:36:40Z"
},
{
"tag": "v3.3.1_12",
"kind": "other",
"published_at": "2026-06-17T21:27:19Z"
},
{
"tag": "v3.3.1_11",
"kind": "other",
"published_at": "2026-06-06T13:57:49Z"
},
{
"tag": "v3.3.1_10",
"kind": "other",
"published_at": "2026-06-03T00:59:52Z"
},
{
"tag": "v3.3.1_9",
"kind": "other",
"published_at": "2026-06-02T23:49:57Z"
},
{
"tag": "v3.3.1_8",
"kind": "other",
"published_at": "2026-06-02T15:26:11Z"
},
{
"tag": "v3.3.1_7",
"kind": "other",
"published_at": "2026-06-01T16:45:25Z"
},
{
"tag": "v3.3.1_6",
"kind": "other",
"published_at": "2026-05-20T17:19:26Z"
},
{
"tag": "v3.3.1_5",
"kind": "other",
"published_at": "2026-05-15T16:45:08Z"
},
{
"tag": "v3.2.1_9",
"kind": "other",
"published_at": "2026-04-04T03:18:42Z"
},
{
"tag": "v3.2.1.3",
"kind": "other",
"published_at": "2025-12-09T16:09:40Z"
},
{
"tag": "v3.2.1.2",
"kind": "other",
"published_at": "2025-09-09T21:49:07Z"
},
{
"tag": "v3.2.1.1",
"kind": "other",
"published_at": "2025-04-22T17:54:40Z"
},
{
"tag": "v3.0.1",
"kind": "patch",
"published_at": "2024-10-03T18:55:18Z"
},
{
"tag": "v3.0.0.3",
"kind": "other",
"published_at": "2024-09-23T16:11:04Z"
},
{
"tag": "v3.0.0.1",
"kind": "other",
"published_at": "2024-08-29T00:55:04Z"
},
{
"tag": "v2.5.1.2",
"kind": "other",
"published_at": "2024-06-17T23:52:04Z"
},
{
"tag": "v2.5.1.1",
"kind": "other",
"published_at": "2024-05-08T12:17:17Z"
},
{
"tag": "v2.5.1",
"kind": "patch",
"published_at": "2024-03-05T22:24:00Z"
},
{
"tag": "v2.5.0.6",
"kind": "other",
"published_at": "2023-11-03T15:21:59Z"
},
{
"tag": "v2.5.0.4",
"kind": "other",
"published_at": "2023-07-28T18:31:08Z"
},
{
"tag": "v2.5.0.3",
"kind": "other",
"published_at": "2023-07-12T19:33:05Z"
},
{
"tag": "v2.5.0.1",
"kind": "other",
"published_at": "2023-05-01T23:25:12Z"
},
{
"tag": "v2.4.0.3",
"kind": "other",
"published_at": "2022-12-07T23:10:52Z"
},
{
"tag": "v2.4.0.2",
"kind": "other",
"published_at": "2022-07-17T19:11:00Z"
},
{
"tag": "v2.4.0.1",
"kind": "other",
"published_at": "2022-07-06T23:00:45Z"
},
{
"tag": "v2.4.0",
"kind": "minor",
"published_at": "2022-06-14T03:29:05Z"
},
{
"tag": "v2.3.1.4",
"kind": "other",
"published_at": "2022-05-10T23:52:27Z"
},
{
"tag": "v2.3.1.3",
"kind": "other",
"published_at": "2022-04-15T11:33:33Z"
},
{
"tag": "v2.3.1.2",
"kind": "other",
"published_at": "2022-04-15T00:14:54Z"
}
],
"recent_commits": [
{
"oid": "a1b85a985593881ba3156304f8daa120816ed068",
"body": "chore: bump start-sdk to 2.0.7 (3.3.1:18)",
"is_bot": false,
"headline": "Merge pull request #65 from Start9Labs/next",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-07-24T06:20:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "23f583bea002afd8903894a58194335452d95dd0",
"body": "…tos,lnd-startos pin(s); 3.3.1:17 → 3.3.1:18",
"is_bot": false,
"headline": "chore: bump start-sdk to 2.0.7; refresh bitcoin-core-startos,cln-star…",
"author_name": "Helix",
"author_login": "helix-nine",
"committed_at": "2026-07-24T04:13:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf06b5630e80acbf60a17e3cee4658c10ab270d3",
"body": "* chore: migrate to start-sdk 2.0\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01F5qZh4QiVySBLkV5ya7XSr\n\n* feat: resolve bitcoind, lnd, and the selected indexer over the bridge reactively\n\nDoctrine v3 (issue start-technologies#3407): dependen\n[…]\nthub.com>\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>\nCo-authored-by: Helix <267227783+helix-nine@users.noreply.github.com>\nCo-authored-by: Dritz <63271929+DritzPS@users.noreply.github.com>",
"is_bot": false,
"headline": "chore: migrate to start-sdk 2.0 (#60)",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-07-23T00:38:00Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b804e324b4eac1a19ade0e3e7746c578f052546d",
"body": "withMysqlDump exceeds the SDK/StartOS backup timeouts on large indexed\ninstalls (a hardcoded 30s InnoDB-readiness wait and a ~180s dump/copy\nceiling, neither tunable from the package), so backups fail every time\nonce Block Summaries Indexing grows the MariaDB database.\n\nEverything in the database is\n[…]\nhe database by re-indexing on\nrestore. Also drop the cache volume (rebuildable disk cache the backend\nalready wipes-and-rebuilds via its boot guard).\n\nBumps to 3.3.1:15; updates README + instructions.",
"is_bot": false,
"headline": "fix: back up config only; rebuild db by re-index on restore (#61) (#62)",
"author_name": "Helix",
"author_login": "helix-nine",
"committed_at": "2026-07-11T17:48:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0248de589a40538adb38d40545b1e9da1ad4766e",
"body": "The backend's V8 heap ceiling was pinned at 2 GB for every host up to\n~22 GB RAM: the non-indexing formula took 1/8 of (RAM - 6 GB reserve)\nbut the 2 GB floor always won below ~22 GB, so #57/#59 only ever moved\nthe <10 GB branch and a 16 GB host never got more than 2 GB. When a\nlarge mempool disk ca\n[…]\n clean restarts keep it.\n- Add a \"Clear Backend Cache\" action (only-stopped) as a manual lever.\n\nBump to 3.3.1:14; update README + instructions.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: scale backend heap to host RAM and auto-drop an unloadable cache",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-07-03T19:19:01Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "46ba163cb8babe28a5c9c6ebece637e4621c0aaf",
"body": "PR #57 pinned the backend's V8 old-space heap to 1 GB on hosts with\n<10 GB RAM to relieve memory pressure. But a heap ceiling below the\nbackend's working set doesn't free RAM — it converts a rare full-stack\nsystem-OOM into a guaranteed self-OOM. The backend needs >1 GB to\nrestore its mempool/rbf dis\n[…]\nm RAM free and no kernel OOM-killer involved (start-os#3326).\n\nRemove the 1 GB low-RAM down-cap; non-indexing backends use the existing\n2 GB floor universally (which resolves to 2 GB on an 8 GB host).",
"is_bot": false,
"headline": "fix: raise backend heap cap that crashed Mempool on low-RAM hosts (#59)",
"author_name": "Helix",
"author_login": "helix-nine",
"committed_at": "2026-06-29T21:28:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "03502096306203ab5bc9cc30142ac6d5f7a0a1b1",
"body": "On <=8 GB hosts the backend's 2 GB old-space floor exceeds free RAM and lets\nRSS balloon until the kernel OOM-kills a sibling (Fulcrum, in #3326). Pin the\nnon-indexing baseline to 1 GB on hosts under 10 GB total RAM.\n\nAlso warn before enabling Lightning on hosts with <16 GB RAM, since the\nnetwork-graph sync is one of the heaviest background jobs.\n\nBumps to 3.3.1:12; updates README + instructions.",
"is_bot": false,
"headline": "fix: reduce low-RAM OOM risk (heap cap + Lightning warning) (#57)",
"author_name": "Helix",
"author_login": "helix-nine",
"committed_at": "2026-06-17T21:18:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a281ff1ee3e280a21224654e96afd6ca2982ed6",
"body": "LND stores its macaroons under data/chain/bitcoin/mainnet/ in its main\nvolume, but the mempool backend was pointed at the volume root. The\nbackend could not read the macaroon, so the LND REST connection never\ninitialized and the Lightning tab loaded forever.\n\nExisting installs self-heal on next start: MACAROON_PATH is an enforced\nz.literal whose .catch coerces the stale path, and seedFiles' merge({})\nrewrites the on-disk config. Bumps to 3.3.1:11.",
"is_bot": false,
"headline": "fix: correct LND read-only macaroon path for Lightning tab (#56)",
"author_name": "Helix",
"author_login": "helix-nine",
"committed_at": "2026-06-06T13:50:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7215d54196273a37ce3896ad56a61e7afa7673ef",
"body": "mempool.space/docs/ is a client-rendered SPA, so the support-server\ncrawler only got an empty shell (1 junk page). There's no crawlable\nupstream user docs and the repo has no docs/ dir, so point the bullet at\nthe repo README — a fetchable source that keeps the Documentation\nsection valid (which is also what preserves this file's body in the\nsupport bot's knowledge bundle).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: point Documentation at repo README",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-06-03T18:24:00Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "97fd8243d780defb8cb55b7ee7b05a8e9f9d6989",
"body": "The webui (frontend) reverse-proxies the API/websocket to the backend and is non-functional without it. Gate webui on the api daemon so its health reflects \"Mempool is usable\" (frontend up AND backend up). StartOS requires-propagation holds/stops webui while api isn't healthy and restarts it when api recovers — which dependents (e.g. Am I Exposed) rely on.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Release 3.3.1:10 — web interface waits for the backend API",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-06-03T00:52:58Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ff467f12c05fb37cc98cb23026c06b053aa91009",
"body": "The current.ts up-migration unconditionally reset MEMPOOL.POLL_RATE_MS / MEMPOOL_BLOCKS_AMOUNT to the Low-CPU profile. Because it lived in current.ts it re-ran on every update, clobbering the user's chosen profile. Drop the migration; the file-model defaults still land new installs on Low-CPU.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Release 3.3.1:9 — preserve performance profile across updates",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-06-02T23:40:52Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "14e56b2f8d29632ec3f1710846cae7e4fc9bf2c6",
"body": "Match the canonical hello-world wording: bumps edit startos/versions/current.ts in place; a new file is spun off only for a migration.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: sync CONTRIBUTING.md versioning step to current.ts strategy",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-06-02T16:40:35Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "33ee2c2f6260ec102a2e91461d12af9ccc17b649",
"body": "Revert the reactive main restart on Bitcoin Core .cookie change. The mempool backend's vendored RPC client clears its cached cookie on a 401 and re-reads the file on the next poll, so it picks up a rotated cookie on its own — no restart needed. The read-only bitcoind mount from 3.3.1:7 is kept.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Release 3.3.1:8 — drop cookie-rotation restart",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-06-02T15:10:44Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "794cb48a42df97489926b017bfc109768cd1aef3",
"body": "…ation\n\nmempool only reads bitcoind's .cookie for RPC auth, so mount the dependency volume read-only. Watch the cookie via const so main restarts when Bitcoin Core regenerates it on startup, preventing stale RPC auth.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Release 3.3.1:7 — mount bitcoind read-only, restart on RPC cookie rot…",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-06-01T16:37:35Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "5aa269e6f650d8326772c27d0e47da9bcc2c18dc",
"body": null,
"is_bot": false,
"headline": "chore: sync s9pk.mk with hello-world",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-05-28T23:00:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6c90878f68f8b55b423165b2cf155d6c3a48be62",
"body": "Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Bump version to 3.3.1:6; start-sdk 1.5.3 (mysql backup hang fix)",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-05-20T17:03:19Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "6b536b45e72e9b36e8df74bb14874fea4b9ad1a5",
"body": "- align CLAUDE.md / CONTRIBUTING.md / AGENTS.md / TODO.md with fleet canonical\n- rewrite UPDATING.md with `## Determining the upstream version` (per-source check commands) and `## Applying the bump`\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: standardise package doc set and expand UPDATING.md",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-05-20T01:07:10Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "970661dc0737e3b7cbea275759c7445c4dea680a",
"body": "The release workflow's BuildMatrix needs to know which leaf make-targets\nthe package wants built in parallel. Two minimal plumbing changes:\n\n 1. Default TARGETS to $(ARCHES) instead of 'arches'. Plain 'make'\n behavior is unchanged ('all: $(TARGETS)' still expands to the\n arches), but 'make \n[…]\nllm)\n are unaffected.\n\n 2. Add a generic 'print-%' rule. Standard make-variable introspection\n pattern — works for any variable, not just TARGETS.\n\nCompanion to start9labs/shared-workflows#5.",
"is_bot": false,
"headline": "s9pk.mk: expose TARGETS via 'make print-TARGETS' for matrix builds",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-05-18T22:16:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0044ed0e72f84c2665e51e031381340f696fac57",
"body": "Picks up the SDK 1.5.2 fix for empty database backups. See\nStart9Labs/start-os#3238.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Bump version to 3.3.1:5",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-05-15T16:36:07Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "00939e6bac57554e6c9b49a3a905ee4d7fb2bb10",
"body": "Fixes empty db dumps in backups. See Start9Labs/start-os#3238.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: bump @start9labs/start-sdk to 1.5.2",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-05-15T16:21:55Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a991099c8ee508fb49ed68d1395624d894035afe",
"body": "* chore: bump start-sdk to 1.5.0; refresh dep refs\n\n- @start9labs/start-sdk 1.3.3 → 1.5.0\n- Cast bitcoin-core-startos's autoconfig Action to our SDK's Action\n interface — sibling packages are still on 1.3.3, and 1.5.0 added\n effects.notification which makes structural Action matching fail in\n cre\n[…]\ninstalls migrate to Low-CPU on upgrade. PROFILES live in utils.ts\nas the single source of truth for the file-model defaults, migration, and\naction.\n\n---------\n\nCo-authored-by: Helix <helix@start9.com>",
"is_bot": false,
"headline": "chore: bump start-sdk to 1.5.0; refresh dep refs (#54)",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-05-14T06:52:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "34f33c898cac48c82ec49b815e1b53c702b61e85",
"body": "Pull recent changes: typecheck before bundling, and resolve git deps\nvia `git rev-parse` so the build works inside git worktrees.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Sync s9pk.mk with hello-world",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-05-02T01:35:10Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "5543ce5b1dc33bf8897299fedfb5025d0eead94c",
"body": "Drop the prior home file kept by error in the recent SDK bump.\nAny migration body has been merged into the current file and `other`\nis empty — users on prior versions migrate via current.up. No version\nchange.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Clean up versions/ shape",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-05-02T01:35:10Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "5520266cc46686ce4e891158dfa764aea0137e0c",
"body": null,
"is_bot": false,
"headline": "Bump version to 3.3.1:2",
"author_name": "Aiden McClelland",
"author_login": "dr-bonez",
"committed_at": "2026-04-29T05:06:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3a6e5855a80b21c6bc62bf3afd433ade27ac09e2",
"body": null,
"is_bot": false,
"headline": "Bump @start9labs/start-sdk to 1.3.3",
"author_name": "Aiden McClelland",
"author_login": "dr-bonez",
"committed_at": "2026-04-28T16:25:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13ed4a7a8ecebf6b30850ba5c7a59979c8836a46",
"body": "Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Release 3.3.1:1 — internal updates (start-sdk 1.2.0)",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-04-24T21:19:58Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1af5545f21f29fbd2d4d1a5cff463f82358d08a3",
"body": "…coin-core#28.x, SDK 1.3.2\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Release 3.3.1:0 — upstream v3.3.1, Configure Indexing action, pin bit…",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-04-22T01:10:15Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "6fa6b1369254f107815beb16394d30198fbe117d",
"body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "remove old workflow files",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-04-05T00:49:41Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ae2eb83e60f90d7fd9cb6daf7746fc94df11e6a7",
"body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "update workflows",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-04-04T22:32:29Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "077bf9c65d7203fce881350b74fbd114adcbb70d",
"body": "The 0.3.5.1 entrypoint set root to unix_socket auth, but the official\nMariaDB image's healthcheck.sh needs password auth via .my-healthcheck.cnf.\nThat file is only created on fresh init, so upgrades with an existing data\ndir left the healthcheck unable to authenticate, causing mempool to hang\nat \"API: waiting...\"\n\nWrite .my-healthcheck.cnf with the existing mempool user credentials\nduring the 0.3.5.1 migration.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix MariaDB healthcheck auth failure on 0.3.5.1 → 0.4.0 upgrade",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-04-04T02:59:16Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "55191b7aa0ba7503fb923f26bc2fda2a2d122d3a",
"body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Update README",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-04-01T18:02:55Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "58ef0d5b4f29577baa65da7a4a4987621d88c0e7",
"body": null,
"is_bot": false,
"headline": "fix workflows",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-04-01T06:10:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8bc1bf714b25fbc6f1961d108fcac63542973ff1",
"body": "Update/040",
"is_bot": false,
"headline": "Merge pull request #48 from Start9Labs/update/040",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-04-01T05:40:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a1a7c29f59cf4afef9a235aed2b3a3f959864826",
"body": null,
"is_bot": false,
"headline": "Merge master (resolve conflicts favoring 040)",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-04-01T05:39:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9e82d97c1e73713dd4ece7b25e96c537c6f91f5c",
"body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Release 3.2.1:8 — SDK 1.0.0",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-04-01T05:32:10Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "5628bff456734cbda4cb2aede356a939311c982f",
"body": null,
"is_bot": false,
"headline": "no need to back up main",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-03-27T06:47:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dab0ca3e7544e43c1749b42e7f796324750d69cc",
"body": null,
"is_bot": false,
"headline": "prune null",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-03-27T00:00:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a6d1f6f03f0663ba95f32941ec94a2ebe36d658",
"body": null,
"is_bot": false,
"headline": "fix mariadb password migration",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-03-26T19:03:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e3b3871808ba3778cb482316baae6d3f95075995",
"body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Split seedFiles from task creation in init",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-03-25T16:30:08Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ea1a9e1dd5c22d28f4d37d6997c31e70c547838c",
"body": null,
"is_bot": false,
"headline": "sdk beta.66 + version bump",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-03-25T00:21:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d66349b456a8a16c056dbc307c9fc24086352c00",
"body": null,
"is_bot": false,
"headline": "remove chown oneshot",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-03-24T17:30:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5a5c590b5acfc2fcc215879f70accaf157ff072e",
"body": "- Fix database migration from 0.3.5.1 (preserve old hardcoded password)\n- Consolidate dependency tasks into a single autoconfig call\n- Fix nginx log permissions with chown oneshot\n- Update i18n dictionaries\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Bump version to 3.2.1:8-beta.3",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-03-24T16:17:35Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "00e19943cf110ca507200a95f68341149940f208",
"body": "MariaDB does not support --daemonize (MySQL-only flag), causing\nthe SDK's withMysqlDump to fail. Use raw volume backup until\nthe SDK is fixed.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Use volume backup instead of withMysqlDump",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-03-24T04:27:00Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f8eea78523090c49091a7a6504e2ce6942160587",
"body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Set minimum Bitcoin dependency to 28.3",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-03-24T02:16:37Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "e3bfa36126b7c2b7652296ebd314c5eb2d0f88a8",
"body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "bump minimum dependency versions to latest",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-03-23T23:19:34Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1e1cf191022a4850c7d8b04f7a3cf0aea42cdac7",
"body": null,
"is_bot": false,
"headline": "beta 65 and mysql dump for backups",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-03-23T22:21:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f268fb2d7ec75938bbc4479acc75aaedc136eb57",
"body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Bump version to 3.2.1:8-beta.2",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-03-20T00:44:46Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "5b9c7a5d3f338d4102941eed8b7a4afc6bb1a1e0",
"body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Update start-sdk to beta.62",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-03-20T00:17:24Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "26b13f92341bf819430c119d73cfe3dd5442d2d5",
"body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Update dependency version ranges",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-03-17T05:53:27Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2c8a5df96351b99646c2d80fef2920308b516159",
"body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Update start-sdk to beta.61",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-03-17T05:33:36Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "45f8d38ecd18610cb93358a414bc6c15b61b5fc3",
"body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Update start-sdk to beta.60",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-03-16T19:46:07Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d4fbbb1cfd599cf3ffa57ea7d481d76c36d59ccc",
"body": null,
"is_bot": false,
"headline": "fix install issues",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-03-14T01:10:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ccb5896951a519d6dca4690e34cb0dbb3eed1148",
"body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Update start-sdk to beta.59",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-03-10T23:06:56Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "dcc6c80e73ed9f9304b1861843162301a879c993",
"body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix packaging guide URL in CONTRIBUTING.md",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-03-06T20:47:37Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "be036d7d872f1bc218a4d6e0d9a21606dd0ed851",
"body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Update start-sdk to beta.58",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-03-06T07:43:31Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "10b418a32785b6c01ca0b6a9efe2ae57550c4e70",
"body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Update start-sdk to beta.57",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-03-06T06:22:22Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "9a08d16d61e7aa8ac5024dd926be97a8f14ba794",
"body": "Ensures transitive type dependencies are installed for downstream\nconsumers, fixing tsc compilation with node_modules/**/startos include.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Move service package deps from devDependencies to dependencies",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-03-04T17:59:55Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2558ad2c69a3527c2de444c6e05306f9481aa4bd",
"body": null,
"is_bot": false,
"headline": "bump version",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-03-04T05:22:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d44e078c130d6f703606050df05cf475661a786",
"body": null,
"is_bot": false,
"headline": "beta 55 and other updates",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-03-04T05:02:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "157f47d51fd5bf1f69f829084e60fff66d4ab964",
"body": null,
"is_bot": false,
"headline": "update icons to svgs",
"author_name": "Aiden McClelland",
"author_login": "dr-bonez",
"committed_at": "2026-03-03T23:54:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e1955e7725b3171320ad8562317372107b3019d8",
"body": null,
"is_bot": false,
"headline": "update to beta.55",
"author_name": "Aiden McClelland",
"author_login": "dr-bonez",
"committed_at": "2026-03-03T23:00:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "450a4ba6901e20479b45607ca5daf1b4617e0705",
"body": null,
"is_bot": false,
"headline": "once instead of const",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-02-09T16:58:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f2a009280d55b0910b51e11221932874903cd39d",
"body": null,
"is_bot": false,
"headline": "refactor for latest patterns",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-02-08T02:13:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aa4cbb0ec0286711748acb0952695d67cb45c80b",
"body": "Update the mempool app metadata",
"is_bot": false,
"headline": "Merge pull request #50 from mempool/knorrium/update_app_metadata",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-02-08T01:31:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db23af5635730a6f2cfcd8bc694e11e78299862c",
"body": null,
"is_bot": false,
"headline": "Update Makefile to use s9pk.mk include",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-02-08T00:05:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "521d9f3531c908879b34f494323ddee4174cbe45",
"body": null,
"is_bot": false,
"headline": "Update s9pk.mk",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-02-08T00:01:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5e24e60d9799d44cd7452c8131ef2b45bfeed82f",
"body": null,
"is_bot": false,
"headline": "Add S3 upload support to release workflow",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-02-07T22:01:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0e31c90a2f53fe7c1fe606094fda41220fa98071",
"body": null,
"is_bot": false,
"headline": "Update README, CONTRIBUTING, and docsUrl",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-02-07T20:47:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ece93ffdb7cbba54d940fd0b734b1b8bf8ccfc3f",
"body": null,
"is_bot": false,
"headline": "Use the proper registered symbol",
"author_name": "Felipe Knorr Kuhn",
"author_login": "knorrium",
"committed_at": "2026-01-18T18:57:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7207ebae267773db927d4297ad8ec0d721a361b1",
"body": null,
"is_bot": false,
"headline": "Fix tht tagline",
"author_name": "Felipe Knorr Kuhn",
"author_login": "knorrium",
"committed_at": "2026-01-18T18:53:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f80f2cd44c7cfcfdf4ae1c6f7de388a955b3e483",
"body": null,
"is_bot": false,
"headline": "Update the mempool app metadata",
"author_name": "Felipe Knorr Kuhn",
"author_login": "knorrium",
"committed_at": "2026-01-18T18:49:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc0604aa29cd57f07c6980814490a247ef18412e",
"body": null,
"is_bot": false,
"headline": "require indexer, still needs some work",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2026-01-18T17:58:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f35d76fa16fe4d7d3a0dfe5f40636f2d9fd7d64e",
"body": null,
"is_bot": false,
"headline": "cleaner migration",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2025-12-22T01:45:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b667cb9539fc08128063389f325dde1c095e62d",
"body": null,
"is_bot": false,
"headline": "fix package major version",
"author_name": "Shadowy Super Coder",
"author_login": "Dominion5254",
"committed_at": "2025-12-17T23:57:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "72ed53b43028986a7e9b3db58f947a62766ff108",
"body": null,
"is_bot": false,
"headline": "fix indexer read",
"author_name": "Shadowy Super Coder",
"author_login": "Dominion5254",
"committed_at": "2025-12-17T23:48:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6c7ec17c1cd090823c921db20d5a6a7898244e77",
"body": null,
"is_bot": false,
"headline": "implement fulcrum",
"author_name": "Shadowy Super Coder",
"author_login": "Dominion5254",
"committed_at": "2025-12-17T23:30:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "76ad9f51010fda27b9575b8d69d2a498244dac29",
"body": null,
"is_bot": false,
"headline": "latest dependency s9pks",
"author_name": "Shadowy Super Coder",
"author_login": "Dominion5254",
"committed_at": "2025-12-17T20:17:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "276c94d3bc40c471032707333ede1bece0ddbefe",
"body": null,
"is_bot": false,
"headline": "frontend container doesn't need main volume",
"author_name": "Shadowy Super Coder",
"author_login": "Dominion5254",
"committed_at": "2025-12-17T19:46:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f4c2e64c7b71b75313b07647a97b65ac43d3a80",
"body": null,
"is_bot": false,
"headline": "Latest CI and Makefile",
"author_name": "Shadowy Super Coder",
"author_login": "Dominion5254",
"committed_at": "2025-12-17T03:00:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db3e1523c18d72d3839cc48492a7f97b631207d4",
"body": null,
"is_bot": false,
"headline": "beta.45",
"author_name": "Shadowy Super Coder",
"author_login": "Dominion5254",
"committed_at": "2025-12-17T02:59:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "93c22d1a460cc40dc2277d7e0baf7a5df1eccd45",
"body": null,
"is_bot": false,
"headline": "better db init and permissioning strategy",
"author_name": "Matt Hill",
"author_login": "MattDHill",
"committed_at": "2025-12-12T21:12:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a8d94520a7a07253da553c376bccf27aa936d297",
"body": null,
"is_bot": false,
"headline": "wip",
"author_name": "Shadowy Super Coder",
"author_login": "Dominion5254",
"committed_at": "2025-12-12T18:35:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a2736974da60343d87bf25383c0afb8cbffe742",
"body": "* only enable lightning tab if configured\n\n* update release notes",
"is_bot": false,
"headline": "Fix/lightning tab (#47)",
"author_name": "Dominion5254",
"author_login": "Dominion5254",
"committed_at": "2025-12-09T15:34:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f7d71a974e83d57241ad94367700e50d04e6637",
"body": "* Bump version to 3.2.1.3 and add Fulcrum indexer\n\nUpdated version to 3.2.1.3 and added Fulcrum as an optional indexer.\n\n* Add indexer configuration\n\n* Update address lookup instructions for Electrs and Fulcrum\n\n* Refactor getConfig.ts for add fulcrum\n\n* Update to v3.2.1.3 with fulcrum\n\n* Update set\n[…]\nack to old migration.ts and add 3.2.1.3 as current\n\nRemoved unused indexer matching logic and related comments.\n\n* fucrum migration\n\n---------\n\nCo-authored-by: Dominion5254 <musashidisciple@proton.me>",
"is_bot": false,
"headline": "Add Fulcrum to Mempool (#46)",
"author_name": "Sirius",
"author_login": "SiriusLightning21",
"committed_at": "2025-12-09T15:16:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "15a5fcba8512c8d962c566044ac827eda6a76c18",
"body": null,
"is_bot": false,
"headline": "idmap wip",
"author_name": "Shadowy Super Coder",
"author_login": "Dominion5254",
"committed_at": "2025-12-08T21:00:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0649f7cb063f156241f8c8e40122e2478ccfeee8",
"body": null,
"is_bot": false,
"headline": "latest Makefile",
"author_name": "Shadowy Super Coder",
"author_login": "Dominion5254",
"committed_at": "2025-11-17T20:43:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b10d2c44b0d46a1eacb2e77c8ee33e2e1f633e96",
"body": null,
"is_bot": false,
"headline": "debug wip",
"author_name": "Shadowy Super Coder",
"author_login": "Dominion5254",
"committed_at": "2025-11-17T20:36:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "72751d05eb0a89db49b8817e954f428e0b4cf766",
"body": null,
"is_bot": false,
"headline": "copy cookie instead of chmoding",
"author_name": "Shadowy Super Coder",
"author_login": "Dominion5254",
"committed_at": "2025-11-13T20:25:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ea593aa4b8b0b9693bf3360b7da75cacb0f70f84",
"body": null,
"is_bot": false,
"headline": "fix electrum connection",
"author_name": "Shadowy Super Coder",
"author_login": "Dominion5254",
"committed_at": "2025-11-08T01:58:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cea2f540c277e028990bd63f07b8f12c00aa91b9",
"body": null,
"is_bot": false,
"headline": "beta.43",
"author_name": "Shadowy Super Coder",
"author_login": "Dominion5254",
"committed_at": "2025-11-08T01:09:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0dbcaefba0b3282092097ff49765e3f2d56186ff",
"body": null,
"is_bot": false,
"headline": "webui daemon fix wip",
"author_name": "Shadowy Super Coder",
"author_login": "Dominion5254",
"committed_at": "2025-11-07T18:11:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "041978339b96c380ea0148a16069a5c86caabab5",
"body": null,
"is_bot": false,
"headline": "extend api grace period to 45 seconds",
"author_name": "Shadowy Super Coder",
"author_login": "Dominion5254",
"committed_at": "2025-11-07T18:10:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "05b972c9afb610f58a799b654bc4a226524b1ca3",
"body": null,
"is_bot": false,
"headline": "fix sync check logic",
"author_name": "Shadowy Super Coder",
"author_login": "Dominion5254",
"committed_at": "2025-11-06T23:11:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0bfb852ebdadac77a1f072a0b66936c98b3ec84e",
"body": null,
"is_bot": false,
"headline": "bump manifest dep s9pks to the latest GH releases",
"author_name": "Shadowy Super Coder",
"author_login": "Dominion5254",
"committed_at": "2025-11-05T22:47:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "06e2525bf84342d61a72b8bab7a9738b7e2c7732",
"body": null,
"is_bot": false,
"headline": "make multihost backwards compatible",
"author_name": "Shadowy Super Coder",
"author_login": "Dominion5254",
"committed_at": "2025-11-05T22:17:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d0ec4f4bf791fe51158f37dcdb7b02272de57528",
"body": null,
"is_bot": false,
"headline": "beta.42",
"author_name": "Shadowy Super Coder",
"author_login": "Dominion5254",
"committed_at": "2025-11-05T22:00:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ae70eec2b6bbbf5eae183480006e2270e69d9fda",
"body": null,
"is_bot": false,
"headline": "update cln dep to latest",
"author_name": "Shadowy Super Coder",
"author_login": "Dominion5254",
"committed_at": "2025-09-24T23:08:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e40b29a1bc4e44bad26a09504488a76c59e5a248",
"body": null,
"is_bot": false,
"headline": "latest makefile",
"author_name": "Shadowy Super Coder",
"author_login": "Dominion5254",
"committed_at": "2025-09-24T23:08:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bdd1f1f725b900179305d7609540e19ad55c19fd",
"body": null,
"is_bot": false,
"headline": "createTask requiring unpruned and txindex",
"author_name": "Shadowy Super Coder",
"author_login": "Dominion5254",
"committed_at": "2025-09-18T22:02:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c86c99016e24449a428a54c7a54032f9a13b587b",
"body": null,
"is_bot": false,
"headline": "require latest dep versions",
"author_name": "Shadowy Super Coder",
"author_login": "Dominion5254",
"committed_at": "2025-09-18T22:02:07Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 34,
"commits_last_year": 108,
"latest_release_at": "2026-07-24T06:28:10Z",
"latest_release_tag": "v3.3.1_18",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 31,
"days_since_latest_release": 0,
"mean_days_between_releases": 5.7
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 37,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": []
},
"popularity": {
"forks": 17,
"stars": 6,
"watchers": 1,
"fork_history": {
"days": [
{
"date": "2022-07-10",
"count": 1
},
{
"date": "2022-12-08",
"count": 1
},
{
"date": "2023-07-09",
"count": 1
},
{
"date": "2024-07-03",
"count": 1
},
{
"date": "2025-04-14",
"count": 1
},
{
"date": "2025-05-01",
"count": 1
},
{
"date": "2025-09-24",
"count": 1
},
{
"date": "2025-11-16",
"count": 1
},
{
"date": "2025-11-17",
"count": 1
},
{
"date": "2026-01-18",
"count": 1
},
{
"date": "2026-02-06",
"count": 1
},
{
"date": "2026-03-21",
"count": 1
},
{
"date": "2026-05-22",
"count": 1
},
{
"date": "2026-06-25",
"count": 1
},
{
"date": "2026-07-15",
"count": 1
}
],
"complete": true,
"collected": 15,
"total_forks": 17
},
"star_history": null,
"open_issues_and_prs": 2
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 28222,
"source_files_sampled": 27,
"oversized_source_files": 0,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md"
],
"agent_instruction_max_bytes": 3423
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "brace-expansion",
"direct": false,
"version": "1.1.15",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-3jxr-9vmj-r5cp",
"GHSA-mh99-v99m-4gvg"
],
"fixed_version": "5.0.8",
"advisory_count": 2,
"oldest_advisory_days": 4
},
{
"name": "brace-expansion",
"direct": false,
"version": "5.0.6",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-3jxr-9vmj-r5cp",
"GHSA-mh99-v99m-4gvg"
],
"fixed_version": "5.0.8",
"advisory_count": 2,
"oldest_advisory_days": 4
},
{
"name": "js-yaml",
"direct": false,
"version": "4.2.0",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-52cp-r559-cp3m"
],
"fixed_version": "4.3.0",
"advisory_count": 1,
"oldest_advisory_days": 4
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"high": 3
},
"advisory_count": 5,
"affected_count": 3,
"assessed_count": 143,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "@start9labs/start-sdk",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "2.0.7"
},
{
"name": "bitcoin-core-startos",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "github:Start9Labs/bitcoin-core-startos#next/28.x"
},
{
"name": "cln-startos",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "github:Start9Labs/cln-startos#next"
},
{
"name": "lnd-startos",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "github:Start9Labs/lnd-startos#next"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "@start9labs/start-sdk",
"direct": true,
"version": "2.0.7",
"ecosystem": "npm"
},
{
"name": "@eslint-community/eslint-utils",
"direct": false,
"version": "4.9.1",
"ecosystem": "npm"
},
{
"name": "@eslint-community/regexpp",
"direct": false,
"version": "4.12.2",
"ecosystem": "npm"
},
{
"name": "@eslint/config-array",
"direct": false,
"version": "0.21.2",
"ecosystem": "npm"
},
{
"name": "@eslint/config-helpers",
"direct": false,
"version": "0.4.2",
"ecosystem": "npm"
},
{
"name": "@eslint/core",
"direct": false,
"version": "0.17.0",
"ecosystem": "npm"
},
{
"name": "@eslint/eslintrc",
"direct": false,
"version": "3.3.5",
"ecosystem": "npm"
},
{
"name": "@eslint/js",
"direct": false,
"version": "9.39.4",
"ecosystem": "npm"
},
{
"name": "@eslint/object-schema",
"direct": false,
"version": "2.1.7",
"ecosystem": "npm"
},
{
"name": "@eslint/plugin-kit",
"direct": false,
"version": "0.4.1",
"ecosystem": "npm"
},
{
"name": "@humanfs/core",
"direct": false,
"version": "0.19.2",
"ecosystem": "npm"
},
{
"name": "@humanfs/node",
"direct": false,
"version": "0.16.8",
"ecosystem": "npm"
},
{
"name": "@humanfs/types",
"direct": false,
"version": "0.15.0",
"ecosystem": "npm"
},
{
"name": "@humanwhocodes/module-importer",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "@humanwhocodes/retry",
"direct": false,
"version": "0.4.3",
"ecosystem": "npm"
},
{
"name": "@iarna/toml",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "@noble/curves",
"direct": false,
"version": "1.9.7",
"ecosystem": "npm"
},
{
"name": "@noble/hashes",
"direct": false,
"version": "1.8.0",
"ecosystem": "npm"
},
{
"name": "@nodable/entities",
"direct": false,
"version": "2.2.0",
"ecosystem": "npm"
},
{
"name": "@types/estree",
"direct": false,
"version": "1.0.9",
"ecosystem": "npm"
},
{
"name": "@types/ini",
"direct": false,
"version": "4.1.1",
"ecosystem": "npm"
},
{
"name": "@types/json-schema",
"direct": false,
"version": "7.0.15",
"ecosystem": "npm"
},
{
"name": "@types/node",
"direct": false,
"version": "22.20.0",
"ecosystem": "npm"
},
{
"name": "@typescript-eslint/eslint-plugin",
"direct": false,
"version": "8.61.0",
"ecosystem": "npm"
},
{
"name": "@typescript-eslint/parser",
"direct": false,
"version": "8.61.0",
"ecosystem": "npm"
},
{
"name": "@typescript-eslint/project-service",
"direct": false,
"version": "8.61.0",
"ecosystem": "npm"
},
{
"name": "@typescript-eslint/scope-manager",
"direct": false,
"version": "8.61.0",
"ecosystem": "npm"
},
{
"name": "@typescript-eslint/tsconfig-utils",
"direct": false,
"version": "8.61.0",
"ecosystem": "npm"
},
{
"name": "@typescript-eslint/type-utils",
"direct": false,
"version": "8.61.0",
"ecosystem": "npm"
},
{
"name": "@typescript-eslint/types",
"direct": false,
"version": "8.61.0",
"ecosystem": "npm"
},
{
"name": "@typescript-eslint/typescript-estree",
"direct": false,
"version": "8.61.0",
"ecosystem": "npm"
},
{
"name": "@typescript-eslint/utils",
"direct": false,
"version": "8.61.0",
"ecosystem": "npm"
},
{
"name": "@typescript-eslint/visitor-keys",
"direct": false,
"version": "8.61.0",
"ecosystem": "npm"
},
{
"name": "@vercel/ncc",
"direct": false,
"version": "0.38.4",
"ecosystem": "npm"
},
{
"name": "acorn",
"direct": false,
"version": "8.16.0",
"ecosystem": "npm"
},
{
"name": "acorn-jsx",
"direct": false,
"version": "5.3.2",
"ecosystem": "npm"
},
{
"name": "ajv",
"direct": false,
"version": "6.15.0",
"ecosystem": "npm"
},
{
"name": "ansi-styles",
"direct": false,
"version": "4.3.0",
"ecosystem": "npm"
},
{
"name": "anynum",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "argparse",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "balanced-match",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "balanced-match",
"direct": false,
"version": "4.0.4",
"ecosystem": "npm"
},
{
"name": "brace-expansion",
"direct": false,
"version": "1.1.15",
"ecosystem": "npm"
},
{
"name": "brace-expansion",
"direct": false,
"version": "5.0.6",
"ecosystem": "npm"
},
{
"name": "callsites",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "chalk",
"direct": false,
"version": "4.1.2",
"ecosystem": "npm"
},
{
"name": "color-convert",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "color-name",
"direct": false,
"version": "1.1.4",
"ecosystem": "npm"
},
{
"name": "concat-map",
"direct": false,
"version": "0.0.1",
"ecosystem": "npm"
},
{
"name": "cross-spawn",
"direct": false,
"version": "7.0.6",
"ecosystem": "npm"
},
{
"name": "debug",
"direct": false,
"version": "4.4.3",
"ecosystem": "npm"
},
{
"name": "deep-equality-data-structures",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "deep-is",
"direct": false,
"version": "0.1.4",
"ecosystem": "npm"
},
{
"name": "diskusage",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "dotenv",
"direct": false,
"version": "17.4.2",
"ecosystem": "npm"
},
{
"name": "es6-promise",
"direct": false,
"version": "4.2.8",
"ecosystem": "npm"
},
{
"name": "escape-string-regexp",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "eslint",
"direct": false,
"version": "9.39.4",
"ecosystem": "npm"
},
{
"name": "eslint-scope",
"direct": false,
"version": "8.4.0",
"ecosystem": "npm"
},
{
"name": "eslint-visitor-keys",
"direct": false,
"version": "3.4.3",
"ecosystem": "npm"
},
{
"name": "eslint-visitor-keys",
"direct": false,
"version": "4.2.1",
"ecosystem": "npm"
},
{
"name": "eslint-visitor-keys",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "espree",
"direct": false,
"version": "10.4.0",
"ecosystem": "npm"
},
{
"name": "esquery",
"direct": false,
"version": "1.7.0",
"ecosystem": "npm"
},
{
"name": "esrecurse",
"direct": false,
"version": "4.3.0",
"ecosystem": "npm"
},
{
"name": "estraverse",
"direct": false,
"version": "5.3.0",
"ecosystem": "npm"
},
{
"name": "esutils",
"direct": false,
"version": "2.0.3",
"ecosystem": "npm"
},
{
"name": "fast-deep-equal",
"direct": false,
"version": "3.1.3",
"ecosystem": "npm"
},
{
"name": "fast-json-stable-stringify",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "fast-levenshtein",
"direct": false,
"version": "2.0.6",
"ecosystem": "npm"
},
{
"name": "fast-xml-builder",
"direct": false,
"version": "1.2.1",
"ecosystem": "npm"
},
{
"name": "fast-xml-parser",
"direct": false,
"version": "5.7.3",
"ecosystem": "npm"
},
{
"name": "fdir",
"direct": false,
"version": "6.5.0",
"ecosystem": "npm"
},
{
"name": "file-entry-cache",
"direct": false,
"version": "8.0.0",
"ecosystem": "npm"
},
{
"name": "find-up",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "flat-cache",
"direct": false,
"version": "4.0.1",
"ecosystem": "npm"
},
{
"name": "flatted",
"direct": false,
"version": "3.4.2",
"ecosystem": "npm"
},
{
"name": "glob-parent",
"direct": false,
"version": "6.0.2",
"ecosystem": "npm"
},
{
"name": "globals",
"direct": false,
"version": "14.0.0",
"ecosystem": "npm"
},
{
"name": "has-flag",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "ignore",
"direct": false,
"version": "5.3.2",
"ecosystem": "npm"
},
{
"name": "ignore",
"direct": false,
"version": "7.0.5",
"ecosystem": "npm"
},
{
"name": "import-fresh",
"direct": false,
"version": "3.3.1",
"ecosystem": "npm"
},
{
"name": "imurmurhash",
"direct": false,
"version": "0.1.4",
"ecosystem": "npm"
},
{
"name": "ini",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "is-extglob",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "is-glob",
"direct": false,
"version": "4.0.3",
"ecosystem": "npm"
},
{
"name": "isexe",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "isomorphic-fetch",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "js-yaml",
"direct": false,
"version": "4.2.0",
"ecosystem": "npm"
},
{
"name": "json-buffer",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "json-schema-traverse",
"direct": false,
"version": "0.4.1",
"ecosystem": "npm"
},
{
"name": "json-stable-stringify-without-jsonify",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "keyv",
"direct": false,
"version": "4.5.4",
"ecosystem": "npm"
},
{
"name": "levn",
"direct": false,
"version": "0.4.1",
"ecosystem": "npm"
},
{
"name": "locate-path",
"direct": false,
"version": "6.0.0",
"ecosystem": "npm"
},
{
"name": "lodash.merge",
"direct": false,
"version": "4.6.2",
"ecosystem": "npm"
},
{
"name": "mime",
"direct": false,
"version": "4.1.0",
"ecosystem": "npm"
},
{
"name": "minimatch",
"direct": false,
"version": "10.2.5",
"ecosystem": "npm"
},
{
"name": "minimatch",
"direct": false,
"version": "3.1.5",
"ecosystem": "npm"
},
{
"name": "ms",
"direct": false,
"version": "2.1.3",
"ecosystem": "npm"
},
{
"name": "nan",
"direct": false,
"version": "2.28.0",
"ecosystem": "npm"
},
{
"name": "natural-compare",
"direct": false,
"version": "1.4.0",
"ecosystem": "npm"
},
{
"name": "node-fetch",
"direct": false,
"version": "2.7.0",
"ecosystem": "npm"
},
{
"name": "node-forge",
"direct": false,
"version": "1.4.0",
"ecosystem": "npm"
},
{
"name": "object-hash",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "optionator",
"direct": false,
"version": "0.9.4",
"ecosystem": "npm"
},
{
"name": "p-limit",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "p-locate",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "parent-module",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "path-exists",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "path-expression-matcher",
"direct": false,
"version": "1.6.1",
"ecosystem": "npm"
},
{
"name": "path-key",
"direct": false,
"version": "3.1.1",
"ecosystem": "npm"
},
{
"name": "picomatch",
"direct": false,
"version": "4.0.4",
"ecosystem": "npm"
},
{
"name": "prelude-ls",
"direct": false,
"version": "1.2.1",
"ecosystem": "npm"
},
{
"name": "prettier",
"direct": false,
"version": "3.9.4",
"ecosystem": "npm"
},
{
"name": "punycode",
"direct": false,
"version": "2.3.1",
"ecosystem": "npm"
},
{
"name": "resolve-from",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "rfc4648",
"direct": false,
"version": "1.5.4",
"ecosystem": "npm"
},
{
"name": "semver",
"direct": false,
"version": "7.8.3",
"ecosystem": "npm"
},
{
"name": "shebang-command",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "shebang-regex",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "strip-json-comments",
"direct": false,
"version": "3.1.1",
"ecosystem": "npm"
},
{
"name": "strnum",
"direct": false,
"version": "2.4.1",
"ecosystem": "npm"
},
{
"name": "supports-color",
"direct": false,
"version": "7.2.0",
"ecosystem": "npm"
},
{
"name": "tinyglobby",
"direct": false,
"version": "0.2.17",
"ecosystem": "npm"
},
{
"name": "tr46",
"direct": false,
"version": "0.0.3",
"ecosystem": "npm"
},
{
"name": "ts-api-utils",
"direct": false,
"version": "2.5.0",
"ecosystem": "npm"
},
{
"name": "type-check",
"direct": false,
"version": "0.4.0",
"ecosystem": "npm"
},
{
"name": "typescript",
"direct": false,
"version": "6.0.3",
"ecosystem": "npm"
},
{
"name": "typescript-eslint",
"direct": false,
"version": "8.61.0",
"ecosystem": "npm"
},
{
"name": "undici-types",
"direct": false,
"version": "6.21.0",
"ecosystem": "npm"
},
{
"name": "uri-js",
"direct": false,
"version": "4.4.1",
"ecosystem": "npm"
},
{
"name": "webidl-conversions",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "whatwg-fetch",
"direct": false,
"version": "3.6.20",
"ecosystem": "npm"
},
{
"name": "whatwg-url",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "which",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "word-wrap",
"direct": false,
"version": "1.2.5",
"ecosystem": "npm"
},
{
"name": "xml-naming",
"direct": false,
"version": "0.1.0",
"ecosystem": "npm"
},
{
"name": "yaml",
"direct": false,
"version": "2.9.0",
"ecosystem": "npm"
},
{
"name": "yocto-queue",
"direct": false,
"version": "0.1.0",
"ecosystem": "npm"
},
{
"name": "zod",
"direct": false,
"version": "4.4.3",
"ecosystem": "npm"
},
{
"name": "zod-deep-partial",
"direct": false,
"version": "1.4.4",
"ecosystem": "npm"
}
],
"collected": true,
"truncated": false,
"total_count": 143,
"direct_count": 1,
"indirect_count": 142
}
},
"maintainership": {
"issues": {
"open_prs": 1,
"merged_prs": 40,
"open_issues": 1,
"closed_ratio": 0.941,
"closed_issues": 16,
"closed_unmerged_prs": 8
},
"bus_factor": 2,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "MattDHill",
"commits": 65,
"avatar_url": "https://avatars.githubusercontent.com/u/9935159?v=4"
},
{
"type": "User",
"login": "elvece",
"commits": 38,
"avatar_url": "https://avatars.githubusercontent.com/u/12953208?v=4"
},
{
"type": "User",
"login": "Dominion5254",
"commits": 31,
"avatar_url": "https://avatars.githubusercontent.com/u/125493428?v=4"
},
{
"type": "User",
"login": "islandbitcoin",
"commits": 12,
"avatar_url": "https://avatars.githubusercontent.com/u/34528298?v=4"
},
{
"type": "User",
"login": "dr-bonez",
"commits": 8,
"avatar_url": "https://avatars.githubusercontent.com/u/3732071?v=4"
},
{
"type": "User",
"login": "chrisguida",
"commits": 6,
"avatar_url": "https://avatars.githubusercontent.com/u/7445670?v=4"
},
{
"type": "User",
"login": "helix-nine",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/267227783?v=4"
},
{
"type": "User",
"login": "gStart9",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/106188942?v=4"
},
{
"type": "User",
"login": "kn0wmad",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/39687477?v=4"
},
{
"type": "User",
"login": "knorrium",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/100320?v=4"
}
],
"contributors_sampled": 13,
"top_contributor_share": 0.359
},
"quality_signals": {
"has_ci": true,
"has_tests": false,
"ci_workflows": [
"build.yml",
"release.yml",
"tagAndRelease.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 1,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "7 out of 7 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 2,
"reason": "Found 6/29 approved changesets -- score normalized to 2",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 4 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 9,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "25 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 7,
"reason": "3 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "a1b85a985593881ba3156304f8daa120816ed068",
"ran_at": "2026-07-25T03:38:18Z",
"aggregate_score": 4,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-24T06:29:11Z",
"oldest_open_prs": [
{
"number": 66,
"created_at": "2026-07-24T23:40:33Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-24T06:20:17Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 63,
"created_at": "2026-07-15T22:46:31Z",
"last_comment_at": "2026-07-17T14:34:17Z",
"last_comment_author": "DritzPS"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/Start9Labs/mempool-startos",
"host": "github.com",
"name": "mempool-startos",
"owner": "Start9Labs"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 59,
"inputs": {
"security": 52,
"vitality": 88,
"community": 32,
"governance": 72,
"engineering": 42
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 88,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 86,
"inputs": {
"commits_last_year": 108,
"human_commit_share": 1,
"days_since_last_push": 0,
"active_weeks_last_year": 31
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "31/52 weeks with commits",
"points": 21.5,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 31
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "108 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 108
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "25 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 34,
"latest_release_tag": "v3.3.1_18",
"releases_from_tags": false,
"days_since_latest_release": 0,
"mean_days_between_releases": 5.7
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "34 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 34
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~5.7 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 5.7
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 0,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 0 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 0
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 32,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 21,
"inputs": {
"forks": 17,
"stars": 6,
"watchers": 1,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "6 stars",
"points": 11.3,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 6
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "17 forks",
"points": 10,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 17
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "1 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 1
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "at_risk",
"name": "Community health",
"note": null,
"notes": [],
"value": 44,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "license file present, not a recognized license",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "license_custom",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 72,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "moderate",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 63,
"inputs": {
"bus_factor": 2,
"contributors_sampled": 13,
"top_contributor_share": 0.359
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "2 contributor(s) cover half of all commits",
"points": 25.2,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 2
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 36% of commits",
"points": 14.4,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 36
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "13 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 13
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 4 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 79,
"inputs": {
"merged_prs": 40,
"open_issues": 1,
"closed_issues": 16,
"issue_closed_ratio": 0.941,
"closed_unmerged_prs": 8
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "94% of issues closed",
"points": 44,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 94
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "40/48 decided PRs merged",
"points": 31.9,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 40,
"decided": 48
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 6/29 approved changesets -- score normalized to 2",
"points": 3,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"followers": 589,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "Start9Labs",
"public_repos": 111,
"account_age_days": 2553
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "589 followers of Start9Labs",
"points": 19.9,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 589,
"login": "Start9Labs"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "111 public repos, account ~6 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 111
}
},
{
"code": "account_age_years",
"params": {
"years": 6
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "at_risk",
"name": "Engineering Quality",
"value": 42,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "at_risk",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 44,
"inputs": {
"has_ci": true,
"has_tests": false,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "3 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 3
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "7 out of 7 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "at_risk",
"name": "Documentation",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 52,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 40,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 4
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "7 out of 7 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 6/29 approved changesets -- score normalized to 2",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 4 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "25 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "3 existing vulnerabilities detected",
"points": 5.2,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 143 resolved dependencies against OSV. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories",
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 143
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 5,
"affected_packages": 3,
"assessed_packages": 143,
"unassessed_packages": 0,
"affected_by_severity": "high 3",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 143,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 8
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 63,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "moderate",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 62,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.31,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md"
],
"agent_instruction_max_bytes": 3423
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "AGENTS.md, CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "AGENTS.md, CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "31 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 16.5,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 31,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 49,
"inputs": {
"has_nix": false,
"has_tests": false,
"lockfiles": [
"package-lock.json"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
"tsconfig.json"
],
"agent_commit_share": 0.36,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "36 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 36,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 28222,
"source_files_sampled": 27,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/27 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 27,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"Could not fetch npm package 'mempool-startos' from its registry"
],
"report_type": "repository",
"generated_at": "2026-07-25T03:38:32.242949Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/Start9Labs/mempool-startos.svg",
"full_name": "Start9Labs/mempool-startos",
"license_state": "custom",
"license_spdx": null
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics.