Public record
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-25 09:56 UTC

YosefHayim / launch-store

Self-hosted CLI for building, signing, and shipping Expo/React Native apps to TestFlight and Google Play.

TypeScriptMIT★ 3 stars⑂ 1 forksince Jun 2026View on GitHub ↗

YosefHayim/launch-store holds a health index of 62 out of 100, placing it in the Moderate band. It scores highest on Engineering Quality (88/100) and lowest on Community & Adoption (41/100). It was last updated 5 days ago. A single contributor accounts for most of its recent work.

62
overall / 100
Moderate

Software health index

Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.

62
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
VitalityCommunity &AdoptionSustainability &GovernanceEngineeringQualitySecurityAI Readiness

Score profile

Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.

Ownership

YosefHayimPersonal account
16 followers12 public repossince Aug 2024

This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.

Package ecosystems

Metrics by category

Vitality

Is the project alive — is code being written and are releases shipping?

75Good · 22% of overall
How it's scored
36/36Push recency — last push 5 days ago
4.2/36Commit cadence — 6/52 weeks with commits
18/18Commit volume — 311 commits in the last year
0/10OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully
Inputs used
commits_last_year311
human_commit_share1
days_since_last_push5
active_weeks_last_year6

Release discipline

100Excellent
How it's scored
27/27Ships releases — 37 releases published
36/36Release recency — latest release 5 days ago
27/27Release cadence — a release every ~2.4 days
0/10OpenSSF Scorecard: Signed-Releases — no data
Inputs used
releases_count37
latest_release_tagv0.32.8
releases_from_tagsno
days_since_latest_release5
mean_days_between_releases2.4
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.

Community & Adoption

Does the project have users, downloads, attention, and a welcoming setup for contributors?

41At risk · 18% of overall
How it's scored
4.9/60Stars — 3 stars
0/25Forks — 1 forks
0/15Watchers — 0 watchers
Inputs used
forks1
stars3
watchers0
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
How it's scored
22.5/22.5README
22.5/22.5License — recognized license (MIT)
18/18CONTRIBUTING guide
0/13.5Code of conduct
0/7.2Issue template
0/6.3PR template
Inputs used
has_readmeyes
has_licenseyes
has_contributingyes
has_issue_templateno
has_code_of_conductno
has_pull_request_templateno
How it's scored
45.6/80Monthly downloads — 2,629 downloads/month across npm
0/20Registry dependents — not reported by this ecosystem
Inputs used
packageslaunch-store
dependents
ecosystemsnpm
total_downloads
monthly_downloads2,629
Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.

Sustainability & Governance

Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?

54Moderate · 24% of overall
How it's scored
9/54Bus factor — 1 contributor(s) cover half of all commits
0/22.5Commit distribution — top contributor authored 100% of commits
1.4/13.5Contributor breadth — 1 contributors
0/10OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0
Inputs used
bus_factor1
contributors_sampled1
top_contributor_share1
How it's scored
46.4/46.8Issue resolution — 99% of issues closed
37.6/38.3PR acceptance — 167/170 decided PRs merged
0/15OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0
Inputs used
merged_prs167
open_issues1
closed_issues132
issue_closed_ratio0.992
closed_unmerged_prs3
How it's scored
10/30Ownership backing — personal (user) account
0/20Verified domain — not applicable to user accounts
8.8/25Owner reach — 16 followers of YosefHayim
11.9/25Track record — 12 public repos, account ~1 yr old
Inputs used
followers16
owner_typeUser
is_verified
owner_loginYosefHayim
public_repos12
account_age_days701
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.
How it's scored
25/25Published & resolvable — 1 package(s) on npm
35/35Publish recency — latest publish 5 days ago
20/20Version history — 36 published versions
20/20Not deprecated — active, not deprecated or yanked
Inputs used
packageslaunch-store
ecosystemsnpm
any_deprecatedno
min_days_since_publish5

Engineering Quality

Are baseline engineering and documentation practices in place?

88Excellent · 20% of overall
How it's scored
24/24CI workflows — 11 workflow(s)
24/24Tests present
16/16Linter config — biome.json
0/9.6Pre-commit hooks
0/6.4.editorconfig
0/20OpenSSF Scorecard: CI-Tests — no data
Inputs used
has_ciyes
has_testsyes
has_editorconfigno
has_linter_configyes
has_precommit_configno
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.

Documentation

100Excellent
How it's scored
30/30README
25/25Documentation directory
15/15Documentation / homepage site — https://www.npmjs.com/package/launch-store
10/10Repository description
10/10Topics — 18 topics
10/10Wiki
Inputs used
topicsandroid, app-store, app-store-connect, ci-cd, cli, code-signing, eas, expo, fastlane, ios, mobile, play-store, react-native, testflight, expo-updates, google-play, nodejs, typescript
has_wikiyes
homepagehttps://www.npmjs.com/package/launch-store
has_readmeyes
has_docs_diryes
has_descriptionyes

Security

Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?

47At risk · 16% of overall
How it's scored
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — no data
0/2.5CI-Tests — no data
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 0/30 approved changesets -- score normalized to 0
0/2.5Contributors — project has 0 contributing companies or organizations -- score normalized to 0
10/10Dangerous-Workflow — no dangerous workflow patterns detected
0/7.5Dependency-Update-Tool — no update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5License — license file detected
0/7.5Maintained — project was created within the last 90 days. Please review its contents carefully
5/5Packaging — packaging workflow detected
0/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
0/5SAST — no SAST tool detected
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — no data
7.5/7.5Token-Permissions — GitHub workflow tokens follow principle of least privilege
0/7.5Vulnerabilities — 10 existing vulnerabilities detected
Inputs used
sourceopenssf_scorecard
checks_evaluated15
scorecard_versionv5.5.0
checks_inconclusive3
scorecard_aggregate3.7
Excluded from scoring (no data or not applicable): branch_protection, ci_tests, signed_releases. Remaining weights renormalized.
How it's scored
35/35Direct dependencies free of known advisories — no direct dependency carries a known advisory
13.2/25Indirect dependencies free of known advisories — 1 affected: @hono/node-server 1.19.15 (moderate 5.9)
40/40No advisories left outstanding — no advisory has been public longer than 90 days
Inputs used
sourceosv
advisories1
affected_packages1
assessed_packages165
unassessed_packages0
affected_by_severitymoderate 1
direct_affected_packages0
Matched the npm:launch-store@0.32.8 runtime dependency closure — what installing the published package pulls in — 165 packages. Reachability is not analyzed.

AI Readiness

How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.

77Good · 0% of overall
How it's scored
45/45Agent instructions — .cursor/rules/core-types.mdc, .cursor/rules/exec-secrets.mdc, .cursor/rules/launch.mdc, .cursor/rules/providers.mdc, AGENTS.md, CLAUDE.md
15/15Machine-readable docs (llms.txt) — llms.txt present
40/40Legible commit history — 100 of 100 human commits state their intent (structured subject or explanatory body)
Inputs used
has_llms_txtyes
legible_history_share1
agent_instruction_files.cursor/rules/core-types.mdc, .cursor/rules/exec-secrets.mdc, .cursor/rules/launch.mdc, .cursor/rules/providers.mdc, AGENTS.md, CLAUDE.md
agent_instruction_max_bytes7,397
How it's scored
0/18One-command bootstrap
22/22Automated tests
11/11Lint / format config — biome.json
11/11Static type checking — examples/hello-world/tsconfig.json, tsconfig.json
10/10Reproducible environment — lockfile
10/10Demonstrated agent practice — 73 of the last 100 commits agent-authored or agent-credited
0/8Automated maintenance — no automated dependency updates observed
0/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
Inputs used
has_nixno
has_testsyes
lockfilespnpm-lock.yaml
has_dockerfileno
typed_languageyes
bootstrap_files
has_devcontainerno
has_linter_configyes
typecheck_configsexamples/hello-world/tsconfig.json, tsconfig.json
agent_commit_share0.73
toolchain_manifests
dependency_bot_commit_share0
How it's scored
45/45Type-checkable code — TypeScript (statically typed)
54.6/55Manageable file sizes — 4/525 source files over 60KB
Inputs used
primary_languageTypeScript
largest_source_bytes5,069,338
source_files_sampled525
oversized_source_files4
How it's scored
0/40API schema (OpenAPI/GraphQL/proto)
0/20MCP server
40/40Runnable examples — examples
Inputs used
example_dirsexamples
has_mcp_signalno
api_schema_files

Key facts

3GitHub stars
1contributors
311commits, last 12 months
5days since last push
37releases
1bus factor
1open issues
npmpackage ecosystems

Data collection warnings

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token

More detail

OpenSSF Scorecard 3.7 / 10
3.7aggregate

Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-25 09:56 UTC

10Binary-Artifactsno binaries found in the repo
n/aBranch-Protectioninternal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md
n/aCI-Testsno pull request found
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 0/30 approved changesets -- score normalized to 0
0Contributorsproject has 0 contributing companies or organizations -- score normalized to 0
10Dangerous-Workflowno dangerous workflow patterns detected
0Dependency-Update-Toolno update tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
0Maintainedproject was created within the last 90 days. Please review its contents carefully
10Packagingpackaging workflow detected
0Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 0
0SASTno SAST tool detected
0Security-Policysecurity policy file not detected
n/aSigned-Releasesno releases found
10Token-PermissionsGitHub workflow tokens follow principle of least privilege
0Vulnerabilities10 existing vulnerabilities detected
Direct dependencies 7
RegistryPackageVersion constraintManifest
npm@clack/prompts^1.5.1package.json
npm@effect/platform^0.96.2package.json
npmchalk^5.6.2package.json
npmcommander^12.1.0package.json
npmeffect^3.21.4package.json
npmjiti^2.4.0package.json
npmjose^5.9.6package.json
All dependencies 393

Full resolved dependency set from the GitHub dependency graph: 9 direct and 384 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.

RegistryPackageVersionRelation
npm@clack/prompts1.5.1direct
npm@effect/platform0.96.2direct
npmchalk5.6.2direct
npmcommander12.1.0direct
npmcommander13.1.0direct
npmeffect3.21.4direct
npmjiti2.7.0direct
npmjose5.10.0direct
npmjose6.2.3direct
npm@aws-crypto/crc325.2.0indirect
npm@aws-crypto/crc32c5.2.0indirect
npm@aws-crypto/sha1-browser5.2.0indirect
npm@aws-crypto/sha256-browser5.2.0indirect
npm@aws-crypto/sha256-js5.2.0indirect
npm@aws-crypto/supports-web-crypto5.2.0indirect
npm@aws-crypto/util5.2.0indirect
npm@aws-sdk/checksums3.1000.5indirect
npm@aws-sdk/client-cognito-identity3.1068.0indirect
npm@aws-sdk/client-ec23.1068.0indirect
npm@aws-sdk/client-s33.1068.0indirect
npm@aws-sdk/core3.974.20indirect
npm@aws-sdk/credential-provider-cognito-identity3.972.45indirect
npm@aws-sdk/credential-provider-env3.972.46indirect
npm@aws-sdk/credential-provider-http3.972.48indirect
npm@aws-sdk/credential-provider-ini3.972.53indirect
npm@aws-sdk/credential-provider-login3.972.52indirect
npm@aws-sdk/credential-provider-node3.972.55indirect
npm@aws-sdk/credential-provider-process3.972.46indirect
npm@aws-sdk/credential-provider-sso3.972.52indirect
npm@aws-sdk/credential-provider-web-identity3.972.52indirect
npm@aws-sdk/credential-providers3.1068.0indirect
npm@aws-sdk/middleware-flexible-checksums3.974.30indirect
npm@aws-sdk/middleware-sdk-ec23.972.34indirect
npm@aws-sdk/middleware-sdk-s33.972.51indirect
npm@aws-sdk/nested-clients3.997.20indirect
npm@aws-sdk/signature-v4-multi-region3.996.34indirect
npm@aws-sdk/token-providers3.1066.0indirect
npm@aws-sdk/types3.973.12indirect
npm@aws-sdk/util-locate-window3.965.7indirect
npm@aws-sdk/xml-builder3.972.29indirect
npm@aws/lambda-invoke-store0.2.4indirect
npm@babel/code-frame7.29.7indirect
npm@babel/core^7.25.0indirect
npm@babel/helper-string-parser7.29.7indirect
npm@babel/helper-validator-identifier7.29.7indirect
npm@babel/parser7.29.7indirect
npm@babel/types7.29.7indirect
npm@bcoe/v8-coverage1.0.2indirect
npm@biomejs/biome2.5.1indirect
npm@biomejs/cli-darwin-arm642.5.1indirect
npm@biomejs/cli-darwin-x642.5.1indirect
npm@biomejs/cli-linux-arm642.5.1indirect
npm@biomejs/cli-linux-arm64-musl2.5.1indirect
npm@biomejs/cli-linux-x642.5.1indirect
npm@biomejs/cli-linux-x64-musl2.5.1indirect
npm@biomejs/cli-win32-arm642.5.1indirect
npm@biomejs/cli-win32-x642.5.1indirect
npm@clack/core1.4.1indirect
npm@emnapi/core1.10.0indirect
npm@emnapi/runtime1.10.0indirect
npm@emnapi/wasi-threads1.2.1indirect
npm@esbuild/aix-ppc640.28.1indirect
npm@esbuild/android-arm0.28.1indirect
npm@esbuild/android-arm640.28.1indirect
npm@esbuild/android-x640.28.1indirect
npm@esbuild/darwin-arm640.28.1indirect
npm@esbuild/darwin-x640.28.1indirect
npm@esbuild/freebsd-arm640.28.1indirect
npm@esbuild/freebsd-x640.28.1indirect
npm@esbuild/linux-arm0.28.1indirect
npm@esbuild/linux-arm640.28.1indirect
npm@esbuild/linux-ia320.28.1indirect
npm@esbuild/linux-loong640.28.1indirect
npm@esbuild/linux-mips64el0.28.1indirect
npm@esbuild/linux-ppc640.28.1indirect
npm@esbuild/linux-riscv640.28.1indirect
npm@esbuild/linux-s390x0.28.1indirect
npm@esbuild/linux-x640.28.1indirect
npm@esbuild/netbsd-arm640.28.1indirect
npm@esbuild/netbsd-x640.28.1indirect
npm@esbuild/openbsd-arm640.28.1indirect
npm@esbuild/openbsd-x640.28.1indirect
npm@esbuild/openharmony-arm640.28.1indirect
npm@esbuild/sunos-x640.28.1indirect
npm@esbuild/win32-arm640.28.1indirect
npm@esbuild/win32-ia320.28.1indirect
npm@esbuild/win32-x640.28.1indirect
npm@hono/node-server1.19.14indirect
npm@jridgewell/resolve-uri3.1.2indirect
npm@jridgewell/sourcemap-codec1.5.5indirect
npm@jridgewell/trace-mapping0.3.31indirect
npm@modelcontextprotocol/sdk1.29.0indirect
npm@msgpackr-extract/msgpackr-extract-darwin-arm643.0.4indirect
npm@msgpackr-extract/msgpackr-extract-darwin-x643.0.4indirect
npm@msgpackr-extract/msgpackr-extract-linux-arm3.0.4indirect
npm@msgpackr-extract/msgpackr-extract-linux-arm643.0.4indirect
npm@msgpackr-extract/msgpackr-extract-linux-x643.0.4indirect
npm@msgpackr-extract/msgpackr-extract-win32-x643.0.4indirect
npm@napi-rs/keyring1.3.0indirect
npm@napi-rs/keyring-darwin-arm641.3.0indirect
npm@napi-rs/keyring-darwin-x641.3.0indirect
npm@napi-rs/keyring-freebsd-x641.3.0indirect
npm@napi-rs/keyring-linux-arm-gnueabihf1.3.0indirect
npm@napi-rs/keyring-linux-arm64-gnu1.3.0indirect
npm@napi-rs/keyring-linux-arm64-musl1.3.0indirect
npm@napi-rs/keyring-linux-riscv64-gnu1.3.0indirect
npm@napi-rs/keyring-linux-x64-gnu1.3.0indirect
npm@napi-rs/keyring-linux-x64-musl1.3.0indirect
npm@napi-rs/keyring-win32-arm64-msvc1.3.0indirect
npm@napi-rs/keyring-win32-ia32-msvc1.3.0indirect
npm@napi-rs/keyring-win32-x64-msvc1.3.0indirect
npm@napi-rs/wasm-runtime1.1.6indirect
npm@nodable/entities2.2.0indirect
npm@oxc-project/types0.133.0indirect
npm@redocly/ajv8.11.2indirect
npm@redocly/config0.22.0indirect
npm@redocly/openapi-core1.34.17indirect
npm@rolldown/binding-android-arm641.0.3indirect
npm@rolldown/binding-darwin-arm641.0.3indirect
npm@rolldown/binding-darwin-x641.0.3indirect
npm@rolldown/binding-freebsd-x641.0.3indirect
npm@rolldown/binding-linux-arm-gnueabihf1.0.3indirect
npm@rolldown/binding-linux-arm64-gnu1.0.3indirect
npm@rolldown/binding-linux-arm64-musl1.0.3indirect
npm@rolldown/binding-linux-ppc64-gnu1.0.3indirect
npm@rolldown/binding-linux-s390x-gnu1.0.3indirect
npm@rolldown/binding-linux-x64-gnu1.0.3indirect
npm@rolldown/binding-linux-x64-musl1.0.3indirect
npm@rolldown/binding-openharmony-arm641.0.3indirect
npm@rolldown/binding-wasm32-wasi1.0.3indirect
npm@rolldown/binding-win32-arm64-msvc1.0.3indirect
npm@rolldown/binding-win32-x64-msvc1.0.3indirect
npm@rolldown/pluginutils1.0.1indirect
npm@smithy/core3.24.7indirect
npm@smithy/credential-provider-imds4.3.9indirect
npm@smithy/fetch-http-handler5.4.7indirect
npm@smithy/is-array-buffer2.2.0indirect
npm@smithy/node-http-handler4.7.8indirect
npm@smithy/signature-v45.4.7indirect
npm@smithy/types4.14.4indirect
npm@smithy/util-buffer-from2.2.0indirect
npm@smithy/util-utf82.3.0indirect
npm@standard-schema/spec1.1.0indirect
npm@tybys/wasm-util0.10.3indirect
npm@types/chai5.2.3indirect
npm@types/deep-eql4.0.2indirect
npm@types/estree1.0.9indirect
npm@types/node20.19.43indirect
npm@types/react~18.3.0indirect
npm@vitest/coverage-v84.1.8indirect
npm@vitest/expect4.1.8indirect
npm@vitest/mocker4.1.8indirect
npm@vitest/pretty-format4.1.8indirect
npm@vitest/runner4.1.8indirect
npm@vitest/snapshot4.1.8indirect
npm@vitest/spy4.1.8indirect
npm@vitest/utils4.1.8indirect
npmaccepts2.0.0indirect
npmagent-base7.1.4indirect
npmajv8.20.0indirect
npmajv-formats3.0.1indirect
npmansi-colors4.1.3indirect
npmansi-escapes7.3.0indirect
npmansi-regex6.2.2indirect
npmansi-styles6.2.3indirect
npmanynum1.0.0indirect
npmargparse2.0.1indirect
npmassertion-error2.0.1indirect
npmast-v8-to-istanbul1.0.4indirect
npmbalanced-match1.0.2indirect
npmbody-parser2.3.0indirect
npmbowser2.14.1indirect
npmbrace-expansion2.1.1indirect
npmbraces3.0.3indirect
npmbytes3.1.2indirect
npmcall-bind-apply-helpers1.0.2indirect
npmcall-bound1.0.4indirect
npmchai6.2.2indirect
npmchange-case5.4.4indirect
npmcli-cursor5.0.0indirect
npmcli-truncate4.0.0indirect
npmcolorette1.4.0indirect
npmcolorette2.0.20indirect
npmcontent-disposition1.1.0indirect
npmcontent-type1.0.5indirect
npmcontent-type2.0.0indirect
npmconvert-source-map2.0.0indirect
npmcookie0.7.2indirect
npmcookie-signature1.2.2indirect
npmcors2.8.6indirect
npmcross-spawn7.0.6indirect
npmdebug4.4.3indirect
npmdepd2.0.0indirect
npmdetect-libc2.1.2indirect
npmdunder-proto1.0.1indirect
npmee-first1.1.1indirect
npmemoji-regex10.6.0indirect
npmencodeurl2.0.0indirect
npmenvironment1.1.0indirect
npmes-define-property1.0.1indirect
npmes-errors1.3.0indirect
npmes-module-lexer2.1.0indirect
npmes-object-atoms1.1.2indirect
npmesbuild0.28.1indirect
npmescape-html1.0.3indirect
npmestree-walker3.0.3indirect
npmetag1.8.1indirect
npmeventemitter35.0.4indirect
npmeventsource3.0.7indirect
npmeventsource-parser3.1.0indirect
npmexeca8.0.1indirect
npmexpect-type1.3.0indirect
npmexpo~52.0.0indirect
npmexpo-status-bar~2.0.0indirect
npmexpress5.2.1indirect
npmexpress-rate-limit8.5.2indirect
npmfast-check3.23.2indirect
npmfast-deep-equal3.1.3indirect
npmfast-string-truncated-width3.0.3indirect
npmfast-string-width3.0.2indirect
npmfast-uri3.1.2indirect
npmfast-wrap-ansi0.2.2indirect
npmfast-xml-builder1.2.0indirect
npmfast-xml-parser5.7.3indirect
npmfdir6.5.0indirect
npmfill-range7.1.1indirect
npmfinalhandler2.1.1indirect
npmfind-my-way-ts0.1.6indirect
npmforwarded0.2.0indirect
npmfresh2.0.0indirect
npmfsevents2.3.3indirect
npmfunction-bind1.1.2indirect
npmget-east-asian-width1.6.0indirect
npmget-intrinsic1.3.0indirect
npmget-proto1.0.1indirect
npmget-stream8.0.1indirect
npmgopd1.2.0indirect
npmhas-flag4.0.0indirect
npmhas-symbols1.1.0indirect
npmhasown2.0.4indirect
npmhono4.12.25indirect
npmhtml-escaper2.0.2indirect
npmhttp-errors2.0.1indirect
npmhttps-proxy-agent7.0.6indirect
npmhuman-signals5.0.0indirect
npmhusky9.1.7indirect
npmiconv-lite0.7.2indirect
npmindex-to-position1.2.0indirect
npminherits2.0.4indirect
npmip-address10.2.0indirect
npmipaddr.js1.9.1indirect
npmis-fullwidth-code-point4.0.0indirect
npmis-fullwidth-code-point5.1.0indirect
npmis-number7.0.0indirect
npmis-promise4.0.0indirect
npmis-stream3.0.0indirect
npmisexe2.0.0indirect
npmistanbul-lib-coverage3.2.2indirect
npmistanbul-lib-report3.0.1indirect
npmistanbul-reports3.2.0indirect
npmjs-levenshtein1.1.6indirect
npmjs-tokens10.0.0indirect
npmjs-tokens4.0.0indirect
npmjs-yaml4.2.0indirect
npmjson-schema-traverse1.0.0indirect
npmjson-schema-typed8.0.2indirect
npmlightningcss1.32.0indirect
npmlightningcss-android-arm641.32.0indirect
npmlightningcss-darwin-arm641.32.0indirect
npmlightningcss-darwin-x641.32.0indirect
npmlightningcss-freebsd-x641.32.0indirect
npmlightningcss-linux-arm-gnueabihf1.32.0indirect
npmlightningcss-linux-arm64-gnu1.32.0indirect
npmlightningcss-linux-arm64-musl1.32.0indirect
npmlightningcss-linux-x64-gnu1.32.0indirect
npmlightningcss-linux-x64-musl1.32.0indirect
npmlightningcss-win32-arm64-msvc1.32.0indirect
npmlightningcss-win32-x64-msvc1.32.0indirect
npmlilconfig3.1.3indirect
npmlint-staged15.5.2indirect
npmlistr28.3.3indirect
npmlog-update6.1.0indirect
npmmagic-string0.30.21indirect
npmmagicast0.5.3indirect
npmmake-dir4.0.0indirect
npmmath-intrinsics1.1.0indirect
npmmedia-typer1.1.0indirect
npmmerge-descriptors2.0.0indirect
npmmerge-stream2.0.0indirect
npmmicromatch4.0.8indirect
npmmime-db1.54.0indirect
npmmime-types3.0.2indirect
npmmimic-fn4.0.0indirect
npmmimic-function5.0.1indirect
npmminimatch5.1.9indirect
npmms2.1.3indirect
npmmsgpackr1.12.1indirect
npmmsgpackr-extract3.0.4indirect
npmmultipasta0.2.7indirect
npmnanoid3.3.15indirect
npmnegotiator1.0.0indirect
npmnode-gyp-build-optional-packages5.2.2indirect
npmnpm-run-path5.3.0indirect
npmobject-assign4.1.1indirect
npmobject-inspect1.13.4indirect
npmobug2.1.3indirect
npmon-finished2.4.1indirect
npmonce1.4.0indirect
npmonetime6.0.0indirect
npmonetime7.0.0indirect
npmopenapi-typescript7.13.0indirect
npmparse-json8.3.0indirect
npmparseurl1.3.3indirect
npmpath-expression-matcher1.5.0indirect
npmpath-key3.1.1indirect
npmpath-key4.0.0indirect
npmpath-to-regexp8.4.2indirect
npmpathe2.0.3indirect
npmpicocolors1.1.1indirect
npmpicomatch2.3.2indirect
npmpicomatch4.0.4indirect
npmpicomatch4.0.5indirect
npmpidtree0.6.1indirect
npmpkce-challenge5.0.1indirect
npmpluralize8.0.0indirect
npmpostcss8.5.16indirect
npmproxy-addr2.0.7indirect
npmpure-rand6.1.0indirect
npmqs6.15.2indirect
npmrange-parser1.2.1indirect
npmraw-body3.0.2indirect
npmreact18.3.1indirect
npmreact-native0.76.5indirect
npmrequire-from-string2.0.2indirect
npmrestore-cursor5.1.0indirect
npmrfdc1.4.1indirect
npmrolldown1.0.3indirect
npmrouter2.2.0indirect
npmsafer-buffer2.1.2indirect
npmsemver7.8.4indirect
npmsend1.2.1indirect
npmserve-static2.2.1indirect
npmsetprototypeof1.2.0indirect
npmshebang-command2.0.0indirect
npmshebang-regex3.0.0indirect
npmside-channel1.1.1indirect
npmside-channel-list1.0.1indirect
npmside-channel-map1.0.1indirect
npmside-channel-weakmap1.0.2indirect
npmsiginfo2.0.0indirect
npmsignal-exit4.1.0indirect
npmsisteransi1.0.5indirect
npmslice-ansi5.0.0indirect
npmslice-ansi7.1.2indirect
npmsource-map-js1.2.1indirect
npmstackback0.0.2indirect
npmstatuses2.0.2indirect
npmstd-env4.1.0indirect
npmstring-argv0.3.2indirect
npmstring-width7.2.0indirect
npmstrip-ansi7.2.0indirect
npmstrip-final-newline3.0.0indirect
npmstrnum2.4.0indirect
npmsupports-color10.2.2indirect
npmsupports-color7.2.0indirect
npmtinybench2.9.0indirect
npmtinyexec1.2.4indirect
npmtinyglobby0.2.17indirect
npmtinyrainbow3.1.0indirect
npmto-regex-range5.0.1indirect
npmtoidentifier1.0.1indirect
npmtslib2.8.1indirect
npmtsx4.22.4indirect
npmtype-fest4.41.0indirect
npmtype-is2.1.0indirect
npmtypescript5.9.3indirect
npmtypescript~5.3.3indirect
npmundici-types6.21.0indirect
npmunpipe1.0.0indirect
npmuri-js-replace1.0.1indirect
npmvary1.1.2indirect
npmvite8.0.16indirect
npmvitest4.1.8indirect
npmwhich2.0.2indirect
npmwhy-is-node-running2.3.0indirect
npmwrap-ansi9.0.2indirect
npmwrappy1.0.2indirect
npmxml-naming0.1.0indirect
npmyaml2.9.0indirect
npmyaml-ast-parser0.0.43indirect
npmyargs-parser21.1.1indirect
npmzod4.4.3indirect
npmzod-to-json-schema3.25.2indirect
Dependency advisories 1

Installing npm:launch-store@0.32.8 pulls in 165 packages, direct and transitive: 1 carry known advisories, of which 0 are direct dependencies.

PackageVersionRelationSeverityAdvisoriesFixed in
@hono/node-server1.19.15indirectmoderate12.0.5

An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.

Raw JSON report machine-readable
{
  "data": {
    "repo": {
      "topics": [
        "android",
        "app-store",
        "app-store-connect",
        "ci-cd",
        "cli",
        "code-signing",
        "eas",
        "expo",
        "fastlane",
        "ios",
        "mobile",
        "play-store",
        "react-native",
        "testflight",
        "expo-updates",
        "google-play",
        "nodejs",
        "typescript"
      ],
      "is_fork": false,
      "size_kb": 18516,
      "has_wiki": true,
      "homepage": "https://www.npmjs.com/package/launch-store",
      "languages": {
        "JavaScript": 13754,
        "TypeScript": 8968545
      },
      "pushed_at": "2026-07-19T12:31:32Z",
      "created_at": "2026-06-13T18:49:45Z",
      "owner_type": "User",
      "updated_at": "2026-07-21T08:05:41Z",
      "description": "Self-hosted CLI for building, signing, and shipping Expo/React Native apps to TestFlight and Google Play.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "TypeScript",
      "significant_languages": [
        "TypeScript"
      ]
    },
    "owner": {
      "blog": "https://yosefhayimsabag.com",
      "name": null,
      "type": "User",
      "login": "YosefHayim",
      "company": null,
      "location": "Israel, HaMarkeZ, Tel Aviv",
      "followers": 16,
      "avatar_url": "https://avatars.githubusercontent.com/u/179159376?v=4",
      "created_at": "2024-08-22T17:23:42Z",
      "is_verified": null,
      "public_repos": 12,
      "account_age_days": 701
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.32.8",
          "kind": "patch",
          "published_at": "2026-07-19T12:31:34Z"
        },
        {
          "tag": "v0.32.7",
          "kind": "patch",
          "published_at": "2026-07-11T11:25:53Z"
        },
        {
          "tag": "v0.32.6",
          "kind": "patch",
          "published_at": "2026-07-11T11:22:45Z"
        },
        {
          "tag": "v0.32.4",
          "kind": "patch",
          "published_at": "2026-07-02T17:44:31Z"
        },
        {
          "tag": "v0.32.3",
          "kind": "patch",
          "published_at": "2026-07-01T23:40:45Z"
        },
        {
          "tag": "v0.32.0",
          "kind": "minor",
          "published_at": "2026-07-01T18:49:13Z"
        },
        {
          "tag": "v0.31.2",
          "kind": "patch",
          "published_at": "2026-06-30T09:57:54Z"
        },
        {
          "tag": "v0.31.1",
          "kind": "patch",
          "published_at": "2026-06-30T09:56:25Z"
        },
        {
          "tag": "v0.31.0",
          "kind": "minor",
          "published_at": "2026-06-28T15:30:57Z"
        },
        {
          "tag": "v0.30.0",
          "kind": "minor",
          "published_at": "2026-06-27T17:13:29Z"
        },
        {
          "tag": "v0.29.1",
          "kind": "patch",
          "published_at": "2026-06-25T11:37:30Z"
        },
        {
          "tag": "v0.29.0",
          "kind": "minor",
          "published_at": "2026-06-22T23:15:05Z"
        },
        {
          "tag": "v0.28.0",
          "kind": "minor",
          "published_at": "2026-06-21T10:19:52Z"
        },
        {
          "tag": "v0.27.0",
          "kind": "minor",
          "published_at": "2026-06-19T15:27:44Z"
        },
        {
          "tag": "v0.26.1",
          "kind": "patch",
          "published_at": "2026-06-16T09:28:13Z"
        },
        {
          "tag": "v0.26.0",
          "kind": "minor",
          "published_at": "2026-06-15T23:42:30Z"
        },
        {
          "tag": "v0.18.0",
          "kind": "minor",
          "published_at": "2026-06-15T19:54:55Z"
        },
        {
          "tag": "v0.17.0",
          "kind": "minor",
          "published_at": "2026-06-15T18:17:49Z"
        },
        {
          "tag": "v0.16.1",
          "kind": "patch",
          "published_at": "2026-06-15T14:40:24Z"
        },
        {
          "tag": "v0.16.0",
          "kind": "minor",
          "published_at": "2026-06-15T13:38:15Z"
        },
        {
          "tag": "v0.15.0",
          "kind": "minor",
          "published_at": "2026-06-15T11:43:23Z"
        },
        {
          "tag": "v0.14.0",
          "kind": "minor",
          "published_at": "2026-06-15T11:34:35Z"
        },
        {
          "tag": "v0.13.3",
          "kind": "patch",
          "published_at": "2026-06-15T10:10:20Z"
        },
        {
          "tag": "v0.13.2",
          "kind": "patch",
          "published_at": "2026-06-15T09:16:22Z"
        },
        {
          "tag": "v0.13.1",
          "kind": "patch",
          "published_at": "2026-06-15T08:09:50Z"
        },
        {
          "tag": "v0.13.0",
          "kind": "minor",
          "published_at": "2026-06-15T07:50:29Z"
        },
        {
          "tag": "v0.12.0",
          "kind": "minor",
          "published_at": "2026-06-14T17:26:42Z"
        },
        {
          "tag": "v0.11.0",
          "kind": "minor",
          "published_at": "2026-06-14T06:01:18Z"
        },
        {
          "tag": "v0.10.0",
          "kind": "minor",
          "published_at": "2026-06-14T05:17:18Z"
        },
        {
          "tag": "v0.9.0",
          "kind": "minor",
          "published_at": "2026-06-14T04:34:18Z"
        },
        {
          "tag": "v0.8.0",
          "kind": "minor",
          "published_at": "2026-06-14T04:07:11Z"
        },
        {
          "tag": "v0.7.0",
          "kind": "minor",
          "published_at": "2026-06-14T02:10:16Z"
        },
        {
          "tag": "v0.6.0",
          "kind": "minor",
          "published_at": "2026-06-14T01:40:46Z"
        },
        {
          "tag": "v0.5.0",
          "kind": "minor",
          "published_at": "2026-06-14T01:17:00Z"
        },
        {
          "tag": "v0.4.1",
          "kind": "patch",
          "published_at": "2026-06-13T23:58:26Z"
        },
        {
          "tag": "v0.4.0",
          "kind": "minor",
          "published_at": "2026-06-13T23:37:02Z"
        },
        {
          "tag": "v0.3.0",
          "kind": "minor",
          "published_at": "2026-06-13T22:47:17Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "a232009914c129d10ffc2e67387fc989cddf03ed",
          "body": "…e isolation)",
          "is_bot": false,
          "headline": "chore: release v0.32.8 (Effect Schema SSOT, pipeline extract, keystor…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-19T12:31:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "89bc3778f13942a01297147ddfe4b80d1ef43fe7",
          "body": "… isolation\n\nComplete the Effect Schema config SSOT: annotate fields so JSON Schema\ndescriptions emit without a merge bridge, drop the gen-docs description\nmerge helper, and remove the zod dependency.\n\nExtract pipeline.ts into phase modules (types, providers, env, signing,\nversion, artifact, ios, android) and isolate Google keystore tests by\nredirecting HOME via vi.hoisted. Align contributor docs with pnpm.",
          "is_bot": false,
          "headline": "refactor: Effect Schema field descriptions, pipeline phases, keystore…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-19T12:30:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c12001434bef5d48921be14b2bc729374602480c",
          "body": null,
          "is_bot": false,
          "headline": "chore: release v0.32.7 (export compliance + publish CI fixes)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-11T11:25:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f210a80d56b55c17a9f0d70ae4d2c22b354d574a",
          "body": "llms.txt and README link to ./docs/adr/, but the directory was gitignored\nvia docs/*. Clean checkouts (publish CI) failed docsConsistency when the\ndirectory was missing. Exception + commit the ADRs so the public links resolve.",
          "is_bot": false,
          "headline": "docs: track docs/adr so CI can resolve public ADR links",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-11T11:25:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f084da0b328df0d99132de3c61c573caa9544f47",
          "body": "setup-node with cache: pnpm shells out to `pnpm store path`, so\npnpm/action-setup must run first. Without it, v0.32.6 publish failed\nimmediately after checkout.",
          "is_bot": false,
          "headline": "ci(publish): install pnpm before setup-node cache",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-11T11:23:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ca6371ef88179a6ed5a4e2ee1a39fcf51a3c2c02",
          "body": null,
          "is_bot": false,
          "headline": "chore: release v0.32.6 (export compliance 409 idempotent, #299)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-11T11:22:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8282a848e284822996836a8790e44e15daa2e817",
          "body": "Skip the export-compliance PATCH when App Store Connect already has the\ndesired usesNonExemptEncryption value, and treat Apple's 409 \"already\nset\" conflict as skipped success so a matching desired state does not\nfail the release run.",
          "is_bot": false,
          "headline": "fix(release): treat already-set export compliance 409 as success (#299)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-11T11:22:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eb1dd2d9afee948f050cdb085e667bb64703ae7d",
          "body": null,
          "is_bot": false,
          "headline": "chore: release v0.32.5 (iOS signing scope fix, #301)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-08T16:45:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "27e851d12309544344ad4075807ec05ebed3b1b6",
          "body": "… Pods (#301)\n\n`launch build ios` failed at the archive step on Xcode 26 for a plain single-target\napp: gym passed CODE_SIGN_STYLE=Manual + PROVISIONING_PROFILE_SPECIFIER as workspace-\nwide xcargs, so xcodebuild applied the app's manual App Store profile to every\nCocoaPods library target. Xcode 26 p\n[…]\nIDs that were used as test fixtures / doc-comment examples with clearly-fake pseudonyms\n(com.example.sampleapp, ABCDE12345, KEY*).\n\nFixes #301.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(build): scope iOS signing to the app target so it can't leak onto…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-08T16:44:48Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "931c8a09191e928ee63aa176a8143ac33a7733d8",
          "body": null,
          "is_bot": false,
          "headline": "docs: refresh agent and readme guidance",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-07T05:21:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "62004efa3b5365812c93930467f3b9b6986f5b48",
          "body": null,
          "is_bot": false,
          "headline": "chore: refresh openapi transitive dependencies",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-07T05:00:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a481e7ed327f833608f71cfdd0c496a7fd082257",
          "body": null,
          "is_bot": false,
          "headline": "refactor: group core modules by purpose",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-07T04:52:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2a9b35e84f16e94d2669468afa499dde17c8c781",
          "body": null,
          "is_bot": false,
          "headline": "docs: add official README links",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-07T03:59:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9b5ba2747b53521140c2455a213dae59a30a0b1c",
          "body": null,
          "is_bot": false,
          "headline": "docs: sync generated launch docs",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-07T01:09:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7fd9b2b80f4c6471b78052a52c6d9ecc397bf572",
          "body": null,
          "is_bot": false,
          "headline": "docs: refresh README feature map",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-07T01:07:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "60ed76bd9630a722b58cfc7ab5525914a568ed8d",
          "body": "- Replace npm/package-lock.json with pnpm/pnpm-lock.yaml\n- Add packageManager field to package.json\n- Update scripts: npm run → pnpm, npx → pnpm exec\n- Workflows: add pnpm/action-setup@v4, cache: pnpm, pnpm install --frozen-lockfile",
          "is_bot": false,
          "headline": "chore: migrate to pnpm, update CI workflows",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-04T21:01:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b7adf9ec48c6f31dc1e4e7182440c4ce082e6be1",
          "body": null,
          "is_bot": false,
          "headline": "chore: remove obsolete dev script (moved to scripts/dev/, gitignored)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-04T19:57:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a6ad9925317b63560adba136c1e023ca1b54f864",
          "body": "…k, report-failure, ci)\n\nSynced from the canonical dufflebag/alg workflow set. Each workflow is\nsingle-purpose and reusable (workflow_call). ci.yml orchestrates them and\ngates merges via the CI Gate job.",
          "is_bot": false,
          "headline": "ci: add missing workflow templates (biome, build, e2e, test, typechec…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-04T19:47:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6e0ae15e087463eec8e56e54c3c61aa98884d027",
          "body": "- Move preview-wordmark.ts to scripts/dev/\n- Document scripts/dev/ convention in CODE-STYLE.md\n- Add scripts/dev/ to .gitignore",
          "is_bot": false,
          "headline": "chore: organize dev scripts into scripts/dev/ (gitignored)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-04T14:02:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "97bb77c4bd8f88eab705c50dbbfe82d07f02a238",
          "body": null,
          "is_bot": false,
          "headline": "release: v0.32.4",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-02T17:44:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8e23475d1e09f7795ffe529bb5922af799673505",
          "body": "…the build path (#291, #292) (#293)\n\nfindBundleId resolved the wrong App ID for multi-target apps: Apple's filter[identifier]\nis a substring match, so a query for com.acme.app also returned com.acme.app.widget and\ndata[0] could be the widget. Select the exact identifier and raise the limit off 1. Th\n[…]\n decode grades as current so reuse stands (#292).\n\n7 unit tests; README/llms/commands test-count badge regenerated (1967 -> 1974).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(signing): exact App ID resolution + regenerate stale profiles on …",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-02T17:43:38Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f77f4ae633b683b256aec1df703ef806cdd52470",
          "body": "…rget archives (#289) (#290)\n\nAfter #262 dropped the clobbering global PROVISIONING_PROFILE_SPECIFIER for\nmulti-target apps, nothing supplied each target its profile, so an app with an\nembedded extension (widget) failed the archive at exit 65 — \"requires a\nprovisioning profile — Select a provisionin\n[…]\n.ts: buildXcargs doc points at the writer.\n- Regenerated the README/llms/commands test-count badge (docs:gen) for the 8 new tests.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(build): stamp per-target manual signing into pbxproj for multi-ta…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-02T17:28:46Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "dc64c09636302e85ccfc78893e3e91fb3b3f1aba",
          "body": null,
          "is_bot": false,
          "headline": "release: v0.32.3",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-01T23:40:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8e569ae474669732d3ee1d7a3a6afc6019f52689",
          "body": "Fold the three hand-synced config artifacts — the TypeScript interfaces, the\nhand-rolled JSON-Schema validator, and the generated schema — into one zod\nschema per shape, so they can no longer drift.\n\n- The config type tree (app/catalog/storeSurface/remote/config) is now zod\n  schemas; every exported\n[…]\ne is introduced. Age rating stays the open `string | boolean`.\n- Drop the now-unused `ts-json-schema-generator` devDep; add `zod`.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "migration: adopt zod v4 as the config SSOT (ADR 0008) (#274) (#288)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-01T23:38:48Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "7ac4a9d198d2cad4b06b70ddd6e5b16d641b91f8",
          "body": "…76) (#287)\n\nCompletes the CODE-STYLE 'Never' enforcement (noDefaultExport was already error):\n\n- noNonNullAssertion -> error for production src/ (already 0 violations there, so the guarantee is locked). A scoped biome.json override keeps test files at warn; clearing those 142 test assertions is tra\n[…]\nrker-pool lane, retry backoff), each annotated with a justified biome-ignore. Behavior-preserving — none converted to Promise.all.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(lint): promote noNonNullAssertion + noAwaitInLoops to error (#2…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-01T22:49:07Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "40dbb2567b3cf76c0cc963bf6702c481a6069864",
          "body": "… archives (#262) (#285)\n\nA command-line PROVISIONING_PROFILE_SPECIFIER applies to every target, so pinning the main app's profile clobbers an embedded app-extension bundle (its app-id differs) and fails the archive with exit 65 before export. Drop the global specifier when SigningAssets.extensionPr\n[…]\n via exportOptionsPlist. The remote path is single-target-only by construction (it uploads one profile) — documented, not touched.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(build): drop clobbering global profile specifier for multi-target…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-01T22:33:21Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f4a3242c786dc645b736772e5afdcd4e6ae4b4df",
          "body": "Split the monolithic CI check into reusable workflow_call legs\n(lint/typecheck/docs/test/build/e2e) composed by ci.yml, with a shared\ncached-install composite action (.github/actions/setup-node-cached), an\naggregated CI Gate status check, and report-failure that files a ci-failure\nissue when main go\n[…]\nage, mirroring *.testkit.ts.\n\nRationale recorded in ADR 0009 (reusable CI + report-failure) and ADR 0010\n(built-CLI e2e, not MSW).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: reusable single-purpose workflows + built-CLI e2e (#282) (#283)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-01T22:14:58Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "396a7399bd7ce657e96bfecb1f0dc6f6701ba587",
          "body": null,
          "is_bot": false,
          "headline": "release: v0.32.0",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-01T18:48:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c2e1aa60a1a24ee8c42a1a81b28fdf153f15cce0",
          "body": "…nsole.* (#273) (#281)\n\nAdds the plain-line seam primitive `Logger.line(message)` (a glyph-free `console.log`\npassthrough) and routes every raw `console.*` in the CLI through the logger, so the\nlogger is the single owner of content output.\n\n- Logger.line: the one owner of raw content output — a comm\n[…]\nentically; the content\nflow goes through log.line (=== console.log). Gate green: typecheck 0 · lint 0 errors ·\n1968 tests · build.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "migration: route all CLI output through the logger seam — kill raw co…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-01T18:43:03Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9fa8bdec178c405e67cc38558021ed2cc90680cf",
          "body": "…el (#280)\n\n* migration: fold the 14 per-feature types.ts into the core/types/ barrel (#272)\n\nEvery exported domain shape now lives in a src/core/types/*.ts module re-exported by\nthe src/core/types.ts barrel and imported everywhere as `../core/types.js`. The 14\nper-feature `types.ts` modules are gon\n[…]\nhe\nrest of the codebase uses. No behavior change.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "migration: fold the 14 per-feature types.ts into the core/types/ barr…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-01T18:39:29Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a8368a79e1e1ee1b2584b71e4f8e211e99c8dd23",
          "body": "…-loop cleanups) (#279)\n\n* migration: promote noDefaultExport to Biome error; annotate await-loops (#276)\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n* chore(biome): disable useImportExtensions — it fights NodeNext\n\nUnder module/moduleResolution \"NodeNext\" with real emit, \n[…]\n noise here; turn it off. Warnings: 5204 -> 3442.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "migration: promote noDefaultExport to Biome error (+ non-null / await…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-01T18:31:23Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "893db05bffe42387bb1758467a536f8765abb7be",
          "body": "Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "migration: consolidate shared test fakes into src/testkit/ (#275) (#278)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-01T18:31:06Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b9d6ac9460d91262ca570bd8f27d960d718b8274",
          "body": "… (#277)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: add CODE-STYLE.md style SSOT and refresh AGENTS.md rules digest…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-07-01T18:30:43Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d78b33d4aea64995f214a732f52d25e8a60128db",
          "body": null,
          "is_bot": false,
          "headline": "release: v0.31.2",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-30T09:57:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f9fd6069acbde20d3d5fee949f8db1f4f800a0d7",
          "body": "Co-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "docs: regenerate badges after UTF-8 locale tests",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-30T09:57:44Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "43e13dea0f346c796c457a8a5e2b61607e86aca7",
          "body": null,
          "is_bot": false,
          "headline": "release: v0.31.1 — force UTF-8 locale for fastlane subprocesses",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-30T09:56:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3013cd7a5b7ab9f192d2ad7d30f7545235c21e74",
          "body": "macOS shells defaulting to US-ASCII break xcpretty/gym with non-ASCII\nXcode output. Launch now sets LANG/LC_ALL on every child process and\ndoctor reports whether the interactive shell is already UTF-8.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(exec): force UTF-8 locale for fastlane subprocesses",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-30T09:54:58Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b6dc2e5e331c6a079d7117368692f89885cf823c",
          "body": "…(#271)\n\n* refactor(apple): extract ASC resource type wall into ascResources.ts\n\nascClient.ts was 5,030 LOC: an 88-interface \"type wall\" of `*Resource`/\n`*Query`/enum shapes, one 190-method `AppStoreConnectClient` class over a\nsmall shared transport core, and its private mappers. The class can't mov\n[…]\nng still holds at the boundary it actually meant.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(apple): extract ASC resource type wall into ascResources.ts …",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-28T21:33:09Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "314820a801a798838c1d4327a61894a913ec2575",
          "body": "…un (#270)\n\n* refactor(cli): dedup the readiness command family behind one shared run\n\n`audit`, `store doctor`, and `iap doctor` answer three distinct questions\n(submission / account / IAP readiness) but copy-pasted an identical ~20-line\nrun-flow: register probes → load config → build the read-only \n[…]\nhe live-stats badges for the\n+4 tests (docs:gen).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(cli): dedup the readiness command family behind one shared r…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-28T20:28:31Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f578cb851762ae589d92d53e1e8b9c027265fe50",
          "body": "feat(doctor): iOS signing preflight for App Groups + multi-target apps (#261)",
          "is_bot": false,
          "headline": "Merge pull request #269 from YosefHayim/feat/doctor-signing-preflight",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-28T15:38:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "04c783dbaeed28226d6b4bde5fe6d31ccfc2c218",
          "body": "Co-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "chore: merge main and regenerate docs after conflict resolution",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-28T15:36:49Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "14c18f696ac3aee17d20f1f9f4210ae8410e1920",
          "body": "fix(doctor): add --app flag for multi-app preflight checks",
          "is_bot": false,
          "headline": "Merge pull request #268 from YosefHayim/fix/doctor-app-flag",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-28T15:35:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eaef013c3882e0a53d50b602a038964173f96974",
          "body": "…et apps (#261)\n\nExtract shared signing readiness checks from the build pipeline and run them in `launch doctor` so widget/extension App ID gaps and App Group portal steps surface before a long compile.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat(doctor): add iOS signing preflight for App Groups and multi-targ…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-28T15:34:20Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "528fd7a0d31f55360ecff4a090b7fbf23fb7ea69",
          "body": "Closes #266. Scope launch doctor to selected app handles so monorepos can\nrun toolchain and config checks for one app without evaluating every\nentry in launch.config.ts. Mirrors store doctor and build flag behavior.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(doctor): add --app flag for multi-app preflight checks",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-28T15:33:16Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "866fd653a13f6274f9295b67b8d935e03958d127",
          "body": "…ing safe slice (#267)\n\nRollup since v0.30.0:\n- feat(build): per-run `--size-budget`/`--budget` override + wizard step (#260, #263)\n- fix(apple): multi-target iOS signing safe slice — pbxproj target discovery,\n  stale-profile capability-diff regenerate, `creds setup --app`, build preflight\n  (#261 s\n[…]\ne, #264; archive-vector flip tracked in #262)\n- chore: finish the eslint+prettier → biome migration; repair the red CI gate (#265)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): v0.31.0 — per-run size budget + multi-target iOS sign…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-28T15:30:53Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "fa20ff6a09cfccd40e2d33c5b9e78458e6fa8552",
          "body": "…-profile regen, creds --app, preflight (#261) (#264)\n\nThe CI-provable safe slice of #261. Does NOT touch the archive-step signing\nvector in buildFlags.ts (the exit-65→success per-target flip is #262); the\nno-extension iOS arg vector stays byte-identical (its pinned test is untouched).\n\n- creds setu\n[…]\ngen, matching the existing src/core/asc/schema.ts\nexclusion) so lint and docs:check no longer conflict on it.\n\nRefs #261\nRefs #262\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(apple): multi-target signing safe slice — target discovery, stale…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-28T15:17:21Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "27b0df238103034ec098a24a1be8283e044b92ee",
          "body": "Let a single build override the soft size budget without editing\nlaunch.config.ts. A new optional `BuildRunOptions.sizeBudgetMB` is\nresolved at the upload gate by `resolveSizeBudgetMB(options, profile)`\n— one shared helper for all three `confirmUpload` sites (local iOS,\nlocal Android, EAS handoff) w\n[…]\ncover the resolve order, CLI/wizard validation, and the\nprofile-default fallback. Docs regenerated for the new flags.\n\nCloses #260\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(build): per-run size-budget override (#260) (#263)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-28T15:12:53Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6d08a2c06242e519fd6c2b342f19cfe251691a03",
          "body": "… (#265)\n\nThe biome migration (0be8b2d) replaced eslint+prettier as the source\nformatter with biome, but left the toolchain half-wired, which turned\nCI red on main:\n\n  - ci.yml still ran `npm run format:check`, a script 0be8b2d deleted\n    → \"Missing script\" → CI failed before tests on every push/PR\n[…]\ne reality;\n    regenerated docs reflect the prettier-free generator.\n\nGate green: typecheck, lint, test (1903), build, docs:check.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: finish the biome migration — drop prettier, repair the CI gate…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-28T15:02:43Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0be8b2d50ab83d51b49e0a70dd93835441d5f6c0",
          "body": "Co-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "chore: apply biome format and lint fixes",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-27T21:25:31Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c029b9adff9a8e575f578305f24c3d3a50334949",
          "body": "…amily (#259)\n\nMinor release rolling up everything merged since v0.29.1:\n- #255 route every submit/store path through the config-aware storage resolver\n- #256 env/keychain reference for the App Review demoAccountPassword\n- #257 decouple the build platform from the submit store (ADR 0006)\n- #258 tvOS\n[…]\nly package.json and\npackage-lock.json change here; the tag created on the squashed commit\nfires the OIDC trusted-publish workflow.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): v0.30.0 — platform/store split + the Apple platform f…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-27T17:12:54Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6c911fab10b5a9effc736733d6b5d823e0ffc016",
          "body": "… (#258)\n\nWiden Platform to the four Apple build targets behind one pure vocabulary\nmodule (src/core/platform.ts): isApplePlatform, the two ASC mappers\n(toAscPlatform vs toBundleIdPlatform), profile-type mappers (visionOS reuses\nIOS_APP_STORE; macOS has no ad-hoc), and gymDestination (iOS -> undefin\n[…]\nbuild:resign are explicitly gated (not silently routed to\niOS). Enum/profile mappings verified against Apple's bundled ASC OpenAPI spec.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)",
          "is_bot": false,
          "headline": "feat(apple): tvOS, macOS, and visionOS as first-class build platforms…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-27T17:03:20Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f3abbde921c69a7d0fbe04c47dc5d9f43ce51308",
          "body": "…R 0006) (#257)\n\n`config.submit` was a single string mapped 1:1 to a Submitter, welding the build platform\n(ios/android) to the store. Grow it to `string | SubmitByPlatform` so one build can fan out to\nseveral stores, resolving to a store LIST per platform — the foundation that alternative Android\ns\n[…]\n0006 is the local decision record)\n\nThe `Submitter` interface is untouched, so each new store stays a pure add-a-provider drop-in.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(core): decouple the build platform from the submit store (AD…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-27T14:52:47Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f10f8c5041d858c70f1c8bf9d9ccc124da92f598",
          "body": "…ccountPassword (#249) (#256)\n\n`release.config.json`'s `reviewDetails.demoAccountPassword` could only be a plaintext literal in a\nrepo-committed file. Allow it to name an indirection resolved at submit time instead, per \"secrets\nnever touch the repo\":\n\n- `env:VAR_NAME`     → read from the environmen\n[…]\nnever reads, holds, or renders\nthe secret (the plan still shows the field by name only). Schema doc + generated config.md updated.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(core): accept an env/keychain reference for the App Review demoA…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-27T14:48:42Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e5df583b0468095f2135d717514d327124642680",
          "body": "…rage resolver (#251) (#255)\n\nThe release-train engine and `launch release` looked storage up through the registry\n(`getStorageProvider(config.storage)`), where only the default-bound `local` singleton is\nregistered — so an Android submit with `s3`/`supabase` threw \"Unknown storage provider\", and a\n\n[…]\nreArtifactPresent` (P2)\n- extract `ensureArtifactPresent` into core/storage.ts so `launch release` and the train guard identically\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(core): route every submit/store path through the config-aware sto…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-27T14:21:39Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b7c9c8fac283cf2230c8099f74da799a6383c5f5",
          "body": "Behavior-preserving release. Every change since v0.29.0 is an internal\nrefactor that deepens a shallow module behind its existing interface —\nno new commands, flags, or behavior, so this is a drop-in upgrade.\n\n- #247 consolidate reconciler scaffolding into shared store-sync vocabulary\n- #248 split t\n[…]\nscClient behind typed JSON:API engine helpers\n- #253 name the build-transport seam and extract fork selection into a pure resolver\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): v0.29.1 — architecture-deepening rollup (#254)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-25T11:36:37Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a072a6cad93170ff4cb6a3b71442cbb56cc00d1b",
          "body": "…ion into a pure resolver (#253)\n\nThe build → submit flow forks three ways — the local Mac spine, the remote-Mac\npipeline, and the EAS handoff — and the three implementations already share the\nsignature (PreparedBuild, BuildRunOptions) => Promise<void>. That contract was\nimplicit, and the choice bet\n[…]\nasync function` to `export const … : BuildTransport = async`,\nwhich is runtime-identical and leaves their named imports unchanged.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(core): name the build-transport seam and extract fork select…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-25T11:25:03Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8c5ef6455de96708be4bfe3e47083a102bf1bed7",
          "body": "…s (#252)\n\n* refactor(apple): deepen ascClient behind typed JSON:API engine helpers\n\nThe App Store Connect client already had its HTTP/auth/retry/pagination behind\n`request`/`requestAll`, but every method still hand-rolled the JSON:API envelope\nand the \"404 means absent\" idiom. Consolidate that repe\n[…]\nus. Addresses CodeAnt's test-latency nit on #252.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(apple): deepen ascClient behind typed JSON:API engine helper…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-25T11:07:37Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0f21a5ebb8d98328749341c2f96a3de389c60e19",
          "body": "…the CLI seam into core (#250)\n\nThe `src/cli` layer owns thin commander wiring; the domain lives in `src/core`\n(AGENTS.md). Two pieces of real domain logic had leaked into command files —\nmove them behind core seams, behavior-preserving:\n\n- `core/releaseInputs.ts` (new) — the four pure release-input\n[…]\nline creds.ts account-orchestration is left for a follow-up\nissue; it's I/O- and prompt-heavy and wants its own tested extraction.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(cli): move release-input + train-engine domain logic out of …",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-25T10:11:29Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e3335ad97ae1b1890ab9bec470f81517aa20fb30",
          "body": "…ules behind barrels (#248)\n\nSplits the two longest single-file slabs in `src/core` into co-located modules behind a re-export barrel, so `import … from \"../core/types.js\"` and `\"./commandDocs.js\"` stay unchanged for every caller.\n\n- **types.ts** (1695 lines) → `types/` barrel (`export type *`): 9 c\n[…]\ncal). Addressed cubic's review (moved `{@link import()}` paths, credentials-header secret-accuracy, `spliceRegion` end-fence hardening).\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)",
          "is_bot": false,
          "headline": "refactor(core): split types.ts and commandDocs.ts into co-located mod…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-25T09:23:12Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ed9e67ff780a25a2dff98c08ed9279def5d753fa",
          "body": "…sync vocabulary (#247)\n\nThe per-feature App Store Connect / Play reconcilers had each grown their own\nverbatim copies of the same scaffolding helpers — `plan`, `skip`, the\n`ReconcileContext` interface, the \"no app record\" error, and the\n`error instanceof Error ? … : String(error)` narrowing — one s\n[…]\nrMessage.test.ts`; `storeSync.test.ts` extended for `plan`,\n`appRecordMissing`, `appRecordNotFound`, and the non-Error `act` path.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(core): consolidate reconciler scaffolding into shared store-…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-24T00:22:08Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5655fef30ae26c9aed3d99266f69e96010fef42d",
          "body": "Cuts v0.29.0 (notify transitions #239, play-reports vitals #240, play-pricing localize #242, Play catalog restore #244, ai screenshots #243, glossary catch-up #245) and renders the README FAQ as per-question collapsible <details> (English README only; llms.txt stays flat).",
          "is_bot": false,
          "headline": "chore(release): v0.29.0 + collapsible README FAQ (#246)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-22T23:14:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d0063e29e206bd11385e5b4bdf15ee7aeadf2c31",
          "body": "…launch ai screenshots` (#243)\n\n* feat(screenshots): canonical store dimension specs + hard-gate, and `launch ai screenshots`\n\nLaunch held no screenshot dimension truth — `KNOWN_DISPLAY_TYPES` is labels-only\nand the ascClient width/height is read back off already-uploaded shots. This adds\nthe canoni\n[…]\n- Re-sync the README live-stats test-count badge.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(screenshots): canonical store dimension specs + hard-gate, and `…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-22T17:45:48Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b3e7e3d1d1a1df250977f171cb01ab65e47724e6",
          "body": "…ncepts (#245)\n\nThe ubiquitous language froze around v0.13–v0.20; every store surface\nshipped since (App Clips, Game Center, in-app events, custom product\npages, PPO experiments, Wallet/Apple Pay ids, privacy/data-safety,\naccessibility labels, EU/DMA distribution, app availability, store\nreviews & r\n[…]\nling\n(dashboard, mcp, ci, agents, artifactDir, diagnose, secret) is\ndeliberately excluded. Docs-only: no runtime behavior changes.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(glossary): catch up language.md + glossary on 20 store-domain co…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-22T17:40:59Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3423ab8c7f91dab82a65049a7a0e71f511acc716",
          "body": "`launch snapshot restore` now pushes a saved Play catalog back to live,\nnot just the App Store listing. Both Play sources gain a `restore` pass\nthat inverts their capture and reconciles additively via the same\n`reconcilePlayProducts` / `reconcilePlaySubscriptions` `launch sync` uses\n— create-or-patc\n[…]\nchase's current price/territory, so its capture can't be\nmade config-complete. Covered by new restore test suites with Play fakes.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(snapshot): config-complete Play catalog restore (#236) (#244)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-22T17:39:34Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ee4688bb0250521c1cf7ea257634d176af97e873",
          "body": "…ices (#241) (#242)\n\nGiven one base price, call the Play Developer API's\n`monetization.convertRegionPrices` and print Google's recommended local\nprice for every Play market (plus the USD/EUR fallback for markets with no\nlocal currency). `--json` for scripting.\n\nAdvisory and read-only: it computes a \n[…]\ny),\n  region→price table render, --json.\n- Tests for price parsing/formatting + client fetch sequence/normalization.\n\nCloses #241.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): `launch play-pricing localize` — recommended per-region pr…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-22T16:39:22Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0c7eb7cec25b13051fcfbe2271cc0d0040e96dbc",
          "body": "…a the Play Developer Reporting API (#226) (#240)\n\n* feat(cli): `launch play-reports vitals` — Android crash/ANR vitals via the Play Developer Reporting API (#226)\n\nAdd `launch play-reports vitals` reading Android quality vitals (crash rate,\nANR rate) from the Play Developer Reporting API — the Andr\n[…]\ne exception. Pure relocation; no\nbehavior change.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): `launch play-reports vitals` — Android crash/ANR vitals vi…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-22T12:00:16Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "678a8d7e72efdae37c422f9d68238aeb4a2a3d6e",
          "body": "…nsitions (#225) (#239)\n\n* feat(notify): fire notifications on review-state & phased-rollout transitions (#225)\n\nExtend the notification hook beyond build/submit completion to the milestones a\ndev actually waits on — Apple's review verdict and a phased rollout's day-N\nadvance — so they can walk away\n[…]\nn)` instead, and cover it with a regression test.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(notify): fire notifications on review-state & phased-rollout tra…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-21T10:58:51Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b3a6b0b037f04f9dec5a6da68097ce941bfd32a1",
          "body": "Rollup release covering the feature surface landed since v0.27.0:\nsnapshot restore + App ID capabilities capture & housekeeping (#191),\nplan/drift offers & screenshots surface planners (#140), shell completions\n(#232), testflight feedback (#234), and the maximalist agent skills +\ncollapsible README features (#237).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): v0.28.0 (#238)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-21T10:18:41Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b5b232c1a20f3a8b11928dd960d1dc3acf5d72a6",
          "body": "…ible README features (#237)\n\nSeven new consumer skills cover the command surface shipped since the\noriginal six (verify, plan, snapshot, migrate, insights, ai-listing,\nagent-access), each with CLI-validated steps; plus base-context guardrail\nupdates, a release-train step on launch-release, and plan\n[…]\n Features` now renders each group as a default-collapsed\n`<details>` (English README only; `llms.txt` stays a flat numbered list).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(agents): maximalist skills for the new feature surface + collaps…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-21T10:14:14Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0edbe8d4e73d289b6be3abd2acd803b920dd17c2",
          "body": "… & screenshot feedback (#234)\n\n* feat(testflight): `launch testflight feedback` — surface tester crash & screenshot feedback (#224)\n\nAdd `launch testflight feedback [--build <ver>] [--type crash|screenshot] [--out <dir>] [--json] [-a <app>]`\nto list TestFlight beta feedback — crash and screenshot s\n[…]\nr-strip ids produce distinct,\nin-directory files.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(testflight): `launch testflight feedback` — surface tester crash…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-21T10:06:32Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e33efcf16acbad8d109a379791fd73bdde36044b",
          "body": "…#191) (#235)\n\nThree deliverables on the snapshot layer:\n\n- restore: `launch snapshot restore <name>` pushes a saved capture back to\n  live, gated behind --yes (dry-run plan by default). Wired as an optional\n  per-source capability — App Store listing (config-complete capture)\n  implements it via th\n[…]\ne needs their capture enriched first. Restore is wired as\nan optional per-source capability so they gain it without an API change.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(snapshot): restore, App ID capabilities capture & housekeeping (…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-21T09:51:54Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6f748ff5b0cb43ad3b9480667f9252c84219a18c",
          "body": "…ldable plan/drift surfaces (#140) (#233)\n\nWire the last two diffable App Store surfaces into `launch plan` / `launch drift`:\n\n- **offers** — wraps `reconcileOffers` in dry-run over the typed `products[bundleId]`\n  catalog. Additive (Apple offer terms are immutable, so the reconciler only creates).\n\n[…]\ne config and no reconciler, so it\nhas no diff substrate. Making in-app events plannable would mean a new events config section\nplus a reconciler — a separate feature, worth its own issue.\n\nCloses #140",
          "is_bot": false,
          "headline": "feat(plan): offers & screenshots surface planners — completes the bui…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-21T08:59:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c694658e75eadb17929e957fca786d36da7a1f52",
          "body": "…th dynamic completion (#232)\n\n* feat(cli): `launch completion` — shell completions (bash/zsh/fish) with dynamic completion\n\nAdd `launch completion <bash|zsh|fish>` (prints the script), `launch completion\ninstall` (idempotently wires it into the shell rc via a fenced managed block,\nor prints the man\n[…]\n) —\nonly the shared Shell enum lives in types.ts.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): `launch completion` — shell completions (bash/zsh/fish) wi…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-21T08:51:36Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "be7a07ecdafb3ea433d051a45f761923c7cc924f",
          "body": "…account, profile entitlements, screenshots (#188) (#231)\n\nAdd the remaining submit-blocking readiness probes behind `launch audit`,\neach a read-only check that grades live App Store Connect state against a\nsubmission prerequisite and degrades to a warn (never a false blocker) when\nthe app record or\n[…]\nr `submit` (and their domain tag), so `launch audit` picks\nthem up via the existing category selector with no orchestrator change.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(audit): deferred pre-submit probes — account-deletion URL, demo …",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-20T18:50:53Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "55e657be8618a4321e7fca083c8d7fe241f78e07",
          "body": "…ofiles; guide the App Group portal step (#221) (#229)\n\nApps with embedded extensions (WidgetKit, share, notification-service\ntargets) need their own App ID + App Store profile per target, all signed\nby the team's single distribution certificate. Without per-target profiles\nxcodebuild falls back to \n[…]\n5), since the JWT\n  API can't create or assign group containers\n- setup ios report: declared-extension provisioning status section\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(creds/build): provision app-extension bundle IDs + per-target pr…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-20T13:27:51Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "187cfe4608bac0c5273c01f6878b201402d895f0",
          "body": "…ole / TestFlight / live listing (#230)\n\n* feat(cli): `launch open [target]` — deep-link to App Store Connect / Play Console / TestFlight / live listing (#223)\n\nAdd `launch open [target]` to jump from a read-only finding to the irreducible\nUI step that fixes it. Targets: asc | play | testflight | li\n[…]\nemoved as the CLI no longer holds testable logic.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): `launch open` — deep-link to App Store Connect / Play Cons…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-20T13:17:31Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "15167a65a7c45545bf8ed96007647f9288683140",
          "body": "…migrate, mcp, insights, ai listing, privacy, dashboard, artifactDir (#220)\n\nBundles all 25 commits since v0.26.1 into one minor release. New surfaces:\nlaunch store doctor / audit / iap doctor, launch snapshot, launch migrate\neas|fastlane, launch config schema|validate|docs, launch mcp (read + write\n[…]\n insights, launch ai listing, launch privacy scan,\nlaunch dashboard, and the configurable in-repo `artifactDir` (auto-gitignored).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): v0.27.0 — store doctor, audit, iap doctor, snapshot, …",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-18T17:06:35Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ebaa878ac0c72b231c99e3a9c81102f680472a4d",
          "body": "…output + auto-gitignore (#219)\n\nLet users choose where the `local` storage provider writes build binaries\ninstead of always burying them in the global `~/.launch/artifacts`. `launch\ninit` and the no-args wizard now scaffold an in-repo `./.launch/artifacts` and\nauto-add it to `.gitignore`, so artifa\n[…]\n and a real-git\ngitignore suite (in-repo add, idempotency, broader-pattern respect, out-of-repo\nand non-repo no-ops).\n\nCloses #218\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(config): `artifactDir` — configurable, in-repo-by-default build …",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-18T16:33:53Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "56e17e7b9cff7d31e35bd72e3b0cf2a2dce5c5f8",
          "body": "…er CLI state (#217)\n\nA tiny `node:http` server (no new dependency) serves one self-contained HTML\npage summarising everything readable from `launch.config.ts` + `~/.launch`:\ndiscovered apps, profiles, the provider wiring, Apple accounts, recent build\nartifacts, build-secret coordinates (names only \n[…]\ns first cut — they need ASC auth and belong on the confirmed\n`plan`/`reports` read path, not an always-on local page.\n\nCloses #177\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): `launch dashboard` — a strictly-local, read-only web UI ov…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-18T16:30:08Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e708a167cb3eb49e21a263cb9c5b4c06f16e8411",
          "body": "…eclarations (#175) (#214)\n\nAdd `launch privacy scan`: a read-only sweep that reconciles an app's actual\npermission/data surface against its declared iOS privacy manifest, catching the\nopaque, common rejection causes before App Review does.\n\nIt can't diff against the *published* App Privacy label or\n[…]\non`\nfor CI/agents. Tests cover the parsers, every reconcile rule, the exit codes, and\nthe renderer. Docs regenerated.\n\nCloses #175\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): `launch privacy scan` — reconcile permissions vs privacy d…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-18T16:26:43Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8b8fc4445f9085dc5508a8bc81aff3bae00311e4",
          "body": "…o store.config.json (#179) (#212)\n\nAdd `launch ai listing`: draft App Store / Play listing copy with a model and\nwrite it into the app's versioned `store.config.json`. It never touches a store —\nthe draft lands in the same file `launch metadata` reads, so the user reviews the\ndiff with `launch plan\n[…]\nidLocale, renderDraftPreview,\nbuildListingPrompt, parseDraftListing, and the no-API-key error path. Docs regenerated.\n\nCloses #179\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(cli): `launch ai listing` — AI-drafted App Store / Play copy int…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-18T16:23:14Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e43228e57207ca3198551a8a6448520d40982cb1",
          "body": "…(#178) (#210)\n\nThe synthesis layer (Axis 4 of the differentiation roadmap) over the review\ndata Launch already pulls via `reviews` / `play-reviews` — no new data source.\n`launch insights` resolves the read-only ASC + Play clients once, pulls each\napp's reviews, normalizes them to a store-agnostic `\n[…]\n warning).\n\nAll numeric work + the renderer live in the pure `core/insights` aggregator,\nunit-tested without a network or account.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(insights): `launch insights` — aggregate rating & review trends …",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-18T16:19:11Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b90cccab03033727a9f869e534ee41656b42bdd6",
          "body": "… offer codes (#189) (#216)\n\nAdds the three App Store Connect API-backed iap-doctor readiness probes that\nPR #213 (file-based code-reference + StoreKit config) does not cover:\n\n- apple-sandbox-testers (iap): warns when an account selling IAP has no sandbox\n  tester to test-buy the StoreKit flow befo\n[…]\ned iapReadiness scoping helpers. New probes auto-appear under\n`launch iap doctor` / `launch audit` through the readiness registry.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(iap-doctor): ASC-API deferred probes — sandbox testers, pricing,…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-18T01:04:08Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "4825798e0108a2cc7304ee20051b28656a2867ea",
          "body": "Turn more of a fastlane setup into real Launch config instead of manual\nnotes, extending the existing tolerant line-scan parser (no new files):\n\n- Metadata import — read the `fastlane/metadata` (deliver) and\n  `fastlane/metadata/android` (supply) folders into `store.config.json`,\n  reusing storeConf\n[…]\nne formatter.\n\nStill deferred (noted in #195): Gymfile/Scanfile hints and multi-platform\n`for_platform`/`for_lane` Appfile blocks.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(migrate): deepen `launch migrate fastlane` coverage (#195) (#209)",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-18T00:59:26Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a9935440ef00d899427357d56a73a266f5b96317",
          "body": "…nv, app facts (#193) (#211)\n\n`launch migrate eas` now carries over three pieces of an EAS setup it previously\ndropped, each as a non-secret report note or artifact:\n\n- **credentials.json** — when `credentialsSource: \"local\"`, surface the iOS cert /\n  provisioning-profile paths and the Android keyst\n[…]\nrationResult | Promise<MigrationResult>` and awaits the result —\n`migrateFastlane` stays sync and remains assignable.\n\nCloses #193\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(migrate): deepen `migrate eas` — credentials.json, per-profile e…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-18T00:14:40Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2cb5eb2956acf00eb358cf5b1d2b6d00d22c19d6",
          "body": "… (#191) (#215)\n\nRicher snapshot coverage and a reversible-by-default `launch sync`:\n\n- New `apple-listing` snapshot source captures per-locale App Store listing\n  copy (app-level name/subtitle/privacy URL merged with version-level\n  description/keywords/whatsNew/…), keyed by locale. Read-only — reu\n[…]\n never touching a user's manually-named snapshots.\n\nDestructive `snapshot restore` stays deferred (issue remains open). Refs #191.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(snapshot): App Store listing surface + auto-snapshot before sync…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-18T00:11:01Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9e0704d0d7f6b85031ff286838bca117a3349afe",
          "body": "…eference + StoreKit config (#189) (#213)\n\nTwo new `iap`-tagged readiness probes, both purely local (no credentials, never\nskip) and advisory (`warn`, not a submission blocker):\n\n- **apple-iap-code-reference** — every product id declared in `launch.config.ts`\n  (one-off IAPs + every subscription acr\n[…]\n#189 probes (sandbox testers, pricing/\nterritory, offer verification) need new networked ASC readers and stay deferred.\n\nRefs #189\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(iap-doctor): add the two file-based deferred IAP probes — code-r…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-18T00:04:45Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d4455c8d459e3dd5d9d195b80fe0a694d70473b5",
          "body": "…208)\n\nAll three are pure App Store Connect request-shape fixes in apple/ascClient.ts,\nindependent of config, that break `launch sync` against a live account with IAPs:\n\n- Bug 1: drop `limit=200` from the `bundleIdCapabilities` to-many related read —\n  Apple's related endpoint rejects `limit` (400);\n[…]\ntime IAP now prices successfully (bug 3), and the re-plan no longer\nsurfaces the price action (bug 2b detects it via the v2 path).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(apple): correct 3 ASC request-shape bugs in launch sync (#204) (#…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-17T14:02:55Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5799e15a65c26992077a51555d488e27dce85d7c",
          "body": "…(#187) (#207)\n\nFollow-up to #170. Adds the deferred Apple account-onboarding probe and the\nASC reader it needs.\n\n- `apple-agreements` probe (`account` + `submit`): an unsigned or expired\n  Apple Developer Program License Agreement, Paid Applications Agreement, or\n  its banking/tax forms 403s every \n[…]\nmandatory for all new apps, and `play-app-access` + `play-first-upload`\nalready cover the real Play account blockers.\n\nCloses #187\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(store-doctor): Apple agreements / banking & tax readiness probe …",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-17T12:31:02Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "7cbededa93098e4722fde066ea4cda1857b2b7d3",
          "body": "…206)\n\nExpose `launch sync` to AI agents over MCP behind the `write` and\n`dangerous` capability tiers — the first mutating MCP tools.\n\n- Extract the headless reconcile engine into `core/syncRun.ts`\n  (`reconcileJob`/`summarize`/`summarizeRun`/`mergeOutcomes`/`runSyncBatch`),\n  shared verbatim by the\n[…]\nus registry composition and per-tier gating; the\n  choreography reuses the already-tested `reconcileApp` + `runPool`.\n\nCloses #202\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(mcp): `sync` + `sync_destructive` write-tier MCP tools (#202) (#…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-17T06:57:33Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "929fea591315ea118b0ea411e5ee271e9e08fb93",
          "body": "…ic checks (#197) (#205)\n\nAdd `core/configSemantics.ts` — a pure, dependency-free cross-field validator\n(the config twin of `configCheck.ts`) covering invariants the JSON Schema can't\nexpress: cloud storage requires `storageConfig`, `SCHEDULED` releases require a\nvalid `earliestReleaseDate`, per-loc\n[…]\nich also collapses 20 lines of conditional spreads. Expand the\nconfig docs intro to document the `$schema` autocomplete path end to end (part 3).\n\nCo-authored-by: Claude Opus 4 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(config): deepen `launch config validate` with cross-field semant…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-16T21:56:34Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "28fc532c76038556e24b21f8e5428e2b7f4e0d24",
          "body": "…er (#201) (#203)\n\nAdds a write-free `build_plan` MCP tool that rehearses `launch build <platform>`:\nit resolves the engine, submitter, profile, distribution, and (on Android) track +\nrollout from config via the pipeline's own pure resolvers, touching no toolchain,\nnetwork, or stdout. Lives behind t\n[…]\n\n- server defaults to `ALL_TOOLS`; the gate filters to enabled tiers\n- tests for previewBuild + the new registries; docs regenerated\n\nCloses #201\n\nCo-authored-by: Claude Opus 4 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(mcp): build_plan dry-run tool — the first `dryRun` capability ti…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-16T21:25:03Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "717ed819c40ba23286df6fdf72d6f3473cf9946e",
          "body": "…sync language.md (#199)\n\n* docs(glossary): teach offers/plan/drift/adopt/migrate + IAP terms, resync language.md\n\nAdds six glossary topics for first-class commands and IAP concepts that\nshipped without teaching text — subscription-group, subscription-offer,\nconfig-reconcile, plan-drift, adopt, migr\n[…]\nd after merging #200,\nso docs:check passes now that the file is tracked (#198).\n\nCo-Authored-By: Claude Opus 4 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs(glossary): teach offers/plan/drift/adopt/migrate + IAP terms, re…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-16T21:20:04Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f8bafad4bbce6a69cce0f5daf959cd64f07c5ad4",
          "body": "…resh checkout (#198)\n\nPR #196 added docs/config.md to the gen-docs output and the docs:check gate\nbut left it under the docs/* gitignore rule, so CI's clean checkout had no\nfile for `docs:check` to diff and threw ENOENT. Un-ignore and commit it,\nmirroring the existing docs/commands.md exception.\n\nCo-authored-by: Claude Opus 4 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(docs): track generated docs/config.md so docs:check passes on a f…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-16T21:13:29Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "019f704b90deab1595463f71c494d511d9c483b0",
          "body": "…s over MCP (#176) (#200)\n\nServe Launch as an MCP (Model Context Protocol) server over stdio so a coding\nagent can call its read-only introspection in-process: plan, drift, audit,\nstore/iap doctors, config validate/schema/docs, snapshot list/diff/export, and\nthe local doctor. Each tool calls the sam\n[…]\nrReport\n  with a shared buildDoctorContext, so the CLI and the `doctor` tool share one\n  inspection (the --fix network reconcile stays CLI-only).\n\nCo-authored-by: Claude Opus 4 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(mcp): `launch mcp` — expose Launch's read-only tools to AI agent…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-16T19:02:08Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6f793dd5773a84c4ffb64244fa8aab0d94dca73b",
          "body": "…+ typed reference from the config types (#173) (#196)\n\nAdds a `config` command group that lets humans and AI agents edit `launch.config.ts`\nsafely with editor autocomplete + validation, generated from the config types so the\ntypes stay the single source of truth.\n\n- `config schema [--out]` — emit t\n[…]\nkeys. The\n`<file>.json` path validates verbatim (full shape, incl. unknown-key detection) — the\nAI/programmatic case.\n\nCloses #173\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(config): `launch config schema`/`validate`/`docs` — JSON Schema …",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-16T12:56:14Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "122f30d7a45e3e1a88d9bfd2760c7a744755ab68",
          "body": "…to a Launch config (#172) (#194)\n\nAdd the fastlane sibling of `launch migrate eas`: read an existing fastlane\nsetup (Appfile / Fastfile / Matchfile / Supplyfile / Deliverfile) off disk and\nemit the equivalent Launch artifacts plus a report of what carries over and what\nneeds a human.\n\n- `core/migra\n[…]\nor, options)` helper.\n- Tests for the parsers, `migrateFastlane`, the shared scaffold, and the command\n  wiring; docs regenerated.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(migrate): `launch migrate fastlane` — import a fastlane setup in…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-16T12:17:13Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e5011f8540f59333d6d0a898f69c49540cdb43ce",
          "body": "…onfig (#171) (#192)\n\nRead an existing Expo/EAS project's eas.json (plus the app facts Launch\nalready discovers from app.json) and emit the equivalent launch.config.ts,\n.env.example, store.config.json, and a migration-report.md of what mapped and\nwhat needs manual follow-up. File-based and read-only\n[…]\nal mapped profiles (init/adopt callers unchanged).\n- Never overwrites without --force; --dry-run previews; --out redirects output.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(migrate): `launch migrate eas` — import eas.json into a Launch c…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-16T11:55:16Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "15d7fde500007ce4103b5b716491c5b8a3046c89",
          "body": "…e (#169) (#190)\n\nAdd `launch snapshot` — a read-only, point-in-time capture of live App Store\nConnect + Google Play catalog state, saved as a named record under\n~/.launch/snapshots. It is the trustworthy \"before\" that makes destructive\nstore automation (`launch sync` / `apply`) reversible.\n\nArchite\n[…]\ninst] (default: live),\nexport <name>. Read-only end to end. Partial restore and\nauto-snapshot-before-sync are deferred follow-ups.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(snapshot): launch snapshot — capture/diff/export live store stat…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-16T11:31:31Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2e3ef8ff8d448608ced4f24bfc11810770450ded",
          "body": "…174) (#186)\n\nAdd `launch iap doctor`, the third command in the trust-layer family, as a thin\nselector over the readiness registry. IAP is the most error-prone surface to\nship: a green build says nothing about whether a purchase actually works, because\na product can be undeclared, missing metadata, \n[…]\nlability depth, offer verification.\n\nExit codes mirror plan/status (0 ready · 2 blockers · 1 unreadable, error wins).\n\nCloses #174\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(iap): launch iap doctor — read-only in-app-purchase readiness (#…",
          "author_name": "YosefHayim",
          "author_login": "YosefHayim",
          "committed_at": "2026-06-16T10:44:59Z",
          "body_truncated": true,
          "is_coding_agent": true
        }
      ],
      "releases_count": 37,
      "commits_last_year": 311,
      "latest_release_at": "2026-07-19T12:31:34Z",
      "latest_release_tag": "v0.32.8",
      "releases_from_tags": false,
      "days_since_last_push": 5,
      "active_weeks_last_year": 6,
      "days_since_latest_release": 5,
      "mean_days_between_releases": 2.4
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 57,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "launch-store",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "cli",
            "mobile",
            "ios",
            "android",
            "app-store",
            "testflight",
            "play-store",
            "fastlane",
            "react-native",
            "expo",
            "eas",
            "code-signing",
            "app-store-connect",
            "ci-cd",
            "eas-alternative",
            "expo-eas",
            "ota-updates",
            "self-hosted"
          ],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/launch-store",
          "is_deprecated": false,
          "latest_version": "0.32.8",
          "repository_url": "https://github.com/YosefHayim/launch-store",
          "versions_count": 36,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 2629,
          "first_published_at": "2026-06-13T19:26:12.374000Z",
          "latest_published_at": "2026-07-19T12:32:52.779000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 5
        }
      ]
    },
    "popularity": {
      "forks": 1,
      "stars": 3,
      "watchers": 0,
      "fork_history": {
        "days": [
          {
            "date": "2026-07-10",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 1,
        "total_forks": 1
      },
      "star_history": null,
      "open_issues_and_prs": 1
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": true,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "examples/hello-world/tsconfig.json",
        "tsconfig.json"
      ],
      "toolchain_manifests": [],
      "largest_source_bytes": 5069338,
      "source_files_sampled": 525,
      "oversized_source_files": 4,
      "agent_instruction_files": [
        ".cursor/rules/core-types.mdc",
        ".cursor/rules/exec-secrets.mdc",
        ".cursor/rules/launch.mdc",
        ".cursor/rules/providers.mdc",
        "AGENTS.md",
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 7397
    },
    "dependencies": {
      "manifests": [
        "package.json"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [
          {
            "name": "@hono/node-server",
            "direct": false,
            "version": "1.19.15",
            "severity": "moderate",
            "ecosystem": "npm",
            "cvss_score": 5.9,
            "advisory_ids": [
              "GHSA-frvp-7c67-39w9"
            ],
            "fixed_version": "2.0.5",
            "advisory_count": 1,
            "oldest_advisory_days": 3
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "moderate": 1
        },
        "advisory_count": 1,
        "affected_count": 1,
        "assessed_count": 165,
        "malicious_count": 0,
        "assessed_package": "npm:launch-store@0.32.8",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm"
      ],
      "dependencies": [
        {
          "name": "@clack/prompts",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.5.1"
        },
        {
          "name": "@effect/platform",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^0.96.2"
        },
        {
          "name": "chalk",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^5.6.2"
        },
        {
          "name": "commander",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^12.1.0"
        },
        {
          "name": "effect",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^3.21.4"
        },
        {
          "name": "jiti",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^2.4.0"
        },
        {
          "name": "jose",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^5.9.6"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "@clack/prompts",
            "direct": true,
            "version": "1.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "@effect/platform",
            "direct": true,
            "version": "0.96.2",
            "ecosystem": "npm"
          },
          {
            "name": "chalk",
            "direct": true,
            "version": "5.6.2",
            "ecosystem": "npm"
          },
          {
            "name": "commander",
            "direct": true,
            "version": "12.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "commander",
            "direct": true,
            "version": "13.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "effect",
            "direct": true,
            "version": "3.21.4",
            "ecosystem": "npm"
          },
          {
            "name": "jiti",
            "direct": true,
            "version": "2.7.0",
            "ecosystem": "npm"
          },
          {
            "name": "jose",
            "direct": true,
            "version": "5.10.0",
            "ecosystem": "npm"
          },
          {
            "name": "jose",
            "direct": true,
            "version": "6.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-crypto/crc32",
            "direct": false,
            "version": "5.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-crypto/crc32c",
            "direct": false,
            "version": "5.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-crypto/sha1-browser",
            "direct": false,
            "version": "5.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-crypto/sha256-browser",
            "direct": false,
            "version": "5.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-crypto/sha256-js",
            "direct": false,
            "version": "5.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-crypto/supports-web-crypto",
            "direct": false,
            "version": "5.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-crypto/util",
            "direct": false,
            "version": "5.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/checksums",
            "direct": false,
            "version": "3.1000.5",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/client-cognito-identity",
            "direct": false,
            "version": "3.1068.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/client-ec2",
            "direct": false,
            "version": "3.1068.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/client-s3",
            "direct": false,
            "version": "3.1068.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/core",
            "direct": false,
            "version": "3.974.20",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-cognito-identity",
            "direct": false,
            "version": "3.972.45",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-env",
            "direct": false,
            "version": "3.972.46",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-http",
            "direct": false,
            "version": "3.972.48",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-ini",
            "direct": false,
            "version": "3.972.53",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-login",
            "direct": false,
            "version": "3.972.52",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-node",
            "direct": false,
            "version": "3.972.55",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-process",
            "direct": false,
            "version": "3.972.46",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-sso",
            "direct": false,
            "version": "3.972.52",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-provider-web-identity",
            "direct": false,
            "version": "3.972.52",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/credential-providers",
            "direct": false,
            "version": "3.1068.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/middleware-flexible-checksums",
            "direct": false,
            "version": "3.974.30",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/middleware-sdk-ec2",
            "direct": false,
            "version": "3.972.34",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/middleware-sdk-s3",
            "direct": false,
            "version": "3.972.51",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/nested-clients",
            "direct": false,
            "version": "3.997.20",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/signature-v4-multi-region",
            "direct": false,
            "version": "3.996.34",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/token-providers",
            "direct": false,
            "version": "3.1066.0",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/types",
            "direct": false,
            "version": "3.973.12",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/util-locate-window",
            "direct": false,
            "version": "3.965.7",
            "ecosystem": "npm"
          },
          {
            "name": "@aws-sdk/xml-builder",
            "direct": false,
            "version": "3.972.29",
            "ecosystem": "npm"
          },
          {
            "name": "@aws/lambda-invoke-store",
            "direct": false,
            "version": "0.2.4",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/code-frame",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/core",
            "direct": false,
            "version": "^7.25.0",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/helper-string-parser",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/helper-validator-identifier",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/parser",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@babel/types",
            "direct": false,
            "version": "7.29.7",
            "ecosystem": "npm"
          },
          {
            "name": "@bcoe/v8-coverage",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/biome",
            "direct": false,
            "version": "2.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/cli-darwin-arm64",
            "direct": false,
            "version": "2.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/cli-darwin-x64",
            "direct": false,
            "version": "2.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/cli-linux-arm64",
            "direct": false,
            "version": "2.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/cli-linux-arm64-musl",
            "direct": false,
            "version": "2.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/cli-linux-x64",
            "direct": false,
            "version": "2.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/cli-linux-x64-musl",
            "direct": false,
            "version": "2.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/cli-win32-arm64",
            "direct": false,
            "version": "2.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "@biomejs/cli-win32-x64",
            "direct": false,
            "version": "2.5.1",
            "ecosystem": "npm"
          },
          {
            "name": "@clack/core",
            "direct": false,
            "version": "1.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "@emnapi/core",
            "direct": false,
            "version": "1.10.0",
            "ecosystem": "npm"
          },
          {
            "name": "@emnapi/runtime",
            "direct": false,
            "version": "1.10.0",
            "ecosystem": "npm"
          },
          {
            "name": "@emnapi/wasi-threads",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/aix-ppc64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-arm",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/darwin-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/darwin-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/freebsd-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/freebsd-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-arm",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-ia32",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-loong64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-mips64el",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-ppc64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-riscv64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-s390x",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/netbsd-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/netbsd-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openbsd-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openbsd-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openharmony-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/sunos-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-arm64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-ia32",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-x64",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "@hono/node-server",
            "direct": false,
            "version": "1.19.14",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/resolve-uri",
            "direct": false,
            "version": "3.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/sourcemap-codec",
            "direct": false,
            "version": "1.5.5",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/trace-mapping",
            "direct": false,
            "version": "0.3.31",
            "ecosystem": "npm"
          },
          {
            "name": "@modelcontextprotocol/sdk",
            "direct": false,
            "version": "1.29.0",
            "ecosystem": "npm"
          },
          {
            "name": "@msgpackr-extract/msgpackr-extract-darwin-arm64",
            "direct": false,
            "version": "3.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "@msgpackr-extract/msgpackr-extract-darwin-x64",
            "direct": false,
            "version": "3.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "@msgpackr-extract/msgpackr-extract-linux-arm",
            "direct": false,
            "version": "3.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "@msgpackr-extract/msgpackr-extract-linux-arm64",
            "direct": false,
            "version": "3.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "@msgpackr-extract/msgpackr-extract-linux-x64",
            "direct": false,
            "version": "3.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "@msgpackr-extract/msgpackr-extract-win32-x64",
            "direct": false,
            "version": "3.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/keyring",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/keyring-darwin-arm64",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/keyring-darwin-x64",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/keyring-freebsd-x64",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/keyring-linux-arm-gnueabihf",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/keyring-linux-arm64-gnu",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/keyring-linux-arm64-musl",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/keyring-linux-riscv64-gnu",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/keyring-linux-x64-gnu",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/keyring-linux-x64-musl",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/keyring-win32-arm64-msvc",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/keyring-win32-ia32-msvc",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/keyring-win32-x64-msvc",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@napi-rs/wasm-runtime",
            "direct": false,
            "version": "1.1.6",
            "ecosystem": "npm"
          },
          {
            "name": "@nodable/entities",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@oxc-project/types",
            "direct": false,
            "version": "0.133.0",
            "ecosystem": "npm"
          },
          {
            "name": "@redocly/ajv",
            "direct": false,
            "version": "8.11.2",
            "ecosystem": "npm"
          },
          {
            "name": "@redocly/config",
            "direct": false,
            "version": "0.22.0",
            "ecosystem": "npm"
          },
          {
            "name": "@redocly/openapi-core",
            "direct": false,
            "version": "1.34.17",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-android-arm64",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-darwin-arm64",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-darwin-x64",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-freebsd-x64",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-arm-gnueabihf",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-arm64-gnu",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-arm64-musl",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-ppc64-gnu",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-s390x-gnu",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-x64-gnu",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-linux-x64-musl",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-openharmony-arm64",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-wasm32-wasi",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-win32-arm64-msvc",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/binding-win32-x64-msvc",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "@rolldown/pluginutils",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/core",
            "direct": false,
            "version": "3.24.7",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/credential-provider-imds",
            "direct": false,
            "version": "4.3.9",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/fetch-http-handler",
            "direct": false,
            "version": "5.4.7",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/is-array-buffer",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/node-http-handler",
            "direct": false,
            "version": "4.7.8",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/signature-v4",
            "direct": false,
            "version": "5.4.7",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/types",
            "direct": false,
            "version": "4.14.4",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/util-buffer-from",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "@smithy/util-utf8",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@standard-schema/spec",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "@tybys/wasm-util",
            "direct": false,
            "version": "0.10.3",
            "ecosystem": "npm"
          },
          {
            "name": "@types/chai",
            "direct": false,
            "version": "5.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "@types/deep-eql",
            "direct": false,
            "version": "4.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@types/estree",
            "direct": false,
            "version": "1.0.9",
            "ecosystem": "npm"
          },
          {
            "name": "@types/node",
            "direct": false,
            "version": "20.19.43",
            "ecosystem": "npm"
          },
          {
            "name": "@types/react",
            "direct": false,
            "version": "~18.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/coverage-v8",
            "direct": false,
            "version": "4.1.8",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/expect",
            "direct": false,
            "version": "4.1.8",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/mocker",
            "direct": false,
            "version": "4.1.8",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/pretty-format",
            "direct": false,
            "version": "4.1.8",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/runner",
            "direct": false,
            "version": "4.1.8",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/snapshot",
            "direct": false,
            "version": "4.1.8",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/spy",
            "direct": false,
            "version": "4.1.8",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/utils",
            "direct": false,
            "version": "4.1.8",
            "ecosystem": "npm"
          },
          {
            "name": "accepts",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "agent-base",
            "direct": false,
            "version": "7.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "ajv",
            "direct": false,
            "version": "8.20.0",
            "ecosystem": "npm"
          },
          {
            "name": "ajv-formats",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-colors",
            "direct": false,
            "version": "4.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-escapes",
            "direct": false,
            "version": "7.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-regex",
            "direct": false,
            "version": "6.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "ansi-styles",
            "direct": false,
            "version": "6.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "anynum",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "argparse",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "assertion-error",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "ast-v8-to-istanbul",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "balanced-match",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "body-parser",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "bowser",
            "direct": false,
            "version": "2.14.1",
            "ecosystem": "npm"
          },
          {
            "name": "brace-expansion",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "braces",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "bytes",
            "direct": false,
            "version": "3.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "call-bind-apply-helpers",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "call-bound",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "chai",
            "direct": false,
            "version": "6.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "change-case",
            "direct": false,
            "version": "5.4.4",
            "ecosystem": "npm"
          },
          {
            "name": "cli-cursor",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "cli-truncate",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "colorette",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "colorette",
            "direct": false,
            "version": "2.0.20",
            "ecosystem": "npm"
          },
          {
            "name": "content-disposition",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "content-type",
            "direct": false,
            "version": "1.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "content-type",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "convert-source-map",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "cookie",
            "direct": false,
            "version": "0.7.2",
            "ecosystem": "npm"
          },
          {
            "name": "cookie-signature",
            "direct": false,
            "version": "1.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "cors",
            "direct": false,
            "version": "2.8.6",
            "ecosystem": "npm"
          },
          {
            "name": "cross-spawn",
            "direct": false,
            "version": "7.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "debug",
            "direct": false,
            "version": "4.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "depd",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "detect-libc",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "dunder-proto",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "ee-first",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "emoji-regex",
            "direct": false,
            "version": "10.6.0",
            "ecosystem": "npm"
          },
          {
            "name": "encodeurl",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "environment",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "es-define-property",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "es-errors",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "es-module-lexer",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "es-object-atoms",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "esbuild",
            "direct": false,
            "version": "0.28.1",
            "ecosystem": "npm"
          },
          {
            "name": "escape-html",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "estree-walker",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "etag",
            "direct": false,
            "version": "1.8.1",
            "ecosystem": "npm"
          },
          {
            "name": "eventemitter3",
            "direct": false,
            "version": "5.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "eventsource",
            "direct": false,
            "version": "3.0.7",
            "ecosystem": "npm"
          },
          {
            "name": "eventsource-parser",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "execa",
            "direct": false,
            "version": "8.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "expect-type",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "expo",
            "direct": false,
            "version": "~52.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "expo-status-bar",
            "direct": false,
            "version": "~2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "express",
            "direct": false,
            "version": "5.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "express-rate-limit",
            "direct": false,
            "version": "8.5.2",
            "ecosystem": "npm"
          },
          {
            "name": "fast-check",
            "direct": false,
            "version": "3.23.2",
            "ecosystem": "npm"
          },
          {
            "name": "fast-deep-equal",
            "direct": false,
            "version": "3.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "fast-string-truncated-width",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "fast-string-width",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "fast-uri",
            "direct": false,
            "version": "3.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "fast-wrap-ansi",
            "direct": false,
            "version": "0.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "fast-xml-builder",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "fast-xml-parser",
            "direct": false,
            "version": "5.7.3",
            "ecosystem": "npm"
          },
          {
            "name": "fdir",
            "direct": false,
            "version": "6.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "fill-range",
            "direct": false,
            "version": "7.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "finalhandler",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "find-my-way-ts",
            "direct": false,
            "version": "0.1.6",
            "ecosystem": "npm"
          },
          {
            "name": "forwarded",
            "direct": false,
            "version": "0.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "fresh",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "fsevents",
            "direct": false,
            "version": "2.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "function-bind",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "get-east-asian-width",
            "direct": false,
            "version": "1.6.0",
            "ecosystem": "npm"
          },
          {
            "name": "get-intrinsic",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "get-proto",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "get-stream",
            "direct": false,
            "version": "8.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "gopd",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "has-flag",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "has-symbols",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "hasown",
            "direct": false,
            "version": "2.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "hono",
            "direct": false,
            "version": "4.12.25",
            "ecosystem": "npm"
          },
          {
            "name": "html-escaper",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "http-errors",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "https-proxy-agent",
            "direct": false,
            "version": "7.0.6",
            "ecosystem": "npm"
          },
          {
            "name": "human-signals",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "husky",
            "direct": false,
            "version": "9.1.7",
            "ecosystem": "npm"
          },
          {
            "name": "iconv-lite",
            "direct": false,
            "version": "0.7.2",
            "ecosystem": "npm"
          },
          {
            "name": "index-to-position",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "inherits",
            "direct": false,
            "version": "2.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "ip-address",
            "direct": false,
            "version": "10.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "ipaddr.js",
            "direct": false,
            "version": "1.9.1",
            "ecosystem": "npm"
          },
          {
            "name": "is-fullwidth-code-point",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-fullwidth-code-point",
            "direct": false,
            "version": "5.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-number",
            "direct": false,
            "version": "7.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-promise",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "is-stream",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "isexe",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "istanbul-lib-coverage",
            "direct": false,
            "version": "3.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "istanbul-lib-report",
            "direct": false,
            "version": "3.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "istanbul-reports",
            "direct": false,
            "version": "3.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "js-levenshtein",
            "direct": false,
            "version": "1.1.6",
            "ecosystem": "npm"
          },
          {
            "name": "js-tokens",
            "direct": false,
            "version": "10.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "js-tokens",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "js-yaml",
            "direct": false,
            "version": "4.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "json-schema-traverse",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "json-schema-typed",
            "direct": false,
            "version": "8.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-android-arm64",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-darwin-arm64",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-darwin-x64",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-freebsd-x64",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-arm-gnueabihf",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-arm64-gnu",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-arm64-musl",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-x64-gnu",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-linux-x64-musl",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-win32-arm64-msvc",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lightningcss-win32-x64-msvc",
            "direct": false,
            "version": "1.32.0",
            "ecosystem": "npm"
          },
          {
            "name": "lilconfig",
            "direct": false,
            "version": "3.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "lint-staged",
            "direct": false,
            "version": "15.5.2",
            "ecosystem": "npm"
          },
          {
            "name": "listr2",
            "direct": false,
            "version": "8.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "log-update",
            "direct": false,
            "version": "6.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "magic-string",
            "direct": false,
            "version": "0.30.21",
            "ecosystem": "npm"
          },
          {
            "name": "magicast",
            "direct": false,
            "version": "0.5.3",
            "ecosystem": "npm"
          },
          {
            "name": "make-dir",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "math-intrinsics",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "media-typer",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "merge-descriptors",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "merge-stream",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "micromatch",
            "direct": false,
            "version": "4.0.8",
            "ecosystem": "npm"
          },
          {
            "name": "mime-db",
            "direct": false,
            "version": "1.54.0",
            "ecosystem": "npm"
          },
          {
            "name": "mime-types",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "mimic-fn",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "mimic-function",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "minimatch",
            "direct": false,
            "version": "5.1.9",
            "ecosystem": "npm"
          },
          {
            "name": "ms",
            "direct": false,
            "version": "2.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "msgpackr",
            "direct": false,
            "version": "1.12.1",
            "ecosystem": "npm"
          },
          {
            "name": "msgpackr-extract",
            "direct": false,
            "version": "3.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "multipasta",
            "direct": false,
            "version": "0.2.7",
            "ecosystem": "npm"
          },
          {
            "name": "nanoid",
            "direct": false,
            "version": "3.3.15",
            "ecosystem": "npm"
          },
          {
            "name": "negotiator",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "node-gyp-build-optional-packages",
            "direct": false,
            "version": "5.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "npm-run-path",
            "direct": false,
            "version": "5.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "object-assign",
            "direct": false,
            "version": "4.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "object-inspect",
            "direct": false,
            "version": "1.13.4",
            "ecosystem": "npm"
          },
          {
            "name": "obug",
            "direct": false,
            "version": "2.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "on-finished",
            "direct": false,
            "version": "2.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "once",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "onetime",
            "direct": false,
            "version": "6.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "onetime",
            "direct": false,
            "version": "7.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "openapi-typescript",
            "direct": false,
            "version": "7.13.0",
            "ecosystem": "npm"
          },
          {
            "name": "parse-json",
            "direct": false,
            "version": "8.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "parseurl",
            "direct": false,
            "version": "1.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "path-expression-matcher",
            "direct": false,
            "version": "1.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "path-key",
            "direct": false,
            "version": "3.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "path-key",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "path-to-regexp",
            "direct": false,
            "version": "8.4.2",
            "ecosystem": "npm"
          },
          {
            "name": "pathe",
            "direct": false,
            "version": "2.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "picocolors",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "picomatch",
            "direct": false,
            "version": "2.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "picomatch",
            "direct": false,
            "version": "4.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "picomatch",
            "direct": false,
            "version": "4.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "pidtree",
            "direct": false,
            "version": "0.6.1",
            "ecosystem": "npm"
          },
          {
            "name": "pkce-challenge",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "pluralize",
            "direct": false,
            "version": "8.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "postcss",
            "direct": false,
            "version": "8.5.16",
            "ecosystem": "npm"
          },
          {
            "name": "proxy-addr",
            "direct": false,
            "version": "2.0.7",
            "ecosystem": "npm"
          },
          {
            "name": "pure-rand",
            "direct": false,
            "version": "6.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "qs",
            "direct": false,
            "version": "6.15.2",
            "ecosystem": "npm"
          },
          {
            "name": "range-parser",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "raw-body",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "react",
            "direct": false,
            "version": "18.3.1",
            "ecosystem": "npm"
          },
          {
            "name": "react-native",
            "direct": false,
            "version": "0.76.5",
            "ecosystem": "npm"
          },
          {
            "name": "require-from-string",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "restore-cursor",
            "direct": false,
            "version": "5.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "rfdc",
            "direct": false,
            "version": "1.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "rolldown",
            "direct": false,
            "version": "1.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "router",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "safer-buffer",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "semver",
            "direct": false,
            "version": "7.8.4",
            "ecosystem": "npm"
          },
          {
            "name": "send",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "serve-static",
            "direct": false,
            "version": "2.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "setprototypeof",
            "direct": false,
            "version": "1.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "shebang-command",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "shebang-regex",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "side-channel",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "side-channel-list",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "side-channel-map",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "side-channel-weakmap",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "siginfo",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "signal-exit",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "sisteransi",
            "direct": false,
            "version": "1.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "slice-ansi",
            "direct": false,
            "version": "5.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "slice-ansi",
            "direct": false,
            "version": "7.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "source-map-js",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "stackback",
            "direct": false,
            "version": "0.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "statuses",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "std-env",
            "direct": false,
            "version": "4.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "string-argv",
            "direct": false,
            "version": "0.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "string-width",
            "direct": false,
            "version": "7.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "strip-ansi",
            "direct": false,
            "version": "7.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "strip-final-newline",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "strnum",
            "direct": false,
            "version": "2.4.0",
            "ecosystem": "npm"
          },
          {
            "name": "supports-color",
            "direct": false,
            "version": "10.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "supports-color",
            "direct": false,
            "version": "7.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "tinybench",
            "direct": false,
            "version": "2.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "tinyexec",
            "direct": false,
            "version": "1.2.4",
            "ecosystem": "npm"
          },
          {
            "name": "tinyglobby",
            "direct": false,
            "version": "0.2.17",
            "ecosystem": "npm"
          },
          {
            "name": "tinyrainbow",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "to-regex-range",
            "direct": false,
            "version": "5.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "toidentifier",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "tslib",
            "direct": false,
            "version": "2.8.1",
            "ecosystem": "npm"
          },
          {
            "name": "tsx",
            "direct": false,
            "version": "4.22.4",
            "ecosystem": "npm"
          },
          {
            "name": "type-fest",
            "direct": false,
            "version": "4.41.0",
            "ecosystem": "npm"
          },
          {
            "name": "type-is",
            "direct": false,
            "version": "2.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "typescript",
            "direct": false,
            "version": "5.9.3",
            "ecosystem": "npm"
          },
          {
            "name": "typescript",
            "direct": false,
            "version": "~5.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "undici-types",
            "direct": false,
            "version": "6.21.0",
            "ecosystem": "npm"
          },
          {
            "name": "unpipe",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "uri-js-replace",
            "direct": false,
            "version": "1.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "vary",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "vite",
            "direct": false,
            "version": "8.0.16",
            "ecosystem": "npm"
          },
          {
            "name": "vitest",
            "direct": false,
            "version": "4.1.8",
            "ecosystem": "npm"
          },
          {
            "name": "which",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "why-is-node-running",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "wrap-ansi",
            "direct": false,
            "version": "9.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "wrappy",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "xml-naming",
            "direct": false,
            "version": "0.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "yaml",
            "direct": false,
            "version": "2.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "yaml-ast-parser",
            "direct": false,
            "version": "0.0.43",
            "ecosystem": "npm"
          },
          {
            "name": "yargs-parser",
            "direct": false,
            "version": "21.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "zod",
            "direct": false,
            "version": "4.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "zod-to-json-schema",
            "direct": false,
            "version": "3.25.2",
            "ecosystem": "npm"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 393,
        "direct_count": 9,
        "indirect_count": 384
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 167,
        "open_issues": 1,
        "closed_ratio": 0.992,
        "closed_issues": 132,
        "closed_unmerged_prs": 3
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "YosefHayim",
          "commits": 311,
          "avatar_url": "https://avatars.githubusercontent.com/u/179159376?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "biome.yml",
        "build.yml",
        "ci.yml",
        "docs.yml",
        "e2e.yml",
        "lint.yml",
        "publish.yml",
        "report-failure.yml",
        "schema-drift.yml",
        "test.yml",
        "typecheck.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        "biome.json"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "pnpm-lock.yaml"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": null,
            "reason": "no pull request found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 0,
            "reason": "project has 0 contributing companies or organizations -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "no SAST tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 10,
            "reason": "GitHub workflow tokens follow principle of least privilege",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "10 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "a232009914c129d10ffc2e67387fc989cddf03ed",
        "ran_at": "2026-07-25T09:56:25Z",
        "aggregate_score": 3.7,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-24T08:14:23Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-07-02T17:43:38Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 303,
          "created_at": "2026-07-23T07:47:16Z",
          "last_comment_at": "2026-07-23T08:15:28Z",
          "last_comment_author": "YosefHayim"
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/YosefHayim/launch-store",
    "host": "github.com",
    "name": "launch-store",
    "owner": "YosefHayim"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 62,
      "inputs": {
        "security": 47,
        "vitality": 75,
        "community": 41,
        "governance": 54,
        "engineering": 88
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 75,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 58,
            "inputs": {
              "commits_last_year": 311,
              "human_commit_share": 1,
              "days_since_last_push": 5,
              "active_weeks_last_year": 6
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "6/52 weeks with commits",
                "points": 4.2,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 6
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "311 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 311
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "releases_count": 37,
              "latest_release_tag": "v0.32.8",
              "releases_from_tags": false,
              "days_since_latest_release": 5,
              "mean_days_between_releases": 2.4
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "37 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 37
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~2.4 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 2.4
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 41,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 5,
            "inputs": {
              "forks": 1,
              "stars": 3,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "3 stars",
                "points": 4.9,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "1 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "good",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 70,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 57,
            "inputs": {
              "packages": [
                "launch-store"
              ],
              "dependents": null,
              "ecosystems": "npm",
              "total_downloads": null,
              "monthly_downloads": 2629
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "2,629 downloads/month across npm",
                "points": 45.6,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 2629,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 54,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 10,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "merged_prs": 167,
              "open_issues": 1,
              "closed_issues": 132,
              "issue_closed_ratio": 0.992,
              "closed_unmerged_prs": 3
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "99% of issues closed",
                "points": 46.4,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 99
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "167/170 decided PRs merged",
                "points": 37.6,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 167,
                      "decided": 170
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "at_risk",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 38,
            "inputs": {
              "followers": 16,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "YosefHayim",
              "public_repos": 12,
              "account_age_days": 701
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "16 followers of YosefHayim",
                "points": 8.8,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 16,
                      "login": "YosefHayim"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "12 public repos, account ~1 yr old",
                "points": 11.9,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 12
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 1
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "launch-store"
              ],
              "ecosystems": "npm",
              "any_deprecated": false,
              "min_days_since_publish": 5
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 5 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "36 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 36
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "excellent",
        "name": "Engineering Quality",
        "value": 88,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_ci_tests"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 80,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "11 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 11
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": "biome.json",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "biome.json"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "excellent",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "topics": [
                "android",
                "app-store",
                "app-store-connect",
                "ci-cd",
                "cli",
                "code-signing",
                "eas",
                "expo",
                "fastlane",
                "ios",
                "mobile",
                "play-store",
                "react-native",
                "testflight",
                "expo-updates",
                "google-play",
                "nodejs",
                "typescript"
              ],
              "has_wiki": true,
              "homepage": "https://www.npmjs.com/package/launch-store",
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://www.npmjs.com/package/launch-store",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "18 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 18
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 47,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection, CI-Tests, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection",
                    "ci_tests",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 37,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 15,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 3,
              "scorecard_aggregate": 3.7
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "no SAST tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "GitHub workflow tokens follow principle of least privilege",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "10 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Matched the npm:launch-store@0.32.8 runtime dependency closure — what installing the published package pulls in — 165 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "npm:launch-store@0.32.8",
                  "assessed": 165
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 88,
            "inputs": {
              "source": "osv",
              "advisories": 1,
              "affected_packages": 1,
              "assessed_packages": 165,
              "unassessed_packages": 0,
              "affected_by_severity": "moderate 1",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "1 affected: @hono/node-server 1.19.15 (moderate 5.9)",
                "points": 13.2,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 1,
                      "packages": "@hono/node-server 1.19.15 (moderate 5.9)"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory has been public longer than 90 days",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "advisories_none_stale",
                    "params": {
                      "days": 90
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 165,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 2
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 77,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "has_llms_txt": true,
              "legible_history_share": 1,
              "agent_instruction_files": [
                ".cursor/rules/core-types.mdc",
                ".cursor/rules/exec-secrets.mdc",
                ".cursor/rules/launch.mdc",
                ".cursor/rules/providers.mdc",
                "AGENTS.md",
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 7397
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": ".cursor/rules/core-types.mdc, .cursor/rules/exec-secrets.mdc, .cursor/rules/launch.mdc, .cursor/rules/providers.mdc, AGENTS.md, CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".cursor/rules/core-types.mdc, .cursor/rules/exec-secrets.mdc, .cursor/rules/launch.mdc, .cursor/rules/providers.mdc, AGENTS.md, CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": "llms.txt present",
                "points": 15,
                "status": "met",
                "details": [
                  {
                    "code": "llms_txt_present",
                    "params": {}
                  }
                ],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "100 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 100,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 64,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "pnpm-lock.yaml"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [
                "examples/hello-world/tsconfig.json",
                "tsconfig.json"
              ],
              "agent_commit_share": 0.73,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": "biome.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "biome.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "examples/hello-world/tsconfig.json, tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples/hello-world/tsconfig.json, tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "73 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 73,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "TypeScript",
              "largest_source_bytes": 5069338,
              "source_files_sampled": 525,
              "oversized_source_files": 4
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "TypeScript (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "TypeScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "4/525 source files over 60KB",
                "points": 54.6,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 525,
                      "oversized": 4
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-25T09:56:31.982278Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/y/YosefHayim/launch-store.svg",
  "full_name": "YosefHayim/launch-store",
  "license_state": "standard",
  "license_spdx": "MIT"
}

Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.

Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.

How one result sits in the wider record: aggregate statisticsnpm.