Public recordModerate
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-23 13:21 UTC
abpai / harness-doctor
Framework-agnostic agent-harness doctor: deterministic checks for good agent-harness practices
abpai/harness-doctor holds a health index of 62 out of 100, placing it in the Moderate band. It scores highest on AI Readiness (81/100) and lowest on Community & Adoption (34/100). It was last updated 5 days ago. A single contributor accounts for most of its recent work.
62
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
62
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
Andy PaiPersonal account
38 followers30 public repossince Apr 2013
This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish | Tags |
|---|---|---|---|---|---|---|
| npm | @andypai/harness-doctor | 2.0.0 | 6,723 | 5 | 5 days ago | agentsagents-mdai-agentsdiagnosticsdocs-contractdocumentationharnessreadinessscannersupply-chaintypescript |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
80
Development activity
66Moderate
How it's scored
| 36/36 | Push recency — last push 5 days ago |
| 12.5/36 | Commit cadence — 18/52 weeks with commits |
| 18/18 | Commit volume — 711 commits in the last year |
| 0/10 | OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully |
Inputs used
| commits_last_year | 711 |
| human_commit_share | 0.93 |
| days_since_last_push | 5 |
| active_weeks_last_year | 18 |
Release discipline
100Excellent
How it's scored
| 27/27 | Ships releases — 4 releases published |
| 36/36 | Release recency — latest release 5 days ago |
| 27/27 | Release cadence — a release every ~12.5 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 4 |
| latest_release_tag | @andypai/harness-doctor@2.0.0 |
| releases_from_tags | no |
| days_since_latest_release | 5 |
| mean_days_between_releases | 12.5 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
34
Popularity & adoption
1Critical
How it's scored
| 0/60 | Stars — 0 stars |
| 0/25 | Forks — 0 forks |
| 0/15 | Watchers — 0 watchers |
Inputs used
| forks | 0 |
| stars | 0 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
50Moderate
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (MIT) |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Ecosystem adoption (downloads)
64Moderate
How it's scored
| 51/80 | Monthly downloads — 6,723 downloads/month across npm |
| 0/20 | Registry dependents — not reported by this ecosystem |
Inputs used
| packages | @andypai/harness-doctor |
| dependents | — |
| ecosystems | npm |
| total_downloads | — |
| monthly_downloads | 6,723 |
Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
64
Maintainer resilience (bus factor)
40At risk
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 7.2/22.5 | Commit distribution — top contributor authored 68% of commits |
| 13.5/13.5 | Contributor breadth — 13 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 8 contributing companies or organizations |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 13 |
| top_contributor_share | 0.679 |
How it's scored
| 0/46.8 | Issue resolution — no issues or no data |
| 38.2/38.3 | PR acceptance — 24/24 decided PRs merged |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/17 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 24 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 0 |
Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.
Ownership & stewardship
55Moderate
How it's scored
| 10/30 | Ownership backing — personal (user) account |
| 0/20 | Verified domain — not applicable to user accounts |
| 11.4/25 | Owner reach — 38 followers of abpai |
| 22.9/25 | Track record — 30 public repos, account ~13 yr old |
Inputs used
| followers | 38 |
| owner_type | User |
| is_verified | — |
| owner_login | abpai |
| public_repos | 30 |
| account_age_days | 4,856 |
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.
Package maintenance
100Excellent
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on npm |
| 35/35 | Publish recency — latest publish 5 days ago |
| 20/20 | Version history — 5 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | @andypai/harness-doctor |
| ecosystems | npm |
| any_deprecated | no |
| min_days_since_publish | 5 |
Engineering Quality
Are baseline engineering and documentation practices in place?
76
Engineering practices
66Moderate
How it's scored
| 24/24 | CI workflows — 5 workflow(s) |
| 24/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 18/20 | OpenSSF Scorecard: CI-Tests — 18 out of 20 merged PRs checked by a CI test -- score normalized to 9 |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Documentation
90Excellent
How it's scored
| 30/30 | README |
| 25/25 | Documentation directory |
| 15/15 | Documentation / homepage site — https://abpai.github.io/harness-doctor/ |
| 10/10 | Repository description |
| 0/10 | Topics |
| 10/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | yes |
| homepage | https://abpai.github.io/harness-doctor/ |
| has_readme | yes |
| has_docs_dir | yes |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
47
Security posture
34At risk
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 2.2/2.5 | CI-Tests — 18 out of 20 merged PRs checked by a CI test -- score normalized to 9 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/17 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 8 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 0/7.5 | Maintained — project was created within the last 90 days. Please review its contents carefully |
| 0/5 | Packaging — no data |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 6.8/7.5 | Vulnerabilities — 1 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 3.4 |
Excluded from scoring (no data or not applicable): packaging, signed_releases. Remaining weights renormalized.
Dependency advisories
100Excellent
How it's scored
| 35/35 | Direct dependencies free of known advisories — no direct dependency carries a known advisory |
| 25/25 | Indirect dependencies free of known advisories — no indirect dependency carries a known advisory |
| 0/40 | No advisories left outstanding — no advisory carries a publication date |
Inputs used
| source | osv |
| advisories | 0 |
| affected_packages | 0 |
| assessed_packages | 130 |
| unassessed_packages | 0 |
| affected_by_severity | none |
| direct_affected_packages | 0 |
Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:@andypai/harness-doctor@2.0.0 runtime dependency closure — what installing the published package pulls in — 130 packages. Reachability is not analyzed.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
81
Agent context & guidance
85Excellent
How it's scored
| 45/45 | Agent instructions — AGENTS.md, packages/core/tests/fixtures/docs-structure-clean/AGENTS.md |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 88 of 93 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.946 |
| agent_instruction_files | AGENTS.md, packages/core/tests/fixtures/docs-structure-clean/AGENTS.md |
| agent_instruction_max_bytes | 3,922 |
How it's scored
| 18/18 | One-command bootstrap — packages/core/tests/fixtures/signals-menu/basic/Makefile, packages/core/tests/fixtures/signals-menu/basic/justfile |
| 22/22 | Automated tests |
| 0/11 | Lint / format config |
| 11/11 | Static type checking — packages/api/tsconfig.json, packages/core/tests/fixtures/basic-react/tsconfig.json, packages/core/tests/fixtures/mixed-rn-web-monorepo/tsconfig.json, packages/core/tests/fixtures/nextjs-app/tsconfig.json, packages/core/tests/fixtures/tanstack-start-app/tsconfig.json, packages/core/tsconfig.json, packages/harness-doctor/tsconfig.json, tsconfig.json |
| 10/10 | Reproducible environment — lockfile |
| 10/10 | Demonstrated agent practice — 36 of the last 100 commits agent-authored or agent-credited |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | pnpm-lock.yaml, yarn.lock |
| has_dockerfile | no |
| typed_language | yes |
| bootstrap_files | packages/core/tests/fixtures/signals-menu/basic/Makefile, packages/core/tests/fixtures/signals-menu/basic/justfile |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | packages/api/tsconfig.json, packages/core/tests/fixtures/basic-react/tsconfig.json, packages/core/tests/fixtures/mixed-rn-web-monorepo/tsconfig.json, packages/core/tests/fixtures/nextjs-app/tsconfig.json, packages/core/tests/fixtures/tanstack-start-app/tsconfig.json, packages/core/tsconfig.json, packages/harness-doctor/tsconfig.json, tsconfig.json |
| agent_commit_share | 0.36 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
Code legibility for models
100Excellent
How it's scored
| 45/45 | Type-checkable code — TypeScript (statically typed) |
| 54.7/55 | Manageable file sizes — 2/361 source files over 60KB |
Inputs used
| primary_language | TypeScript |
| largest_source_bytes | 79,743 |
| source_files_sampled | 361 |
| oversized_source_files | 2 |
Key facts
0GitHub stars
13contributors
711commits, last 12 months
5days since last push
4releases
1bus factor
0open issues
npmpackage ecosystems
Data collection warnings
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
OpenSSF Scorecard 3.4 / 10
3.4aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 9 | CI-Tests | 18 out of 20 merged PRs checked by a CI test -- score normalized to 9 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/17 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 8 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 0 | Maintained | project was created within the last 90 days. Please review its contents carefully |
| n/a | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| n/a | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 9 | Vulnerabilities | 1 existing vulnerabilities detected |
Direct dependencies 22
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| npm | @harness-doctor/core | workspace:* | packages/api/package.json |
| npm | effect | 4.0.0-beta.70 | packages/api/package.json |
| npm | @effect/platform-bun | 4.0.0-beta.70 | packages/core/package.json |
| npm | confbox | ^0.2.4 | packages/core/package.json |
| npm | effect | 4.0.0-beta.70 | packages/core/package.json |
| npm | jiti | ^2.7.0 | packages/core/package.json |
| npm | knip | 6.26.0 | packages/core/package.json |
| npm | picocolors | ^1.1.1 | packages/core/package.json |
| npm | picomatch | ^4.0.4 | packages/core/package.json |
| npm | typescript | ^6.0.3 | packages/core/package.json |
| npm | @babel/code-frame | ^7.29.0 | packages/harness-doctor/package.json |
| npm | @effect/platform-bun | 4.0.0-beta.70 | packages/harness-doctor/package.json |
| npm | agent-install | 0.0.5 | packages/harness-doctor/package.json |
| npm | conf | ^15.1.0 | packages/harness-doctor/package.json |
| npm | confbox | ^0.2.4 | packages/harness-doctor/package.json |
| npm | effect | 4.0.0-beta.70 | packages/harness-doctor/package.json |
| npm | is-unicode-supported | ^2.1.0 | packages/harness-doctor/package.json |
| npm | jiti | ^2.7.0 | packages/harness-doctor/package.json |
| npm | knip | 6.26.0 | packages/harness-doctor/package.json |
| npm | magicast | ^0.5.3 | packages/harness-doctor/package.json |
| npm | prompts | ^2.4.2 | packages/harness-doctor/package.json |
| npm | typescript | >=5.0.4 <7 | packages/harness-doctor/package.json |
All dependencies not collected
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Dependency advisories 0
Installing npm:@andypai/harness-doctor@2.0.0 pulls in 130 packages, direct and transitive: 0 carry known advisories, of which 0 are direct dependencies.
No known advisories affect the assessed dependencies.
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 22636,
"has_wiki": true,
"homepage": "https://abpai.github.io/harness-doctor/",
"languages": {
"CSS": 11863,
"HTML": 13103,
"Shell": 1441,
"Python": 12297,
"JavaScript": 11462,
"TypeScript": 1299036
},
"pushed_at": "2026-07-18T04:44:03Z",
"created_at": "2026-06-03T03:50:34Z",
"owner_type": "User",
"updated_at": "2026-07-18T04:43:27Z",
"description": "Framework-agnostic agent-harness doctor: deterministic checks for good agent-harness practices",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript"
]
},
"owner": {
"blog": "https://andyp.ai",
"name": "Andy Pai",
"type": "User",
"login": "abpai",
"company": null,
"location": "Dorado, PR",
"followers": 38,
"avatar_url": "https://avatars.githubusercontent.com/u/4070686?v=4",
"created_at": "2013-04-05T16:18:46Z",
"is_verified": null,
"public_repos": 30,
"account_age_days": 4856
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "@andypai/harness-doctor@2.0.0",
"kind": "other",
"published_at": "2026-07-18T04:44:04Z"
},
{
"tag": "@andypai/harness-doctor@1.0.0",
"kind": "other",
"published_at": "2026-07-13T00:34:33Z"
},
{
"tag": "@andypai/harness-doctor@0.3.0",
"kind": "other",
"published_at": "2026-07-07T01:55:47Z"
},
{
"tag": "@andypai/harness-doctor@0.2.0",
"kind": "other",
"published_at": "2026-06-10T19:52:09Z"
}
],
"recent_commits": [
{
"oid": "683f4e96740e043358b3246dad9fa50333c0b41b",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore: version packages (#24)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-18T04:43:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c4df6a7476cd5936087437bcae574df06afb1292",
"body": "* feat: migrate dead-code checks to knip\n\n* feat: rename dead-code rules to knip",
"is_bot": false,
"headline": "feat: migrate dead-code checks to Knip (#23)",
"author_name": "Andy Pai",
"author_login": "abpai",
"committed_at": "2026-07-18T04:12:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a65d6e77ee804cda83d6d39c48e804657b51d28e",
"body": null,
"is_bot": true,
"headline": "chore: version packages",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-13T00:33:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6fcacfa9c48262b62d5991605abd769409a7a244",
"body": "* make Bun the required runtime\n\n* fix(core): resolve deslop worker specifier without import.meta.resolve\n\nUnder Bun on Windows, `import.meta.resolve(\"deslop-js\")` throws\n`ENOENT while resolving package` for dependencies in the hoisted store,\nfailing all five dead-code checks in CI (including the th\n[…]\nore\nreliably on every platform. Injected workers now skip resolution\nentirely, and the real worker still imports the ESM entry.\n\nClaude-Session: https://claude.ai/code/session_017mZ6a7nNYq177oaRQwD1Dz",
"is_bot": false,
"headline": "Make Bun the required runtime (#22)",
"author_name": "Andy Pai",
"author_login": "abpai",
"committed_at": "2026-07-10T23:09:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6d4eb028f911a73b6b84461ba4fe386bfbd36347",
"body": "Cross-validated follow-ups to #18/#19: GFM escaped-pipe cell parsing,\nabutting-table and fenced-code-block table detection, emphasis-tolerant\nheaders, monolith exemption for baseline artifacts, coverage errors\npreserved when the ledger is malformed, orphan detection for empty\ninventories, ledger tes\n[…]\nn catalog listing\nfor behavior-baseline-artifacts-exist, recipe docs for the behavior\nrules, and an accurate engines.bun floor.\n\nClaude-Session: https://claude.ai/code/session_01XWAFf7hCAgWVKXAux7XqRr",
"is_bot": false,
"headline": "Harden behavior-baseline checks and parsing (#21)",
"author_name": "Andy Pai",
"author_login": "abpai",
"committed_at": "2026-07-10T05:07:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3633d9a6f27f9577bd067ab59cc3b277e4cc7c83",
"body": null,
"is_bot": false,
"headline": "Migrate repository from pnpm to Bun (#19)",
"author_name": "Andy Pai",
"author_login": "abpai",
"committed_at": "2026-07-10T03:50:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "297e5023fb94ad90d03fdc456ce1b6c8b34c0ed7",
"body": "* Add behavior baseline artifact checks\n\n* Harden behavior baseline checks",
"is_bot": false,
"headline": "Add behavior baseline artifact checks (#18)",
"author_name": "Andy Pai",
"author_login": "abpai",
"committed_at": "2026-07-10T03:21:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "83e233831e6b56cd6583f3d9d018c6cf8fdf8775",
"body": "Release @andypai/harness-doctor 0.3.0 with grader sufficiency and Phase 4 signals/proof-menu verification changes.",
"is_bot": true,
"headline": "chore: release harness-doctor 0.3.0",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-07T01:55:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9d302930417aae6fe87912006825c74b0a9a4989",
"body": "Adds execution-free signals-menu discovery plus static SPEC_CONTRACT proof-menu verification against the constrained proof-row format. Verified by green GitHub checks and local pinned-pnpm build/typecheck/test/lint.",
"is_bot": false,
"headline": "feat(core): signals-menu discovery and proof-menu verification",
"author_name": "Andy Pai",
"author_login": "abpai",
"committed_at": "2026-07-07T01:54:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a985708a43fece642c33f8ef85c4cfdf5816475a",
"body": "* feat(core): Phase 1 — kill scanner first-run noise\n\nMake docs-structure Markdown scanning ignore the same throwaway trees the\nsource/dead-code paths already skip: it now uses a .gitignore-aware matcher,\nskips shared IGNORED_DIRECTORIES (adds .scratch, .understand), and skips nested\ngit checkouts/w\n[…]\n was reported\n missing because Dirent.isFile() is false for symlinks.\n- README config example imports from @andypai/harness-doctor/api (was the\n unscoped harness-doctor/api, which does not resolve).",
"is_bot": false,
"headline": "feat(core): Phase 1 — kill scanner first-run noise (#15)",
"author_name": "Andy Pai",
"author_login": "abpai",
"committed_at": "2026-07-06T20:39:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b91a9e768b8392a27ee30ca5c90bf81d8792defb",
"body": "Add `docs-structure/spec-contract-declares-grader-sufficiency`: under the docs\ncontract (`docsContract: true`), the SPEC_CONTRACT.md proof menu must declare a\n`Sufficiency` column (`auto` / `human-gate`) so intake can tell when a passing\nauto-grader is sufficient for \"done\" versus when a change need\n[…]\n-sufficiency glossary entry.\n\nReviewed via codex (read-only) — APPROVE after tightening detection to the\nproof-menu header row.\n\nClaude-Session: https://claude.ai/code/session_01QSvkVBNSu9gGmGiENLveHY",
"is_bot": false,
"headline": "feat(core): opt-in spec-contract-declares-grader-sufficiency check (#14)",
"author_name": "Andy Pai",
"author_login": "abpai",
"committed_at": "2026-06-26T00:45:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0c9847eb74abdad673b7282cdc7dc5d68df8cdad",
"body": "- Generate a 1200x630 Open Graph / Twitter card (site/og-image.png) that\n matches the landing page's dark, health-themed palette, and wire it up\n via og:image / twitter:image meta tags so shared links render a rich\n card instead of a bare summary.\n- Add scripts/gen-og-image.py so the card is reproducible (Pillow).\n- Add a Website link (alongside npm and Docs) to the top of the README.\n\nhttps://claude.ai/code/session_01AjqHPnnY6tPUTUrMkPkQHf\n\nCo-authored-by: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add social preview image and link the website from the README (#13)",
"author_name": "Andy Pai",
"author_login": "abpai",
"committed_at": "2026-06-10T23:51:24Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "b3f4a13ad17bf25d72f0cab87995973df26707ea",
"body": "* Add GitHub Pages landing site and deploy workflow\n\nAdd a self-contained marketing/landing page under site/ (static HTML, CSS,\nand a small copy-to-clipboard script — no build step) and a GitHub Actions\nworkflow that publishes it to GitHub Pages on pushes to main.\n\nhttps://claude.ai/code/session_01A\n[…]\nlidate the build cache when the config changes. Point the\ninput at the new filename.\n\nhttps://claude.ai/code/session_01AjqHPnnY6tPUTUrMkPkQHf\n\n---------\n\nCo-authored-by: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add GitHub Pages landing site (#11)",
"author_name": "Andy Pai",
"author_login": "abpai",
"committed_at": "2026-06-10T23:07:45Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d3860565f85815045ffe966b5526ec69f9bac532",
"body": "…#10)\n\n* ci: automate npm releases with Changesets\n\nAdds a Release workflow that runs the Changesets action on pushes to main:\npending changesets open a 'Version Packages' PR; merging it publishes to npm\nand tags the release. Wires the existing root version/release scripts (which\nalready wrap 'chang\n[…]\nand rely on the id-token grant. npm mints a short-lived token per\nrun and auto-generates provenance attestations. Requires a Trusted Publisher\nfor release.yml configured on npmjs.com (no repo secret).",
"is_bot": false,
"headline": "ci: automate npm releases with Changesets + OIDC trusted publishing (…",
"author_name": "Andy Pai",
"author_login": "abpai",
"committed_at": "2026-06-10T19:51:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ab60dbad4a914924c73fbb8a1fab22b5fae5b80d",
"body": "Reconciles the release metadata for 0.2.0 and fixes two legacy-config\nfootguns surfaced by review of the doctor.config.* → harness.config.*\nrename.\n\nRelease prep:\n- Remove the dangling .changeset (no changesets automation here — releases\n are manual); fold its notes into a 0.2.0 CHANGELOG entry cov\n[…]\negression tests for module-config migration, non-JSON legacy\ndetection/warning, and the rules-writer migrate-before-edit path.\nVerified: typecheck, lint (0 errors), build, 450+369 tests, format:check.",
"is_bot": false,
"headline": "chore: prepare 0.2.0 release; harden legacy-config migration (#9)",
"author_name": "Andy Pai",
"author_login": "abpai",
"committed_at": "2026-06-10T19:20:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d6edce96743949ec5f7327ab05ba16786c372413",
"body": "The harness docs contract now recommends nested AGENTS.md grounding files\n(folder-scoped what/why/data-model/key-files context), each with a sibling\nCLAUDE.md shim. The shim drift check only ran at the repo root, so a nested\nfree-standing CLAUDE.md beside a nested AGENTS.md — the same\ncompeting-instructions bug — went undetected. Check every directory where\nthe pair coexists; a CLAUDE.md without a sibling AGENTS.md stays unflagged.\n\nBumps @andypai/harness-doctor to 0.2.0.",
"is_bot": false,
"headline": "feat: extend claude-shim-imports-agents to nested directories (#8)",
"author_name": "Andy Pai",
"author_login": "abpai",
"committed_at": "2026-06-10T19:10:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dba4382c79d6a76856a476768f4dfe0009e96b2d",
"body": "* chore: drop Sentry subsystem and rename config to harness.config.*\n\nRemoves the Sentry crash-reporting / telemetry / tracing subsystem and\nclears remaining react-doctor fork residue.\n\nSentry removal:\n- Delete the instrument/tracer/scrubber/metric/report-error modules and\n their tests; rewrite app\n[…]\n4+core tests,\nformat:check. QA'd against investing-terminal (1048 files): legacy warning\nfires, harness.config.json is read after rename.\n\n* chore: refresh pnpm-lock.yaml after dropping @sentry/* deps",
"is_bot": false,
"headline": "chore: drop Sentry subsystem and rename config to harness.config.* (#7)",
"author_name": "Andy Pai",
"author_login": "abpai",
"committed_at": "2026-06-10T18:46:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "06d817351c815ed5a176b7746c394557f95e274c",
"body": "chore(release): @andypai/harness-doctor@0.1.0",
"is_bot": false,
"headline": "Merge pull request #6 from abpai/release/harness-doctor-0.1.0",
"author_name": "Andy Pai",
"author_login": "abpai",
"committed_at": "2026-06-10T17:12:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "04a568428e1e09fa9a33197e8dcd2f6775b81f9a",
"body": "First published release. Reset the never-published package version line to\na clean 0.1.0 (internal churn had reached 0.2.18 pre-publish), consolidate\nthe pending changesets into an initial-release CHANGELOG entry, and align\nthe private core/api workspace packages to 0.1.0.",
"is_bot": false,
"headline": "chore(release): @andypai/harness-doctor@0.1.0",
"author_name": "Andy Pai",
"author_login": "abpai",
"committed_at": "2026-06-10T17:08:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf02d966165fbb0857666ab24b8e673e0aae56dc",
"body": "feat!: drop the React lint rule stack — framework-agnostic readiness scanner",
"is_bot": false,
"headline": "Merge pull request #5 from abpai/codex/drop-react-lint-stack",
"author_name": "Andy Pai",
"author_login": "abpai",
"committed_at": "2026-06-10T17:03:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fd0970665d79ebcee06f33386eaf2d6b28abee03",
"body": "The react-lint-stack refactor removed --lint/--no-lint/--no-parallel from\nCommander but left them in the stripUnknownCliFlags allow-list, so they\nsurvived the pre-parse strip and reached Commander, which rejected them\nwith \"unknown option\" — defeating the util's purpose (graceful tolerance\nof stale flags). Prune them from the allow-list so old invocations degrade\ngracefully, drop the dead --no-lint from the TTY smoke, and add a\nregression test. Pairs with the JSON-smoke fix in the prior commit.",
"is_bot": false,
"headline": "fix(cli): strip removed lint-stack flags instead of crashing on them",
"author_name": "Andy Pai",
"author_login": "abpai",
"committed_at": "2026-06-10T15:51:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6ef269a42810995c1147fee665a51a1379bd2fc7",
"body": "The react-lint-stack refactor removed the CLI's --no-lint option, but\nscripts/smoke-json-report.ts still passed it, so the CLI exited with\n\"unknown option '--no-lint'\" and empty stdout — failing the JSON smoke\non the one leg (ubuntu/22.18.0) that runs it. Use the still-valid\n--no-score --no-dead-code flags.",
"is_bot": false,
"headline": "fix(ci): drop removed --no-lint flag from JSON smoke test",
"author_name": "Andy Pai",
"author_login": "abpai",
"committed_at": "2026-06-10T15:43:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9528278b42c4cd1e71096588472c3c4f732a1f1d",
"body": "Add deterministic docs contract checks",
"is_bot": false,
"headline": "Merge pull request #4 from abpai/codex/harness-docs-contract-doctor",
"author_name": "Andy Pai",
"author_login": "abpai",
"committed_at": "2026-06-10T15:15:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a5840781cfc9faf12533b5549ec98983a21373a",
"body": "…work-agnostic readiness scanner\n\nRemoved:\n- packages/oxlint-plugin-harness-doctor and packages/eslint-plugin-harness-doctor (every React/JSX AST rule)\n- the oxlint runner in core (runners/oxlint, run-oxlint, Linter service, batching, node-version gating, .oxlintrc adoption)\n- React/Tailwind/Zod/Exp\n[…]\n GitHub action, Sentry/telemetry wiring\n\nVerified: pnpm install/build pass; 881 tests green (core 366, cli 501, api 14); typecheck and lint clean; changeset status bumps @andypai/harness-doctor minor.",
"is_bot": false,
"headline": "feat!: drop the React lint rule stack — harness-doctor is now a frame…",
"author_name": "Andy Pai",
"author_login": "abpai",
"committed_at": "2026-06-10T04:51:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e5bf4f00322e155e2247a8c31dd725564c2a414d",
"body": null,
"is_bot": false,
"headline": "style: apply vp fmt to recent edits",
"author_name": "Andy Pai",
"author_login": "abpai",
"committed_at": "2026-06-10T03:57:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "76e8a45a545fac6b98284641c90c95320d4edf52",
"body": "…onor IGNORED_DIRECTORIES\n\n- agents-md-within-byte-budget now judges the heaviest root→leaf AGENTS.md\n chain (Codex's project_doc_max_bytes applies per chain, not repo-wide),\n and points the diagnostic at the heaviest file on the offending chain\n- listMarkdownFiles skips the shared IGNORED_DIRECTO\n[…]\nand shared by the byte-budget and link checks\n- checkTodoSpecSections is driven by the exported\n TODO_SPEC_REQUIRED_SECTIONS constant (now label+aliases pairs) instead of\n a divergent hardcoded copy",
"is_bot": false,
"headline": "fix(core): model the AGENTS.md byte budget per Codex loading chain; h…",
"author_name": "Andy Pai",
"author_login": "abpai",
"committed_at": "2026-06-10T03:51:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "938c41911ffd4330f15e3ff7d19ac70ad7e2de74",
"body": "Rename the npm package harness-doctor -> @andypai/harness-doctor: manifest\nname (+ publishConfig access public), changesets (pending changesets and\nfixed group), turbo filters, action.yml install spec, installer templates\n(npx/pnpm-dlx commands, devDependency name, git hook, agent hooks, doctor\nscri\n[…]\nADMEs, and tests.\n\nUnchanged on purpose: the harness-doctor bin/CLI name, the\nplugin/rule-namespace identifier, Sentry release prefix, config-dir names,\nand the abpai/harness-doctor GitHub action ref.",
"is_bot": false,
"headline": "feat!: publish the CLI as @andypai/harness-doctor",
"author_name": "Andy Pai",
"author_login": "abpai",
"committed_at": "2026-06-10T03:15:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "693810cf122c57a41c9bea36dd6990e6569e9cad",
"body": "…fork\n\nThe website package was removed in the harness-doctor refactor but stayed\nin the ignore list, which made every changesets command fail config\nvalidation — pending changesets could not version or release. Changelog\nrepo also still pointed at millionco.",
"is_bot": false,
"headline": "fix(changesets): drop stale website ignore, point changelog at abpai …",
"author_name": "Andy Pai",
"author_login": "abpai",
"committed_at": "2026-06-10T03:05:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "45ac0859be084d1561c424c0e3c442b533708c13",
"body": null,
"is_bot": false,
"headline": "chore: add minor changeset for docs-contract checks",
"author_name": "Andy Pai",
"author_login": "abpai",
"committed_at": "2026-06-10T03:04:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c448a069554dd4d27d7e21db4f6aae53f954080",
"body": "New rules: spec-contract-exists + spec-contract-has-required-sections\n(docs/SPEC_CONTRACT.md with quality bar / proof menu / escalation\nboundaries), engineering-docs-exist (commands.md + testing.md under\ndocsContract), no-structure-md (non-canonical structure map, disableable),\nagents-md-within-byte\n[…]\nemoved from the\nbanned-path list (existing maintained ADR conventions are preserved).\n\nDogfood: this repo and the clean fixture gain docs/SPEC_CONTRACT.md;\nfix recipes updated for the new rule family.",
"is_bot": false,
"headline": "feat(docs-structure): align checks with harness skill v1.1.0 contract",
"author_name": "Andy Pai",
"author_login": "abpai",
"committed_at": "2026-06-10T00:10:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "62d3b0978a624d6e085e180b5ad03bb808cd82e6",
"body": null,
"is_bot": false,
"headline": "Add deterministic docs contract checks",
"author_name": "Andy Pai",
"author_login": "abpai",
"committed_at": "2026-06-08T19:53:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9c3eeac3ac021f27a24cc1fb034c8aaf0c461592",
"body": "fix(ci): format drift + drop npm publish workflows",
"is_bot": false,
"headline": "Merge pull request #3 from abpai/fix/ci",
"author_name": "Andy Pai",
"author_login": "abpai",
"committed_at": "2026-06-03T14:07:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1654d153f13eb3646d6b87fb8e36c02709454545",
"body": "Two pre-existing failures, both inherited from the public react-doctor\nrepo and unrelated to the merged PRs:\n\n- 24 source/doc/test files had drifted out of `vp fmt` format, failing\n the `format:check` gate in ci.yml. Reformatted the whole tree.\n- publish-any-commit.yml and publish.yml publish to pu\n[…]\nm auth. Removed both. Re-add release infra when the package\n is actually published.\n\nRemaining CI (ci.yml, code-quality.yml, harness-doctor.yml) is green:\nformat/typecheck/lint/test all pass locally.",
"is_bot": false,
"headline": "fix(ci): format drift + drop npm publish workflows",
"author_name": "Andy Pai",
"author_login": "abpai",
"committed_at": "2026-06-03T14:06:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5337589c4532a1707d457c10af00c4cdc85fc0f1",
"body": "docs: rewrite README and guides for humans; fix broken links",
"is_bot": false,
"headline": "Merge pull request #2 from abpai/docs/rewrite-for-humans",
"author_name": "Andy Pai",
"author_login": "abpai",
"committed_at": "2026-06-03T14:03:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eff897d3311d74ea11f45ff1f18468badce7265e",
"body": "chore: remove dead code + dead exports left by the react-doctor strip",
"is_bot": false,
"headline": "Merge pull request #1 from abpai/chore/remove-strip-orphans",
"author_name": "Andy Pai",
"author_login": "abpai",
"committed_at": "2026-06-03T14:03:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d93f73959614481c1699ac79ccff2a9e538f42f1",
"body": "The README's logo and badges pointed at assets and an npm package that the\nstrip removed or never published, and every docs link pointed at a\n`harness.doctor` site that doesn't exist. The guides were accurate but read\nlike reference cards.\n\nREADME:\n- drop the broken <picture> logo (assets/ was delet\n[…]\nerify loop (pnpm gen is a plugin-package script)\n\nDogfooded: the repo root passes every docs-structure check, and all docs stay\nunder the monolith line limit (AGENTS.md 75/150, longest guide 214/400).",
"is_bot": false,
"headline": "docs: rewrite README and guides for humans; fix broken links",
"author_name": "Andy Pai",
"author_login": "abpai",
"committed_at": "2026-06-03T13:35:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "36998f77e4bd167e64f72eff04351eb93a88890b",
"body": "Quality pass over the code surviving the react-doctor strip (no behaviour\nchange; build/typecheck/test/lint green):\n\n- constants/style.ts: remove 5 unused style/motion/blur constants left from\n deleted design rules; keep MOTION_LIBRARY_PACKAGES (public API).\n- get-harness-doctor-setting.ts: remove \n[…]\nis-react-native-file/classify-package-platform)\nis threaded through rules.ts, capabilities, and project-info — generalizing it\naway is a larger framework-agnostic refactor, out of scope for this pass.",
"is_bot": false,
"headline": "refactor: drop dead exports left in live files after the strip",
"author_name": "Andy Pai",
"author_login": "abpai",
"committed_at": "2026-06-03T05:57:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f0392dd2b4f7f9fd07576b522047c33e6af385f9",
"body": "The strip kept the oxlint plugin's shared constants/ and utils/ libraries\nand a few core files even though the ~100 rules that consumed them were\ndeleted, leaving only the security/no-eval template rule. A knip pass\n(entries: package exports, bin, tests, build configs) plus per-file import\nverificat\n[…]\nde-of-type) is fully preserved.\nNo package.json dependency removals here: knip's unused-dependency hits\n(oxlint, deslop-js, jiti, ...) are loaded dynamically at runtime and need\nseparate verification.",
"is_bot": false,
"headline": "chore: remove dead code orphaned by the react-doctor strip",
"author_name": "Andy Pai",
"author_login": "abpai",
"committed_at": "2026-06-03T05:48:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f368ca730512c7fe1c3923f26ac13c34fe4b430f",
"body": "The strip left isAnalyzableProject gating on reactVersion/preactVersion, so\nharness-doctor refused to scan any repo without React (\"No React dependency\nfound\") — defeating the framework-agnostic premise and preventing the\ndocs-structure checks from ever running on a non-React project.\n\nBroaden the g\n[…]\ncated unit test and update the api\ndiagnose tests to the framework-agnostic contract (non-React projects now\ndiagnose successfully; batch-failure coverage uses a project with no\npackage.json instead).",
"is_bot": false,
"headline": "fix(core): make project analyzability framework-agnostic",
"author_name": "Andy Pai",
"author_login": "abpai",
"committed_at": "2026-06-03T05:12:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "eba37e2f20415a78789297868c312cc09c0916f3",
"body": null,
"is_bot": false,
"headline": "feat(checks): add docs-structure progressive-disclosure rule group",
"author_name": "Andy Pai",
"author_login": "abpai",
"committed_at": "2026-06-03T05:01:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f427b4d6a7da94a712f78e270f1d2c98d6d05401",
"body": "…boilerplate",
"is_bot": false,
"headline": "refactor!: strip react-doctor into framework-agnostic harness-doctor …",
"author_name": "Andy Pai",
"author_login": "abpai",
"committed_at": "2026-06-03T04:48:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "86911770da7999cbdab0fe89a498ee0e92a53c0e",
"body": "…d focus",
"is_bot": false,
"headline": "fix(cli): refine warning display in diagnostics to improve clarity an…",
"author_name": "Nisarg Patel",
"author_login": "NisargIO",
"committed_at": "2026-06-03T00:51:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "19b39c0e0d92ba67e94230a1d8e106f394cf825d",
"body": "Co-authored-by: Cursor Agent <cursoragent@cursor.com>",
"is_bot": false,
"headline": "chore: bump deslop-js to 0.0.15 (#659)",
"author_name": "Aiden Bai",
"author_login": "aidenybai",
"committed_at": "2026-06-03T00:23:01Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d594f69f26efaab9b2d0a78140ff97a3ff497ab0",
"body": "…ror (#655)\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix(cli): treat an unreadable --changed-files-from file as a clean er…",
"author_name": "Ray Arayilakath",
"author_login": "rayhanadev",
"committed_at": "2026-06-02T22:19:09Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "eab6dc27477998c31bfa6fc100c50b33af449795",
"body": "… (#654)\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix(core): skip un-enumerable directories during subproject discovery…",
"author_name": "Ray Arayilakath",
"author_login": "rayhanadev",
"committed_at": "2026-06-02T22:18:57Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f375dbb24f9c3e62f737b7bcbc97cca57f42e6dd",
"body": "Co-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "chore(skills): add /ship release pipeline skill (#651)",
"author_name": "Ray Arayilakath",
"author_login": "rayhanadev",
"committed_at": "2026-06-02T19:47:18Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "3cc997108be438d0fc13b00529159c88984ed36a",
"body": "…ve prompts (#650)\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix(cli): exit cleanly on terminal hangup (read EIO) during interacti…",
"author_name": "Ray Arayilakath",
"author_login": "rayhanadev",
"committed_at": "2026-06-02T19:40:14Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "0a36216c120af92d56cf232dea15e746a9668608",
"body": "Co-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "style(readme): apply formatter to CI Action SHA-pin snippet",
"author_name": "Rayhan Noufal Arayilakath",
"author_login": "rayhanadev",
"committed_at": "2026-06-02T19:27:44Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "caf46a775abadcc1d85fcef574bbfe5a2931bad2",
"body": "The composite Action is versioned independently from the npm packages via\nv-prefixed semver tags (vX.Y.Z) plus a floating major (vN), distinct from\nthe Changesets `<pkg>@X.Y.Z` tags. Documents the bump rules, the signed-tag\ngotcha, and the release/floating-major commands.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "docs(agents): document GitHub Action versioning scheme",
"author_name": "Rayhan Noufal Arayilakath",
"author_login": "rayhanadev",
"committed_at": "2026-06-02T19:20:38Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "5c49fa2b8e3ad2cf77a2daa3c2280eb13bcffbc5",
"body": "…#299)\n\nReplace the mutable `millionco/react-doctor@main` reference in the GitHub\nActions example with the `@v1` floating release tag, and add a note on\npinning to a full commit SHA for hardened CI (the example grants\n`pull-requests: write`). Avoids running whatever `main` points at runtime.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "docs(readme): pin CI Action example to @v1 + SHA-pin guidance (issue …",
"author_name": "Rayhan Noufal Arayilakath",
"author_login": "rayhanadev",
"committed_at": "2026-06-02T19:20:37Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "8d13ba3f84d0a41d3fed2af1e5a82d9c14de5b67",
"body": null,
"is_bot": true,
"headline": "chore: version packages (#641)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-02T06:19:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4aadaabfd488055a4323cc8b7f816c75601e40f1",
"body": "…i) (#645)",
"is_bot": false,
"headline": "fix(react-native): stop false-positives on Expo Universal UI (@expo/u…",
"author_name": "Aiden Bai",
"author_login": "aidenybai",
"committed_at": "2026-06-02T06:18:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c8b797d18d7d8d0b347fbea0da111b38075eb5d",
"body": "Co-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix(cli): degrade git current-branch read when git is unavailable (#643)",
"author_name": "Ray Arayilakath",
"author_login": "rayhanadev",
"committed_at": "2026-06-02T00:32:01Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2aa96f39b56555722b7121569a5bbd9caa10dc44",
"body": "…crashes (#642)\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix(cli): treat expected user/CLI errors as clean errors, not Sentry …",
"author_name": "Ray Arayilakath",
"author_login": "rayhanadev",
"committed_at": "2026-06-02T00:09:07Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "5614b3220bbf1a881a90388d9140d7bfeb54dbff",
"body": null,
"is_bot": true,
"headline": "chore: version packages (#639)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-01T22:21:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b336f54d664bf49e0c7b9575b7dcd374eebfd9c6",
"body": null,
"is_bot": false,
"headline": "feat(cli): reveal category breakdown one issue at a time (#640)",
"author_name": "Aiden Bai",
"author_login": "aidenybai",
"committed_at": "2026-06-01T22:21:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec5d58cf8315774869fc7c9e93e058c631000376",
"body": "`canAnimateOnboarding` only excluded CI, so a git hook invoked by an\ninteractive `git commit` (real inherited TTY, `GIT_DIR` set) would play\nthe score-bar count-up and onboarding pacing, emitting cursor escapes\ninto hook output (issue #293). Add `isGitHookEnvironment()` and gate it\nout, while keeping the deliberate coding-agent real-TTY animation.",
"is_bot": false,
"headline": "fix(cli): never animate the score header / onboarding inside git hooks",
"author_name": "Aiden Bai",
"author_login": "aidenybai",
"committed_at": "2026-06-01T21:25:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "114893e07d83d143aa3cdddc9fb178137b786f47",
"body": "Co-authored-by: Rayhan Noufal Arayilakath <me@rayhanadev.com>",
"is_bot": false,
"headline": "New onboarding 2 ray backup (#638)",
"author_name": "Aiden Bai",
"author_login": "aidenybai",
"committed_at": "2026-06-01T21:20:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d1ab245f0cbaa87529067e6e3ed9ac08362d1fc",
"body": null,
"is_bot": true,
"headline": "chore: version packages (#632)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-01T17:44:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8162bfb7ca0948b137dd75a22776e55cab99b740",
"body": null,
"is_bot": false,
"headline": "feat(cli): redesign scan summary, footer, and verbose warnings (#637)",
"author_name": "Aiden Bai",
"author_login": "aidenybai",
"committed_at": "2026-06-01T17:26:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf4c21e45d690353f5a1e8937dfa5769768c67d0",
"body": null,
"is_bot": false,
"headline": "Update README.md",
"author_name": "Aiden Bai",
"author_login": "aidenybai",
"committed_at": "2026-06-01T16:31:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bd8298d6cf3484ef7f2898fe981442706ffea3ce",
"body": "Co-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "feat(cli): lint in parallel by default, with serial fallback (#635)",
"author_name": "Ray Arayilakath",
"author_login": "rayhanadev",
"committed_at": "2026-06-01T15:50:59Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "520b0a9235d37074821c12fd73455d8462128a75",
"body": "…errors (#633)\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix(cli): accept commit ranges in --diff; render bad values as clean …",
"author_name": "Ray Arayilakath",
"author_login": "rayhanadev",
"committed_at": "2026-06-01T13:23:44Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "17e722ee074d10a5c4082b9f0a6b40ccaf3bed3b",
"body": "…ons) (#634)\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "feat(cli): add anonymized Sentry usage metrics (counters + distributi…",
"author_name": "Ray Arayilakath",
"author_login": "rayhanadev",
"committed_at": "2026-06-01T13:23:12Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "3fae9ddd88291f5a7236e36aa54b05fa45f370f4",
"body": "…s clean errors\"\n\nThis reverts commit 01ec05c06ea15b1ee2f24ca777e653bf1b3bd526.",
"is_bot": false,
"headline": "Revert \"fix(cli): accept commit ranges in --diff; render bad values a…",
"author_name": "Rayhan Noufal Arayilakath",
"author_login": "rayhanadev",
"committed_at": "2026-06-01T12:45:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "01ec05c06ea15b1ee2f24ca777e653bf1b3bd526",
"body": "…errors\n\n`--diff` now accepts git's own range syntax: two-dot `A..B` (diff A\ndirectly against B) and three-dot `A...B` (diff from the merge-base of A\nand B to B). Each endpoint is individually validated against the\nanti-injection guard, so a range can't smuggle a `--upload-pack=`-style\noption past i\n[…]\nDiffInfo now propagates the tagged ReactDoctorError so the CLI\ndispatches on reason._tag via the new isUserInputError classifier.\n\nFixes REACT-DOCTOR-9\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix(cli): accept commit ranges in --diff; render bad values as clean …",
"author_name": "Rayhan Noufal Arayilakath",
"author_login": "rayhanadev",
"committed_at": "2026-06-01T12:42:22Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "66f9d649e737fcaecc6b84cca944ee6612e18d1a",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore: version packages (#603)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-01T11:44:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "05d7bba5c4e033c64b10c7be775844190b4bed17",
"body": "* docs(readme): update readme\n\n* use \"taste\"",
"is_bot": false,
"headline": "docs(readme): update readme (#631)",
"author_name": "Ray Arayilakath",
"author_login": "rayhanadev",
"committed_at": "2026-06-01T11:33:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "89215753d35abfe32fe7128fbc778ced453863b4",
"body": null,
"is_bot": false,
"headline": "fix: remove unnecessary docs",
"author_name": "Rayhan Noufal Arayilakath",
"author_login": "rayhanadev",
"committed_at": "2026-06-01T11:24:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bdb9e36b0e8f27e04104f676bffd8c6091b65cc5",
"body": "Co-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "feat: add 10 React Native & Expo diagnostic rules (#625)",
"author_name": "Ray Arayilakath",
"author_login": "rayhanadev",
"committed_at": "2026-06-01T11:23:41Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "75c1f99e062a8fc3e5e4ba294208dbc56bca5f6f",
"body": "…ndency (#630)\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix(oxlint-plugin-react-doctor): declare oxc-parser as a runtime depe…",
"author_name": "Ray Arayilakath",
"author_login": "rayhanadev",
"committed_at": "2026-06-01T11:02:17Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "e9e71bbc2f98e7175136918b1a3de134e9d7cb87",
"body": "…mization, crash refs (#628)\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "feat(cli): deepen sentry observability -- source maps, tracing, anony…",
"author_name": "Ray Arayilakath",
"author_login": "rayhanadev",
"committed_at": "2026-06-01T10:19:25Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "cfeea7f7e9901319b0d667e574e969c7568b5e3b",
"body": "Downgrade the four `minor` changesets (CLI color/version/help,\nexperimental parallel lint workers, Sentry crash reporting, and\nwarnings-shown-by-default) to `patch` so the next release is a single\npatch bump.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "chore(changeset): mark pending changesets as patch",
"author_name": "Rayhan Noufal Arayilakath",
"author_login": "rayhanadev",
"committed_at": "2026-06-01T10:09:13Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "59762666d839ed09d6fbece1eaa22c6e9e91aaaf",
"body": null,
"is_bot": false,
"headline": "fix: its a patch its okay we can breathe",
"author_name": "Ray Arayilakath",
"author_login": "rayhanadev",
"committed_at": "2026-06-01T10:04:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9777f1ac453d8211e90c66852e0527a0ec386bc6",
"body": "…#617)\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "feat(cli): add `rules` management commands and doctor-explain skill (…",
"author_name": "Ray Arayilakath",
"author_login": "rayhanadev",
"committed_at": "2026-06-01T09:55:47Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "0938376e9c60dcc52fdf4691c15db49feb603033",
"body": "Show \"warning\"-severity diagnostics by default again — a scan that reports only errors is too low a bar for a health check. Warnings reach every surface (CLI, PR comment, score, --fail-on); opt out with --no-warnings or \"warnings\": false. Per-rule / per-category severity overrides still win.\n\nCLI ou\n[…]\ns every rule-list surface (category breakdown, top errors, warnings roll-up, verbose detail, agent handoff, on-disk dump); shared warning-header and site-badge helpers remove the duplicated rendering.",
"is_bot": false,
"headline": "feat(cli): show warnings by default again (--no-warnings to hide) (#622)",
"author_name": "Nisarg Patel",
"author_login": "NisargIO",
"committed_at": "2026-06-01T09:23:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b9e9bcbc08985f4bd77df1f354713d2cdbdaf2ec",
"body": "Co-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "feat(cli): align CLI with clig.dev and 12-factor guidelines (#623)",
"author_name": "Ray Arayilakath",
"author_login": "rayhanadev",
"committed_at": "2026-06-01T08:46:26Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "24425b113adcd965545b8c790af85c13a0d86c86",
"body": "* feat(cli): add Sentry crash reporting\n\nCapture uncaught CLI errors via @sentry/node, flushed before the process\nexits and enriched with a run-context snapshot (version, node/platform/\narch, invocation command/argv, cwd, CI provider, coding agent,\ninteractivity, JSON mode). Initialized as the first\n[…]\nent derive from detectCodingAgent.\nBehavior is unchanged (env-detection tests still green).\n\nCo-authored-by: Cursor <cursoragent@cursor.com>\n\n---------\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "feat(cli): add Sentry crash reporting (#621)",
"author_name": "Nisarg Patel",
"author_login": "NisargIO",
"committed_at": "2026-06-01T04:51:18Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "5fc6a9faa79568a5eaab67508e57376dfb95c68d",
"body": null,
"is_bot": false,
"headline": "Add Discord link to CLI error help (#620)",
"author_name": "Aiden Bai",
"author_login": "aidenybai",
"committed_at": "2026-06-01T03:32:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b3c3aa94018bfde765431f6a5612435c621eb925",
"body": null,
"is_bot": false,
"headline": "chore: codebase audit cleanup (dead code, dedup, CI/config fixes) (#619)",
"author_name": "Aiden Bai",
"author_login": "aidenybai",
"committed_at": "2026-06-01T02:36:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f1913f27f5b0ae895119dc9b73102bdebc7bbc14",
"body": "…618)\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "chore(skills): add truffler symbol-search tooling and deslop skill (#…",
"author_name": "Ray Arayilakath",
"author_login": "rayhanadev",
"committed_at": "2026-06-01T01:45:11Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "bb15252940bbd598846d7f7018df3fb86f11ea9f",
"body": "…cans (#616)\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "feat(cli): add --experimental-parallel flag for multi-worker oxlint s…",
"author_name": "Ray Arayilakath",
"author_login": "rayhanadev",
"committed_at": "2026-06-01T00:49:56Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "4bc8a73d247d9b8378616e738780af3794f0b97f",
"body": "…iagnostics) (#583)",
"is_bot": false,
"headline": "feat(core): port expo-doctor checks (Expo detection + project-level d…",
"author_name": "Aiden Bai",
"author_login": "aidenybai",
"committed_at": "2026-06-01T00:30:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "daef23ceff93634ffdb34c8e22e41610a07a596b",
"body": "…#614)",
"is_bot": false,
"headline": "fix: cut false positives and gate rules by library + React Compiler (…",
"author_name": "Aiden Bai",
"author_login": "aidenybai",
"committed_at": "2026-06-01T00:25:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "09fe1ff55f5efa4d069c3c57c9d3134c46a9cfb3",
"body": "* Fix CLI multi-project wrapper scans\n\nCo-authored-by: Aiden Bai <aidenybai@users.noreply.github.com>\n\n* Tighten ambiguous scan target handling\n\nCo-authored-by: Aiden Bai <aidenybai@users.noreply.github.com>\n\n* Refactor resolveDiagnoseTarget to accept options for ambiguous handling\n\n- Introduced Res\n[…]\nor cleaner code.\n\n---------\n\nCo-authored-by: Cursor Agent <cursoragent@cursor.com>\nCo-authored-by: Aiden Bai <aidenybai@users.noreply.github.com>\nCo-authored-by: Nisarg Patel <awesomenisarg@gmail.com>",
"is_bot": false,
"headline": "fix(#591): CLI multi-project wrapper scans (#592)",
"author_name": "Aiden Bai",
"author_login": "aidenybai",
"committed_at": "2026-05-31T23:45:13Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "8b313badda74de19ba56a242d965c54399d39b9c",
"body": "…links (#615)\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix: dead-code false positives on symlinked roots and 404 fix-recipe …",
"author_name": "Ray Arayilakath",
"author_login": "rayhanadev",
"committed_at": "2026-05-31T22:32:56Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "6448d5bfe1a920003a0d74d4080351d973dcbc0b",
"body": "…ect-rule blowup (#613)\n\nascend() re-descended the same definition subtrees on every recursion step,\nso the seven State & Effects rules (led by no-pass-data-to-parent) blew up\nsuperlinearly on large effect-heavy components — re-walking and re-scoping\nidentical bodies across recursion, across effects\n[…]\ntch from ~13.5s to ~2.5s — with byte-identical diagnostics\n(verified by a SHA-256 fingerprint over every diagnostic before/after).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "perf(oxlint-plugin): memoize getDownstreamRefs to fix superlinear eff…",
"author_name": "Nisarg Patel",
"author_login": "NisargIO",
"committed_at": "2026-05-31T10:20:00Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "9fc6f62940321beb129757a4eec4fd48ba45528e",
"body": "Tell the handed-off agent to verify each fix against the canonical recipe\nand re-run the scan (don't assume), and add a section instructing it to\nexplain in plain language what each issue is, why it matters, and how\nsevere it is in human terms.",
"is_bot": false,
"headline": "feat: handoff prompt verifies fixes and educates the user",
"author_name": "Aiden Bai",
"author_login": "aidenybai",
"committed_at": "2026-05-31T09:25:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6e59f10ef8b2173f0c98a653b13702d84f6471e7",
"body": null,
"is_bot": false,
"headline": "feat: new onboarding (#596)",
"author_name": "Aiden Bai",
"author_login": "aidenybai",
"committed_at": "2026-05-31T09:24:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b612664043a9be414166e3c6a69b355e39a8dcf4",
"body": "…e (#611)\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix(action): degrade to full-project scan when PR files are unreadabl…",
"author_name": "Ray Arayilakath",
"author_login": "rayhanadev",
"committed_at": "2026-05-31T07:04:46Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "3ceb7480c1f1b61a45a728274940f9e3de74a462",
"body": "…ent-code (#612)\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix(oxlint-plugin): allowlist public client keys in no-secrets-in-cli…",
"author_name": "Ray Arayilakath",
"author_login": "rayhanadev",
"committed_at": "2026-05-31T07:03:36Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "c2198ed6751cf233f368a1c774f1d136bbcf0471",
"body": "* feat: order the diagnostics dump by rule priority\n\nUsers report that `npx react-doctor` prints a large, undifferentiated dump and\nthey don't know what to tackle first. The score API now returns an intrinsic\npriority/tier per rule; surface it so the dump leads with what's most worth\nfixing instead \n[…]\nes are now `readonly` to match the\ndecoded shape.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: order the diagnostics dump by rule priority (#590)",
"author_name": "Nisarg Patel",
"author_login": "NisargIO",
"committed_at": "2026-05-31T05:49:53Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ac3ca1ab122baec2fa16ff23b9fc3e1f97ceb988",
"body": null,
"is_bot": false,
"headline": "Add enterprise hint for missing scores (#608)",
"author_name": "Aiden Bai",
"author_login": "aidenybai",
"committed_at": "2026-05-31T02:37:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe01e573a91a36316c858ad1e7c12a5fe18c1039",
"body": "Co-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix(core): redact secrets and PII from diagnostic output (#606)",
"author_name": "Ray Arayilakath",
"author_login": "rayhanadev",
"committed_at": "2026-05-31T02:26:55Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "5dff3b5a5da033e0ae4cd5dd432a74d36ca7d143",
"body": "… hang (#599) (#607)\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix(core): always clear oxlint batch progress interval to prevent CLI…",
"author_name": "Ray Arayilakath",
"author_login": "rayhanadev",
"committed_at": "2026-05-31T00:02:05Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "52ecf12d646cd568e0ef927d9a1f17b899de490a",
"body": "Co-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "feat(action): add non-blocking input for advisory CI runs (#604)",
"author_name": "Ray Arayilakath",
"author_login": "rayhanadev",
"committed_at": "2026-05-30T23:36:54Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "4861f37a55eb12909c7faca170ec5c9fd636f9a9",
"body": "Co-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "chore(deps): bump deslop-js to 0.0.14 (#605)",
"author_name": "Ray Arayilakath",
"author_login": "rayhanadev",
"committed_at": "2026-05-30T23:18:59Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "9b64d9810626fcd26f4fff649e03f981ede6be4c",
"body": null,
"is_bot": false,
"headline": "Update config.json",
"author_name": "Aiden Bai",
"author_login": "aidenybai",
"committed_at": "2026-05-30T22:48:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f7cc7c36ed62b0c2264916f2aeb694e5713e821",
"body": "Co-authored-by: materwelonDhruv <materwelondhruv@gmail.com>\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: publish JSON Schema for react-doctor.config.json (#601)",
"author_name": "Ray Arayilakath",
"author_login": "rayhanadev",
"committed_at": "2026-05-30T22:27:08Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "7b4ddf7ea764b4d9f7be867082cabf4c64b956a4",
"body": null,
"is_bot": false,
"headline": "update logo",
"author_name": "Ben MacLaurin",
"author_login": "ben-million",
"committed_at": "2026-05-30T21:36:50Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 4,
"commits_last_year": 711,
"latest_release_at": "2026-07-18T04:44:04Z",
"latest_release_tag": "@andypai/harness-doctor@2.0.0",
"releases_from_tags": false,
"days_since_last_push": 5,
"active_weeks_last_year": 18,
"days_since_latest_release": 5,
"mean_days_between_releases": 12.5
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 42,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "@andypai/harness-doctor",
"exists": true,
"license": "MIT",
"keywords": [
"agents",
"agents-md",
"ai-agents",
"diagnostics",
"docs-contract",
"documentation",
"harness",
"readiness",
"scanner",
"supply-chain",
"typescript"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@andypai/harness-doctor",
"is_deprecated": false,
"latest_version": "2.0.0",
"repository_url": "https://github.com/abpai/harness-doctor",
"versions_count": 5,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 6723,
"first_published_at": "2026-06-10T17:21:32.028000Z",
"latest_published_at": "2026-07-18T04:44:02.155000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
}
]
},
"popularity": {
"forks": 0,
"stars": 0,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0,
"collected_at": null
},
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"packages/core/tests/fixtures/signals-menu/basic/Makefile",
"packages/core/tests/fixtures/signals-menu/basic/justfile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"packages/api/tsconfig.json",
"packages/core/tests/fixtures/basic-react/tsconfig.json",
"packages/core/tests/fixtures/mixed-rn-web-monorepo/tsconfig.json",
"packages/core/tests/fixtures/nextjs-app/tsconfig.json",
"packages/core/tests/fixtures/tanstack-start-app/tsconfig.json",
"packages/core/tsconfig.json",
"packages/harness-doctor/tsconfig.json",
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 79743,
"source_files_sampled": 361,
"oversized_source_files": 2,
"agent_instruction_files": [
"AGENTS.md",
"packages/core/tests/fixtures/docs-structure-clean/AGENTS.md"
],
"agent_instruction_max_bytes": 3922
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 130,
"malicious_count": 0,
"assessed_package": "npm:@andypai/harness-doctor@2.0.0",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "@harness-doctor/core",
"manifest": "packages/api/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "effect",
"manifest": "packages/api/package.json",
"ecosystem": "npm",
"version_constraint": "4.0.0-beta.70"
},
{
"name": "@effect/platform-bun",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "4.0.0-beta.70"
},
{
"name": "confbox",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^0.2.4"
},
{
"name": "effect",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "4.0.0-beta.70"
},
{
"name": "jiti",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^2.7.0"
},
{
"name": "knip",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "6.26.0"
},
{
"name": "picocolors",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^1.1.1"
},
{
"name": "picomatch",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^4.0.4"
},
{
"name": "typescript",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^6.0.3"
},
{
"name": "@babel/code-frame",
"manifest": "packages/harness-doctor/package.json",
"ecosystem": "npm",
"version_constraint": "^7.29.0"
},
{
"name": "@effect/platform-bun",
"manifest": "packages/harness-doctor/package.json",
"ecosystem": "npm",
"version_constraint": "4.0.0-beta.70"
},
{
"name": "agent-install",
"manifest": "packages/harness-doctor/package.json",
"ecosystem": "npm",
"version_constraint": "0.0.5"
},
{
"name": "conf",
"manifest": "packages/harness-doctor/package.json",
"ecosystem": "npm",
"version_constraint": "^15.1.0"
},
{
"name": "confbox",
"manifest": "packages/harness-doctor/package.json",
"ecosystem": "npm",
"version_constraint": "^0.2.4"
},
{
"name": "effect",
"manifest": "packages/harness-doctor/package.json",
"ecosystem": "npm",
"version_constraint": "4.0.0-beta.70"
},
{
"name": "is-unicode-supported",
"manifest": "packages/harness-doctor/package.json",
"ecosystem": "npm",
"version_constraint": "^2.1.0"
},
{
"name": "jiti",
"manifest": "packages/harness-doctor/package.json",
"ecosystem": "npm",
"version_constraint": "^2.7.0"
},
{
"name": "knip",
"manifest": "packages/harness-doctor/package.json",
"ecosystem": "npm",
"version_constraint": "6.26.0"
},
{
"name": "magicast",
"manifest": "packages/harness-doctor/package.json",
"ecosystem": "npm",
"version_constraint": "^0.5.3"
},
{
"name": "prompts",
"manifest": "packages/harness-doctor/package.json",
"ecosystem": "npm",
"version_constraint": "^2.4.2"
},
{
"name": "typescript",
"manifest": "packages/harness-doctor/package.json",
"ecosystem": "npm",
"version_constraint": ">=5.0.4 <7"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 24,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 2,
"top_contributors": [
{
"type": "User",
"login": "aidenybai",
"commits": 471,
"avatar_url": "https://avatars.githubusercontent.com/u/38025074?v=4"
},
{
"type": "User",
"login": "cursoragent",
"commits": 81,
"avatar_url": "https://avatars.githubusercontent.com/u/199161495?v=4"
},
{
"type": "User",
"login": "rayhanadev",
"commits": 65,
"avatar_url": "https://avatars.githubusercontent.com/u/72509475?v=4"
},
{
"type": "User",
"login": "abpai",
"commits": 38,
"avatar_url": "https://avatars.githubusercontent.com/u/4070686?v=4"
},
{
"type": "User",
"login": "NisargIO",
"commits": 18,
"avatar_url": "https://avatars.githubusercontent.com/u/17689267?v=4"
},
{
"type": "User",
"login": "ben-million",
"commits": 14,
"avatar_url": "https://avatars.githubusercontent.com/u/210088851?v=4"
},
{
"type": "User",
"login": "Akshay090",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/28626499?v=4"
},
{
"type": "User",
"login": "ankushdharkar",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/1935403?v=4"
},
{
"type": "User",
"login": "athul-binu",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/76248875?v=4"
},
{
"type": "User",
"login": "ovflowd",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/12037269?v=4"
}
],
"contributors_sampled": 13,
"top_contributor_share": 0.679
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"code-quality.yml",
"harness-doctor.yml",
"pages.yml",
"release.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"pnpm-lock.yaml",
"yarn.lock"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 9,
"reason": "18 out of 20 merged PRs checked by a CI test -- score normalized to 9",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/17 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 8 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 9,
"reason": "1 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "683f4e96740e043358b3246dad9fa50333c0b41b",
"ran_at": "2026-07-23T13:21:34Z",
"aggregate_score": 3.4,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-18T04:43:53Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-18T04:43:23Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/abpai/harness-doctor",
"host": "github.com",
"name": "harness-doctor",
"owner": "abpai"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 62,
"inputs": {
"security": 47,
"vitality": 80,
"community": 34,
"governance": 64,
"engineering": 76
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 80,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 66,
"inputs": {
"commits_last_year": 711,
"human_commit_share": 0.93,
"days_since_last_push": 5,
"active_weeks_last_year": 18
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 5 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 5
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "18/52 weeks with commits",
"points": 12.5,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 18
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "711 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 711
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 4,
"latest_release_tag": "@andypai/harness-doctor@2.0.0",
"releases_from_tags": false,
"days_since_latest_release": 5,
"mean_days_between_releases": 12.5
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "4 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 4
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 5 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 5
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~12.5 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 12.5
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 34,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 0,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 64,
"inputs": {
"packages": [
"@andypai/harness-doctor"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 6723
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "6,723 downloads/month across npm",
"points": 51,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 6723,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 64,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 13,
"top_contributor_share": 0.679
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 68% of commits",
"points": 7.2,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 68
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "13 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 13
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 8 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 72,
"inputs": {
"merged_prs": 24,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "24/24 decided PRs merged",
"points": 38.2,
"status": "met",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 24,
"decided": 24
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/17 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 55,
"inputs": {
"followers": 38,
"owner_type": "User",
"is_verified": null,
"owner_login": "abpai",
"public_repos": 30,
"account_age_days": 4856
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "38 followers of abpai",
"points": 11.4,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 38,
"login": "abpai"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "30 public repos, account ~13 yr old",
"points": 22.9,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 30
}
},
{
"code": "account_age_years",
"params": {
"years": 13
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"@andypai/harness-doctor"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 5
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 5 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 5
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "5 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 5
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 76,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 66,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "5 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 5
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "18 out of 20 merged PRs checked by a CI test -- score normalized to 9",
"points": 18,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": "https://abpai.github.io/harness-doctor/",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://abpai.github.io/harness-doctor/",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 47,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 34,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 3.4
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "18 out of 20 merged PRs checked by a CI test -- score normalized to 9",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/17 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 8 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "1 existing vulnerabilities detected",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:@andypai/harness-doctor@2.0.0 runtime dependency closure — what installing the published package pulls in — 130 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "npm:@andypai/harness-doctor@2.0.0",
"assessed": 130
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 130,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 130,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 14
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 81,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.946,
"agent_instruction_files": [
"AGENTS.md",
"packages/core/tests/fixtures/docs-structure-clean/AGENTS.md"
],
"agent_instruction_max_bytes": 3922
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "AGENTS.md, packages/core/tests/fixtures/docs-structure-clean/AGENTS.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "AGENTS.md, packages/core/tests/fixtures/docs-structure-clean/AGENTS.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "88 of 93 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 88,
"sampled": 93
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 71,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"pnpm-lock.yaml",
"yarn.lock"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [
"packages/core/tests/fixtures/signals-menu/basic/Makefile",
"packages/core/tests/fixtures/signals-menu/basic/justfile"
],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
"packages/api/tsconfig.json",
"packages/core/tests/fixtures/basic-react/tsconfig.json",
"packages/core/tests/fixtures/mixed-rn-web-monorepo/tsconfig.json",
"packages/core/tests/fixtures/nextjs-app/tsconfig.json",
"packages/core/tests/fixtures/tanstack-start-app/tsconfig.json",
"packages/core/tsconfig.json",
"packages/harness-doctor/tsconfig.json",
"tsconfig.json"
],
"agent_commit_share": 0.36,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "packages/core/tests/fixtures/signals-menu/basic/Makefile, packages/core/tests/fixtures/signals-menu/basic/justfile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "packages/core/tests/fixtures/signals-menu/basic/Makefile, packages/core/tests/fixtures/signals-menu/basic/justfile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "packages/api/tsconfig.json, packages/core/tests/fixtures/basic-react/tsconfig.json, packages/core/tests/fixtures/mixed-rn-web-monorepo/tsconfig.json, packages/core/tests/fixtures/nextjs-app/tsconfig.json, packages/core/tests/fixtures/tanstack-start-app/tsconfig.json, packages/core/tsconfig.json, packages/harness-doctor/tsconfig.json, tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "packages/api/tsconfig.json, packages/core/tests/fixtures/basic-react/tsconfig.json, packages/core/tests/fixtures/mixed-rn-web-monorepo/tsconfig.json, packages/core/tests/fixtures/nextjs-app/tsconfig.json, packages/core/tests/fixtures/tanstack-start-app/tsconfig.json, packages/core/tsconfig.json, packages/harness-doctor/tsconfig.json, tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "36 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 36,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 79743,
"source_files_sampled": 361,
"oversized_source_files": 2
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "2/361 source files over 60KB",
"points": 54.7,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 361,
"oversized": 2
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-23T13:21:55.421221Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/abpai/harness-doctor.svg",
"full_name": "abpai/harness-doctor",
"license_state": "standard",
"license_spdx": "MIT"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — npm.