Public recordModerate
Software health reportschema 0.26.0 · metrics 1.13.0 · 2026-07-22 10:42 UTC
adapt-security / adapt-authoring-content
Plugin for handling Adapt content
adapt-security/adapt-authoring-content holds a health index of 61 out of 100, placing it in the Moderate band. It scores highest on Vitality (92/100) and lowest on Community & Adoption (26/100). It was last updated 4 days ago. A single contributor accounts for most of its recent work.
61
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
61
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
Adapt NXTOrganization
18 followers45 public repossince Jul 2017
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish |
|---|---|---|---|---|---|
| npm | adapt-authoring-content | 3.9.0 | 2,452 | 51 | 4 days ago |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
92
Development activity
87Excellent
How it's scored
| 36/36 | Push recency — last push 4 days ago |
| 22.8/36 | Commit cadence — 33/52 weeks with commits |
| 18/18 | Commit volume — 193 commits in the last year |
| 10/10 | OpenSSF Scorecard: Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
Inputs used
| commits_last_year | 193 |
| human_commit_share | 0.98 |
| days_since_last_push | 4 |
| active_weeks_last_year | 33 |
Release discipline
100Excellent
How it's scored
| 27/27 | Ships releases — 47 releases published |
| 36/36 | Release recency — latest release 4 days ago |
| 27/27 | Release cadence — a release every ~2.8 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 47 |
| latest_release_tag | v3.9.0 |
| releases_from_tags | no |
| days_since_latest_release | 4 |
| mean_days_between_releases | 2.8 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
26
Popularity & adoption
1Critical
How it's scored
| 0/60 | Stars — 0 stars |
| 0/25 | Forks — 0 forks |
| 0/15 | Watchers — 2 watchers |
Inputs used
| forks | 0 |
| stars | 0 |
| watchers | 2 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
32At risk
How it's scored
| 22.5/22.5 | README |
| 0/22.5 | License — no license file detected |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 6.3/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | no |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | yes |
Ecosystem adoption (downloads)
56Moderate
How it's scored
| 45.2/80 | Monthly downloads — 2,452 downloads/month across npm |
| 0/20 | Registry dependents — not reported by this ecosystem |
Inputs used
| packages | adapt-authoring-content |
| dependents | — |
| ecosystems | npm |
| total_downloads | — |
| monthly_downloads | 2,452 |
Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
62
Maintainer resilience (bus factor)
27Critical
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 2.5/22.5 | Commit distribution — top contributor authored 89% of commits |
| 5.4/13.5 | Contributor breadth — 4 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 5 contributing companies or organizations |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 4 |
| top_contributor_share | 0.889 |
How it's scored
| 45.4/46.8 | Issue resolution — 97% of issues closed |
| 27.4/38.3 | PR acceptance — 53/74 decided PRs merged |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/29 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 53 |
| open_issues | 2 |
| closed_issues | 66 |
| issue_closed_ratio | 0.971 |
| closed_unmerged_prs | 21 |
Ownership & stewardship
63Moderate
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 9.2/25 | Owner reach — 18 followers of adapt-security |
| 24.1/25 | Track record — 45 public repos, account ~9 yr old |
Inputs used
| followers | 18 |
| owner_type | Organization |
| is_verified | — |
| owner_login | adapt-security |
| public_repos | 45 |
| account_age_days | 3,303 |
Package maintenance
100Excellent
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on npm |
| 35/35 | Publish recency — latest publish 4 days ago |
| 20/20 | Version history — 51 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | adapt-authoring-content |
| ecosystems | npm |
| any_deprecated | no |
| min_days_since_publish | 4 |
Engineering Quality
Are baseline engineering and documentation practices in place?
67
Engineering practices
68Moderate
How it's scored
| 24/24 | CI workflows — 4 workflow(s) |
| 24/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 11 out of 11 merged PRs checked by a CI test -- score normalized to 10 |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Documentation
65Moderate
How it's scored
| 30/30 | README |
| 25/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 10/10 | Repository description |
| 0/10 | Topics |
| 0/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | no |
| homepage | — |
| has_readme | yes |
| has_docs_dir | yes |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
51
Security posture
51Moderate
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 2.5/2.5 | CI-Tests — 11 out of 11 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/29 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 5 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 0/2.5 | License — license file not detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 5/5 | Packaging — packaging workflow detected |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 17 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 1 |
| scorecard_aggregate | 5.1 |
Excluded from scoring (no data or not applicable): signed_releases. Remaining weights renormalized.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
43
Agent context & guidance
40At risk
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 74 of 98 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.755 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
How it's scored
| 0/18 | One-command bootstrap |
| 22/22 | Automated tests |
| 0/11 | Lint / format config |
| 0/11 | Static type checking |
| 0/10 | Reproducible environment |
| 10/10 | Demonstrated agent practice — 7 of the last 100 commits agent-authored or agent-credited |
| 8/8 | Automated maintenance — 1 of the last 100 commits are automated dependency updates |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | — |
| has_dockerfile | no |
| typed_language | no |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | — |
| agent_commit_share | 0.07 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0.01 |
Code legibility for models
55Moderate
How it's scored
| 0/45 | Type-checkable code — JavaScript without a type-check config |
| 55/55 | Manageable file sizes — 0/38 source files over 60KB |
Inputs used
| primary_language | JavaScript |
| largest_source_bytes | 45,934 |
| source_files_sampled | 38 |
| oversized_source_files | 0 |
Key facts
0GitHub stars
4contributors
193commits, last 12 months
4days since last push
47releases
1bus factor
2open issues
npmpackage ecosystems
Data collection warnings
- deps.dev does not index npm:adapt-authoring-content@3.9.0; advisories assessed against the repository dependency graph instead
- No resolved dependencies carried a version and a supported ecosystem
More detail
OpenSSF Scorecard 5.1 / 10
5.1aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 10 | CI-Tests | 11 out of 11 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/29 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 5 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 0 | License | license file not detected |
| 10 | Maintained | 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 10 | Packaging | packaging workflow detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| n/a | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
Direct dependencies 3
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| npm | adapt-authoring-api | ^4.0.1 | package.json |
| npm | adapt-authoring-core | ^3.0.0 | package.json |
| npm | adapt-authoring-mongodb | ^3.1.0 | package.json |
All dependencies 8
Full resolved dependency set from the GitHub dependency graph: 3 direct and 5 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|---|---|---|
| npm | adapt-authoring-api | ^4.0.1 | direct |
| npm | adapt-authoring-core | ^3.0.0 | direct |
| npm | adapt-authoring-mongodb | ^3.1.0 | direct |
| npm | @semantic-release/git | ^10.0.1 | indirect |
| npm | adapt-authoring-server | ^2.1.0 | indirect |
| npm | conventional-changelog-eslint | ^6.0.0 | indirect |
| npm | semantic-release | ^25.0.2 | indirect |
| npm | standard | ^17.1.0 | indirect |
Dependency advisories not assessed
Advisory matching could not run for this report: No resolved dependencies carried a version and a supported ecosystem
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 481,
"has_wiki": false,
"homepage": null,
"languages": {
"JavaScript": 155130
},
"pushed_at": "2026-07-17T11:11:25Z",
"created_at": "2019-10-17T16:32:25Z",
"owner_type": "Organization",
"updated_at": "2026-07-17T11:12:01Z",
"description": "Plugin for handling Adapt content",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "master",
"license_spdx_raw": null,
"primary_language": "JavaScript",
"significant_languages": [
"JavaScript"
]
},
"owner": {
"blog": "https://adaptlearning.org/",
"name": "Adapt NXT",
"type": "Organization",
"login": "adapt-security",
"company": null,
"location": "Worldwide",
"followers": 18,
"avatar_url": "https://avatars.githubusercontent.com/u/29925287?v=4",
"created_at": "2017-07-05T16:03:21Z",
"is_verified": null,
"public_repos": 45,
"account_age_days": 3303
},
"license": {
"state": "absent",
"spdx_id": null,
"raw_spdx": null,
"file_present": false,
"scorecard_found": false,
"profile_has_license": false
},
"activity": {
"releases": [
{
"tag": "v3.9.0",
"kind": "minor",
"published_at": "2026-07-17T11:11:30Z"
},
{
"tag": "v3.8.1",
"kind": "patch",
"published_at": "2026-07-16T16:35:06Z"
},
{
"tag": "v3.8.0",
"kind": "minor",
"published_at": "2026-07-16T16:34:23Z"
},
{
"tag": "v3.6.1",
"kind": "patch",
"published_at": "2026-07-16T13:58:00Z"
},
{
"tag": "v3.7.0",
"kind": "minor",
"published_at": "2026-07-09T21:53:57Z"
},
{
"tag": "v3.6.0",
"kind": "minor",
"published_at": "2026-07-07T20:58:45Z"
},
{
"tag": "v3.5.2",
"kind": "patch",
"published_at": "2026-06-26T10:19:47Z"
},
{
"tag": "v3.5.1",
"kind": "patch",
"published_at": "2026-06-23T16:57:20Z"
},
{
"tag": "v3.5.0",
"kind": "minor",
"published_at": "2026-06-23T13:30:15Z"
},
{
"tag": "v3.4.0",
"kind": "minor",
"published_at": "2026-06-22T17:06:36Z"
},
{
"tag": "v3.3.0",
"kind": "minor",
"published_at": "2026-06-22T13:23:11Z"
},
{
"tag": "v3.2.4",
"kind": "patch",
"published_at": "2026-06-19T13:22:45Z"
},
{
"tag": "v3.2.3",
"kind": "patch",
"published_at": "2026-06-16T13:08:14Z"
},
{
"tag": "v3.2.2",
"kind": "patch",
"published_at": "2026-06-15T18:55:24Z"
},
{
"tag": "v3.2.1",
"kind": "patch",
"published_at": "2026-06-15T10:14:51Z"
},
{
"tag": "v3.2.0",
"kind": "minor",
"published_at": "2026-06-12T22:07:08Z"
},
{
"tag": "v3.1.0",
"kind": "minor",
"published_at": "2026-06-11T13:29:57Z"
},
{
"tag": "v3.0.6",
"kind": "patch",
"published_at": "2026-06-09T12:19:48Z"
},
{
"tag": "v3.0.5",
"kind": "patch",
"published_at": "2026-05-27T16:16:31Z"
},
{
"tag": "v3.0.4",
"kind": "patch",
"published_at": "2026-05-27T09:31:52Z"
},
{
"tag": "v3.0.3",
"kind": "patch",
"published_at": "2026-05-20T19:12:27Z"
},
{
"tag": "v3.0.2",
"kind": "patch",
"published_at": "2026-05-14T19:21:48Z"
},
{
"tag": "v3.0.1",
"kind": "patch",
"published_at": "2026-05-09T12:17:45Z"
},
{
"tag": "v3.0.0",
"kind": "major",
"published_at": "2026-05-08T21:14:47Z"
},
{
"tag": "v2.1.8",
"kind": "patch",
"published_at": "2026-03-25T19:32:48Z"
},
{
"tag": "v2.1.7",
"kind": "patch",
"published_at": "2026-03-04T13:34:21Z"
},
{
"tag": "v2.1.6",
"kind": "patch",
"published_at": "2026-03-04T12:28:18Z"
},
{
"tag": "v2.1.5",
"kind": "patch",
"published_at": "2026-03-03T14:54:21Z"
},
{
"tag": "v2.1.4",
"kind": "patch",
"published_at": "2026-03-02T19:58:28Z"
},
{
"tag": "v2.1.3",
"kind": "patch",
"published_at": "2026-02-26T16:11:29Z"
},
{
"tag": "v2.1.2",
"kind": "patch",
"published_at": "2026-02-25T13:48:07Z"
},
{
"tag": "v2.1.1",
"kind": "patch",
"published_at": "2026-02-24T23:26:05Z"
},
{
"tag": "v2.1.0",
"kind": "minor",
"published_at": "2026-02-24T12:40:56Z"
},
{
"tag": "v2.0.4",
"kind": "patch",
"published_at": "2026-02-23T22:57:19Z"
},
{
"tag": "v2.0.0",
"kind": "major",
"published_at": "2026-02-22T20:46:39Z"
},
{
"tag": "v1.3.1",
"kind": "patch",
"published_at": "2026-02-20T21:56:03Z"
},
{
"tag": "v1.3.0",
"kind": "minor",
"published_at": "2026-02-20T01:40:45Z"
},
{
"tag": "v1.2.6",
"kind": "patch",
"published_at": "2026-02-19T20:27:56Z"
},
{
"tag": "v1.2.5",
"kind": "patch",
"published_at": "2026-02-19T12:37:56Z"
},
{
"tag": "v1.2.4",
"kind": "patch",
"published_at": "2026-02-11T00:53:54Z"
},
{
"tag": "v1.2.3",
"kind": "patch",
"published_at": "2026-02-03T20:07:27Z"
},
{
"tag": "v1.2.2",
"kind": "patch",
"published_at": "2026-01-15T12:43:15Z"
},
{
"tag": "v1.2.1",
"kind": "patch",
"published_at": "2025-11-27T11:28:15Z"
},
{
"tag": "v1.2.0",
"kind": "minor",
"published_at": "2025-11-27T00:25:28Z"
},
{
"tag": "v1.1.0",
"kind": "minor",
"published_at": "2025-11-20T17:52:12Z"
},
{
"tag": "v1.0.1",
"kind": "patch",
"published_at": "2025-09-10T10:09:35Z"
},
{
"tag": "v1.0.0",
"kind": "major",
"published_at": "2025-09-01T12:41:47Z"
}
],
"recent_commits": [
{
"oid": "51dc6a9dd236307e21a6e7e10c92741036520a33",
"body": "# [3.9.0](https://github.com/adapt-security/adapt-authoring-content/compare/v3.8.1...v3.9.0) (2026-07-17)\n\n### Fix\n\n* set updatedBy server-side in insertRecursive (fixes #147) (#148) ([47d6754](https://github.com/adapt-security/adapt-authoring-content/commit/47d675422980e9d0deea08809d8bcc03749770a8)\n[…]\n68526f5bb07f410cfb55817fd57091884a62)), closes [#149](https://github.com/adapt-security/adapt-authoring-content/issues/149) [#150](https://github.com/adapt-security/adapt-authoring-content/issues/150)",
"is_bot": false,
"headline": "Chore(release): 3.9.0 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-07-17T11:11:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f62168526f5bb07f410cfb55817fd57091884a62",
"body": "…9) (#150)",
"is_bot": false,
"headline": "Update: summarise body + instruction for all content types (fixes #14…",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-07-17T11:10:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "47d675422980e9d0deea08809d8bcc03749770a8",
"body": null,
"is_bot": false,
"headline": "Fix: set updatedBy server-side in insertRecursive (fixes #147) (#148)",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-07-17T11:10:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eeaa8950a16a89b54a93237cfc9f8880c15bd8f3",
"body": "## [3.8.1](https://github.com/adapt-security/adapt-authoring-content/compare/v3.8.0...v3.8.1) (2026-07-16)\n\n### Fix\n\n* guard _friendlyId migration against typeless docs (fixes #143) (#144) ([4d84a3c](https://github.com/adapt-security/adapt-authoring-content/commit/4d84a3c704eba7435266079271dd83684498371b)), closes [#143](https://github.com/adapt-security/adapt-authoring-content/issues/143) [#144](https://github.com/adapt-security/adapt-authoring-content/issues/144)",
"is_bot": false,
"headline": "Chore(release): 3.8.1 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-07-16T16:34:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4d84a3c704eba7435266079271dd83684498371b",
"body": "…#144)",
"is_bot": false,
"headline": "Fix: guard _friendlyId migration against typeless docs (fixes #143) (…",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-07-16T16:34:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f335305f8d03a4d54054923cb17ea9efe8691406",
"body": "# [3.8.0](https://github.com/adapt-security/adapt-authoring-content/compare/v3.7.0...v3.8.0) (2026-07-16)\n\n### Update\n\n* expose _assetIds in content tree (fixes #142) (#145) ([e3cdffe](https://github.com/adapt-security/adapt-authoring-content/commit/e3cdffe46fbdaa40d1bde32d7df53872852ca5b1)), closes [#142](https://github.com/adapt-security/adapt-authoring-content/issues/142) [#145](https://github.com/adapt-security/adapt-authoring-content/issues/145)",
"is_bot": false,
"headline": "Chore(release): 3.8.0 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-07-16T16:34:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e3cdffe46fbdaa40d1bde32d7df53872852ca5b1",
"body": null,
"is_bot": false,
"headline": "Update: expose _assetIds in content tree (fixes #142) (#145)",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-07-16T16:33:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2622a3503d2cd8a55641af01c85c79a6d300847b",
"body": "# [3.7.0](https://github.com/adapt-security/adapt-authoring-content/compare/v3.6.0...v3.7.0) (2026-07-09)\n\n### Chore\n\n* replace legacy new.yml with direct add-to-project workflow ([6a6875e](https://github.com/adapt-security/adapt-authoring-content/commit/6a6875eb17199e1cbbd8f712e62ece2fee84821a))\n* \n[…]\nfd64a7](https://github.com/adapt-security/adapt-authoring-content/commit/5fd64a72089d7423622d0ce90e40f27dc018d1ba)), closes [#137](https://github.com/adapt-security/adapt-authoring-content/issues/137)",
"is_bot": false,
"headline": "Chore(release): 3.7.0 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-07-09T21:53:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "20b4290af2758b3cae19d97c228526b812e81720",
"body": null,
"is_bot": false,
"headline": "New: Enable access control (fixes #117) (#141)",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-07-09T21:53:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a6875eb17199e1cbbd8f712e62ece2fee84821a",
"body": null,
"is_bot": false,
"headline": "Chore: replace legacy new.yml with direct add-to-project workflow",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-07-09T12:33:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf7318a298b0d15b890e2e6a83583fc40d29a852",
"body": "…ing org secret)",
"is_bot": false,
"headline": "Revert: restore new.yml (fleet add-to-project migration deferred pend…",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-07-09T12:29:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d57d6ab1c3abfa39a6d15b1f9ae9d1f39de775ec",
"body": null,
"is_bot": false,
"headline": "Chore: replace legacy new.yml with direct add-to-project workflow",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-07-09T12:27:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5fd64a72089d7423622d0ce90e40f27dc018d1ba",
"body": "Signed-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "Upgrade: Bump adapt-authoring-api from 3.10.0 to 4.0.1 (#137)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-08T23:23:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "170f7171e993cf60f5582a24c4d5931d5cbb46b3",
"body": "# [3.6.0](https://github.com/adapt-security/adapt-authoring-content/compare/v3.5.2...v3.6.0) (2026-07-07)\n\n### Chore\n\n* trigger add-to-project on reopened issues and PRs ([5e841d3](https://github.com/adapt-security/adapt-authoring-content/commit/5e841d3b9232936d0eeb18bcd52d52afa252af8b))\n\n### Docs\n\n\n[…]\n353fe7d0473f664952d50036d4f4d1c96d77)), closes [#138](https://github.com/adapt-security/adapt-authoring-content/issues/138) [#139](https://github.com/adapt-security/adapt-authoring-content/issues/139)",
"is_bot": false,
"headline": "Chore(release): 3.6.0 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-07-07T20:58:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b9e9353fe7d0473f664952d50036d4f4d1c96d77",
"body": null,
"is_bot": false,
"headline": "New: compute and expose per-component _summary (fixes #138) (#139)",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-07-07T20:58:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5e841d3b9232936d0eeb18bcd52d52afa252af8b",
"body": "[skip ci]",
"is_bot": false,
"headline": "Chore: trigger add-to-project on reopened issues and PRs",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-07-07T16:04:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ed6ea1d35173cac2492fa78c3a6b8807bf774fb3",
"body": null,
"is_bot": false,
"headline": "Docs: Add README",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-06-30T16:55:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d9b10ebaf675a7343ff3af9a86d6b968a24f614",
"body": "…finition",
"is_bot": false,
"headline": "Docs: Document _enabledPlugins fallback for explicit plugin schema de…",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-06-30T14:42:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4633fa69e5981419037c8dc6330e2489bdc975ff",
"body": "## [3.5.2](https://github.com/adapt-security/adapt-authoring-content/compare/v3.5.1...v3.5.2) (2026-06-26)\n\n### Fix\n\n* Drop removed courseassets collection during 3.0.0 migration ([22fa7be](https://github.com/adapt-security/adapt-authoring-content/commit/22fa7bece65fcbdaaa827aec5c960e0d43d4ac7c))",
"is_bot": false,
"headline": "Chore(release): 3.5.2 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-06-26T10:19:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "22fa7bece65fcbdaaa827aec5c960e0d43d4ac7c",
"body": null,
"is_bot": false,
"headline": "Fix: Drop removed courseassets collection during 3.0.0 migration",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-06-26T10:19:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "77ab5286ab96ff439448dae41c92e909a610dde4",
"body": "## [3.5.1](https://github.com/adapt-security/adapt-authoring-content/compare/v3.5.0...v3.5.1) (2026-06-23)\n\n### Fix\n\n* prune orphaned content items and guard _parentId on writes (#136) ([6239214](https://github.com/adapt-security/adapt-authoring-content/commit/62392141659f797a4e70c572eceb4de8cc9a637f)), closes [#136](https://github.com/adapt-security/adapt-authoring-content/issues/136)",
"is_bot": false,
"headline": "Chore(release): 3.5.1 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-06-23T16:57:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "62392141659f797a4e70c572eceb4de8cc9a637f",
"body": null,
"is_bot": false,
"headline": "Fix: prune orphaned content items and guard _parentId on writes (#136)",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-06-23T16:56:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "805cb7040bc1078b9411495980d01012cb26ecdb",
"body": "# [3.5.0](https://github.com/adapt-security/adapt-authoring-content/compare/v3.4.0...v3.5.0) (2026-06-23)\n\n### Docs\n\n* add the content model guide (#134) ([4c14d09](https://github.com/adapt-security/adapt-authoring-content/commit/4c14d098a027efbfa4d9cf3dacfe57b19e8828c3)), closes [#134](https://gith\n[…]\nf42776](https://github.com/adapt-security/adapt-authoring-content/commit/df42776aea6cc6f2bdd237e7497f736c51ef7208)), closes [#135](https://github.com/adapt-security/adapt-authoring-content/issues/135)",
"is_bot": false,
"headline": "Chore(release): 3.5.0 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-06-23T13:30:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "df42776aea6cc6f2bdd237e7497f736c51ef7208",
"body": null,
"is_bot": false,
"headline": "New: endpoint listing the courses that reference an asset (#135)",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-06-23T13:29:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c14d098a027efbfa4d9cf3dacfe57b19e8828c3",
"body": null,
"is_bot": false,
"headline": "Docs: add the content model guide (#134)",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-06-22T21:13:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8e1d0ac2a470facc38989809d8621af4c79fcc80",
"body": "# [3.4.0](https://github.com/adapt-security/adapt-authoring-content/compare/v3.3.0...v3.4.0) (2026-06-22)\n\n### New\n\n* filter assets by whether they're used in any course ([68eeec9](https://github.com/adapt-security/adapt-authoring-content/commit/68eeec9e55eabcb14c654ba18870e5442ea11795))",
"is_bot": false,
"headline": "Chore(release): 3.4.0 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-06-22T17:06:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "68eeec9e55eabcb14c654ba18870e5442ea11795",
"body": "Adds an `unused` flag to the assets listing. Content taps the assets\nqueryHook and, when the flag is set, excludes every asset referenced by\nany content document (distinct _assetIds), so the asset manager can show\nonly unused assets. The usage mechanism stays in content; assets remains\nusage-agnostic.\n\n- new excludeIdsFromQuery util + unit test\n- skip null entries in _assetIds, which would otherwise break ObjectId\n conversion of the $nin clause",
"is_bot": false,
"headline": "New: filter assets by whether they're used in any course",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-06-22T17:05:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "69b9809745b12a7153e4f11cd53d6e4c26ef4952",
"body": "# [3.3.0](https://github.com/adapt-security/adapt-authoring-content/compare/v3.2.4...v3.3.0) (2026-06-22)\n\n### Chore\n\n* remove orphaned handleTree test file ([c520fa8](https://github.com/adapt-security/adapt-authoring-content/commit/c520fa88041065fae2356bc37b1499b4053d9248))\n\n### Update\n\n* include _\n[…]\n15e955](https://github.com/adapt-security/adapt-authoring-content/commit/815e9552b68cb2bb1a53aebf01f9d300d6058306)), closes [#133](https://github.com/adapt-security/adapt-authoring-content/issues/133)",
"is_bot": false,
"headline": "Chore(release): 3.3.0 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-06-22T13:23:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "815e9552b68cb2bb1a53aebf01f9d300d6058306",
"body": null,
"is_bot": false,
"headline": "Update: include _language in the content tree projection (#133)",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-06-22T13:22:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c520fa88041065fae2356bc37b1499b4053d9248",
"body": "tests/_ht.js was a duplicate of the handleTree tests in\nContentModule.spec.js that the test glob (tests/**/*.spec.js) never ran,\nand it still asserted the removed Last-Modified caching behaviour.",
"is_bot": false,
"headline": "Chore: remove orphaned handleTree test file",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-06-19T13:24:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bbe41364a29705b028ed43c8f9cde4d0bc511744",
"body": "## [3.2.4](https://github.com/adapt-security/adapt-authoring-content/compare/v3.2.3...v3.2.4) (2026-06-19)\n\n### Fix\n\n* invalidate content tree cache on response-shape change (fixes #131) (#132) ([0f56225](https://github.com/adapt-security/adapt-authoring-content/commit/0f56225e7690cee69537121eb1c786bbd7714906)), closes [#131](https://github.com/adapt-security/adapt-authoring-content/issues/131) [#132](https://github.com/adapt-security/adapt-authoring-content/issues/132)",
"is_bot": false,
"headline": "Chore(release): 3.2.4 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-06-19T13:22:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0f56225e7690cee69537121eb1c786bbd7714906",
"body": "…31) (#132)",
"is_bot": false,
"headline": "Fix: invalidate content tree cache on response-shape change (fixes #1…",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-06-19T13:22:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2a94621c23b5bb42c312bfcffb4177e7daa0ae3c",
"body": "## [3.2.3](https://github.com/adapt-security/adapt-authoring-content/compare/v3.2.2...v3.2.3) (2026-06-16)\n\n### Fix\n\n* Include heroImage in tree projection (fixes #128) (#129) ([b24ba30](https://github.com/adapt-security/adapt-authoring-content/commit/b24ba306f153a526e5d304c00d7cb10c04b05a88)), closes [#128](https://github.com/adapt-security/adapt-authoring-content/issues/128) [#129](https://github.com/adapt-security/adapt-authoring-content/issues/129)",
"is_bot": false,
"headline": "Chore(release): 3.2.3 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-06-16T13:08:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b24ba306f153a526e5d304c00d7cb10c04b05a88",
"body": null,
"is_bot": false,
"headline": "Fix: Include heroImage in tree projection (fixes #128) (#129)",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-06-16T13:07:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "70fee1af26319cc97f3cb0f4f10752e285c41982",
"body": "## [3.2.2](https://github.com/adapt-security/adapt-authoring-content/compare/v3.2.1...v3.2.2) (2026-06-15)\n\n### Fix\n\n* Insert cloned content at its requested position (fixes #126) (#127) ([7b9cda6](https://github.com/adapt-security/adapt-authoring-content/commit/7b9cda6b9c8ce797fda704205ae81242fa9dc59c)), closes [#126](https://github.com/adapt-security/adapt-authoring-content/issues/126) [#127](https://github.com/adapt-security/adapt-authoring-content/issues/127)",
"is_bot": false,
"headline": "Chore(release): 3.2.2 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-06-15T18:55:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7b9cda6b9c8ce797fda704205ae81242fa9dc59c",
"body": null,
"is_bot": false,
"headline": "Fix: Insert cloned content at its requested position (fixes #126) (#127)",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-06-15T18:54:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ffb4cbe19455c06506911a2e7c344a1b93923adf",
"body": "## [3.2.1](https://github.com/adapt-security/adapt-authoring-content/compare/v3.2.0...v3.2.1) (2026-06-15)\n\n### Fix\n\n* Enforce access check on the content tree endpoint (fixes #124) (#125) ([83b95c2](https://github.com/adapt-security/adapt-authoring-content/commit/83b95c268e4e67a2840496447817edc1493faf27)), closes [#124](https://github.com/adapt-security/adapt-authoring-content/issues/124) [#125](https://github.com/adapt-security/adapt-authoring-content/issues/125)",
"is_bot": false,
"headline": "Chore(release): 3.2.1 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-06-15T10:14:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "83b95c268e4e67a2840496447817edc1493faf27",
"body": "…#125)",
"is_bot": false,
"headline": "Fix: Enforce access check on the content tree endpoint (fixes #124) (…",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-06-15T10:14:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a04a12bc5bd13254ba745a3c827e7606a86c5b31",
"body": "# [3.2.0](https://github.com/adapt-security/adapt-authoring-content/compare/v3.1.0...v3.2.0) (2026-06-12)\n\n### New\n\n* Prevent building courses with empty containers (fixes #122) (#123) ([6f1e52a](https://github.com/adapt-security/adapt-authoring-content/commit/6f1e52acf8916e06a1e3d15089b1b372b7f5da91)), closes [#122](https://github.com/adapt-security/adapt-authoring-content/issues/122) [#123](https://github.com/adapt-security/adapt-authoring-content/issues/123)",
"is_bot": false,
"headline": "Chore(release): 3.2.0 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-06-12T22:07:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f1e52acf8916e06a1e3d15089b1b372b7f5da91",
"body": null,
"is_bot": false,
"headline": "New: Prevent building courses with empty containers (fixes #122) (#123)",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-06-12T22:06:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d6471946ad1e436e0fb888f366af2a3f655036b",
"body": "# [3.1.0](https://github.com/adapt-security/adapt-authoring-content/compare/v3.0.6...v3.1.0) (2026-06-11)\n\n### New\n\n* Add /assetusage endpoint for an asset's course count (fixes #120) (#121) ([e8329c1](https://github.com/adapt-security/adapt-authoring-content/commit/e8329c14c1699e49a4ac6e4ae8aebbca97bc799e)), closes [#120](https://github.com/adapt-security/adapt-authoring-content/issues/120) [#121](https://github.com/adapt-security/adapt-authoring-content/issues/121)",
"is_bot": false,
"headline": "Chore(release): 3.1.0 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-06-11T13:29:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e8329c14c1699e49a4ac6e4ae8aebbca97bc799e",
"body": "…) (#121)",
"is_bot": false,
"headline": "New: Add /assetusage endpoint for an asset's course count (fixes #120…",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-06-11T13:29:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b0391ad6f5402ed75d97b7cbb0f3e2e734de583a",
"body": "## [3.0.6](https://github.com/adapt-security/adapt-authoring-content/compare/v3.0.5...v3.0.6) (2026-06-09)\n\n### Fix\n\n* Delegate block tracking ID assignment to spoortracking (fixes #118) (#119) ([056f82e](https://github.com/adapt-security/adapt-authoring-content/commit/056f82e0a9400e7add5181c522b35dfefda2627a)), closes [#118](https://github.com/adapt-security/adapt-authoring-content/issues/118) [#119](https://github.com/adapt-security/adapt-authoring-content/issues/119)",
"is_bot": false,
"headline": "Chore(release): 3.0.6 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-06-09T12:19:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "056f82e0a9400e7add5181c522b35dfefda2627a",
"body": "…18) (#119)",
"is_bot": false,
"headline": "Fix: Delegate block tracking ID assignment to spoortracking (fixes #1…",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-06-09T12:18:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aa9d3e7581908825217fd5e94b3fad1628e5a68f",
"body": "## [3.0.5](https://github.com/adapt-security/adapt-authoring-content/compare/v3.0.4...v3.0.5) (2026-05-27)\n\n### Fix\n\n* Normalise _shareWithUsers to ObjectId via migration ([d31a25c](https://github.com/adapt-security/adapt-authoring-content/commit/d31a25c1e19476105f910942fb334c8b1aa0b81a))",
"is_bot": false,
"headline": "Chore(release): 3.0.5 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-05-27T16:15:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d31a25c1e19476105f910942fb334c8b1aa0b81a",
"body": null,
"is_bot": false,
"headline": "Fix: Normalise _shareWithUsers to ObjectId via migration",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-05-27T13:30:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "df61e4421b8bda8d5d88fcb20a51eb87255b0fc7",
"body": "## [3.0.4](https://github.com/adapt-security/adapt-authoring-content/compare/v3.0.3...v3.0.4) (2026-05-27)\n\n### Fix\n\n* Require adapt-authoring-api ^3.7.0 so accessQueryHook is exposed ([f4adce2](https://github.com/adapt-security/adapt-authoring-content/commit/f4adce23e503b8322b042572f2281be38bb6b1e6))",
"is_bot": false,
"headline": "Chore(release): 3.0.4 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-05-27T09:31:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f4adce23e503b8322b042572f2281be38bb6b1e6",
"body": "content extends AbstractApiModule, so its instances only expose\naccessQueryHook when built against adapt-authoring-api >= 3.7.0. Consumers\n(multilang, adaptframework) tap content.accessQueryHook, so the previous\n^3.0.0 range allowed api 3.6.x to resolve and crash them at boot. Declaring\n^3.7.0 guarantees the hook exists for all consumers.",
"is_bot": false,
"headline": "Fix: Require adapt-authoring-api ^3.7.0 so accessQueryHook is exposed",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-05-27T09:28:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b6c66a399dcdff16524ebccf7dd1a20353bedd99",
"body": "## [3.0.3](https://github.com/adapt-security/adapt-authoring-content/compare/v3.0.2...v3.0.3) (2026-05-20)\n\n### Fix\n\n* Include _colorLabel in content tree projection so it restores on load ([357b920](https://github.com/adapt-security/adapt-authoring-content/commit/357b9209164344068b8ae309b0b397e92f0f6666))",
"is_bot": false,
"headline": "Chore(release): 3.0.3 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-05-20T19:12:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "357b9209164344068b8ae309b0b397e92f0f6666",
"body": "… load",
"is_bot": false,
"headline": "Fix: Include _colorLabel in content tree projection so it restores on…",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-05-20T19:10:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb5d7b3def1b12a0014e4dd526feecd93d12a2a1",
"body": "## [3.0.2](https://github.com/adapt-security/adapt-authoring-content/compare/v3.0.1...v3.0.2) (2026-05-14)\n\n### Fix\n\n* Add ContentModule.delete and handleClone unit tests ([31a46fa](https://github.com/adapt-security/adapt-authoring-content/commit/31a46fa1553c0bf0efa20631a352f3ed0e1b1572))",
"is_bot": false,
"headline": "Chore(release): 3.0.2 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-05-14T19:21:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31a46fa1553c0bf0efa20631a352f3ed0e1b1572",
"body": "Covers behaviours from the recent perf-era changes that weren't exercised by\nthe existing spec:\n\n- delete: bulk-delete via mongodb.deleteMany fires once for the full\n descendant batch, with postDeleteHook.invoke called once with the same\n array (rather than per-item).\n- delete: the invokePostHook:\n[…]\nclone attempts.\n\nThe delete tests mock super.find and super.delete on AbstractApiModule's\nprototype via t.mock.method for auto-restore, since super calls can't be\nintercepted via plain-object methods.",
"is_bot": false,
"headline": "Fix: Add ContentModule.delete and handleClone unit tests",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-05-14T19:21:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d9808a865433422b000b6586218e1d0f1420223c",
"body": "## [3.0.1](https://github.com/adapt-security/adapt-authoring-content/compare/v3.0.0...v3.0.1) (2026-05-09)\n\n### Fix\n\n* Bump adapt-authoring-core range to ^3.0.0 ([49faabb](https://github.com/adapt-security/adapt-authoring-content/commit/49faabbea6788a911718842d6424c448e50053af))",
"is_bot": false,
"headline": "Chore(release): 3.0.1 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-05-09T12:17:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "49faabbea6788a911718842d6424c448e50053af",
"body": null,
"is_bot": false,
"headline": "Fix: Bump adapt-authoring-core range to ^3.0.0",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-05-09T12:17:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d44e070caf666b8a94e83acfd2d3d7ae60db8332",
"body": "# [3.0.0](https://github.com/adapt-security/adapt-authoring-content/compare/v2.1.8...v3.0.0) (2026-05-08)\n\n### Breaking\n\n* Add tree endpoint and asset reference tracking (fixes #109) (#108) ([31e0cc9](https://github.com/adapt-security/adapt-authoring-content/commit/31e0cc93d34b23a6c0bd921605ad39fb3b\n[…]\n7a300451566e0715f5c391c8))\n\n### Upgrade\n\n* Bump adapt-authoring-mongodb to ^3.1.0 ([9ac77a8](https://github.com/adapt-security/adapt-authoring-content/commit/9ac77a818683901f3afb2dd3512ffcd3a1d4077e))",
"is_bot": false,
"headline": "Chore(release): 3.0.0 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-05-08T21:14:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "31e0cc93d34b23a6c0bd921605ad39fb3be581b9",
"body": "… (#108)",
"is_bot": false,
"headline": "Breaking: Add tree endpoint and asset reference tracking (fixes #109)…",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-05-08T21:13:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "864bf47f595d7f19c4ad6d9ea9088f3c1ab11f97",
"body": "Mirrors the existing pattern for _courseId and _parentId in the same\nloop, so cloned docs store createdBy in the canonical ObjectId form\nmatching the source data shape.\n\nTests updated to use a valid ObjectId for the userId argument.",
"is_bot": false,
"headline": "Fix: Cast createdBy to ObjectId in cloned payloads",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-05-08T19:01:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a6832f4d18b7b23142c83a3d27e9ce53c67bd755",
"body": "- enforceAssetNotInUse: cast courseIds to ObjectId before $in lookup\n so the courses array in the RESOURCE_IN_USE error is populated\n (previously a string $in against ObjectId _ids could silently miss).\n Adds 4 new test cases covering the no-usage path, the throw with\n populated titles, the ObjectId cast, and courseId deduplication.\n\n- clone: replace per-payload Array#shift() (O(n) per call, O(n²) total\n per type) with a bundled { ids, next } cursor on the friendlyIds Map.",
"is_bot": false,
"headline": "Fix: Address Copilot review feedback on PR #108",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-05-08T17:06:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0021476757f22af5d5c034c47afe66bb72878ecf",
"body": "Resolves conflict in delete() — combines master's bulk-delete pattern\n(raw mongodb.deleteMany + manual postDeleteHook) with feature/content-tree's\nremainingTree calculation needed by downstream updateEnabledPlugins.\n\nAlso removes unused imports surfaced by Standard.js lint:\n- convertObjectIds from lib/ContentModule.js\n- ContentTree from tests/_ht.js",
"is_bot": false,
"headline": "Merge master into feature/content-tree",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-05-08T16:36:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8b11a90720cf160ff69f53e5f44496e6142dc424",
"body": "The tree endpoint set Last-Modified from the course doc's updatedAt,\nbut content mutations only bumped the mutated doc's updatedAt — not\nthe course's. The editor's If-Modified-Since check returned 304 after\nadding a block, the in-memory content collection stayed stale, and\nthe new block disappeared \n[…]\ns,\nnot just direct course-doc edits.\n\nAlso lifts the asset preDelete in-use check out of an inline arrow\ninto an instance method (enforceAssetNotInUse) for consistency with\nthe new touchCourse helper.",
"is_bot": false,
"headline": "Fix: bump course updatedAt on content changes so tree cache invalidates",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-04-30T19:49:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d1632f5e53dc6d8398f1c30d01d254ecc52317fc",
"body": null,
"is_bot": false,
"headline": "Fix: Skip required validation in updateEnabledPlugins re-default sweep",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-04-25T15:47:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7faabb3f4f0f2125513b8c050f18cac09774d53d",
"body": null,
"is_bot": false,
"headline": "Update: Include _friendlyId in content tree projection",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-04-24T16:01:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c01478b5d6288f68daf9806109e44bcce5c1d0c",
"body": "HTTP dates are second-precision, but course.updatedAt (via\nnew Date().toISOString()) carries milliseconds. Serialising to\n.toUTCString() dropped the ms, so the client-echoed\nIf-Modified-Since reliably parsed ~400ms earlier than the server's\nlastModified, causing lastModified <= ifModifiedSince to be\n[…]\nand the endpoint to return 200 instead of 304. Zero the ms on the\nserver side so the comparison matches the transmitted precision.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix: Zero milliseconds on tree endpoint Last-Modified comparison",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-04-23T12:18:49Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6778a631c949ef4cfbbac56a08def344f7b430ad",
"body": "ContentModule.update wrote _assetIds via direct collection.updateOne,\nbypassing MongoDBModule.convertObjectIds; the 3.0.0 migration's\nbulkWrite did the same. MongoDBModule.find auto-casts query strings to\nObjectId, so the assets.preDeleteHook usage check never matched its\ntargets and in-use assets were deletable without warning. Cast both\nwrite paths so storage matches the insert-path format.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix: Cast _assetIds to ObjectId on update and backfill",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-04-23T12:10:07Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "5b63520ce2f30906135d18dde7b414f26ea5a63d",
"body": null,
"is_bot": false,
"headline": "Fix: Pre-allocate _trackingId when bulk-cloning blocks (refs #108)",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-04-21T20:51:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ecfb5f81aaf354d090fe188e903da96a4185a566",
"body": null,
"is_bot": false,
"headline": "Fix: Set _sortOrder on inner items in insertRecursive (refs #108)",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-04-21T18:59:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6c3b6194fc2aafe0e9dd4f7f3b3fc5cfbff3c9d8",
"body": "…nment to avoid App.instance side effect in tests\n\nAgent-Logs-Url: https://github.com/adapt-security/adapt-authoring-content/sessions/9952e7df-96fe-4af3-8034-bbbebd385aaa\n\nCo-authored-by: taylortom <1059083+taylortom@users.noreply.github.com>",
"is_bot": true,
"headline": "Fix: Replace convertObjectIds in clone() with targeted ObjectId assig…",
"author_name": "copilot-swe-agent[bot]",
"author_login": "Copilot",
"committed_at": "2026-03-27T21:44:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c6fe27ba5facc662bbf09904491b858602ee3bde",
"body": "- Pass forceUpdate to updateEnabledPlugins in insertRecursive to avoid no-op\n- Filter falsy values from nextPlugins Set to prevent undefined menu/theme entries\n- Fix misleading test name in computeSortOrderOps\n- Add unit tests for clone and handleTree\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix: Address review feedback from PR #108",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-27T20:47:41Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "04fa136ab0c7624a01ed06c5780f1a4e63565e5a",
"body": "Remove ID interval (was 5, now 1:1 mapping). Migration now imports\nshared formatFriendlyId and parseMaxSeq utilities instead of duplicating\nlogic. Replace console.log with log function passed from migrations runner.\nFix incorrect menu prefix (was 'p', now correctly uses _type[0]).\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Simplify friendly ID generation and fix migration",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-27T13:19:05Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "110ec7b821a14e115e47a6ec30794fea344d5608",
"body": "## [2.1.8](https://github.com/adapt-security/adapt-authoring-content/compare/v2.1.7...v2.1.8) (2026-03-25)\n\n### Fix\n\n* Bulk-delete descendants to prevent OOM on content deletion (#116) ([f0cee94](https://github.com/adapt-security/adapt-authoring-content/commit/f0cee94619b28f25dcead82712831a2a677d0776)), closes [#116](https://github.com/adapt-security/adapt-authoring-content/issues/116)",
"is_bot": false,
"headline": "Chore(release): 2.1.8 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-03-25T19:32:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f0cee94619b28f25dcead82712831a2a677d0776",
"body": null,
"is_bot": false,
"headline": "Fix: Bulk-delete descendants to prevent OOM on content deletion (#116)",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-25T19:32:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ca559040a0ee4af03d45709f24e3baf7afbd536a",
"body": "…content",
"is_bot": false,
"headline": "New: Add migration to backfill _friendlyId and _assetIds on existing …",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-24T12:16:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3fc68cce3bde0b2a05bec2961796f58575a79c5b",
"body": "…(fixes #114)",
"is_bot": false,
"headline": "New: Inline _assetIds on content documents, add asset deletion guard …",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-23T21:23:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c6e4c8aa6db7747cac458ddb2afbb260d5a39833",
"body": null,
"is_bot": false,
"headline": "Update: Eliminate find-back and API hooks from clone for performance",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-23T16:34:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9ac77a818683901f3afb2dd3512ffcd3a1d4077e",
"body": null,
"is_bot": false,
"headline": "Upgrade: Bump adapt-authoring-mongodb to ^3.1.0",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-23T15:10:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1848c9ad1fce9ca374f2c29ebc30fab177dd606a",
"body": null,
"is_bot": false,
"headline": "Update: Rewrite clone as bulk insert with pre-generated IDs (refs #109)",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-23T15:10:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bcec7ff98dc67765528332551be599371fa70d5e",
"body": null,
"is_bot": false,
"headline": "Chore: Remove generateFriendlyId in favour of generateFriendlyIds",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-23T15:10:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de1de8e65b77cd259b7df873e3ee77fcf6f92642",
"body": null,
"is_bot": false,
"headline": "Chore: Import utils from barrel file instead of individual files",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-23T11:36:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d485f9e96c3cee8fcac7ba9e05a87fe1c745359a",
"body": "Walk the source tree upfront to count items by type, then reserve\nall friendly IDs in one atomic counter increment per type. Eliminates\nper-item counter round-trips during recursive clone operations.",
"is_bot": false,
"headline": "Update: Pre-allocate friendly IDs in bulk during clone",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-23T11:30:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ae8b3c7fc53a97b87072fee00d67a32cecb8f1e6",
"body": "Reserves a range of sequence numbers in a single atomic counter increment,\nenabling batch ID allocation for clone and insertRecursive operations.",
"is_bot": false,
"headline": "New: Add bulk friendly ID generation via generateFriendlyIds",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-23T11:28:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "66a68781faff888b041e54ff662a946681fe00bf",
"body": "- Extract formatFriendlyId, parseMaxSeq, contentTypeToSchemaName, computeSortOrderOps to lib/utils/\n- Skip updateEnabledPlugins in clone for same-course copies\n- Add unit tests for all extracted utilities (30 tests)",
"is_bot": false,
"headline": "Update: Extract utilities and optimise clone for same-course copies",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-23T11:27:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "542b90e4cb0657ea10509acac8caeae3dbec02e0",
"body": "Removed unnecessary comments and simplified tree initialization.",
"is_bot": false,
"headline": "Rework excessive comments",
"author_name": "Tom Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-23T09:56:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f0ade8e087bfc73e2c77dafa7da40a46789b13e0",
"body": "…e (refs #109)\n\nUse super.find with projection in delete for tree building, defer\nupdateSortOrder and updateEnabledPlugins to end of insertRecursive,\nremove redundant updateEnabledPlugins from top-level clone insert,\nand use deleteMany for clone error cleanup.",
"is_bot": false,
"headline": "Update: Reduce redundant queries in delete, clone, and insertRecursiv…",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-22T15:34:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "04b50b1e15ad43b9a6764a23199439237e740b1c",
"body": "Replace raw contentItems array with ContentTree for O(1) type lookups,\nuse Set-based equality checks, add defensive nullish coalescing on\nconfig._enabledPlugins, simplify reduce chains with flatMap and Set\nloop, add optional chaining on schema lookup, document type guard\nrelationship with callers, and batch updateSortOrder writes into a\nsingle bulkWrite.",
"is_bot": false,
"headline": "Update: Refactor updateEnabledPlugins and updateSortOrder (refs #109)",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-22T15:34:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a10170be4beb1d9fdf852beb8dbd74d26a1be3da",
"body": "Replace queue.shift() with index pointer in BFS, cache toString()\nin getSiblings, and avoid intermediate array in getComponentNames.",
"is_bot": false,
"headline": "Update: Optimise ContentTree for large courses (refs #109)",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-22T15:33:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4b16ecbe23bd7248d11af9877dc26a0a51221b37",
"body": "… opt-out in delete",
"is_bot": false,
"headline": "Update: Skip updateEnabledPlugins for non-component types and respect…",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-21T18:26:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fc2913e623c324b232471e547e7bd84e37674b58",
"body": null,
"is_bot": false,
"headline": "Update: Add indexes for _parentId and _type queries (refs #109)",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-20T14:19:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "809df7075bdd925dde1a99fb120144e5fd8b64e8",
"body": "Content now imports parseObjectId directly, so it's a real dependency.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix: Move adapt-authoring-mongodb from peer to standard dependency",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-11T17:16:11Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "e5ce6d8ab752ed392bebbe449bca68dc860adf2c",
"body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Update: Refactor tests with shared mock helpers and add counter tests",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-11T16:58:53Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "8970fe14aa8bbda8d735a2c03da343062090f280",
"body": "Replaces the non-atomic read-max-then-increment approach with an atomic\ncounter using findOneAndUpdate/$inc, fixing duplicate _friendlyId errors\nduring parallel clone inserts.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix: Move friendly ID generation from multilang into content module",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-11T16:24:22Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "3e77e4aa6984bd221ce655ca3555daa94df39fdb",
"body": "…109)",
"is_bot": false,
"headline": "Update: Add _menu, _theme, _enabledPlugins to tree projection (refs #…",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-11T01:28:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4409f6926098ed7bf4648bf2a4d39dd17d37d6e4",
"body": "…fs #109)",
"is_bot": false,
"headline": "New: Add dedicated tree endpoint with conditional request support (re…",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-11T00:46:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d36a5a9120957a415c7da31eb005f43c4dc511f8",
"body": "- Remove silent error swallowing in getSchema — errors from\n getSchemaName and config lookup now propagate, preventing silent\n fallback to base schema which could strip plugin-specific fields\n- Eliminate double-fetch: getSchemaName now also fetches _courseId when\n looking up a document, attaching\n[…]\n Add schema cache keyed by schemaName + sorted enabledPluginSchemas,\n avoiding expensive schema build/compile on repeated calls with the\n same plugin set. Cache is cleared on schema re-registration.",
"is_bot": false,
"headline": "Fix: Improve getSchema reliability and performance (fixes #110)",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-11T00:16:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "60c1e15d354a47eaedeaec6d67d113817660bf57",
"body": "- Rollback: track created items during clone and clean up on failure,\n matching the pattern in insertRecursive\n- Input validation: validate _id is present in handleClone before\n proceeding\n- Performance: parallelise sibling clones with Promise.all instead of\n sequential loop\n\nRemaining items from #111 (require cross-module changes):\n- Batch updateCourseTimestamp during clone (authored module)\n- Fragile course double-write pattern (mitigated by validate: false)",
"is_bot": false,
"headline": "Fix: Add rollback, input validation, and parallel clones (fixes #111)",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-10T23:53:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2625c5d203226e5ab597130a25653de09233e4b1",
"body": null,
"is_bot": false,
"headline": "Chore: Remove module-specific reference from delete comment",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-10T23:49:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "342ee2fe36468db4064d5d9ef440ce1939eb8f7b",
"body": "Replace N individual super.delete() calls for descendants with a single\nsuper.deleteMany() bulk operation. The target doc is still deleted via\nsuper.delete() to trigger the deleteHook middleware (required by\nmultilang for peer cascade deletion). Pre/post delete hooks still fire\nper item via deleteMany for courseassets cleanup and authored timestamps.\n\nFor a 200-item course delete, this reduces ~400 DB round-trips to ~4.",
"is_bot": false,
"headline": "Update: Use deleteMany for descendant deletion (fixes #112)",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-10T23:49:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3472238efd051b147a300451566e0715f5c391c8",
"body": "Replace find()[0] and [doc] = find() patterns with findOne() where a\nsingle result is expected. Use throwOnMissing: false where the caller\nhandles the missing case, and default throwOnMissing: true where\nnot-found should throw. Also replace deprecated strict option with\nthrowOnMissing.",
"is_bot": false,
"headline": "Update: Use findOne instead of destructured find for single-doc lookups",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-10T23:38:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1dfa3725a5f8f6a651794f1e0febcf4a31bb2016",
"body": "Use super.find in updateSortOrder and updateEnabledPlugins to bypass\nhooks for internal bookkeeping queries. Add class-level JSDoc\ndocumenting the convention: this.* for user-facing operations (triggers\nhooks), super.* for internal bookkeeping (avoids infinite recursion).",
"is_bot": false,
"headline": "Chore: Standardise this.find vs super.find usage (refs #79)",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-10T21:32:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5fa98c5bd006395fb8f39619a641e5e658913ea0",
"body": "Reduces data transfer by projecting only needed fields:\n- getSchemaName: _type, _component\n- getSchema: _courseId and _enabledPlugins\n- updateSortOrder: _id, _sortOrder\n- updateEnabledPlugins: 6 fields instead of full docs\n- contentplugin.find: name only\n- clone parent lookup: _id, _type, _courseId",
"is_bot": false,
"headline": "Update: Add MongoDB projections to all safe find call sites (refs #79)",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-10T21:29:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac8c3add0e0869b41710bd5816cc5c3c2bc97e67",
"body": null,
"is_bot": false,
"headline": "Chore: Add unit tests for update guard conditions (refs #79)",
"author_name": "Thomas Taylor",
"author_login": "taylortom",
"committed_at": "2026-03-10T21:27:11Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 47,
"commits_last_year": 193,
"latest_release_at": "2026-07-17T11:11:30Z",
"latest_release_tag": "v3.9.0",
"releases_from_tags": false,
"days_since_last_push": 4,
"active_weeks_last_year": 33,
"days_since_latest_release": 4,
"mean_days_between_releases": 2.8
},
"community": {
"has_readme": true,
"has_license": false,
"has_description": true,
"has_contributing": false,
"health_percentage": 37,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "adapt-authoring-content",
"exists": true,
"license": "GPL-3.0",
"keywords": [],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/adapt-authoring-content",
"is_deprecated": false,
"latest_version": "3.9.0",
"repository_url": "https://github.com/adapt-security/adapt-authoring-content",
"versions_count": 51,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 2,
"monthly_downloads": 2452,
"first_published_at": "2025-08-26T13:14:07.708000Z",
"latest_published_at": "2026-07-17T11:11:29.322000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 4
}
]
},
"popularity": {
"forks": 0,
"stars": 0,
"watchers": 2,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0
},
"open_issues_and_prs": 2
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 45934,
"source_files_sampled": 38,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": "No resolved dependencies carried a version and a supported ecosystem",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 8,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "adapt-authoring-api",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.0.1"
},
{
"name": "adapt-authoring-core",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^3.0.0"
},
{
"name": "adapt-authoring-mongodb",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^3.1.0"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "adapt-authoring-api",
"direct": true,
"version": "^4.0.1",
"ecosystem": "npm"
},
{
"name": "adapt-authoring-core",
"direct": true,
"version": "^3.0.0",
"ecosystem": "npm"
},
{
"name": "adapt-authoring-mongodb",
"direct": true,
"version": "^3.1.0",
"ecosystem": "npm"
},
{
"name": "@semantic-release/git",
"direct": false,
"version": "^10.0.1",
"ecosystem": "npm"
},
{
"name": "adapt-authoring-server",
"direct": false,
"version": "^2.1.0",
"ecosystem": "npm"
},
{
"name": "conventional-changelog-eslint",
"direct": false,
"version": "^6.0.0",
"ecosystem": "npm"
},
{
"name": "semantic-release",
"direct": false,
"version": "^25.0.2",
"ecosystem": "npm"
},
{
"name": "standard",
"direct": false,
"version": "^17.1.0",
"ecosystem": "npm"
}
],
"collected": true,
"truncated": false,
"total_count": 8,
"direct_count": 3,
"indirect_count": 5
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 53,
"open_issues": 2,
"closed_ratio": 0.971,
"closed_issues": 66,
"closed_unmerged_prs": 21
},
"bus_factor": 1,
"bot_contributors": 2,
"top_contributors": [
{
"type": "User",
"login": "taylortom",
"commits": 439,
"avatar_url": "https://avatars.githubusercontent.com/u/1059083?v=4"
},
{
"type": "User",
"login": "semantic-release-bot",
"commits": 47,
"avatar_url": "https://avatars.githubusercontent.com/u/32174276?v=4"
},
{
"type": "User",
"login": "joe-allen-89",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/85872286?v=4"
},
{
"type": "User",
"login": "chris-steele",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/1228225?v=4"
}
],
"contributors_sampled": 4,
"top_contributor_share": 0.889
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"addtoproject.yml",
"releases.yml",
"standardjs.yml",
"tests.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "11 out of 11 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/29 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 5 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 0,
"reason": "license file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "51dc6a9dd236307e21a6e7e10c92741036520a33",
"ran_at": "2026-07-22T10:42:42Z",
"aggregate_score": 5.1,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-20T16:34:24Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-17T11:10:54Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 140,
"created_at": "2026-07-07T09:33:12Z",
"last_comment_at": "2026-07-07T09:36:31Z",
"last_comment_author": "taylortom"
},
{
"number": 146,
"created_at": "2026-07-16T14:05:29Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/adapt-security/adapt-authoring-content",
"host": "github.com",
"name": "adapt-authoring-content",
"owner": "adapt-security"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 61,
"inputs": {
"security": 51,
"vitality": 92,
"community": 26,
"governance": 62,
"engineering": 67
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 92,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 87,
"inputs": {
"commits_last_year": 193,
"human_commit_share": 0.98,
"days_since_last_push": 4,
"active_weeks_last_year": 33
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 4 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 4
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "33/52 weeks with commits",
"points": 22.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 33
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "193 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 193
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 47,
"latest_release_tag": "v3.9.0",
"releases_from_tags": false,
"days_since_latest_release": 4,
"mean_days_between_releases": 2.8
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "47 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 47
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 4 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 4
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~2.8 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 2.8
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 4,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 4 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 4
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 26,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 0,
"watchers": 2,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "2 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 2
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "at_risk",
"name": "Community health",
"note": null,
"notes": [],
"value": 32,
"inputs": {
"has_readme": true,
"has_license": false,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "no license file detected",
"points": 0,
"status": "missed",
"details": [
{
"code": "license_absent",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 56,
"inputs": {
"packages": [
"adapt-authoring-content"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 2452
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "2,452 downloads/month across npm",
"points": 45.2,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 2452,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 62,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 27,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 4,
"top_contributor_share": 0.889
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 89% of commits",
"points": 2.5,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 89
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "4 contributors",
"points": 5.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 4
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 5 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 73,
"inputs": {
"merged_prs": 53,
"open_issues": 2,
"closed_issues": 66,
"issue_closed_ratio": 0.971,
"closed_unmerged_prs": 21
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "97% of issues closed",
"points": 45.4,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 97
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "53/74 decided PRs merged",
"points": 27.4,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 53,
"decided": 74
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/29 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 63,
"inputs": {
"followers": 18,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "adapt-security",
"public_repos": 45,
"account_age_days": 3303
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "18 followers of adapt-security",
"points": 9.2,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 18,
"login": "adapt-security"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "45 public repos, account ~9 yr old",
"points": 24.1,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 45
}
},
{
"code": "account_age_years",
"params": {
"years": 9
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"adapt-authoring-content"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 4
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 4 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 4
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "51 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 51
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 67,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "4 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 4
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "11 out of 11 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 51,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 51,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 5.1
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "11 out of 11 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/29 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 5 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 7
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "at_risk",
"name": "AI Readiness",
"value": 43,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.755,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "74 of 98 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 74,
"sampled": 98
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0.07,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0.01
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "7 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 7,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "1 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 1,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"primary_language": "JavaScript",
"largest_source_bytes": 45934,
"source_files_sampled": 38,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "JavaScript without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "JavaScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/38 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 38,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"deps.dev does not index npm:adapt-authoring-content@3.9.0; advisories assessed against the repository dependency graph instead",
"No resolved dependencies carried a version and a supported ecosystem"
],
"report_type": "repository",
"generated_at": "2026-07-22T10:42:56.150934Z",
"schema_version": "0.26.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/adapt-security/adapt-authoring-content.svg",
"full_name": "adapt-security/adapt-authoring-content",
"license_state": "absent",
"license_spdx": null
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.26.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — npm.