Public recordGood
Software health reportschema 0.26.0 · metrics 1.13.0 · 2026-07-22 18:41 UTC
agent-team-foundation / first-tree
First-tree routes work to the right agent, gives it the same context your team has, and loops humans in only when the rules say so. Lives in your GitHub. Open source.
agent-team-foundation/first-tree holds a health index of 72 out of 100, placing it in the Good band. It scores highest on Engineering Quality (94/100) and lowest on Security (49/100). It was last updated today. 2 contributors account for most of its recent work.
72
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
72
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
Agent Team FoundationOrganization
11 followers10 public repossince Apr 2025
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
86
Development activity
76Good
How it's scored
| 36/36 | Push recency — last push 0 days ago |
| 12.5/36 | Commit cadence — 18/52 weeks with commits |
| 18/18 | Commit volume — 1,320 commits in the last year |
| 10/10 | OpenSSF Scorecard: Maintained — 30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10 |
Inputs used
| commits_last_year | 1,320 |
| human_commit_share | 1 |
| days_since_last_push | 0 |
| active_weeks_last_year | 18 |
Release discipline
100Excellent
How it's scored
| 27/27 | Ships releases — 17 releases published |
| 36/36 | Release recency — latest release 5 days ago |
| 27/27 | Release cadence — a release every ~3.3 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 17 |
| latest_release_tag | v0.5.16 |
| releases_from_tags | no |
| days_since_latest_release | 5 |
| mean_days_between_releases | 3.3 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
65
Popularity & adoption
42At risk
How it's scored
| 30.6/60 | Stars — 78 stars |
| 11/25 | Forks — 22 forks |
| 0/15 | Watchers — 1 watchers |
Inputs used
| forks | 22 |
| stars | 78 |
| watchers | 1 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
92Excellent
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (Apache-2.0) |
| 18/18 | CONTRIBUTING guide |
| 13.5/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 6.3/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | yes |
| has_issue_template | no |
| has_code_of_conduct | yes |
| has_pull_request_template | yes |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
60
Maintainer resilience (bus factor)
63Moderate
How it's scored
| 25.2/54 | Bus factor — 2 contributor(s) cover half of all commits |
| 14.7/22.5 | Commit distribution — top contributor authored 35% of commits |
| 13.5/13.5 | Contributor breadth — 10 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 4 contributing companies or organizations |
Inputs used
| bus_factor | 2 |
| contributors_sampled | 10 |
| top_contributor_share | 0.346 |
Issue & PR responsiveness
68Moderate
How it's scored
| 21.2/46.8 | Issue resolution — 45% of issues closed |
| 33.1/38.3 | PR acceptance — 1,273/1,472 decided PRs merged |
| 13.5/15 | OpenSSF Scorecard: Code-Review — Found 19/21 approved changesets -- score normalized to 9 |
Inputs used
| merged_prs | 1,273 |
| open_issues | 235 |
| closed_issues | 195 |
| issue_closed_ratio | 0.453 |
| closed_unmerged_prs | 199 |
Ownership & stewardship
48At risk
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 7.8/25 | Owner reach — 11 followers of agent-team-foundation |
| 10/25 | Track record — 10 public repos, account ~1 yr old |
Inputs used
| followers | 11 |
| owner_type | Organization |
| is_verified | — |
| owner_login | agent-team-foundation |
| public_repos | 10 |
| account_age_days | 449 |
Engineering Quality
Are baseline engineering and documentation practices in place?
94
Engineering practices
90Excellent
How it's scored
| 24/24 | CI workflows — 6 workflow(s) |
| 24/24 | Tests present |
| 16/16 | Linter config — biome.json |
| 0/9.6 | Pre-commit hooks |
| 6.4/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 21 out of 21 merged PRs checked by a CI test -- score normalized to 10 |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | yes |
| has_linter_config | yes |
| has_precommit_config | no |
Documentation
100Excellent
How it's scored
| 30/30 | README |
| 25/25 | Documentation directory |
| 15/15 | Documentation / homepage site — https://first-tree.ai/ |
| 10/10 | Repository description |
| 10/10 | Topics — 7 topics |
| 10/10 | Wiki |
Inputs used
| topics | ai-agents, claude-code, cli, codex, context-tree, context-wiki, harness-engineering |
| has_wiki | yes |
| homepage | https://first-tree.ai/ |
| has_readme | yes |
| has_docs_dir | yes |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
49
Security posture
49At risk
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 3.8/7.5 | Branch-Protection — branch protection is not maximal on development and all release branches |
| 2.5/2.5 | CI-Tests — 21 out of 21 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 6.8/7.5 | Code-Review — Found 19/21 approved changesets -- score normalized to 9 |
| 2.5/2.5 | Contributors — project has 4 contributing companies or organizations |
| 0/10 | Dangerous-Workflow — dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10 |
| 5/5 | Packaging — packaging workflow detected |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 5/5 | SAST — SAST tool is run on all commits |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 92 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 17 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 1 |
| scorecard_aggregate | 4.9 |
Excluded from scoring (no data or not applicable): signed_releases. Remaining weights renormalized.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
78
Agent context & guidance
85Excellent
How it's scored
| 45/45 | Agent instructions — AGENTS.md, CLAUDE.md, packages/qa/AGENTS.md |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 89 of 100 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.89 |
| agent_instruction_files | AGENTS.md, CLAUDE.md, packages/qa/AGENTS.md |
| agent_instruction_max_bytes | 7,641 |
Verify loop (build / test / typecheck)
64Moderate
How it's scored
| 0/18 | One-command bootstrap |
| 22/22 | Automated tests |
| 11/11 | Lint / format config — biome.json |
| 11/11 | Static type checking — apps/cli/tsconfig.json, packages/client/tsconfig.json, packages/server/tsconfig.json, packages/shared/tsconfig.json, packages/skill-evals/tsconfig.json, packages/web/tsconfig.json, tsconfig.json |
| 10/10 | Reproducible environment — Dockerfile, lockfile |
| 10/10 | Demonstrated agent practice — 14 of the last 100 commits agent-authored or agent-credited |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | pnpm-lock.yaml, uv.lock |
| has_dockerfile | yes |
| typed_language | yes |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | yes |
| typecheck_configs | apps/cli/tsconfig.json, packages/client/tsconfig.json, packages/server/tsconfig.json, packages/shared/tsconfig.json, packages/skill-evals/tsconfig.json, packages/web/tsconfig.json, tsconfig.json |
| agent_commit_share | 0.14 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
Code legibility for models
99Excellent
How it's scored
| 45/45 | Type-checkable code — TypeScript (statically typed) |
| 54.3/55 | Manageable file sizes — 23/1,850 source files over 60KB |
Inputs used
| primary_language | TypeScript |
| largest_source_bytes | 239,900 |
| source_files_sampled | 1,850 |
| oversized_source_files | 23 |
Key facts
78GitHub stars
10contributors
1,320commits, last 12 months
0days since last push
17releases
2bus factor
235open issues
npmpackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- Could not fetch npm package 'first-tree-dev' from its registry
- Could not fetch npm package 'doc-website' from its registry
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
Star and fork history 0 ★ / 22 ⇿
0Stars
22Forks
13Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 0Patch 13
OpenSSF Scorecard 4.9 / 10
4.9aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 5 | Branch-Protection | branch protection is not maximal on development and all release branches |
| 10 | CI-Tests | 21 out of 21 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 9 | Code-Review | Found 19/21 approved changesets -- score normalized to 9 |
| 10 | Contributors | project has 4 contributing companies or organizations |
| 0 | Dangerous-Workflow | dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10 |
| 10 | Packaging | packaging workflow detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 10 | SAST | SAST tool is run on all commits |
| 10 | Security-Policy | security policy file detected |
| n/a | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 92 existing vulnerabilities detected |
Direct dependencies 66
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| npm | @anthropic-ai/claude-agent-sdk | ^0.3.187 | apps/cli/package.json |
| npm | @botiverse/kimi-code-sdk | 0.26.0-botiverse.2 | apps/cli/package.json |
| npm | @inquirer/prompts | ^8.3.0 | apps/cli/package.json |
| npm | @openai/codex-sdk | ^0.144.1 | apps/cli/package.json |
| npm | commander | ^13.1.0 | apps/cli/package.json |
| npm | ejs | ^6.0.1 | apps/cli/package.json |
| npm | gray-matter | ^4.0.3 | apps/cli/package.json |
| npm | jose | ^6.0.0 | apps/cli/package.json |
| npm | mdast-util-from-markdown | ^2.0.3 | apps/cli/package.json |
| npm | semver | ^7.6.3 | apps/cli/package.json |
| npm | ws | ^8.20.0 | apps/cli/package.json |
| npm | yaml | ^2.8.3 | apps/cli/package.json |
| npm | zod | ^4.0.0 | apps/cli/package.json |
| npm | @anthropic-ai/claude-agent-sdk | ^0.3.187 | packages/client/package.json |
| npm | @botiverse/kimi-code-sdk | 0.26.0-botiverse.2 | packages/client/package.json |
| npm | @openai/codex-sdk | ^0.144.1 | packages/client/package.json |
| npm | @sentry/node | ^10.62.0 | packages/client/package.json |
| npm | ejs | ^6.0.1 | packages/client/package.json |
| npm | mdast-util-from-markdown | ^2.0.3 | packages/client/package.json |
| npm | pino | ^9.5.0 | packages/client/package.json |
| npm | semver | ^7.6.3 | packages/client/package.json |
| npm | smol-toml | ^1.7.0 | packages/client/package.json |
| npm | ws | ^8.20.0 | packages/client/package.json |
| npm | yaml | ^2.8.3 | packages/client/package.json |
| npm | zod | ^4.0.0 | packages/client/package.json |
| npm | @autotelic/fastify-opentelemetry | ^0.23.0 | packages/server/package.json |
| npm | @fastify/cors | ^11.2.0 | packages/server/package.json |
| npm | @fastify/rate-limit | ^10.3.0 | packages/server/package.json |
| npm | @fastify/static | ^9.0.0 | packages/server/package.json |
| npm | @fastify/websocket | ^11.2.0 | packages/server/package.json |
| npm | @first-tree/shared | workspace:* | packages/server/package.json |
| npm | @opentelemetry/api | ^1.9.0 | packages/server/package.json |
| npm | @pydantic/logfire-node | ^0.14.0 | packages/server/package.json |
| npm | bcrypt | ^6.0.0 | packages/server/package.json |
| npm | drizzle-orm | ^0.44.0 | packages/server/package.json |
| npm | ejs | ^6.0.1 | packages/server/package.json |
| npm | fastify | ^5.3.0 | packages/server/package.json |
| npm | gray-matter | ^4.0.3 | packages/server/package.json |
| npm | jose | ^6.0.0 | packages/server/package.json |
| npm | pino | ^9.5.0 | packages/server/package.json |
| npm | postgres | ^3.4.0 | packages/server/package.json |
| npm | semver | ^7.7.4 | packages/server/package.json |
| npm | zod | ^4.0.0 | packages/server/package.json |
| npm | yaml | ^2.7.0 | packages/shared/package.json |
| npm | zod | ^4.0.0 | packages/shared/package.json |
| npm | @first-tree/shared | workspace:* | packages/skill-evals/package.json |
| npm | @first-tree/shared | workspace:* | packages/web/package.json |
| npm | @radix-ui/react-dialog | ^1.1.15 | packages/web/package.json |
| npm | @radix-ui/react-label | ^2.1.8 | packages/web/package.json |
| npm | @radix-ui/react-slot | ^1.2.4 | packages/web/package.json |
| npm | @sentry/react | ^10.62.0 | packages/web/package.json |
| npm | @tailwindcss/typography | ^0.5.19 | packages/web/package.json |
| npm | @tanstack/react-query | ^5.95.0 | packages/web/package.json |
| npm | class-variance-authority | ^0.7.1 | packages/web/package.json |
| npm | clsx | ^2.1.1 | packages/web/package.json |
| npm | cmdk | ^1.1.1 | packages/web/package.json |
| npm | d3-hierarchy | ^3.1.2 | packages/web/package.json |
| npm | dompurify | ^3.4.2 | packages/web/package.json |
| npm | lucide-react | ^0.577.0 | packages/web/package.json |
| npm | react | ^19.1.0 | packages/web/package.json |
| npm | react-dom | ^19.1.0 | packages/web/package.json |
| npm | react-markdown | ^10.1.0 | packages/web/package.json |
| npm | react-router | ^7.13.1 | packages/web/package.json |
| npm | remark-breaks | ^4.0.0 | packages/web/package.json |
| npm | remark-gfm | ^4.0.1 | packages/web/package.json |
| npm | tailwind-merge | ^3.5.0 | packages/web/package.json |
All dependencies not collected
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"ai-agents",
"claude-code",
"cli",
"codex",
"context-tree",
"context-wiki",
"harness-engineering"
],
"is_fork": false,
"size_kb": 31781,
"has_wiki": true,
"homepage": "https://first-tree.ai/",
"languages": {
"CSS": 81286,
"EJS": 39552,
"HTML": 3862,
"Shell": 56290,
"Python": 3330,
"PLpgSQL": 13371,
"Dockerfile": 3249,
"JavaScript": 93755,
"TypeScript": 17524241
},
"pushed_at": "2026-07-22T16:01:18Z",
"created_at": "2026-03-20T03:23:41Z",
"owner_type": "Organization",
"updated_at": "2026-07-22T13:49:10Z",
"description": "First-tree routes work to the right agent, gives it the same context your team has, and loops humans in only when the rules say so. Lives in your GitHub. Open source.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript"
]
},
"owner": {
"blog": null,
"name": "Agent Team Foundation",
"type": "Organization",
"login": "agent-team-foundation",
"company": null,
"location": null,
"followers": 11,
"avatar_url": "https://avatars.githubusercontent.com/u/209578638?v=4",
"created_at": "2025-04-29T03:38:42Z",
"is_verified": null,
"public_repos": 10,
"account_age_days": 449
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.5.16",
"kind": "patch",
"published_at": "2026-07-17T14:04:41Z"
},
{
"tag": "v0.5.15",
"kind": "patch",
"published_at": "2026-07-15T07:55:57Z"
},
{
"tag": "v0.5.14",
"kind": "patch",
"published_at": "2026-07-15T04:43:01Z"
},
{
"tag": "v0.5.13",
"kind": "patch",
"published_at": "2026-07-10T12:03:47Z"
},
{
"tag": "v0.5.12",
"kind": "patch",
"published_at": "2026-07-09T02:47:50Z"
},
{
"tag": "v0.5.11",
"kind": "patch",
"published_at": "2026-06-29T10:20:54Z"
},
{
"tag": "v0.5.10",
"kind": "patch",
"published_at": "2026-06-26T14:37:03Z"
},
{
"tag": "v0.5.9",
"kind": "patch",
"published_at": "2026-06-24T11:22:49Z"
},
{
"tag": "v0.5.8",
"kind": "patch",
"published_at": "2026-06-21T12:41:29Z"
},
{
"tag": "v0.5.7",
"kind": "patch",
"published_at": "2026-06-17T13:19:31Z"
},
{
"tag": "v0.5.6",
"kind": "patch",
"published_at": "2026-06-11T06:56:06Z"
},
{
"tag": "v0.5.5",
"kind": "patch",
"published_at": "2026-06-10T11:04:12Z"
},
{
"tag": "v0.5.4",
"kind": "patch",
"published_at": "2026-06-10T10:04:22Z"
},
{
"tag": "v0.5.3",
"kind": "patch",
"published_at": "2026-05-28T06:25:20Z"
},
{
"tag": "v0.5.2",
"kind": "patch",
"published_at": "2026-05-26T06:14:57Z"
},
{
"tag": "v0.5.1",
"kind": "patch",
"published_at": "2026-05-22T11:45:17Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2026-05-22T10:56:45Z"
}
],
"recent_commits": [
{
"oid": "c56aeb1d0b554353d23cdaf53eac29a3c63884e1",
"body": "* fix: make context tree review repair first\n\n* fix: keep review discovery metadata only\n\n* fix: harden repair-first review gate\n\n* fix: ignore incomplete eval command events\n\n* fix: close remaining repair gate gaps\n\n* test: stabilize Context Review live gate\n\n* fix: close context review gate gaps\n\n\n[…]\nwording\n\n* test: close context review eval gaps\n\n* refactor: simplify context review repair gate\n\n* fix: refresh context review authority before repair\n\n* fix: refresh context authority before verdict",
"is_bot": false,
"headline": "fix: make Context Tree review repair-first (#1938)",
"author_name": "baixiaohang",
"author_login": "baixiaohang",
"committed_at": "2026-07-22T13:46:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8d9e6cb492daaeb6861c4992e6c1bed466a69ea3",
"body": "* fix(web): render sent mentions with display names\n\n* fix(web): harden rendered mention identity\n\n* fix(web): preserve duplicate mention disambiguation\n\n* fix(identity): preserve human mirrors and copy whitespace\n\n* fix(identity): unify member display name synchronization\n\n* fix(identity): linearize membership lifecycle locks\n\n* fix(web): keep human names on authoritative surfaces",
"is_bot": false,
"headline": "Render sent chat mentions with display names (#1923)",
"author_name": "gandy",
"author_login": "Gandy2025",
"committed_at": "2026-07-22T10:56:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c349a5b9097b8899e19504988ed0649694d7767c",
"body": "Add a staging-only Admin and Member Context Tree setup handoff with server-authoritative bootstrap commands, role-safe fixture state, full-prompt clipboard recovery, and fail-closed release-channel gating.",
"is_bot": false,
"headline": "feat: add Context Tree setup preview (#1939)",
"author_name": "gandy",
"author_login": "Gandy2025",
"committed_at": "2026-07-22T10:45:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8dd019773bbb12c54c16ab9d9f7d07bd69941b27",
"body": null,
"is_bot": false,
"headline": "fix(context-review): bind merge to approved head (#1940)",
"author_name": "gandy",
"author_login": "Gandy2025",
"committed_at": "2026-07-22T09:19:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "45ed5de96d9f5a1ada7bb2aff3510a3dece62b58",
"body": "* feat(review): strengthen final-tree quality pass\n\n* feat(review): add context-specific review lenses\n\n* feat(review): calibrate cross-domain quality gate\n\n* test(review): gate calibrated scope expansion\n\n* fix(review): require attributable gate evidence\n\n* fix(review): close gate evidence false passes\n\n* fix(review): reject empty-scope gate evidence",
"is_bot": false,
"headline": "feat(review): strengthen final-tree quality pass (#1935)",
"author_name": "gandy",
"author_login": "Gandy2025",
"committed_at": "2026-07-22T08:21:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "39433ed4a51d67c64abe0e91b906b7f1abff58d8",
"body": "* fix(web): collapse live output after timeline jump\n\n* fix(web): collapse live output on composer focus\n\n* fix(web): treat composer input as collapse intent\n\n* style(web): format composer status regression\n\n* fix(web): collapse output on outside interaction\n\n* fix(web): preserve outside actions before collapse\n\n* fix(web): retain pointer intent through activation\n\n* test(web): cover click-only collapse focus ownership\n\n* fix(web): preserve outside interaction boundaries",
"is_bot": false,
"headline": "Collapse live output on strong context transitions (#1937)",
"author_name": "gandy",
"author_login": "Gandy2025",
"committed_at": "2026-07-22T07:10:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c6ccdbeb2269ee5f68eee9c2a4e0e24f1b58eff6",
"body": "* chore(web): refresh WeChat group QR (valid through 2026-07-28)\n\nThe previous group QR printed a July 15 validity and has expired —\nscans were failing silently. Same group (First Tree 精神股东), re-exported\nby the group owner; cropped to the QR square with a white quiet zone at\n900x900 like the origina\n[…]\n-encoded and the crop\nkept the container. Same pixels, real PNG encoding now.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(web): refresh WeChat group QR (valid through 2026-07-28) (#1934)",
"author_name": "Serena",
"author_login": "serenakeyitan",
"committed_at": "2026-07-22T04:17:09Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "1d8ede615c230c9268dd5ee52e4e3e3bc5729a6e",
"body": "* feat(context-review): restore GitHub App review flow\n\n* fix(context-review): expose superseded run error\n\n* refactor(context-review): simplify live PR review authority\n\n* fix(context-review): tighten trusted publication boundaries\n\n* fix(context-review): harden publication reconciliation\n\n* test(c\n[…]\nncy\n\n* build(skill-evals): declare shared task edge\n\n* fix(skills): preserve merged review contract wording\n\n* fix(skills): restore GitLab briefing contract\n\n* ci: explicitly disable Droid auto review",
"is_bot": false,
"headline": "feat(context-review): restore GitHub App review flow (#1916)",
"author_name": "baixiaohang",
"author_login": "baixiaohang",
"committed_at": "2026-07-22T03:59:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1fafd94a5b98b952f654567c759473dfcb310793",
"body": null,
"is_bot": false,
"headline": "fix(skills): align GitLab workflow guidance (#1919)",
"author_name": "yuezengwu",
"author_login": "yuezengwu",
"committed_at": "2026-07-22T03:27:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc73d659627653a0f6b4a51a1a70aa649176597e",
"body": null,
"is_bot": false,
"headline": "fix: capture angle-bracketed workspace images (#1920)",
"author_name": "gandy",
"author_login": "Gandy2025",
"committed_at": "2026-07-22T02:51:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "244fcbd8d9e8175d14dc54fa7fc30a9adc7984e2",
"body": "* feat(web): shorten trusted GitLab entity links\n\n* fix(web): harden GitLab link trust boundaries",
"is_bot": false,
"headline": "feat(web): shorten trusted GitLab entity links (#1929)",
"author_name": "gandy",
"author_login": "Gandy2025",
"committed_at": "2026-07-22T02:44:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b010397cbfca4026e32bb6884f2b0996079c1d91",
"body": null,
"is_bot": false,
"headline": "fix: reverse composer disclosure chevron (#1931)",
"author_name": "gandy",
"author_login": "Gandy2025",
"committed_at": "2026-07-22T02:07:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf28554018b749b3b899c1d38af1373839b85941",
"body": "* fix: connect live status to the composer\n\n* fix: simplify expanded composer status\n\n* fix: address composer status accessibility review",
"is_bot": false,
"headline": "Connect current agent output to the composer (#1918)",
"author_name": "gandy",
"author_login": "Gandy2025",
"committed_at": "2026-07-21T14:31:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0fec7e845366df9a6436ceb43c5112335c7c38d2",
"body": "* feat: add composer live activity inspector\n\n* fix: address live activity review findings\n\n* fix: address live activity review feedback\n\n* fix: preserve activity inspector evidence and layering\n\n* test: cover activity and mention escape layering",
"is_bot": false,
"headline": "feat: add composer live activity inspector (#1901)",
"author_name": "gandy",
"author_login": "Gandy2025",
"committed_at": "2026-07-21T05:59:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "02a995b07afe99dd8c5ad249331081a228072c0d",
"body": "* feat: Add droid.yml workflow\n\n* feat: Add droid-review.yml workflow\n\n* ci: refresh SHA on chore/add-factory-workflows to clear stale Check Branch Name result\n\n* fix: pin droid-action to v5 SHA, add fork-PR guard and synchronize trigger\n\nAddress review feedback from baixiaohang on PR #1908:\n- Pin F\n[…]\naction with secrets\n in a job that checks out the fork head\n\n* fix(ci): fail closed in droid.yml fork guard (address review)\n\n* fix(ci): least-privilege contents:read for auto-review (address review)",
"is_bot": false,
"headline": "chore: Add Factory GitHub workflows (#1908)",
"author_name": "liuchao-001",
"author_login": "liuchao-001",
"committed_at": "2026-07-21T05:56:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c58cbf6bc545e7dc18c33d87aa438f1c7d27b9ac",
"body": "* fix: restore agent follow human fallback\n\n* fix: preserve GitHub follower wake lines\n\n* fix: ignore inactive SCM wake targets",
"is_bot": false,
"headline": "fix: restore multi-human agent follow fallback (#1898)",
"author_name": "baixiaohang",
"author_login": "baixiaohang",
"committed_at": "2026-07-21T04:33:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "194186c1a6a7b90ccbc913c9c804b6d7b982e427",
"body": null,
"is_bot": false,
"headline": "chore(ci): parallelize test jobs (#1904)",
"author_name": "baixiaohang",
"author_login": "baixiaohang",
"committed_at": "2026-07-21T04:33:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "63b5a33ea3322691925dc098ba6ca9645700e86d",
"body": null,
"is_bot": false,
"headline": "fix: attribute trusted SCM cards as system in agent prompts (#1891)",
"author_name": "baixiaohang",
"author_login": "baixiaohang",
"committed_at": "2026-07-21T02:45:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "17043568ab256d2429d7bbb8a9c5c49bb891f3b6",
"body": "…-sync-62cf0f5c52f1\n\nSync GitLab main through the GitHub gate",
"is_bot": false,
"headline": "Merge pull request #1841 from agent-team-foundation/merge/gitlab-main…",
"author_name": "yuezengwu",
"author_login": "yuezengwu",
"committed_at": "2026-07-20T06:28:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "62cf0f5c52f10d86be19f98010e337d9294fd14c",
"body": null,
"is_bot": false,
"headline": "fix: hash CLI tests with workspace dependencies",
"author_name": "baixiaohang",
"author_login": "baixiaohang",
"committed_at": "2026-07-20T06:06:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e26f6bc75de199e78d181fe20bdc0d39e289af8d",
"body": null,
"is_bot": false,
"headline": "fix: restore Turbo cache for CLI tests",
"author_name": "baixiaohang",
"author_login": "baixiaohang",
"committed_at": "2026-07-20T06:06:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb5078a7675b324bfd2d946c25cbf5a0d58aea0c",
"body": null,
"is_bot": false,
"headline": "Fix managed Context Review projection echoes",
"author_name": "Gandy",
"author_login": "Gandy2025",
"committed_at": "2026-07-20T06:01:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db081c3bef2d54fa7d8146cef88e6971fbb993c8",
"body": "…-sync-2bae45b485d2\n\nSync GitLab main through the GitHub gate",
"is_bot": false,
"headline": "Merge pull request #1840 from agent-team-foundation/merge/gitlab-main…",
"author_name": "yuezengwu",
"author_login": "yuezengwu",
"committed_at": "2026-07-20T05:12:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2bae45b485d269bdf0f6d6703ff88c3256a74aa3",
"body": null,
"is_bot": false,
"headline": "fix: align cross-provider chat auto-archive",
"author_name": "baixiaohang",
"author_login": "baixiaohang",
"committed_at": "2026-07-20T04:01:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9002aca5b9e17cbed9896c200657d7831c63b496",
"body": "…-sync-9214a90396b2\n\nSync GitLab main through the GitHub gate",
"is_bot": false,
"headline": "Merge pull request #1839 from agent-team-foundation/merge/gitlab-main…",
"author_name": "yuezengwu",
"author_login": "yuezengwu",
"committed_at": "2026-07-20T02:24:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9214a90396b2545a337609e6cd50030b39b938d1",
"body": null,
"is_bot": false,
"headline": "fix(server): declare inherited write preflight rate limit",
"author_name": "YueZengwu",
"author_login": "yuezengwu",
"committed_at": "2026-07-20T02:10:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e4aebc226f55d59230fac852bdf5eacc8de08e09",
"body": null,
"is_bot": false,
"headline": "feat: make Context Tree Seed portable",
"author_name": "Gandy2025",
"author_login": "Gandy2025",
"committed_at": "2026-07-19T16:28:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "324a545926f961c3ff6978972b4ff1aadd7be0ee",
"body": null,
"is_bot": false,
"headline": "merge: sync main for exact-head review",
"author_name": "Gandy2025",
"author_login": "Gandy2025",
"committed_at": "2026-07-19T12:07:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "02bd8a7b30ff37466165cf740aeb1267d2bf7f18",
"body": null,
"is_bot": false,
"headline": "fix(cli): expose BYO write preflight API",
"author_name": "Gandy2025",
"author_login": "Gandy2025",
"committed_at": "2026-07-19T10:56:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "22ead0256d6747f07edc73267c382c8f8785dc2a",
"body": null,
"is_bot": false,
"headline": "feat: add BYO Context Tree write preflight",
"author_name": "Gandy2025",
"author_login": "Gandy2025",
"committed_at": "2026-07-19T10:40:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aa72f5e11767ebddbbe2f63b8308c40a9e4190cf",
"body": "…-sync-dcd725cd3860\n\nSync GitLab main through the GitHub gate",
"is_bot": false,
"headline": "Merge pull request #1836 from agent-team-foundation/merge/gitlab-main…",
"author_name": "yuezengwu",
"author_login": "yuezengwu",
"committed_at": "2026-07-19T10:25:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dcd725cd386002bb11da7ab9343740cd8bbf1f57",
"body": null,
"is_bot": false,
"headline": "fix: expose global rate limit to CodeQL",
"author_name": "YueZengwu",
"author_login": "yuezengwu",
"committed_at": "2026-07-19T10:13:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dc4f419fb6a2b2f22b14c5840403807ac93faf8e",
"body": null,
"is_bot": false,
"headline": "fix: place CodeQL suppression on route installation",
"author_name": "YueZengwu",
"author_login": "yuezengwu",
"committed_at": "2026-07-19T10:01:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af5998899b31cfb20eedd9479d7175786c7bd048",
"body": null,
"is_bot": false,
"headline": "fix: suppress CodeQL for globally rate-limited chat route",
"author_name": "Yue Zengwu",
"author_login": "yuezengwu",
"committed_at": "2026-07-19T09:53:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b2145ead054b85995a17f7576cd91099a80ee89d",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' into 'feat/byo-read-task-snapshot'",
"author_name": "YueZengwu",
"author_login": "yuezengwu",
"committed_at": "2026-07-19T09:34:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e2003444db66750f556b6667739074c73c81e11",
"body": "Only mapped 404/501/502/504 degrade silently to null. Auth/Server\nfailures (401/403/500/503, …) keep DEFAULT+Custom usable but show an\nexplicit alert + Retry instead of the ordinary unavailable help text.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix(web): surface rejected model-catalog queries with retry",
"author_name": "YueZengwu",
"author_login": "yuezengwu",
"committed_at": "2026-07-19T08:37:48Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d3b6628a384d1d6c6b04ee900b734863b6d893c0",
"body": "Daemon start now registers onProviderModelsList; the test runtime mock\nmust expose it (and sendProviderModelsResult). Also clear FIRST_TREE_CLIENT_ID\nso host agent env cannot override the fixture client.yaml id.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "test(cli): stub provider-models callbacks on daemon-start double",
"author_name": "YueZengwu",
"author_login": "yuezengwu",
"committed_at": "2026-07-19T08:37:48Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "c275f9a2df08380d099234707c45d36bc667bbe3",
"body": "Unblocks root `pnpm check` for QA F1 on the formal candidate.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "style(web): biome-format model catalog picker files",
"author_name": "YueZengwu",
"author_login": "yuezengwu",
"committed_at": "2026-07-19T08:37:48Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "682dad9aea26a09439014584ffddfe44478b04a0",
"body": "Absorb Kiven's acceptance-matrix case for unset → onChange(\"\").\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "test(web): cover DEFAULT empty-string save on catalog picker",
"author_name": "YueZengwu",
"author_login": "yuezengwu",
"committed_at": "2026-07-19T08:37:48Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "687727bd282bd6845de4d5e9afa706e19811f540",
"body": "…usable\n\nCombine Kiven's Phase 1 web picker onto the GitHub backend head and keep\nDEFAULT + Custom reachable during load/unavailable discovery. Silent degrade\ncovers 404/501/502/504 only — 503 is outside the Phase 1 contract.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "feat(web): integrate model catalog picker with DEFAULT/Custom always …",
"author_name": "YueZengwu",
"author_login": "yuezengwu",
"committed_at": "2026-07-19T08:37:48Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f6fcf60df48c71363d9ab063a0d991e9828ae798",
"body": "Guard durable model-catalog writes with id+instance_id in one UPDATE,\nreject replaced local sockets, and physically bound rendezvous keys by\nage/count so metadata cannot grow without limit.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix(runtime): atomic instance-scoped catalog persist with prune",
"author_name": "YueZengwu",
"author_login": "yuezengwu",
"committed_at": "2026-07-19T08:37:48Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "62506cc9fc873162333ccc0a8f5993b1d7a050ae",
"body": "Keep Notifier test doubles complete after cross-replica model-catalog\nNOTIFY channels so tsc and ws-client-branch-fake stay green locally.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "test(server): stub new daemon-command Notifier hooks in fakes",
"author_name": "YueZengwu",
"author_login": "yuezengwu",
"committed_at": "2026-07-19T08:37:48Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "48fd37aabc5ebe99ba61a8517fb5d382e477a383",
"body": "Adopt kiven’s provider-model-catalog schema byte-for-byte and map computer\noffline/timeout to 502/504 so the web picker can silently degrade.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix(runtime): align model-catalog contract with web MR",
"author_name": "YueZengwu",
"author_login": "yuezengwu",
"committed_at": "2026-07-19T08:37:48Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ff9867e672984fb7fb096a4979593c7ae98611c2",
"body": "Atomic jsonb_set for catalog refs and capabilities, DB fallback when the\nresult wake is lost, and instance_id-scoped command/result delivery so\nstale sockets after takeover cannot win the RPC.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix(runtime): harden model-catalog rendezvous under concurrency",
"author_name": "YueZengwu",
"author_login": "yuezengwu",
"committed_at": "2026-07-19T08:37:48Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "670e7646d64ce647acca6fd0f55cd579c22f3af5",
"body": "Route provider-models commands/results across server replicas via PG NOTIFY\nplus durable clients.metadata rendezvous, and parse Kimi catalogs with\nsmol-toml including KIMI_CODE_HOME and bare model aliases.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix(runtime): cross-replica model catalog RPC and Kimi discovery",
"author_name": "YueZengwu",
"author_login": "yuezengwu",
"committed_at": "2026-07-19T08:37:48Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "543f036da093763044a246e3e853266e6d8bd3e3",
"body": "Keep host-local discovery + GET models API in this PR; revert web UI so\nfrontend ownership stays with kiven against the shared catalog contract.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "refactor: leave Web Model picker to kiven-fte",
"author_name": "YueZengwu",
"author_login": "yuezengwu",
"committed_at": "2026-07-19T08:37:48Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "46ed96d416e7b5e1d92234198682dbbe7d37caa6",
"body": "Rewrite Cursor/Kimi parsers without polynomial regexes, fix Biome\nexport order/formatting, and prepare a feat/-prefixed branch for CI.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "fix(runtime): satisfy CodeQL and branch/lint CI for model catalogs",
"author_name": "YueZengwu",
"author_login": "yuezengwu",
"committed_at": "2026-07-19T08:37:48Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "0ec05ff941ebffa56f194d83f3500a7de6027d1e",
"body": "Discover model ids from the bound computer (agent models / ~/.kimi-code)\nvia a correlated daemon RPC, and render DEFAULT + catalog + custom id\nfallbacks in the agent Model picker.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "feat(runtime): host-local model catalogs for Cursor and Kimi",
"author_name": "YueZengwu",
"author_login": "yuezengwu",
"committed_at": "2026-07-19T08:37:48Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "903719fbdda4b41b71e0b1bc475ad501566d28b9",
"body": null,
"is_bot": false,
"headline": "test(skill-evals): accept natural JWT fact phrasing",
"author_name": "Gandy2025",
"author_login": "Gandy2025",
"committed_at": "2026-07-19T07:41:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "49e150a205dc0b0253653d31f14b96aaf55eafab",
"body": null,
"is_bot": false,
"headline": "fix(server): accept GitLab entity URL variants",
"author_name": "Gandy2025",
"author_login": "Gandy2025",
"committed_at": "2026-07-19T07:25:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "603f9c909bca63ae92cc7516a97039de625cba57",
"body": null,
"is_bot": false,
"headline": "fix(context-tree): accept exact symlink placeholders",
"author_name": "Gandy2025",
"author_login": "Gandy2025",
"committed_at": "2026-07-19T07:21:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c12682f530411c76fe30df8d76c4b348d366e4a",
"body": null,
"is_bot": false,
"headline": "fix(context-tree): reject relative snapshot escapes",
"author_name": "Gandy2025",
"author_login": "Gandy2025",
"committed_at": "2026-07-19T06:51:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2e5bba41f269e17134ecd100251d7cab8b4f21d",
"body": null,
"is_bot": false,
"headline": "fix(context-tree): contain snapshot symlink reads",
"author_name": "Gandy2025",
"author_login": "Gandy2025",
"committed_at": "2026-07-19T06:39:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "40b6a22b938b83e997db6e23e5cefa35dfd1bd9e",
"body": null,
"is_bot": false,
"headline": "fix(cli): separate human and JSON read output",
"author_name": "Gandy2025",
"author_login": "Gandy2025",
"committed_at": "2026-07-19T05:57:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "16703c7cc0afa43ef92c108928659d38141f6a39",
"body": null,
"is_bot": false,
"headline": "fix(web): remove legacy final-text visibility toggle",
"author_name": "Gandy",
"author_login": "Gandy2025",
"committed_at": "2026-07-19T04:59:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "997e3560bd7ff8c7b6d7847aa5744f3161224446",
"body": null,
"is_bot": false,
"headline": "feat(context-tree): add task-scoped BYO read snapshots",
"author_name": "Gandy2025",
"author_login": "Gandy2025",
"committed_at": "2026-07-19T04:59:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "214fb99352aee66c2cf894df41e807f552e937b9",
"body": null,
"is_bot": false,
"headline": "Merge latest origin/main into feat/agent-context-review-v2",
"author_name": "Gandy2025",
"author_login": "Gandy2025",
"committed_at": "2026-07-18T06:35:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d786a8987787d6787df8dddfa7ab340943e238ce",
"body": "…-sync-fc57bde0bf92\n\nSync GitLab main through the GitHub gate",
"is_bot": false,
"headline": "Merge pull request #1828 from agent-team-foundation/merge/gitlab-main…",
"author_name": "yuezengwu",
"author_login": "yuezengwu",
"committed_at": "2026-07-18T06:32:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0bd344e13997453719872703ecf918da16cebeaf",
"body": null,
"is_bot": false,
"headline": "Merge latest origin/main into feat/agent-context-review-v2",
"author_name": "Gandy2025",
"author_login": "Gandy2025",
"committed_at": "2026-07-18T06:23:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fc57bde0bf92a69c27ef3ae6f2c68c86132310e7",
"body": null,
"is_bot": false,
"headline": "feat: show GitHub follows in mobile chat details",
"author_name": "Gandy",
"author_login": "Gandy2025",
"committed_at": "2026-07-18T06:09:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7a770b7f3f0c8b3b204b038956ff59fd6fb6fcbd",
"body": null,
"is_bot": false,
"headline": "Merge latest origin/main into feat/agent-context-review-v2",
"author_name": "Gandy2025",
"author_login": "Gandy2025",
"committed_at": "2026-07-18T06:06:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "69df7d1637128ce7f7b6fffc3678029ad7ec26d3",
"body": "# Conflicts:\n#\tpackages/server/src/api/webhooks/github-app.ts",
"is_bot": false,
"headline": "Merge origin/main into feat/agent-context-review-v2",
"author_name": "Gandy2025",
"author_login": "Gandy2025",
"committed_at": "2026-07-18T06:06:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "894b83eac80de12972e3fb5f7104cc809d5eb375",
"body": null,
"is_bot": false,
"headline": "feat: add mobile chat triage actions",
"author_name": "Gandy",
"author_login": "Gandy2025",
"committed_at": "2026-07-18T06:00:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ced56c19627414661ec2e70b62ed1551dc063591",
"body": "…-sync-972b7f74b497\n\nSync GitLab main through the GitHub gate",
"is_bot": false,
"headline": "Merge pull request #1826 from agent-team-foundation/merge/gitlab-main…",
"author_name": "yuezengwu",
"author_login": "yuezengwu",
"committed_at": "2026-07-18T04:32:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e44638ce605dd7f7a1868d0e76d2a85ad214f281",
"body": null,
"is_bot": false,
"headline": "fix: preserve managed review inputs and generic delivery",
"author_name": "Gandy2025",
"author_login": "Gandy2025",
"committed_at": "2026-07-18T03:30:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "526cb4a1b8188856b5f6903f0a535f6db8105a81",
"body": null,
"is_bot": false,
"headline": "feat: bridge GitHub App events into managed reviews",
"author_name": "Gandy2025",
"author_login": "Gandy2025",
"committed_at": "2026-07-18T03:00:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "972b7f74b49749a3203f193915de76ff601fbd89",
"body": null,
"is_bot": false,
"headline": "fix(web): contain markdown table overflow",
"author_name": "Gandy2025",
"author_login": "Gandy2025",
"committed_at": "2026-07-18T02:33:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4b1a7c9a3e3d670ed57e28cc7cb228f2a792222d",
"body": null,
"is_bot": false,
"headline": "fix: serialize review dispatch membership",
"author_name": "Gandy2025",
"author_login": "Gandy2025",
"committed_at": "2026-07-17T14:10:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6cdd4cf16826cd4ef8c33975726a8b3907c36021",
"body": null,
"is_bot": false,
"headline": "release: bump apps/cli to v0.5.16 (#1825)",
"author_name": "baixiaohang",
"author_login": "baixiaohang",
"committed_at": "2026-07-17T13:48:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a65a5ba955c80d373b779035a75e66cd0cd4acb1",
"body": "…-sync-529f1a28b187\n\nSync GitLab main through the GitHub gate",
"is_bot": false,
"headline": "Merge pull request #1823 from agent-team-foundation/merge/gitlab-main…",
"author_name": "yuezengwu",
"author_login": "yuezengwu",
"committed_at": "2026-07-17T13:47:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "529f1a28b1873c267ae66e2011137596aa589596",
"body": null,
"is_bot": false,
"headline": "chore: sync landing campaign measurement with main",
"author_name": "Gandy2025",
"author_login": "Gandy2025",
"committed_at": "2026-07-17T13:06:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d59c83cbfd5572e11a3f3cdefd1b7df6f92d15b7",
"body": "…-sync-7c41974e34ab\n\nSync GitLab main through the GitHub gate",
"is_bot": false,
"headline": "Merge pull request #1822 from agent-team-foundation/merge/gitlab-main…",
"author_name": "yuezengwu",
"author_login": "yuezengwu",
"committed_at": "2026-07-17T13:00:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26bb9f0bd302a47037bd4531c4c99c92898a634e",
"body": null,
"is_bot": false,
"headline": "fix: harden Agent Review integration",
"author_name": "Gandy2025",
"author_login": "Gandy2025",
"committed_at": "2026-07-17T12:50:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c41974e34abf11383d38e657c1dfe67ec1f6395",
"body": null,
"is_bot": false,
"headline": "fix: distinguish OAuth cookie metadata from secrets",
"author_name": "YueZengwu",
"author_login": "yuezengwu",
"committed_at": "2026-07-17T12:49:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f961f072a12bcaf246bcdb1b7c7d82051b78716b",
"body": null,
"is_bot": false,
"headline": "fix: suppress CodeQL at OAuth cookie sinks",
"author_name": "YueZengwu",
"author_login": "yuezengwu",
"committed_at": "2026-07-17T12:43:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "58149c723ce957ab4dcc3f5abd79d3223e8955db",
"body": null,
"is_bot": false,
"headline": "fix: isolate OAuth cookie header construction",
"author_name": "YueZengwu",
"author_login": "yuezengwu",
"committed_at": "2026-07-17T12:40:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f5b57a2a90e95a0c4082d7ac6f4e0e9c14abbdb7",
"body": null,
"is_bot": false,
"headline": "fix: align CodeQL suppression with cookie sink",
"author_name": "YueZengwu",
"author_login": "yuezengwu",
"committed_at": "2026-07-17T12:34:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "20fd39ea909a4014332bd514bba7cc86b6030294",
"body": null,
"is_bot": false,
"headline": "fix: unblock GitLab synchronization checks",
"author_name": "YueZengwu",
"author_login": "yuezengwu",
"committed_at": "2026-07-17T12:30:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "559d15a751292b713379c4c9175add89b2083664",
"body": null,
"is_bot": false,
"headline": "fix: close OAuth analytics review gaps",
"author_name": "Gandy2025",
"author_login": "Gandy2025",
"committed_at": "2026-07-17T11:37:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c024089b0290de8de45ebc5afabf6f860defc8f",
"body": null,
"is_bot": false,
"headline": "fix: complete growth funnel observability",
"author_name": "Gandy2025",
"author_login": "Gandy2025",
"committed_at": "2026-07-17T11:02:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "53d5902f6db83e37e8ab83b8d1656954a873e1af",
"body": null,
"is_bot": false,
"headline": "fix: restore onboarding analytics delivery",
"author_name": "Gandy2025",
"author_login": "Gandy2025",
"committed_at": "2026-07-17T11:02:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3600b50af09148d4ac2e64a3c12ed11c1b211564",
"body": null,
"is_bot": false,
"headline": "feat: align SCM entity attention semantics",
"author_name": "Bai Xiaohang",
"author_login": "baixiaohang",
"committed_at": "2026-07-17T10:55:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a006388c8e60eb4419bba4f2b543cbc6ee06f27",
"body": null,
"is_bot": false,
"headline": "feat: add stable Agent Review write dispatch",
"author_name": "Gandy2025",
"author_login": "Gandy2025",
"committed_at": "2026-07-17T10:52:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "01902412f25caa8dae07e8bc912c694c42a1899a",
"body": null,
"is_bot": false,
"headline": "fix: bind managed review results to reviewer",
"author_name": "Gandy2025",
"author_login": "Gandy2025",
"committed_at": "2026-07-17T10:26:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c46609f2329390866b2626eba3bfb7aafdaf1e45",
"body": "…-sync-b893e5360d7e\n\nSync GitLab main through the GitHub gate",
"is_bot": false,
"headline": "Merge pull request #1812 from agent-team-foundation/merge/gitlab-main…",
"author_name": "yuezengwu",
"author_login": "yuezengwu",
"committed_at": "2026-07-17T09:21:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b893e5360d7e92ddb3ab6cc235829bc981662f91",
"body": null,
"is_bot": false,
"headline": "feat: add Kimi Code runtime provider",
"author_name": "YueZengwu",
"author_login": "yuezengwu",
"committed_at": "2026-07-17T08:59:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ef48db3dab66e48e3ee8fd2d4d5a9a7c798389a",
"body": null,
"is_bot": false,
"headline": "feat: add agent context review workflow",
"author_name": "Gandy2025",
"author_login": "Gandy2025",
"committed_at": "2026-07-17T08:49:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6513a3c216cf3ab5bd489b1dfe4431b5551fee87",
"body": "…-sync-f737350c58ab\n\nSync GitLab main through the GitHub gate",
"is_bot": false,
"headline": "Merge pull request #1811 from agent-team-foundation/merge/gitlab-main…",
"author_name": "yuezengwu",
"author_login": "yuezengwu",
"committed_at": "2026-07-17T08:09:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f737350c58abe682721e93552a03f54e0b7dc2bf",
"body": null,
"is_bot": false,
"headline": "fix(skills): remove context repo approval gate",
"author_name": "Gandy2025",
"author_login": "Gandy2025",
"committed_at": "2026-07-17T07:42:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad705bc4c892f26c6db61f96b39ba7c9a1f807fa",
"body": null,
"is_bot": false,
"headline": "fix(gitlab): surface and control automatic chat bindings",
"author_name": "baixiaohang",
"author_login": "baixiaohang",
"committed_at": "2026-07-17T07:31:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8bb737a01270fd775a4653f2a4344ae3f74b1e37",
"body": null,
"is_bot": false,
"headline": "Lighten participant hovercard navigation",
"author_name": "Gandy",
"author_login": "Gandy2025",
"committed_at": "2026-07-17T07:18:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a896004d3b132651311bb0dd06216abb87c3dece",
"body": "…-sync-b1069b368b92\n\nSync GitLab main through the GitHub gate",
"is_bot": false,
"headline": "Merge pull request #1808 from agent-team-foundation/merge/gitlab-main…",
"author_name": "yuezengwu",
"author_login": "yuezengwu",
"committed_at": "2026-07-17T06:54:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b1069b368b92439a35487dba5a3babc9611ce6c4",
"body": null,
"is_bot": false,
"headline": "feat: activate agent readiness campaign",
"author_name": "Gandy2025",
"author_login": "Gandy2025",
"committed_at": "2026-07-17T06:37:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4aba41d361ae286175e4d469c589443e855c291d",
"body": "…-sync-298be14b6608\n\nSync GitLab main through the GitHub gate",
"is_bot": false,
"headline": "Merge pull request #1807 from agent-team-foundation/merge/gitlab-main…",
"author_name": "yuezengwu",
"author_login": "yuezengwu",
"committed_at": "2026-07-17T05:39:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "298be14b6608adffd3517ea97d371f9a716fbbe2",
"body": "Merge account settings into Settings\n\nSee merge request first-tree/first-tree!5",
"is_bot": false,
"headline": "Merge branch 'feat/settings-account-ia' into 'main'",
"author_name": "Yue Zengwu",
"author_login": "yuezengwu",
"committed_at": "2026-07-17T05:19:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9278f9944a6dafaebc4cfef27844a881eb553a62",
"body": null,
"is_bot": false,
"headline": "Merge account settings into Settings",
"author_name": "Gandy",
"author_login": "Gandy2025",
"committed_at": "2026-07-17T05:19:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "328dfd40a8ea2cd4aa458176bb822f7b081475bd",
"body": "…-sync-843a88543ddc\n\nSync GitLab main through the GitHub gate",
"is_bot": false,
"headline": "Merge pull request #1806 from agent-team-foundation/merge/gitlab-main…",
"author_name": "yuezengwu",
"author_login": "yuezengwu",
"committed_at": "2026-07-17T05:09:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "843a88543ddc3f153756245560674680851144e5",
"body": "Add GitLab entity attention CLI\n\nSee merge request first-tree/first-tree!10",
"is_bot": false,
"headline": "Merge branch 'feat/gitlab-entity-attention-cli' into 'main'",
"author_name": "Bai Xiaohang",
"author_login": "baixiaohang",
"committed_at": "2026-07-17T04:52:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ce134d4bb3298d315d1a5c2ccb050c489335a7c",
"body": null,
"is_bot": false,
"headline": "Add GitLab entity attention CLI",
"author_name": "Bai Xiaohang",
"author_login": "baixiaohang",
"committed_at": "2026-07-17T04:52:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d8110102f7753e99db4c5ee4906714cb6f2031ae",
"body": "…-sync-78d7e5d772aa\n\nSync GitLab main through the GitHub gate",
"is_bot": false,
"headline": "Merge pull request #1805 from agent-team-foundation/merge/gitlab-main…",
"author_name": "yuezengwu",
"author_login": "yuezengwu",
"committed_at": "2026-07-17T03:54:44Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 17,
"commits_last_year": 1320,
"latest_release_at": "2026-07-17T14:04:41Z",
"latest_release_tag": "v0.5.16",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 18,
"days_since_latest_release": 5,
"mean_days_between_releases": 3.3
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 87,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"ecosystem": {
"packages": []
},
"popularity": {
"forks": 22,
"stars": 78,
"watchers": 1,
"fork_history": {
"days": [
{
"date": "2026-06-09",
"count": 2
},
{
"date": "2026-06-10",
"count": 1
},
{
"date": "2026-06-16",
"count": 1
},
{
"date": "2026-06-18",
"count": 1
},
{
"date": "2026-06-19",
"count": 2
},
{
"date": "2026-06-21",
"count": 2
},
{
"date": "2026-06-23",
"count": 1
},
{
"date": "2026-06-24",
"count": 1
},
{
"date": "2026-07-08",
"count": 2
},
{
"date": "2026-07-10",
"count": 2
},
{
"date": "2026-07-12",
"count": 2
},
{
"date": "2026-07-15",
"count": 1
},
{
"date": "2026-07-17",
"count": 3
},
{
"date": "2026-07-20",
"count": 1
}
],
"complete": true,
"collected": 22,
"total_forks": 22
},
"star_history": null,
"open_issues_and_prs": 277
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"apps/cli/tsconfig.json",
"packages/client/tsconfig.json",
"packages/server/tsconfig.json",
"packages/shared/tsconfig.json",
"packages/skill-evals/tsconfig.json",
"packages/web/tsconfig.json",
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 239900,
"source_files_sampled": 1850,
"oversized_source_files": 23,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md",
"packages/qa/AGENTS.md"
],
"agent_instruction_max_bytes": 7641
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "@anthropic-ai/claude-agent-sdk",
"manifest": "apps/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^0.3.187"
},
{
"name": "@botiverse/kimi-code-sdk",
"manifest": "apps/cli/package.json",
"ecosystem": "npm",
"version_constraint": "0.26.0-botiverse.2"
},
{
"name": "@inquirer/prompts",
"manifest": "apps/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^8.3.0"
},
{
"name": "@openai/codex-sdk",
"manifest": "apps/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^0.144.1"
},
{
"name": "commander",
"manifest": "apps/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^13.1.0"
},
{
"name": "ejs",
"manifest": "apps/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^6.0.1"
},
{
"name": "gray-matter",
"manifest": "apps/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^4.0.3"
},
{
"name": "jose",
"manifest": "apps/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^6.0.0"
},
{
"name": "mdast-util-from-markdown",
"manifest": "apps/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^2.0.3"
},
{
"name": "semver",
"manifest": "apps/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^7.6.3"
},
{
"name": "ws",
"manifest": "apps/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^8.20.0"
},
{
"name": "yaml",
"manifest": "apps/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^2.8.3"
},
{
"name": "zod",
"manifest": "apps/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^4.0.0"
},
{
"name": "@anthropic-ai/claude-agent-sdk",
"manifest": "packages/client/package.json",
"ecosystem": "npm",
"version_constraint": "^0.3.187"
},
{
"name": "@botiverse/kimi-code-sdk",
"manifest": "packages/client/package.json",
"ecosystem": "npm",
"version_constraint": "0.26.0-botiverse.2"
},
{
"name": "@openai/codex-sdk",
"manifest": "packages/client/package.json",
"ecosystem": "npm",
"version_constraint": "^0.144.1"
},
{
"name": "@sentry/node",
"manifest": "packages/client/package.json",
"ecosystem": "npm",
"version_constraint": "^10.62.0"
},
{
"name": "ejs",
"manifest": "packages/client/package.json",
"ecosystem": "npm",
"version_constraint": "^6.0.1"
},
{
"name": "mdast-util-from-markdown",
"manifest": "packages/client/package.json",
"ecosystem": "npm",
"version_constraint": "^2.0.3"
},
{
"name": "pino",
"manifest": "packages/client/package.json",
"ecosystem": "npm",
"version_constraint": "^9.5.0"
},
{
"name": "semver",
"manifest": "packages/client/package.json",
"ecosystem": "npm",
"version_constraint": "^7.6.3"
},
{
"name": "smol-toml",
"manifest": "packages/client/package.json",
"ecosystem": "npm",
"version_constraint": "^1.7.0"
},
{
"name": "ws",
"manifest": "packages/client/package.json",
"ecosystem": "npm",
"version_constraint": "^8.20.0"
},
{
"name": "yaml",
"manifest": "packages/client/package.json",
"ecosystem": "npm",
"version_constraint": "^2.8.3"
},
{
"name": "zod",
"manifest": "packages/client/package.json",
"ecosystem": "npm",
"version_constraint": "^4.0.0"
},
{
"name": "@autotelic/fastify-opentelemetry",
"manifest": "packages/server/package.json",
"ecosystem": "npm",
"version_constraint": "^0.23.0"
},
{
"name": "@fastify/cors",
"manifest": "packages/server/package.json",
"ecosystem": "npm",
"version_constraint": "^11.2.0"
},
{
"name": "@fastify/rate-limit",
"manifest": "packages/server/package.json",
"ecosystem": "npm",
"version_constraint": "^10.3.0"
},
{
"name": "@fastify/static",
"manifest": "packages/server/package.json",
"ecosystem": "npm",
"version_constraint": "^9.0.0"
},
{
"name": "@fastify/websocket",
"manifest": "packages/server/package.json",
"ecosystem": "npm",
"version_constraint": "^11.2.0"
},
{
"name": "@first-tree/shared",
"manifest": "packages/server/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@opentelemetry/api",
"manifest": "packages/server/package.json",
"ecosystem": "npm",
"version_constraint": "^1.9.0"
},
{
"name": "@pydantic/logfire-node",
"manifest": "packages/server/package.json",
"ecosystem": "npm",
"version_constraint": "^0.14.0"
},
{
"name": "bcrypt",
"manifest": "packages/server/package.json",
"ecosystem": "npm",
"version_constraint": "^6.0.0"
},
{
"name": "drizzle-orm",
"manifest": "packages/server/package.json",
"ecosystem": "npm",
"version_constraint": "^0.44.0"
},
{
"name": "ejs",
"manifest": "packages/server/package.json",
"ecosystem": "npm",
"version_constraint": "^6.0.1"
},
{
"name": "fastify",
"manifest": "packages/server/package.json",
"ecosystem": "npm",
"version_constraint": "^5.3.0"
},
{
"name": "gray-matter",
"manifest": "packages/server/package.json",
"ecosystem": "npm",
"version_constraint": "^4.0.3"
},
{
"name": "jose",
"manifest": "packages/server/package.json",
"ecosystem": "npm",
"version_constraint": "^6.0.0"
},
{
"name": "pino",
"manifest": "packages/server/package.json",
"ecosystem": "npm",
"version_constraint": "^9.5.0"
},
{
"name": "postgres",
"manifest": "packages/server/package.json",
"ecosystem": "npm",
"version_constraint": "^3.4.0"
},
{
"name": "semver",
"manifest": "packages/server/package.json",
"ecosystem": "npm",
"version_constraint": "^7.7.4"
},
{
"name": "zod",
"manifest": "packages/server/package.json",
"ecosystem": "npm",
"version_constraint": "^4.0.0"
},
{
"name": "yaml",
"manifest": "packages/shared/package.json",
"ecosystem": "npm",
"version_constraint": "^2.7.0"
},
{
"name": "zod",
"manifest": "packages/shared/package.json",
"ecosystem": "npm",
"version_constraint": "^4.0.0"
},
{
"name": "@first-tree/shared",
"manifest": "packages/skill-evals/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@first-tree/shared",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@radix-ui/react-dialog",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "^1.1.15"
},
{
"name": "@radix-ui/react-label",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "^2.1.8"
},
{
"name": "@radix-ui/react-slot",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "^1.2.4"
},
{
"name": "@sentry/react",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "^10.62.0"
},
{
"name": "@tailwindcss/typography",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "^0.5.19"
},
{
"name": "@tanstack/react-query",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "^5.95.0"
},
{
"name": "class-variance-authority",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "^0.7.1"
},
{
"name": "clsx",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "^2.1.1"
},
{
"name": "cmdk",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "^1.1.1"
},
{
"name": "d3-hierarchy",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "^3.1.2"
},
{
"name": "dompurify",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "^3.4.2"
},
{
"name": "lucide-react",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "^0.577.0"
},
{
"name": "react",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "^19.1.0"
},
{
"name": "react-dom",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "^19.1.0"
},
{
"name": "react-markdown",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "^10.1.0"
},
{
"name": "react-router",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "^7.13.1"
},
{
"name": "remark-breaks",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "^4.0.0"
},
{
"name": "remark-gfm",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "^4.0.1"
},
{
"name": "tailwind-merge",
"manifest": "packages/web/package.json",
"ecosystem": "npm",
"version_constraint": "^3.5.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 42,
"merged_prs": 1273,
"open_issues": 235,
"closed_ratio": 0.453,
"closed_issues": 195,
"closed_unmerged_prs": 199
},
"bus_factor": 2,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "Gandy2025",
"commits": 461,
"avatar_url": "https://avatars.githubusercontent.com/u/225318128?v=4"
},
{
"type": "User",
"login": "baixiaohang",
"commits": 333,
"avatar_url": "https://avatars.githubusercontent.com/u/4069691?v=4"
},
{
"type": "User",
"login": "yuezengwu",
"commits": 317,
"avatar_url": "https://avatars.githubusercontent.com/u/44976125?v=4"
},
{
"type": "User",
"login": "liuchao-001",
"commits": 120,
"avatar_url": "https://avatars.githubusercontent.com/u/78813320?v=4"
},
{
"type": "User",
"login": "bestony",
"commits": 70,
"avatar_url": "https://avatars.githubusercontent.com/u/13283837?v=4"
},
{
"type": "User",
"login": "bingran-you",
"commits": 17,
"avatar_url": "https://avatars.githubusercontent.com/u/49091726?v=4"
},
{
"type": "User",
"login": "serenakeyitan",
"commits": 8,
"avatar_url": "https://avatars.githubusercontent.com/u/94026305?v=4"
},
{
"type": "User",
"login": "L42y",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/284820?v=4"
},
{
"type": "User",
"login": "first-tree-ai",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/299351416?v=4"
},
{
"type": "User",
"login": "ggordonhall",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/24595376?v=4"
}
],
"contributors_sampled": 10,
"top_contributor_share": 0.346
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"docker.yml",
"droid-review.yml",
"droid.yml",
"publish-npm-package.yml",
"website-changelog-rebuild.yml"
],
"has_docs_dir": true,
"linter_configs": [
"biome.json"
],
"has_editorconfig": true,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"pnpm-lock.yaml",
"uv.lock"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 5,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "21 out of 21 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 9,
"reason": "Found 19/21 approved changesets -- score normalized to 9",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 4 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 0,
"reason": "dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 10,
"reason": "SAST tool is run on all commits",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "92 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "c56aeb1d0b554353d23cdaf53eac29a3c63884e1",
"ran_at": "2026-07-22T18:41:07Z",
"aggregate_score": 4.9,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-22T16:06:32Z",
"oldest_open_prs": [
{
"number": 1518,
"created_at": "2026-07-08T10:59:42Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1522,
"created_at": "2026-07-08T11:59:07Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1571,
"created_at": "2026-07-09T09:55:35Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1588,
"created_at": "2026-07-10T05:27:04Z",
"last_comment_at": "2026-07-10T07:01:36Z",
"last_comment_author": "gaoharimran29-glitch"
},
{
"number": 1591,
"created_at": "2026-07-10T07:01:32Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1731,
"created_at": "2026-07-12T08:59:51Z",
"last_comment_at": "2026-07-12T09:07:53Z",
"last_comment_author": "sapunyangkut"
},
{
"number": 1745,
"created_at": "2026-07-13T07:08:30Z",
"last_comment_at": "2026-07-13T07:15:37Z",
"last_comment_author": "Gandy2025"
},
{
"number": 1767,
"created_at": "2026-07-14T11:38:04Z",
"last_comment_at": "2026-07-14T12:02:26Z",
"last_comment_author": "Gandy2025"
},
{
"number": 1768,
"created_at": "2026-07-14T12:23:13Z",
"last_comment_at": "2026-07-14T13:38:27Z",
"last_comment_author": "Gandy2025"
},
{
"number": 1771,
"created_at": "2026-07-14T13:16:35Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1795,
"created_at": "2026-07-16T10:31:58Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1888,
"created_at": "2026-07-20T09:18:32Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1892,
"created_at": "2026-07-20T11:46:52Z",
"last_comment_at": "2026-07-20T12:30:59Z",
"last_comment_author": "bestony"
},
{
"number": 1893,
"created_at": "2026-07-20T11:55:05Z",
"last_comment_at": "2026-07-20T13:54:13Z",
"last_comment_author": "bestony"
},
{
"number": 1894,
"created_at": "2026-07-20T12:25:08Z",
"last_comment_at": "2026-07-21T02:59:17Z",
"last_comment_author": "bestony"
},
{
"number": 1897,
"created_at": "2026-07-20T22:40:58Z",
"last_comment_at": "2026-07-21T01:04:29Z",
"last_comment_author": "serenakeyitan"
},
{
"number": 1899,
"created_at": "2026-07-21T03:34:09Z",
"last_comment_at": "2026-07-21T03:48:12Z",
"last_comment_author": "yuezengwu"
},
{
"number": 1900,
"created_at": "2026-07-21T03:35:59Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1902,
"created_at": "2026-07-21T03:45:22Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1903,
"created_at": "2026-07-21T03:45:50Z",
"last_comment_at": "2026-07-21T11:07:11Z",
"last_comment_author": "liuchao-001"
}
],
"last_merged_pr_at": "2026-07-22T13:46:27Z",
"ci_last_conclusion": "SKIPPED",
"oldest_open_issues": [
{
"number": 252,
"created_at": "2026-05-09T02:39:01Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 313,
"created_at": "2026-05-12T03:34:41Z",
"last_comment_at": "2026-05-15T09:33:14Z",
"last_comment_author": "Gandy2025"
},
{
"number": 317,
"created_at": "2026-05-12T04:10:53Z",
"last_comment_at": "2026-07-20T11:06:19Z",
"last_comment_author": "liuchao-001"
},
{
"number": 338,
"created_at": "2026-05-12T23:21:38Z",
"last_comment_at": "2026-07-20T11:42:12Z",
"last_comment_author": "liuchao-001"
},
{
"number": 371,
"created_at": "2026-05-13T21:40:03Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 532,
"created_at": "2026-05-25T02:39:06Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 533,
"created_at": "2026-05-25T02:39:08Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 686,
"created_at": "2026-05-29T09:48:57Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 832,
"created_at": "2026-06-05T06:22:47Z",
"last_comment_at": "2026-06-05T07:28:56Z",
"last_comment_author": "Gandy2025"
},
{
"number": 833,
"created_at": "2026-06-05T06:22:50Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 835,
"created_at": "2026-06-05T06:22:54Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 837,
"created_at": "2026-06-05T06:22:58Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 838,
"created_at": "2026-06-05T06:23:00Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 881,
"created_at": "2026-06-09T03:19:55Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 886,
"created_at": "2026-06-09T03:42:49Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 887,
"created_at": "2026-06-09T03:42:50Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 888,
"created_at": "2026-06-09T03:42:50Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 889,
"created_at": "2026-06-09T03:43:39Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 890,
"created_at": "2026-06-09T03:43:39Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 891,
"created_at": "2026-06-09T03:43:39Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/agent-team-foundation/first-tree",
"host": "github.com",
"name": "first-tree",
"owner": "agent-team-foundation"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"security": 49,
"vitality": 86,
"community": 65,
"governance": 60,
"engineering": 94
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 86,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"commits_last_year": 1320,
"human_commit_share": 1,
"days_since_last_push": 0,
"active_weeks_last_year": 18
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "18/52 weeks with commits",
"points": 12.5,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 18
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "1320 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 1320
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 17,
"latest_release_tag": "v0.5.16",
"releases_from_tags": false,
"days_since_latest_release": 5,
"mean_days_between_releases": 3.3
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "17 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 17
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 5 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 5
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~3.3 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 3.3
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 65,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 42,
"inputs": {
"forks": 22,
"stars": 78,
"watchers": 1,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "78 stars",
"points": 30.6,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 78
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "22 forks",
"points": 11,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 22
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "1 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 1
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "excellent",
"name": "Community health",
"note": null,
"notes": [],
"value": 92,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 60,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "moderate",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 63,
"inputs": {
"bus_factor": 2,
"contributors_sampled": 10,
"top_contributor_share": 0.346
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "2 contributor(s) cover half of all commits",
"points": 25.2,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 2
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 35% of commits",
"points": 14.7,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 35
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "10 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 10
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 4 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"merged_prs": 1273,
"open_issues": 235,
"closed_issues": 195,
"issue_closed_ratio": 0.453,
"closed_unmerged_prs": 199
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "45% of issues closed",
"points": 21.2,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 45
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "1273/1472 decided PRs merged",
"points": 33.1,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 1273,
"decided": 1472
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 19/21 approved changesets -- score normalized to 9",
"points": 13.5,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 48,
"inputs": {
"followers": 11,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "agent-team-foundation",
"public_repos": 10,
"account_age_days": 449
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "11 followers of agent-team-foundation",
"points": 7.8,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 11,
"login": "agent-team-foundation"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "10 public repos, account ~1 yr old",
"points": 10,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 10
}
},
{
"code": "account_age_years",
"params": {
"years": 1
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 94,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "excellent",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": true,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "6 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 6
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "biome.json",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "biome.json"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 6.4,
"status": "met",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "21 out of 21 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"topics": [
"ai-agents",
"claude-code",
"cli",
"codex",
"context-tree",
"context-wiki",
"harness-engineering"
],
"has_wiki": true,
"homepage": "https://first-tree.ai/",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://first-tree.ai/",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "7 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 7
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 49,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 49,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 4.9
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 3.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "21 out of 21 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 19/21 approved changesets -- score normalized to 9",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 4 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "dangerous workflow patterns detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is run on all commits",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "92 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 5
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 78,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.89,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md",
"packages/qa/AGENTS.md"
],
"agent_instruction_max_bytes": 7641
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "AGENTS.md, CLAUDE.md, packages/qa/AGENTS.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "AGENTS.md, CLAUDE.md, packages/qa/AGENTS.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "89 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 89,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"pnpm-lock.yaml",
"uv.lock"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"apps/cli/tsconfig.json",
"packages/client/tsconfig.json",
"packages/server/tsconfig.json",
"packages/shared/tsconfig.json",
"packages/skill-evals/tsconfig.json",
"packages/web/tsconfig.json",
"tsconfig.json"
],
"agent_commit_share": 0.14,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "biome.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "biome.json"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "apps/cli/tsconfig.json, packages/client/tsconfig.json, packages/server/tsconfig.json, packages/shared/tsconfig.json, packages/skill-evals/tsconfig.json, packages/web/tsconfig.json, tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "apps/cli/tsconfig.json, packages/client/tsconfig.json, packages/server/tsconfig.json, packages/shared/tsconfig.json, packages/skill-evals/tsconfig.json, packages/web/tsconfig.json, tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "14 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 14,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 99,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 239900,
"source_files_sampled": 1850,
"oversized_source_files": 23
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "23/1850 source files over 60KB",
"points": 54.3,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 1850,
"oversized": 23
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"Could not fetch npm package 'first-tree-dev' from its registry",
"Could not fetch npm package 'doc-website' from its registry",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-22T18:41:31.571850Z",
"schema_version": "0.26.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/agent-team-foundation/first-tree.svg",
"full_name": "agent-team-foundation/first-tree",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.26.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics.