ajtgjmdjp/edinet-mcp holds a health index of 67 out of 100, placing it in the Good band. It scores highest on Engineering Quality (86/100) and lowest on Sustainability & Governance (36/100). It was last updated 3 days ago. A single contributor accounts for most of its recent work.
67
overall / 100
Good
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.
67
Exceptional93-100The record's top tier (≈ top 5%); essentially all checked criteria met
Excellent80-92Strong across the board; minor gaps
Good65-79Healthy; gaps are limited and manageable
Moderate50-64Acceptable with notable gaps; review recommended
Weak35-49Material weaknesses across several areas
At Risk20-34Significant weaknesses; adoption warrants caution
Critical1-19Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
The weighted overall 61 is calibrated to 67 on the published index scale (record calibration 2026-08-02).
Direct dependencies free of known advisories — 1 affected: fastmcp 2.14.7 (critical 10.0)
19/25
Indirect dependencies free of known advisories — 1 affected: diskcache 5.6.3 (moderate)
30.2/40
No advisories left outstanding — 2 advisory-carrying package(s) unaddressed past 90 days; oldest published 169 days ago
Inputs used
source
osv
advisories
8
affected_packages
2
assessed_packages
83
unassessed_packages
0
affected_by_severity
critical 1, moderate 1
direct_affected_packages
1
Matched the pypi:edinet-mcp@0.8.2 runtime dependency closure — what installing the published package pulls in — 83 packages. Reachability is not analyzed.
How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
Star and fork history 0 ★ / 5 ⇿
0Stars
5Forks
2Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 0Patch 2
OpenSSF Scorecard 5.9 / 10
5.9aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-30 23:57 UTC
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Dependency advisories 2
Installing pypi:edinet-mcp@0.8.2 pulls in 83 packages, direct and transitive: 2 carry known advisories, of which 1 are direct dependencies.
Package
Version
Relation
Severity
Advisories
Fixed in
fastmcp
2.14.7
direct
critical
6
3.2.0
diskcache
5.6.3
indirect
moderate
2
—
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"ai-agent",
"edinet",
"finance",
"financial-analysis",
"japanese",
"llm",
"mcp",
"model-context-protocol",
"python",
"xbrl",
"disclosure",
"financial-data",
"japan",
"mcp-server",
"securities"
],
"is_fork": false,
"size_kb": 461,
"has_wiki": true,
"homepage": "https://pypi.org/project/edinet-mcp/",
"languages": {
"Shell": 3758,
"Python": 346559,
"Dockerfile": 106
},
"pushed_at": "2026-07-27T00:08:38Z",
"created_at": "2026-02-08T06:28:17Z",
"owner_type": "User",
"updated_at": "2026-07-29T11:43:59Z",
"description": "EDINET XBRL parsing library and MCP server for Japanese financial data",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Python",
"significant_languages": [
"Python"
]
},
"owner": {
"blog": null,
"name": null,
"type": "User",
"login": "ajtgjmdjp",
"company": null,
"location": null,
"followers": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/195097911?v=4",
"created_at": "2025-01-15T09:17:52Z",
"is_verified": null,
"public_repos": 30,
"account_age_days": 561
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.8.2",
"kind": "patch",
"published_at": "2026-07-19T16:50:00Z"
},
{
"tag": "v0.8.1",
"kind": "patch",
"published_at": "2026-07-17T12:49:49Z"
},
{
"tag": "v0.8.0",
"kind": "minor",
"published_at": "2026-07-17T12:21:20Z"
},
{
"tag": "v0.6.6",
"kind": "patch",
"published_at": "2026-07-03T11:28:25Z"
},
{
"tag": "v0.6.5",
"kind": "patch",
"published_at": "2026-04-22T09:39:57Z"
},
{
"tag": "v0.6.2",
"kind": "patch",
"published_at": "2026-02-26T10:54:47Z"
}
],
"recent_commits": [
{
"oid": "e613329b4302bc5f6e58bc5031aa208328aa203f",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01M2qn38DaYjreYn3HcDke4A",
"is_bot": false,
"headline": "docs: add real-data conversation demo to README top (EN/JA)",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-07-19T17:03:54Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ef995ea5132a3a6f3fe89ecc1e2b574260e94adf",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01M2qn38DaYjreYn3HcDke4A",
"is_bot": false,
"headline": "docs: naturalize Japanese README wording; link text 日本語版READMEはこちら",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-07-19T16:56:54Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "cb2baed4b0d269f97e596a83e077f0ae95ee341e",
"body": "- parse 決算日 from the EDINET code list into Company.fiscal_year_end\n (companies cache v4); period-omitted annual-report lookups probe the\n statutory deadline month (fiscal+3, then +2) of the CURRENT cycle\n before the backwards scan — cold ~60s regardless of fiscal calendar\n- previous-year probes d\n[…]\nDesign-Review: gpt-5.3-codex thread 019f700e-3f16-7c33-8440-b8f3b13b05a4\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01M2qn38DaYjreYn3HcDke4A",
"is_bot": false,
"headline": "perf: fiscal-year-end heuristic + tiered filings cache (v0.8.2)",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-07-19T16:49:57Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "2dc38b717650cc39ed8e61d91cec385d81eda3db",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01M2qn38DaYjreYn3HcDke4A",
"is_bot": false,
"headline": "docs: add Japanese README; add missing get_narrative to MCP tools table",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-07-18T11:19:16Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "656e0c7e0f33e96e30b47b8d14bc662cfdd65981",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01M2qn38DaYjreYn3HcDke4A",
"is_bot": false,
"headline": "docs: remove discontinued boj-mcp references; update test count",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-07-18T08:06:53Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a9c5a72882f1455bfeedbac8d05192649c8f46ee",
"body": "P0: period=None retrieval always failed (730d range vs 366d limit) —\nnow scans backwards month-by-month, stopping at first hit.\n\nCorrectness: taxonomy-based fact routing (CashAndDeposits→BS,\nTradeReceivables no longer dropped, facts pooled across files, CF\ntriggers fallback); EDINET \"0\"/\"1\" flags; s\n[…]\n: self sweep + gpt-5.3-codex thread 019f700e-3f16-7c33-8440-b8f3b13b05a4\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01M2qn38DaYjreYn3HcDke4A",
"is_bot": false,
"headline": "fix: v0.8.1 correctness release from whole-codebase review",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-07-17T12:49:14Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "0b4b1262a60f34c050d31ab2a8f901550cddb886",
"body": "…covery\n\n- _sort_by_metric: companies missing the sort metric appeared FIRST when\n sort_desc=True (the default) because the (1, 0.0) missing-marker tuple\n sorts highest under reverse=True. Partition valued/missing rows first\n so missing always goes last, in both directions.\n- DiskCache.get_json: \n[…]\nor external\nreview: _screening, _cache, _diff, _rate_limiter, _metrics).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01M2qn38DaYjreYn3HcDke4A",
"is_bot": false,
"headline": "fix: screening sort order for missing metrics + corrupt JSON cache re…",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-07-17T12:32:05Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "863cea1520187b8f0951ebe9b426969101731274",
"body": "- pre-parse 50MB size limit on XBRL instances (finding 1)\n- context ranking: period class before dimensions; only\n instant==filing_date counts as the filing-date context (finding 2)\n- table cells with block elements are buffered and tab-joined (finding 3)\n- bounded (doc_id, section) narrative cache\n[…]\nng 7)\n\nReview: gpt-5.3-codex thread 019f6fe5-af9d-7f01-b25f-8b6122615b85\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01M2qn38DaYjreYn3HcDke4A",
"is_bot": false,
"headline": "fix: harden narrative extraction per Codex code review",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-07-17T12:18:05Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b35975bd4fa4c562ce0a4dd3e22338013dd636c6",
"body": "- extract 事業等のリスク / MD&A / 経営方針 / 事業の内容 / ガバナンス概要 /\n 研究開発活動 from annual report XBRL instances as plain text\n- semantic context selection (dimensionless + current-period preferred,\n deterministic tie-breaks) per Codex design review; no double-unescape\n- EdinetClient.get_narrative() -> NarrativeSect\n[…]\nDesign-Review: gpt-5.3-codex thread 019f6fe5-af9d-7f01-b25f-8b6122615b85\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01M2qn38DaYjreYn3HcDke4A",
"is_bot": false,
"headline": "feat: qualitative narrative extraction — get_narrative (v0.8.0)",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-07-17T12:08:06Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "bfda1dc92aa3110101e7fadbfe9cf5c596f23922",
"body": "- labels_en now scopes correctly for snake_case statement labels set by\n the primary TSV parse path (was CamelCase-only, so CF rows rendered\n PL-form English names in production)\n- get_label_aliases() returns immutable MappingProxyType views so\n callers cannot corrupt the process-wide cache\n- doc\n[…]\ntem__\n\nReview: gpt-5.3-codex thread 019f6fe5-af9d-7f01-b25f-8b6122615b85\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01M2qn38DaYjreYn3HcDke4A",
"is_bot": false,
"headline": "fix: address Codex review findings on bilingual labels",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-07-17T11:51:17Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "e759e6dfa965beb15b0636fe96885e815adfd409",
"body": "- stmt[\"Revenue\"] works alongside stmt[\"売上高\"] (case-insensitive),\n backed by existing taxonomy label_en fields\n- StatementData.labels_en property with statement-scoped translations\n (減損損失 → \"Impairment Loss\" in PL, \"Impairment Loss (CF)\" in CF)\n- get_financial_statements MCP tool gains language='e\n[…]\nize\n- README: bilingual examples + \"Why edinet-mcp?\" positioning section\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01M2qn38DaYjreYn3HcDke4A",
"is_bot": false,
"headline": "feat: bilingual English/Japanese label access (v0.7.0)",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-07-17T11:40:26Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "04d80505d06e0a9b412251060bed19c6ef68b3e1",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: record doc_type label exposure (#6) in changelog",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-07-11T06:59:34Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "68d8a758f5b0266e1072a2697cdaa63f5a2831bf",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 4.3.1 to 7.0.0.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/34e114876b0b11c390a5638\n[…]\nr\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: ajtgjmdjp <ajtgjmdjp258456357@icloud.com>",
"is_bot": true,
"headline": "ci(deps): bump actions/checkout from 4.3.1 to 7.0.0 (#9)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-11T06:59:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d4091f90f0e017c675a099dcf64132a6f7b86536",
"body": "…doc_type labels (#6)\n\nDocType enum + from_label() already support semiannual_report (160),\nextraordinary_report (180), and large_shareholding (350), but the MCP\ntool descriptions only mention 'annual_report' and 'quarterly_report'.\nLLMs cannot discover the other labels from tool descriptions alone,\n[…]\nn Q1/Q3 quarterlies. Without\nexposing the label, agents have to guess raw code \"160\", which is\nbrittle and undocumented in the public README.\n\nCo-authored-by: ajtgjmdjp <ajtgjmdjp258456357@icloud.com>",
"is_bot": false,
"headline": "feat(server): expose semiannual / extraordinary / large_shareholding …",
"author_name": "hjjkkl",
"author_login": "hjjkkl",
"committed_at": "2026-07-11T06:57:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "85ee488487b5c05388df14583aac2dec79f634cf",
"body": "Bumps [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv) from 4.2.0 to 8.3.0.\n- [Release notes](https://github.com/astral-sh/setup-uv/releases)\n- [Commits](https://github.com/astral-sh/setup-uv/compare/v4.2...d31148d669074a8d0a63714ba94f3201e7020bc3)\n\n---\nupdated-dependencies:\n- dependency-\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "ci(deps): bump astral-sh/setup-uv from 4.2.0 to 8.3.0 (#10)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-11T06:55:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a27a165f25441e20edbbf32ea11aa8e1108f83ac",
"body": "…ric fixes\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "v0.6.6: cache poisoning fix, stdlib logging migration, zero-value met…",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-07-03T11:28:11Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "e81bca99c36416f9518ad0a953f531c8da54e6b4",
"body": "result.output mixes stdout and stderr in click >= 8.2, and the no-API-key\nwarning only fired in environments without EDINET_API_KEY or a local .env,\nso the tests passed locally but failed in CI. Force the keyless condition\nand assert against result.stdout / result.stderr explicitly.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "test(logging): make CLI stream tests hermetic and assert on stdout only",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-07-03T11:19:51Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f61d55bf118c44586ef7ff8800047f1fddc43ff4",
"body": "Narrow `last_exc: BaseException | None` explicitly instead of\n`raise last_exc # type: ignore[misc]`: if no exception was recorded\n(only possible with a non-positive retry budget), raise a descriptive\nRuntimeError; otherwise re-raise the recorded exception mypy-clean.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor(client): remove type-ignore on retry-exhausted raise",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-07-03T11:00:30Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "9879dd1d6334defcc55dc83a122c06690b0547a7",
"body": "`v.ordinary_income or v.operating_income` (ROA numerator) fell back to\n営業利益 when 経常利益 was exactly 0, a valid value in a loss year. The\nsame `or`-on-numeric pattern also affected ni_for_roe (親会社株主帰属\n利益 = 0) and equity_for_roe (株主資本 = 0). Replace with explicit\n`is None` checks so fallbacks only trigger when the item is absent.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(metrics): treat 0 as a valid value in metric fallbacks, not missing",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-07-03T10:59:48Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1f85a54c72cc89702a8ab1f0d9ba9edd519ae8b6",
"body": "…only\n\nImporting edinet_mcp emitted loguru DEBUG logs to stderr that users\ncould not suppress via stdlib logging. Migrate client, parser, _diff\nand _screening to logging.getLogger(__name__) and attach a NullHandler\nto the \"edinet_mcp\" logger in __init__ (standard library practice).\nThe CLI keeps log\n[…]\n needed.\n\nAdd tests/test_logging.py covering NullHandler configuration, stdlib\nlogger usage in library modules, and stdout purity of CLI output.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(logging): use stdlib logging in library modules, keep loguru CLI-…",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-07-03T10:58:30Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "66687de1d45f67e613640c889a07ffd8ebabe9da",
"body": "On a cache miss, all API rows were cached but only rows with a truthy\ndocID were returned; on a cache hit no filtering happened, so a cached\nrow without docID raised KeyError in Filing.from_api_row until TTL\nexpiry. Filter rows before writing to the cache and defensively on the\ncache-hit path (protects caches poisoned by older versions).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(client): filter docID-less rows before caching filing lists",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-07-03T10:56:29Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "38ac6c0915e8202a8607e8d089d1bd656d49db6c",
"body": "edinet-mcp is the Python/MCP entry point optimized for AI assistants and\nJapan-only filings. Users who need batch-parse throughput or SEC EDGAR\ncoverage now have an obvious next stop instead of leaving the Japan\nstack.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: cross-reference xbrl-facts for SEC and high-throughput use cases",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-06-06T05:25:03Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "aa92b9990731796d48188e88577f48f9aa609428",
"body": "The sdist-audit step regexes (ghu_, ghp_, etc.) leaked into the tarball\nvia .github/workflows/publish.yml itself, causing the next publish run to\nflag its own grep patterns as hardcoded tokens and fail.\n\nExcluding .github/ from sdist packaging removes workflow YAML files from\nthe distributed tarball (they are only relevant to the GitHub repo) and\nbreaks the self-match loop.\n\nCo-authored-by: ajtgjmdjp <195097911+ajtgjmdjp@users.noreply.github.com>",
"is_bot": false,
"headline": "fix(build): exclude .github/ from sdist to prevent audit self-match (#5)",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-04-22T09:39:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4d502cb8e89b0b7e3cd2a7201c74bbd277c9d58b",
"body": "…(#4)\n\n* fix(parser): catch defusedxml security exceptions\n\nXBRL files parsed via defusedxml.ElementTree can raise DefusedXmlException subclasses (EntitiesForbidden, DTDForbidden, ExternalReferenceForbidden, NotSupportedError) when the document triggers a security guard such as billion-laughs entity\n[…]\n only (0.6.2 -> 0.6.5), no dependency changes.\n\n---------\n\nCo-authored-by: ajtgjmdjp <195097911+ajtgjmdjp@users.noreply.github.com>\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "v0.6.5: Security fix (defusedxml) + Python 3.13 + CHANGELOG backfill …",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-04-21T23:46:59Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "8e5359fa5554ceed41fd77d13eb4b479df8cf57f",
"body": "Supply-chain hardening derived from a security audit:\n\n- All GitHub Actions in ci.yml and publish.yml are now pinned to\n exact commit SHAs with trailing ``# vX.Y.Z`` comments so Dependabot\n can auto-bump both the SHA and the human-readable tag. Pins\n resolved via ``git ls-remote --tags``:\n act\n[…]\n/dependabot.yml`` schedules a weekly\n ``package-ecosystem: github-actions`` update grouping minor/patch\n bumps into a single PR.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: pin Action SHAs, enable least-privilege permissions, add Dependabot",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-04-20T00:00:16Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6720aec9d397f108b8681e63a22c5790249380e2",
"body": "- Add publish.yml for PyPI OIDC Trusted Publishing (release-triggered)\n- Fix FrameType | None annotation in cli.py (mypy strict)\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: add OIDC publish workflow + fix mypy FrameType error",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-03-02T17:12:22Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "6335904660a12464725b385f1089c6dbb544068f",
"body": "Fixes mypy error: Function is missing a return type annotation.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: add type annotation to _run in CLI diff command",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-03-01T18:33:15Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "65c0994f893bfa4273deeb78e4fe64e5681529b6",
"body": "Extract 5-digit securities code and 13-digit corporate number (法人番号)\nfrom EDINET CSV. Both fields are Optional for backward compatibility.\nBump cache version to v3 to invalidate stale entries.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add sec_code and corporate_number to Company model (v0.6.3)",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-03-01T17:56:26Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "52fb7cc3732251e7f2a51b2b2dc07ed482dbf932",
"body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: add glama.json for MCP server directory listing",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-26T10:52:53Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "865869ceb976e865d023d02a25debf755726f8b1",
"body": "…taclass\n\n- _metrics.py: introduce _StatementValues dataclass and extract per-category\n calculators (_calc_profitability, _calc_stability, _calc_efficiency, etc.)\n- _diff.py: split diff_statements into _fetch_period_statements and _compute_changes\n- _screening.py: extract _fetch_company_metrics hel\n[…]\nlper\n- Narrow except Exception to specific types (httpx.HTTPError, EdinetAPIError, etc.)\n- Add test_rate_limiter.py and .pre-commit-config.yaml\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor: extract helpers, narrow exceptions, add _StatementValues da…",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-24T02:46:51Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f62a1345f364ad19af38c366c544017ac8df956f",
"body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: remove CITATION.cff",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-19T14:49:19Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f506390fad6ecd315d8370130c71f213691bbbb0",
"body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: move imports before module-level code (ruff E402)",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-19T14:47:03Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "6c8a422dc09f0afe4a36f5d3d2a94171748d7686",
"body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: replace Yahoo Finance with yfinance",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-19T14:33:25Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "b97671c00b00281abcfc6e55d6cd73bd67ad3d0b",
"body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: replace japan-news-mcp/jquants-mcp with stockprice-mcp in header",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-19T14:16:54Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "117ad76044d823e1f1456eb1fa6046837e40f0bc",
"body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add Zenn tutorial link to README",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-15T15:16:44Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "96464a027c7511d0a8617dddb9a8c166a7bf67e7",
"body": "- Default filing search window: 365 days → 730 days (ensures annual\n reports filed 6+ months ago are found when period is omitted)\n- Version bump to 0.6.2\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Extend default filing search to 2 years, fix period coercion",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-15T13:43:52Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "69d271e0f8b12d669317f5ab5301b2cdd1a4d5a8",
"body": "MCP clients (e.g. Claude Desktop) may send period as int instead of\nstr. Add Pydantic BeforeValidator to coerce int to str before\nvalidation, preventing type errors.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix MCP period parameter accepting int from Claude Desktop",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-15T13:26:56Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "c44bbb3ec786e483e5eb184cd17e44fcc924d99b",
"body": "- Add `edinet-mcp diff -c E02144 -p1 2023 -p2 2024` CLI command\n for cross-period financial statement comparison (xbrl-diff)\n- Export diff_statements, DiffResult, LineItemDiff in __init__.py\n- Update README: diff docs, Japan Finance Data Stack links,\n 9 MCP tools, 213 tests\n- Version bump 0.5.0 → 0.6.0\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "v0.6.0: Add CLI diff command + export diff_statements",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-14T18:22:22Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ac70144f33a7af8287cfee4e9197df55f1c99ac5",
"body": "- _diff.py: cast dict values before comparison to fix operator type errors\n- cli.py: add type parameter to dict return annotation\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: resolve mypy errors (operator types, missing type params)",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-14T14:58:16Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "3fba1057ed172a977c27a8c75e68667e03b03b79",
"body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "style: fix ruff format violations (6 files)",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-14T14:53:25Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f55e405075f373281f105f49c912ec73afa3d05c",
"body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add ClawHub badge to README",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-14T07:39:04Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "5dc7fd5de26e35cf61742d93728916b9e89bfddb",
"body": "- Remove unused FinancialStatement import in _diff.py\n- Fix line-length violations in server.py docstring and test_diff.py\n- Sort imports in test_diff.py\n- Use unpacking instead of list concatenation in test_cli.py\n- Remove extra blank line in cli.py\n- Add RUF001 ignore for Japanese chars in pyproject.toml\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Lint cleanup: fix E501, F401, I001, RUF005 violations",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-14T07:34:07Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "3984e78626b6c22674ffffa4367d998f8367a6a9",
"body": "New _diff.py module compares financial statements across two periods,\ncalculating changes and growth rates per line item. Adds compare_periods\nMCP tool to server.py. 10 new tests (203 → 213 total).\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add compare_periods MCP tool for financial statement diffs",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-14T06:05:35Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f3e5da996cee109de9d5e856288c81a816092f3f",
"body": "Adds `edinet-mcp screen` command that compares financial metrics\nacross multiple companies with table/JSON output and sort options.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add CLI screen subcommand for multi-company comparison",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-14T05:28:54Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "b8f6febcb3b997ed15df44c5e2a515cc3b364003",
"body": "- Add `edinet-mcp test` command for API key and connectivity diagnostics\n- Add CHANGELOG entries for v0.3.0, v0.4.0, v0.4.2, v0.5.0\n- Sync server.json version to 0.5.0 with updated description\n- 3 new CLI tests (195 total)",
"is_bot": false,
"headline": "Add CLI test command, sync CHANGELOG and server.json for v0.5.0",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-13T19:01:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "32a4f0bfda865a56bb9e6c2f129d70b5317e9b49",
"body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: add screen_companies to README (v0.5.0)",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-13T18:17:09Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "750c754b4404746a25956fed025d2ecb7f2c4f8d",
"body": "….5.0)\n\nNew MCP tool and Python API for batch comparison of financial metrics\nacross multiple companies. Supports up to 20 companies per request\nwith optional sort by any metric (ROE, margins, etc.).\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add screen_companies for multi-company financial comparison (v0…",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-13T18:13:13Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "c1ac2549d4da5dfeb54aa7fe14a1c5ac31a831d6",
"body": "Builds sdist on every push and checks for dangerous file patterns\n(.env, tokens, keys) and known token prefixes (ghu_, ghp_, sk-, pypi-).\nAlso adds .claude/ to sdist exclude list.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: add sdist-audit job to prevent secret leaks in published packages",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-13T18:00:03Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "16efad4e53a4c59c9ba58f84c7c01a8066a7ba58",
"body": "Security:\n- Add sdist exclude for .mcpregistry_* and .env files (fixes token leak in v0.4.1)\n\nType safety:\n- Replace 5 `# type: ignore` with proper `cast()` calls\n- Add `Any` typing to `get_settings()` overrides\n\nError handling:\n- Add logger.warning() for UTF-8→cp932 encoding fallback in parser\n- Ad\n[…]\nalidation for `list_available_labels` MCP tool\n\nTests:\n- Add ZIP total size limit test\n- Add nested directory extraction test (179 → 181 tests)\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: v0.4.2 — exclude secrets from sdist, type safety, MCP validation",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-13T16:54:00Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "0ebb51a608f6d18b3e324dd7017cc42bb124b8ba",
"body": "- CITATION.cff for academic citation\n- Dockerfile for containerized deployment\n- Docker install option added to README Quick Start\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: add CITATION.cff, Dockerfile, and Docker install option",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-13T16:24:32Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "8208997e64caa8024dcaaa305b56b32e830d80ba",
"body": "quickstart.py was using sync calls on the async-only EdinetClient.\nAdded Cursor and Claude Code setup instructions alongside Claude Desktop.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: async quickstart example + multi-tool MCP setup docs",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-13T16:21:20Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a884a68c7181323f9e800e0ab1ea5bfe90b94085",
"body": "Register edinet-mcp on the official MCP Registry\n(registry.modelcontextprotocol.io) for discoverability by Claude,\nCopilot, and other MCP clients.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: Add MCP Registry server.json and bump to v0.4.1",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-13T12:45:43Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "008d93883f7d5ff0bcd6ca3d56f036660f2529cd",
"body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: Add CI and downloads badges to README",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-13T11:36:37Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "214c85fe3a46f85a24d8ca75a5a13c5ea391cc2a",
"body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: Add type annotations to CLI async helpers for mypy strict mode",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-13T11:28:41Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "03ec3627d597e7f83f6a31d572ee16e2ed17474b",
"body": "- Replace bare global _client with asyncio.Lock double-checked locking\n to prevent duplicate EdinetClient creation under concurrent MCP calls\n- Add FastMCP lifespan hook to close httpx.AsyncClient on shutdown\n- Change _get_client() from sync to async (all callers already async)\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: Eliminate race condition and resource leak in MCP server client",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-12T13:35:30Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "505b4ba925d87deed9f8c8ab6edc4d2c77885c62",
"body": "Replace sync httpx.Client with httpx.AsyncClient throughout the stack:\n- client.py: all methods now async, asyncio.sleep for retry backoff\n- server.py: remove asyncio.to_thread() bridge, direct await\n- cli.py: asyncio.run() wrapper for Click commands\n- _rate_limiter.py: remove sync wait(), keep asyn\n[…]\nADME: async examples in Quick Start and API Reference\n\nBreaking change: all EdinetClient methods now require await.\n179 tests pass, lint clean.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: Migrate to native async (httpx.AsyncClient) — v0.4.0",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-11T17:05:13Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4c4eff229bb2ab6b1e2d1cffbd5f88bb600a3f22",
"body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: Sync __version__ with pyproject.toml (0.2.2 → 0.3.0)",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-11T16:42:51Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "bbc18e902825fc9b873fcd6707f54c9ddd7dec56",
"body": "… retry, 179 tests\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Update README for v0.3.0: taxonomy 161 labels, IFRS suffix stripping,…",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-11T16:25:32Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "19a5cd8fec4a7f9865c8d045fe72cf67ff1bb77b",
"body": "- Strip EDINET-specific suffixes (IFRS, SummaryOfBusinessResults,\n KeyFinancialData, position tags) from XBRL element names before\n taxonomy matching, enabling proper normalization for IFRS filers\n- Filter out non-consolidated (NonConsolidatedMember) XBRL contexts\n to prevent non-consolidated dat\n[…]\nting status (row[2]) for\n is_listed flag\n- Add 19 tests for suffix stripping, non-consolidated filtering,\n and IFRS normalization (179 total)\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: IFRS normalization and ticker column mapping",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-11T16:13:34Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d9e3c0506dd9dd3ae05a7cd33dd1bc8f2c77e1ef",
"body": "- Add retry with exponential backoff (429/5xx/timeout, max 3 retries)\n- Add cache TTL (companies: 30d, filings: 24h, documents: no expiry)\n- Expand taxonomy 140→161 labels (212 XBRL elements mapped)\n- Optimize date queries for period-based filing search (365→2-4 API calls)\n- Add 19 new tests (cache, retry logic) — 160 total\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: Production quality improvements (v0.3.0)",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-11T14:51:57Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "0c8bee67b364aa1af724d85f8af502bba1dc354c",
"body": "- CLI: search command (basic, no results, JSON output, limit)\n- CLI: statements command (table, JSON, CSV, not found, validation error)\n- MCP: all 7 server tools tested (search, filings, statements, metrics,\n compare, labels, company info)\n- MCP: result limiting (20 companies, 50 filings)\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add CLI and MCP server tests (115 → 141 tests)",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-11T13:24:42Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "122c012f3780cd8b4b99d8f80367fb116c7949cb",
"body": "Change variable name from 'v' to 'ratio' for efficiency metrics\nto avoid type inference conflict with earlier 'v' usage (str | None).\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: Resolve mypy type errors in _metrics.py",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-11T06:59:05Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "e92018880445a8716139d2520e91839a4222c101",
"body": "Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "style: Apply ruff format",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-11T06:55:45Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "cfbae81b20a4f465413055827170fdf448e5e70f",
"body": "- Move PeriodLabel import into TYPE_CHECKING block\n- Split long line in _metrics.py for operating_income check\n- Auto-fix import sorting in _metrics.py and test_validation.py\n\nAll 115 tests pass.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: Resolve linting errors (ruff I001, TC001, E501)",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-11T06:51:16Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "36ba03c0fcb1f07cef384330063c66b30badb113",
"body": null,
"is_bot": false,
"headline": "docs: Update CHANGELOG and README for v0.2.2 (140 labels, 26 metrics)",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-10T17:38:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "33d62c3b79e00edacd4d9bf519de9eeecf59ec43",
"body": "Major improvements:\n- Expand financial metrics: 13→26 indicators across 6 categories\n (profitability, stability, efficiency, growth, cash_flow, raw_values)\n- Expand normalization labels: 73→140 items (PL:35, BS:72, CF:33)\n - SGA breakdown, inventory details, PPE breakdown, intangibles, AOCI\n- Add \n[…]\nror messages\n- defusedxml for XXE protection\n- ZIP bomb and path traversal prevention\n- Input format validation (EDINET code, period, doc_id)\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Release v0.2.2: Comprehensive normalization + metrics + validation",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-10T17:36:10Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "e5735a9709c4d53730aeaf272d2d876863805e34",
"body": "- Fix: get_filings() now correctly handles datetime.datetime objects by checking for the more specific type before datetime.date in _to_date()\n- Docs: Add Filing object attribute reference to README with all 10 attributes documented\n- Docs: Add usage examples for accessing Filing attributes (descrip\n[…]\nion, filing_date, etc.)\n- Docs: Clarify get_financial_statements() usage patterns (edinet_code + period, not doc_id)\n- Version: Bump to 0.2.1\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix get_filings() datetime.datetime handling and improve documentation",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-10T14:54:31Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4a06ea35d6196e5d41c75c2f140ae265b01a9fb7",
"body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Replace xml.etree.ElementTree with defusedxml for XXE protection",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-08T16:54:50Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "efc66363055454ca74a0ed8f95b13bbe74be4930",
"body": "- Fix _parse_date fallback from today() to date.min (prevents\n filings with missing dates from sorting as most recent)\n- Add ZIP bomb protection (file count and total size limits)\n- Add XBRL file size guard (50 MB) against entity expansion DoS\n- Offload sync EdinetClient calls via asyncio.to_thread\n[…]\non last-write-wins behavior for XBRL path\n- Remove unused tqdm dependency\n- Add tests for _parse_date, ZIP Slip, and ZIP bomb limits (92 total)\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Address Codex review findings: security hardening and async correctness",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-08T13:54:13Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3709bce9bfff6ed37184a1bb3dd2d64423b3df7a",
"body": "- Add types-pyyaml to dev dependencies\n- Chain joinpath calls for Traversable compatibility\n- Explicit str() cast in _extract_period to satisfy no-any-return\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix CI: add types-pyyaml stub, fix mypy errors in _normalize.py",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-08T13:29:08Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d8c77b357e3493f9402d53c818ada696b421f351",
"body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix ruff format: reformat _metrics.py, _normalize.py, server.py",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-08T13:25:55Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "c26976e16321dda502fb2ce1ab9049127022bb98",
"body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add Codex review script for automated code review",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-08T13:24:37Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "17d79023d72abd86ce9ab4d16ebb3476d2b916fe",
"body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Update README for v0.2.0: normalization, metrics, and new MCP tools",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-08T13:19:08Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "59f0cd1e8f548502d126aa63d75ad71ee0501430",
"body": "… (v0.2.0)\n\n- Add taxonomy.yaml with 57 XBRL element mappings (J-GAAP/IFRS/US-GAAP)\n- Add _normalize.py for automatic XBRL-to-canonical-label normalization\n- Add _metrics.py with ROE/ROA/margin calculations and period comparison\n- Add StatementData dict-like access: stmt[\"売上高\"] → {\"当期\": ..., \"前期\": .\n[…]\nompare_financial_periods, list_available_labels\n- Improve period parameter docs (filing year vs fiscal year)\n- 85 tests passing, all lint clean\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add normalization layer, financial metrics, and MCP tool enhancements…",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-08T13:16:46Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b7b4656401196b83d2c25534f3e01bd151aef791",
"body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Release v0.1.1: fix ZIP response validation bug",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-08T09:04:29Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "82408c3e694644a218fc1c45753bbd191bf91d71",
"body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix ruff SIM201 lint: use != instead of not ==",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-08T08:49:51Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "85109f2936e7e62f368f33170f1d1d88e3362c91",
"body": "EDINET may return HTTP 200 with a JSON error body (e.g. 401\n\"Access denied\") instead of a proper HTTP error status code.\nPreviously these responses were cached as .zip files, causing\npersistent \"File is not a zip file\" errors on subsequent calls.\n\nNow validates ZIP magic bytes on both download and cache read,\nand raises EdinetAPIError with the API error message on failure.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Validate ZIP responses from EDINET API before caching",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-08T08:48:08Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "40ef2241493856f82c2cc2edd5ab46ef8fe669c8",
"body": "uv sync --dev installs [dependency-groups] dev, but ruff/mypy/pytest\nare in [project.optional-dependencies] dev. Use --extra dev instead.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix CI: use --extra dev to install dev dependencies",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-08T06:47:26Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ed05583f78deaf9185ddaf63a8f5d636ead64ed7",
"body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Document known limitations in CHANGELOG",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-08T06:15:06Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "6a13356e4e36891f7e043c410a6fa5c8dcfc3fd2",
"body": "- Use Path.relative_to() for strict ZIP path containment check\n instead of str.startswith() which has prefix collision issues\n- Fix HTTP error sanitization to mutate error.args in-place instead\n of constructing new instance (HTTPStatusError requires extra args)\n- Fix CLI docstring: --json → --json-output to match actual option\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix ZIP Slip check, HTTP error sanitization, and CLI docstring",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-08T06:07:12Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "8ffe92ccce5a2b8833dfe0411fc2fab311b2150c",
"body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fix GitHub URLs in pyproject.toml",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-08T05:56:20Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "17d67ba2d71f696a509e26474cea38df2d4db83b",
"body": "- Add DocType.OTHER for unrecognized docTypeCode values\n- Use try/except instead of direct DocType() construction\n- Fix null handling: use `or \"\"` instead of `.get(key, \"\")` to handle\n explicit None values from EDINET API responses\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Handle unknown DocType codes and null API fields gracefully",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-07T19:37:27Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "94225aac7fa7104644204f86afb08156ac0b8c8e",
"body": "- Fix ZIP Slip vulnerability (validate paths before extraction)\n- Sanitize API key from HTTP error messages\n- Add doc_id format validation\n- Add date range limit (366 days max)\n- Restrict cache file permissions to owner-only (0o600)\n- Validate base URL scheme (HTTPS-only, prevent SSRF)\n- Add asyncio.Lock to async rate limiter\n- Add NOTICE with EDINET PDL1.0 attribution\n- Add CONTRIBUTING.md, CHANGELOG.md\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Security hardening, legal attribution, and OSS conventions",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-07T18:32:08Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "63b11ad63d3d607a7c831bb9374fdd2912622782",
"body": "EDINET XBRL parsing library and MCP server for Japanese financial data.\n\nCore features:\n- EdinetClient: EDINET API v2 wrapper with caching and rate limiting\n- XBRLParser: TSV/XBRL dual-path extraction for BS/PL/CF statements\n- Pydantic v2 domain models (Company, Filing, FinancialStatement)\n- FastMCP\n[…]\ny with optional pandas support\n\nQuality:\n- 37 tests passing (pytest)\n- ruff check + format clean\n- mypy strict: 0 errors across 10 source files\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Initial implementation of edinet-mcp",
"author_name": "ajtgjmdjp",
"author_login": "ajtgjmdjp",
"committed_at": "2026-02-07T17:53:11Z",
"body_truncated": true,
"is_coding_agent": true
}
],
"releases_count": 6,
"commits_last_year": 84,
"latest_release_at": "2026-07-19T16:50:00Z",
"latest_release_tag": "v0.8.2",
"releases_from_tags": false,
"days_since_last_push": 3,
"active_weeks_last_year": 9,
"days_since_latest_release": 11,
"mean_days_between_releases": 28.6
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 57,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "edinet-mcp",
"exists": true,
"license": "Apache-2.0",
"keywords": [
"edinet",
"finance",
"financial-data",
"japan",
"mcp",
"xbrl",
"Development Status :: 3 - Alpha",
"Intended Audience :: Financial and Insurance Industry",
"Intended Audience :: Science/Research",
"License :: OSI Approved :: Apache Software License",
"Programming Language :: Python :: 3",
"Programming Language :: Python :: 3.10",
"Programming Language :: Python :: 3.11",
"Programming Language :: Python :: 3.12",
"Programming Language :: Python :: 3.13",
"Topic :: Office/Business :: Financial",
"Typing :: Typed"
],
"ecosystem": "pypi",
"matches_repo": true,
"registry_url": "https://pypi.org/project/edinet-mcp/",
"is_deprecated": false,
"latest_version": "0.8.2",
"repository_url": "https://github.com/ajtgjmdjp/edinet-mcp",
"versions_count": 19,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": "2026-02-08T07:58:44.452685Z",
"latest_published_at": "2026-07-19T16:50:22.816340Z",
"latest_version_yanked": null,
"days_since_latest_publish": 11
}
]
},
"popularity": {
"forks": 5,
"stars": 14,
"watchers": 0,
"fork_history": {
"days": [
{
"date": "2026-02-19",
"count": 1
},
{
"date": "2026-04-05",
"count": 1
},
{
"date": "2026-04-08",
"count": 1
},
{
"date": "2026-04-17",
"count": 1
},
{
"date": "2026-05-04",
"count": 1
}
],
"complete": true,
"collected": 5,
"total_forks": 5
},
"star_history": null,
"open_issues_and_prs": 6
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": true,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"src/edinet_mcp/py.typed"
],
"toolchain_manifests": [],
"largest_source_bytes": 40316,
"source_files_sampled": 34,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"pyproject.toml"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [
{
"name": "fastmcp",
"direct": true,
"version": "2.14.7",
"severity": "critical",
"ecosystem": "pypi",
"cvss_score": 10,
"advisory_ids": [
"GHSA-m8x7-r2rg-vh5g",
"GHSA-rww4-4w9c-7733",
"GHSA-vv7q-7jx5-f767",
"PYSEC-2026-2475",
"PYSEC-2026-2476",
"PYSEC-2026-338"
],
"fixed_version": "3.2.0",
"advisory_count": 6,
"oldest_advisory_days": 121
},
{
"name": "diskcache",
"direct": false,
"version": "5.6.3",
"severity": "moderate",
"ecosystem": "pypi",
"cvss_score": null,
"advisory_ids": [
"GHSA-w8v5-vhqr-4h9v",
"PYSEC-2026-2447"
],
"fixed_version": null,
"advisory_count": 2,
"oldest_advisory_days": 169
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"critical": 1,
"moderate": 1
},
"advisory_count": 8,
"affected_count": 2,
"assessed_count": 83,
"malicious_count": 0,
"assessed_package": "pypi:edinet-mcp@0.8.2",
"unassessed_count": 0,
"direct_affected_count": 1
},
"ecosystems": [
"pypi"
],
"dependencies": [
{
"name": "polars",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.20"
},
{
"name": "httpx",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.27"
},
{
"name": "pydantic",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=2.0"
},
{
"name": "pydantic-settings",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=2.0"
},
{
"name": "fastmcp",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=2.0,<3.0"
},
{
"name": "click",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=8.0"
},
{
"name": "python-dotenv",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=1.0"
},
{
"name": "loguru",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.7"
},
{
"name": "pyyaml",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=6.0"
},
{
"name": "defusedxml",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.7"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 1,
"merged_prs": 5,
"open_issues": 5,
"closed_ratio": 0,
"closed_issues": 0,
"closed_unmerged_prs": 7
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "ajtgjmdjp",
"commits": 81,
"avatar_url": "https://avatars.githubusercontent.com/u/195097911?v=4"
},
{
"type": "User",
"login": "hjjkkl",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/58733480?v=4"
}
],
"contributors_sampled": 2,
"top_contributor_share": 0.988
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"publish.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": true
},
"security_signals": {
"lockfiles": [
"uv.lock"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "5 out of 5 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 1/28 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "22 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 7,
"reason": "dependency not pinned by hash detected -- score normalized to 7",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 10,
"reason": "GitHub workflow tokens follow principle of least privilege",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "45 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "e613329b4302bc5f6e58bc5031aa208328aa203f",
"ran_at": "2026-07-30T23:57:52Z",
"aggregate_score": 5.9,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-27T00:08:42Z",
"oldest_open_prs": [
{
"number": 18,
"created_at": "2026-07-27T00:08:39Z",
"last_comment_at": "2026-07-27T00:08:39Z",
"last_comment_author": "dependabot"
}
],
"last_merged_pr_at": "2026-07-11T06:59:13Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 12,
"created_at": "2026-07-19T17:04:31Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 13,
"created_at": "2026-07-19T17:04:32Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 14,
"created_at": "2026-07-19T17:04:34Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 15,
"created_at": "2026-07-19T17:04:35Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 16,
"created_at": "2026-07-19T17:04:37Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/ajtgjmdjp/edinet-mcp",
"host": "github.com",
"name": "edinet-mcp",
"owner": "ajtgjmdjp"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": "The weighted overall 61 is calibrated to 67 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 61,
"calibrated": 67,
"calibration": "2026-08-02"
}
}
],
"value": 67,
"inputs": {
"security": 58,
"vitality": 82,
"community": 45,
"governance": 36,
"calibration": "2026-08-02",
"engineering": 86,
"ai_readiness": 65,
"weighted_overall_raw": 61
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 82,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"commits_last_year": 84,
"human_commit_share": 0.976,
"days_since_last_push": 3,
"active_weeks_last_year": 9
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 3 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 3
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "9/52 weeks with commits",
"points": 6.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 9
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "84 commits in the last year",
"points": 17.3,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 84
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "22 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "exceptional",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 6,
"latest_release_tag": "v0.8.2",
"releases_from_tags": false,
"days_since_latest_release": 11,
"mean_days_between_releases": 28.6
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "6 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 6
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 11 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 11
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~28.6 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 28.6
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "weak",
"name": "Community & Adoption",
"value": 45,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 23,
"inputs": {
"forks": 5,
"stars": 14,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "14 stars",
"points": 18.1,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 14
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "5 forks",
"points": 5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 5
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "weak",
"name": "Sustainability & Governance",
"value": 36,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 12,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 2,
"top_contributor_share": 0.988
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 99% of commits",
"points": 0.3,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 99
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "2 contributors",
"points": 2.7,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 2
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "critical",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 14,
"inputs": {
"merged_prs": 5,
"open_issues": 5,
"closed_issues": 0,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 0,
"closed_unmerged_prs": 7,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "0% of issues closed",
"points": 0,
"status": "missed",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 0
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "5/12 decided PRs merged",
"points": 12.5,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 5,
"decided": 12
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 1/28 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "weak",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 36,
"inputs": {
"followers": 4,
"owner_type": "User",
"is_verified": null,
"owner_login": "ajtgjmdjp",
"public_repos": 30,
"account_age_days": 561
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "4 followers of ajtgjmdjp",
"points": 5,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 4,
"login": "ajtgjmdjp"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "30 public repos, account ~1 yr old",
"points": 13.9,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 30
}
},
{
"code": "account_age_years",
"params": {
"years": 1
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"edinet-mcp"
],
"ecosystems": "pypi",
"any_deprecated": false,
"min_days_since_publish": 11
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on pypi",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "pypi"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 11 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 11
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "19 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 19
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 86,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "exceptional",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 94,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": true
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "2 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 2
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 16,
"status": "met",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 9.6,
"status": "met",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "5 out of 5 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"topics": [
"ai-agent",
"edinet",
"finance",
"financial-analysis",
"japanese",
"llm",
"mcp",
"model-context-protocol",
"python",
"xbrl",
"disclosure",
"financial-data",
"japan",
"mcp-server",
"securities"
],
"has_wiki": true,
"homepage": "https://pypi.org/project/edinet-mcp/",
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://pypi.org/project/edinet-mcp/",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "15 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 15
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 58,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 59,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 5.9
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "5 out of 5 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 1/28 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "22 commit(s) and 5 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 7",
"points": 3.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "GitHub workflow tokens follow principle of least privilege",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "45 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "moderate",
"name": "Dependency advisories",
"note": "Matched the pypi:edinet-mcp@0.8.2 runtime dependency closure — what installing the published package pulls in — 83 packages. Reachability is not analyzed.",
"notes": [
{
"code": "advisories_scope_published",
"params": {
"package": "pypi:edinet-mcp@0.8.2",
"assessed": 83
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 56,
"inputs": {
"source": "osv",
"advisories": 8,
"affected_packages": 2,
"assessed_packages": 83,
"unassessed_packages": 0,
"affected_by_severity": "critical 1, moderate 1",
"direct_affected_packages": 1
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "1 affected: fastmcp 2.14.7 (critical 10.0)",
"points": 7,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 1,
"packages": "fastmcp 2.14.7 (critical 10.0)"
}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "1 affected: diskcache 5.6.3 (moderate)",
"points": 19,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 1,
"packages": "diskcache 5.6.3 (moderate)"
}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "2 advisory-carrying package(s) unaddressed past 90 days; oldest published 169 days ago",
"points": 30.2,
"status": "partial",
"details": [
{
"code": "advisories_stale",
"params": {
"days": 90,
"count": 2,
"oldest": 169
}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 83,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 65,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "weak",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.854,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "70 of 82 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 70,
"sampled": 82
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 79,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"uv.lock"
],
"has_dockerfile": true,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"src/edinet_mcp/py.typed"
],
"agent_commit_share": 0.929,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0.024
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 11,
"status": "met",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "src/edinet_mcp/py.typed",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "src/edinet_mcp/py.typed"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "78 of the last 84 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 78,
"sampled": 84
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "2 of the last 84 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 2,
"sampled": 84
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 7",
"points": 7,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"primary_language": "Python",
"largest_source_bytes": 40316,
"source_files_sampled": 34,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Python with type-check config (src/edinet_mcp/py.typed)",
"points": 27,
"status": "partial",
"details": [
{
"code": "typecheck_config_language",
"params": {
"files": "src/edinet_mcp/py.typed",
"language": "Python"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/34 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 34,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "moderate",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": true,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 20,
"status": "met",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"labels": [
"mcp-server",
"library",
"cli"
],
"scores": {
"cli": 4,
"library": 8,
"mcp-server": 11
},
"primary": "mcp-server",
"evidence": [
{
"tier": "distribution",
"label": "library",
"source": "registry:pypi",
"weight": 6
},
{
"tier": "dependencies",
"label": "cli",
"source": "dep:click",
"weight": 4
},
{
"tier": "dependencies",
"label": "mcp-server",
"source": "dep:fastmcp",
"weight": 4
},
{
"tier": "structure",
"label": "mcp-server",
"source": "mcp_signal",
"weight": 3
},
{
"tier": "description",
"label": "library",
"source": "description:library",
"weight": 2
},
{
"tier": "description",
"label": "mcp-server",
"source": "description:mcp-server",
"weight": 2
},
{
"tier": "tags",
"label": "mcp-server",
"source": "tag:mcp-server",
"weight": 2
}
],
"artifacts": [],
"confidence": "medium",
"host_extension": false,
"runs_as_process": true,
"consumed_by_code": true
},
"metrics_version": "2.3.1"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-30T23:57:59.925021Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/ajtgjmdjp/edinet-mcp.svg",
"full_name": "ajtgjmdjp/edinet-mcp",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with ajtgjmdjp/edinet-mcp. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.3.1, schema v0.27.0 — full methodology · metrics wiki.
