andywilliams / dwlf-mcp-server

The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

Installing npm:@dwlf/mcp-server@0.39.0 pulls in 108 packages, direct and transitive: 1 carry known advisories, of which 0 are direct dependencies.

An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.

{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 13405,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "JavaScript": 3285,
        "TypeScript": 193624
      },
      "pushed_at": "2026-07-15T15:10:57Z",
      "created_at": "2026-01-30T12:29:02Z",
      "owner_type": "User",
      "updated_at": "2026-07-15T15:13:27Z",
      "description": "MCP server for DWLF market analysis platform — AI-accessible tools for market data, indicators, signals, strategies and more",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "master",
      "license_spdx_raw": "MIT",
      "primary_language": "TypeScript",
      "significant_languages": [
        "TypeScript"
      ]
    },
    "owner": {
      "blog": null,
      "name": "Andy Williams",
      "type": "User",
      "login": "andywilliams",
      "company": null,
      "location": "London",
      "followers": 8,
      "avatar_url": "https://avatars.githubusercontent.com/u/2787418?v=4",
      "created_at": "2012-11-13T14:08:05Z",
      "is_verified": null,
      "public_repos": 19,
      "account_age_days": 5004
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.4.0",
          "kind": "minor",
          "published_at": "2026-02-01T14:46:13Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "7680e9203b123f78a1678317402d4d3c60375f63",
          "body": "The markets chart's right-hand panel groups symbols by TAG; an untagged\nsymbol falls into \"Others\" (STRC, SATA, SIL, AMD, UUP, … currently sit\nthere). The backend tag API (/v2/symbols/tags) already exists — this adds\nthe missing MCP surface so the agent can read groups and (re)assign symbols:\n\n- dwl\n[…]\neWithBody() sends a JSON body on DELETE (removeSymbolTag\nreads symbol/tag from the body, not the query string). Build clean (tsc).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(symbol-tags): MCP tools to categorise symbols → 0.39.0 (#66)",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-07-15T15:10:30Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "04a3b65428041b1a8a4bcd83048b97e0742f37d2",
          "body": "…0 (#65)\n\n* feat(trades): decision-stats window param (months / fromDate) → 0.38.0\n\ndwlf_get_decision_stats now accepts `months` (last N months) or `fromDate`\n(YYYY-MM-DD) and passes them to /trades/decision-stats (SPT #543 added the\nserver-side scope). Lets the agent read the scorecard in current-f\n[…]\nma (clear early failure, documents the contract).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(trades): decision-stats window param (months / fromDate) → 0.38.…",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-07-15T12:37:58Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e6519251106a35124679a12f6abe0f8275e2ca1c",
          "body": "The publish workflow ran `npm install -g npm@latest`; npm@latest advanced to\n12.0.1 which dropped Node 20 support, so the step now fails with EBADENGINE and\nblocks every publish. Pin the exact trusted-publishing floor (11.5.1) that still\nruns on Node 20.\n\nAlso bump 0.36.2 → 0.37.0 to actually publis\n[…]\ne access) — 0.36.2 was already published (by #62), so the\nearlier merge had nothing new to release even before the workflow broke.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(ci): pin npm@11.5.1 for publish + bump to 0.37.0 (#64)",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-07-15T10:59:46Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ff8b1be0543da05a206ce04ec3c970e04b870781",
          "body": "…r owner candles (#19) (#63)\n\n* feat(market-data): fix timeframe param + open dwlf_get_market_data for owner candles (#19)\n\ndwlf_get_market_data sent `interval` (1d/4h/1h) but the /v2/market-data endpoint\nreads `timeframe` (daily/weekly/hourly) — so the param was silently ignored and the\ntool always\n[…]\nther and mislead the agent about who can call it.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(market-data): fix timeframe param + open dwlf_get_market_data fo…",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-07-15T10:55:51Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ff11ca2b3120aaa946c4f99fe015f918f1ecfeba",
          "body": "…t the footgun (#62)\n\n`dwlf_get_events` made a single `/events` call and never followed the cursor.\nScoped by `customEventId`/`eventName`, the backend returns up to `limit` SCANNED\nrows post-filtered + a `cursor`, so page 1 holds only the MOST RECENT matches —\nreading one page silently undercounts a\n[…]\nustomEventId` param doc warn about pagination + the 7-day\n  default window.\n- docs/AGENT-ONBOARDING.md: new troubleshooting entry.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(get_events): auto-paginate scoped custom-event queries + documen…",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-06-16T11:35:37Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "7f59cc85a88f0e0b79a4ddf9c22bfd8914f63c91",
          "body": "Every tool's catch reports `error.message`, which for an axios failure was just\n\"Request failed with status code N\" — the backend's actual error body (e.g. a\n400's \"skipNote exceeds max length of 500 characters\") was swallowed, leaving\nagents to guess. Add a response-error interceptor in the shared \n[…]\ne}} / {message} / {error:'str'} / string,\nwith a JSON fallback). One place fixes every tool. Version bump so publish.yml\nships it.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(client): surface backend error message, not bare HTTP status (#61)",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-06-16T09:56:18Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "38f44c726485da4a39d1a79a5d33e6a94b46c2c2",
          "body": "…6.0) (#60)\n\nAdds view='overview' (one headline line per symbol + full crossAsset) and\nmakes it the DEFAULT — the prior 'summary' default blew the response limit\nacross a large watchlist + briefing list. Callers opt into summary/full\n(and should scope with symbols=). Description rewritten to teach the three\ntiers + the watchlist∪briefing-list scope.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: default dwlf_get_daily_briefing to the new 'overview' view (0.3…",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-06-15T08:55:58Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ee2d05e830674bdbb9778db3b7425d92c2da0b66",
          "body": "dwlf_get_briefing_list / dwlf_add_to_briefing_list /\ndwlf_remove_from_briefing_list — manage the user's briefing list (symbols\nbriefed daily but not actively watched: Mag7, macro/dollar, bellwethers).\nDescriptions teach the watchlist-UNION-briefing-list model and where the\nbriefing list sits between the watchlist and the whole-universe screener.\nRemove passes ?symbol= so pair symbols (BTC/USD) don't break the route.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: briefing-list MCP tools (0.35.0) (#59)",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-06-15T08:34:54Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "3bed1162c1424b22e784e2793e97afe272a4f83f",
          "body": "…(#58)\n\nTwo of today's platform features as agent tools:\n- dwlf_get_decision_stats: the decision-quality ledger (2x2 matrix,\n  byStrategy, per-reason hit rates for both vocabularies) - lets agents\n  cite which of the user's stated reasons carry alpha.\n- dwlf_get_cycle_setups: the Cycle Setup Screene\n[…]\n window x\n  daily confirmation, ranked, both sides) - the 'where should I look\n  today' call; long/short counts alone summarise universe regime.\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: dwlf_get_decision_stats + dwlf_get_cycle_setups tools (0.34.0) …",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-06-12T20:11:40Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ddc1daf1d33ba4b038692606c59521fda5413908",
          "body": "… (#57)\n\nPairs with serverless-portfolio-tracker#493: agents can (and should) tag WHY\na trade is taken — the symmetric twin of skip reasons, feeding the\nCounterfactual 2x2 decision analytics. Valid set documented in the tool\ndescription; confirmNote required when 'other'. Optional for back-compat.\n\nBump 0.32.0 -> 0.33.0. (dist built by CI on publish.)\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(trades): confirmReasons/confirmNote params on dwlf_confirm_trade…",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-06-11T09:15:49Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "9c081bcc5e67a5cdc82744fc7442296148ad937d",
          "body": "…#56)\n\nWraps GET /v2/trades/skip-outcomes (SPT #492): every skipped trade replayed\nagainst daily candles using the decision-time-frozen entry/SL/TP. Outcomes\n(would_be_stopped capped at -1R / would_hit_target / running), savedR,\nMFE/MAE, per-reason + per-strategy aggregates, cumulative saved-R serie\n[…]\nses the 'how are my skips performing' workflow into one\ncall (was list+quotes+hand-math).\n\nBump 0.31.0 -> 0.32.0. (dist built by CI on publish.)\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(trades): dwlf_get_skip_outcomes — the Counterfactual scorecard (…",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-06-10T20:04:44Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "64bf37f683ce84ccb88692061ee76d465ec9dd0e",
          "body": "Confirm-mode planned trades had no MCP tool for the two core decisions —\nconfirm (take) and skip (pass) — so agents had to fall back to raw curl + a\nshort-lived JWT that expired mid-workflow. Both endpoints are trades:write,\nwhich the agent API key already carries.\n\n- dwlf_confirm_trade(tradeId, ent\n[…]\nskip (valid reason codes documented; skipNote\n     required when a reason is 'other')\n\nBump 0.30.7 -> 0.31.0. (dist is built by CI on publish.)\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(trades): dwlf_confirm_trade + dwlf_skip_trade MCP tools (#55)",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-06-08T10:34:49Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5ce02b672e624bea6d9d258af8669e0afa7bd0c4",
          "body": "…7) (#54)\n\nNew tool: latest close + date for one/more symbols, API-key-accessible, works\nfor ANY tracked symbol incl. off-watchlist. Returns only the current level (no\nOHLCV/history) — for bars use dwlf_get_market_data (JWT-only) or\ndwlf_get_price_picture. Hits the new markets:read GET /v2/quotes en\n[…]\nmpty narrative.\n\nRebased onto master (#53, 0.30.6) → 0.30.7. Requires serverless-portfolio-tracker\n/v2/quotes (companion PR #487).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(market-data): dwlf_get_quote — last price for any symbol (v0.30.…",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-06-05T09:05:18Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3a0e6b1bba89a4bd3717ae54e1e9fedfb347d898",
          "body": "…#53)\n\nThe status enum only offered open/closed, so an agent couldn't pull the\nskip journal (status=skipped) via MCP even though the backend supports it\n— had to list all trades and filter client-side. Extends the enum to\nopen|closed|planned|skipped (omit for all) + documents that skipped carries\nsk\n[…]\none-call query.\nBackend already serves planned/skipped from the base table (the\nStatusIndex-projection fix); this just exposes it.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(trades): dwlf_list_trades can filter planned/skipped (v0.30.6) (…",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-06-05T08:59:04Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "da54ee2fdd707fff470c19bffb2b6b1a9e5ecad8",
          "body": "…0.5) (#52)\n\n* feat(backtests): page dwlf_list_backtests (limit/status/cursor)\n\nEven with the strategyDefinition strip (v0.30.4), an account with many runs\nstill overflows the MCP transport wall — 50 trimmed records measured ~63 KB.\nThe trim was necessary but not sufficient; the list also needs pagi\n[…]\nent passes whatever a prior list actually showed.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(backtests): page dwlf_list_backtests — limit/status/cursor (v0.3…",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-06-02T19:21:01Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9c7c317e57b0fb6d704dea12ec88c1dc7ea8c473",
          "body": "Each backtest record embeds the full strategyDefinition (visual-builder\nnode graph) — typically the largest field — so an un-trimmed list of a few\ndozen runs is hundreds of KB (~402k measured) and torches an agent's\ncontext window when it only wanted \"which backtests exist and what's their\nstatus?\".\n[…]\n_backtest_results.\n\nRequires the companion serverless-portfolio-tracker change that implements\n?summary=true on GET /v2/backtests.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(backtests): dwlf_list_backtests defaults to summary mode (#51)",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-06-02T18:41:47Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "92095c8c44945fee6af14bcf62de7fd36bb6d7d4",
          "body": "…rift audit) (#50)\n\nAudit of the describe_strategy_nodes catalog vs the executor\n(dwlf-scheduled-jobs visualStrategyExecutor.calculateTakeProfit) after the\nsl_below_recent_low doc fix. One drift found: tp_1r/2r/3r/5r/10r listed their\n`ratio` param as honoredByExecutor:true, but the executor uses the\n[…]\np_atr (3x), tp_r_multiple (ratio honored), tp_trailing_stop (already honestly\nflagged as a 5% placeholder). Bump 0.30.2 -> 0.30.3.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(strategies): mark preset TP-node ratios as not overridable (doc-d…",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-06-02T18:17:23Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "235c98a8802de247680bf8f0cf0fc8a849f887b8",
          "body": "…ew (#49)\n\nThe full briefing blows the per-tool-result token limit on a normal\nwatchlist. Pairs with serverless-portfolio-tracker #470 (adds ?view=summary).\n\n- Adds a `view` param ('summary' | 'full'); defaults to 'summary' in the\n  handler so a normal watchlist no longer exceeds response limits.\n- \n[…]\nDeploy after #470 is live (the backend must understand view=summary; until\nthen it harmlessly ignores the param and returns full).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(briefing): default dwlf_get_daily_briefing to compact summary vi…",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-06-02T13:55:08Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "47edb7183b3fa4916463f548d9a8b61869c4e316",
          "body": "…r (#48)\n\nThe describe_strategy_nodes catalog claimed sl_below_recent_low reads\ncycle.low.confirmed swingPoints with a 10-bar fallback. The executor\n(visualStrategyExecutor.calculateRecentLowStopLoss) actually uses the\ngeneric swing detector (swingService.getSwings) with a fixed confirmation\nlag — s\n[…]\nT\n(honoredByExecutor: false). Doc-only — no runtime/strategy behaviour\nchange. Bump 0.30.0 -> 0.30.1 so the catalog fix publishes.\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(strategies): correct sl_below_recent_low catalog to match executo…",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-06-02T08:41:04Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "25aa1a0e7beeaf24d25283ebc98c1d20264d41a3",
          "body": "…odes (#47)\n\n* feat(strategies): catalog minTrendlineLengthDays on trendline break nodes\n\nDocument the new configurable per-node minimum trendline length (calendar\ndays) on the trendline_break_bullish/bearish condition nodes, so agents\nbuilding strategies/custom events know the param exists and is h\n[…]\ns publish when the version already exists on npm.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(strategies): catalog minTrendlineLengthDays on trendline break n…",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-05-28T11:44:17Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "406acc5c098229e76f5e370a94a3194e05bddaef",
          "body": "#45 merged with no version bump, so package.json stayed at 0.29.0 — which\n#44 had already published. The publish workflow skips already-published\nversions, so the annotation fix never shipped to npm. Bump to 0.29.1 so CI\npublishes a build that actually contains it.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: bump to 0.29.1 to publish annotation tool fix (#45) (#46)",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-05-28T10:52:00Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "4922465cba48ae549114ef91016d6164664ac5b2",
          "body": "… shapes (#45)\n\nThe annotation tools were out of sync with the backend (serverless-portfolio-tracker\nannotationsService.js / annotationsHandler.js), causing three failures:\n\n- type enum exposed only 7 of the 23 types the backend accepts, silently\n  blocking arrow, emoji, crossline, vline, ray, fib*,\n[…]\n(field lists, unix-ms note, multi-line \\n tip, arrow-vs-text\nguidance, type aliases), and constrains origin to the backend's enum.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(annotations): expose all backend types, repair update + bulk wire…",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-05-28T10:43:33Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2fe2861dd5ff9b30cf74433eea319eff1141e597",
          "body": "…as honored (#44)\n\nReflects the executor params shipped in dwlf-scheduled-jobs PR#225 (+#224):\n- sl_below_recent_low & sl_below_recent_cycle_low: bufferPct flipped\n  honoredByExecutor→true (fractions + ints, 0 valid, default 1%);\n  maxStopDistancePct added (executability gate, default off — with the\n[…]\nmultiple node: custom R:R take-profit (any ratio vs the fixed\n  1/2/3/5/10 presets); ratio honored, default 3R.\n\nBumped to 0.29.0.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(strategies): catalog bufferPct/maxStopDistancePct/tp_r_multiple …",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-05-28T09:06:35Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8cce6b9a2f57a25aa3c032679ea1eb06dc6b5cb0",
          "body": "…param (#43)\n\nSibling MCP entry for the new SL node landing in dwlf-scheduled-jobs.\nStrict DCL semantics — anchors on cycle.low.confirmed (long) /\ncycle.high.confirmed (short) events, not generic swing lows. Use this\nwhen you specifically want a DCL stop; the existing sl_below_recent_low\nuses bare s\n[…]\n recommend overriding it yet.\n\nBumped to 0.28.0.\n\nPairs with dwlf-scheduled-jobs PR (to follow) that implements the\nexecutor side.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(strategies): catalog sl_below_recent_cycle_low node + timeframe …",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-05-27T18:28:40Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "238fb1f06b7290e5c41efa313388bb4a480aee50",
          "body": "…ap (#42)\n\ndwlf_get_evaluation_status' `summary.totalItems` / `processedItems`\ncount the eval-JOB items (one per strategy / one per custom event), NOT\nthe per-symbol fan-out inside the job. A strategy eval across 37\nsymbols shows `totalItems: 1, processedItems: 1` when done — that just\nmeans \"the st\n[…]\ns a\ndwlf-scheduled-jobs change and is too risky for a polish session —\nparking until a dedicated worker thread.\n\nBumped to 0.25.0.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(evaluations): surface symbolsRequested + warn about per-symbol g…",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-05-27T17:15:40Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "bffa71251ddeb0e974a182764f5253a2f680d74c",
          "body": "* feat(events): echo filtersApplied so the 7-day default is visible\n\ndwlf_get_events defaults to last-7-days when no fromDate/toDate/days is\npassed — and silently hides anything older. Has bitten multiple agent\nsessions (\"where did that old fire go?\"). Rather than tear the default\nout (would break e\n[…]\nlied. Objects\nkeep the original spread behaviour.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(events): echo filtersApplied so the 7-day default is visible (#39)",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-05-27T17:09:12Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "4f4fe150d259a3bf159df208c3e6095ca538a98f",
          "body": "* feat(backtests): add dwlf_cancel_backtest — state-transition halt\n\nPairs with sptr POST /v2/backtests/:requestId/cancel. State transition\n(not delete): preserves the request record for audit trail but stops\nexecution.\n\n- pending → clean cancel (worker checks status before running, skips)\n- running\n[…]\nctual backtest status and can branch accordingly.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(backtests): add dwlf_cancel_backtest — state-transition halt (#41)",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-05-27T16:57:35Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "76ec76061a4497454b2ebc80e8a4b06d19eb36e4",
          "body": "… node params (#40)\n\nStatic catalog of every visual-strategy output node (SL / TP / signal /\nlogic / cancellation / exit) with what each one does and what\n(currently-implicit) parameters drive its behaviour. Sourced from\ndwlf-scheduled-jobs/src/services/visualStrategyExecutor.js — that's the\nruntime\n[…]\n of a class). Local catalog, no\nbackend round-trip.\n\nBumped to 0.23.0 (minor — new tool, no behavior change for existing\ncallers).\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(strategies): add dwlf_describe_strategy_nodes — surface implicit…",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-05-27T16:52:04Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "22c26afac12a5154b023df9cbd4271a7cc1c4253",
          "body": "…ription (#38)\n\nBackend sptr PR#455 (merged 2026-05-27) widened the PATCH allowlist to\naccept symbols / timeframes / channels / quietHours / dedupeWindowMinutes /\ncustomEventId. Expose those on the MCP wrapper so agents can edit them\nwithout dropping to curl — previously the only way to repoint a su\n[…]\nubset of\nfields was accepted.\n\nBumped to 0.21.0 (minor — new optional fields, no behavior change for\ncallers that don't use them).\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(subscriptions): expose widened PATCH fields on dwlf_update_subsc…",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-05-27T16:11:19Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d2bae88415854fe80370eeeadab73823f1a282d4",
          "body": "The full backtest results payload is 1-3 MB (per-symbol equity curves +\nper-trade rows + signals + monthlyReturns + the request-level portfolio curve\nhung off results[0]). Through MCP it gets dumped to disk and re-extracted via\nsubagent every time — even when the agent just wanted to confirm Sharpe \n[…]\nwhen\nthey actually need per-trade rows or equity curves to plot.\n\nBumped to 0.20.0 (minor — behavior change for an existing tool).\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(backtests): default dwlf_get_backtest_results to summary mode (#37)",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-05-27T15:21:41Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "db5fdb233f90fa1aa1306b6bc5889795afbdc4aa",
          "body": "…tegy emit docs, get_events default warning, price_picture polish (v0.19.1) (#36)\n\n* feat(agent-ux): polish bundle — recent-signals filters, evaluate_strategy emit docs, get_events default warning, price_picture MA dedupe + docstring tightening (v0.18.2)\n\nFive small follow-ups to the agent-UX backlo\n[…]\n.\n\nAdded the import + the normalizeSymbol() call.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(agent-ux): polish bundle — recent-signals filters, evaluate_stra…",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-05-27T14:57:29Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "620a7612cf4d2cbcf8b7c32eb02aa791443cde40",
          "body": "…) (#35)\n\nCloses the long-standing \"I have to use curl for subscriptions\" gap from the\nproject_dwlf_mcp_agent_ux backlog. Five new tools, all thin wrappers over\nexisting REST endpoints; brings the MCP surface to parity with the principle\nthat anything an agent needs should be invocable through MCP n\n[…]\n+ the need\n  to disable subscriptions on the strategy first if the dispatcher is hot\n\nBumps to v0.19.0 (minor — additive surface).\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: add subscription CRUD + dwlf_delete_strategy MCP tools (v0.19.0…",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-05-27T14:35:39Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "271662046b12850de565178decf47781be596cbd",
          "body": "…e-fire daily and crowd out real events (#34)\n\nsupportResistance.{support,resistance}.level events are emitted by the indicator cron every day\nwith the same level value. Including them in a chronological \"price narrative\" tool means a 60-day\nwindow dumps ~120 duplicate rows that crowd out the actual\n[…]\nevels, that's exactly what dwlf_get_support_resistance is for.\nRemoved the now-dead supportResistance label-enrichment branch too.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(price-picture): drop S&R level events from the narrative — they r…",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-05-27T14:13:17Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "44163977ad8418476b80af65b081d3d214fb5573",
          "body": "… docs (v0.18.0) (#33)\n\n* feat: add dwlf_get_price_picture tool + teach pivot-as-price workaround in tool docs (v0.18.0)\n\nThree coordinated changes to make the pivot-as-price workaround discoverable for agents that\ncan't call /market-data directly (most API-key callers — raw OHLC is JWT-only per Twe\n[…]\natch correctly distinguishes\nthe two event types.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: add dwlf_get_price_picture + teach pivot-as-price workaround in…",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-05-27T14:01:13Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ee5e4540ed82e6148ec7599361260f69e2dbc9e6",
          "body": "Background: npm rotated all granular access tokens with write access\nthat bypass 2FA on 2026-05-19 as a security precaution against the\n\"Mini Shai-Hulud\" supply chain attack pattern. The publish workflow's\nNPM_TOKEN was caught in that rotation, and PR #30 (v0.17.0) and PR #31\n(v0.17.1) both failed w\n[…]\nmaster, the existing version-skip check will see v0.17.1\nisn't on npm yet and publish it via OIDC. No further version bump\nneeded.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(publish): switch to npm Trusted Publishing (OIDC) (#32)",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-05-20T09:55:31Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f4ca597a6baeb54b60f3652cd4148cba73d38702",
          "body": "* fix(trade-notes): map MCP `content` param to backend `text` field\n\ndwlf_add_trade_note sent `{ content }` to POST /v2/trades/:id/notes but\nthe backend's tradeNotesHandler.createNote requires `{ text }` (see\nserverless-portfolio-tracker src/handlers/tradeNotesHandler.js). Every\nattempt to add a tra\n[…]\nnt` → `text` on the wire). No API surface change.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(trade-notes): map MCP `content` to backend `text` field (#31)",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-05-20T09:42:33Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "36d460478b32c40c77005d1c34579f25cb6b8194",
          "body": "Exposes the existing `DELETE /v2/backtests/{requestId}` API endpoint as\nan MCP tool so agents can clean up stale or invalid backtest runs\nwithout dropping to the raw API. The backend handler\n(serverless-portfolio-tracker visualBacktestHandler.deleteBacktest →\nbacktestService.deleteBacktestRequest) w\n[…]\n be tedious\nand there was no agent-callable path. This unblocks bulk teardown.\n\nVersion 0.16.0 -> 0.17.0 (publish.yml skips if already on npm).\n\nCo-authored-by: Claude Opus 4.7 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: add dwlf_delete_backtest tool (v0.17.0) (#30)",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-05-20T09:32:21Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "15604cb2ae7c47b8f8994378410049b4de0202a0",
          "body": "dwlf_evaluate_custom_event / dwlf_evaluate_strategy never exposed a\nlookbackDays param, so every agent-triggered evaluation used the\nevaluator's default DEFAULT_LOOKBACK = 400 candles (~14 months). Any\nbacktest gating on a custom event silently saw ZERO entries before\nthat ~14-month window even when\n[…]\nuate tools + document the default-window trap\nin the tool descriptions. Version 0.15.0 -> 0.16.0 (publish.yml skips\nif version already on npm).\n\nCo-authored-by: Claude Opus 4.7 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: expose lookbackDays on evaluate tools (full-history backfill) (#29)",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-05-19T19:12:53Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "4de71d256d05496b71e302145fc0e6a065aaf035",
          "body": "New optional boolean `disableTakeProfit` on dwlf_run_backtest. When a\nstrategy has no take-profit node the backend otherwise force-applies a\n3xATR fallback TP that exits exit-signal-only strategies early; this\nflag suppresses it so the exit graph (cycle high / trendline break)\nactually drives the ex\n[…]\ned.\n\nBackends: dwlf-scheduled-jobs#211 + serverless-portfolio-tracker#448.\nVersion bump 0.14.0 -> 0.15.0 (publish.yml skips if already on npm).\n\nCo-authored-by: Claude Opus 4.7 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: add disableTakeProfit param to dwlf_run_backtest (v0.15.0) (#28)",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-05-19T16:51:51Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "99d180117b8133a9eeb289b74b77fddc812fc676",
          "body": "…#27)\n\nAdds optional maxPositionsPerSymbol to dwlf_run_backtest (bounds\nper-symbol concurrent positions when allowSymbolPyramiding=true;\ndefault unlimited). Forwarded to POST /backtests.\n\nVersion bumped to 0.14.0 IN THIS PR so publish.yml actually publishes\non merge (it skips when the package versio\n[…]\non npm —\nthe reason #24/#25 needed the separate #26 bump).\n\nPairs with dwlf-scheduled-jobs#209 + serverless-portfolio-tracker#443.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(backtests): expose maxPositionsPerSymbol + bump 0.13.0->0.14.0 (…",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-05-19T09:04:09Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8563c1fe72cad4068bf84d42d332688405f7c18c",
          "body": "publish.yml skips when the package.json version is already on npm.\n#24 (capital/risk/portfolio params) and #25 (allowSymbolPyramiding)\nmerged to master but version stayed 0.12.0, so every run skipped\npublish — npm latest is still the 2026-05-15 build. Minor bump\n(new backward-compatible features) so the next master push publishes\n0.13.0.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: bump version 0.12.0 -> 0.13.0 to publish #24/#25 (#26)",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-05-19T08:24:01Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "f035e16fd3cd32989000bc429124ac9be19797de",
          "body": "Optional boolean (default false = unchanged), mirroring the existing\nportfolioMode/capital params. Forwards allowSymbolPyramiding to\nPOST /backtests so the portfolio simulator can be told to permit >1\nconcurrent open position per symbol.\n\nPairs with dwlf-scheduled-jobs#208 (simulator gate) and\nserverless-portfolio-tracker#442 (accept + persist on the request).\nNo effect until those ship + this package is published.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(backtests): expose allowSymbolPyramiding on dwlf_run_backtest (#25)",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-05-19T08:02:08Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "390ed262535c52ac91c2ce2a670db0e3a37ed25e",
          "body": "…ktest (#24)\n\nAdds initialCapital, riskPerTrade, maxConcurrentTrades, and portfolioMode\nas optional zod fields so agents can run portfolio-mode backtests with\nnon-default capital/risk settings. Each value is forwarded to POST\n/v2/backtests only when set; backend defaults are preserved when omitted.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(backtests): expose capital/risk/portfolio params on dwlf_run_bac…",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-05-17T19:58:16Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "0c597b663bbf379ceca1af44bb15ef1f94b8a9ae",
          "body": "…m_event (#23)\n\nWraps existing backend endpoints:\n- PUT /v2/custom-events/{id} — partial update of name, description,\n  visual, metadata, version, notifyOnFire\n- DELETE /v2/custom-events/{id} — hard delete (compiled executable,\n  symbol activations, and watermark state also removed; past fires\n  in \n[…]\n`\nor any condition shape via update, re-call dwlf_compile_custom_event\nso the executable is regenerated.\n\nVersion 0.10.0 → 0.11.0.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(custom-events): add dwlf_update_custom_event + dwlf_delete_custo…",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-05-15T17:49:14Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "aa03f776bc51251702af5f750b0e92dde2094f15",
          "body": "…lling (#21)\n\n* feat(evaluations): add MCP tools for on-demand evaluation triggering\n\nCloses the create → compile → activate → evaluate → query-results\nworkflow loop that the agent could not previously complete without\nwaiting for the daily cron. The backend has had POST /v2/evaluations\nall along bu\n[…]\ned to match the convention used by every other tool\n(dwlf_list_annotations, dwlf_get_events, dwlf_get_indicators, etc).\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(evaluations): MCP tools for on-demand evaluation triggering + po…",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-05-15T17:39:53Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c030ec8e35dcb1843c4cfbe1236e8bc4a4f022ca",
          "body": "…ents (#22)\n\nCompanion to serverless-portfolio-tracker's filter addition. Lets\nagents query fires of a specific custom event directly rather than\nfetching all custom_event rows and client-side filtering.\n\nAdds two optional params to dwlf_get_events:\n- customEventId: filter to a specific event ID (on\n[…]\nls,\ntimeframe). Closes the \"query fires\" half of the\ncreate→compile→activate→evaluate→query-results loop.\n\nVersion 0.9.0 → 0.10.0.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(events): expose customEventId + eventName filters on dwlf_get_ev…",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-05-15T17:29:00Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6cb71a9a6bdbc5e6662eccd0513f414ae41f3f1c",
          "body": "Companion to serverless-portfolio-tracker PR adding `?symbols=` query\nsupport on /v2/briefing/daily. Lets agents extend the briefing's\ncoverage to include symbols outside their curated watchlist for a\nsingle call — most useful when Telegram alerts fire for non-watchlist\nnames and the agent wants the\n[…]\n-05-07/08 series and\nthe previous one-line description was out of date).\n\nBumped to 0.8.0 (minor — additive, no breaking changes).\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(briefing): add symbols param to dwlf_get_daily_briefing (#20)",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-05-08T10:48:38Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "5730abf389145a2d1ce9df5eb3f8f5eb2a988a02",
          "body": "Weekly cycle events are stored in the EventsTable with timeframe '1w'\n(post-migration canonical form; backend canonicaliser at\nserverless-portfolio-tracker/src/db/eventsService.js:16-24 also accepts\nthe legacy 'weekly' input form). The MCP enum was missing '1w' so\nagents couldn't query weekly cycle.\n[…]\na real entry or\ncounter-trend bait).\n\nBumps to 0.7.0 (minor — additive). Phase 1 #1 of the agent-shaped\nbriefing improvement plan.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(events): add 1w timeframe to dwlf_get_events enum (#19)",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-05-07T15:34:49Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "081bb1af8fea65e8cfd361972895d4b7c8ac8773",
          "body": "…ePerSymbol (#18)\n\nThe /v2/events backend already accepts these filters; the MCP tool was\nonly forwarding `symbol`, `type`, `limit`. Without timeframe filtering\nthe response is dominated by hourly events and daily-bar fires (the ones\nagents typically care about) get truncated past the limit — every \n[…]\nmeframe: '1d',\n    days: 5\n  })\n…instead of paging through hourly noise.\n\nBumped to 0.6.0 (minor — additive, no breaking changes).\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(events): expose timeframe, symbols, days, fromDate/toDate, uniqu…",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-05-07T14:21:57Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "53847b07205271b58e63f22a7a09a9b67dfe2a6b",
          "body": "…tion (#17)\n\n* fix(annotations): require symbol and timeframe for dwlf_delete_annotation\n\nThe backend's DELETE /v2/annotations/:id requires \\`symbol\\` and \\`timeframe\\`\nas query params (matches its tenant-scoping pattern). The MCP tool was\nsending only the path param, so every delete call returned H\n[…]\nms)\\` and called from both.\n\nNo behaviour change.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(annotations): require symbol and timeframe for dwlf_delete_annota…",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-05-07T13:02:47Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3991aeaa8dd694be8c7f74a27f0dbb1badf082dc",
          "body": "…on types (#16)\n\n* fix(client): default to stock pass-through, narrow normalization to known paired assets\n\nThe previous `normalizeSymbol` used a `KNOWN_STOCKS` allow-list — anything not\nin it got `-USD` appended and was treated as crypto. Stock tickers outside the\nhand-maintained list (PAAS, DRD, H\n[…]\nurfaced because the dist was rebuilt for this PR.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(client): symbol resolution + feat(annotations): long/short positi…",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-05-07T09:09:41Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9a3e4ef16fa564b888e7513fdbcb7a44d2062cdb",
          "body": "Add @dwlf/indicators and @dwlf/charting sections to help agents\nbuilding dashboards discover the open-source charting and indicator libs.\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: add open-source libraries to README and agent onboarding (#15)",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-04-07T12:39:24Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "bd8bfb541716f6c4ddcc768ca527689703b1ecee",
          "body": "- dwlf_preflight_custom_event: validate event graph without saving,\n  returns execution tier, complexity score, plan policy, suggestions\n- dwlf_get_quotas: plan tier, usage, limits, and custom event policy\n  limits (fast/async path constraints)\n\nEnables AI agents to check plan limits and validate events before\ncreating them — parity with the frontend builder experience.\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: add preflight and quotas MCP tools for agent tier parity (#14)",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-04-07T09:15:46Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "958843446d8f8230573b4d120908d73ed3bfd21d",
          "body": "…(#13)\n\n- Updated dwlf_create_custom_event with critical workflow steps\n- Updated dwlf_create_strategy with activation requirement\n- Strengthened dwlf_activate_event_symbols warning (emphasize REQUIRED)\n- Strengthened dwlf_activate_strategy_symbols warning\n- Updated dwlf_run_backtest with prerequisi\n[…]\nevaluation engine until symbols are activated\n- Addresses root cause of 0-trade backtests\n\nRelated to Kanban: https://www.dwlf.co.uk/kanban/task/MNET5CV0IIJJUP\n\nCo-authored-by: Jenna <jenna@clawd.bot>",
          "is_bot": false,
          "headline": "docs: strengthen symbol activation warnings in MCP tool descriptions …",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-03-31T22:41:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "88bf0f7b0d86e446bc73b70311a5f1b44dafe16f",
          "body": "Allows agents to use their registered DWLF API key with MCP,\nensuring strategies created via MCP are accessible via REST API.\n\nThe MCP server already supported API key authentication via DWLF_API_KEY\nenvironment variable. This PR adds comprehensive documentation to clarify\nthe account linking flow a\n[…]\n\n- Improved warning message in DWLFClient constructor\n- Added prominent note for AI agents in README\n\nKanban: https://www.dwlf.co.uk/kanban/task/MNASMJLVI1OHPF\n\nCo-authored-by: Jenna <jenna@clawd.bot>",
          "is_bot": false,
          "headline": "feat: Add API key authentication support for MCP server (#12)",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-03-28T21:59:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f0304d8526b667bb7fa3ce078aa86cc1f5038036",
          "body": "…s (#11)\n\nCo-authored-by: Jenna <jenna@clawd.bot>",
          "is_bot": false,
          "headline": "feat: add regime, intelligence, briefing, and register agent MCP tool…",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-03-28T16:44:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "36f8dfb6f53b9d2621ebb0ab45081b363ccd3f54",
          "body": "✨ New MCP Tools:\n- dwlf_run_synthetic_backtest: Run Monte Carlo simulations to validate strategy robustness\n- dwlf_get_synthetic_backtest_results: Get distribution stats and robustness assessment\n\n🎯 Features:\n- Configurable parameters: simulations (50-1000), duration (30-1095 days), scenarios\n- Mult\n[…]\ns completes the MCP integration for synthetic backtesting.\nPairs with backend PR #151 (serverless-portfolio-tracker) and frontend PR #256 (portfolio-frontend).\n\nCo-authored-by: Jenna <jenna@clawd.bot>",
          "is_bot": false,
          "headline": "Add synthetic backtest tools for Monte Carlo validation (#10)",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-02-17T20:16:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ed4b9f4899e1f00f20b0bb4eea1a1e074c4115e6",
          "body": null,
          "is_bot": false,
          "headline": "0.4.1",
          "author_name": "Andrew Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-02-10T17:55:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7aabb66d1a23f3221359b22201ebe2b395d3254d",
          "body": "Returns all recently fired custom events (where notifyOnFire=true)\nacross ALL symbols in one call. Much more efficient than per-symbol\nqueries. Documents the eventName vs eventType distinction.",
          "is_bot": false,
          "headline": "feat: add dwlf_get_custom_event_notifications tool",
          "author_name": "Jenna",
          "author_login": null,
          "committed_at": "2026-02-10T17:52:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7644e675b45dc9c20131edef9eccf2fa47eac0f5",
          "body": "…/delete tools (#9)\n\n* feat: add annotations, trade plans, position sizing, and trade update/delete tools\n\n* chore: bump version to 0.4.0\n\n---------\n\nCo-authored-by: Jenna 🦊 <jenna@clawd.bot>",
          "is_bot": false,
          "headline": "feat: add annotations, trade plans, position sizing, and trade update…",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-02-01T14:44:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4bb36fdcf0ec3d987127ebfd5c754e94e934904f",
          "body": "docs: mandatory recompile after editing events/strategies",
          "is_bot": false,
          "headline": "Merge pull request #8 from andywilliams/docs/compile-after-edit",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-01-30T22:51:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "488182d2c2a3d12bc889600f33c7e585c8d3c26a",
          "body": "…erence",
          "is_bot": false,
          "headline": "docs: add mandatory recompile-after-edit rule to strategy builder ref…",
          "author_name": "Jenna",
          "author_login": null,
          "committed_at": "2026-01-30T22:51:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5d34bf3ce78a76d3b0234d0aacb09ee4962c1019",
          "body": "docs: warn about exact logic gate nodeType values",
          "is_bot": false,
          "headline": "Merge pull request #7 from andywilliams/fix/logic-gate-nodetypes",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-01-30T22:17:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9b0908bf7294eca59ceb6648ce7fde6b4b7ea179",
          "body": "and_gate not and, then_gate not then, etc.\nUsing wrong values causes disconnected graph rendering in UI.",
          "is_bot": false,
          "headline": "docs: warn about exact logic gate nodeType values",
          "author_name": "Jenna",
          "author_login": null,
          "committed_at": "2026-01-30T22:12:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "45759b3156363fc9932ab35745ffde5e8a60f658",
          "body": "feat: prepare for NPM publishing",
          "is_bot": false,
          "headline": "Merge pull request #6 from andywilliams/feature/npm-publish-ready",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-01-30T20:14:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1f6ca2befbdd9d14b9003f398a78508304db129c",
          "body": "- Add .gitignore (node_modules, dist, env files)\n- Add MIT LICENSE (DWLF / Andy Williams 2026)\n- Add 'files' field to package.json (only dist/, README, LICENSE in package)\n- Add repository, homepage, author, publishConfig to package.json\n- Add prepublishOnly script to auto-build before publish\n- Bum\n[…]\nr NPM users (npx quick start, client configs, API key guide)\n\nNote: GitHub Actions workflows (ci.yml, publish.yml) are in .github/workflows/\nbut need to be pushed with a PAT that has 'workflow' scope.",
          "is_bot": false,
          "headline": "feat: prepare for NPM publishing",
          "author_name": "Jenna",
          "author_login": null,
          "committed_at": "2026-01-30T19:39:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "50afb4a30545a0eaf457f1eac01b95236f2d7fd1",
          "body": "docs: SL/TP must wire from signal node, not condition",
          "is_bot": false,
          "headline": "Merge pull request #5 from andywilliams/fix/sl-tp-wiring-docs",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-01-30T19:10:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "abc57ec5c89d46ca3e235ff6880e93f2db6f9e75",
          "body": "SL and TP nodes must always be wired from the Long Signal node,\nnot from the last condition node. This was causing incorrect graph\nwiring when agents built THEN-gate strategies.",
          "is_bot": false,
          "headline": "docs: clarify SL/TP must connect from signal node, not condition",
          "author_name": "Jenna",
          "author_login": null,
          "committed_at": "2026-01-30T19:09:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e438690d7b07b2a8ae6375fa4dba76a728fcf4d9",
          "body": "feat: Symbol activation MCP tools",
          "is_bot": false,
          "headline": "Merge pull request #4 from andywilliams/feature/symbol-activation-tools",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-01-30T17:07:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4cb7c86cded34a09246275e287be49ebaeb39ab9",
          "body": "Add 7 new MCP tools for managing symbol activations:\n- dwlf_activate_event_symbols (bulk enable for custom events)\n- dwlf_get_event_symbols (list active symbols for an event)\n- dwlf_deactivate_event_symbols (bulk disable for custom events)\n- dwlf_activate_strategy_symbols (bulk enable for strategies\n[…]\n dwlf_list_all_symbol_activations (list all event + strategy activations)\n\nAlso update create tool descriptions to warn that symbol activation\nis required after creation for events/strategies to fire.",
          "is_bot": false,
          "headline": "feat: add symbol activation tools for events and strategies",
          "author_name": "Jenna",
          "author_login": null,
          "committed_at": "2026-01-30T16:56:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "538858a0cd8caa07db5a688e112c05ad7a4b2b2e",
          "body": "docs: Rewrite README with all 43 tools + add cookbook",
          "is_bot": false,
          "headline": "Merge pull request #3 from andywilliams/feat/readme-cookbook",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-01-30T16:15:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3f8e873b5586d1963fb831dfefb65b34beffcb52",
          "body": "- Full rewrite of README listing all tools across 10 categories\n- Added docs/cookbook.md with 4 end-to-end worked examples:\n  1. Analyze a Symbol (full technical breakdown)\n  2. Build a Custom Event (academy → create → compile)\n  3. Create and Backtest a Strategy (build → test → iterate)\n  4. Daily Trading Workflow (dashboard → signals → journal)\n- Expanded example prompts from 6 to 15+\n- Updated tool count from 11 to actual 43",
          "is_bot": false,
          "headline": "docs: rewrite README with all 43 tools + add cookbook",
          "author_name": "Jenna",
          "author_login": null,
          "committed_at": "2026-01-30T16:13:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "313adab446d8221b95598c03d313cca20dfa1961",
          "body": "feat: Academy content tools (list, get, search)",
          "is_bot": false,
          "headline": "Merge pull request #2 from andywilliams/feat/academy-tools",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-01-30T16:06:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "302ff1723f710eb8d157170059deaef8e40e09dc",
          "body": "- dwlf_list_academy_tracks: fetches manifest with all tracks/lessons\n- dwlf_get_academy_lesson: fetches lesson markdown by slug, rewrites image URLs\n- dwlf_search_academy: keyword search across track/lesson titles\n- In-memory manifest cache with 15-minute TTL\n- No auth required (public CDN)",
          "is_bot": false,
          "headline": "feat: add academy content tools (list, get, search)",
          "author_name": "Jenna",
          "author_login": null,
          "committed_at": "2026-01-30T16:04:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c1f2312b2488177bc2fe9530cbbf72271feb66da",
          "body": "fix: correct THEN gate documentation",
          "is_bot": false,
          "headline": "Merge pull request #1 from andywilliams/fix/then-gate-docs",
          "author_name": "Andy Williams",
          "author_login": "andywilliams",
          "committed_at": "2026-01-30T16:00:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b92bd3c677937333b77a340b2b896ee892e1d2ac",
          "body": "…conditions handle\n\nTHEN gates use a linear chain through the entry handle, NOT the conditions\nhandle like AND/OR gates. The previous docs incorrectly showed conditions\nfeeding into THEN gates via targetHandle: conditions.\n\nCorrect pattern:\n  Start → [input] Condition1\n  Condition1 → [entry] THEN Gate\n  THEN Gate → [output→input] Condition2\n\nAdded warning about not using conditions handle with THEN gates.",
          "is_bot": false,
          "headline": "fix: correct THEN gate documentation - use linear chain pattern, not …",
          "author_name": "Jenna",
          "author_login": null,
          "committed_at": "2026-01-30T15:56:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "415f57c81e07780e104a92bfc564d5657731f8b1",
          "body": "New tools:\n- dwlf_ai_dashboard: full account overview in one call (watchlist,\n  signals, trades, portfolios, strategies, events)\n- dwlf_ai_symbol_brief: condensed single-symbol view (price, change,\n  candles, indicators, S/R, events, signals)\n- dwlf_ai_strategy_performance: all strategies with signal stats\n\nTotal tools: 37. Bumped version to 0.3.0.",
          "is_bot": false,
          "headline": "feat: add AI summary tools (v0.3.0)",
          "author_name": "Jenna 🦊",
          "author_login": null,
          "committed_at": "2026-01-30T15:42:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7a5cf5cb24ff8beb122faca33815ea6a32f7de80",
          "body": "New tools:\n- dwlf_update_strategy: Update existing strategy (PUT)\n- dwlf_compile_strategy: Compile visual strategy to executable signal\n- dwlf_compile_custom_event: Compile custom event definition\n\nFixes:\n- dwlf_run_backtest: send 'symbols' array instead of singular 'symbol'\n  (API requires array). \n[…]\n for\n  convenience — single symbol auto-wraps to array.\n\nOther:\n- Added put() and delete() methods to DWLFClient\n- Extended KNOWN_STOCKS with COIN, MSTR, HUT, HIVE, BITF, WULF,\n  GOLD, AMD, LSPD, SOFI",
          "is_bot": false,
          "headline": "feat: add write tools and fix backtest symbol param (v0.3.0)",
          "author_name": "Jenna 🦊",
          "author_login": null,
          "committed_at": "2026-01-30T15:39:49Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0f47c93bd42868a1a58008e162aa19f2110eaf64",
          "body": "Agents using MCP tools to create strategies need to know valid node\ntypes, edge wiring rules, and graph structure. This reference covers\nall 50+ node types, logic gates, handle semantics, and includes a\ncomplete working example.",
          "is_bot": false,
          "headline": "docs: add strategy builder reference for AI agents",
          "author_name": "Jenna 🦊",
          "author_login": null,
          "committed_at": "2026-01-30T15:26:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "caa7756b9323311bca0a798b6daf8b5bcbad3e0c",
          "body": null,
          "is_bot": false,
          "headline": "feat: add dwlf_get_trade_notes tool for reading trade journal notes",
          "author_name": "Jenna 🦊",
          "author_login": null,
          "committed_at": "2026-01-30T14:06:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "825e81e7ade376eea074cded3e2f995bc978b593",
          "body": "…ustom events\n\nAdds 20 new tools:\n- Strategies: list, get, create, public\n- Backtests: run, get results, list, summary\n- Portfolio: list, get, holdings, snapshots\n- Trades: list, get, create, close, add note, plans, state\n- Custom Events: list, get, create\n\nBumps to v0.2.0.",
          "is_bot": false,
          "headline": "feat: Phase 2 MCP tools — strategies, backtests, portfolio, trades, c…",
          "author_name": "Jenna 🦊",
          "author_login": null,
          "committed_at": "2026-01-30T13:44:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "df896b3a5efa0258c6505426e1f8acf64b247c8d",
          "body": "…de-signals)",
          "is_bot": false,
          "headline": "fix: correct signal endpoint paths (/user/trade-signals not /user-tra…",
          "author_name": "Jenna 🦊",
          "author_login": null,
          "committed_at": "2026-01-30T13:13:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d15e0e8233f12ab3df1cb131910947ce03c2361f",
          "body": "AI agents can now use any common symbol format and it'll be\nnormalized to DWLF's expected format (BTC-USD for crypto,\nAAPL for stocks). No more 404s from format guessing.",
          "is_bot": false,
          "headline": "feat: add symbol normalization — accepts BTC, BTC/USD, BTCUSD etc.",
          "author_name": "Jenna 🦊",
          "author_login": null,
          "committed_at": "2026-01-30T13:06:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eeb388ea8c5b7c8cc55d3c552a7a629bf72d48f5",
          "body": "11 tools across 4 categories:\n- Market Data: get_market_data, list_symbols, get_support_resistance, get_events\n- Indicators: get_indicators, get_trendlines\n- Signals: get_active_signals, get_recent_signals, get_signal_stats\n- Watchlist: get_watchlist, add_to_watchlist\n\nPlus dwlf://symbols resource.\n\nAuth via DWLF_API_KEY env var. TypeScript, MCP SDK, stdio transport.",
          "is_bot": false,
          "headline": "feat: DWLF MCP Server — Phase 1 (read-only tools)",
          "author_name": "Jenna 🦊",
          "author_login": null,
          "committed_at": "2026-01-30T12:26:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 1,
      "commits_last_year": 84,
      "latest_release_at": "2026-02-01T14:46:13Z",
      "latest_release_tag": "v0.4.0",
      "releases_from_tags": false,
      "days_since_last_push": 12,
      "active_weeks_last_year": 14,
      "days_since_latest_release": 176,
      "mean_days_between_releases": null
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 42,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "@dwlf/mcp-server",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "mcp",
            "model-context-protocol",
            "dwlf",
            "trading",
            "market-data",
            "ai-tools",
            "claude",
            "cursor",
            "vscode"
          ],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@dwlf/mcp-server",
          "is_deprecated": false,
          "latest_version": "0.39.0",
          "repository_url": "https://github.com/andywilliams/dwlf-mcp-server",
          "versions_count": 48,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 896,
          "first_published_at": "2026-01-30T20:22:52.229000Z",
          "latest_published_at": "2026-07-15T15:10:56.405000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 12
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 0,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0,
        "collected_at": null
      },
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "example",
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": true,
      "bootstrap_files": [
        "node_modules/delayed-stream/Makefile"
      ],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "node_modules/call-bind-apply-helpers/tsconfig.json",
        "node_modules/call-bound/tsconfig.json",
        "node_modules/dunder-proto/tsconfig.json",
        "node_modules/es-define-property/tsconfig.json",
        "node_modules/es-errors/tsconfig.json",
        "node_modules/es-object-atoms/tsconfig.json",
        "node_modules/es-set-tostringtag/tsconfig.json",
        "node_modules/express-rate-limit/tsconfig.json",
        "node_modules/fast-uri/tsconfig.json",
        "node_modules/get-proto/tsconfig.json",
        "node_modules/gopd/tsconfig.json",
        "node_modules/has-symbols/tsconfig.json",
        "node_modules/has-tostringtag/tsconfig.json",
        "node_modules/hasown/tsconfig.json",
        "node_modules/math-intrinsics/tsconfig.json",
        "node_modules/side-channel-list/tsconfig.json",
        "node_modules/side-channel-map/tsconfig.json",
        "node_modules/side-channel-weakmap/tsconfig.json",
        "node_modules/side-channel/tsconfig.json",
        "tsconfig.json"
      ],
      "toolchain_manifests": [],
      "largest_source_bytes": 29228,
      "source_files_sampled": 23,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "package.json"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [
          {
            "name": "@hono/node-server",
            "direct": false,
            "version": "1.19.15",
            "severity": "moderate",
            "ecosystem": "npm",
            "cvss_score": 5.9,
            "advisory_ids": [
              "GHSA-frvp-7c67-39w9"
            ],
            "fixed_version": "2.0.5",
            "advisory_count": 1,
            "oldest_advisory_days": 5
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "moderate": 1
        },
        "advisory_count": 1,
        "affected_count": 1,
        "assessed_count": 108,
        "malicious_count": 0,
        "assessed_package": "npm:@dwlf/mcp-server@0.39.0",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm"
      ],
      "dependencies": [
        {
          "name": "@modelcontextprotocol/sdk",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.25.3"
        },
        {
          "name": "axios",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^1.13.4"
        },
        {
          "name": "zod",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^4.3.6"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 66,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "andywilliams",
          "commits": 67,
          "avatar_url": "https://avatars.githubusercontent.com/u/2787418?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "publish.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        ".eslintrc",
        ".eslintrc.yml",
        "eslint.config.js",
        "eslint.config.mjs"
      ],
      "has_editorconfig": true,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "package-lock.json",
        "yarn.lock"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 8,
            "reason": "binaries present in source code",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 0,
            "reason": "0 out of 30 merged PRs checked by a CI test -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 0,
            "reason": "project has 0 contributing companies or organizations -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 2,
            "reason": "dependency not pinned by hash detected -- score normalized to 2",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 9,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "72 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "7680e9203b123f78a1678317402d4d3c60375f63",
        "ran_at": "2026-07-27T17:41:49Z",
        "aggregate_score": 4,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-15T15:11:00Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-07-15T15:10:31Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/andywilliams/dwlf-mcp-server",
    "host": "github.com",
    "name": "dwlf-mcp-server",
    "owner": "andywilliams"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 56,
      "inputs": {
        "security": 50,
        "vitality": 69,
        "community": 30,
        "governance": 53,
        "engineering": 72
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "moderate",
        "name": "Vitality",
        "value": 69,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 66,
            "inputs": {
              "commits_last_year": 84,
              "human_commit_share": 1,
              "days_since_last_push": 12,
              "active_weeks_last_year": 14
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 12 days ago",
                "points": 28.8,
                "status": "partial",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 12
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "14/52 weeks with commits",
                "points": 9.7,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 14
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "84 commits in the last year",
                "points": 17.3,
                "status": "partial",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 84
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "good",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 74,
            "inputs": {
              "releases_count": 1,
              "latest_release_tag": "v0.4.0",
              "releases_from_tags": false,
              "days_since_latest_release": 176,
              "mean_days_between_releases": null
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "1 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 176 days ago",
                "points": 27,
                "status": "partial",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 176
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "cadence unknown (single release)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence_unknown",
                    "params": {}
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 30,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 0,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "at_risk",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 49,
            "inputs": {
              "packages": [
                "@dwlf/mcp-server"
              ],
              "dependents": null,
              "ecosystems": "npm",
              "total_downloads": null,
              "monthly_downloads": 896
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "896 downloads/month across npm",
                "points": 39.4,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 896,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 53,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 10,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 72,
            "inputs": {
              "merged_prs": 66,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "66/66 decided PRs merged",
                "points": 38.2,
                "status": "met",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 66,
                      "decided": 66
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "at_risk",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 48,
            "inputs": {
              "followers": 8,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "andywilliams",
              "public_repos": 19,
              "account_age_days": 5004
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "8 followers of andywilliams",
                "points": 6.9,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 8,
                      "login": "andywilliams"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "19 public repos, account ~13 yr old",
                "points": 21.5,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 19
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 13
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "@dwlf/mcp-server"
              ],
              "ecosystems": "npm",
              "any_deprecated": false,
              "min_days_since_publish": 12
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 12 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 12
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "48 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 48
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 72,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 70,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": true,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "1 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".eslintrc, .eslintrc.yml, eslint.config.js, eslint.config.mjs",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".eslintrc, .eslintrc.yml, eslint.config.js, eslint.config.mjs"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 6.4,
                "status": "met",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "0 out of 30 merged PRs checked by a CI test -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "good",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 50,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 40,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 4
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "binaries present in source code",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "0 out of 30 merged PRs checked by a CI test -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 2",
                "points": 1,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 6.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "72 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Matched the npm:@dwlf/mcp-server@0.39.0 runtime dependency closure — what installing the published package pulls in — 108 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "npm:@dwlf/mcp-server@0.39.0",
                  "assessed": 108
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 88,
            "inputs": {
              "source": "osv",
              "advisories": 1,
              "affected_packages": 1,
              "assessed_packages": 108,
              "unassessed_packages": 0,
              "affected_by_severity": "moderate 1",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "1 affected: @hono/node-server 1.19.15 (moderate 5.9)",
                "points": 13.2,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 1,
                      "packages": "@hono/node-server 1.19.15 (moderate 5.9)"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory has been public longer than 90 days",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "advisories_none_stale",
                    "params": {
                      "days": 90
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 108,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 2
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 70,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.988,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "83 of 84 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 83,
                      "sampled": 84
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "package-lock.json",
                "yarn.lock"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [
                "node_modules/delayed-stream/Makefile"
              ],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [
                "node_modules/call-bind-apply-helpers/tsconfig.json",
                "node_modules/call-bound/tsconfig.json",
                "node_modules/dunder-proto/tsconfig.json",
                "node_modules/es-define-property/tsconfig.json",
                "node_modules/es-errors/tsconfig.json",
                "node_modules/es-object-atoms/tsconfig.json",
                "node_modules/es-set-tostringtag/tsconfig.json",
                "node_modules/express-rate-limit/tsconfig.json",
                "node_modules/fast-uri/tsconfig.json",
                "node_modules/get-proto/tsconfig.json",
                "node_modules/gopd/tsconfig.json",
                "node_modules/has-symbols/tsconfig.json",
                "node_modules/has-tostringtag/tsconfig.json",
                "node_modules/hasown/tsconfig.json",
                "node_modules/math-intrinsics/tsconfig.json",
                "node_modules/side-channel-list/tsconfig.json",
                "node_modules/side-channel-map/tsconfig.json",
                "node_modules/side-channel-weakmap/tsconfig.json",
                "node_modules/side-channel/tsconfig.json",
                "tsconfig.json"
              ],
              "agent_commit_share": 0.631,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "node_modules/delayed-stream/Makefile",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "node_modules/delayed-stream/Makefile"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".eslintrc, .eslintrc.yml, eslint.config.js, eslint.config.mjs",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".eslintrc, .eslintrc.yml, eslint.config.js, eslint.config.mjs"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "node_modules/call-bind-apply-helpers/tsconfig.json, node_modules/call-bound/tsconfig.json, node_modules/dunder-proto/tsconfig.json, node_modules/es-define-property/tsconfig.json, node_modules/es-errors/tsconfig.json, node_modules/es-object-atoms/tsconfig.json, node_modules/es-set-tostringtag/tsconfig.json, node_modules/express-rate-limit/tsconfig.json, node_modules/fast-uri/tsconfig.json, node_modules/get-proto/tsconfig.json, node_modules/gopd/tsconfig.json, node_modules/has-symbols/tsconfig.json, node_modules/has-tostringtag/tsconfig.json, node_modules/hasown/tsconfig.json, node_modules/math-intrinsics/tsconfig.json, node_modules/side-channel-list/tsconfig.json, node_modules/side-channel-map/tsconfig.json, node_modules/side-channel-weakmap/tsconfig.json, node_modules/side-channel/tsconfig.json, tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "node_modules/call-bind-apply-helpers/tsconfig.json, node_modules/call-bound/tsconfig.json, node_modules/dunder-proto/tsconfig.json, node_modules/es-define-property/tsconfig.json, node_modules/es-errors/tsconfig.json, node_modules/es-object-atoms/tsconfig.json, node_modules/es-set-tostringtag/tsconfig.json, node_modules/express-rate-limit/tsconfig.json, node_modules/fast-uri/tsconfig.json, node_modules/get-proto/tsconfig.json, node_modules/gopd/tsconfig.json, node_modules/has-symbols/tsconfig.json, node_modules/has-tostringtag/tsconfig.json, node_modules/hasown/tsconfig.json, node_modules/math-intrinsics/tsconfig.json, node_modules/side-channel-list/tsconfig.json, node_modules/side-channel-map/tsconfig.json, node_modules/side-channel-weakmap/tsconfig.json, node_modules/side-channel/tsconfig.json, tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "53 of the last 84 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 53,
                      "sampled": 84
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 2",
                "points": 2,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "TypeScript",
              "largest_source_bytes": 29228,
              "source_files_sampled": 23,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "TypeScript (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "TypeScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/23 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 23,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "moderate",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 60,
            "inputs": {
              "example_dirs": [
                "example",
                "examples"
              ],
              "has_mcp_signal": true,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "example, examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "example, examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-27T17:42:10.504488Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/andywilliams/dwlf-mcp-server.svg",
  "full_name": "andywilliams/dwlf-mcp-server",
  "license_state": "standard",
  "license_spdx": "MIT"
}