Local research agent — one command, a cited answer with its trust signals: source-authority mix, lexical citation verification, confidence, cost. CLI + MCP server. Runs on your own LLM router; nightly public report card. Zero hosted dependencies.
askalf/deepdive holds a health index of 69 out of 100, placing it in the Moderate band. It scores highest on Security (86/100) and lowest on Community & Adoption (45/100). It was last updated today. A single contributor accounts for most of its recent work.
69
overall / 100
Moderate
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
69
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Direct dependencies free of known advisories — no direct dependency carries a known advisory
13.2/25
Indirect dependencies free of known advisories — 1 affected: @hono/node-server 1.19.15 (moderate 5.9)
40/40
No advisories left outstanding — no advisory has been public longer than 90 days
Inputs used
source
osv
advisories
1
affected_packages
1
assessed_packages
111
unassessed_packages
0
affected_by_severity
moderate 1
direct_affected_packages
0
Matched the npm:@askalf/deepdive@0.32.0 runtime dependency closure — what installing the published package pulls in — 111 packages. Reachability is not analyzed.
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
More detail
Star and fork history 0 ★ / 2 ⇿
0Stars
2Forks
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
OpenSSF Scorecard 8.5 / 10
8.5aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-27 00:59 UTC
Full resolved dependency set from the GitHub dependency graph: 3 direct and 238 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
Registry
Package
Version
Relation
npm
@modelcontextprotocol/sdk
1.29.0
direct
npm
playwright
1.61.1
direct
npm
zod
4.4.3
direct
npm
@babel/code-frame
7.29.7
indirect
npm
@babel/compat-data
7.29.7
indirect
npm
@babel/core
7.29.7
indirect
npm
@babel/generator
7.29.7
indirect
npm
@babel/helper-compilation-targets
7.29.7
indirect
npm
@babel/helper-globals
7.29.7
indirect
npm
@babel/helper-module-imports
7.29.7
indirect
npm
@babel/helper-module-transforms
7.29.7
indirect
npm
@babel/helper-string-parser
7.29.7
indirect
npm
@babel/helper-validator-identifier
7.29.7
indirect
npm
@babel/helper-validator-option
7.29.7
indirect
npm
@babel/helpers
7.29.7
indirect
npm
@babel/parser
7.29.7
indirect
npm
@babel/template
7.29.7
indirect
npm
@babel/traverse
7.29.7
indirect
npm
@babel/types
7.29.7
indirect
npm
@esbuild/aix-ppc64
0.28.1
indirect
npm
@esbuild/android-arm
0.28.1
indirect
npm
@esbuild/android-arm64
0.28.1
indirect
npm
@esbuild/android-x64
0.28.1
indirect
npm
@esbuild/darwin-arm64
0.28.1
indirect
npm
@esbuild/darwin-x64
0.28.1
indirect
npm
@esbuild/freebsd-arm64
0.28.1
indirect
npm
@esbuild/freebsd-x64
0.28.1
indirect
npm
@esbuild/linux-arm
0.28.1
indirect
npm
@esbuild/linux-arm64
0.28.1
indirect
npm
@esbuild/linux-ia32
0.28.1
indirect
npm
@esbuild/linux-loong64
0.28.1
indirect
npm
@esbuild/linux-mips64el
0.28.1
indirect
npm
@esbuild/linux-ppc64
0.28.1
indirect
npm
@esbuild/linux-riscv64
0.28.1
indirect
npm
@esbuild/linux-s390x
0.28.1
indirect
npm
@esbuild/linux-x64
0.28.1
indirect
npm
@esbuild/netbsd-arm64
0.28.1
indirect
npm
@esbuild/netbsd-x64
0.28.1
indirect
npm
@esbuild/openbsd-arm64
0.28.1
indirect
npm
@esbuild/openbsd-x64
0.28.1
indirect
npm
@esbuild/openharmony-arm64
0.28.1
indirect
npm
@esbuild/sunos-x64
0.28.1
indirect
npm
@esbuild/win32-arm64
0.28.1
indirect
npm
@esbuild/win32-ia32
0.28.1
indirect
npm
@esbuild/win32-x64
0.28.1
indirect
npm
@hono/node-server
1.19.15
indirect
npm
@isaacs/fs-minipass
4.0.1
indirect
npm
@istanbuljs/schema
0.1.6
indirect
npm
@jazzer.js/bug-detectors
4.0.0
indirect
npm
@jazzer.js/core
4.0.0
indirect
npm
@jazzer.js/fuzzer
4.0.0
indirect
npm
@jazzer.js/hooking
4.0.0
indirect
npm
@jazzer.js/instrumentor
4.0.0
indirect
npm
@jridgewell/gen-mapping
0.3.13
indirect
npm
@jridgewell/remapping
2.3.5
indirect
npm
@jridgewell/resolve-uri
3.1.2
indirect
npm
@jridgewell/sourcemap-codec
1.5.5
indirect
npm
@jridgewell/trace-mapping
0.3.31
indirect
npm
@napi-rs/canvas
1.0.0
indirect
npm
@napi-rs/canvas-android-arm64
1.0.0
indirect
npm
@napi-rs/canvas-darwin-arm64
1.0.0
indirect
npm
@napi-rs/canvas-darwin-x64
1.0.0
indirect
npm
@napi-rs/canvas-linux-arm-gnueabihf
1.0.0
indirect
npm
@napi-rs/canvas-linux-arm64-gnu
1.0.0
indirect
npm
@napi-rs/canvas-linux-arm64-musl
1.0.0
indirect
npm
@napi-rs/canvas-linux-riscv64-gnu
1.0.0
indirect
npm
@napi-rs/canvas-linux-x64-gnu
1.0.0
indirect
npm
@napi-rs/canvas-linux-x64-musl
1.0.0
indirect
npm
@napi-rs/canvas-win32-arm64-msvc
1.0.0
indirect
npm
@napi-rs/canvas-win32-x64-msvc
1.0.0
indirect
npm
@types/node
26.1.1
indirect
npm
accepts
2.0.0
indirect
npm
ajv
8.20.0
indirect
npm
ajv-formats
3.0.1
indirect
npm
ansi-regex
5.0.1
indirect
npm
ansi-styles
4.3.0
indirect
npm
append-transform
2.0.0
indirect
npm
baseline-browser-mapping
2.10.43
indirect
npm
bindings
1.5.0
indirect
npm
body-parser
2.3.0
indirect
npm
browserslist
4.28.6
indirect
npm
buffer-from
1.1.2
indirect
npm
bytes
3.1.2
indirect
npm
call-bind-apply-helpers
1.0.2
indirect
npm
call-bound
1.0.4
indirect
npm
caniuse-lite
1.0.30001805
indirect
npm
chownr
3.0.0
indirect
npm
cliui
8.0.1
indirect
npm
cmake-js
8.0.0
indirect
npm
color-convert
2.0.1
indirect
npm
color-name
1.1.4
indirect
npm
content-disposition
1.1.0
indirect
npm
content-type
1.0.5
indirect
npm
content-type
2.0.0
indirect
npm
convert-source-map
2.0.0
indirect
npm
cookie
0.7.2
indirect
npm
cookie-signature
1.2.2
indirect
npm
cors
2.8.6
indirect
npm
cross-spawn
7.0.6
indirect
npm
debug
4.4.3
indirect
npm
deep-extend
0.6.0
indirect
npm
default-require-extensions
3.0.1
indirect
npm
depd
2.0.0
indirect
npm
dunder-proto
1.0.1
indirect
npm
ee-first
1.1.1
indirect
npm
electron-to-chromium
1.5.389
indirect
npm
emoji-regex
8.0.0
indirect
npm
encodeurl
2.0.0
indirect
npm
es-define-property
1.0.1
indirect
npm
es-errors
1.3.0
indirect
npm
es-object-atoms
1.1.2
indirect
npm
esbuild
0.28.1
indirect
npm
escalade
3.2.0
indirect
npm
escape-html
1.0.3
indirect
npm
etag
1.8.1
indirect
npm
eventsource
3.0.7
indirect
npm
eventsource-parser
3.1.0
indirect
npm
express
5.2.1
indirect
npm
express-rate-limit
8.5.2
indirect
npm
fast-deep-equal
3.1.3
indirect
npm
fast-uri
3.1.4
indirect
npm
file-uri-to-path
1.0.0
indirect
npm
finalhandler
2.1.1
indirect
npm
forwarded
0.2.0
indirect
npm
fresh
2.0.0
indirect
npm
fs-extra
11.3.6
indirect
npm
fsevents
2.3.2
indirect
npm
fsevents
2.3.3
indirect
npm
function-bind
1.1.2
indirect
npm
gensync
1.0.0-beta.2
indirect
npm
get-caller-file
2.0.5
indirect
npm
get-intrinsic
1.3.0
indirect
npm
get-proto
1.0.1
indirect
npm
gopd
1.2.0
indirect
npm
graceful-fs
4.2.11
indirect
npm
has-flag
4.0.0
indirect
npm
has-symbols
1.1.0
indirect
npm
hasown
2.0.4
indirect
npm
hono
4.12.29
indirect
npm
html-escaper
2.0.2
indirect
npm
http-errors
2.0.1
indirect
npm
iconv-lite
0.7.3
indirect
npm
inherits
2.0.4
indirect
npm
ini
1.3.8
indirect
npm
ip-address
10.2.0
indirect
npm
ipaddr.js
1.9.1
indirect
npm
is-fullwidth-code-point
3.0.0
indirect
npm
is-promise
4.0.0
indirect
npm
isexe
2.0.0
indirect
npm
isexe
4.0.0
indirect
npm
istanbul-lib-coverage
3.2.2
indirect
npm
istanbul-lib-hook
3.0.0
indirect
npm
istanbul-lib-instrument
6.0.3
indirect
npm
istanbul-lib-report
3.0.1
indirect
npm
istanbul-reports
3.2.0
indirect
npm
jose
6.2.3
indirect
npm
js-tokens
4.0.0
indirect
npm
jsesc
3.1.0
indirect
npm
json-schema-traverse
1.0.0
indirect
npm
json-schema-typed
8.0.2
indirect
npm
json5
2.2.3
indirect
npm
jsonfile
6.2.1
indirect
npm
lru-cache
5.1.1
indirect
npm
make-dir
4.0.0
indirect
npm
math-intrinsics
1.1.0
indirect
npm
media-typer
1.1.0
indirect
npm
merge-descriptors
2.0.0
indirect
npm
mime-db
1.54.0
indirect
npm
mime-types
3.0.2
indirect
npm
minimist
1.2.8
indirect
npm
minipass
7.1.3
indirect
npm
minizlib
3.1.0
indirect
npm
ms
2.1.3
indirect
npm
negotiator
1.0.0
indirect
npm
node-addon-api
8.9.0
indirect
npm
node-api-headers
1.9.0
indirect
npm
node-releases
2.0.51
indirect
npm
object-assign
4.1.1
indirect
npm
object-inspect
1.13.4
indirect
npm
on-finished
2.4.1
indirect
npm
once
1.4.0
indirect
npm
parseurl
1.3.3
indirect
npm
path-key
3.1.1
indirect
npm
path-to-regexp
8.4.2
indirect
npm
pdfjs-dist
6.1.200
indirect
npm
picocolors
1.1.1
indirect
npm
pkce-challenge
5.0.1
indirect
npm
playwright-core
1.61.1
indirect
npm
proper-lockfile
4.1.2
indirect
npm
proxy-addr
2.0.7
indirect
npm
qs
6.15.3
indirect
npm
range-parser
1.3.0
indirect
npm
raw-body
3.0.2
indirect
npm
rc
1.2.8
indirect
npm
require-directory
2.1.1
indirect
npm
require-from-string
2.0.2
indirect
npm
retry
0.12.0
indirect
npm
router
2.2.0
indirect
npm
safer-buffer
2.1.2
indirect
npm
semver
6.3.1
indirect
npm
semver
7.8.5
indirect
npm
send
1.2.1
indirect
npm
serve-static
2.2.1
indirect
npm
setprototypeof
1.2.0
indirect
npm
shebang-command
2.0.0
indirect
npm
shebang-regex
3.0.0
indirect
npm
side-channel
1.1.1
indirect
npm
side-channel-list
1.0.1
indirect
npm
side-channel-map
1.0.1
indirect
npm
side-channel-weakmap
1.0.2
indirect
npm
signal-exit
3.0.7
indirect
npm
source-map
0.6.1
indirect
npm
source-map-support
0.5.21
indirect
npm
statuses
2.0.2
indirect
npm
string-width
4.2.3
indirect
npm
strip-ansi
6.0.1
indirect
npm
strip-bom
4.0.0
indirect
npm
strip-json-comments
2.0.1
indirect
npm
supports-color
7.2.0
indirect
npm
tar
7.5.22
indirect
npm
tmp
0.2.7
indirect
npm
toidentifier
1.0.1
indirect
npm
tsx
4.23.1
indirect
npm
type-is
2.1.0
indirect
npm
typescript
5.9.3
indirect
npm
undici-types
8.3.0
indirect
npm
universalify
2.0.1
indirect
npm
unpipe
1.0.0
indirect
npm
update-browserslist-db
1.2.3
indirect
npm
url-join
4.0.1
indirect
npm
vary
1.1.2
indirect
npm
which
2.0.2
indirect
npm
which
6.0.1
indirect
npm
wrap-ansi
7.0.0
indirect
npm
wrappy
1.0.2
indirect
npm
y18n
5.0.8
indirect
npm
yallist
3.1.1
indirect
npm
yallist
5.0.0
indirect
npm
yargs
17.7.3
indirect
npm
yargs-parser
21.1.1
indirect
npm
zod-to-json-schema
3.25.2
indirect
Dependency advisories 1
Installing npm:@askalf/deepdive@0.32.0 pulls in 111 packages, direct and transitive: 1 carry known advisories, of which 0 are direct dependencies.
Package
Version
Relation
Severity
Advisories
Fixed in
@hono/node-server
1.19.15
indirect
moderate
1
2.0.5
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"ai",
"cli",
"llm",
"research-agent",
"search",
"anthropic",
"citations",
"claude",
"deep-research",
"perplexity-alternative",
"self-hosted",
"mcp",
"model-context-protocol"
],
"is_fork": false,
"size_kb": 1006,
"has_wiki": false,
"homepage": "https://www.npmjs.com/package/@askalf/deepdive",
"languages": {
"Shell": 964,
"Dockerfile": 572,
"JavaScript": 530455,
"TypeScript": 370258
},
"pushed_at": "2026-07-26T17:47:46Z",
"created_at": "2026-04-22T00:13:43Z",
"owner_type": "User",
"updated_at": "2026-07-26T17:03:53Z",
"description": "Local research agent — one command, a cited answer with its trust signals: source-authority mix, lexical citation verification, confidence, cost. CLI + MCP server. Runs on your own LLM router; nightly public report card. Zero hosted dependencies.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "master",
"license_spdx_raw": "MIT",
"primary_language": "JavaScript",
"significant_languages": [
"JavaScript",
"TypeScript"
]
},
"owner": {
"blog": "https://sprayberrylabs.com",
"name": "Thomas Sprayberry",
"type": "User",
"login": "askalf",
"company": "Sprayberry Labs",
"location": null,
"followers": 21,
"avatar_url": "https://avatars.githubusercontent.com/u/263217947?v=4",
"created_at": "2026-02-22T19:05:23Z",
"is_verified": null,
"public_repos": 23,
"account_age_days": 154
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.32.0",
"kind": "minor",
"published_at": "2026-07-20T14:48:57Z"
},
{
"tag": "v0.31.1",
"kind": "patch",
"published_at": "2026-07-12T14:03:08Z"
},
{
"tag": "v0.31.0",
"kind": "minor",
"published_at": "2026-07-11T15:07:06Z"
},
{
"tag": "v0.30.0",
"kind": "minor",
"published_at": "2026-07-11T13:37:56Z"
},
{
"tag": "v0.29.0",
"kind": "minor",
"published_at": "2026-07-11T12:53:01Z"
},
{
"tag": "v0.28.0",
"kind": "minor",
"published_at": "2026-07-02T23:44:05Z"
},
{
"tag": "v0.27.1",
"kind": "patch",
"published_at": "2026-07-02T22:50:17Z"
},
{
"tag": "v0.27.0",
"kind": "minor",
"published_at": "2026-07-02T01:30:47Z"
},
{
"tag": "v0.26.1",
"kind": "patch",
"published_at": "2026-06-27T02:02:06Z"
},
{
"tag": "v0.26.0",
"kind": "minor",
"published_at": "2026-06-18T21:56:49Z"
},
{
"tag": "v0.25.3",
"kind": "patch",
"published_at": "2026-06-15T19:10:23Z"
},
{
"tag": "v0.25.2",
"kind": "patch",
"published_at": "2026-06-15T18:23:35Z"
},
{
"tag": "v0.25.1",
"kind": "patch",
"published_at": "2026-06-12T21:24:38Z"
},
{
"tag": "v0.25.0",
"kind": "minor",
"published_at": "2026-06-12T18:04:31Z"
},
{
"tag": "v0.24.0",
"kind": "minor",
"published_at": "2026-06-12T15:19:16Z"
},
{
"tag": "v0.23.0",
"kind": "minor",
"published_at": "2026-06-12T10:32:44Z"
},
{
"tag": "v0.22.0",
"kind": "minor",
"published_at": "2026-06-12T01:19:15Z"
},
{
"tag": "v0.21.0",
"kind": "minor",
"published_at": "2026-06-12T01:07:12Z"
},
{
"tag": "v0.20.0",
"kind": "minor",
"published_at": "2026-06-12T00:19:07Z"
},
{
"tag": "v0.19.0",
"kind": "minor",
"published_at": "2026-06-10T01:07:13Z"
},
{
"tag": "v0.18.0",
"kind": "minor",
"published_at": "2026-06-09T21:42:58Z"
},
{
"tag": "v0.17.0",
"kind": "minor",
"published_at": "2026-06-09T19:58:33Z"
},
{
"tag": "v0.16.0",
"kind": "minor",
"published_at": "2026-06-09T18:39:37Z"
},
{
"tag": "v0.15.0",
"kind": "minor",
"published_at": "2026-06-09T18:23:54Z"
},
{
"tag": "v0.14.0",
"kind": "minor",
"published_at": "2026-06-09T17:48:15Z"
},
{
"tag": "v0.13.2",
"kind": "patch",
"published_at": "2026-06-04T18:23:34Z"
},
{
"tag": "v0.13.1",
"kind": "patch",
"published_at": "2026-06-04T17:23:34Z"
},
{
"tag": "v0.13.0",
"kind": "minor",
"published_at": "2026-05-28T16:13:30Z"
},
{
"tag": "v0.12.0",
"kind": "minor",
"published_at": "2026-05-18T14:51:28Z"
},
{
"tag": "v0.11.0",
"kind": "minor",
"published_at": "2026-05-18T14:24:32Z"
},
{
"tag": "v0.10.0",
"kind": "minor",
"published_at": "2026-05-18T14:05:22Z"
},
{
"tag": "v0.9.0",
"kind": "minor",
"published_at": "2026-05-07T18:59:58Z"
},
{
"tag": "v0.8.0",
"kind": "minor",
"published_at": "2026-05-07T18:22:47Z"
},
{
"tag": "v0.7.0",
"kind": "minor",
"published_at": "2026-05-06T20:19:32Z"
},
{
"tag": "v0.6.0",
"kind": "minor",
"published_at": "2026-05-05T21:48:08Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2026-05-05T21:08:32Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2026-05-02T00:59:46Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2026-04-23T23:04:01Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2026-04-22T16:10:59Z"
}
],
"recent_commits": [
{
"oid": "4a13089fe289c7adf72ad79c0fe7aa744e1731da",
"body": "…ory (#185)\n\nClears the two vulnerabilities behind Scorecard alert #36 (Vulnerabilities\ncheck, score 8). Both are transitive and both fixes are in-range, so this is a\nlockfile-only bump with no manifest change.\n\ntar 7.5.20 -> 7.5.22 (GHSA-r292-9mhp-454m, moderate)\n Uncontrolled recursion in mapHas/\n[…]\nk 1.24.3,\n which is a regression rather than a fix.\n\nVerified: npm ci clean, tsc --noEmit clean, 854 tests pass (2 skipped),\nnpm audit reports tar resolved and only the stale hono advisory remaining.",
"is_bot": false,
"headline": "fix(deps): patch tar and @hono/node-server; document stale hono advis…",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-26T17:03:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1b75d6cf9906ea46bac5e56791084d85579bb13e",
"body": "Bumps [fast-uri](https://github.com/fastify/fast-uri) from 3.1.3 to 3.1.4.\n- [Release notes](https://github.com/fastify/fast-uri/releases)\n- [Commits](https://github.com/fastify/fast-uri/compare/v3.1.3...v3.1.4)\n\n---\nupdated-dependencies:\n- dependency-name: fast-uri\n dependency-version: 3.1.4\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump fast-uri from 3.1.3 to 3.1.4 (#184)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-25T16:46:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "542a106a24c462b2779edbfb563418935c3cb658",
"body": null,
"is_bot": false,
"headline": "release: v0.32.0 (#183)",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-20T14:48:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d7ac0c65b62aa11d53bb663a4a7310b1435e805d",
"body": "Fresh installs resolve config to $XDG_CONFIG_HOME/deepdive/config.json,\nthe page cache to $XDG_CACHE_HOME/deepdive, and sessions to\n$XDG_STATE_HOME/deepdive/sessions. An existing legacy ~/.deepdive/\nkeeps winning for all three paths, and the DEEPDIVE_CONFIG /\nDEEPDIVE_CACHE_DIR / DEEPDIVE_SESSIONS_D\n[…]\nare ignored per the spec.\n\nResolution is centralized in src/xdg.ts with an injectable legacy-dir\ncheck; test/xdg.test.mjs pins the precedence matrix. Help text, README,\nand CHANGELOG updated to match.",
"is_bot": false,
"headline": "feat: XDG Base Directory layout for fresh installs (#179) (#182)",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-20T14:35:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fd3e05391849ce0859b7856cc437a2b8e4706cd7",
"body": "Bumps the non-major group with 3 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/autobuild](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action).\n\n\nUpdates `github/codeql-action/init`\n[…]\n: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Thomas Sprayberry <263217947+askalf@users.noreply.github.com>",
"is_bot": true,
"headline": "ci(deps): bump the non-major group with 3 updates (#180)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-20T11:07:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "515086f920eb9071e30683df1dbe16813da44087",
"body": "Bumps oss-fuzz-base/base-builder-javascript from `0d2d180` to `61d74ab`.\n\n---\nupdated-dependencies:\n- dependency-name: oss-fuzz-base/base-builder-javascript\n dependency-version: 61d74ab736764e98c8e7017dafd8bdd1129f004177dc38eec08bdbb3dd3ea7d8\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "ci(deps): bump oss-fuzz-base/base-builder-javascript (#181)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-20T09:52:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6ecc59ca8647fc612de44aaea8458d9def71c9f8",
"body": null,
"is_bot": false,
"headline": "docs: point OpenSSF Scorecard badge at api.scorecard.dev (#178)",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-19T13:18:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "58aa0d1e54eed7eb9e8d9ddc2606a8307f91859f",
"body": "…p (#176)\n\nBumps the non-major group with 1 update: [tsx](https://github.com/privatenumber/tsx).\n\n\nUpdates `tsx` from 4.23.0 to 4.23.1\n- [Release notes](https://github.com/privatenumber/tsx/releases)\n- [Changelog](https://github.com/privatenumber/tsx/blob/master/release.config.cjs)\n- [Commits](https\n[…]\n: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Thomas Sprayberry <263217947+askalf@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps-dev): bump tsx from 4.23.0 to 4.23.1 in the non-major grou…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-13T22:27:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "10379fe981b4e52a96e9b17eb1683656428242fd",
"body": "Bumps oss-fuzz-base/base-builder-javascript from `5d38358` to `0d2d180`.\n\n---\nupdated-dependencies:\n- dependency-name: oss-fuzz-base/base-builder-javascript\n dependency-version: 0d2d18019500c5b4b00c3edb37a5a3b8291fd9b43a19932a3dabb75e3f66f64d\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "ci(deps): bump oss-fuzz-base/base-builder-javascript (#177)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-13T22:24:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "751aae3525211176dce74e104b2f84a484958c46",
"body": "Bumps [zod](https://github.com/colinhacks/zod) from 3.25.76 to 4.4.3.\n- [Release notes](https://github.com/colinhacks/zod/releases)\n- [Commits](https://github.com/colinhacks/zod/compare/v3.25.76...v4.4.3)\n\n---\nupdated-dependencies:\n- dependency-name: zod\n dependency-version: 4.4.3\n dependency-type\n[…]\n: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Thomas Sprayberry <263217947+askalf@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump zod from 3.25.76 to 4.4.3 (#173)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-12T19:07:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8ad78577ea820e587613ef354d8a639e71d78ab1",
"body": "Bumps the non-major group with 1 update: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node).\n\n\nUpdates `@types/node` from 26.1.0 to 26.1.1\n- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)\n- [Commits](https://github.com/DefinitelyTyped\n[…]\n: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Thomas Sprayberry <263217947+askalf@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps-dev): bump @types/node in the non-major group (#172)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-12T17:37:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ccad3753913c6e44c3181c839113dfbc0a782ee1",
"body": "Bumps the non-major group with 4 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/autobuild](https://github.com/github/codeql-action), [github/codeql-action/analyze](https://github.com/github/codeql-action) and [actions/stale](https://github.com/ac\n[…]\n: version-update:semver-minor\n dependency-group: non-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "ci(deps): bump the non-major group with 4 updates (#175)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-12T15:07:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "69d159bfa083f7a8dad33460d15e4ba877e97ca0",
"body": "…ild (#171)",
"is_bot": false,
"headline": "harden: digest-pin the ClusterFuzzLite base image + npm ci in fuzz bu…",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-12T14:10:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2683728e7f6777a540cdfe7df3f7faa6aaf25ff9",
"body": "…ns (v0.31.1) (#170)",
"is_bot": false,
"headline": "harden: ClusterFuzzLite fuzzing + job-scoped workflow write permissio…",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-12T14:02:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd0df92f8849174268d4836a2b96603bb80b098d",
"body": null,
"is_bot": false,
"headline": "docs(readme): add the OpenSSF Scorecard badge (#167)",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-11T23:59:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15a2ce8af50c066832efe476d51775b65114cec5",
"body": "* docs: add Contributor Covenant Code of Conduct\n\n* docs: add contributing guide",
"is_bot": false,
"headline": "docs: add CONTRIBUTING guide and code of conduct (#169)",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-11T23:57:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0e5e4173597a6ccf17d603221e69db47914b47b5",
"body": null,
"is_bot": false,
"headline": "harden: scope release token out of npm test (#168)",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-11T23:44:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a28f59a3437d57daae814bffc324f40daa996a4",
"body": "…ublished results) (#166)",
"is_bot": false,
"headline": "ci(scorecard): wire the OpenSSF Scorecard action (weekly + on-push, p…",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-11T23:02:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9d5abb5a16fa065320037064a412268fb39a6fe7",
"body": "…gned-Releases) (#165)",
"is_bot": false,
"headline": "ci(release): attach npm tarball + Sigstore provenance to releases (Si…",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-11T23:02:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38541b92d3ad2a96cf378839cb401a177dc00ba2",
"body": "… canary-data branch) (#164)",
"is_bot": false,
"headline": "docs(README): link the nightly public report card (canary dashboard +…",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-11T21:47:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "97f4059a54f336b003ece7cdd423d1ce2b030522",
"body": "… paths (#163)\n\nOperator configured a trusted publisher for @askalf/deepdive on npmjs,\nbound (per fleet convention) to the publish.yml filename. This moves the\npackage to the fleet's proven tokenless pattern and fixes the three\nworkflow defects found in today's review:\n\n- publish.yml becomes THE pub\n[…]\norts on the existing tag).\n\nPost-merge: verify the OIDC path (dispatch publish.yml for v0.31.0 —\nexpect the version-conflict error AFTER a successful tokenless auth),\nthen revoke the NPM_TOKEN secret.",
"is_bot": false,
"headline": "ci: migrate npm publish to OIDC trusted publishing + fix the recovery…",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-11T15:51:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "be904c318d93837190d1bfadc7165683ae2723b9",
"body": null,
"is_bot": false,
"headline": "release: 0.31.0 — MCP server mode (#162)",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-11T15:06:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d2778b4ecb751f19cbcfe406bc7170eac6a6ff99",
"body": "…ed (#160) (#161)\n\n`deepdive mcp` runs a Model Context Protocol server on stdio exposing one\ntool, deepdive_research: any MCP client (Claude Code, IDEs, agent\nharnesses) gets a research tool whose every answer arrives with the trust\nsignals the CLI reports — source-trust mix, citations supported,\nco\n[…]\ncp.test.mjs: protocol-level via InMemoryTransport + injected\nrunner, flag mapping, footer, schema rejection, error rendering, and a\nreal-stdio smoke spawning `deepdive mcp`. Suite: 845/0.\n\nCloses #160",
"is_bot": false,
"headline": "mcp: server mode — deepdive_research over stdio, trust signals attach…",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-11T15:00:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "50049d2f4fc120ac0883a6c41a1447ccd4b96c28",
"body": null,
"is_bot": false,
"headline": "release: 0.30.0 — #157 adapter-aware site: hint (#159)",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-11T13:37:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5242d19eca7c21121af67b4c27a0fb537af45a3b",
"body": "…irective (#157) (#158)\n\nv0.29.0's live receipt: hinted retries fired ×3 and still surfaced zero\nallowed-host results — a bare host token can't steer an aggregator's\nranking, and two of the runner fan-out's three backends can't respond to a\nhost hint at all.\n\n- New optional SearchAdapter.searchHinte\n[…]\nlpubs.nist.gov →\n also nvlpubs) — the form the original 7/2 probe ranked #1 with.\n\n839 tests / 0 fail (11 new). Receipt protocol unchanged: NIST Q ×3 on the\nrunner, target 3/3 (was 1/3).\n\nCloses #157",
"is_bot": false,
"headline": "search: adapter-aware site: hint — the allow-domain retry becomes a d…",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-11T13:25:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4a168e1a343d683ba1593c681739f2f3b6276c3e",
"body": "…k/host cap (#156)",
"is_bot": false,
"headline": "release: 0.29.0 — #147 allow-domain recovery + #148 relevance tiebrea…",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-11T12:52:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f6de1395517ca2f7c90cc724be1f94105ec682c6",
"body": "…cap + bench canonical column (#148) (#155)\n\n* keep-stage: relevance tiebreak in uniform-tier pools + per-host slot cap + bench canonical column (#148)\n\nAuthority ranking orders by WHO published; once a pool is uniformly\ntrustworthy it stops discriminating exactly where it is the only axis left,\nand\n[…]\n column. Reported,\n never gated — the measurement instrument for this change.\n\nAddresses #148\n\n* bench: #148 receipt boards — academic + niche-ops authority-compare w/ canonical column (branch build)",
"is_bot": false,
"headline": "keep-stage: relevance tiebreak in uniform-tier pools + per-host slot …",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-11T12:47:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0ef4eca802be60b1d55c5da6d1007e61cd4e3253",
"body": "…ctural-fallback skip (#147) (#154)\n\n* search: fix the --allow-domain coin flip — hinted retry + honest structural-fallback skip (#147)\n\nLive on v0.27.1, the same question with --allow-domain=nvlpubs.nist.gov ran\nthree times: one answer, two exit 3s — while a raw probe carrying the host\nname found t\n[…]\nin.test.mjs plus canServeAllowedDomain and\nservesDomains-union unit cases.\n\nCloses #147\n\n* test: match the hint host as a query token, not a substring (CodeQL js/incomplete-url-substring-sanitization)",
"is_bot": false,
"headline": "search: fix the --allow-domain coin flip — hinted retry + honest stru…",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-11T12:39:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f5825fa3e668694f9402877af7b936ad4fedc904",
"body": "…dpass) (#153)",
"is_bot": false,
"headline": "README: sweep to the renamed tools (redstamp/truecopy/strongroom/fiel…",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-10T18:46:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6260d778bdd334e5a8d5a4a32c51dcd68d8edcbd",
"body": null,
"is_bot": false,
"headline": "README: align askalf framing to the operation story (#152)",
"author_name": "Thomas Sprayberry",
"author_login": "askalf",
"committed_at": "2026-07-10T15:13:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de28096dedd18276e6fbfba9eb8e16f360229420",
"body": "Bumps the non-major group with 2 updates: [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) and [tsx](https://github.com/privatenumber/tsx).\n\n\nUpdates `@types/node` from 26.0.1 to 26.1.0\n- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/release\n[…]\n: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: Thomas Sprayberry <263217947+askalf@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps-dev): bump the non-major group with 2 updates (#151)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-06T17:54:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "113f040cddad7d125cb8f547076f823447092c3f",
"body": "Bumps the non-major group with 3 updates: [github/codeql-action/init](https://github.com/github/codeql-action), [github/codeql-action/autobuild](https://github.com/github/codeql-action) and [github/codeql-action/analyze](https://github.com/github/codeql-action).\n\n\nUpdates `github/codeql-action/init`\n[…]\n: version-update:semver-patch\n dependency-group: non-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "ci(deps): bump the non-major group with 3 updates (#150)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-06T10:07:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "deed38a7c73b391d3d0058c0a5c42c2209d4131e",
"body": null,
"is_bot": false,
"headline": "release: v0.28.0 (#149)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-07-02T23:43:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "379ba8bc9b355be7d341785caa08e07a1b81e01b",
"body": "…nt spans, not the document head (#145) (#146)\n\nHead-first truncation reduced long formal documents to front matter:\nthe first real PDF ingest (129-page NIST SP 800-63B-4) extracted all\n18,265 words, capped to the first 2,000 — title page, authors, abstract,\nToC — and the synth correctly refused to \n[…]\nd head-first cap.\nDeterministic, LLM-free, zero new deps.\n\nPinned by test/relevance-window.test.mjs incl. a NIST-shaped fixture\nasserting head-first misses the normative text and windowing reaches it.",
"is_bot": false,
"headline": "feat: relevance-windowed per-source cap — budget goes to query-releva…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-07-02T23:41:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5236f58d67726935010b4b5c11af6a16c036b72f",
"body": null,
"is_bot": false,
"headline": "release: v0.27.1 (#144)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-07-02T22:49:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ead8a801543fd0eff367eeb9d4d37acdac6f43be",
"body": "…(#142) (#143)\n\nA live v0.27.0 run grounded 16/18 citations in the official OpenSSH\nrelease notes yet badged `mixed` — openssh.org scored unknown while the\nset's one recognized primary was a marginally relevant Windows install\nguide. Same coverage class as #130: canonical project sites with no\ndocs.\n[…]\nrg — the mirror search actually surfaces — and openbsd.org,\nthe parent project), pinned by a new test case. Re-scoring the live\nrun's five kept sources: 1 primary / 4 unknown -> 3 primary / 2 unknown.",
"is_bot": false,
"headline": "fix: OpenSSH/OpenBSD project hosts score primary in source authority …",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-07-02T22:46:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9fc1f0c252a7dd89f680828b0d9a1abe8153bf14",
"body": "…4-8) (#141)\n\nREADME + cli usage comment suggested `claude-opus-4-7` for reasoning-heavy runs;\nopus-4-7 is superseded by opus-4-8 (current). Docs/examples only — benchmark\nreceipts, CHANGELOG history, the pricing table, and the still-valid default\nclaude-sonnet-4-6 are untouched.",
"is_bot": false,
"headline": "docs: refresh superseded opus model-id in examples (opus-4-7 -> opus-…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-07-02T12:29:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b0062b46844bc811403bde2cc226730e062694fb",
"body": "…onal-dep accuracy (#140)",
"is_bot": false,
"headline": "docs(readme): v0.27.0 state — board receipts, SE keyword ladder, opti…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-07-02T12:22:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c1a4b31b37597f4da84ea3e48a601cde2d01daf3",
"body": "…shipped empty, not just since 0.20.0 (#139)",
"is_bot": false,
"headline": "docs(test): correct the #135 scope note — all 28 auto-release bodies …",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-07-02T12:13:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "27d4eeecd66797cec8546eb4bc39aea3f2348540",
"body": "…niche-ops un-deaded (+5, trust high) (#138)",
"is_bot": false,
"headline": "bench: source-authority off-vs-prefer board at v0.27.0 — 23% -> 44%, …",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-07-02T02:44:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a63177369adcf0723b3ab362d1e52e4c87ddefcb",
"body": "… cell (#137)",
"is_bot": false,
"headline": "bench(compare): name the failure when a run renders as an empty board…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-07-02T02:26:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4d76a25b195412f9a3d94cf9bbee15f646b87129",
"body": "…emptied every release body (#135) (#136)",
"is_bot": false,
"headline": "fix(release): changelog extraction never worked — $ under the m flag …",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-07-02T01:38:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "99b49d3df5b08debdc0684314f433b7a9da0ef76",
"body": "…Exchange keyword ladder (#131) (#134)",
"is_bot": false,
"headline": "chore(release): v0.27.0 — ops/infra authority coverage (#130) + Stack…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-07-02T01:30:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b6f829e1949270884073966ae999e729d586043",
"body": "…ero-result NL queries (#131) (#133)",
"is_bot": false,
"headline": "feat(search): stackexchange adapter walks the #86 keyword ladder on z…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-07-02T01:26:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f1959f406d16a918301e178eedd2f4d3c7b31327",
"body": "…roject docs + the SE network's own domains (#130) (#132)",
"is_bot": false,
"headline": "feat(source-authority): cover the ops/infra canon — nginx.org-class p…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-07-02T01:24:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "97db37c7db2826ffc2ced923a5b7fc95deed0ace",
"body": "… 18% -> 38% primary/reputable (#129)",
"is_bot": false,
"headline": "bench: source-authority off-vs-prefer board at v0.26.1 (P3 of #111) —…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-07-02T00:49:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a0926292dec3a8fe37f3b1855c8ed8048aea3641",
"body": "…adge entry (#128)",
"is_bot": false,
"headline": "docs(changelog): cut the missing 0.26.1 section + add the #124 HTML-b…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-07-02T00:38:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8716e5f6556ede13bcb857dec5dfb97590b72a5f",
"body": "Bumps the non-major group with 3 updates: [playwright](https://github.com/microsoft/playwright), [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) and [pdfjs-dist](https://github.com/mozilla/pdf.js).\n\n\nUpdates `playwright` from 1.61.0 to 1.61.1\n- [Release notes](\n[…]\n: version-update:semver-minor\n dependency-group: non-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump the non-major group with 3 updates (#127)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-29T10:00:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "abfc194d75ddaf18550f0a517b75265ccf210c59",
"body": "…prefix exclusion fix (#125) (#126)",
"is_bot": false,
"headline": "chore(release): v0.26.1 — ship source-trust HTML badge (#124) + docs-…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-27T02:01:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e7c269e7452ede742be71f196644ab21c466b3d7",
"body": "…prefix boost (#111) (#125)\n\ndocs.google.com matched the `docs.` documentation-subdomain boost and scored\n`primary` (top authority, 1.0) — but it's the Google Docs app, where anyone can\npublish a document, not Google's product docs. An arbitrary user-published\nGoogle Doc therefore ranked as authorit\n[…]\nnot boosted). Google's real product docs at\ndevelopers.google.com / cloud.google.com are unaffected (the latter is already\na curated primary domain). Pinned by a new case in source-authority.test.mjs.",
"is_bot": false,
"headline": "fix(source-authority): exclude user-publishable docs. hosts from the …",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-26T14:58:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ac536dd89bc649a0a6a045d73164ec662c8448f9",
"body": "…) (#124)\n\nThe HTML export now shows deepdive's source-trust label — the orthogonal axis to\ncitation support (whether the sources themselves are credible, not just whether\nclaims are cited) — on the shareable artifact, mirroring the CLI footer and the\n--json envelope. renderTrustBadge reuses the sam\n[…]\nurceTrust the other surfaces use, so every output reports one\nconsistent signal. Only shown when there's something to flag (mixed/low); a\nhigh-trust run stays clean. Tooltip is HTML-escaped. +6 tests.",
"is_bot": false,
"headline": "feat(export): surface the source-trust badge in the HTML report (#111…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-25T01:14:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "09944ec40412be7a61bcfe7061e8d65b0110b2d6",
"body": "claude-sync and claude-bridge are being moved back to private. Remove public references/links so nothing 404s. npm packages stay published.",
"is_bot": false,
"headline": "chore: remove claude-sync from stack listing (now private) (#123)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-24T20:17:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "80bb3ea49087ae7379e4d4263d3f8b1063869810",
"body": "The agent repo (@askalf/agent) is being made private and held back until the platform goes live. Remove public references/links so nothing 404s in the meantime. To be re-added at launch.",
"is_bot": false,
"headline": "chore: remove agent from stack listing (held back pre-launch) (#122)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-24T18:40:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2548f7ca46c6975c501b18ae3b167d6e1a124a4a",
"body": "…g the run (#104) (#121)\n\ncallLLMStream wrapped only the initial connect in retry, so once the synthesis\nstream was flowing a mid-generation upstream stall tripped the idle-token\ndeadline and the TimeoutError killed the whole run. On a single-pass factual\nlookup synthesis is the only synthesis call,\n[…]\ny.test.mjs covers buffered-stall retry + fresh buffer,\npre-first-token retry, post-first-token no-retry, and a long-but-healthy stream\nthat outlives the connect timeout. Full suite: 760 pass / 0 fail.",
"is_bot": false,
"headline": "fix(synthesize): retry intermittent upstream stalls instead of failin…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-24T17:20:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bcec93aebf81e706e255121024b10dbd1ea1dca7",
"body": "…letes #111 P4)\n\nCompletes P4 (stretch) of #111 — search-side bias toward primary sources.\n\nThe keep-stage authority ranking can only reorder what search already returned; a `multi:` fan-out could fill its result cap with content farms and truncate a low-ranked primary source before the keep stage s\n[…]\nL().hostname` + `endsWith`), not substring — verified safe. Test assertion changed from `url.includes(...)` to an exact-URL match to clear a CodeQL incomplete-url-substring false positive.\n\nRefs #111.",
"is_bot": false,
"headline": "feat(sources): bias multi-search fan-out toward primary sources (comp…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-24T16:40:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "affb2a168568d8de05868f25fec2847f0c98eb24",
"body": "…hived)",
"is_bot": false,
"headline": "Remove deja from Own Your Stack list (repo shelved: now private + arc…",
"author_name": "askalf",
"author_login": "askalf",
"committed_at": "2026-06-23T19:25:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d426f8ab53ceac3eb6d99a35353bf5953ecf1eba",
"body": "Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 25.9.3 to 26.0.0.\n- [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases)\n- [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node)\n\n---\nupdated-depe\n[…]\ngned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>\nCo-authored-by: AskALF <263217947+askalf@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps-dev): bump @types/node from 25.9.3 to 26.0.0 (#119)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-22T16:46:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c6f0d5f5c6fb8f5069f428090cfd3e227159d68f",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6.0.3 to 7.0.0.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/df4cb1c069e1874edd31b43\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "ci(deps): bump actions/checkout from 6.0.3 to 7.0.0 (#118)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-22T10:03:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "58a59f52aedd8351036d78bb7edca6c1b330148d",
"body": "…thority feature",
"is_bot": false,
"headline": "readme: add cordon + picket to footer; document the v0.26.0 source-au…",
"author_name": "askalf",
"author_login": "askalf",
"committed_at": "2026-06-19T19:18:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d51b1d52f6d8b8cb30d0049784d64a574236bfb6",
"body": "dist/ is gitignored and `npm test` ran against it without building first, so a\nfresh clone (no dist) — or a stale dist after a src change — failed: fetch-wedge\ncouldn't import FetchWedgeError, source-authority couldn't import its dist module,\nand the llm-stream streaming subtests cancelled (2 files \n[…]\nelled).\nAdd a `pretest` that runs the build. Verified: wipe dist, `npm test` auto-rebuilds\nand 731/733 pass (2 intentional skips).\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "test: build before test so `npm test` works on a fresh checkout (#117)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-19T16:26:55Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7b7bfdb699f0b3037c3bffe9aa09d29dc9b35e63",
"body": "Wires the measurable axis behind the source-authority work into the bench.\nEvery scoreboard now carries an `authority` column (the kept-source mix the CLI\nreports in --json: NP/NR/NU/NL · trust) plus an aggregate primary/reputable\nshare — reported, never gated (`unknown` is neutral; a niche topic le\n[…]\nlive LLM, like the rest of the harness. Reads the\nreal --json sourceTrust the CLI emits, so the bench stays zero-dep and measures\nthe shipped signal. No src/ changes; manual-only, never wired into CI.",
"is_bot": false,
"headline": "bench: source-authority distribution metric (P3 of #111) (#116)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-18T22:10:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "aaf6eafd40bb5c475ad3924ffba5c26c214bd519",
"body": "Ships the source-authority layer (#112/#113/#114): deterministic, no-LLM\ndomain scoring (scoreAuthority), keep-stage ranking that gives authoritative\nsources the limited fetch slots (--source-authority prefer|strict|off), and a\nsource-trust signal in the footer + --json — orthogonal to citation support,\nso a fully-cited answer built on content farms is flagged instead of silently\nconfident. Version bump + CHANGELOG + README doctor sample only.",
"is_bot": false,
"headline": "release: 0.26.0 — source authority, a second trust axis (#111) (#115)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-18T21:56:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f6ec98a3eff83cafd8fd016043072a23f7b73dea",
"body": "…f #111) (#114)\n\nAdds the orthogonal trust axis to deepdive's output. Citation support asks\n\"does the answer match its cited source?\"; this asks \"are those sources\nthemselves credible?\" — so a fully-cited answer built entirely on content\nfarms is no longer indistinguishable from one grounded in prim\n[…]\nhigh/mixed/low + counts; footer\n with trust). Full suite 739 pass / 0 fail.\n\nNo LLM, deterministic, auditable — same philosophy as the lexical verifier.\nP3 (bench metric) is the remaining #111 slice.",
"is_bot": false,
"headline": "feat(sources): surface a source-trust signal in output + --json (P2 o…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-18T01:41:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "15b645478efa31d7d16d104828fbd675a347012a",
"body": "…(P1 of #111) (#113)\n\nWires the #112 scoreAuthority module — until now a pure, unused export —\ninto the fetch keep-stage so authoritative/primary sources win the limited\nfetch slots ahead of whatever search happened to rank first.\n\n- source-authority.ts: add rankByAuthority(items, urlOf, mode) +\n S\n[…]\ns green (117 pass / 0 fail).\n\nDefault is \"prefer\" per the issue — a reorder-only boost that drops\nnothing, so it cannot starve a query. P2 (trust signal in output/--json)\nand P3 (bench metric) follow.",
"is_bot": false,
"headline": "feat(sources): rank candidates by domain authority at the keep stage …",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-18T01:21:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "26a267776e5f7cabbc57e70d9947dc733864680c",
"body": null,
"is_bot": false,
"headline": "readme: refresh Own Your Stack footer (add hybrid + current stack)",
"author_name": "askalf",
"author_login": "askalf",
"committed_at": "2026-06-16T20:51:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "953414cf7e9b98b8b381053cf091656bf719e664",
"body": "Pure, deterministic per-URL trust scorer — the foundation for ranking which\nfetched sources to keep and for a source-trust signal distinct from citation\nsupport. Boost-led: gov/edu/standards/academia/official-docs = primary,\nwikipedia/SO/github = reputable; unknown is neutral (niche-but-legit not\npu\n[…]\n conservative seed denylist of observed content farms.\nNot yet wired into the keep loop — next commit. Validated on the 2026-06-15\ndogfood domains: content farms -> low, AWS/Fed/redis docs -> primary.",
"is_bot": false,
"headline": "feat(sources): source-authority scorer (P1 of #111) (#112)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-15T21:01:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "31feaef5b70576063f580a7652cdb3c1edfb13a8",
"body": "…es (#108)\n\nBumps the non-major group with 2 updates in the / directory: [playwright](https://github.com/microsoft/playwright) and [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node).\n\n\nUpdates `playwright` from 1.60.0 to 1.61.0\n- [Release notes](https://github.com\n[…]\n: version-update:semver-minor\n dependency-group: non-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump the non-major group across 1 directory with 2 updat…",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-15T20:53:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0d23cdcdaeed884f171e9c7a247732173cc5d5e3",
"body": "… (#110)\n\nThe installed `deepdive` bin (an npm symlink to dist/cli.js) was a silent\nno-op: the entry-point guard compared process.argv[1] (the symlink path) to\nimport.meta.url (the resolved module path), which never matched, so main()\nnever ran. Resolve both with realpathSync before comparing. Regression test\nspawns the CLI through a symlink. Affected every npm-global install; missed\nbecause the bench/tests invoke node dist/cli.js directly.",
"is_bot": false,
"headline": "fix(cli): run main() under symlink invocation + release 0.25.3 (#109)…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-15T19:09:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "67967f93fbcd3e09990e4518c506b58c88bafef3",
"body": "…107)\n\nShips the synthesis-reliability fix to npm: synthesis always streams (even\nin --json / non-TTY) bounded by an idle-token deadline, so a long generation\ncompletes in one pass and a stalled stream fails fast instead of burning 3x\nwhole-call retries.",
"is_bot": false,
"headline": "release: 0.25.2 — streaming synthesis + idle-token deadline (#106) (#…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-15T18:22:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "92ec973ae34495052cda9aa01b2bfaccb6d3247b",
"body": "…106)\n\nfactual-lookup's synthesis generates a large (~8k-token) answer that takes\n~110-150s. The non-streaming client waits for the whole response under a 120s\nwhole-call timeout, so it intermittently timed out mid-generation and re-ran\nthe full generation 3x (~360s) before failing. That is the #104\n[…]\nwhole-call timeout). A residual intermittent upstream SSE\nstall remains (~1 in 4) — tracked in #104; likely round-trip/tunnel aggravated,\nto be retested with deepdive running in-network next to dario.",
"is_bot": false,
"headline": "fix(synth): stream the synthesis call + idle-token deadline (#104) (#…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-15T16:08:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ed21639f824c8c79b459d8a0959ee443ea4b75f1",
"body": "Supersedes the DuckDuckGo-confounded 2026-06-12-v0.25.0-validation.md as the\nreference board for synth/planner prompt comparisons, now that the bench runs\non a deterministic search layer (#102). 5/6 PASS, support 0.92-1.00 on the\nfive completing questions. factual-lookup is blocked by the #104 fetch wedge\n(infra, intermittent), not a regression.",
"is_bot": false,
"headline": "bench: add clean SearXNG stock baseline board (2026-06-15) (#105)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-15T14:19:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c5160ab3339883c94fc2b67802cc37330c39b691",
"body": "DuckDuckGo HTML rate-limits the test box's IP and silently degrades to\nthe wikipedia fallback. For questions Wikipedia can't answer (e.g.\nfactual-lookup's \"Claude API rate limits\"), that turns a search failure\ninto a confident \"the sources don't contain it\" answer that reads like\nan LLM hedge — maki\n[…]\nards record the backend (URL kept to stderr, never\ncommitted).\n\nTests cover resolveBackend + questionArgs + the scoreboard line.\nValidated e2e: factual-lookup PASS via SearXNG, 32/32 citations (1.00).",
"is_bot": false,
"headline": "bench: run searches through SearXNG, not DuckDuckGo (#102)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-15T01:29:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9349685b8cd04930af0dbee1d9d2ef4ee6dd5f6b",
"body": null,
"is_bot": false,
"headline": "npm: align description to Own Your Stack",
"author_name": "askalf",
"author_login": "askalf",
"committed_at": "2026-06-14T18:29:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "43546da74300427262624b7b1cbe193d64f15961",
"body": null,
"is_bot": false,
"headline": "README: align to Own Your Stack",
"author_name": "askalf",
"author_login": "askalf",
"committed_at": "2026-06-14T15:15:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4020be9d1cdc2eaa8333c5c2558d3a6ab0f99230",
"body": "Bumps [esbuild](https://github.com/evanw/esbuild) from 0.28.0 to 0.28.1.\n- [Release notes](https://github.com/evanw/esbuild/releases)\n- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/evanw/esbuild/compare/v0.28.0...v0.28.1)\n\n---\nupdated-dependenci\n[…]\nld\n dependency-version: 0.28.1\n dependency-type: indirect\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps-dev): bump esbuild from 0.28.0 to 0.28.1 (#101)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-13T20:47:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d794c01da88d801a08723c3ad120be896e6e5ebc",
"body": null,
"is_bot": false,
"headline": "release: 0.25.1 — hard per-fetch deadline (#87 wedge fix) (#100)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T21:24:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5071e8437693ee56add16b3b4f6beb9d8625fe0a",
"body": "* fix(browser): hard per-fetch deadline closes the #87 wedge class\n\nRoot-cause audit of the 18-minute idle hang: the page work includes\nprotocol calls the per-call timeouts cannot cover. page.evaluate accepts\nno timeout at all - a renderer main thread blocked after domcontentloaded\n(dialog, window.p\n[…]\nde\ndrains the event loop before the unref'd deadline timer fires and\nnode:test cancels the still-pending test. Keep-alive in the TEST; the\nproduction unref stays (it must never hold the process open).",
"is_bot": false,
"headline": "fix(browser): hard per-fetch deadline closes the #87 wedge class (#99)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T21:21:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0e48f100b00ac27ff43519c513721d8d64fcf8ef",
"body": "…recency levers (4/3 @ 1.00) (#98)",
"is_bot": false,
"headline": "bench: v0.25.0 stock validation board — 5/6, recent PASSES with both …",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T21:13:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "248177897678965f7a41a8ad7d13877eed4d573a",
"body": null,
"is_bot": false,
"headline": "release: 0.25.0 — date-grounded planner and critic (#96)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T18:03:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf1b765f30ac7dfd719850dedf6a77e17120ec4f",
"body": "* feat(plan): date-ground the planner and critic prompts\n\nThe planner had no notion of the current date, so recency-sensitive\nquestions got queries anchored to the model's training-time sense of\n\"recent\" - and with --since set, the recency filter then culled most of\nwhat those stale queries returned\n[…]\n once DDG rate-limiting on this IP\ncools - the after-run hit HTTP 202 throttling mid-bench.\n\n* bench: date-grounded planner after-board — 5/6, academic 0.68->0.92, recent 1/3->2-4/3 (bistable at gate)",
"is_bot": false,
"headline": "feat(plan): date-ground the planner and critic prompts (#95)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T18:00:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "411cda2035fc3cbf230dc894bee45e33c4143615",
"body": "…(#94)\n\nThe promised unconfounded re-run: fresh npm ci + build in an isolated\nworktree at the release commit, only the shipped change set. The news\nadapter alone accounts for recent's recovery (1/3 sources at v0.23.0\n-> 3/3 at 1.00 support).",
"is_bot": false,
"headline": "bench: clean v0.24.0 board — 6/6, recent 3/3 sources at 1.00 support …",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T15:33:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e73c377a49b96798d71aa46279d1f205c23b773a",
"body": "…e fallback (#93)",
"is_bot": false,
"headline": "release: 0.24.0 — news adapter (keyless Bing News RSS) + recency-awar…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T15:18:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6074c63ac5414d1003e0829f10d2f37bd387561",
"body": "…llback default (#92)\n\n* feat(search): news adapter (Bing News RSS, keyless) + recency-aware fallback default\n\nThe v0.23.0 bench's one failure was the `recent` question: DDG throttled,\nand the wikipedia fallback's undated/stale pages were culled by\n--since=180d, leaving 1/3 sources. Recency was the \n[…]\n in the full board). Full scoreboard 6/6 — first perfect run;\n committed in bench/results/2026-06-12-v0.24.0-news-fallback.md.\n\n* bench: disclose the concurrent-planner-edit confound on the 6/6 board",
"is_bot": false,
"headline": "feat(search): news adapter (keyless Bing News RSS) + recency-aware fa…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T15:07:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "19a7fb15ba5099795f1a7d6738c215052a95b59f",
"body": "Same six questions that scored 1/6 under last night's DDG block and\n4/6 yesterday morning. With the keyword ladder (#89) and dario 4.8.66\nupstream: every run completes, citation support 0.68-1.00, cost\n$0.04-$0.16/query. The one FAIL (recent) completed with a fully-cited\nanswer but kept 1 source vs the 3-source gate — --since=180d thins\nthe pool by design; gate calibration question, not a product gap.",
"is_bot": false,
"headline": "bench: v0.23.0 validation — 5/6 PASS, 6/6 completed (#91)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T10:40:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af873fd3039cdd017bb428f72089a9797d7a3bef",
"body": null,
"is_bot": false,
"headline": "release: 0.23.0 — Wikipedia keyword ladder (#90)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T10:32:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3dfffa0674887cdc15d335c6ea9d55a3e628a33d",
"body": "…terms (#89)\n\n* feat(wikipedia): keyword ladder — retry zero-result queries with key terms\n\nCloses #86. MediaWiki search matches article titles/text and returns\nzero for the planner's long natural-language queries (\"nginx\nfastcgi_buffer_size upstream sent too big header php-fpm fix\"), which\nhollowed\n[…]\nres are this exact gap; DDG re-throttled mid-bench and\nthe un-laddered fallback came back empty).\n\n* fix(query-keywords): linear punctuation trim — no quantified regex over input (js/polynomial-redos)",
"is_bot": false,
"headline": "feat(wikipedia): keyword ladder — retry zero-result queries with key …",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T10:28:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "faeca9d0eda6c18793faa459f32d470824019ac6",
"body": "… block (#88)\n\nSame live conditions as the v0.21.0 baseline (DDG rate-limiting the\nbox). Default wikipedia fallback turns three zero-source deaths into\ncompleted, fully-cited answers (factual-lookup, comparison, niche-ops\nall 1.00 citation support). Strict PASS stays 1/6 because the\nsource-count gates honestly flag thin encyclopedia-only grounding; the\ntwo remaining exit-3s are the verbatim-query/encyclopedia mismatch\ntracked in #86.",
"is_bot": false,
"headline": "bench: v0.22.0 after-scoreboard — completed runs 1/6 -> 4/6 under DDG…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T01:25:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c3f80f15b4f94426324084e10a538bf150df26cf",
"body": null,
"is_bot": false,
"headline": "release: 0.22.0 — search fallback on by default (#85)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T01:18:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e11422c8e33b3ee5695e78623d9ece5b0edfc410",
"body": "…never die (#84)\n\nThe v0.21.0 baseline bench (bench/results/, committed here) made the\ncase: with DuckDuckGo rate-limiting the box's IP, 5/6 default-config\nquestions died with zero sources (exit 3) while the one multi-backend\nquestion passed with 12 sources and 0.86 citation support. A default\nrun d\n[…]\non\nthat exited 3 minutes earlier now completes via the fallback — 3\nsources, 9/9 citations supported, $0.044, with the stderr notice.\n\n682 tests: default resolution, none/off/blank disable, overrides.",
"is_bot": false,
"headline": "feat(search): default --search-fallback=wikipedia — degrade visibly, …",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T01:16:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "18b2398f8c1f4524192359c97ea9100ea1a7e1de",
"body": "…on visibility, quality bench (#83)",
"is_bot": false,
"headline": "release: 0.21.0 — PDFs out of the box, --max-runtime, multi degradati…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T01:06:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f581bdce955a94e510bac0d63632444b292571a",
"body": "…deadline (#82)\n\nBoth straight from the first live bench run.\n\nmulti: partial-failure tolerance was HIDING sub-adapter failures — DDG\nwas rate-limited the whole run, every query silently lost its\ngeneral-web results, and the answer synthesized from one StackExchange\nsource with no indication why. No\n[…]\nuntime=5s aborts in ~6s with the named cause;\nunitless value exits 2 with usage. 681 tests (was 672): benching,\nlastFailures reset, all-benched throw, search.degraded emission,\nconfig/flag resolution.",
"is_bot": false,
"headline": "feat(search): multi degradation visibility + benching; --max-runtime …",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T01:02:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "106f0d729de25d5f44f955bcecb07ca5f78709b0",
"body": "…es (#81)\n\nThe planner/synth prompts are the project's highest-leverage knobs and\ncan't be tuned blind. bench/run.mjs runs the golden questions in\nbench/questions.json through the built CLI against a live endpoint and\nscores each run on structural gates: completed, enough sources,\ncitation-verifier \n[…]\nund can synthesize from a single source when DDG is silently\nrate-limited inside multi: (partial-failure tolerance hides it), and\ncaught a fetch-stage wedge — both queued as the next resilience round.",
"is_bot": false,
"headline": "feat(bench): quality bench harness — golden questions, structural gat…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T00:53:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2522dc84d14e7ada2bcf43eb56948644c4c3c047",
"body": "…e box (#80)\n\n* feat(pdf): ship pdfjs-dist as an optional dependency — PDFs work out of the box\n\nDefault `npm install -g @askalf/deepdive` now reads PDFs with zero extra\nsteps. The academic adapters (arxiv, pubmed, semanticscholar, openalex)\nsurface PDFs constantly; silently skipping them gutted exa\n[…]\nworlds (pdfjs hidden: typecheck clean, 34\npass / 2 skipped incl. degraded-path pass; pdfjs present: 672 pass /\n1 skipped).\n\n* test(doctor): pdf check asserts ok-or-info depending on extractor presence",
"is_bot": false,
"headline": "feat(pdf): ship pdfjs-dist as an optional dependency — PDFs out of th…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T00:50:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "17505db7de3fa049bc3046b62e0548b554288b9c",
"body": "Rate-limit detection (DDG 202/403/429 + challenge page), request\nspacing, per-query search error tolerance with search.error events,\nzero-source abort before the synthesis call (NoSourcesError, exit 3),\nopt-in --search-fallback recovery pass, --version flag.\n\nCHANGELOG entry + README doctor sample refreshed. Merging this\npublishes 0.20.0 to npm via auto-release.yml.",
"is_bot": false,
"headline": "release: 0.20.0 — search resilience (#79)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T00:18:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b98d52762084d9f9cced65ba066eb53bf8759ce",
"body": "--search-fallback=<adapters> (env DEEPDIVE_SEARCH_FALLBACK, config key\nsearchFallback): when a round's primary searches produce ZERO candidates\n(rate-limited, down, or genuinely empty), the round's queries re-run once\nthrough the fallback adapter before the zero-source guard fires. A comma\nlist fans\n[…]\n (was 650): fallback recovery / not-consulted-when-healthy /\nskipped-queries coverage / both-empty still aborts; parse-args, config\nresolution, normalizeAdapterList. Completion script + usage updated.",
"is_bot": false,
"headline": "feat(search): --search-fallback recovery pass + --version flag (#78)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T00:14:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d877bb7df46db1a77d2d8f5f4eaef3a358f4680b",
"body": "…is (#77)\n\nDogfood finding (2026-06-10 smoke): DDG silently rate-limits a burst of\nqueries (~7 in quick succession), every search returns 0 results with no\nwarning, and the run still burns a synthesis LLM call to produce\n\"unable to answer\".\n\nThree fixes:\n\n- DuckDuckGo adapter now detects throttling \n[…]\n were\n rate limits.\n\n650 tests (was 619): DDG throttle detection + spacing, agent error\ntolerance + short-circuit + guard, preKept still averts the abort,\nmulti classification, CLI message rendering.",
"is_bot": false,
"headline": "feat(search): rate-limit detection + zero-source abort before synthes…",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-12T00:11:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "68e08a3ccf4b6df946e7927a1c4d37364cc466bb",
"body": null,
"is_bot": false,
"headline": "docs: refresh doctor sample version, add ecosystem footer line (#76)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-11T23:27:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "10dc05ccbfd4ebed0d0a12db6c3c1fd3514a44f3",
"body": "* feat(export): heading anchors + table of contents in the HTML report (v0.19.0)\n\n- markdownToHtml gains headingIds: slug ids on headings (lowercased,\n dashed, deduped -2/-3; derived from readable text with inline markup\n and [N] cites stripped). Off by default; the HTML export enables it,\n so de\n[…]\nware, slug-consistent with\n markdownToHtml), headingPlainText, slugify.\n\n10 new tests (629 total green). Bundles the v0.19.0 release.\n\n* fix(markdown): linear slug trim to resolve js/polynomial-redos",
"is_bot": false,
"headline": "feat(export): heading anchors + table of contents (v0.19.0) (#75)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-10T01:06:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6456a83cfb8670d28d711bc4a9a296d9d424e61a",
"body": "- deepdive rerun <id>: fresh re-run + automatic diff vs the parent (#72)\n- --search=multi:a,b[,c...]: concurrent fan-out across adapters (#73)\n\n607 → 619 tests. See CHANGELOG for the full 0.18.0 entry.",
"is_bot": false,
"headline": "release: 0.18.0 — rerun + multi-adapter fan-out (#74)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-09T21:42:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5906062baf06bc3e446bc1657a3f28801ba2f8c7",
"body": "Queries every listed adapter concurrently, interleaves results\nround-robin in adapter order, dedupes on the normalized URL, re-ranks\ndensely. Partial failures tolerated (a throttled backend doesn't sink\nthe round); throws only when EVERY sub-adapter failed, naming each.\nSub-adapters resolve recursiv\n[…]\nain engine or two gives the planner a source pool no single\nbackend returns.\n\nNew exports MultiSearch/interleaveResults. 12 new tests (619 total\ngreen); live-verified interleaving ddg+wikipedia+arxiv.",
"is_bot": false,
"headline": "feat(search): multi-adapter fan-out — --search=multi:a,b[,c...] (#73)",
"author_name": "AskALF",
"author_login": "askalf",
"committed_at": "2026-06-09T21:33:33Z",
"body_truncated": true,
"is_coding_agent": false
}
],
"releases_count": 39,
"commits_last_year": 170,
"latest_release_at": "2026-07-20T14:48:57Z",
"latest_release_tag": "v0.32.0",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 14,
"days_since_latest_release": 6,
"mean_days_between_releases": 3.5
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 85,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "@askalf/deepdive",
"exists": true,
"license": "MIT",
"keywords": [
"research",
"agent",
"llm",
"local",
"cli",
"anthropic",
"openai",
"claude",
"search",
"deep-research",
"perplexity-alternative",
"cite",
"citations",
"self-hosted"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@askalf/deepdive",
"is_deprecated": false,
"latest_version": "0.32.0",
"repository_url": "https://github.com/askalf/deepdive",
"versions_count": 39,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 3313,
"first_published_at": "2026-04-22T16:11:15.637000Z",
"latest_published_at": "2026-07-20T14:49:47.192000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 6
}
]
},
"popularity": {
"forks": 2,
"stars": 2,
"watchers": 0,
"fork_history": {
"days": [
{
"date": "2026-04-26",
"count": 1
},
{
"date": "2026-05-01",
"count": 1
}
],
"complete": true,
"collected": 2,
"total_forks": 2
},
"star_history": null,
"open_issues_and_prs": 1
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": true,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 75892,
"source_files_sampled": 134,
"oversized_source_files": 1,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 4940
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [
{
"name": "@hono/node-server",
"direct": false,
"version": "1.19.15",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 5.9,
"advisory_ids": [
"GHSA-frvp-7c67-39w9"
],
"fixed_version": "2.0.5",
"advisory_count": 1,
"oldest_advisory_days": 5
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"moderate": 1
},
"advisory_count": 1,
"affected_count": 1,
"assessed_count": 111,
"malicious_count": 0,
"assessed_package": "npm:@askalf/deepdive@0.32.0",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "@modelcontextprotocol/sdk",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.29.0"
},
{
"name": "playwright",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.47.0"
},
{
"name": "zod",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.4.3"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "@modelcontextprotocol/sdk",
"direct": true,
"version": "1.29.0",
"ecosystem": "npm"
},
{
"name": "playwright",
"direct": true,
"version": "1.61.1",
"ecosystem": "npm"
},
{
"name": "zod",
"direct": true,
"version": "4.4.3",
"ecosystem": "npm"
},
{
"name": "@babel/code-frame",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/compat-data",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/core",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/generator",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/helper-compilation-targets",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/helper-globals",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/helper-module-imports",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/helper-module-transforms",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/helper-string-parser",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/helper-validator-identifier",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/helper-validator-option",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/helpers",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/parser",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/template",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/traverse",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/types",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@esbuild/aix-ppc64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/android-arm",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/android-arm64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/android-x64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/darwin-arm64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/darwin-x64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/freebsd-arm64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/freebsd-x64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-arm",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-arm64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-ia32",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-loong64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-mips64el",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-ppc64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-riscv64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-s390x",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-x64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/netbsd-arm64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/netbsd-x64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/openbsd-arm64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/openbsd-x64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/openharmony-arm64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/sunos-x64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/win32-arm64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/win32-ia32",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@esbuild/win32-x64",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "@hono/node-server",
"direct": false,
"version": "1.19.15",
"ecosystem": "npm"
},
{
"name": "@isaacs/fs-minipass",
"direct": false,
"version": "4.0.1",
"ecosystem": "npm"
},
{
"name": "@istanbuljs/schema",
"direct": false,
"version": "0.1.6",
"ecosystem": "npm"
},
{
"name": "@jazzer.js/bug-detectors",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "@jazzer.js/core",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "@jazzer.js/fuzzer",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "@jazzer.js/hooking",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "@jazzer.js/instrumentor",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "@jridgewell/gen-mapping",
"direct": false,
"version": "0.3.13",
"ecosystem": "npm"
},
{
"name": "@jridgewell/remapping",
"direct": false,
"version": "2.3.5",
"ecosystem": "npm"
},
{
"name": "@jridgewell/resolve-uri",
"direct": false,
"version": "3.1.2",
"ecosystem": "npm"
},
{
"name": "@jridgewell/sourcemap-codec",
"direct": false,
"version": "1.5.5",
"ecosystem": "npm"
},
{
"name": "@jridgewell/trace-mapping",
"direct": false,
"version": "0.3.31",
"ecosystem": "npm"
},
{
"name": "@napi-rs/canvas",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "@napi-rs/canvas-android-arm64",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "@napi-rs/canvas-darwin-arm64",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "@napi-rs/canvas-darwin-x64",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "@napi-rs/canvas-linux-arm-gnueabihf",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "@napi-rs/canvas-linux-arm64-gnu",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "@napi-rs/canvas-linux-arm64-musl",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "@napi-rs/canvas-linux-riscv64-gnu",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "@napi-rs/canvas-linux-x64-gnu",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "@napi-rs/canvas-linux-x64-musl",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "@napi-rs/canvas-win32-arm64-msvc",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "@napi-rs/canvas-win32-x64-msvc",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "@types/node",
"direct": false,
"version": "26.1.1",
"ecosystem": "npm"
},
{
"name": "accepts",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "ajv",
"direct": false,
"version": "8.20.0",
"ecosystem": "npm"
},
{
"name": "ajv-formats",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "ansi-regex",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "ansi-styles",
"direct": false,
"version": "4.3.0",
"ecosystem": "npm"
},
{
"name": "append-transform",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "baseline-browser-mapping",
"direct": false,
"version": "2.10.43",
"ecosystem": "npm"
},
{
"name": "bindings",
"direct": false,
"version": "1.5.0",
"ecosystem": "npm"
},
{
"name": "body-parser",
"direct": false,
"version": "2.3.0",
"ecosystem": "npm"
},
{
"name": "browserslist",
"direct": false,
"version": "4.28.6",
"ecosystem": "npm"
},
{
"name": "buffer-from",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "bytes",
"direct": false,
"version": "3.1.2",
"ecosystem": "npm"
},
{
"name": "call-bind-apply-helpers",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "call-bound",
"direct": false,
"version": "1.0.4",
"ecosystem": "npm"
},
{
"name": "caniuse-lite",
"direct": false,
"version": "1.0.30001805",
"ecosystem": "npm"
},
{
"name": "chownr",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "cliui",
"direct": false,
"version": "8.0.1",
"ecosystem": "npm"
},
{
"name": "cmake-js",
"direct": false,
"version": "8.0.0",
"ecosystem": "npm"
},
{
"name": "color-convert",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "color-name",
"direct": false,
"version": "1.1.4",
"ecosystem": "npm"
},
{
"name": "content-disposition",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "content-type",
"direct": false,
"version": "1.0.5",
"ecosystem": "npm"
},
{
"name": "content-type",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "convert-source-map",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "cookie",
"direct": false,
"version": "0.7.2",
"ecosystem": "npm"
},
{
"name": "cookie-signature",
"direct": false,
"version": "1.2.2",
"ecosystem": "npm"
},
{
"name": "cors",
"direct": false,
"version": "2.8.6",
"ecosystem": "npm"
},
{
"name": "cross-spawn",
"direct": false,
"version": "7.0.6",
"ecosystem": "npm"
},
{
"name": "debug",
"direct": false,
"version": "4.4.3",
"ecosystem": "npm"
},
{
"name": "deep-extend",
"direct": false,
"version": "0.6.0",
"ecosystem": "npm"
},
{
"name": "default-require-extensions",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "depd",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "dunder-proto",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "ee-first",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "electron-to-chromium",
"direct": false,
"version": "1.5.389",
"ecosystem": "npm"
},
{
"name": "emoji-regex",
"direct": false,
"version": "8.0.0",
"ecosystem": "npm"
},
{
"name": "encodeurl",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "es-define-property",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "es-errors",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "es-object-atoms",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "esbuild",
"direct": false,
"version": "0.28.1",
"ecosystem": "npm"
},
{
"name": "escalade",
"direct": false,
"version": "3.2.0",
"ecosystem": "npm"
},
{
"name": "escape-html",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "etag",
"direct": false,
"version": "1.8.1",
"ecosystem": "npm"
},
{
"name": "eventsource",
"direct": false,
"version": "3.0.7",
"ecosystem": "npm"
},
{
"name": "eventsource-parser",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "express",
"direct": false,
"version": "5.2.1",
"ecosystem": "npm"
},
{
"name": "express-rate-limit",
"direct": false,
"version": "8.5.2",
"ecosystem": "npm"
},
{
"name": "fast-deep-equal",
"direct": false,
"version": "3.1.3",
"ecosystem": "npm"
},
{
"name": "fast-uri",
"direct": false,
"version": "3.1.4",
"ecosystem": "npm"
},
{
"name": "file-uri-to-path",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "finalhandler",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "forwarded",
"direct": false,
"version": "0.2.0",
"ecosystem": "npm"
},
{
"name": "fresh",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "fs-extra",
"direct": false,
"version": "11.3.6",
"ecosystem": "npm"
},
{
"name": "fsevents",
"direct": false,
"version": "2.3.2",
"ecosystem": "npm"
},
{
"name": "fsevents",
"direct": false,
"version": "2.3.3",
"ecosystem": "npm"
},
{
"name": "function-bind",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "gensync",
"direct": false,
"version": "1.0.0-beta.2",
"ecosystem": "npm"
},
{
"name": "get-caller-file",
"direct": false,
"version": "2.0.5",
"ecosystem": "npm"
},
{
"name": "get-intrinsic",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "get-proto",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "gopd",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "graceful-fs",
"direct": false,
"version": "4.2.11",
"ecosystem": "npm"
},
{
"name": "has-flag",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "has-symbols",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "hasown",
"direct": false,
"version": "2.0.4",
"ecosystem": "npm"
},
{
"name": "hono",
"direct": false,
"version": "4.12.29",
"ecosystem": "npm"
},
{
"name": "html-escaper",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "http-errors",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "iconv-lite",
"direct": false,
"version": "0.7.3",
"ecosystem": "npm"
},
{
"name": "inherits",
"direct": false,
"version": "2.0.4",
"ecosystem": "npm"
},
{
"name": "ini",
"direct": false,
"version": "1.3.8",
"ecosystem": "npm"
},
{
"name": "ip-address",
"direct": false,
"version": "10.2.0",
"ecosystem": "npm"
},
{
"name": "ipaddr.js",
"direct": false,
"version": "1.9.1",
"ecosystem": "npm"
},
{
"name": "is-fullwidth-code-point",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "is-promise",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "isexe",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "isexe",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "istanbul-lib-coverage",
"direct": false,
"version": "3.2.2",
"ecosystem": "npm"
},
{
"name": "istanbul-lib-hook",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "istanbul-lib-instrument",
"direct": false,
"version": "6.0.3",
"ecosystem": "npm"
},
{
"name": "istanbul-lib-report",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "istanbul-reports",
"direct": false,
"version": "3.2.0",
"ecosystem": "npm"
},
{
"name": "jose",
"direct": false,
"version": "6.2.3",
"ecosystem": "npm"
},
{
"name": "js-tokens",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "jsesc",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "json-schema-traverse",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "json-schema-typed",
"direct": false,
"version": "8.0.2",
"ecosystem": "npm"
},
{
"name": "json5",
"direct": false,
"version": "2.2.3",
"ecosystem": "npm"
},
{
"name": "jsonfile",
"direct": false,
"version": "6.2.1",
"ecosystem": "npm"
},
{
"name": "lru-cache",
"direct": false,
"version": "5.1.1",
"ecosystem": "npm"
},
{
"name": "make-dir",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "math-intrinsics",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "media-typer",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "merge-descriptors",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "mime-db",
"direct": false,
"version": "1.54.0",
"ecosystem": "npm"
},
{
"name": "mime-types",
"direct": false,
"version": "3.0.2",
"ecosystem": "npm"
},
{
"name": "minimist",
"direct": false,
"version": "1.2.8",
"ecosystem": "npm"
},
{
"name": "minipass",
"direct": false,
"version": "7.1.3",
"ecosystem": "npm"
},
{
"name": "minizlib",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "ms",
"direct": false,
"version": "2.1.3",
"ecosystem": "npm"
},
{
"name": "negotiator",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "node-addon-api",
"direct": false,
"version": "8.9.0",
"ecosystem": "npm"
},
{
"name": "node-api-headers",
"direct": false,
"version": "1.9.0",
"ecosystem": "npm"
},
{
"name": "node-releases",
"direct": false,
"version": "2.0.51",
"ecosystem": "npm"
},
{
"name": "object-assign",
"direct": false,
"version": "4.1.1",
"ecosystem": "npm"
},
{
"name": "object-inspect",
"direct": false,
"version": "1.13.4",
"ecosystem": "npm"
},
{
"name": "on-finished",
"direct": false,
"version": "2.4.1",
"ecosystem": "npm"
},
{
"name": "once",
"direct": false,
"version": "1.4.0",
"ecosystem": "npm"
},
{
"name": "parseurl",
"direct": false,
"version": "1.3.3",
"ecosystem": "npm"
},
{
"name": "path-key",
"direct": false,
"version": "3.1.1",
"ecosystem": "npm"
},
{
"name": "path-to-regexp",
"direct": false,
"version": "8.4.2",
"ecosystem": "npm"
},
{
"name": "pdfjs-dist",
"direct": false,
"version": "6.1.200",
"ecosystem": "npm"
},
{
"name": "picocolors",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "pkce-challenge",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "playwright-core",
"direct": false,
"version": "1.61.1",
"ecosystem": "npm"
},
{
"name": "proper-lockfile",
"direct": false,
"version": "4.1.2",
"ecosystem": "npm"
},
{
"name": "proxy-addr",
"direct": false,
"version": "2.0.7",
"ecosystem": "npm"
},
{
"name": "qs",
"direct": false,
"version": "6.15.3",
"ecosystem": "npm"
},
{
"name": "range-parser",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "raw-body",
"direct": false,
"version": "3.0.2",
"ecosystem": "npm"
},
{
"name": "rc",
"direct": false,
"version": "1.2.8",
"ecosystem": "npm"
},
{
"name": "require-directory",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "require-from-string",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "retry",
"direct": false,
"version": "0.12.0",
"ecosystem": "npm"
},
{
"name": "router",
"direct": false,
"version": "2.2.0",
"ecosystem": "npm"
},
{
"name": "safer-buffer",
"direct": false,
"version": "2.1.2",
"ecosystem": "npm"
},
{
"name": "semver",
"direct": false,
"version": "6.3.1",
"ecosystem": "npm"
},
{
"name": "semver",
"direct": false,
"version": "7.8.5",
"ecosystem": "npm"
},
{
"name": "send",
"direct": false,
"version": "1.2.1",
"ecosystem": "npm"
},
{
"name": "serve-static",
"direct": false,
"version": "2.2.1",
"ecosystem": "npm"
},
{
"name": "setprototypeof",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "shebang-command",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "shebang-regex",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "side-channel",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "side-channel-list",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "side-channel-map",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "side-channel-weakmap",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "signal-exit",
"direct": false,
"version": "3.0.7",
"ecosystem": "npm"
},
{
"name": "source-map",
"direct": false,
"version": "0.6.1",
"ecosystem": "npm"
},
{
"name": "source-map-support",
"direct": false,
"version": "0.5.21",
"ecosystem": "npm"
},
{
"name": "statuses",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "string-width",
"direct": false,
"version": "4.2.3",
"ecosystem": "npm"
},
{
"name": "strip-ansi",
"direct": false,
"version": "6.0.1",
"ecosystem": "npm"
},
{
"name": "strip-bom",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "strip-json-comments",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "supports-color",
"direct": false,
"version": "7.2.0",
"ecosystem": "npm"
},
{
"name": "tar",
"direct": false,
"version": "7.5.22",
"ecosystem": "npm"
},
{
"name": "tmp",
"direct": false,
"version": "0.2.7",
"ecosystem": "npm"
},
{
"name": "toidentifier",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "tsx",
"direct": false,
"version": "4.23.1",
"ecosystem": "npm"
},
{
"name": "type-is",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "typescript",
"direct": false,
"version": "5.9.3",
"ecosystem": "npm"
},
{
"name": "undici-types",
"direct": false,
"version": "8.3.0",
"ecosystem": "npm"
},
{
"name": "universalify",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "unpipe",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "update-browserslist-db",
"direct": false,
"version": "1.2.3",
"ecosystem": "npm"
},
{
"name": "url-join",
"direct": false,
"version": "4.0.1",
"ecosystem": "npm"
},
{
"name": "vary",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "which",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "which",
"direct": false,
"version": "6.0.1",
"ecosystem": "npm"
},
{
"name": "wrap-ansi",
"direct": false,
"version": "7.0.0",
"ecosystem": "npm"
},
{
"name": "wrappy",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "y18n",
"direct": false,
"version": "5.0.8",
"ecosystem": "npm"
},
{
"name": "yallist",
"direct": false,
"version": "3.1.1",
"ecosystem": "npm"
},
{
"name": "yallist",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "yargs",
"direct": false,
"version": "17.7.3",
"ecosystem": "npm"
},
{
"name": "yargs-parser",
"direct": false,
"version": "21.1.1",
"ecosystem": "npm"
},
{
"name": "zod-to-json-schema",
"direct": false,
"version": "3.25.2",
"ecosystem": "npm"
}
],
"collected": true,
"truncated": false,
"total_count": 241,
"direct_count": 3,
"indirect_count": 238
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 163,
"open_issues": 1,
"closed_ratio": 0.95,
"closed_issues": 19,
"closed_unmerged_prs": 3
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "askalf",
"commits": 139,
"avatar_url": "https://avatars.githubusercontent.com/u/263217947?v=4"
},
{
"type": "User",
"login": "tgonzalezc5",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/102870299?v=4"
}
],
"contributors_sampled": 2,
"top_contributor_share": 0.993
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"actionlint.yml",
"auto-release.yml",
"cflite.yml",
"ci.yml",
"codeql.yml",
"npm-drift-watch.yml",
"publish.yml",
"scorecard.yml",
"stale.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 5,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 1,
"reason": "Found 4/22 approved changesets -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 10,
"reason": "project is fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 10,
"reason": "all dependencies are pinned",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 10,
"reason": "SAST tool is run on all commits",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 8,
"reason": "2 out of the last 2 releases have a total of 2 signed artifacts.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 10,
"reason": "GitHub workflow tokens follow principle of least privilege",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "4a13089fe289c7adf72ad79c0fe7aa744e1731da",
"ran_at": "2026-07-27T00:59:18Z",
"aggregate_score": 8.5,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": true,
"has_security_policy": true,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-26T17:04:46Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-26T17:03:50Z",
"ci_last_conclusion": "FAILURE",
"oldest_open_issues": [
{
"number": 186,
"created_at": "2026-07-26T18:08:29Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/askalf/deepdive",
"host": "github.com",
"name": "deepdive",
"owner": "askalf"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 69,
"inputs": {
"security": 86,
"vitality": 84,
"community": 45,
"governance": 55,
"engineering": 77
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 84,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 74,
"inputs": {
"commits_last_year": 170,
"human_commit_share": 0.85,
"days_since_last_push": 0,
"active_weeks_last_year": 14
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "14/52 weeks with commits",
"points": 9.7,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 14
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "170 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 170
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 98,
"inputs": {
"releases_count": 39,
"latest_release_tag": "v0.32.0",
"releases_from_tags": false,
"days_since_latest_release": 6,
"mean_days_between_releases": 3.5
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "39 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 39
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 6 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 6
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~3.5 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 3.5
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "2 out of the last 2 releases have a total of 2 signed artifacts.",
"points": 8,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 45,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 2,
"stars": 2,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "2 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 2
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "2 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 2
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "excellent",
"name": "Community health",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 59,
"inputs": {
"packages": [
"@askalf/deepdive"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 3313
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "3,313 downloads/month across npm",
"points": 46.9,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 3313,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 55,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 15,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 2,
"top_contributor_share": 0.993
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 99% of commits",
"points": 0.2,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 99
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "2 contributors",
"points": 2.7,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 2
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"merged_prs": 163,
"open_issues": 1,
"closed_issues": 19,
"issue_closed_ratio": 0.95,
"closed_unmerged_prs": 3
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "95% of issues closed",
"points": 44.4,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 95
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "163/166 decided PRs merged",
"points": 37.6,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 163,
"decided": 166
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 4/22 approved changesets -- score normalized to 1",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 38,
"inputs": {
"followers": 21,
"owner_type": "User",
"is_verified": null,
"owner_login": "askalf",
"public_repos": 23,
"account_age_days": 154
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "21 followers of askalf",
"points": 9.7,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 21,
"login": "askalf"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "23 public repos, account ~0 yr old",
"points": 10.9,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 23
}
},
{
"code": "account_age_years",
"params": {
"years": 0
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"@askalf/deepdive"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 6
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 6 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 6
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "39 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 39
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 77,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "9 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 9
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"topics": [
"ai",
"cli",
"llm",
"research-agent",
"search",
"anthropic",
"citations",
"claude",
"deep-research",
"perplexity-alternative",
"self-hosted",
"mcp",
"model-context-protocol"
],
"has_wiki": false,
"homepage": "https://www.npmjs.com/package/@askalf/deepdive",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://www.npmjs.com/package/@askalf/deepdive",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "13 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 13
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "excellent",
"name": "Security",
"value": 86,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "excellent",
"name": "Security posture",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 18,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 0,
"scorecard_aggregate": 8.5
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 3.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "30 out of 30 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 4/22 approved changesets -- score normalized to 1",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is fuzzed",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 18 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "all dependencies are pinned",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is run on all commits",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "2 out of the last 2 releases have a total of 2 signed artifacts.",
"points": 6,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "GitHub workflow tokens follow principle of least privilege",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Matched the npm:@askalf/deepdive@0.32.0 runtime dependency closure — what installing the published package pulls in — 111 packages. Reachability is not analyzed.",
"notes": [
{
"code": "advisories_scope_published",
"params": {
"package": "npm:@askalf/deepdive@0.32.0",
"assessed": 111
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 88,
"inputs": {
"source": "osv",
"advisories": 1,
"affected_packages": 1,
"assessed_packages": 111,
"unassessed_packages": 0,
"affected_by_severity": "moderate 1",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "1 affected: @hono/node-server 1.19.15 (moderate 5.9)",
"points": 13.2,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 1,
"packages": "@hono/node-server 1.19.15 (moderate 5.9)"
}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory has been public longer than 90 days",
"points": 40,
"status": "met",
"details": [
{
"code": "advisories_none_stale",
"params": {
"days": 90
}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 111,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 66,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.965,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 4940
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "82 of 85 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 82,
"sampled": 85
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 63,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"package-lock.json"
],
"has_dockerfile": true,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
"tsconfig.json"
],
"agent_commit_share": 0.01,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0.15
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "1 of the last 100 commits agent-authored or agent-credited",
"points": 2,
"status": "partial",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 1,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "15 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 15,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "all dependencies are pinned",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "good",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"primary_language": "JavaScript",
"largest_source_bytes": 75892,
"source_files_sampled": 134,
"oversized_source_files": 1
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "JavaScript with type-check config (tsconfig.json)",
"points": 27,
"status": "partial",
"details": [
{
"code": "typecheck_config_language",
"params": {
"files": "tsconfig.json",
"language": "JavaScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "1/134 source files over 60KB",
"points": 54.6,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 134,
"oversized": 1
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "critical",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"example_dirs": [],
"has_mcp_signal": true,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 20,
"status": "met",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-27T00:59:34.262877Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/a/askalf/deepdive.svg",
"full_name": "askalf/deepdive",
"license_state": "standard",
"license_spdx": "MIT"
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with askalf/deepdive. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
