buddingnewinsights/pi-diff holds a health index of 56 out of 100, placing it in the Moderate band. It scores highest on Vitality (83/100) and lowest on Security (39/100). It was last updated 7 days ago. A single contributor accounts for most of its recent work.
56
overall / 100
Moderate
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.
56
Exceptional93-100The record's top tier (≈ top 5%); essentially all checked criteria met
Excellent80-92Strong across the board; minor gaps
Good65-79Healthy; gaps are limited and manageable
Moderate50-64Acceptable with notable gaps; review recommended
Weak35-49Material weaknesses across several areas
At Risk20-34Significant weaknesses; adoption warrants caution
Critical1-19Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
The weighted overall 54 is calibrated to 56 on the published index scale (record calibration 2026-08-02).
Excluded from scoring (no data or not applicable): ci_tests, dangerous_workflow, packaging, pinned_dependencies, signed_releases, token_permissions. Remaining weights renormalized.
Direct dependencies free of known advisories — 1 affected: diff 7.0.0 (moderate 5.3)
25/25
Indirect dependencies free of known advisories — no indirect dependency carries a known advisory
35.3/40
No advisories left outstanding — 1 advisory-carrying package(s) unaddressed past 90 days; oldest published 195 days ago
Inputs used
source
osv
advisories
1
affected_packages
1
assessed_packages
185
unassessed_packages
0
affected_by_severity
moderate 1
direct_affected_packages
1
Matched the npm:@heyhuynhgiabuu/pi-diff@0.7.6 runtime dependency closure — what installing the published package pulls in — 185 packages. Reachability is not analyzed.
How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.
Manageable file sizes — 1/26 source files over 60KB
Inputs used
primary_language
TypeScript
largest_source_bytes
81,320
source_files_sampled
26
oversized_source_files
1
Key facts
35GitHub stars
2contributors
66commits, last 12 months
7days since last push
25releases
1bus factor
0open issues
npmpackage ecosystems
Data collection warnings
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
Star and fork history 0 ★ / 7 ⇿
0Stars
7Forks
25Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 4Patch 21
OpenSSF Scorecard 2.9 / 10
2.9aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-29 07:31 UTC
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Dependency advisories 1
Installing npm:@heyhuynhgiabuu/pi-diff@0.7.6 pulls in 185 packages, direct and transitive: 1 carry known advisories, of which 1 are direct dependencies.
Package
Version
Relation
Severity
Advisories
Fixed in
diff
7.0.0
direct
moderate
1
8.0.3
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 898,
"has_wiki": true,
"homepage": null,
"languages": {
"Python": 2543,
"TypeScript": 270354
},
"pushed_at": "2026-07-21T08:04:30Z",
"created_at": "2026-03-30T11:24:51Z",
"owner_type": "User",
"updated_at": "2026-07-23T15:45:41Z",
"description": " Shiki-powered terminal diff renderer for pi — syntax-highlighted, word-level diffs in split and unified views ",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript"
]
},
"owner": {
"blog": null,
"name": "Buu",
"type": "User",
"login": "buddingnewinsights",
"company": null,
"location": "Can Tho, Vietnam",
"followers": 8,
"avatar_url": "https://avatars.githubusercontent.com/u/260617570?v=4",
"created_at": "2026-02-10T08:38:07Z",
"is_verified": null,
"public_repos": 8,
"account_age_days": 168
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.7.6",
"kind": "patch",
"published_at": "2026-07-21T08:04:44Z"
},
{
"tag": "v0.7.5",
"kind": "patch",
"published_at": "2026-07-11T04:35:29Z"
},
{
"tag": "v0.7.4",
"kind": "patch",
"published_at": "2026-07-08T18:10:08Z"
},
{
"tag": "v0.7.3",
"kind": "patch",
"published_at": "2026-07-08T17:15:19Z"
},
{
"tag": "v0.7.2",
"kind": "patch",
"published_at": "2026-07-05T18:54:54Z"
},
{
"tag": "v0.7.1",
"kind": "patch",
"published_at": "2026-07-03T16:45:58Z"
},
{
"tag": "v0.7.0",
"kind": "minor",
"published_at": "2026-07-03T16:26:31Z"
},
{
"tag": "v0.6.10",
"kind": "patch",
"published_at": "2026-07-01T19:35:55Z"
},
{
"tag": "v0.6.9",
"kind": "patch",
"published_at": "2026-07-01T18:10:20Z"
},
{
"tag": "v0.6.7",
"kind": "patch",
"published_at": "2026-07-01T07:48:05Z"
},
{
"tag": "v0.6.6",
"kind": "patch",
"published_at": "2026-07-01T07:43:18Z"
},
{
"tag": "v0.6.5",
"kind": "patch",
"published_at": "2026-06-27T16:14:20Z"
},
{
"tag": "v0.6.3",
"kind": "patch",
"published_at": "2026-06-21T05:27:32Z"
},
{
"tag": "v0.6.2",
"kind": "patch",
"published_at": "2026-06-16T17:45:41Z"
},
{
"tag": "v0.6.1",
"kind": "patch",
"published_at": "2026-06-11T05:21:43Z"
},
{
"tag": "v0.6.0",
"kind": "minor",
"published_at": "2026-06-10T14:55:29Z"
},
{
"tag": "v0.5.5",
"kind": "patch",
"published_at": "2026-06-08T07:51:30Z"
},
{
"tag": "v0.5.4",
"kind": "patch",
"published_at": "2026-06-07T12:20:58Z"
},
{
"tag": "v0.5.3",
"kind": "patch",
"published_at": "2026-06-07T11:41:21Z"
},
{
"tag": "v0.5.2",
"kind": "patch",
"published_at": "2026-06-06T05:43:36Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2026-05-30T07:09:46Z"
},
{
"tag": "v0.5.1",
"kind": "patch",
"published_at": "2026-06-03T13:56:47Z"
},
{
"tag": "v0.4.1",
"kind": "patch",
"published_at": "2026-05-18T05:35:36Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2026-05-02T06:45:21Z"
},
{
"tag": "v0.2.2",
"kind": "patch",
"published_at": "2026-04-14T04:59:18Z"
}
],
"recent_commits": [
{
"oid": "eeceac487a2023ba10258c5fc194e5bc762a3c43",
"body": null,
"is_bot": false,
"headline": "release: harden apply patch and add tool config",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-07-21T08:03:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2270852596d642db72c1f9b42dc8a513290d502e",
"body": null,
"is_bot": false,
"headline": "release: v0.7.5",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-07-11T04:31:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6655fc956a675fa510d33e37ff34cc24255a666f",
"body": null,
"is_bot": false,
"headline": "fix: ship complete dist package in v0.7.4",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-07-08T18:07:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bccef37b2d865200eb35602774aa540ba9591f75",
"body": null,
"is_bot": false,
"headline": "release: prepare v0.7.3",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-07-08T17:11:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d28e25027de4bf5ec49a13d29b4c14ba1d0f2c9",
"body": "Three changes from lessons in lucumr.pocoo.org/2026/7/4/better-models-worse-tools:\n\n1. Flatten tool schemas — remove all nested JSON arrays from edit and\n hashline_edit. Model now uses top-level string params (start_hash,\n end_hash, replacement; oldText, newText) instead of edits[] and\n hashli\n[…]\netection promoted\n from warning to error; tells the model exactly which line to remove.\n\nFiles: src/core/hashline-execute.ts, src/hashline.ts,\n src/hashline.test.ts, src/index.ts, package.json",
"is_bot": false,
"headline": "v0.7.2: flatten edit/hashline_edit tool schemas",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-07-05T18:51:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ac42e1a7cc535b5db3aacfcbe5ff9cd9c00dd77b",
"body": null,
"is_bot": false,
"headline": "fix(publish): include hashline dist in npm package (0.7.1)",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-07-03T16:45:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "72acdab4901f79f1f57fc34d803118ea621fd662",
"body": "Content-anchored edits, BOM/EOL preserve, dryRun, shared runHashlineEdit, TUI padding/stats, ADR-001, session analyze script. 154 tests.",
"is_bot": false,
"headline": "feat(hashline): release 0.7.0 with hashline_read/edit tools",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-07-03T16:20:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f334fd7847cecc99421efbe30a4f865f1377180",
"body": "…ash)",
"is_bot": false,
"headline": "fix: themed +X -Y on write/edit call lines (summarizeThemed, write st…",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-07-01T19:45:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e7ff2a426a82e020b85d7fd16ef7841378c01e41",
"body": "- session_start setToolsExpanded(true) vs pi-pretty collapse\n- write overwrite diff always full preview",
"is_bot": false,
"headline": "release: v0.6.10 default expand write/edit tool output",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-07-01T19:35:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "03d638d7f8a166d5a4a1b2c146fc3149e838c3bf",
"body": "- formatToolCallHeader + bottom pad on write/edit renderCall\n- edit stash stats; multiEditInfo without duplicate meta row\n- new file write: toolSuccessBg, default expand, flush checkmark line\n- renderShell self on write and edit",
"is_bot": false,
"headline": "release: v0.6.9 write/edit headers, new-file bg, edit stats on call line",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-07-01T18:10:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cc9b82f46c4fee1589b7ec388b9dd9e338faad38",
"body": null,
"is_bot": false,
"headline": "fix: npm pack includes collapsed-hint.js (v0.6.8)",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-07-01T07:56:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4154f8bbfe4232670179a8cec4de1ab7d1acee2d",
"body": null,
"is_bot": false,
"headline": "release: v0.6.7 — remove dead expand.ts",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-07-01T07:47:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f8504f84654a77bbbe3f14046cd44759edbbe32f",
"body": "…onfig)\n\n- Dropped one-off scripts/patch-collapsed.py from working tree\n- Pruned stale fallow worktree",
"is_bot": false,
"headline": "chore: remove dead expand.ts (Pi 0.80 uses setToolsExpanded, not setC…",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-07-01T07:44:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0f716a8dcdf6b0c533073291524d780908afe4c4",
"body": "- Edit/multi-edit: always unified diff (Pi 0.80 ctx.expanded default false)\n- Write overwrite: collapsed +N -M when !expanded\n- TOOL_HEADER_LEFT_PAD 1, DIFF_BODY_LEFT_PAD 0\n- Pi 0.80 SDK ^0.80.0",
"is_bot": false,
"headline": "fix: v0.6.6 edit always expanded, write collapse, header/body pad",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-07-01T07:41:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "77e6b1ef90ad193b89c12c081a1fde0f4f0f3ad5",
"body": "- Pi SDK ^0.80.0; collapsed summaries for write/edit/new when !expanded\n- Write overwrite: +N -M summary vs full unified diff on expand\n- session_start toolOutputExpanded true; ctrl+o hints via collapsed-hint",
"is_bot": false,
"headline": "release: v0.6.7 Pi 0.80, write overwrite collapse, default expand",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-07-01T07:29:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c4768c00453c601e3ef6790ef41e2a78a1e990a",
"body": "The v0.6.5 npm tarball loaded with:\n Cannot find module './edit-guard.js'\n\nbecause the package.json 'files' array was missing\ndist/edit-guard.* entries. This release (v0.6.6) adds them.\n\nBump to v0.6.6 since v0.6.5 is already broken on npm and\nun-installing/re-installing won't fix the published tarball.\n\nVerified: npm pack --dry-run lists all 4 edit-guard files,\n98/98 vitest passing, tsc clean.",
"is_bot": false,
"headline": "fix: include dist/edit-guard.* in published package",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-06-27T16:19:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95eb270e8f84278d10c216819129819c2d68befe",
"body": null,
"is_bot": false,
"headline": "docs: mention call preview at-line fix in 0.6.5 notes",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-06-27T16:06:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "400da84314188d1917394e46b92347cb633ca3d2",
"body": "The result title (rendered by pi from details.summary) had the\n'at line N' suffix since 0e6adea / 6a3ca65. But the call preview\n(rendered by renderCall, shown while the edit is being dispatched)\ndidn't — it just showed '+61' with no location.\n\nThis is what the user was actually seeing in their scree\n[…]\ntes, so there's no post-write\nfile content to read; instead, we read the file once, find the\nfirst oldText, and use its line number for the suffix.\n\nVerified: tsc --noEmit clean, 98/98 vitest passing.",
"is_bot": false,
"headline": "fix: also include at-line in edit call preview title",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-06-27T16:00:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "89e2a143caac50a78d7d26a837bc4ad99804b5b8",
"body": null,
"is_bot": false,
"headline": "docs: add 0.6.5 release notes and changelog entry",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-06-27T15:46:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2827d9dcf279d2a059861e3ef17f5af84fdcc12f",
"body": null,
"is_bot": false,
"headline": "chore: bump version to 0.6.5",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-06-27T15:45:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a3ca65e448bf073f00d1de1fe62da8ca5440126",
"body": "The previous fix (0e6adea) only updated one of four places where\nthe 'summary' field is set in the edit tool's execute callback:\n\n 1. editInfo, first params path (line 1822) - had the fix\n 2. multiEditInfo, first params path (1857) - missing\n 3. editInfo, second await-origEdit path (1897)\n[…]\ne (content not in scope here, since\n this path delegates to the SDK tool and doesn't write\n before computing details), then compute firstEditLine\n\nVerified: tsc --noEmit clean, 98/98 vitest passing.",
"is_bot": false,
"headline": "fix: include at-line in title for all four edit code paths",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-06-27T15:42:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6178deaafae14489515f9e2e42951f1fce5a414a",
"body": "The README was stale in five ways vs. the current code:\n\n1. Missing the edit-guard feature (added in 7b0d8bc):\n - new bullet in the Features section\n - new paragraph in How It Works describing the tool_call\n handler that blocks stale oldText before edit runs\n - new import + registerEditGua\n[…]\nwitched to ExtensionAPI\n to match the real signature.\n\n5. Listed registerProvider under 'Extensions can' — not used\n by pi-diff. Removed.\n\nVerified: tsc and vitest were not affected (README only).",
"is_bot": false,
"headline": "docs: update README to match the rollback-to-v0.6.4 codebase",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-06-27T15:37:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0e6adea83ed99a3e2b96a934b09cebb84f281524",
"body": "The single edit tool result was rendering the diff summary\n('+9 -4') and the edit location ('at line 1944') in two\nseparate rows:\n row 1: edit src/index.ts +9 -4 (pi's native title)\n row 2: at line 1944 (pi-diff hunk header)\n\nFold the location into the title summary so both\n[…]\nats row (pass empty meta); the multiEdit\n paths are untouched because their stats ('N edits / diff\n lines') are info that pi's title doesn't show\n\nVerified: tsc --noEmit clean, 98/98 vitest passing.",
"is_bot": false,
"headline": "fix: fold edit location into title summary, drop stats row",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-06-27T15:29:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b6fc6b56bfdd5a822eb2fa7f2b78f2ea6075a849",
"body": "The hunk header for the edit tool was showing the diff summary\n('+2 -1') in two places at once: once in pi's native tool header\n('edit src/index.ts +2') and again in the pi-diff hunk header\nrow ('+2 -1 at line 2010'). Both were sourced from the same\nd.summary field.\n\nStop passing the summary to the \n[…]\nped from setToolHeaderText meta\n- multiEdit with diff: s dropped from meta, keeps 'N edits' + line count\n- multiEdit without diff: same as above\n\nVerified: tsc --noEmit clean, 98/98 vitest passing.",
"is_bot": false,
"headline": "fix: drop duplicate +x-y summary from hunk header",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-06-27T15:13:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7b0d8bcf4b768d0214235023cb83c4af00129201",
"body": "Adds a tool_call handler that verifies the file content matches\nthe oldText before the edit tool executes. If oldText is not\nfound, the call is blocked with a clear error directing the model\nto re-read the file.\n\nThis prevents repeated edit-retry loops caused by stale oldText\nfrom prior tool calls a\n[…]\nl wired into the default\n function, with proper type imports extended\n\nVerified:\n- npx tsc --noEmit\n- npm test (5 files / 98 tests passed, +5 vs. before)\n- npx vitest run (6 files / 121 tests passed)",
"is_bot": false,
"headline": "feat: add edit guard to block stale oldText calls",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-06-27T15:10:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c5a6265a1e02059a0d8bd5c3ad416a793f679128",
"body": "This reverts commit 2ba227e454bfcd8bab41197e85e74846638d4f7d.",
"is_bot": false,
"headline": "Revert \"fix: hunk header should not inherit success bg color\"",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-06-27T15:02:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ba227e454bfcd8bab41197e85e74846638d4f7d",
"body": "The edit/write tool diff preview wrapped the stats row\n('+1 -1 at line 8') in bgLine(), which paints the line with\nBG_BASE — the theme's toolSuccessBg. In most themes that is\ngreen, so the stats line read as a 'success' indicator even\nthough it just describes the change.\n\nDecouple the stats row from\n[…]\nn the\neditor (the add/del lines still carry the BG_BASE tint via\nBG_ADD / BG_DEL, which is the semantically correct place for\nthe success color).\n\nVerified: tsc --noEmit clean, 116/116 vitest passing.",
"is_bot": false,
"headline": "fix: hunk header should not inherit success bg color",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-06-27T15:00:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bd847e6bbb887501131eee1013f37800f71d7ea8",
"body": "Round 2 of the rollback-to-v0.6.4 review removal — the staged\ndeletions in 81514e9 removed the code, but the surface still leaked\ninto the package and docs:\n\n- README.md: remove 'Review context export' feature bullet, the entire\n '## Git Review in Pi TUI' section (covering /review-diff, Hunk,\n rev\n[…]\nictly as a write/edit diff renderer.\nReview (if wanted) is delegated to a separate extension such as\nbadlogic/pi-diff-review (see follow-up research). Verified: 116/116\ntests pass, tsc --noEmit clean.",
"is_bot": false,
"headline": "chore: drop lingering /review-diff references",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-06-27T14:41:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "81514e9620a3bddc34aae1b6c536611064d1e022",
"body": "Removes the interactive review feature from the rollback-to-v0.6.4 branch:\n- Drops the `/review-diff` slash command and `review_git_diff` Pi tool\n (src/review/command.ts, interactive.ts, session.ts, tui.ts, model.ts,\n hunk-bridge.ts, export.ts, file-preview.ts, prompt.ts)\n- Removes the dedicated \n[…]\neview-command.test.ts)\n\nLeaves src/review/git.ts and src/review/hunk-preview.ts in place: they\nprovide the shared diff-rendering primitives imported by the main\nextension for the edit and write tools.",
"is_bot": false,
"headline": "chore: remove review_diff tool and comment unit tests",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-06-27T14:33:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "075dc09a4f3bbc6b587e094969c464c3c28e4209",
"body": "Removes the resolve_lines LLM code-review helper tool and its tests.\nThe tool was registered in src/index.ts via pi.registerTool({ name: 'resolve_lines', ... }).\nThis commit deletes the registration, the implementation (src/core/resolve-lines.ts),\nand its test file (src/core/resolve-lines.test.ts).",
"is_bot": false,
"headline": "chore: remove resolve_lines tool",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-06-27T14:18:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2f03a1b1842e58221ab1bc4fa8b9c14a7d8d28a2",
"body": "@earendil-works/pi-coding-agent and @earendil-works/pi-tui are\nruntime imports, so they must be in 'dependencies' to ship in the\nnpm tarball after 'npm install --omit=dev' (used by 'pi install').\n\nThis caused the broken load:\n\n pi loading extension '@heyhuynhgiabuu/pi-diff'\n Cannot find package '@earendil-works/pi-coding-agent'\n\nChanges:\n- Move both packages from devDependencies to dependencies\n- Pin to ^0.79.0 (was '*')\n- Bump version 0.6.3 → 0.6.4\n- Update CHANGELOG and add RELEASE_NOTES",
"is_bot": false,
"headline": "fix(0.6.4): move @earendil-works/* to dependencies",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-06-21T06:06:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "832e36a545b98af66898495e5d7fee363917d514",
"body": null,
"is_bot": false,
"headline": "fix(release): avoid nested Pi runtime",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-06-21T05:26:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "62bef5c9b5a9fcc2bfaf225e063c51ba34ea7f31",
"body": "- Remove raw hunk headers and decorative ellipsis separators from pretty output\n- Keep full-width split for balanced replacements\n- Use unified view for one-sided or imbalanced hunks to avoid dead split columns\n- Remove visible center dividers and stale divider width reservations\n- Stop rendering empty-side filler backgrounds in split rows",
"is_bot": false,
"headline": "v0.6.2: improve edit diff rendering heuristics",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-06-16T17:44:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56170e388025a96fb717511b30782a6eedebcb7e",
"body": "- Add background/padding to edit/write preview headers\n- Add spaces around -/+ gutter signs for readability\n- Remove bold from -/+ signs (normal weight)\n- Reduce diff body left padding to 1 space\n- Increase diff background intensity for visibility\n- Remove gutter gap and top/bottom rule rows\n- Add replace.js to npm files manifest\n- Replace shiki direct type imports with local aliases",
"is_bot": false,
"headline": "chore: bump v0.6.1",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-06-11T05:20:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a268b95516dab64622d5da60e5d89810a55d2f7",
"body": "New replace() module provides 6-strategy cascading text matching for the\nedit tool, handling whitespace drift, escape sequences, and common LLM\ntool call differences. Falls back to SDK edit tool on any failure.\n\n- Replace strategies (in order): Simple, EscapeNormalized, LineTrimmed,\n BlockAnchor, W\n[…]\n 166 total tests (143 original + 23 new e2e integration tests)\n- Fix: hunk-bridge mock in review-command test (prevents blocking)\n- Fix: interactive test assertion (nonexistent review_git_comment ref)",
"is_bot": false,
"headline": "feat: add replace() cascading text engine with edit tool integration",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-06-10T14:54:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c3d9e8ffcc547e7155e60a588f8693aa548ee8e5",
"body": "…coded BORDER_BAR\n\nThe indicatorStyle config was parsed from pi-diff.json but never consumed\nby rendering code. BORDER_BAR was hardcoded to \\xe2\\x96\\x8c in both index.ts\nand hunk-preview.ts.\n\nFix: replaced hardcoded const with getBorderBar() function that reads\nconfigIndicatorStyle() and returns the appropriate border character.\nWhen indicatorStyle is 'none', returns a space character.",
"is_bot": false,
"headline": "fix: consume indicatorStyle config (bar/classic/none) instead of hard…",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-06-08T07:48:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1803051135f96a171219099effa578d002787342",
"body": "…pm files manifest\n\nThe 'files' field in package.json only listed dist/core/diff.* — missing\nthe three new modules added in commits 28671d5 and 20745d4. This caused\nruntime crashes when the extension tried to import './core/resolve-lines.js'\nfrom dist/index.js because the installed npm package didn'\n[…]\nhip those files.\n\nAffected modules:\n - dist/core/config.js (new in 20745d4)\n - dist/core/conflicts.js (new in 20745d4)\n - dist/core/resolve-lines.js (new in 28671d5)\n\nBump 0.5.3 → 0.5.4.",
"is_bot": false,
"headline": "fix: add missing core modules (config, conflicts, resolve-lines) to n…",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-06-07T12:15:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "98db092959495c77ec5865da1a2ee23c7d7196db",
"body": null,
"is_bot": false,
"headline": "chore: bump to 0.5.3",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-06-07T11:38:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "28671d5ccc392a1f92450a68084d957d386af62c",
"body": "- New resolve_lines tool: matches existing_code against git diff hunks\n using OCR's three-tier algorithm (new-side, old-side, file-content)\n- 11 unit tests covering all tiers + edge cases\n- Removed review_git_diff tool (redundant with bash git diff)\n- Removed review_git_comment/review_git_comments ghost tools\n- Cleaned up unused imports and helper functions\n\nCloses: hunk-based line resolution implementation",
"is_bot": false,
"headline": "feat: add resolve_lines tool (hunk-based line resolution)",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-06-07T11:36:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "20745d47fa952f8b9ed7ad49c5b9361f4071acce",
"body": null,
"is_bot": false,
"headline": "chore: bump v0.5.2, add config module, conflict parser, and docs",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-06-06T05:42:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d90ea59e53d8de311bfc57e4a3bdf3fda99c39ce",
"body": "computeHunkBlocks skips all sep lines (including custom multi-edit\nseparators). The split renderers used computeHunkBlocks on the remaining\ndiff after the first del/add block, which swallowed custom seps like\n'───── Edit 2 ─────'.\n\nFix: revert to original line-by-line processing that handles each line\ntype individually — ctx, sep, and del/add blocks — in the outer loop.\nThis ensures custom sep content is preserved in the rendered output.",
"is_bot": false,
"headline": "fix: restore line-by-line row construction in split renderers",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-06-05T16:55:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d127cd1b56ae74f6ec3f8ceddb7c927f6d46242b",
"body": "sepLabelUnified/sepLabelSplit now accept an optional content parameter\nfor custom separators. When content is non-empty, it's used directly\ninstead of computing a label from hunkMeta/gap.\n\nThis fixes the multi-edit separator being invisible — previously the\nrenderer ignored sep.content entirely, showing only '···' for custom\nseparators like '───── Edit 2 ─────'.",
"is_bot": false,
"headline": "fix: render multi-edit separators (───── Edit N ─────)",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-06-05T16:51:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "52f33c743c044be0546c4b88fa45d8ddf64ec95f",
"body": "- write tool: store oldContent/newContent in details; when\n _expandGaps=true, re-parse diff with full context (context=Infinity)\n- edit tool: same for single-edit path; store oldContent/newContent\n- Sep label auto style now shows +N lines for collapsed gaps\n (e.g. \" +5 lines \" or \" fn() — +5 lines \")\n- Agent can call write/edit with { _expandGaps: true } to get\n full-context diff rendering with all unchanged lines visible",
"is_bot": false,
"headline": "feat: expand unchanged regions with _expandGaps parameter",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-06-05T16:44:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "814dca3547bd89188967558d9227b3fb392ec9a1",
"body": "…ators\n\nP0 upgrades (from diffs.com architecture review):\n- HunkMeta on sep lines: parseDiff emits synthetic sep at position 0 with\n hunk metadata (oldStart, oldLines, newStart, newLines)\n- parsePatchFiles(patch): parse unified diff strings into internal ParsedDiff\n with hunk function context extr\n[…]\nnkBlock + computeHunkBlocks extracts paired del/add groups from flat\n ParsedDiff — eliminates manual grouping in both split renderers\n- 38 new tests (patch parsing, hunkMeta, sep styles, hunk blocks)",
"is_bot": false,
"headline": "feat: hunk metadata, patch parsing, paired blocks, configurable separ…",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-06-05T16:40:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c5dc293f24e7d8d9aec71ebf36ff42a1660f58c1",
"body": "When the edit tool receives multiple edits, merge all diffs into a\ncombined view with visual separators between edits (\"───── Edit N ─────\").\nStore the merged diff in details and use the same __piDiffTask async\nrenderSharedSplit pattern that single-edit already uses.\n\nPreviously the multi-edit path only stored a static text summary:\n \"2 edits +N -M (X diff lines)\"\ninstead of the actual rendered diff.",
"is_bot": false,
"headline": "fix: render shared split diff for multi-edit (edits[] > 1)",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-06-05T15:59:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a93936acc276c08272fadb735529b64e75ceed84",
"body": null,
"is_bot": false,
"headline": "chore: bump v0.5.1",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-06-03T13:55:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "02ad2b2c19040eb4fe4e63e559a028df86190ab2",
"body": "- Removed 32 types, added PiTheme interface, typed content items\n- getWidthAwareText wrapper for sidebar-aware split/unified switching\n- review_git_diff: fixed return type, type-safe error/success details\n- Write renderResult: replaced ctx.state._wdk with __piDiffTask pattern\n- Edit execute: passes\n[…]\nCall: simplified to summary only (async moved to renderResult)\n- Edit renderResult: uses getWidthAwareText + __piDiffTask\n- Test updates for new rendering pattern\n- build: clean, tests: 0 new failures",
"is_bot": false,
"headline": "feat: type quality, sidebar-aware diff rendering, review_git_diff fix",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-06-03T13:55:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "470eb111c270689b54f4776b2e70a298d1de73fa",
"body": "- Add Hunk-backed /review-diff workflow and documentation\n- Add Hunk config examples and project-local defaults\n- Remove redundant review_git_comment and review_git_comments tools\n- Keep review_git_diff as the read-only markdown context tool\n- Mark package as ESM for Pi SDK compatibility\n- Bump version to 0.5.0",
"is_bot": false,
"headline": "feat: use Hunk for review-diff and simplify review tools",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-05-30T06:58:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a756e9180cab2ec46a8985d79e4a849e6eafa5fa",
"body": "- Add hunk-bridge.ts: thin subprocess wrapper for hunk CLI\n- Hunk-first path: pipe diff to hunk patch -, harvest comments\n- Fallback path: use existing ReviewDiffPane when hunk not installed\n- Fix all any/unknown types with proper Pi SDK types\n- Bump version to 0.5.0",
"is_bot": false,
"headline": "feat: integrate Hunk as primary diff viewer with TUI fallback",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-05-30T06:25:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1d150dde3ff249cf4389d817c24151f7e133f3a4",
"body": "…ord-diff ranges\n\nRoot cause: diffWords LCS matches trailing ')' as 'common' in patterns\nlike ref(L) → ref), leaving only the old side with word-level\nhighlight ranges. This creates a confusing one-sided visual\ndescribed as 'off by 1 char'.\n\nFixes:\n- injectBg: also re-assert background after \\x1b[39\n[…]\n full reset \\x1b[0m)\n- renderUnified/renderSplit: skip word-diff emphasis when ranges\n are asymmetric (present on only one side of a paired change)\n- Add test for the ref(L) → ref) pattern\n\nCloses #1",
"is_bot": false,
"headline": "fix: highlight position off-by-1 when diffWords produces asymmetric w…",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-05-18T05:32:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1233abb60e82e611d20dee61361b95063306676e",
"body": "Per pi.dev/docs/latest/sdk, the ecosystem has moved from\n@mariozechner/* to @earendil-works/*. Update all imports,\npeerDependencies, devDependencies, and test mocks.\n\n- src/: change all @mariozechner/* imports to @earendil-works/*\n- tests: update vi.mock() targets to @earendil-works/*\n- peerDeps: add @earendil-works/*, keep @mariozechner/* for transition",
"is_bot": false,
"headline": "feat: migrate to @earendil-works/* scope, bump v0.4.0",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-05-18T05:02:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56fb71a4581e139ff6886c6370095f6658ef2538",
"body": null,
"is_bot": false,
"headline": "feat: add interactive git review workflow",
"author_name": "Buu",
"author_login": "buddingnewinsights",
"committed_at": "2026-05-02T06:42:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60a8b510800690cb4eb00999dbb2b5d96ee57217",
"body": null,
"is_bot": false,
"headline": "fix: derive delete diffs from toolErrorBg",
"author_name": "huynhgiabuu",
"author_login": "heyhuynhgiabuu",
"committed_at": "2026-04-14T04:58:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "94653b6d5bc46af6e7a11e19daa9caa171b3f735",
"body": null,
"is_bot": false,
"headline": "fix: relax peer deps to *, bump v0.2.1",
"author_name": "huynhgiabuu",
"author_login": "heyhuynhgiabuu",
"committed_at": "2026-03-30T13:30:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ceed815b7b0c7ba005cf81373079864ed6a798e",
"body": null,
"is_bot": false,
"headline": "fix: keep npm scope as @heyhuynhgiabuu while using new GitHub org",
"author_name": "huynhgiabuu",
"author_login": "heyhuynhgiabuu",
"committed_at": "2026-03-30T11:30:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1537928c9b04e2a065c531a4d44168408cde49d7",
"body": null,
"is_bot": false,
"headline": "chore: update repo owner to buddingnewinsights",
"author_name": "huynhgiabuu",
"author_login": "heyhuynhgiabuu",
"committed_at": "2026-03-30T11:27:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "27c13f7c6c17f8eb0877c1e1217634d3d700a841",
"body": "- Pin peerDependencies to ^0.64.0 (pi-coding-agent + pi-tui)\n- Inherits built-in prepareArguments hook via ...origEdit spread\n (auto-folds legacy oldText/newText into edits[] for resumed sessions)\n- Bump version from 0.1.7 to 0.2.0",
"is_bot": false,
"headline": "chore: upgrade to Pi v0.64.0, bump to 0.2.0",
"author_name": "huynhgiabuu",
"author_login": "heyhuynhgiabuu",
"committed_at": "2026-03-30T03:40:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fbb209e1bc27054b3e21a76fa3af24f5570d7845",
"body": null,
"is_bot": false,
"headline": "feat: support multi-edit diff rendering and prepare 0.1.6",
"author_name": "huynhgiabuu",
"author_login": "heyhuynhgiabuu",
"committed_at": "2026-03-27T04:53:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "055ed8a423515ecbd506b486962835fa13f9fb7c",
"body": "Every RST (\\x1b[0m) in diff output was resetting to terminal default\n(black), creating dark patches between styled segments when\ntoolSuccessBg is non-black. Now RST is updated to \\x1b[0m + BG_BASE\nso every reset returns to the tool box background color.\n\nThis is the root fix — all styled segments (gutters, borders, code,\nstripes, dividers) now seamlessly blend with toolSuccessBg.",
"is_bot": false,
"headline": "fix: make RST include BG_BASE to eliminate black flashes",
"author_name": "huynhgiabuu",
"author_login": "heyhuynhgiabuu",
"committed_at": "2026-03-25T18:42:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8b2459af52c45664b84506e6aaa8b744255750bc",
"body": "…separators)\n\nPreviously only context lines and gutters used BG_BASE. Now stripes,\nhorizontal rules, column headers (old/new), hunk separators, and\ntruncation text all use BG_BASE too. This eliminates the dark holes\ninside colored toolSuccessBg boxes.",
"is_bot": false,
"headline": "fix: apply BG_BASE to all diff UI elements (stripes, rules, headers, …",
"author_name": "huynhgiabuu",
"author_login": "heyhuynhgiabuu",
"committed_at": "2026-03-25T18:37:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "80d3899ef798a99e52fc9010b342a11e50df670c",
"body": "Auto-derive now reads toolSuccessBg from the pi theme and mixes\ndiff accent colors into it instead of assuming black. Context lines,\ngutters, and empty areas use the tool box background (BG_BASE),\nso diffs blend seamlessly with any toolSuccessBg color.\n\nThis fixes the clash when toolSuccessBg is set to a non-black color\n(e.g. green-tinted #1e2822) — previously the diff would render dark\nholes inside the colored tool box frame.",
"is_bot": false,
"headline": "fix: read toolSuccessBg from theme as base color for diff backgrounds",
"author_name": "huynhgiabuu",
"author_login": "heyhuynhgiabuu",
"committed_at": "2026-03-25T18:31:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "17bb7e5ce713bfff86c59967af9fac33ea78b2eb",
"body": "Add 4-layer color resolution chain for diff theming:\n1. Environment variable overrides (backward compatible)\n2. Per-color diffColors overrides in .pi/settings.json\n3. Named diffTheme presets (default, midnight, subtle, neon)\n4. Auto-derive backgrounds from pi theme fg colors\n\nThe 'midnight' preset is optimized for pure black terminal\nbackgrounds. When no config is set, backgrounds are auto-derived\nfrom the active pi theme's toolDiffAdded/toolDiffRemoved colors.",
"is_bot": false,
"headline": "feat: add diff theme presets and auto-derive system",
"author_name": "huynhgiabuu",
"author_login": "heyhuynhgiabuu",
"committed_at": "2026-03-25T18:07:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d8c4b352724c553b54359eb5b4e812240dac91c2",
"body": null,
"is_bot": false,
"headline": "docs: link latest release from README",
"author_name": "huynhgiabuu",
"author_login": "heyhuynhgiabuu",
"committed_at": "2026-03-25T10:52:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4e23a494daa85f1df64e8aa96f68162b72078ef6",
"body": null,
"is_bot": false,
"headline": "chore: refresh repo hygiene",
"author_name": "huynhgiabuu",
"author_login": "heyhuynhgiabuu",
"committed_at": "2026-03-25T10:49:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2321cffd8a57da62908e57fd8cbf869ca3cd1473",
"body": null,
"is_bot": false,
"headline": "chore: cut v0.1.1 release",
"author_name": "huynhgiabuu",
"author_login": "heyhuynhgiabuu",
"committed_at": "2026-03-25T10:47:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "77f2397bb486250692c21dc39e1adc3fd1fe09e4",
"body": "- Split (side-by-side) and unified (stacked) views\n- Word-level change emphasis with syntax highlighting\n- Adaptive layout with auto-fallback on narrow terminals\n- LRU cache for fast re-renders\n- Fully customizable via env vars (theme, colors, thresholds)\n- Wraps pi SDK write/edit tools with rich diff output",
"is_bot": false,
"headline": "feat: initial release — Shiki-powered terminal diff renderer for pi",
"author_name": "huynhgiabuu",
"author_login": "heyhuynhgiabuu",
"committed_at": "2026-03-25T08:43:30Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 25,
"commits_last_year": 66,
"latest_release_at": "2026-07-21T08:04:44Z",
"latest_release_tag": "v0.7.6",
"releases_from_tags": false,
"days_since_last_push": 7,
"active_weeks_last_year": 12,
"days_since_latest_release": 7,
"mean_days_between_releases": 2.2
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 42,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "@heyhuynhgiabuu/pi-diff",
"exists": true,
"license": "MIT",
"keywords": [
"diff",
"pi",
"pi-extension",
"pi-package",
"shiki",
"syntax-highlighting",
"terminal"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@heyhuynhgiabuu/pi-diff",
"is_deprecated": false,
"latest_version": "0.7.6",
"repository_url": "https://github.com/buddingnewinsights/pi-diff",
"versions_count": 37,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 3268,
"first_published_at": "2026-03-25T08:40:09.847000Z",
"latest_published_at": "2026-07-21T08:07:09.729000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 7
}
]
},
"popularity": {
"forks": 7,
"stars": 35,
"watchers": 0,
"fork_history": {
"days": [
{
"date": "2026-03-30",
"count": 1
},
{
"date": "2026-04-01",
"count": 1
},
{
"date": "2026-04-29",
"count": 1
},
{
"date": "2026-05-04",
"count": 1
},
{
"date": "2026-05-20",
"count": 1
},
{
"date": "2026-06-18",
"count": 1
},
{
"date": "2026-07-28",
"count": 1
}
],
"complete": true,
"collected": 7,
"total_forks": 7
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 81320,
"source_files_sampled": 26,
"oversized_source_files": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [
{
"name": "diff",
"direct": true,
"version": "7.0.0",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-73rr-hh4g-fpgx"
],
"fixed_version": "8.0.3",
"advisory_count": 1,
"oldest_advisory_days": 195
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"moderate": 1
},
"advisory_count": 1,
"affected_count": 1,
"assessed_count": 185,
"malicious_count": 0,
"assessed_package": "npm:@heyhuynhgiabuu/pi-diff@0.7.6",
"unassessed_count": 0,
"direct_affected_count": 1
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "@earendil-works/pi-coding-agent",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^0.80.0"
},
{
"name": "@earendil-works/pi-tui",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^0.80.0"
},
{
"name": "@shikijs/cli",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.0.2"
},
{
"name": "diff",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^7.0.0"
},
{
"name": "xxhash-wasm",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.1.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 0,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 1,
"closed_unmerged_prs": 1
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "buddingnewinsights",
"commits": 52,
"avatar_url": "https://avatars.githubusercontent.com/u/260617570?v=4"
},
{
"type": "User",
"login": "heyhuynhgiabuu",
"commits": 14,
"avatar_url": "https://avatars.githubusercontent.com/u/111694395?v=4"
}
],
"contributors_sampled": 2,
"top_contributor_share": 0.788
},
"quality_signals": {
"has_ci": false,
"has_tests": true,
"ci_workflows": [],
"has_docs_dir": false,
"linter_configs": [
"biome.json"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"package-lock.json",
"pnpm-lock.yaml"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": null,
"reason": "no workflows found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": null,
"reason": "no dependencies found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": null,
"reason": "No tokens found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 3,
"reason": "7 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "eeceac487a2023ba10258c5fc194e5bc762a3c43",
"ran_at": "2026-07-29T07:31:18Z",
"aggregate_score": 2.9,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": null,
"oldest_open_prs": [],
"last_merged_pr_at": null,
"ci_last_conclusion": null,
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/buddingnewinsights/pi-diff",
"host": "github.com",
"name": "pi-diff",
"owner": "buddingnewinsights"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": "The weighted overall 54 is calibrated to 56 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 54,
"calibrated": 56,
"calibration": "2026-08-02"
}
}
],
"value": 56,
"inputs": {
"security": 39,
"vitality": 83,
"community": 45,
"governance": 45,
"calibration": "2026-08-02",
"engineering": 50,
"ai_readiness": 60,
"weighted_overall_raw": 54
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 83,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 71,
"inputs": {
"commits_last_year": 66,
"human_commit_share": 1,
"days_since_last_push": 7,
"active_weeks_last_year": 12
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 7 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 7
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "12/52 weeks with commits",
"points": 8.3,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 12
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "66 commits in the last year",
"points": 16.4,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 66
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "exceptional",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 25,
"latest_release_tag": "v0.7.6",
"releases_from_tags": false,
"days_since_latest_release": 7,
"mean_days_between_releases": 2.2
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "25 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 25
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 7 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 7
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~2.2 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 2.2
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "weak",
"name": "Community & Adoption",
"value": 45,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 31,
"inputs": {
"forks": 7,
"stars": 35,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "35 stars",
"points": 24.8,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 35
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "7 forks",
"points": 6.5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 7
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 59,
"inputs": {
"packages": [
"@heyhuynhgiabuu/pi-diff"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 3268
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "3,268 downloads/month across npm",
"points": 46.9,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 3268,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "weak",
"name": "Sustainability & Governance",
"value": 45,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 16,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 2,
"top_contributor_share": 0.788
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 79% of commits",
"points": 4.8,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 79
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "2 contributors",
"points": 2.7,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 2
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "weak",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 48,
"inputs": {
"merged_prs": 0,
"open_issues": 0,
"closed_issues": 1,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 1,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 42,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "0/1 decided PRs merged",
"points": 0,
"status": "missed",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 0,
"decided": 1
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 31,
"inputs": {
"followers": 8,
"owner_type": "User",
"is_verified": null,
"owner_login": "buddingnewinsights",
"public_repos": 8,
"account_age_days": 168
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "8 followers of buddingnewinsights",
"points": 6.9,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 8,
"login": "buddingnewinsights"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "8 public repos, account ~0 yr old",
"points": 7.9,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 8
}
},
{
"code": "account_age_years",
"params": {
"years": 0
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"@heyhuynhgiabuu/pi-diff"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 7
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 7 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 7
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "37 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 37
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 50,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 50,
"inputs": {
"has_ci": false,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "biome.json",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "biome.json"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "weak",
"name": "Security",
"value": 39,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests, Dangerous-Workflow, Packaging, Pinned-Dependencies, Signed-Releases, Token-Permissions. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests",
"dangerous_workflow",
"packaging",
"pinned_dependencies",
"signed_releases",
"token_permissions"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 29,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 12,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 6,
"scorecard_aggregate": 2.9
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no workflows found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "No tokens found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "7 existing vulnerabilities detected",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Matched the npm:@heyhuynhgiabuu/pi-diff@0.7.6 runtime dependency closure — what installing the published package pulls in — 185 packages. Reachability is not analyzed.",
"notes": [
{
"code": "advisories_scope_published",
"params": {
"package": "npm:@heyhuynhgiabuu/pi-diff@0.7.6",
"assessed": 185
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 80,
"inputs": {
"source": "osv",
"advisories": 1,
"affected_packages": 1,
"assessed_packages": 185,
"unassessed_packages": 0,
"affected_by_severity": "moderate 1",
"direct_affected_packages": 1
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "1 affected: diff 7.0.0 (moderate 5.3)",
"points": 20.2,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 1,
"packages": "diff 7.0.0 (moderate 5.3)"
}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "1 advisory-carrying package(s) unaddressed past 90 days; oldest published 195 days ago",
"points": 35.3,
"status": "partial",
"details": [
{
"code": "advisories_stale",
"params": {
"days": 90,
"count": 1,
"oldest": 195
}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 185,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 3
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 60,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "weak",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.985,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "65 of 66 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 65,
"sampled": 66
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_pinned_dependencies"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 60,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"package-lock.json",
"pnpm-lock.yaml"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"tsconfig.json"
],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "biome.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "biome.json"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 66",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 66
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "exceptional",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 98,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 81320,
"source_files_sampled": 26,
"oversized_source_files": 1
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "1/26 source files over 60KB",
"points": 52.9,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 26,
"oversized": 1
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"top": [
"library"
],
"labels": [
"library"
],
"scores": {
"library": 6
},
"primary": "library",
"evidence": [
{
"tier": "distribution",
"label": "library",
"source": "registry:npm",
"weight": 6
}
],
"artifacts": [],
"confidence": "medium",
"host_extension": false,
"runs_as_process": false,
"consumed_by_code": true
},
"metrics_version": "2.5.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-29T07:31:23.142857Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/b/buddingnewinsights/pi-diff.svg",
"full_name": "buddingnewinsights/pi-diff",
"license_state": "standard",
"license_spdx": "MIT"
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with buddingnewinsights/pi-diff. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.5.0, schema v0.27.0 — full methodology · metrics wiki.
