codyde/hatchway holds a health index of 56 out of 100, placing it in the Moderate band. It scores highest on Vitality (85/100) and lowest on Community & Adoption (26/100). It was last updated 5 days ago. A single contributor accounts for most of its recent work.
56
overall / 100
Moderate
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
56
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Direct dependencies free of known advisories — no direct dependency carries a known advisory
25/25
Indirect dependencies free of known advisories — no indirect dependency carries a known advisory
0/40
No advisories left outstanding — no advisory carries a publication date
Inputs used
source
osv
advisories
0
affected_packages
0
assessed_packages
189
unassessed_packages
0
affected_by_severity
none
direct_affected_packages
0
Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:@hatchway/cli@0.51.39 runtime dependency closure — what installing the published package pulls in — 189 packages. Reachability is not analyzed.
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Could not fetch npm package '@hatchway/runner' from its registry
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
Star and fork history 0 ★ / 2 ⇿
0Stars
2Forks
50Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 0Patch 50
OpenSSF Scorecard 2.9 / 10
2.9aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-25 05:23 UTC
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Dependency advisories 0
Installing npm:@hatchway/cli@0.51.39 pulls in 189 packages, direct and transitive: 0 carry known advisories, of which 0 are direct dependencies.
No known advisories affect the assessed dependencies.
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 241064,
"has_wiki": true,
"homepage": null,
"languages": {
"CSS": 50361,
"Shell": 2551,
"PLpgSQL": 1918,
"Dockerfile": 2240,
"JavaScript": 60640,
"TypeScript": 2494585,
"Jupyter Notebook": 1520
},
"pushed_at": "2026-07-19T08:15:03Z",
"created_at": "2025-09-30T06:00:36Z",
"owner_type": "User",
"updated_at": "2026-07-19T08:15:07Z",
"description": "AI-powered chat interface with Material Design black and white theme",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "main",
"license_spdx_raw": null,
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript"
]
},
"owner": {
"blog": "https://codyde.io",
"name": "Cody De Arkland",
"type": "User",
"login": "codyde",
"company": null,
"location": null,
"followers": 180,
"avatar_url": "https://avatars.githubusercontent.com/u/17350652?v=4",
"created_at": "2016-02-20T06:49:46Z",
"is_verified": null,
"public_repos": 245,
"account_age_days": 3807
},
"license": {
"state": "absent",
"spdx_id": null,
"raw_spdx": null,
"file_present": false,
"scorecard_found": false,
"profile_has_license": false
},
"activity": {
"releases": [
{
"tag": "v0.51.39",
"kind": "patch",
"published_at": "2026-07-19T08:15:07Z"
},
{
"tag": "v0.51.38",
"kind": "patch",
"published_at": "2026-07-19T07:59:03Z"
},
{
"tag": "v0.51.37",
"kind": "patch",
"published_at": "2026-07-19T07:40:51Z"
},
{
"tag": "v0.51.36",
"kind": "patch",
"published_at": "2026-07-19T07:15:31Z"
},
{
"tag": "v0.51.35",
"kind": "patch",
"published_at": "2026-07-19T02:03:57Z"
},
{
"tag": "v0.51.34",
"kind": "patch",
"published_at": "2026-07-19T00:26:53Z"
},
{
"tag": "v0.51.33",
"kind": "patch",
"published_at": "2026-07-18T23:56:22Z"
},
{
"tag": "v0.51.32",
"kind": "patch",
"published_at": "2026-07-18T23:49:28Z"
},
{
"tag": "v0.51.31",
"kind": "patch",
"published_at": "2026-07-18T19:23:52Z"
},
{
"tag": "v0.51.30",
"kind": "patch",
"published_at": "2026-07-18T19:20:01Z"
},
{
"tag": "v0.51.29",
"kind": "patch",
"published_at": "2026-07-18T07:02:12Z"
},
{
"tag": "v0.51.28",
"kind": "patch",
"published_at": "2026-07-18T06:27:56Z"
},
{
"tag": "v0.51.27",
"kind": "patch",
"published_at": "2026-07-18T06:03:39Z"
},
{
"tag": "v0.51.26",
"kind": "patch",
"published_at": "2026-07-18T04:29:05Z"
},
{
"tag": "v0.51.25",
"kind": "patch",
"published_at": "2026-07-18T04:15:30Z"
},
{
"tag": "v0.51.24",
"kind": "patch",
"published_at": "2026-07-11T15:28:06Z"
},
{
"tag": "v0.51.23",
"kind": "patch",
"published_at": "2026-07-10T18:23:54Z"
},
{
"tag": "v0.51.22",
"kind": "patch",
"published_at": "2026-07-10T17:52:29Z"
},
{
"tag": "v0.51.21",
"kind": "patch",
"published_at": "2026-07-10T07:47:15Z"
},
{
"tag": "v0.51.20",
"kind": "patch",
"published_at": "2026-07-10T07:26:40Z"
},
{
"tag": "v0.51.19",
"kind": "patch",
"published_at": "2026-06-29T17:16:17Z"
},
{
"tag": "v0.51.18",
"kind": "patch",
"published_at": "2026-06-29T17:01:11Z"
},
{
"tag": "v0.51.17",
"kind": "patch",
"published_at": "2026-06-22T09:03:27Z"
},
{
"tag": "v0.51.16",
"kind": "patch",
"published_at": "2026-06-22T08:31:18Z"
},
{
"tag": "v0.51.15",
"kind": "patch",
"published_at": "2026-06-22T08:25:00Z"
},
{
"tag": "v0.51.14",
"kind": "patch",
"published_at": "2026-06-22T07:57:16Z"
},
{
"tag": "v0.51.13",
"kind": "patch",
"published_at": "2026-06-22T07:28:05Z"
},
{
"tag": "v0.51.12",
"kind": "patch",
"published_at": "2026-06-22T07:16:45Z"
},
{
"tag": "v0.51.11",
"kind": "patch",
"published_at": "2026-06-22T07:01:30Z"
},
{
"tag": "v0.51.10",
"kind": "patch",
"published_at": "2026-06-22T05:48:40Z"
},
{
"tag": "v0.51.9",
"kind": "patch",
"published_at": "2026-06-22T05:33:06Z"
},
{
"tag": "v0.51.8",
"kind": "patch",
"published_at": "2026-06-22T04:59:39Z"
},
{
"tag": "v0.51.7",
"kind": "patch",
"published_at": "2026-06-22T04:53:03Z"
},
{
"tag": "v0.51.6",
"kind": "patch",
"published_at": "2026-06-22T04:41:01Z"
},
{
"tag": "v0.51.5",
"kind": "patch",
"published_at": "2026-06-22T04:34:40Z"
},
{
"tag": "v0.51.4",
"kind": "patch",
"published_at": "2026-06-22T04:26:53Z"
},
{
"tag": "v0.51.3",
"kind": "patch",
"published_at": "2026-06-22T03:49:01Z"
},
{
"tag": "v0.50.69",
"kind": "patch",
"published_at": "2026-02-22T07:56:41Z"
},
{
"tag": "v0.50.68",
"kind": "patch",
"published_at": "2026-02-18T19:51:33Z"
},
{
"tag": "v0.50.67",
"kind": "patch",
"published_at": "2026-02-18T16:48:45Z"
},
{
"tag": "v0.50.66",
"kind": "patch",
"published_at": "2026-02-18T16:46:59Z"
},
{
"tag": "v0.50.65",
"kind": "patch",
"published_at": "2026-02-18T16:09:12Z"
},
{
"tag": "v0.50.64",
"kind": "patch",
"published_at": "2026-02-18T09:05:42Z"
},
{
"tag": "v0.50.63",
"kind": "patch",
"published_at": "2026-02-18T09:03:13Z"
},
{
"tag": "v0.50.62",
"kind": "patch",
"published_at": "2026-02-18T08:59:21Z"
},
{
"tag": "v0.50.61",
"kind": "patch",
"published_at": "2026-02-18T08:57:13Z"
},
{
"tag": "v0.50.60",
"kind": "patch",
"published_at": "2026-02-18T08:45:58Z"
},
{
"tag": "v0.50.59",
"kind": "patch",
"published_at": "2026-02-18T08:20:11Z"
},
{
"tag": "v0.50.58",
"kind": "patch",
"published_at": "2026-02-18T08:15:48Z"
},
{
"tag": "v0.50.57",
"kind": "patch",
"published_at": "2026-02-18T08:10:26Z"
},
{
"tag": "v0.50.55",
"kind": "patch",
"published_at": "2026-02-05T16:02:58Z"
},
{
"tag": "v0.50.54",
"kind": "patch",
"published_at": "2026-02-05T09:20:36Z"
},
{
"tag": "v0.50.53",
"kind": "patch",
"published_at": "2026-02-05T09:10:27Z"
},
{
"tag": "v0.50.49",
"kind": "patch",
"published_at": "2026-02-02T07:36:25Z"
},
{
"tag": "v0.50.46",
"kind": "patch",
"published_at": "2026-01-28T22:19:10Z"
},
{
"tag": "v0.50.44",
"kind": "patch",
"published_at": "2026-01-28T20:04:30Z"
},
{
"tag": "v0.50.43",
"kind": "patch",
"published_at": "2026-01-28T16:20:20Z"
},
{
"tag": "v0.50.42",
"kind": "patch",
"published_at": "2026-01-28T16:11:07Z"
},
{
"tag": "v0.50.41",
"kind": "patch",
"published_at": "2026-01-28T15:58:01Z"
},
{
"tag": "v0.50.40",
"kind": "patch",
"published_at": "2026-01-28T15:50:07Z"
},
{
"tag": "v0.50.39",
"kind": "patch",
"published_at": "2026-01-28T15:43:45Z"
},
{
"tag": "v0.50.38",
"kind": "patch",
"published_at": "2026-01-28T15:33:21Z"
},
{
"tag": "v0.50.36",
"kind": "patch",
"published_at": "2026-01-28T07:23:24Z"
},
{
"tag": "v0.50.33",
"kind": "patch",
"published_at": "2026-01-28T06:37:07Z"
},
{
"tag": "v0.50.32",
"kind": "patch",
"published_at": "2026-01-28T06:27:01Z"
},
{
"tag": "v0.50.31",
"kind": "patch",
"published_at": "2026-01-28T06:13:59Z"
},
{
"tag": "v0.50.30",
"kind": "patch",
"published_at": "2026-01-28T06:01:12Z"
},
{
"tag": "v0.50.29",
"kind": "patch",
"published_at": "2026-01-28T05:11:35Z"
},
{
"tag": "v0.50.28",
"kind": "patch",
"published_at": "2026-01-27T23:17:00Z"
},
{
"tag": "v0.50.27",
"kind": "patch",
"published_at": "2026-01-27T17:44:43Z"
},
{
"tag": "v0.50.26",
"kind": "patch",
"published_at": "2026-01-27T17:38:33Z"
},
{
"tag": "v0.50.25",
"kind": "patch",
"published_at": "2026-01-27T17:37:39Z"
},
{
"tag": "v0.50.24",
"kind": "patch",
"published_at": "2026-01-27T17:31:39Z"
},
{
"tag": "v0.50.23",
"kind": "patch",
"published_at": "2026-01-27T17:28:27Z"
},
{
"tag": "v0.50.22",
"kind": "patch",
"published_at": "2026-01-27T17:23:33Z"
},
{
"tag": "v0.50.21",
"kind": "patch",
"published_at": "2026-01-27T16:33:13Z"
},
{
"tag": "v0.50.20",
"kind": "patch",
"published_at": "2026-01-27T16:21:14Z"
},
{
"tag": "v0.50.19",
"kind": "patch",
"published_at": "2026-01-27T15:55:37Z"
},
{
"tag": "v0.50.18",
"kind": "patch",
"published_at": "2026-01-27T15:48:58Z"
},
{
"tag": "v0.50.17",
"kind": "patch",
"published_at": "2026-01-27T09:23:13Z"
},
{
"tag": "v0.50.16",
"kind": "patch",
"published_at": "2026-01-27T09:14:08Z"
},
{
"tag": "v0.50.15",
"kind": "patch",
"published_at": "2026-01-27T09:03:13Z"
},
{
"tag": "v0.50.14",
"kind": "patch",
"published_at": "2026-01-27T08:55:29Z"
},
{
"tag": "v0.50.13",
"kind": "patch",
"published_at": "2026-01-27T08:50:15Z"
},
{
"tag": "v0.50.12",
"kind": "patch",
"published_at": "2026-01-27T08:28:30Z"
},
{
"tag": "v0.50.11",
"kind": "patch",
"published_at": "2026-01-27T08:22:22Z"
},
{
"tag": "v0.50.10",
"kind": "patch",
"published_at": "2026-01-27T06:42:13Z"
},
{
"tag": "v0.50.9",
"kind": "patch",
"published_at": "2026-01-27T06:34:44Z"
},
{
"tag": "v0.50.8",
"kind": "patch",
"published_at": "2026-01-27T06:24:09Z"
},
{
"tag": "v0.50.7",
"kind": "patch",
"published_at": "2026-01-27T06:21:12Z"
},
{
"tag": "v0.50.6",
"kind": "patch",
"published_at": "2026-01-27T06:08:01Z"
},
{
"tag": "v0.50.5",
"kind": "patch",
"published_at": "2026-01-27T05:25:15Z"
},
{
"tag": "v0.50.4",
"kind": "patch",
"published_at": "2026-01-27T04:46:19Z"
},
{
"tag": "v0.50.3",
"kind": "patch",
"published_at": "2026-01-24T07:15:50Z"
},
{
"tag": "v0.50.2",
"kind": "patch",
"published_at": "2026-01-24T06:32:23Z"
},
{
"tag": "v0.31.16",
"kind": "patch",
"published_at": "2026-01-24T06:27:16Z"
},
{
"tag": "v0.31.15",
"kind": "patch",
"published_at": "2026-01-24T06:16:45Z"
},
{
"tag": "v0.31.14",
"kind": "patch",
"published_at": "2026-01-24T05:23:40Z"
},
{
"tag": "v0.50.1",
"kind": "patch",
"published_at": "2026-01-24T05:47:04Z"
},
{
"tag": "v0.31.13",
"kind": "patch",
"published_at": "2026-01-24T05:10:04Z"
}
],
"recent_commits": [
{
"oid": "a2ea660729805c29f23aae578a2bcc50d022edc6",
"body": null,
"is_bot": true,
"headline": "chore: release v0.51.39 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-19T08:15:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8490369b31ea1f563d68fc07e9a52cf844f54dba",
"body": "apt-get during the combined sync script timed out (exit null → 502).\nRun toolchain setup as its own exec with a dedicated budget, raise the\nsandbox/sync maxDuration, and clarify timeout error labels.",
"is_bot": false,
"headline": "fix: isolate sandbox native toolchain install (#219)",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-07-19T08:11:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a3d9214bf87f6dbc9bbaaaeeabd3bb2074b25a38",
"body": "Hide tool rows from the left-panel chat feed. Keep assistant text-delta,\nactive-task status lines, and high-level status/errors so the UI matches\nTUI-style Claude notes instead of a tool dump.",
"is_bot": false,
"headline": "fix: show Claude narrative only in build chat (#218)",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-07-19T08:08:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f396fb9a507f380cc267142e156f77d7841b4e56",
"body": null,
"is_bot": true,
"headline": "chore: release v0.51.38 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-19T07:58:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f774fc156636309fe0dd853039c6084d71d9a4f1",
"body": "Install build-essential/python3 for node-gyp modules like better-sqlite3,\nand stream assistant text-delta into a chat-style activity feed instead of\nonly showing tool rows.",
"is_bot": false,
"headline": "fix: sandbox native builds and Claude chat feed (#217)",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-07-19T07:55:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "05bc79d657f53865a6b5851b6268a4ff642d2678",
"body": null,
"is_bot": true,
"headline": "chore: release v0.51.37 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-19T07:40:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4768071e85de4aa2815d0e9545f8fa708e21cb3d",
"body": "…tall\n\nfix: activity feed + sandbox install failures",
"is_bot": false,
"headline": "Merge pull request #216 from codyde/fix/activity-feed-and-sandbox-ins…",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-07-19T07:37:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1a6007527b452df10a3f162453a95c884c062b6c",
"body": "Wire BuildProgress activity into the left panel without TodoWrite gating,\nparse stringified TodoWrite payloads, keep Claude Code tool preset so\nTodoWrite stays enabled, strip pnpm-only npmrc keys in sandbox installs,\nand mark generation sessions completed on build-completed.",
"is_bot": false,
"headline": "fix: restore live activity feed and sandbox npm installs",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-07-19T07:37:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "934682e863b35d4e994d6fe08a3cbb45600af263",
"body": null,
"is_bot": true,
"headline": "chore: release v0.51.36 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-19T07:15:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6237b0fcba30f8170b90096c220943fff0973b1c",
"body": "fix: sandbox tar sync + live activity feed",
"is_bot": false,
"headline": "Merge pull request #215 from codyde/fix/sandbox-tar-and-activity-feed",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-07-19T07:11:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d711b0054a0c594a28bff7effd9143f1d5e34950",
"body": "Retry tar without --no-xattrs in both argv and TAR_OPTIONS, and retain\nactivity-status (including preview-failed) for reconnect recovery.",
"is_bot": false,
"headline": "fix: address Sentry review on sandbox tar retry and activity buffer",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-07-19T07:11:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e3a9787bba03227786b34249a1dbf761ba2133a",
"body": "macOS xattrs no longer break sandbox extract, preview failures stay\nseparate from build failure, and the left panel scrolls tool/status\nactivity instead of depending on TodoWrite checklists.",
"is_bot": false,
"headline": "fix: harden sandbox tar sync and show live activity feed",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-07-19T07:05:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "96e982c49ba1805472458d349ceff616021d77d0",
"body": null,
"is_bot": true,
"headline": "chore: release v0.51.35 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-19T02:03:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b5d1dbad645e0ef991121de081c2f90c8db4ea86",
"body": "perf: cut initial-build agent loop latency",
"is_bot": false,
"headline": "Merge pull request #214 from codyde/perf/build-latency-v2",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-07-19T01:59:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "876ba21b8cd5ab4e8670522cda5d3c3a1c166932",
"body": "Stop wasting multi-minute polish tails on simple apps:\n- early-stop after 14 Write/Edit calls on initial-build\n- early-stop after one successful build/typecheck when files landed\n- disable WebSearch/WebFetch on initial-build\n- drop initial maxTurns 60 -> 32 and tighten other op budgets\n- rewrite prompts to one-shot verify and ship minimum coherent app",
"is_bot": false,
"headline": "perf: cut initial-build agent loop with write budget and tighter tools",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-07-19T01:59:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aeaff51619269063127e5a36a68ad17e525769bd",
"body": null,
"is_bot": true,
"headline": "chore: release v0.51.34 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-19T00:26:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "119a535afb5206fa2b7092b7ab3fee15540cb5a1",
"body": "fix: soft-complete max-turns builds with work landed",
"is_bot": false,
"headline": "Merge pull request #213 from codyde/fix/max-turns-soft-complete",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-07-19T00:23:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "21e2747deebbcd3c10ed9ebfcbc32d5be541be58",
"body": "Raise initial-build maxTurns to 60 and treat max-turns exits as\nsuccessful when Write/Edit work already landed, so large docs builds\ndo not hard-fail after a usable preview. Failed-path metrics now keep\nmodifiedFileCount and completedTodoCount.",
"is_bot": false,
"headline": "fix: soft-complete builds that hit max turns with work landed",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-07-19T00:22:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a99444cbef7cab67f4774c0ea99cfc0c4f3c54ad",
"body": null,
"is_bot": true,
"headline": "chore: release v0.51.33 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-18T23:56:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0dbc8d435a62f63ea4ca574a9d243406fc83dc79",
"body": "fix: treat early-stop aborts as successful builds",
"is_bot": false,
"headline": "Merge pull request #212 from codyde/fix/early-stop-not-failure",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-07-18T23:52:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "27920b40865d8950978d7e174d5bf20ca20bba4c",
"body": "Aborting the Claude stream after completed todos was bubbling as build-failed. Swallow abort in the SDK/stream layers and complete the success path instead.",
"is_bot": false,
"headline": "fix: treat early-stop aborts as successful builds",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-07-18T23:52:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "afbadfd4d22deae19c22a6149f067b372a6d4312",
"body": null,
"is_bot": true,
"headline": "chore: release v0.51.32 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-18T23:49:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "00260855a5ea4aeca54a8b3aee932f2e48311cf3",
"body": "perf: early-stop Claude builds when todos complete",
"is_bot": false,
"headline": "Merge pull request #211 from codyde/perf/claude-early-stop-todos",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-07-18T23:45:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a83a430d17ef9fdfec8b301ce066dcde3afa7404",
"body": "Parse TodoWrite more reliably for metrics, soft-abort once implementation lands and all todos are completed, and push first-action planning in prompts.",
"is_bot": false,
"headline": "perf: early-stop Claude builds when todos complete",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-07-18T23:45:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2a299c624272299c117a2c3495d2462bcea09cd1",
"body": null,
"is_bot": true,
"headline": "chore: release v0.51.31 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-18T19:23:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2eb4fba9ebc4b50a09a45ac50c660fa1b9a5cc43",
"body": "fix: restore TodoWrite and web tools for Claude builds",
"is_bot": false,
"headline": "Merge pull request #210 from codyde/fix/restore-web-todowrite-tools",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-07-18T19:20:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5d7dc5b79273a3d307b4fc5349c92e338a928b57",
"body": "Keep Task/MCP blocked for latency, but allow TodoWrite for native progress tracking and WebSearch/WebFetch for docs context.",
"is_bot": false,
"headline": "fix: restore TodoWrite and web tools for Claude builds",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-07-18T19:20:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "819ebbd2810b0f11e02fdeb7c78dad7fe80fdd6d",
"body": null,
"is_bot": true,
"headline": "chore: release v0.51.30 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-18T19:19:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60e50120c0d4035c868d97277340d3bfc7d6e107",
"body": "perf: cut Claude build turns and tool surface",
"is_bot": false,
"headline": "Merge pull request #209 from codyde/perf/claude-build-latency",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-07-18T19:16:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3e9198bd37ceecf20a0ce67a904035f63945f2df",
"body": "Cap agent turns by operation type, allow only core coding tools, and tighten prompts so builds stop sooner instead of burning minutes on exploratory model loops.",
"is_bot": false,
"headline": "perf: cut Claude build turns and tool surface",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-07-18T19:16:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1b810985de42071221ebcfedff9c7bb1d604f5a0",
"body": null,
"is_bot": true,
"headline": "chore: release v0.51.29 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-18T07:02:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d199b12bf20fc8a8dd72e536cf33a8c7aeb1455c",
"body": "feat: persist build metrics for latency inspection",
"is_bot": false,
"headline": "Merge pull request #208 from codyde/feat/build-metrics-persistence",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-07-18T06:58:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb27e3e6f092a630c3074ea42375141dd09de496",
"body": "Store runner build-metrics events in Postgres with denormalized timing columns and an authenticated inspect API so we can analyze real build phase breakdowns.",
"is_bot": false,
"headline": "feat: persist build metrics for latency inspection",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-07-18T06:58:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "566afc76ff7583a89441f686a420a1b34c313512",
"body": null,
"is_bot": true,
"headline": "chore: release v0.51.28 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-18T06:27:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2dbe8540df7faa77fbc706c9680dad35f58f5860",
"body": "…-url\n\nfix: remove unused editor/terminal and center preview URL",
"is_bot": false,
"headline": "Merge pull request #207 from codyde/fix/remove-editor-terminal-center…",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-07-18T06:24:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "490a35d44998a603b149110f966c439113df3041",
"body": "Drop the non-functional in-app code editor and terminal tabs, remove Monaco, and keep the preview URL bar centered with a balanced three-column chrome layout so sandbox tunnel controls no longer shift it right.",
"is_bot": false,
"headline": "fix: remove unused editor/terminal and center preview URL",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-07-18T06:24:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f03ecf51d0fcdb2ba1d4333d5b44316c3803475",
"body": null,
"is_bot": true,
"headline": "chore: release v0.51.27 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-18T06:03:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "29a1611378668e46d39a37c4d4e6ea7a2cc56e5a",
"body": "feat: upgrade default Claude Sonnet to Sonnet 5",
"is_bot": false,
"headline": "Merge pull request #206 from codyde/feat/claude-sonnet-5",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-07-18T06:00:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "abd93f8bf91ccd9b2d47a50e87b7a6c988ca1cc1",
"body": "Switch the Sonnet option and default from claude-sonnet-4-6 to the Anthropic API ID claude-sonnet-5 across agent types, tags, validation, runner, and OpenCode defaults. Map saved Sonnet 4.6 preferences to Sonnet 5.",
"is_bot": false,
"headline": "feat: upgrade default Claude Sonnet to Sonnet 5",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-07-18T05:59:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c92d085c81ff88a05ce838f122550eb4f4d84a2",
"body": null,
"is_bot": true,
"headline": "chore: release v0.51.26 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-18T04:28:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ff96c6302bfc99c260b220e7275d53418bcee82",
"body": "feat: make sandbox the default execution mode",
"is_bot": false,
"headline": "Merge pull request #205 from codyde/feat/sandbox-default-execution",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-07-18T04:25:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8ca1a26a0d11a9054d164c5b6eaf808970cf46bb",
"body": "Default new projects to sandbox across UI, API, and schema. Keep the Local/Sandbox toggle, but stop project seeding from overwriting the user preference so Local no longer sticks after opening an old project.",
"is_bot": false,
"headline": "feat: make sandbox the default execution mode",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-07-18T04:25:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f3a12032581c6d245113aa998348b930938f051b",
"body": null,
"is_bot": true,
"headline": "chore: release v0.51.25 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-18T04:15:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c8026cfe45ffad694b2fb47fc5cd8c6d80f0a79b",
"body": "fix: show runner offline notice only when signed in",
"is_bot": false,
"headline": "Merge pull request #204 from codyde/fix/runner-offline-toast",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-07-18T04:11:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "07e52ce662d4f7d19d48d5a57027d10b8e05ea07",
"body": "Replace the top banner with a dismissible bottom-right toast and hide it for anonymous visitors so hatchway.sh no longer warns guests that the local runner is offline.",
"is_bot": false,
"headline": "fix: show runner offline notice only when signed in",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-07-18T04:11:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3abfad3aa984d2318bd2115b51c880cbd2698ed6",
"body": null,
"is_bot": true,
"headline": "chore: release v0.51.24 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-11T15:27:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7968b1903005d5eeeb58e857b52847068870a53f",
"body": "fix: harden workspace UX and reliability",
"is_bot": false,
"headline": "Merge pull request #203 from codyde/fix/workspace-ux-reliability",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-07-11T15:24:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "873a72c71e1fade67fd8e8d01e091dfa2070af22",
"body": null,
"is_bot": false,
"headline": "fix: harden workspace UX and reliability",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-07-11T15:20:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7b925521c05e9b3d2346c7d2b1bce9f541a52bb0",
"body": null,
"is_bot": true,
"headline": "chore: release v0.51.23 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-10T18:23:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d98ff70bf93254b2a3b1a7f1332d57ce36bebdb3",
"body": "fix: open preview when provisioning completes",
"is_bot": false,
"headline": "Merge pull request #202 from codyde/fix/preview-ready-transition",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-07-10T18:20:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "222070904d853b88192d32b3837fb53b849a5479",
"body": "Unify SSE and query project state so a ready tunnel URL replaces the loading game with the preview. Preserve EventSource reconnection, add active-build polling fallback, and cover the cache transition with regression tests.",
"is_bot": false,
"headline": "fix: open preview when provisioning completes",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-07-10T18:19:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a731608fce40e65b3a37fc4306cf8c460e00ed91",
"body": null,
"is_bot": true,
"headline": "chore: release v0.51.22 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-10T17:52:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3ec9a371c07f2f4cc6ab91e0945014264c45efbb",
"body": "perf: reduce project build startup latency",
"is_bot": false,
"headline": "Merge pull request #201 from codyde/perf/build-latency-foundations",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-07-10T17:49:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4054a4e0cf8d2088d8561914327a29b3031d1cfc",
"body": "Add end-to-end build timing and install metrics, cached project manifests, dependency-state reuse, and compact agent startup guidance. Remove the unused platform plugin startup path and Sentry branding/configuration.",
"is_bot": false,
"headline": "perf: reduce project build startup latency",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-07-10T17:29:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0551b18f138dbdc4479acaee1e415dd51d70d3e1",
"body": null,
"is_bot": true,
"headline": "chore: release v0.51.21 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-10T07:47:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de6becb13cb454a86fb253dcd10a2da79a05fc0a",
"body": "feat: dual loading mini-games and remove Astro option",
"is_bot": false,
"headline": "Merge pull request #200 from codyde/feat/loading-games-remove-astro",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-07-10T07:43:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "41001440c7f15647f67e696b97ed59a535a4491f",
"body": "Expand Meteor Run with lives, shields, gun power-ups, and difficulty ramp; add Blade Rush platform fighter with game switcher; fully remove Astro as a selectable framework/template/prompt path.",
"is_bot": false,
"headline": "feat: dual loading mini-games and remove Astro option",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-07-10T07:43:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "393ce7cf36383e32842bf00d331a8775f0f2ff86",
"body": null,
"is_bot": true,
"headline": "chore: release v0.51.20 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-10T07:26:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61365704b2a74143720fdb1da7f8aa93f28decf7",
"body": "feat: starfox loading game, remove integration UI and Cloudflare tunnels",
"is_bot": false,
"headline": "Merge pull request #199 from codyde/feat/starfox-loading-and-cleanup",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-07-10T07:23:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "80aeb4c882457f3133efd3e04e05d4d93fdce5b1",
"body": "…tunnels\n\nReplace the build loading skeleton with a playable top-down mini-game, remove NeonDB/GitHub/Railway project integration UI, and fully remove Cloudflare tunnel plumbing while keeping railgate sandbox previews.",
"is_bot": false,
"headline": "feat: starfox build loading game, drop integration UI and cloudflare …",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-07-10T07:22:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "68c0a0e26385c0b1bb9c45e571fdbb7418a6b585",
"body": null,
"is_bot": true,
"headline": "chore: release v0.51.19 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-29T17:16:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3c08b5c4e15eaecb90c9263a37d878e96ee5bd8c",
"body": "Change the UI's DEFAULT_EXECUTION_MODE from local to sandbox so new\nusers and projects run in an ephemeral Railway sandbox by default.\nServer-side fallbacks remain local to preserve existing projects.",
"is_bot": false,
"headline": "feat(execution): default new projects to sandbox mode",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-06-29T17:12:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "59e16708c91157a9a5d0a65df292b02508daa839",
"body": null,
"is_bot": true,
"headline": "chore: release v0.51.18 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-29T17:01:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "93e5cf4f71ef2cd1783766d87f917d2f1681d92d",
"body": "Make 'npx @hatchway/cli runner' the primary onboarding path with a\ntabbed toggle to flip to local install. Update connect step OAuth\ncommand to match the npx-first approach.",
"is_bot": false,
"headline": "feat(onboarding): lead with npx remote runner, add local mode tab",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-06-29T16:57:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ad0bfbb41c7d97b518335b77493f73e0c84413d",
"body": null,
"is_bot": true,
"headline": "chore: release v0.51.17 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-22T09:03:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "354c8de8ec9b0a7dd489690dda04439402b6d89f",
"body": "The sandbox preview is a synced COPY served behind a STABLE railgate URL, so\nafter a follow-up edit the dev server restarts with new code but the iframe\nhas no reason to reload — the user had to manually refresh.\n\nThe existing auto-refresh fired on BUILD completion, which for sandbox is ~5s\nbefore t\n[…]\non-proxy \"Starting preview…\" splash auto-refreshes until ready.\n\nFrontend of the hatchway app (server-side deploy); no CLI change.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(sandbox): auto-reload preview after a re-sync completes",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-06-22T08:59:46Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "00d1e48bd84849ecb9c552fc0c704bd02983af5b",
"body": null,
"is_bot": true,
"headline": "chore: release v0.51.16 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-22T08:31:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c07fe33217f8fd08b619fa1225949dc8b07f03e3",
"body": "Each sandbox preview runs on its own isolated host, so dev-server ports can\nnever collide across projects. The old per-host port allocation/reallocation\n(reserveOrReallocatePort) and the agent guidance to \"honor the PORT env\"\ncreated needless port drift — and Vite/Astro ignore PORT anyway, so a\nreal\n[…]\nand ships with the next runner release, but isn't required — the platform\nforces the port regardless of what the agent configures.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(sandbox): use a fixed dev-server port, skip port allocation",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-06-22T08:27:48Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "70e6e094636edb0ab1d65e0076ddcc707b94ffc9",
"body": null,
"is_bot": true,
"headline": "chore: release v0.51.15 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-22T08:24:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a419c868b0b99c152228103dd66a6a435404efcf",
"body": "Three sandbox dev-server issues surfaced by live testing:\n\n1. \"inject-proxy upstream error\" on load: the readiness gate only waits for\n the dev port to OPEN, but Vite/Astro open the port then compile for several\n seconds. Requests in that window hit a not-ready server. The injection proxy\n now\n[…]\nt\n failure diagnosable instead of an unexplained hang.\n\nBackend-only (proxy script is shipped at runtime); no CLI/runner change.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(sandbox): dev-server readiness, port binding, and failure visibility",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-06-22T08:21:30Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7c7f4456e13c661fd984a4f1424beb339644387c",
"body": null,
"is_bot": true,
"headline": "chore: release v0.51.14 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-22T07:57:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c6882641783a064fa6dc600e54551925710e2d53",
"body": "…grade)\n\nRoot cause of \"follow-up didn't sync / restart shows localhost\": the build\nroute let body.executionMode override the persisted value on EVERY build. The\nclient's execution-mode context is global and can carry a stale/default\n'local', so a follow-up (enhancement / focused-edit) build POSTed\n\n[…]\nhat\" behavior server-side.\n\nNote: projects already flipped to 'local' by this bug stay local — re-test\nwith a new sandbox project.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(sandbox): lock executionMode after initial build (stop local down…",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-06-22T07:53:46Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "8afde2ca20457934b9171e1fca2ead9df2121eef",
"body": null,
"is_bot": true,
"headline": "chore: release v0.51.13 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-22T07:27:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc93209fe182edd449b9a540750b4bf1e252a5c6",
"body": "A sandbox project runs entirely in the Railway sandbox and is only reachable\nvia the railgate tunnel — there is no local dev server. But the preview URL\nbar, copy button, and \"open in new tab\" all fell back to (or hardcoded)\nhttp://localhost:<port> whenever tunnelUrl was momentarily null — which is\n\n[…]\nhe\nrunner re-syncs to the sandbox on restart); this stops the UI from showing a\nbogus localhost address during/after that re-sync.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(ui): never show/open localhost URL for sandbox previews",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-06-22T07:24:34Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6fd78e48b32f1afbfad82d3ac1d06e973aec3820",
"body": null,
"is_bot": true,
"headline": "chore: release v0.51.12 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-22T07:16:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "57a33d66fc0e29264c47fe8ed09bdcff80c48378",
"body": "A follow-up edit in sandbox mode \"completed\" but the preview never updated:\nthe post-build auto-start was gated on !serverAlreadyRunning (correct for\nlocal mode, where HMR sees local edits) and skipped on follow-ups. But the\nsandbox dev server runs a SYNCED COPY of the workspace, so HMR can't see th\n[…]\nads the new code behind it (no kill-server). Proxy/railgate are\n (re)started only when not already up (first run / post-restore).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(sandbox): re-sync to sandbox on follow-up builds, keep railgate live",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-06-22T07:13:07Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3d7adcb009cf76f2d6f70e38ae7294034fe4ac3a",
"body": null,
"is_bot": true,
"headline": "chore: release v0.51.11 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-22T07:01:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8b98ef285433704674746dd1db277b515deaee32",
"body": "The \"select element\" tool needs its script present in the previewed page.\nLocal-runner previews get it because the runner's tunnel points at an\ninjection proxy (tunnel → injection-proxy → dev server). Sandbox previews\npointed railgate straight at the dev server, so railgate served raw HTML and\nthe p\n[…]\nan the app.\n\nServer-side only; the proxy is written at runtime via files.write, so no\ncheckpoint rebake and no CLI publish needed.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(sandbox): inject element-selection script into sandbox previews",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-06-22T06:57:57Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "92511f1c4ff6aae71b961b2c82a386b77d664f3c",
"body": null,
"is_bot": true,
"headline": "chore: release v0.51.10 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-22T05:48:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7163c737295af1bac269985714655201286cf93c",
"body": "1. Remove the Local/Sandbox toggle from the in-chat input. The selector now\n only appears on the landing input where a new project's path is chosen;\n once a chat is underway the mode is fixed for its duration, so users can't\n switch mid-build.\n\n2. The manual start route omitted executionMode f\n[…]\name back on localhost when stopped and restarted. Pass the\n project's saved executionMode so it re-syncs to its Railway sandbox.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: lock execution mode per-chat; restart sandbox projects as sandbox",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-06-22T05:45:15Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d0233849718806335fc8a1247d5db30bba432853",
"body": null,
"is_bot": true,
"headline": "chore: release v0.51.9 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-22T05:33:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b04b1f005af41677dcb90b0e49c8ebc0cd9d445f",
"body": "Two changes targeting long mid-build stalls:\n\n1. mcpServers: {} — builds ran with settingSources ['user','project'] and no\n explicit mcpServers, so every build inherited the user's global MCP fleet\n from ~/.claude.json (e.g. a `railway mcp` stdio server). A build never\n needs those; they add s\n[…]\nfaced, so a multi-minute model stall (rate-limit backoff, stream retry)\n appeared as an unexplained silent gap in the build log.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(runner): isolate builds from user MCP servers; surface SDK stalls",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-06-22T05:29:43Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c2dd3ee5cec5c68de6cd6862737ec9ee257b9c82",
"body": null,
"is_bot": true,
"headline": "chore: release v0.51.8 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-22T04:59:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b0fc40cbcce6de5a35f10132ab3ff501f28d5fa",
"body": "The per-project disconnect banner was gated only on event-driven signals\n(currentProject.runnerConnected + runnerActive). After the status-stream\ndropped its periodic poll, the only thing that flips runnerConnected back\nto true is the server's notifyRunnerConnected emit — so a missed or raced\nreconn\n[…]\nine signal, and\nscoped to the user's runners), so it reconciles within 10s of any\nreconnect regardless of whether the event fired.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(ui): self-heal stuck \"runner disconnected\" banner on reconnect",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-06-22T04:56:13Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3be4ab79f58d1b6a5745ff23762bb6f265878b30",
"body": null,
"is_bot": true,
"headline": "chore: release v0.51.7 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-22T04:52:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bec8d46dd538bdfb3f6db448cab7266271c931d0",
"body": "The Sentry SDK was already removed; this strips the leftover trace-context\nplumbing that no longer does anything:\n- _sentry trace/baggage fields on runner command/event types (agent-core)\n- _sentry forwarding in the WebSocket broadcast batches (always undefined)\n- sentryTrace state/extraction/return\n[…]\nd instrument.js --import in the disabled packages/runner bin\n- stale \"GitHub/Sentry\" OAuth help text (Sentry login was deprecated)\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor: remove dead Sentry distributed-tracing plumbing",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-06-22T04:49:28Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d79b9493baef2835726ee29f7c7368e62fd1aec1",
"body": null,
"is_bot": true,
"headline": "chore: release v0.51.6 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-22T04:40:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3324e3ccce674fe422f14b62c97b05498be7f675",
"body": "Deprecating the Sentry OAuth sign-in method. Removes the Sentry provider\nfrom the better-auth genericOAuth config, the Sentry button/handler/state\nfrom the login modal and CLI auth page, the onboarding copy reference, and\nthe SENTRY_OAUTH_CLIENT_ID/SECRET env vars. GitHub OAuth and email/password\nremain.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(auth): remove Sentry login, keep GitHub + email",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-06-22T04:37:24Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a8a7bc1930b1dc02be31323dfe8c4091f4f21623",
"body": null,
"is_bot": true,
"headline": "chore: release v0.51.5 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-22T04:34:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8b28984a35b5e235c2d69160b15d49ba95b93991",
"body": "Permanent fix for the recurring dirty-package.json / lockfile-desync issue:\nprepare-release.js mutated the tracked apps/runner/package.json (stripping\nrollup-bundled deps) and had to be undone with git checkout — running it locally\nleft the tree dirty and once desynced the lockfile.\n\nInstead, move t\n[…]\no 'pnpm publish' (rewrites workspace:* refs). Verified via pnpm\npack: published dependencies contain none of the bundled packages.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(release): make package.json publish-ready, eliminate the strip step",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-06-22T04:31:04Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c75367c1a19f4c75366847d0175844c1077d1976",
"body": null,
"is_bot": true,
"headline": "chore: release v0.51.4 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-22T04:26:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "787e772fd7dc37466384d5051ac0a9a4508291b8",
"body": "The @anthropic-ai/sdk removal regenerated the lockfile while apps/runner's\npackage.json was transiently in its publish-stripped state, leaving the lock out\nof sync (ERR_PNPM_OUTDATED_LOCKFILE on the frozen-lockfile install). Regenerate.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: sync pnpm-lock with apps/runner package.json",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-06-22T04:23:05Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "caaa63096c95b2d04f30c2670b04c345a65ece80",
"body": "The pivot to local-build/remote-run left obsolete code from the original\nrunner-in-sandbox design. Remove it:\n- Task*->TodoWrite translation in message-transformer (the marker skill is the\n working path; this was a redundant safety net + flicker risk)\n- server.ts sandbox-runner disconnect handler (\n[…]\nUNNER_WS_URL + server-side ANTHROPIC_API_KEY + the unused\n @anthropic-ai/sdk dep; refresh .env.example to match the current model\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor(sandbox): remove dead runner-in-sandbox-era code",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-06-22T04:20:56Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "aec0a669ffd5eda9590ca2ad0d48affcca7932bb",
"body": null,
"is_bot": true,
"headline": "chore: release v0.51.3 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-22T03:48:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b6668a8bfb54533a7bf11098d9d030cb535ab6f0",
"body": "The agent SDK keeps moving which task TOOL is available (TodoWrite deferred/\nunreachable; TaskCreate/Update built-ins), breaking the checklist each rev.\nRewrite the todo-workflow skill to emit a TODO_WRITE: {...} text marker (which\nthe runner already parses into TodoWrite events the UI renders) and to NOT use\nany task tool. Tool-independent — the agent just writes text — so it survives\nSDK tool churn.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(skill): drive the checklist via TODO_WRITE text marker, not tools",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-06-22T03:45:33Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "7039d6fbfcd1c0a52f805d943427fa8f9b5c1679",
"body": null,
"is_bot": true,
"headline": "chore: release v0.51.2 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-22T03:32:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de1977d1a5ada2b5a69223e35700eb40a94cf85f",
"body": "…events\n\nTodoWrite is deferred in the new claude_code preset and the agent can't reliably\nload it (3 failed ToolSearches -> no checklist, stuck 'analyzing'); the working\ntask tools are the built-in TaskCreate/TaskUpdate. Reverted the disallow/allow\nattempts and instead translate in the message trans\n[…]\nkCreate\nsubject + id (from its result), apply TaskUpdate status by id, and emit synthetic\nTodoWrite events the UI already renders.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(runner): translate built-in Task* tools into TodoWrite checklist …",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-06-22T03:28:51Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b8ffd3729c512c036598410c766bd52453acdebd",
"body": null,
"is_bot": true,
"headline": "chore: release v0.51.1 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-22T03:14:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "209fec4ce0353b04f4deb867ffc2a4e0d2982e60",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: rev to 0.51.0",
"author_name": "Cody De Arkland",
"author_login": "codyde",
"committed_at": "2026-06-22T03:10:56Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "752bbe4feef83c5a82a540d9e306b5a098aeac63",
"body": null,
"is_bot": true,
"headline": "chore: release v0.50.86 [skip ci]",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-22T01:39:05Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 100,
"commits_last_year": 1364,
"latest_release_at": "2026-07-19T08:15:07Z",
"latest_release_tag": "v0.51.39",
"releases_from_tags": false,
"days_since_last_push": 5,
"active_weeks_last_year": 26,
"days_since_latest_release": 5,
"mean_days_between_releases": 0.1
},
"community": {
"has_readme": true,
"has_license": false,
"has_description": true,
"has_contributing": false,
"health_percentage": 28,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "@hatchway/cli",
"exists": true,
"license": null,
"keywords": [
"hatchway",
"ai",
"claude",
"code-generation",
"app-builder",
"cli",
"runner",
"vibe-coding"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@hatchway/cli",
"is_deprecated": false,
"latest_version": "0.51.39",
"repository_url": "https://github.com/codyde/hatchway",
"versions_count": 65,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 4538,
"first_published_at": "2026-02-05T09:10:25.737000Z",
"latest_published_at": "2026-07-19T08:15:06.529000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
}
]
},
"popularity": {
"forks": 2,
"stars": 3,
"watchers": 1,
"fork_history": {
"days": [
{
"date": "2025-10-07",
"count": 1
},
{
"date": "2026-02-09",
"count": 1
}
],
"complete": true,
"collected": 2,
"total_forks": 2
},
"star_history": null,
"open_issues_and_prs": 5
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"notebooks"
],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": true,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"apps/hatchway/tsconfig.json",
"apps/opencode-service/tsconfig.json",
"apps/runner/tsconfig.json",
"packages/agent-core/tsconfig.json",
"packages/opencode-client/tsconfig.json",
"packages/runner/tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 165084,
"source_files_sampled": 380,
"oversized_source_files": 2,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 189,
"malicious_count": 0,
"assessed_package": "npm:@hatchway/cli@0.51.39",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "better-auth",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.6.19"
},
{
"name": "@hatchway/agent-core",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@hatchway/opencode-client",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@modelcontextprotocol/sdk",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "^1.29.0"
},
{
"name": "@radix-ui/react-alert-dialog",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "^1.1.15"
},
{
"name": "@radix-ui/react-avatar",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "^1.1.10"
},
{
"name": "@radix-ui/react-checkbox",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "^1.3.3"
},
{
"name": "@radix-ui/react-collapsible",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "^1.1.12"
},
{
"name": "@radix-ui/react-context-menu",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "^2.2.16"
},
{
"name": "@radix-ui/react-dialog",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "^1.1.15"
},
{
"name": "@radix-ui/react-dropdown-menu",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "^2.1.16"
},
{
"name": "@radix-ui/react-hover-card",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "^1.1.15"
},
{
"name": "@radix-ui/react-popover",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "^1.1.15"
},
{
"name": "@radix-ui/react-separator",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "^1.1.7"
},
{
"name": "@radix-ui/react-slot",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "^1.2.3"
},
{
"name": "@radix-ui/react-switch",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "^1.2.6"
},
{
"name": "@radix-ui/react-tooltip",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "^1.2.8"
},
{
"name": "@radix-ui/react-visually-hidden",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "^1.2.3"
},
{
"name": "@tanstack/react-query",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "^5.90.6"
},
{
"name": "@tanstack/react-query-devtools",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "^5.90.2"
},
{
"name": "ansi-to-html",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "^0.7.2"
},
{
"name": "better-auth",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "^1.6.19"
},
{
"name": "class-variance-authority",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "^0.7.1"
},
{
"name": "clsx",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "^2.1.1"
},
{
"name": "cmdk",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "^1.1.1"
},
{
"name": "dotenv",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "^16.4.5"
},
{
"name": "drizzle-orm",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "^0.45.2"
},
{
"name": "framer-motion",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "^12.23.22"
},
{
"name": "highlight.js",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "^11.9.0"
},
{
"name": "lucide-react",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "^0.544.0"
},
{
"name": "mcp-handler",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "^1.0.3"
},
{
"name": "next",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "16.2.9"
},
{
"name": "pg",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "^8.13.1"
},
{
"name": "railway",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "^3.3.2"
},
{
"name": "react",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "19.2.7"
},
{
"name": "react-dom",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "19.2.7"
},
{
"name": "react-markdown",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "^10.1.0"
},
{
"name": "rehype-highlight",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "^7.0.2"
},
{
"name": "remark-gfm",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "^4.0.1"
},
{
"name": "tailwind-merge",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "^3.3.1"
},
{
"name": "ws",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "^8.18.0"
},
{
"name": "zod",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "^4.0.0"
},
{
"name": "zustand",
"manifest": "apps/hatchway/package.json",
"ecosystem": "npm",
"version_constraint": "^5.0.8"
},
{
"name": "@hatchway/agent-core",
"manifest": "apps/opencode-service/package.json",
"ecosystem": "npm",
"version_constraint": "workspace:*"
},
{
"name": "@opencode-ai/sdk",
"manifest": "apps/opencode-service/package.json",
"ecosystem": "npm",
"version_constraint": "^1.17.8"
},
{
"name": "drizzle-orm",
"manifest": "apps/opencode-service/package.json",
"ecosystem": "npm",
"version_constraint": "^0.45.2"
},
{
"name": "express",
"manifest": "apps/opencode-service/package.json",
"ecosystem": "npm",
"version_constraint": "^4.21.0"
},
{
"name": "http-proxy-middleware",
"manifest": "apps/opencode-service/package.json",
"ecosystem": "npm",
"version_constraint": "^3.0.0"
},
{
"name": "@anthropic-ai/claude-agent-sdk",
"manifest": "apps/runner/package.json",
"ecosystem": "npm",
"version_constraint": "^0.3.181"
},
{
"name": "@clack/prompts",
"manifest": "apps/runner/package.json",
"ecosystem": "npm",
"version_constraint": "^0.11.0"
},
{
"name": "@hatchway/droid-sdk",
"manifest": "apps/runner/package.json",
"ecosystem": "npm",
"version_constraint": "^1.0.0"
},
{
"name": "@openai/codex-sdk",
"manifest": "apps/runner/package.json",
"ecosystem": "npm",
"version_constraint": "^0.141.0"
},
{
"name": "chalk",
"manifest": "apps/runner/package.json",
"ecosystem": "npm",
"version_constraint": "^5.6.2"
},
{
"name": "commander",
"manifest": "apps/runner/package.json",
"ecosystem": "npm",
"version_constraint": "^14.0.1"
},
{
"name": "conf",
"manifest": "apps/runner/package.json",
"ecosystem": "npm",
"version_constraint": "^15.0.2"
},
{
"name": "dotenv",
"manifest": "apps/runner/package.json",
"ecosystem": "npm",
"version_constraint": "^16.4.5"
},
{
"name": "drizzle-orm",
"manifest": "apps/runner/package.json",
"ecosystem": "npm",
"version_constraint": "^0.45.2"
},
{
"name": "express",
"manifest": "apps/runner/package.json",
"ecosystem": "npm",
"version_constraint": "^5.1.0"
},
{
"name": "http-proxy",
"manifest": "apps/runner/package.json",
"ecosystem": "npm",
"version_constraint": "^1.18.1"
},
{
"name": "inquirer",
"manifest": "apps/runner/package.json",
"ecosystem": "npm",
"version_constraint": "^12.9.6"
},
{
"name": "jsonc-parser",
"manifest": "apps/runner/package.json",
"ecosystem": "npm",
"version_constraint": "^3.3.1"
},
{
"name": "ora",
"manifest": "apps/runner/package.json",
"ecosystem": "npm",
"version_constraint": "^9.0.0"
},
{
"name": "pg",
"manifest": "apps/runner/package.json",
"ecosystem": "npm",
"version_constraint": "^8.13.1"
},
{
"name": "picocolors",
"manifest": "apps/runner/package.json",
"ecosystem": "npm",
"version_constraint": "^1.1.1"
},
{
"name": "simple-git",
"manifest": "apps/runner/package.json",
"ecosystem": "npm",
"version_constraint": "^3.32.3"
},
{
"name": "ws",
"manifest": "apps/runner/package.json",
"ecosystem": "npm",
"version_constraint": "^8.18.0"
},
{
"name": "zod",
"manifest": "apps/runner/package.json",
"ecosystem": "npm",
"version_constraint": "^4.0.0"
},
{
"name": "@anthropic-ai/claude-agent-sdk",
"manifest": "packages/agent-core/package.json",
"ecosystem": "npm",
"version_constraint": "^0.3.181"
},
{
"name": "ai",
"manifest": "packages/agent-core/package.json",
"ecosystem": "npm",
"version_constraint": "^5.0.79"
},
{
"name": "better-auth",
"manifest": "packages/agent-core/package.json",
"ecosystem": "npm",
"version_constraint": "^1.6.19"
},
{
"name": "clsx",
"manifest": "packages/agent-core/package.json",
"ecosystem": "npm",
"version_constraint": "^2.1.1"
},
{
"name": "drizzle-orm",
"manifest": "packages/agent-core/package.json",
"ecosystem": "npm",
"version_constraint": "^0.45.2"
},
{
"name": "lucide-react",
"manifest": "packages/agent-core/package.json",
"ecosystem": "npm",
"version_constraint": "^0.544.0"
},
{
"name": "pg",
"manifest": "packages/agent-core/package.json",
"ecosystem": "npm",
"version_constraint": "^8.13.1"
},
{
"name": "server-only",
"manifest": "packages/agent-core/package.json",
"ecosystem": "npm",
"version_constraint": "^0.0.1"
},
{
"name": "tailwind-merge",
"manifest": "packages/agent-core/package.json",
"ecosystem": "npm",
"version_constraint": "^3.3.1"
},
{
"name": "ws",
"manifest": "packages/agent-core/package.json",
"ecosystem": "npm",
"version_constraint": "^8.18.0"
},
{
"name": "zod",
"manifest": "packages/agent-core/package.json",
"ecosystem": "npm",
"version_constraint": "^4.0.0"
},
{
"name": "@opencode-ai/sdk",
"manifest": "packages/opencode-client/package.json",
"ecosystem": "npm",
"version_constraint": "^1.17.8"
},
{
"name": "@anthropic-ai/claude-agent-sdk",
"manifest": "packages/runner/package.json",
"ecosystem": "npm",
"version_constraint": "^0.3.181"
},
{
"name": "@openai/codex-sdk",
"manifest": "packages/runner/package.json",
"ecosystem": "npm",
"version_constraint": "^0.141.0"
},
{
"name": "chalk",
"manifest": "packages/runner/package.json",
"ecosystem": "npm",
"version_constraint": "^5.6.2"
},
{
"name": "commander",
"manifest": "packages/runner/package.json",
"ecosystem": "npm",
"version_constraint": "^14.0.1"
},
{
"name": "conf",
"manifest": "packages/runner/package.json",
"ecosystem": "npm",
"version_constraint": "^15.0.2"
},
{
"name": "dotenv",
"manifest": "packages/runner/package.json",
"ecosystem": "npm",
"version_constraint": "^16.4.5"
},
{
"name": "express",
"manifest": "packages/runner/package.json",
"ecosystem": "npm",
"version_constraint": "^5.1.0"
},
{
"name": "ink",
"manifest": "packages/runner/package.json",
"ecosystem": "npm",
"version_constraint": "^6.3.1"
},
{
"name": "ink-select-input",
"manifest": "packages/runner/package.json",
"ecosystem": "npm",
"version_constraint": "^6.2.0"
},
{
"name": "ink-spinner",
"manifest": "packages/runner/package.json",
"ecosystem": "npm",
"version_constraint": "^5.0.0"
},
{
"name": "ink-text-input",
"manifest": "packages/runner/package.json",
"ecosystem": "npm",
"version_constraint": "^6.0.0"
},
{
"name": "picocolors",
"manifest": "packages/runner/package.json",
"ecosystem": "npm",
"version_constraint": "^1.1.1"
},
{
"name": "react",
"manifest": "packages/runner/package.json",
"ecosystem": "npm",
"version_constraint": "19.1.0"
},
{
"name": "ws",
"manifest": "packages/runner/package.json",
"ecosystem": "npm",
"version_constraint": "^8.18.0"
},
{
"name": "zod",
"manifest": "packages/runner/package.json",
"ecosystem": "npm",
"version_constraint": "^4.0.0"
},
{
"name": "zod-to-json-schema",
"manifest": "packages/runner/package.json",
"ecosystem": "npm",
"version_constraint": "^3.24.1"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 5,
"merged_prs": 114,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 100
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "codyde",
"commits": 1192,
"avatar_url": "https://avatars.githubusercontent.com/u/17350652?v=4"
},
{
"type": "User",
"login": "jaffrepaul",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/6298501?v=4"
},
{
"type": "User",
"login": "sergical",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/3760543?v=4"
}
],
"contributors_sampled": 3,
"top_contributor_share": 0.996
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"auto-release.yml",
"release-cli.yml"
],
"has_docs_dir": true,
"linter_configs": [
"eslint.config.mjs"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"pnpm-lock.yaml"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 0,
"reason": "0 out of 11 merged PRs checked by a CI test -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/21 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 0,
"reason": "license file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "51 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "a2ea660729805c29f23aae578a2bcc50d022edc6",
"ran_at": "2026-07-25T05:23:29Z",
"aggregate_score": 2.9,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-19T08:15:03Z",
"oldest_open_prs": [
{
"number": 71,
"created_at": "2025-10-22T20:38:32Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 96,
"created_at": "2025-10-27T18:47:33Z",
"last_comment_at": "2025-10-27T18:47:38Z",
"last_comment_author": "sentry"
},
{
"number": 101,
"created_at": "2025-10-28T18:17:11Z",
"last_comment_at": "2025-10-28T18:17:21Z",
"last_comment_author": "sentry"
},
{
"number": 196,
"created_at": "2026-02-10T00:01:42Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 198,
"created_at": "2026-02-24T18:12:00Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-19T08:11:15Z",
"ci_last_conclusion": null,
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/codyde/hatchway",
"host": "github.com",
"name": "hatchway",
"owner": "codyde"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"security": 43,
"vitality": 85,
"community": 26,
"governance": 49,
"engineering": 68
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 85,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"commits_last_year": 1364,
"human_commit_share": 0.6,
"days_since_last_push": 5,
"active_weeks_last_year": 26
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 5 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 5
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "26/52 weeks with commits",
"points": 18,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 26
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "1364 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 1364
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 100,
"latest_release_tag": "v0.51.39",
"releases_from_tags": false,
"days_since_latest_release": 5,
"mean_days_between_releases": 0.1
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "100 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 100
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 5 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 5
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~0.1 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 0.1
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 5,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 5 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 5
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 26,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 5,
"inputs": {
"forks": 2,
"stars": 3,
"watchers": 1,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "3 stars",
"points": 4.9,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 3
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "2 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 2
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "1 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 1
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "critical",
"name": "Community health",
"note": null,
"notes": [],
"value": 25,
"inputs": {
"has_readme": true,
"has_license": false,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "no license file detected",
"points": 0,
"status": "missed",
"details": [
{
"code": "license_absent",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 61,
"inputs": {
"packages": [
"@hatchway/cli"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 4538
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "4,538 downloads/month across npm",
"points": 48.8,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 4538,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 49,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 13,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 3,
"top_contributor_share": 0.996
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0.1,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "3 contributors",
"points": 4.1,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 3
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "at_risk",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 38,
"inputs": {
"merged_prs": 114,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 100
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "114/214 decided PRs merged",
"points": 20.4,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 114,
"decided": 214
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/21 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 64,
"inputs": {
"followers": 180,
"owner_type": "User",
"is_verified": null,
"owner_login": "codyde",
"public_repos": 245,
"account_age_days": 3807
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "180 followers of codyde",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 180,
"login": "codyde"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "245 public repos, account ~10 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 245
}
},
{
"code": "account_age_years",
"params": {
"years": 10
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"@hatchway/cli"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 5
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 5 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 5
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "65 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 65
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 68,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "2 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 2
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "eslint.config.mjs",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.mjs"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "0 out of 11 merged PRs checked by a CI test -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 43,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "critical",
"name": "Security posture",
"note": null,
"notes": [],
"value": 29,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 18,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 0,
"scorecard_aggregate": 2.9
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "0 out of 11 merged PRs checked by a CI test -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/21 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "51 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:@hatchway/cli@0.51.39 runtime dependency closure — what installing the published package pulls in — 189 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "npm:@hatchway/cli@0.51.39",
"assessed": 189
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 189,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 189,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 3
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 62,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "60 of 60 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 60,
"sampled": 60
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"pnpm-lock.yaml"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"apps/hatchway/tsconfig.json",
"apps/opencode-service/tsconfig.json",
"apps/runner/tsconfig.json",
"packages/agent-core/tsconfig.json",
"packages/opencode-client/tsconfig.json",
"packages/runner/tsconfig.json"
],
"agent_commit_share": 0.18,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "eslint.config.mjs",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.mjs"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "apps/hatchway/tsconfig.json, apps/opencode-service/tsconfig.json, apps/runner/tsconfig.json, packages/agent-core/tsconfig.json, packages/opencode-client/tsconfig.json, packages/runner/tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "apps/hatchway/tsconfig.json, apps/opencode-service/tsconfig.json, apps/runner/tsconfig.json, packages/agent-core/tsconfig.json, packages/opencode-client/tsconfig.json, packages/runner/tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "18 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 18,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 165084,
"source_files_sampled": 380,
"oversized_source_files": 2
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "2/380 source files over 60KB",
"points": 54.7,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 380,
"oversized": 2
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "moderate",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"example_dirs": [
"notebooks"
],
"has_mcp_signal": true,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 20,
"status": "met",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "notebooks",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "notebooks"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"Could not fetch npm package '@hatchway/runner' from its registry",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-25T05:23:43.019968Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/c/codyde/hatchway.svg",
"full_name": "codyde/hatchway",
"license_state": "absent",
"license_spdx": null
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with codyde/hatchway. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
