Design tokens for NSW Government digital products, providing colour tokens, theme outputs, and brand assets for use across CSS, SCSS, Less, JavaScript, TypeScript, JSON, Tailwind, Figma, and DTCG-compatible workflows.
TypeScript · JavaScript · ShellMPL-2.0★ 2 stars⑂ 0 forkssince Mar 2025View on GitHub ↗
digitalnsw/nswds-tokens holds a health index of 71 out of 100, placing it in the Good band. It scores highest on Vitality (91/100) and lowest on Community & Adoption (49/100). It was last updated 4 days ago. A single contributor accounts for most of its recent work.
71
overall / 100
Good
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
71
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
Manageable file sizes — 1/150 source files over 60KB
Inputs used
primary_language
TypeScript
largest_source_bytes
175,543
source_files_sampled
150
oversized_source_files
1
Key facts
2GitHub stars
3contributors
178commits, last 12 months
4days since last push
78releases
1bus factor
1open issues
npmpackage ecosystems
Data collection warnings
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
deps.dev does not index npm:@nswds/tokens@4.2.2; advisories assessed against the repository dependency graph instead
More detail
Star and fork history 2 ★ / 0 ⇿
2Stars
12Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 5Patch 7
OpenSSF Scorecard 5.9 / 10
5.9aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-21 22:40 UTC
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 14074,
"has_wiki": true,
"homepage": "https://www.npmjs.com/package/@nswds/tokens",
"languages": {
"Shell": 79433,
"JavaScript": 124633,
"TypeScript": 303686
},
"pushed_at": "2026-07-17T04:18:15Z",
"created_at": "2025-03-21T06:28:15Z",
"owner_type": "Organization",
"updated_at": "2026-07-17T04:18:16Z",
"description": "Design tokens for NSW Government digital products, providing colour tokens, theme outputs, and brand assets for use across CSS, SCSS, Less, JavaScript, TypeScript, JSON, Tailwind, Figma, and DTCG-compatible workflows.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MPL-2.0",
"default_branch": "main",
"license_spdx_raw": "MPL-2.0",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript",
"JavaScript",
"Shell"
]
},
"owner": {
"blog": "https://www.digital.nsw.gov.au",
"name": "Digital NSW",
"type": "Organization",
"login": "digitalnsw",
"company": null,
"location": "New South Wales",
"followers": 35,
"avatar_url": "https://avatars.githubusercontent.com/u/36907659?v=4",
"created_at": "2018-02-28T02:38:56Z",
"is_verified": null,
"public_repos": 13,
"account_age_days": 3065
},
"license": {
"state": "standard",
"spdx_id": "MPL-2.0",
"raw_spdx": "MPL-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v4.2.2",
"kind": "patch",
"published_at": "2026-07-17T04:18:22Z"
},
{
"tag": "v4.2.1",
"kind": "patch",
"published_at": "2026-06-20T07:15:22Z"
},
{
"tag": "v4.2.0",
"kind": "minor",
"published_at": "2026-06-20T05:11:37Z"
},
{
"tag": "v4.1.0",
"kind": "minor",
"published_at": "2026-06-19T07:21:22Z"
},
{
"tag": "v4.0.0",
"kind": "major",
"published_at": "2026-06-16T08:18:54Z"
},
{
"tag": "v3.9.0",
"kind": "minor",
"published_at": "2026-06-15T05:52:01Z"
},
{
"tag": "v3.8.1",
"kind": "patch",
"published_at": "2026-06-15T02:46:17Z"
},
{
"tag": "v3.8.0",
"kind": "minor",
"published_at": "2026-06-15T01:03:54Z"
},
{
"tag": "v3.7.0",
"kind": "minor",
"published_at": "2026-06-15T00:57:37Z"
},
{
"tag": "v3.6.0",
"kind": "minor",
"published_at": "2026-06-13T06:19:09Z"
},
{
"tag": "v3.5.1",
"kind": "patch",
"published_at": "2026-06-12T06:02:35Z"
},
{
"tag": "v3.5.0",
"kind": "minor",
"published_at": "2026-06-12T05:52:23Z"
},
{
"tag": "v3.4.0",
"kind": "minor",
"published_at": "2026-06-10T08:24:26Z"
},
{
"tag": "v3.3.0",
"kind": "minor",
"published_at": "2026-06-10T07:37:04Z"
},
{
"tag": "v3.2.0",
"kind": "minor",
"published_at": "2026-06-10T06:59:16Z"
},
{
"tag": "v3.1.0",
"kind": "minor",
"published_at": "2026-06-10T05:41:27Z"
},
{
"tag": "v3.0.1",
"kind": "patch",
"published_at": "2026-06-10T01:16:26Z"
},
{
"tag": "v3.0.0",
"kind": "major",
"published_at": "2026-06-09T23:12:29Z"
},
{
"tag": "v2.33.0",
"kind": "minor",
"published_at": "2026-06-09T10:01:49Z"
},
{
"tag": "v2.32.3",
"kind": "patch",
"published_at": "2026-06-05T05:58:43Z"
},
{
"tag": "v2.32.2",
"kind": "patch",
"published_at": "2026-06-04T22:55:55Z"
},
{
"tag": "v2.32.1",
"kind": "patch",
"published_at": "2026-05-24T11:06:49Z"
},
{
"tag": "v2.32.0",
"kind": "minor",
"published_at": "2026-05-01T05:16:28Z"
},
{
"tag": "v2.31.0",
"kind": "minor",
"published_at": "2026-04-29T07:24:25Z"
},
{
"tag": "v2.30.1",
"kind": "patch",
"published_at": "2026-04-28T00:14:31Z"
},
{
"tag": "v2.30.0",
"kind": "minor",
"published_at": "2026-04-16T00:52:58Z"
},
{
"tag": "v2.29.0",
"kind": "minor",
"published_at": "2026-04-15T11:26:58Z"
},
{
"tag": "v2.28.4",
"kind": "patch",
"published_at": "2026-04-12T04:27:08Z"
},
{
"tag": "v2.28.3",
"kind": "patch",
"published_at": "2026-03-29T20:19:11Z"
},
{
"tag": "v2.28.2",
"kind": "patch",
"published_at": "2026-03-22T02:47:06Z"
},
{
"tag": "v2.28.1",
"kind": "patch",
"published_at": "2026-03-17T21:25:08Z"
},
{
"tag": "v2.28.0",
"kind": "minor",
"published_at": "2026-03-10T01:09:29Z"
},
{
"tag": "v2.27.2",
"kind": "patch",
"published_at": "2026-03-07T05:16:16Z"
},
{
"tag": "v2.27.1",
"kind": "patch",
"published_at": "2026-03-01T22:29:49Z"
},
{
"tag": "v2.27.0",
"kind": "minor",
"published_at": "2026-02-11T23:02:29Z"
},
{
"tag": "v2.26.1",
"kind": "patch",
"published_at": "2026-02-11T22:08:11Z"
},
{
"tag": "v2.26.0",
"kind": "minor",
"published_at": "2026-02-06T02:25:32Z"
},
{
"tag": "v2.25.6",
"kind": "patch",
"published_at": "2025-12-19T04:58:41Z"
},
{
"tag": "v2.25.5",
"kind": "patch",
"published_at": "2025-11-26T06:57:41Z"
},
{
"tag": "v2.25.4",
"kind": "patch",
"published_at": "2025-11-23T22:07:40Z"
},
{
"tag": "v2.25.3",
"kind": "patch",
"published_at": "2025-11-18T22:37:57Z"
},
{
"tag": "v2.25.2",
"kind": "patch",
"published_at": "2025-10-31T00:59:32Z"
},
{
"tag": "v2.25.1",
"kind": "patch",
"published_at": "2025-10-27T22:13:27Z"
},
{
"tag": "v2.25.0",
"kind": "minor",
"published_at": "2025-10-27T10:28:44Z"
},
{
"tag": "v2.24.5",
"kind": "patch",
"published_at": "2025-10-21T23:32:00Z"
},
{
"tag": "v2.24.4",
"kind": "patch",
"published_at": "2025-10-08T22:22:57Z"
},
{
"tag": "v2.24.3",
"kind": "patch",
"published_at": "2025-10-06T23:48:13Z"
},
{
"tag": "v2.24.2",
"kind": "patch",
"published_at": "2025-09-12T08:20:25Z"
},
{
"tag": "v2.24.1",
"kind": "patch",
"published_at": "2025-09-12T08:13:49Z"
},
{
"tag": "v2.24.0",
"kind": "minor",
"published_at": "2025-09-03T03:43:45Z"
},
{
"tag": "v2.23.0",
"kind": "minor",
"published_at": "2025-09-03T03:38:56Z"
},
{
"tag": "v2.22.0",
"kind": "minor",
"published_at": "2025-08-30T03:48:06Z"
},
{
"tag": "v2.21.0",
"kind": "minor",
"published_at": "2025-08-20T07:21:38Z"
},
{
"tag": "v2.20.0",
"kind": "minor",
"published_at": "2025-08-20T07:05:10Z"
},
{
"tag": "v2.19.1",
"kind": "patch",
"published_at": "2025-08-20T05:33:08Z"
},
{
"tag": "v2.19.0",
"kind": "minor",
"published_at": "2025-08-20T01:00:16Z"
},
{
"tag": "v2.18.1",
"kind": "patch",
"published_at": "2025-08-13T10:10:43Z"
},
{
"tag": "v2.18.0",
"kind": "minor",
"published_at": "2025-08-13T10:08:13Z"
},
{
"tag": "v2.17.0",
"kind": "minor",
"published_at": "2025-08-13T06:24:25Z"
},
{
"tag": "v2.16.0",
"kind": "minor",
"published_at": "2025-08-13T06:17:11Z"
},
{
"tag": "v2.15.0",
"kind": "minor",
"published_at": "2025-08-13T06:05:42Z"
},
{
"tag": "v2.14.0",
"kind": "minor",
"published_at": "2025-08-06T02:27:43Z"
},
{
"tag": "v2.13.0",
"kind": "minor",
"published_at": "2025-07-29T22:49:05Z"
},
{
"tag": "v2.12.0",
"kind": "minor",
"published_at": "2025-07-03T03:53:21Z"
},
{
"tag": "v2.11.0",
"kind": "minor",
"published_at": "2025-06-25T09:19:44Z"
},
{
"tag": "v2.10.0",
"kind": "minor",
"published_at": "2025-04-29T00:46:04Z"
},
{
"tag": "v2.9.0",
"kind": "minor",
"published_at": "2025-04-26T07:46:25Z"
},
{
"tag": "v2.8.0",
"kind": "minor",
"published_at": "2025-04-17T12:48:01Z"
},
{
"tag": "v2.7.0",
"kind": "minor",
"published_at": "2025-04-11T10:30:01Z"
},
{
"tag": "v2.6.0",
"kind": "minor",
"published_at": "2025-04-06T04:47:50Z"
},
{
"tag": "v2.5.0",
"kind": "minor",
"published_at": "2025-04-02T10:21:28Z"
},
{
"tag": "v2.4.0",
"kind": "minor",
"published_at": "2025-04-02T03:34:05Z"
},
{
"tag": "v2.3.0",
"kind": "minor",
"published_at": "2025-04-02T01:26:53Z"
},
{
"tag": "v2.2.1",
"kind": "patch",
"published_at": "2025-03-27T02:43:58Z"
},
{
"tag": "v2.2.0",
"kind": "minor",
"published_at": "2025-03-27T02:00:55Z"
},
{
"tag": "v2.1.1",
"kind": "patch",
"published_at": "2025-03-25T05:47:25Z"
},
{
"tag": "v2.1.0",
"kind": "minor",
"published_at": "2025-03-25T02:44:48Z"
},
{
"tag": "v1.0.0",
"kind": "major",
"published_at": "2025-03-25T02:13:28Z"
}
],
"recent_commits": [
{
"oid": "072514486d5132f794f99e6b749ac9b12abc240a",
"body": "## <small>4.2.2 (2026-07-17)</small>\n\n* fix(release): use the ssh repository url so releases push via the deploy key (#127) ([5c987db](https://github.com/digitalnsw/nswds-tokens/commit/5c987db)), closes [#127](https://github.com/digitalnsw/nswds-tokens/issues/127) [digitalnsw/nswds-devops#10](https:\n[…]\n release commits via RELEASE_DEPLOY_KEY when present (#124) ([b8bb36b](https://github.com/digitalnsw/nswds-tokens/commit/b8bb36b)), closes [#124](https://github.com/digitalnsw/nswds-tokens/issues/124)",
"is_bot": false,
"headline": "chore(release): 4.2.2 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-07-17T04:18:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5c987dba893b65741ea1a44f1511f86fae6c6aaa",
"body": "…loy key (#127)\n\nsemantic-release prefers package.json's repository.url over the git origin,\nso the git+https URL sends the release push around the deploy-key SSH\nremote and into the Protect main ruleset (GH013). Same failure and fix as\ndigitalnsw/nswds-devops#10; caught there before it fired here.",
"is_bot": false,
"headline": "fix(release): use the ssh repository url so releases push via the dep…",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-07-17T04:16:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "065f1f5068ba42daa21ef58909891a21197d1c31",
"body": "Co-authored-by: nswds-devops-sync[bot] <305364716+nswds-devops-sync[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(ci): synced file(s) with digitalnsw/nswds-devops (#125)",
"author_name": "nswds-devops-sync[bot]",
"author_login": "nswds-devops-sync[bot]",
"committed_at": "2026-07-16T03:20:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b8bb36bfe02c580b28f2e9a1b91001146e9af0bf",
"body": null,
"is_bot": false,
"headline": "ops: push release commits via RELEASE_DEPLOY_KEY when present (#124)",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-07-16T01:59:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "942edd96de053cab879f524314d494bf18fe070b",
"body": "Co-authored-by: nswds-devops-sync[bot] <305364716+nswds-devops-sync[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(ci): synced file(s) with digitalnsw/nswds-devops (#123)",
"author_name": "nswds-devops-sync[bot]",
"author_login": "nswds-devops-sync[bot]",
"committed_at": "2026-07-16T01:59:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d923399b37b0c8b8886e874dd04c7f232814f563",
"body": "Co-authored-by: nswds-devops-sync[bot] <305364716+nswds-devops-sync[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(ci): synced file(s) with digitalnsw/nswds-devops (#120)",
"author_name": "nswds-devops-sync[bot]",
"author_login": "nswds-devops-sync[bot]",
"committed_at": "2026-07-15T11:33:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a71d6fcb2429d92a50e8ca30b8ffb0c8759193c",
"body": "* chore(ci): synced file(s) with digitalnsw/nswds-devops\n\n* chore: remove commit-types.cjs file\n\nRemoves the commit-types.cjs file, which served as a single source of truth for allowed\nconventional-commit types. This change might be due to a refactor in how commit types are managed or\nto consolidate configuration elsewhere.\n\n---------\n\nCo-authored-by: nswds-devops-sync[bot] <305364716+nswds-devops-sync[bot]@users.noreply.github.com>\nCo-authored-by: laurenhitchon <lauren@hitchon.me>",
"is_bot": true,
"headline": "chore(ci): synced file(s) with digitalnsw/nswds-devops (#119)",
"author_name": "nswds-devops-sync[bot]",
"author_login": "nswds-devops-sync[bot]",
"committed_at": "2026-07-15T10:23:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "20b0419ab1b9f879711aa6ca4e359982dc927d99",
"body": "…(#118)\n\n* fix(deps): move axios, culori and dotenv to devDependencies\n\nThese three packages are used only by the build and Figma-sync scripts\n(build/color-derive.mjs, scripts/figma_api.ts, scripts/build-canonical.mjs).\nThey appear nowhere in the published dist/, yet sat under \"dependencies\", so\neve\n[…]\n hand-authored object source with culori derivation \"deferred to Phase 3\".\n Phase 3 shipped; rewrote the comment to describe the actual\n derive-from-canonical.json pipeline (build-token-views.mjs).",
"is_bot": false,
"headline": "chore: dependency hygiene and CI gates for staging + package surface …",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-21T06:07:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3131bfb676fdf9eec96d3947cb0322e140c945f4",
"body": "## <small>4.2.1 (2026-06-20)</small>\n\n* fix(tokens): correct typography variable representation in Figma (#117) ([dc9f73f](https://github.com/digitalnsw/nswds-tokens/commit/dc9f73f)), closes [#117](https://github.com/digitalnsw/nswds-tokens/issues/117)",
"is_bot": false,
"headline": "chore(release): 4.2.1 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-06-20T07:15:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dc9f73fdda89d2dbe36185033a34dc1b76006295",
"body": "* fix(tokens): correct typography variable representation in Figma\n\nFigma variables are unitless FLOATs / single STRINGs, so three typography\nvalues rendered wrong when bound to text properties:\n- font-family was the joined CSS fallback stack (an unloadable font name)\n -> now the primary family onl\n[…]\nrd \"stack\" -> \"typeface\" in the font-family branch.\n\nCanonical and every css/js/scss/… output keep their \"stack\" wording, which\nis accurate there (CSS does use the fallback stack). Figma staging only.",
"is_bot": false,
"headline": "fix(tokens): correct typography variable representation in Figma (#117)",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-20T07:14:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a619698ea34f1a3bdc846fda49a57a8007b077f8",
"body": "## 4.2.0 (2026-06-20)\n\n* feat(tokens): sync motion durations and z-index to Figma as FLOATs (#116) ([2328e21](https://github.com/digitalnsw/nswds-tokens/commit/2328e21)), closes [#116](https://github.com/digitalnsw/nswds-tokens/issues/116)\n* chore(tokens): regenerate colour staging for the v4 semantic structure (Phase A) (#115) ([949189c](https://github.com/digitalnsw/nswds-tokens/commit/949189c)), closes [#115](https://github.com/digitalnsw/nswds-tokens/issues/115)",
"is_bot": false,
"headline": "chore(release): 4.2.0 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-06-20T05:11:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2328e212aa38b7da57c5c211604d08955d66ad52",
"body": "…116)\n\n* feat(tokens): sync motion durations and z-index to Figma as FLOATs\n\nCloses the last code-vs-Figma gap. Adds a Motion collection (the duration\nfamily only — easings/cubicBezier and transition composites stay\ncode-side, like shadows) and a Z-index collection, both FLOAT.\n\n- duration becomes a\n[…]\nn is ms), but the type +\nvalidator both advertise 's' support that was silently broken.\n\nAdds a regression test asserting { value: 0.15, unit: 's' } → 150 and that\nms durations pass through unchanged.",
"is_bot": false,
"headline": "feat(tokens): sync motion durations and z-index to Figma as FLOATs (#…",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-20T05:10:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "949189ceb21aedc1a50f7169bf53879d40323c2f",
"body": "…e (Phase A) (#115)\n\n* chore(tokens): regenerate colour staging for the v4 semantic structure\n\nPhase A of the Figma re-sync (no live push). Brings the Figma staging\nfiles in line with the v4 semantic-driven colour architecture:\n\n- primitives-global.light.json gains the success/warning/danger/info\n \n[…]\n a\ncase asserting primitives-semantic.{light,dark}.json both resolve to the\n'Primitives — semantic' collection with their respective modes — the\ntwo-modes-on-one-collection mapping this PR introduces.",
"is_bot": false,
"headline": "chore(tokens): regenerate colour staging for the v4 semantic structur…",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-20T02:53:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "62ccea51cd22029b23ae8a3a6a49abe0ef5fb406",
"body": "## 4.1.0 (2026-06-19)\n\n* feat(tokens): emit dark mode tokens under .dark class ([ff7a5cb](https://github.com/digitalnsw/nswds-tokens/commit/ff7a5cb)), closes [#114](https://github.com/digitalnsw/nswds-tokens/issues/114)\n* chore(style): update style dictionary configs for dark mode support (#114) ([8\n[…]\nens): mark shadow scale approved — drop draft suffix (#113) ([bdd6f68](https://github.com/digitalnsw/nswds-tokens/commit/bdd6f68)), closes [#113](https://github.com/digitalnsw/nswds-tokens/issues/113)",
"is_bot": false,
"headline": "chore(release): 4.1.0 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-06-19T07:21:12Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ff7a5cb47ea4f45aa6dc0dd6ccf7d4f83a36f0f5",
"body": "Dark mode CSS variables now scope to both [data-theme='dark'] and the\n.dark class, aligning the token output with @nswds/ui's\n`@custom-variant dark (&:is(.dark *))` so class-based dark toggles pick\nup the palette.\n\nThis shipped in #114 but was squash-merged under a `chore(style):`\nheader, so semantic-release skipped it. This commit publishes it as a\nminor release.",
"is_bot": false,
"headline": "feat(tokens): emit dark mode tokens under .dark class",
"author_name": "laurenhitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-19T07:20:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8488e1d28e66348bffdc5c820de3d0c2c1805aa5",
"body": "…#114)\n\n* chore(style): update multi-area style dictionary configurations for dark mode support\n\n- Modify CSS to include both `[data-theme='dark']` and `.dark` class for better compatibility\n- Adjust style dictionary configuration to align with updated dark mode requirements\n- Add new entries to `.g\n[…]\n\njob) rejected the `module.exports = [...];` terminator in commit-types.cjs.\nRemove it from both the committed file and the setup-commitlint.sh heredoc\ndefault so generated files match the shared one.",
"is_bot": false,
"headline": "chore(style): update style dictionary configs for dark mode support (…",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-19T07:08:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bdd6f68010ffaeb57dd2050bde0961dc815aa3c4",
"body": "Removes the trailing 'DRAFT pending design review.' from the four shadow\nelevation descriptions (sm/md/lg/xl) now that the scale is signed off.\nDescriptions only; values untouched.",
"is_bot": false,
"headline": "docs(tokens): mark shadow scale approved — drop draft suffix (#113)",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-17T03:25:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7dc5e974c4b51a7246606ec46e82ae169b72f881",
"body": "## 4.0.0 (2026-06-16)\n\n* feat(tokens)!: semantic-driven dark mode — single palette, role tokens (#112) ([464d163](https://github.com/digitalnsw/nswds-tokens/commit/464d163)), closes [#112](https://github.com/digitalnsw/nswds-tokens/issues/112) [000/#fff](https://github.com/digitalnsw/nswds-tokens/is\n[…]\ncal.json (light) and canonical.dark.json (dark) both alias the\n single global palette; dark = the same roles pointing at different\n primitive steps. Best-practice scheme: elevation inverts (raised =",
"is_bot": false,
"headline": "chore(release): 4.0.0 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-06-16T08:18:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "464d1638fd7714cb459ef86c1bd232dd2eb26732",
"body": "…s (#112)\n\nBREAKING CHANGE: replaces the naive-invert dark mode (parallel global +\nsemantic .dark files with mechanically inverted literal hex) with the\nindustry-standard 3-layer model. Only the semantic layer is mode-aware.\n\n- global/color: now the single, mode-agnostic palette. The status ramps\n \n[…]\n-canonical no longer regenerates\nthe hand-authored semantic layer. AA spot-check: text/action/link/feedback\npass in both modes; border.strong meets 3:1, border.default/subtle are\ndecorative by design.",
"is_bot": false,
"headline": "feat(tokens)!: semantic-driven dark mode — single palette, role token…",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-16T08:17:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4b30ea0878b93b57a2159ab52e60bd619e1038ab",
"body": "## 3.9.0 (2026-06-15)\n\n* feat(tokens): motion brief — expanded scale, transition composites, reduced motion (approved) (#111) ([337332d](https://github.com/digitalnsw/nswds-tokens/commit/337332d)), closes [#111](https://github.com/digitalnsw/nswds-tokens/issues/111)",
"is_bot": false,
"headline": "chore(release): 3.9.0 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-06-15T05:51:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "337332dfe6756b3f222e507d818404b30f92719b",
"body": "…educed motion (approved) (#111)\n\n* feat(tokens): motion brief — expanded scale, transition composites, reduced motion\n\nApplies the NSW motion design brief to the (merged) draft motion tokens.\n\nSource (tokens/global/motion/canonical.json):\n- duration gains none (0ms), instant (100ms) and slower (600\n[…]\n) per the validator. Output unchanged.\n- README features bullet: attach 'built-in reduced-motion override' to\n Motion rather than the shared motion-and-z-index clause (the override\n is motion-only).",
"is_bot": false,
"headline": "feat(tokens): motion brief — expanded scale, transition composites, r…",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-15T05:50:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fc9355858a294e242abdea0d91605a4c4d00ed70",
"body": "## <small>3.8.1 (2026-06-15)</small>\n\n* chore(deps): npm audit fix — upgrade tsx 4.21→4.22.4, dedupe dev deps ([84d59ff](https://github.com/digitalnsw/nswds-tokens/commit/84d59ff))\n* fix(deps): bump form-data 4.0.5 → 4.0.6 to patch CRLF injection (CVE-2026-12143) ([c303c62](https://github.com/digitalnsw/nswds-tokens/commit/c303c62))",
"is_bot": false,
"headline": "chore(release): 3.8.1 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-06-15T02:46:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "84d59ff6f730cff473391f0a088eef9d770cbae9",
"body": "Non-breaking lockfile-only fixes within declared semver ranges. Upgrades\ntsx (its bundled esbuild → 0.28.1, patched) and dedupes picomatch /\nbrace-expansion / ip-address copies under build tooling. Build verified.\n\nRemaining audit findings are dev-only and not cleanly fixable:\n- esbuild 0.27.7 pinne\n[…]\n are Deno-install /\n Windows dev-server only — N/A to this build pipeline)\n- brace-expansion / ip-address / picomatch bundled inside npm@11.12.1,\n vendored by semantic-release (release-time CI only)",
"is_bot": false,
"headline": "chore(deps): npm audit fix — upgrade tsx 4.21→4.22.4, dedupe dev deps",
"author_name": "laurenhitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-15T02:28:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c303c62f6a198b61a307e33976e133f951c31462",
"body": "…2026-12143)\n\nRe-resolves the transitive form-data pulled in by axios. 4.0.6 satisfies\naxios's ^4.0.5 range, so only the lockfile changes.",
"is_bot": false,
"headline": "fix(deps): bump form-data 4.0.5 → 4.0.6 to patch CRLF injection (CVE-…",
"author_name": "laurenhitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-15T02:25:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "398e8aa0b7b24e2aba6bbd0ea2e474aa732cc17a",
"body": "## 3.8.0 (2026-06-15)\n\n* feat(tokens): motion and z-index token categories (DRAFT values) (#109) ([ccf444b](https://github.com/digitalnsw/nswds-tokens/commit/ccf444b)), closes [#109](https://github.com/digitalnsw/nswds-tokens/issues/109)",
"is_bot": false,
"headline": "chore(release): 3.8.0 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-06-15T01:03:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ccf444be8e1634fc19e9a580c3a0b09ebc1b79e9",
"body": "* feat(tokens): motion and z-index token categories (DRAFT values)\n\nRoadmap 2c. Two new global categories following the Phase 4 pattern:\n\n- motion: duration.{fast,base,slow} (DTCG duration, ms) and\n easing.{standard,decelerate,accelerate} (DTCG cubicBezier). Two value\n transforms — duration -> '15\n[…]\ncuments css/z-index/global.css as\na copy-paste import. Added css/tailwind/canonical for z-index so every\ndocumented z-index path fails loudly if it stops resolving in the packed\npackage. Smoke passes.",
"is_bot": false,
"headline": "feat(tokens): motion and z-index token categories (DRAFT values) (#109)",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-15T01:02:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4b5e9a30f464b93c78d29714669df0e729b1d7cc",
"body": "## 3.7.0 (2026-06-15)\n\n* feat(tokens): populate Figma Dev-Mode codeSyntax with the CSS variable (#110) ([104c6ac](https://github.com/digitalnsw/nswds-tokens/commit/104c6ac)), closes [#110](https://github.com/digitalnsw/nswds-tokens/issues/110)",
"is_bot": false,
"headline": "chore(release): 3.7.0 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-06-15T00:57:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "104c6ac4a3c83c7014b3782bb61de36e2990501f",
"body": "…e (#110)\n\nRoadmap 2b. The staging generator now sets each variable's\n$extensions['com.figma'].codeSyntax.WEB to the published CSS custom\nproperty — var(--nsw-blue-500), var(--space-4), var(--primary-50), … —\nso designers can copy the working CSS variable straight from Figma's\nDev Mode instead of a \n[…]\n;\n$value and $description are untouched (diff is codeSyntax-only).\n\nThe live Figma push is a separate verified step (dry-run first, same 4e\nrunbook); token_import already diffs and applies codeSyntax.",
"is_bot": false,
"headline": "feat(tokens): populate Figma Dev-Mode codeSyntax with the CSS variabl…",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-15T00:56:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7f5c85faf1a5cb46f20ce65f4715a08f00228c2b",
"body": "## 3.6.0 (2026-06-13)\n\n* feat(tokens): one-import Tailwind v4 preset (#108) ([4e5fc03](https://github.com/digitalnsw/nswds-tokens/commit/4e5fc03)), closes [#108](https://github.com/digitalnsw/nswds-tokens/issues/108)",
"is_bot": false,
"headline": "chore(release): 3.6.0 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-06-13T06:19:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4e5fc036278fa5df0937f4cfcb3fe17186aed581",
"body": "Roadmap 2a. A single tailwind/preset.css concatenates the generated\nper-category Tailwind outputs — global + semantic colours (hex) and all\nsix non-colour categories — so consumers write one import instead of\neight:\n\n @import '@nswds/tokens/tailwind/preset.css';\n\nThemes are deliberately excluded: t\n[…]\nlwind v4 merges the\nrepeated @theme blocks). copy-styles already ships src/tailwind wholesale\nso it reaches dist; wildcard exports cover the subpath. Smoke specifier\n+ README one-import section added.",
"is_bot": false,
"headline": "feat(tokens): one-import Tailwind v4 preset (#108)",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-13T06:18:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a42ad33f524a93a936bb97360b52d6b9cc2be195",
"body": "## <small>3.5.1 (2026-06-12)</small>\n\n* fix(tokens): skip deleted-but-referenced variables in Figma export (#103) ([1bb38a4](https://github.com/digitalnsw/nswds-tokens/commit/1bb38a4)), closes [#103](https://github.com/digitalnsw/nswds-tokens/issues/103)",
"is_bot": false,
"headline": "chore(release): 3.5.1 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-06-12T06:02:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1bb38a403c2b175c74f3ee4e3cf3cf5d0a2ae27d",
"body": "…103)\n\n* fix(tokens): skip deleted-but-referenced variables in Figma export\n\nDesign deleted the stray 'Font family' string variable from the\nPrimitives — global colour collection, but a layer/style in the file\nstill references it, so the Variables API keeps returning it with\ndeletedButReferenced: tr\n[…]\n'\nstring variable still referenced in the file): the lingering variable\nis excluded, its sibling exports normally. Negative-verified — removing\nthe filter from token_export.ts fails exactly this test.",
"is_bot": false,
"headline": "fix(tokens): skip deleted-but-referenced variables in Figma export (#…",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-12T06:01:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f010789252acd19f53a04fc99a988d9dca250d23",
"body": "## 3.5.0 (2026-06-12)\n\n* fix(release): bump Node to 22 LTS — semantic-release@25 refused 20.19 (#102) ([b04e65d](https://github.com/digitalnsw/nswds-tokens/commit/b04e65d)), closes [#102](https://github.com/digitalnsw/nswds-tokens/issues/102) [#97](https://github.com/digitalnsw/nswds-tokens/issues/9\n[…]\n) ([af49db9](https://github.com/digitalnsw/nswds-tokens/commit/af49db9)), closes [#95](https://github.com/digitalnsw/nswds-tokens/issues/95) [#95](https://github.com/digitalnsw/nswds-tokens/issues/95)",
"is_bot": false,
"headline": "chore(release): 3.5.0 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-06-12T05:52:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "948c4f8dc7ece374470a7b1aeeec397a82b2f551",
"body": "…rse (#107)\n\n* fix(release): scope HUSKY=0 to the release step; harden smoke JSON parse\n\nThe job-wide HUSKY=0 from the previous fix had a side effect: husky's\nprepare script prints 'HUSKY=0 skip install' to stdout, which landed in\nfront of the JSON that the smoke test parses from npm pack --dry-run\n\n[…]\ned slice(-1) — a single\ncharacter — to JSON.parse, reproducing exactly the confusing-error\nclass this line was added to fix, with the actual stdout discarded.\nNow throws with the full stdout attached.",
"is_bot": false,
"headline": "fix(release): scope HUSKY=0 to the release step; harden smoke JSON pa…",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-12T05:51:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b9d32ff9ba55ae02b125054880ba2d27b4892a48",
"body": "… (#105)\n\nThe v3.5.0 release computed correctly on Node 22 then died when husky's\ncommit-msg hook ran commitlint against semantic-release's changelog\ncommit (footer-max-line-length — changelog bullets are naturally long).\n\nTwo regressions stacked up:\n- #72 added HUSKY: 0 to release.yml for exactly t\n[…]\nsing either alone can no longer break release.\n\nVerified: replica of the exact failing v3.5.0 message rejected by the\nold config (exit 1), accepted by the new; hand-written bad commits\nstill rejected.",
"is_bot": false,
"headline": "fix(release): exempt release commits from commitlint; restore HUSKY=0…",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-12T05:09:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b04e65d2bb47e8ae0530ec90bb0a1b4b9debf439",
"body": "… (#102)\n\n* fix(release): bump Node to 22 LTS — semantic-release@25 refused 20.19\n\nEvery release run since #97 failed with:\n [semantic-release]: node version ^22.14.0 || >= 24.10.0 is required. Found v20.19.0.\n\nPR #97 unified all workflows onto node-version-file: .nvmrc (20.19.0),\nwhich put semanti\n[…]\nntion in the other scripts and\nremoves the shell from the path entirely (npm.cmd handled for Windows\nper the existing pattern). Behaviour unchanged: positive and negative\n(fake-tag) paths re-verified.",
"is_bot": false,
"headline": "fix(release): bump Node to 22 LTS — semantic-release@25 refused 20.19…",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-12T04:55:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "618a7b11d5557a508f8cd740dee7ef72ae7a125d",
"body": "…s) (#101)\n\n* feat(tokens): dark mode scaffold for colour tokens (placeholder values)\n\nAdds the full dark-mode pipeline against DRAFT placeholder values (naive\nramp inversion, step 50 <-> 950) so the machinery is proven before the\ndesigned palette lands (D2):\n\n- tokens/{global,semantic}/color/canoni\n[…]\nd extend the runtime shape guard to the semantic dark and\ndarkMedia leaves — they come from a separate SD config + file, so the\nglobal-only guard could miss a semantic-side scoping or type regression.",
"is_bot": false,
"headline": "feat(tokens): dark mode scaffold for colour tokens (placeholder value…",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-12T01:05:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8a1d072260261ea7ebf2c1da07783a35d4b23d51",
"body": "…nup (#100)\n\n* fix(tokens): valid root types under skipLibCheck:false; string style leaves\n\nThe two remaining review leftovers:\n\n1. Root index.d.ts failed skipLibCheck:false consumers with TS2708 —\n tsup's dts step synthesised `declare namespace` for the text-loaded\n style imports and the tokens\n[…]\n string and\ncontains the stylesheet text, plus a tailwind leaf check.\n\nNegative-verified by patching the built bundle to re-wrap a leaf in\n{ default: ... } — the guard fails with the intended message.",
"is_bot": false,
"headline": "fix(tokens): valid root types under skipLibCheck:false; workflow clea…",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-11T05:10:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ab99ba10398ed7c48c4d6124ef17a575676202f9",
"body": "* feat(tokens): describe all 342 global colour primitives (design review)\n\nReview item M1 — the original 18 colour ramps were the only undescribed\ntokens left in the system. Each family carries a one-line intent\n(DRAFT per D1 — design edits in this PR) plus the per-step suffix\nvoice the semantic fam\n[…]\nd to FONT_STYLE — pushing FONT_WEIGHT would\nre-diff on every sync.\n\nExecuted live: 57 scope UPDATEs pushed; second push idempotent; fresh\nexport byte-stable across all staging files. Values untouched.",
"is_bot": false,
"headline": "feat(tokens): per-category Figma variable scopes (#99)",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-11T03:06:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6776c31a224097279b1c190b116e67227751f824",
"body": "* feat(tokens): describe all 342 global colour primitives (design review)\n\nReview item M1 — the original 18 colour ramps were the only undescribed\ntokens left in the system. Each family carries a one-line intent\n(DRAFT per D1 — design edits in this PR) plus the per-step suffix\nvoice the semantic fam\n[…]\nnow use the same Radix Colors usage progression as the\nnon-aboriginal global ramps — no \"base colour\" step. Family intent\nsentences unchanged; canonical and staging updated together. Values\nuntouched.",
"is_bot": false,
"headline": "feat(tokens): describe all 342 global colour primitives (#98)",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-11T03:04:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "16a408fb5a7aa7bceb33cf828028ce79b44587f6",
"body": "* feat(tokens): type the ./js/* subpath exports (.d.ts siblings)\n\nReview item H1: strict TypeScript consumers importing the documented\n./js/* subpaths failed with TS7016 implicit any — zero declaration\nfiles existed under dist/js.\n\n- nsw/dts + nsw/typography-dts formats emit a declaration sibling fo\n[…]\n so the v21 note\n was stale.\n- tests/validate-tokens.test.ts: spawn failures now throw result.error\n (the real cause) instead of surfacing as \"expected null to be 1\";\n null status normalises to -1.",
"is_bot": false,
"headline": "feat(tokens): validation and CI hardening (#97)",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-10T11:54:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8a0e4f8f2e0fcdbbdcefb9ea6d238f45ac85b402",
"body": "Review item H1: strict TypeScript consumers importing the documented\n./js/* subpaths failed with TS7016 implicit any — zero declaration\nfiles existed under dist/js.\n\n- nsw/dts + nsw/typography-dts formats emit a declaration sibling for\n every generated js module (31 files): shapes mirror nswJs exac\n[…]\nd\n the root-types issue is tracked as a follow-up.\n\n382 tests pass (31 new snapshots); two drift-free builds; eslint and\ntypecheck clean; only js/ trees gain files — all other outputs\nbyte-identical.",
"is_bot": false,
"headline": "feat(tokens): type the ./js/* subpath exports (.d.ts siblings) (#96)",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-10T11:44:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "af49db915bc1ad557fc7542cb582daebbc91da98",
"body": "* docs(repo): catch documentation up to the phase 4 package\n\nReview item H2 (+L3, L4): the docs lagged a full phase behind the\npackage.\n\n- README: intro and features now cover all seven categories; new\n consumption sections for space/radius/breakpoints/border/shadow and\n typography (incl. the sema\n[…]\nimplied figma/ contains\nfiles for every category; the figma output platform is colour-only by\ndesign — other categories reach Figma via the variable sync, not\nfiles. The bullet now says so explicitly.",
"is_bot": false,
"headline": "docs(repo): catch documentation up to the Phase 4 package (#95)",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-10T11:41:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "720cf4108abde55935f510834f96377a88c25679",
"body": "…rified (#94)\n\n* feat(tokens): figma sync round-trip (phase 4e) — push executed and verified\n\nFinal Phase 4 milestone. The push itself ran against the live file:\n5 collections CREATEd (Space, Radius, Breakpoints, Typography, Border),\n57 variables + mode values; the existing colour collections needed\n[…]\nn to ignore specific message patterns related to potential fixes and\ninitial plans. These changes improve the robustness of the release process and ensure commit\nmessages adhere to the desired format.",
"is_bot": false,
"headline": "feat(tokens): figma sync round-trip (Phase 4e) — push executed and ve…",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-10T09:34:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "74f988ea413c048e1f3597a649ac0b400a351420",
"body": "## 3.4.0 (2026-06-10)\n\n* feat(tokens): border-width and box-shadow tokens (Phase 4d) (#93) ([1559ec0](https://github.com/digitalnsw/nswds-tokens/commit/1559ec0)), closes [#93](https://github.com/digitalnsw/nswds-tokens/issues/93) [#93](https://github.com/digitalnsw/nswds-tokens/issues/93)",
"is_bot": false,
"headline": "chore(release): 3.4.0 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-06-10T08:24:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1559ec06dae2a9bb26c20ec97e90a4f242e25260",
"body": "* feat(tokens): border-width and box-shadow tokens (phase 4d)\n\nFourth Phase 4 milestone, values per design input:\n\n- tokens/global/border/canonical.json — border-width thin (0.0625rem),\n thick (0.125rem), thicker (0.25rem), and default as an alias to thin\n so the system default can be retuned in o\n[…]\ndation message\n\nAddress PR #93 review: the shadow length unit error now states the\nconstraint explicitly — 'unit must be \"px\" or \"rem\" (got \"em\")' —\nmatching the phrasing style of the dimension check.",
"is_bot": false,
"headline": "feat(tokens): border-width and box-shadow tokens (Phase 4d) (#93)",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-10T08:23:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ae83d75eccec5ed51b84a9906d015dc64bd23ff6",
"body": "## 3.3.0 (2026-06-10)\n\n* feat(tokens): semantic typography composites (Phase 4c) (#92) ([74363a2](https://github.com/digitalnsw/nswds-tokens/commit/74363a2)), closes [#92](https://github.com/digitalnsw/nswds-tokens/issues/92) [#92](https://github.com/digitalnsw/nswds-tokens/issues/92)",
"is_bot": false,
"headline": "chore(release): 3.3.0 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-06-10T07:36:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "74363a25a9072cb5f0b409064623c52e53a317e4",
"body": "* feat(tokens): semantic typography composites (phase 4c)\n\nThird Phase 4 milestone per docs/phase-4-non-colour-tokens.md:\n\n- tokens/semantic/typography/canonical.json — nine DTCG `typography`\n composites (heading-1..4, body, body-sm, lead, caption, code),\n ALIAS-ONLY into the global primitives per\n[…]\ngraphy.code $description now carries the same approximation flag\n as heading-1/body-sm (prose pre 24/14 ~ 1.714 vs base 1.5), matching\n the PR's design-review table; regenerated through the outputs.",
"is_bot": false,
"headline": "feat(tokens): semantic typography composites (Phase 4c) (#92)",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-10T07:36:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "152dd3088f21de5be6978e00e4a70e1eff2f7d0e",
"body": "## 3.2.0 (2026-06-10)\n\n* feat(tokens): typography primitives (Phase 4b) (#91) ([b2d2534](https://github.com/digitalnsw/nswds-tokens/commit/b2d2534)), closes [#91](https://github.com/digitalnsw/nswds-tokens/issues/91) [#91](https://github.com/digitalnsw/nswds-tokens/issues/91)",
"is_bot": false,
"headline": "chore(release): 3.2.0 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-06-10T06:59:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b2d2534bf3c85f7ff48e6f32741ef2afb7f160c1",
"body": "* feat(tokens): typography primitives (phase 4b)\n\nSecond Phase 4 milestone per docs/phase-4-non-colour-tokens.md:\n\n- tokens/global/typography/canonical.json — font-family (Public Sans +\n system fallbacks, mono stack), font-size (dimension rem with px-named\n numeric steps 12-48: the step name IS th\n[…]\n/README.md: the *.base.json staging row now describes the real\n Figma type mapping (dimension -> FLOAT px, fontFamily -> STRING,\n fontWeight/number -> FLOAT) instead of \"dimension collections\" only.",
"is_bot": false,
"headline": "feat(tokens): typography primitives (Phase 4b) (#91)",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-10T06:58:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f9c1b624ed9b9729124136f3c46258f32a83dbb8",
"body": "## 3.1.0 (2026-06-10)\n\n* feat(tokens): space, radius, and breakpoint dimension tokens (Phase 4a) (#90) ([32e96c6](https://github.com/digitalnsw/nswds-tokens/commit/32e96c6)), closes [#90](https://github.com/digitalnsw/nswds-tokens/issues/90) [#90](https://github.com/digitalnsw/nswds-tokens/issues/90\n[…]\n) ([db84df1](https://github.com/digitalnsw/nswds-tokens/commit/db84df1)), closes [#86](https://github.com/digitalnsw/nswds-tokens/issues/86) [#88](https://github.com/digitalnsw/nswds-tokens/issues/88)",
"is_bot": false,
"headline": "chore(release): 3.1.0 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-06-10T05:41:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "32e96c65e7f77ec3d8debb2948ae4c60b84b26b5",
"body": "…a) (#90)\n\n* feat(tokens): space, radius, and breakpoint dimension tokens (phase 4a)\n\nFirst non-colour categories per docs/phase-4-non-colour-tokens.md, with\nthe structural generalisation the later milestones reuse:\n\n- tokens/global/{space,radius,breakpoints}/canonical.json — DTCG 2025.10\n dimensio\n[…]\nn objects (e.g. unit \"em\") now get a\n shape-specific error (\"expected { value: number, unit: 'px' | 'rem' }\n or an alias\") instead of the misleading primitive-value message;\n regression test added.",
"is_bot": false,
"headline": "feat(tokens): space, radius, and breakpoint dimension tokens (Phase 4…",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-10T05:40:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "737d4dd286c6cf89be592b4edb2cd96226402931",
"body": "* docs(tokens): phase 4 non-colour tokens plan with locked decisions\n\nSpacing/typography/radius/shadow/breakpoints roadmap: locked decisions\n(numeric scales, rem/px split, unitless line-height, draft-then-design-\nreview values, Public Sans stack, Figma sync planned for FLOAT-able\ntokens), architectu\n[…]\nerately omitted (sparse,\n Tailwind-style); design can add intermediates in the 4a review.\n- Figma section: \"creates the collections (a CREATE action in the\n variables payload)\" instead of \"CREATEs\".",
"is_bot": false,
"headline": "docs(tokens): phase 4 non-colour tokens plan (locked decisions) (#89)",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-10T02:44:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "db84df1a2e8d721150a03476dade4d8dcd0b429b",
"body": "… (M6) (#86)\n\n* test(tokens): snapshot all generated outputs across spaces and layers\n\nThe snapshot suite covered 9 hand-picked files (mostly hex, one per\nformat), so a regression in rgb/hsl/oklch outputs or the non-hex\nsemantic/theme layers would pass CI unseen (review item M6).\n\nEnumerate every fi\n[…]\n-visualisation is concrete while masterbrand/fuchsia-*\n alias) so future audits don't \"correct\" it.\n\nValue-neutral: no $value changes anywhere; snapshots updated for the\nadded metadata/comments only.",
"is_bot": false,
"headline": "test(tokens): snapshot all generated outputs across spaces and layers…",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-10T01:48:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "57aef7eb289b26301a086118ed99ba3f3a74f3a6",
"body": "* docs(repo): governance docs and tokens source-vs-generated clarity\n\nReview checklist items 7 and 9 (M1, M5), plus the documentation half of\nitem 3 (H1):\n\n- SECURITY.md: private vulnerability reporting, secret-handling rules\n (GitHub Secrets only, immediate rotation on exposure), provenance note.\n\n[…]\npy\n\ntokens/README.md was being mirrored into dist/tokens by copy-styles,\nwhich check:dist flags as an uncommitted artifact. Filter README.md and\n.DS_Store out of the copy — dist ships token data only.",
"is_bot": false,
"headline": "docs(repo): governance docs + tokens source-vs-generated clarity (#85)",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-10T01:23:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e205358c0aa2fa5dd4af1a3e51c669000d5be49a",
"body": "## <small>3.0.1 (2026-06-10)</small>\n\n* fix(pkg): typecheck gate for scripts, npm metadata, v2.33.0 migration note (#84) ([eee7628](https://github.com/digitalnsw/nswds-tokens/commit/eee7628)), closes [#84](https://github.com/digitalnsw/nswds-tokens/issues/84) [#83](https://github.com/digitalnsw/nswds-tokens/issues/83) [#84](https://github.com/digitalnsw/nswds-tokens/issues/84)",
"is_bot": false,
"headline": "chore(release): 3.0.1 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-06-10T01:16:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eee76281c73fc195412359c622941c697322e24c",
"body": "… note (#84)\n\n* fix(pkg): typecheck gate for scripts, npm metadata, v2.33.0 migration note\n\nThree review-checklist items (H2, M2, item-2 residual):\n\n- tsconfig.typecheck.json + `npm run typecheck` + CI job: the base tsconfig\n only covers src/** for the tsup bundle, so scripts/** (Figma sync, colour\n[…]\n test added for the non-colour branch.\n- tsconfig.typecheck.json: comment corrected — the base config is scoped\n to src/**/* and its legacy test/**/* glob matches nothing (the\n directory is tests/).",
"is_bot": false,
"headline": "fix(pkg): typecheck gate for scripts, npm metadata, v2.33.0 migration…",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-10T01:15:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "04702e13c394ce4a8626cc9a29360a54c83a4a17",
"body": "## 3.0.0 (2026-06-09)\n\n* fix(release): honour breaking-change commits as major bumps (C1) (#83) ([eee76bf](https://github.com/digitalnsw/nswds-tokens/commit/eee76bf)), closes [#83](https://github.com/digitalnsw/nswds-tokens/issues/83) [#79](https://github.com/digitalnsw/nswds-tokens/issues/79)\n* ref\n[…]\nhub.com/digitalnsw/nswds-tokens/commit/d0b5d82)), closes [#81](https://github.com/digitalnsw/nswds-tokens/issues/81)\n\n### BREAKING CHANGE\n\n* DTCG sRGB shape for Figma-sync files + migration note (#81)",
"is_bot": false,
"headline": "chore(release): 3.0.0 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-06-09T23:12:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "eee76bf318f43c03ad2b5d3bb96c0b93055c0bd1",
"body": "* fix(release): honour breaking-change commits as major bumps\n\nsemantic-release used the default angular preset, which ignores the\nConventional-Commits `!` bang and only treats a `BREAKING CHANGE:` footer\nas breaking. As a result the DTCG sRGB shape change (build(tokens)!, #79)\nshipped as a MINOR (v\n[…]\nmmit messages\n\n---------\n\nCo-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>\nCo-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>",
"is_bot": false,
"headline": "fix(release): honour breaking-change commits as major bumps (C1) (#83)",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-09T23:11:34Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d0b5d823be1979b1cd980171a0b95862e8733178",
"body": "…ote (#81)\n\n* refactor(tokens)!: convert Figma-sync files to DTCG sRGB shape; add migration note\n\n* refactor(tokens): type DTCG colour $value and harden sRGB round-trip\n\nAddress PR review on the Figma-sync DTCG conversion:\n\n- token_types.ts: widen Token.$value to include DtcgColor so colour\n tokens\n[…]\nColor() so hsl/oklch\n or foreign object shapes no longer reach dtcgToRgb().\n- color.test.ts: cover rgbToDtcg/dtcgToRgb round-trip, alpha handling,\n hex fallback, and isDtcgColor accept/reject cases.",
"is_bot": false,
"headline": "refactor(tokens)!: DTCG sRGB shape for Figma-sync files + migration n…",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-09T10:11:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7509c3eecc9d1a7128ce00d1d20cc40f3338e8ca",
"body": "# [2.33.0](https://github.com/digitalnsw/nswds-tokens/compare/v2.32.3...v2.33.0) (2026-06-09)\n\n### Features\n\n* **tokens:** generate orphan themes from reverse-engineered source (Phase 3b/M5) ([#80](https://github.com/digitalnsw/nswds-tokens/issues/80)) ([cef2086](https://github.com/digitalnsw/nswds-tokens/commit/cef2086e0c945a979f1a001768037a03b66fae23))",
"is_bot": false,
"headline": "chore(release): 2.33.0 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-06-09T10:01:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cef2086e0c945a979f1a001768037a03b66fae23",
"body": "…Phase 3b/M5) (#80)\n\n* feat(tokens): generate orphan themes from reverse-engineered source (Phase 3b/M5)\n\n* feat(tokens): generate src/index.ts, expose all themes first-class (Phase 3b)",
"is_bot": false,
"headline": "feat(tokens): generate orphan themes from reverse-engineered source (…",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-09T10:00:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a87e8377510b41a4ce035e9e55f53fee54c0a98e",
"body": "… 3a, C1+H1) (#79)\n\n* build(tokens): add culori derivation lib + verification guard (Phase 3a-1)\n\n* build(tokens): add DTCG sRGB canonical source + build:canonical (Phase 3a-2)\n\n* build(tokens)!: collapse to DTCG sRGB canonical, derive all spaces (Phase 3a-2)\n\n* build(tokens): round derived hsl/oklch to 6dp for cross-platform determinism",
"is_bot": false,
"headline": "build(tokens)!: DTCG sRGB canonical + derive all colour spaces (Phase…",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-09T08:56:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "49afb06dc336282ae68f1e0a4253442b3a00b575",
"body": "* build(tokens): cut over to Style Dictionary generation (Phase 2)\n\n* build(tokens): clean SD-owned dirs before generating to avoid stale src files",
"is_bot": false,
"headline": "build(tokens): cut over to Style Dictionary generation (Phase 2) (#78)",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-09T05:42:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9ea58ba706edd2d3aec49b1b4a7a11c794b50255",
"body": "…Phase 1c) (#77)",
"is_bot": false,
"headline": "build(tokens): generate all colour spaces (hsl/rgb/oklch) at parity (…",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-09T03:25:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dc22480f7b002a1d01d30df8849e3bdfec31537a",
"body": "…#76)\n\n* build(tokens): add alias-aware Tailwind format at hex parity (Phase 1b)\n\n* build(tokens): make parity allow-lists exact to avoid masking regressions",
"is_bot": false,
"headline": "build(tokens): alias-aware Tailwind format at hex parity (Phase 1b) (…",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-09T02:59:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db78ce8ca1f26fc6729d8d7f949c1c117a37ff5e",
"body": "…a) (#75)\n\n* build(tokens): add js/ts/json/figma custom formats at hex parity (Phase 1a)\n\n* build(tokens): address Phase 1a review (harness coverage, paths, cleanup)",
"is_bot": false,
"headline": "build(tokens): js/ts/json/figma custom formats at hex parity (Phase 1…",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-09T00:01:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31f2f37bc2795e062a41155e2d4171b347feea0e",
"body": "…#74)",
"is_bot": false,
"headline": "build(tokens): scaffold Style Dictionary + parity harness (Phase 0) (…",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-05T06:36:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "678d18068a146ec0f60baab5aadec6a50c46515e",
"body": "## [2.32.3](https://github.com/digitalnsw/nswds-tokens/compare/v2.32.2...v2.32.3) (2026-06-05)\n\n### Bug Fixes\n\n* **release:** disable husky hooks in workflow ([#72](https://github.com/digitalnsw/nswds-tokens/issues/72)) ([36f96ff](https://github.com/digitalnsw/nswds-tokens/commit/36f96ffe4a8cf22471f\n[…]\nissue in code scanning alert no. 4 ([#71](https://github.com/digitalnsw/nswds-tokens/issues/71)) ([bd67922](https://github.com/digitalnsw/nswds-tokens/commit/bd6792216023bc74612f6d8e2f1f0c0cafb255ff))",
"is_bot": false,
"headline": "chore(release): 2.32.3 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-06-05T05:58:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "36f96ffe4a8cf22471f1189c71d4ff0ca6364c92",
"body": "* Initial plan\n\n* fix: disable husky hooks in release workflow\n\n* fix: allow copilot automation branch names\n\n* fix(commitlint): ignore automation initial plan commit\n\n---------\n\nCo-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>",
"is_bot": false,
"headline": "fix(release): disable husky hooks in workflow (#72)",
"author_name": "Copilot",
"author_login": "Copilot",
"committed_at": "2026-06-05T05:57:50Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "69beb6cf702e85110ae914f3500538cdfaad3214",
"body": null,
"is_bot": false,
"headline": "fix(scripts): exit cleanly on sync-figma-to-tokens failure (#73)",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-05T05:56:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bd6792216023bc74612f6d8e2f1f0c0cafb255ff",
"body": "… (#71)\n\n* Potential fix for code scanning alert no. 4: Workflow does not contain permissions\n\nCo-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>\n\n* fix: ignore code scanning autofix commit subject in commitlint\n\n* fix: allow alert-autofix\n[…]\n---\n\nCo-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>\nCo-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>",
"is_bot": false,
"headline": "fix(workflow): address permissions issue in code scanning alert no. 4…",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-05T01:34:06Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d1fff6456f78f45c6ed8f3d71a4a4a277a8f90be",
"body": "…enames (#70)\n\n* build: add token validation, CI, commitlint, docs; decouple token filenames\n\n* fix(validate-tokens): enforce missing-value check; fix docs ts path and typo",
"is_bot": false,
"headline": "build: add token validation, CI, commitlint, docs; decouple token fil…",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-06-05T00:26:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "478d91d71cfb6a88e1e574d963b3c65cf40cc29c",
"body": "## [2.32.2](https://github.com/digitalnsw/nswds-tokens/compare/v2.32.1...v2.32.2) (2026-06-04)\n\n### Bug Fixes\n\n* upgrade axios from 1.16.0 to 1.16.1 ([#69](https://github.com/digitalnsw/nswds-tokens/issues/69)) ([e5ac814](https://github.com/digitalnsw/nswds-tokens/commit/e5ac814c487e27eae86a9b3a0d7073f3c4f13248))",
"is_bot": false,
"headline": "chore(release): 2.32.2 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-06-04T22:55:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e5ac814c487e27eae86a9b3a0d7073f3c4f13248",
"body": "Snyk has created this PR to upgrade axios from 1.16.0 to 1.16.1.\n\nSee this package in npm:\naxios\n\nSee this project in Snyk:\nhttps://app.au.snyk.io/org/digitalnsw/project/10defc35-9edf-43b7-add9-057df586d6ab?utm_source=github&utm_medium=referral&page=upgrade-pr\n\nCo-authored-by: snyk-bot <snyk-bot@snyk.io>",
"is_bot": false,
"headline": "fix: upgrade axios from 1.16.0 to 1.16.1 (#69)",
"author_name": "Digital NSW Team",
"author_login": "DFSIdigital",
"committed_at": "2026-06-04T22:55:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "566d50eb6622fb1a56f741155918f5c6b3540895",
"body": "## [2.32.1](https://github.com/digitalnsw/nswds-tokens/compare/v2.32.0...v2.32.1) (2026-05-24)\n\n### Bug Fixes\n\n* upgrade axios from 1.15.2 to 1.16.0 ([#68](https://github.com/digitalnsw/nswds-tokens/issues/68)) ([8ab9635](https://github.com/digitalnsw/nswds-tokens/commit/8ab96352478689c37e6f74242ae3a5602940643c))",
"is_bot": false,
"headline": "chore(release): 2.32.1 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-05-24T11:06:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8ab96352478689c37e6f74242ae3a5602940643c",
"body": "Snyk has created this PR to upgrade axios from 1.15.2 to 1.16.0.\n\nSee this package in npm:\naxios\n\nSee this project in Snyk:\nhttps://app.au.snyk.io/org/digitalnsw/project/10defc35-9edf-43b7-add9-057df586d6ab?utm_source=github&utm_medium=referral&page=upgrade-pr\n\nCo-authored-by: snyk-bot <snyk-bot@snyk.io>",
"is_bot": false,
"headline": "fix: upgrade axios from 1.15.2 to 1.16.0 (#68)",
"author_name": "Digital NSW Team",
"author_login": "DFSIdigital",
"committed_at": "2026-05-24T11:06:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c41128454b087da928bcf7ecc56532452edc1f3c",
"body": "# [2.32.0](https://github.com/digitalnsw/nswds-tokens/compare/v2.31.0...v2.32.0) (2026-05-01)\n\n### Features\n\n* **workflows:** Add version synchronization and smoke tests, fix module entry point, chore scripts, and update README documentation ([#67](https://github.com/digitalnsw/nswds-tokens/issues/67)) ([3a52936](https://github.com/digitalnsw/nswds-tokens/commit/3a52936af7073622dc698a5e5a0e5fbdf6eb5830))",
"is_bot": false,
"headline": "chore(release): 2.32.0 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-05-01T05:16:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3a52936af7073622dc698a5e5a0e5fbdf6eb5830",
"body": "…ule entry point, chore scripts, and update README documentation (#67)\n\n* feat(workflows): add version synchronization checks to GitHub workflows to ensure release metadata consistency\nfeat(workflows): implement smoke tests for package surface to verify published outputs\nfix(package.json): update mo\n[…]\n for importing JSON files for better compatibility with ES modules\nrefactor(smoke-package-surface): improve error handling by throwing errors with detailed messages and preserving stdout/stderr output",
"is_bot": false,
"headline": "feat(workflows): Add version synchronization and smoke tests, fix mod…",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-05-01T05:15:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e0cd23dfa9c60ee0d55f81343f3b4fb47cc7d862",
"body": "# [2.31.0](https://github.com/digitalnsw/nswds-tokens/compare/v2.30.1...v2.31.0) (2026-04-29)\n\n### Features\n\n* **workflows:** add check-dist-artifacts workflow to verify committed dist artifacts on pull requests ([#66](https://github.com/digitalnsw/nswds-tokens/issues/66)) ([dd5d790](https://github.com/digitalnsw/nswds-tokens/commit/dd5d79063d43be6a9f05e0c8e7bf6838cc04e6eb))",
"is_bot": false,
"headline": "chore(release): 2.31.0 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-04-29T07:24:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd5d79063d43be6a9f05e0c8e7bf6838cc04e6eb",
"body": "…d dist artifacts on pull requests (#66)\n\nfeat(workflows): integrate dist artifacts verification into release workflow to ensure integrity before release\nfeat(package.json): add check:dist script to verify committed dist artifacts\nfeat(scripts): create check-dist script to check if committed dist artifacts are up to date",
"is_bot": false,
"headline": "feat(workflows): add check-dist-artifacts workflow to verify committe…",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-04-29T07:23:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "53d88cc0623e463ae38a2377e25e9817b69bad07",
"body": "## [2.30.1](https://github.com/digitalnsw/nswds-tokens/compare/v2.30.0...v2.30.1) (2026-04-28)\n\n### Bug Fixes\n\n* package.json & package-lock.json to reduce vulnerabilities ([#65](https://github.com/digitalnsw/nswds-tokens/issues/65)) ([7b08eae](https://github.com/digitalnsw/nswds-tokens/commit/7b08eae67d7017e2f24ee02aee037cee650aa856))",
"is_bot": false,
"headline": "chore(release): 2.30.1 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-04-28T00:14:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7b08eae67d7017e2f24ee02aee037cee650aa856",
"body": "The following vulnerabilities are fixed with an upgrade:\n- https://snyk.io/vuln/SNYK-JS-AXIOS-16299921\n\nCo-authored-by: snyk-bot <snyk-bot@snyk.io>",
"is_bot": false,
"headline": "fix: package.json & package-lock.json to reduce vulnerabilities (#65)",
"author_name": "Digital NSW Team",
"author_login": "DFSIdigital",
"committed_at": "2026-04-28T00:13:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e549e2fa3ca298343d5cca3c9a7cf7084957bf3b",
"body": "…acking of analysis files (#64)\n\nfix(package.json): update axios dependency from version 1.15.0 to 1.15.1 for bug fixes and improvements",
"is_bot": false,
"headline": "chore(.gitignore): add snyk-analysis.json to .gitignore to prevent tr…",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-04-20T01:04:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "364431174ced19d74d85198f494fd5d23a555fdd",
"body": "# [2.30.0](https://github.com/digitalnsw/nswds-tokens/compare/v2.29.0...v2.30.0) (2026-04-16)\n\n### Features\n\n* **build-icons, sync_figma_to_tokens:** Add computed property support for sensitive icons and refactor output directory handling ([#63](https://github.com/digitalnsw/nswds-tokens/issues/63)) ([20f246d](https://github.com/digitalnsw/nswds-tokens/commit/20f246d934938e824b092135a795ae36ca9d1236))",
"is_bot": false,
"headline": "chore(release): 2.30.0 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-04-16T00:52:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "20f246d934938e824b092135a795ae36ca9d1236",
"body": "…t for sensitive icons and refactor output directory handling (#63)\n\n* feat(build-icons): add support for computed property names for sensitive icons to enhance code safety\nrefactor(sync_figma_to_tokens): improve output directory handling and update documentation for clarity\n\n* refactor(icons): change icon keys to use computed property names for consistency\nfix(sync_figma_to_tokens.ts): ensure output directory name is provided and resolve path correctly to improve error handling and clarity",
"is_bot": false,
"headline": "feat(build-icons, sync_figma_to_tokens): Add computed property suppor…",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-04-16T00:52:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b50b1cd44e07d4a99d70c4cfabae72c0a62ff663",
"body": "# [2.29.0](https://github.com/digitalnsw/nswds-tokens/compare/v2.28.4...v2.29.0) (2026-04-15)\n\n### Features\n\n* **security:** Enhance Security Measures and Implement Safety Checks for Token and Path Handling ([#62](https://github.com/digitalnsw/nswds-tokens/issues/62)) ([4dca283](https://github.com/digitalnsw/nswds-tokens/commit/4dca2830997882e4ee89cbca338fcb816df904cb))",
"is_bot": false,
"headline": "chore(release): 2.29.0 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-04-15T11:26:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4dca2830997882e4ee89cbca338fcb816df904cb",
"body": "… for Token and Path Handling (#62)\n\n* feat(gitignore): add snyk-code-analysis.json to .gitignore to prevent tracking of sensitive analysis files\nfeat(build-icons): implement renderKey function to handle computed key expressions for icon names\nfix(build-icons): update icon key for password to use co\n[…]\nrectly\nrefactor(token_export): change MutableTokenGroup to TokenGroup for better type safety\nrefactor(token_types): redefine TokenOrTokenGroup and TokenGroup types for improved clarity and consistency",
"is_bot": false,
"headline": "feat(security): Enhance Security Measures and Implement Safety Checks…",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-04-15T11:26:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a97c5d364b043a2b33253aebf423af0f66e83a16",
"body": "…ntrol, consistency, and error handling (#61)\n\n* chore(workflows): update permissions in GitHub workflows for better access control\nchore(workflows): refactor branch name validation to use a shared config script for consistency\nchore(branch-name-config): create a new script to centralize branch nami\n[…]\nnding\n\nCo-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>\n\n---------\n\nCo-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>",
"is_bot": false,
"headline": "chore(scripts): Refactor scripts and workflows for improved access co…",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-04-15T10:04:02Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "2ebd7b75b3fe66574d138ff5c1eea2a38a8d2631",
"body": "## [2.28.4](https://github.com/digitalnsw/nswds-tokens/compare/v2.28.3...v2.28.4) (2026-04-12)\n\n### Bug Fixes\n\n* package.json & package-lock.json to reduce vulnerabilities ([#60](https://github.com/digitalnsw/nswds-tokens/issues/60)) ([619e072](https://github.com/digitalnsw/nswds-tokens/commit/619e072e4841737938ddc10fbf53cbe2b600e8fc))",
"is_bot": false,
"headline": "chore(release): 2.28.4 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-04-12T04:26:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "619e072e4841737938ddc10fbf53cbe2b600e8fc",
"body": "The following vulnerabilities are fixed with an upgrade:\n- https://snyk.io/vuln/SNYK-JS-AXIOS-15965856\n- https://snyk.io/vuln/SNYK-JS-AXIOS-15969258\n\nCo-authored-by: snyk-bot <snyk-bot@snyk.io>",
"is_bot": false,
"headline": "fix: package.json & package-lock.json to reduce vulnerabilities (#60)",
"author_name": "Digital NSW Team",
"author_login": "DFSIdigital",
"committed_at": "2026-04-12T04:26:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ecefa640cf5832e8ddebc86f0a0665b10759b6a5",
"body": "## [2.28.3](https://github.com/digitalnsw/nswds-tokens/compare/v2.28.2...v2.28.3) (2026-03-29)\n\n### Bug Fixes\n\n* upgrade @eslint/eslintrc from 3.3.4 to 3.3.5 ([#59](https://github.com/digitalnsw/nswds-tokens/issues/59)) ([a2e1c0b](https://github.com/digitalnsw/nswds-tokens/commit/a2e1c0b007bad56cccd4ad4f7ed9f5d77c79e3bb))",
"is_bot": false,
"headline": "chore(release): 2.28.3 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-03-29T20:19:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2e1c0b007bad56cccd4ad4f7ed9f5d77c79e3bb",
"body": "Snyk has created this PR to upgrade @eslint/eslintrc from 3.3.4 to 3.3.5.\n\nSee this package in npm:\n@eslint/eslintrc\n\nSee this project in Snyk:\nhttps://app.au.snyk.io/org/digitalnsw/project/8d2587c6-17e3-4cde-98ba-2111b74c61ce?utm_source=github&utm_medium=referral&page=upgrade-pr\n\nCo-authored-by: snyk-bot <snyk-bot@snyk.io>",
"is_bot": false,
"headline": "fix: upgrade @eslint/eslintrc from 3.3.4 to 3.3.5 (#59)",
"author_name": "NSW Design System Team",
"author_login": "DFSIdigital",
"committed_at": "2026-03-29T20:18:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c42d8024ef6c07dce315a1c84b08d0c416e135e9",
"body": "## [2.28.2](https://github.com/digitalnsw/nswds-tokens/compare/v2.28.1...v2.28.2) (2026-03-22)\n\n### Bug Fixes\n\n* upgrade axios from 1.13.5 to 1.13.6 ([#58](https://github.com/digitalnsw/nswds-tokens/issues/58)) ([ad26298](https://github.com/digitalnsw/nswds-tokens/commit/ad262980cab6c09550803f3f3e06a53f3a166b11))",
"is_bot": false,
"headline": "chore(release): 2.28.2 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-03-22T02:46:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad262980cab6c09550803f3f3e06a53f3a166b11",
"body": "Snyk has created this PR to upgrade axios from 1.13.5 to 1.13.6.\n\nSee this package in npm:\naxios\n\nSee this project in Snyk:\nhttps://app.au.snyk.io/org/digitalnsw/project/8d2587c6-17e3-4cde-98ba-2111b74c61ce?utm_source=github&utm_medium=referral&page=upgrade-pr\n\nCo-authored-by: snyk-bot <snyk-bot@snyk.io>",
"is_bot": false,
"headline": "fix: upgrade axios from 1.13.5 to 1.13.6 (#58)",
"author_name": "NSW Design System Team",
"author_login": "DFSIdigital",
"committed_at": "2026-03-22T02:46:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c8c0edf441b691c8aebe4eadd1563671aebda895",
"body": "## [2.28.1](https://github.com/digitalnsw/nswds-tokens/compare/v2.28.0...v2.28.1) (2026-03-17)\n\n### Bug Fixes\n\n* upgrade @eslint/eslintrc from 3.3.3 to 3.3.4 ([#57](https://github.com/digitalnsw/nswds-tokens/issues/57)) ([07baef6](https://github.com/digitalnsw/nswds-tokens/commit/07baef69c4d24c844792dcd959b42da59ef6605f))",
"is_bot": false,
"headline": "chore(release): 2.28.1 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-03-17T21:25:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "07baef69c4d24c844792dcd959b42da59ef6605f",
"body": "Snyk has created this PR to upgrade @eslint/eslintrc from 3.3.3 to 3.3.4.\n\nSee this package in npm:\n@eslint/eslintrc\n\nSee this project in Snyk:\nhttps://app.au.snyk.io/org/digitalnsw/project/8d2587c6-17e3-4cde-98ba-2111b74c61ce?utm_source=github&utm_medium=referral&page=upgrade-pr\n\nCo-authored-by: snyk-bot <snyk-bot@snyk.io>",
"is_bot": false,
"headline": "fix: upgrade @eslint/eslintrc from 3.3.3 to 3.3.4 (#57)",
"author_name": "NSW Design System Team",
"author_login": "DFSIdigital",
"committed_at": "2026-03-17T21:24:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c9385dccb0cbfaf8812c1a43ba4302275caeb70e",
"body": "# [2.28.0](https://github.com/digitalnsw/nswds-tokens/compare/v2.27.2...v2.28.0) (2026-03-10)\n\n### Features\n\n* **create-branch.sh:** enhance branch creation script with push option and usage instructions ([#56](https://github.com/digitalnsw/nswds-tokens/issues/56)) ([ec2e846](https://github.com/digitalnsw/nswds-tokens/commit/ec2e8461fd2cb20752580570eb5b7568d91eda01))",
"is_bot": false,
"headline": "chore(release): 2.28.0 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-03-10T01:09:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec2e8461fd2cb20752580570eb5b7568d91eda01",
"body": "…on and usage instructions (#56)\n\nfeat(git-commit.sh): add interactive push options after commit\nfeat(suggest-branch-name.sh): implement AI-based branch name suggestion with validation and fallback logic\nchore: refactor scripts to improve error handling and user feedback",
"is_bot": false,
"headline": "feat(create-branch.sh): enhance branch creation script with push opti…",
"author_name": "Lauren Hitchon",
"author_login": "laurenhitchon",
"committed_at": "2026-03-10T01:08:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d85571264c488b30cd1a6638c0d0076402da2697",
"body": "## [2.27.2](https://github.com/digitalnsw/nswds-tokens/compare/v2.27.1...v2.27.2) (2026-03-07)\n\n### Bug Fixes\n\n* upgrade dotenv from 17.2.4 to 17.3.1 ([#55](https://github.com/digitalnsw/nswds-tokens/issues/55)) ([df5b61d](https://github.com/digitalnsw/nswds-tokens/commit/df5b61dae13cc744f4cea541694141c14a1d0e85))",
"is_bot": false,
"headline": "chore(release): 2.27.2 [skip ci]",
"author_name": "semantic-release-bot",
"author_login": "semantic-release-bot",
"committed_at": "2026-03-07T05:16:05Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 78,
"commits_last_year": 178,
"latest_release_at": "2026-07-17T04:18:22Z",
"latest_release_tag": "v4.2.2",
"releases_from_tags": false,
"days_since_last_push": 4,
"active_weeks_last_year": 30,
"days_since_latest_release": 4,
"mean_days_between_releases": 3.8
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 87,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "@nswds/tokens",
"exists": true,
"license": "MPL-2.0",
"keywords": [
"design-tokens",
"design-system",
"dtcg",
"w3c-design-tokens",
"css-variables",
"tailwind",
"figma",
"nsw-government",
"nswds"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@nswds/tokens",
"is_deprecated": false,
"latest_version": "4.2.2",
"repository_url": "https://github.com/digitalnsw/nswds-tokens",
"versions_count": 81,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 2,
"monthly_downloads": 7440,
"first_published_at": "2025-03-21T06:47:40.926000Z",
"latest_published_at": "2026-07-17T04:18:20.818000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 4
}
]
},
"popularity": {
"forks": 0,
"stars": 2,
"watchers": 1,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [
{
"date": "2026-02-13",
"count": 1
},
{
"date": "2026-05-24",
"count": 1
}
],
"complete": true,
"collected": 2,
"total_stars": 2
},
"open_issues_and_prs": 1
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"scripts/tsconfig.json",
"tests/tsconfig.json",
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 175543,
"source_files_sampled": 150,
"oversized_source_files": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 120,
"open_issues": 1,
"closed_ratio": 0.667,
"closed_issues": 2,
"closed_unmerged_prs": 4
},
"bus_factor": 1,
"bot_contributors": 3,
"top_contributors": [
{
"type": "User",
"login": "laurenhitchon",
"commits": 138,
"avatar_url": "https://avatars.githubusercontent.com/u/2225796?v=4"
},
{
"type": "User",
"login": "semantic-release-bot",
"commits": 78,
"avatar_url": "https://avatars.githubusercontent.com/u/32174276?v=4"
},
{
"type": "User",
"login": "DFSIdigital",
"commits": 36,
"avatar_url": "https://avatars.githubusercontent.com/u/47402941?v=4"
}
],
"contributors_sampled": 3,
"top_contributor_share": 0.548
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ai-pr-title.yml",
"check-dist-artifacts.yml",
"ci.yml",
"commit-types-sync.yml",
"commitlint.yml",
"openai-pr-description.yml",
"release.yml",
"shared-ci.yml",
"sync-figma-to-tokens.yml",
"sync-tokens-to-figma.yml",
"validate-branch-name.yml"
],
"has_docs_dir": true,
"linter_configs": [
"eslint.config.js"
],
"has_editorconfig": true,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 3,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "6 out of 6 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/26 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 6,
"reason": "project has 2 contributing companies or organizations -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 9,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "40 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "072514486d5132f794f99e6b749ac9b12abc240a",
"ran_at": "2026-07-21T22:40:39Z",
"aggregate_score": 5.9,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-17T04:18:12Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-17T04:16:56Z",
"ci_last_conclusion": null,
"oldest_open_issues": [
{
"number": 126,
"created_at": "2026-07-17T02:46:53Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/digitalnsw/nswds-tokens",
"host": "github.com",
"name": "nswds-tokens",
"owner": "digitalnsw"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": null,
"notes": [],
"value": 71,
"inputs": {
"security": 59,
"vitality": 91,
"community": 49,
"governance": 61,
"engineering": 90
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 91,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"commits_last_year": 178,
"human_commit_share": 0.96,
"days_since_last_push": 4,
"active_weeks_last_year": 30
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 4 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 4
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "30/52 weeks with commits",
"points": 20.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 30
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "178 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 178
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 78,
"latest_release_tag": "v4.2.2",
"releases_from_tags": false,
"days_since_latest_release": 4,
"mean_days_between_releases": 3.8
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "78 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 78
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 4 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 4
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~3.8 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 3.8
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 4,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 4 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 4
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 49,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 2,
"watchers": 1,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "below_threshold"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "2 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 2
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "1 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 1
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "excellent",
"name": "Community health",
"note": null,
"notes": [],
"value": 92,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MPL-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MPL-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 64,
"inputs": {
"packages": [
"@nswds/tokens"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 7440
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "7,440 downloads/month across npm",
"points": 51.6,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 7440,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 61,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 29,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 3,
"top_contributor_share": 0.548
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 55% of commits",
"points": 10.2,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 55
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "3 contributors",
"points": 4.1,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 3
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 6,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"merged_prs": 120,
"open_issues": 1,
"closed_issues": 2,
"issue_closed_ratio": 0.667,
"closed_unmerged_prs": 4
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "67% of issues closed",
"points": 31.2,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 67
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "120/124 decided PRs merged",
"points": 37,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 120,
"decided": 124
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/26 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 62,
"inputs": {
"followers": 35,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "digitalnsw",
"public_repos": 13,
"account_age_days": 3065
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "35 followers of digitalnsw",
"points": 11.2,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 35,
"login": "digitalnsw"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "13 public repos, account ~8 yr old",
"points": 20.3,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 13
}
},
{
"code": "account_age_years",
"params": {
"years": 8
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"@nswds/tokens"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 4
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 4 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 4
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "81 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 81
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 90,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "excellent",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": true,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "11 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 11
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "eslint.config.js",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.js"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 6.4,
"status": "met",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "6 out of 6 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": "https://www.npmjs.com/package/@nswds/tokens",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://www.npmjs.com/package/@nswds/tokens",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 59,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 59,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 5.9
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "6 out of 6 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/26 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "40 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 3
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 61,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "96 of 96 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 96,
"sampled": 96
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 62,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"package-lock.json"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"scripts/tsconfig.json",
"tests/tsconfig.json",
"tsconfig.json"
],
"agent_commit_share": 0.04,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "eslint.config.js",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.js"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "scripts/tsconfig.json, tests/tsconfig.json, tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "scripts/tsconfig.json, tests/tsconfig.json, tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "4 of the last 100 commits agent-authored or agent-credited",
"points": 8,
"status": "partial",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 4,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 175543,
"source_files_sampled": 150,
"oversized_source_files": 1
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "1/150 source files over 60KB",
"points": 54.6,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 150,
"oversized": 1
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"deps.dev does not index npm:@nswds/tokens@4.2.2; advisories assessed against the repository dependency graph instead"
],
"report_type": "repository",
"generated_at": "2026-07-21T22:40:51.197046Z",
"schema_version": "0.25.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/d/digitalnsw/nswds-tokens.svg",
"full_name": "digitalnsw/nswds-tokens",
"license_state": "standard",
"license_spdx": "MPL-2.0"
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with digitalnsw/nswds-tokens. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.25.0 — full methodology · metrics wiki.
