Public recordModerate
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-31 07:21 UTC
eventicle / eventiclejs
Event based systems, made easy.
eventicle/eventiclejs holds a health index of 57 out of 100, placing it in the Moderate band. It scores highest on Vitality (73/100) and lowest on Community & Adoption (41/100). It was last updated 8 days ago. A single contributor accounts for most of its recent work.
57
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
57
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
eventicleOrganization
0 followers5 public repossince Jan 2020
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish |
|---|---|---|---|---|---|
| npm | @eventicle/eventiclejs | 1.3.6 | 3,184 | 171 | 8 days ago |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
73
Development activity
65Moderate
How it's scored
| 28.8/36 | Push recency — last push 8 days ago |
| 9.7/36 | Commit cadence — 14/52 weeks with commits |
| 16.2/18 | Commit volume — 63 commits in the last year |
| 10/10 | OpenSSF Scorecard: Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
Inputs used
| commits_last_year | 63 |
| human_commit_share | 1 |
| days_since_last_push | 8 |
| active_weeks_last_year | 14 |
Release discipline
84Good
How it's scored
| 27/27 | Ships releases — 10 releases published |
| 36/36 | Release recency — latest release 8 days ago |
| 12.6/27 | Release cadence — a release every ~208.5 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 10 |
| latest_release_tag | v1.3.6 |
| releases_from_tags | no |
| days_since_latest_release | 8 |
| mean_days_between_releases | 208.5 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
41
Popularity & adoption
22Critical
How it's scored
| 14.6/60 | Stars — 9 stars |
| 5.8/25 | Forks — 6 forks |
| 1.7/15 | Watchers — 3 watchers |
Inputs used
| forks | 6 |
| stars | 9 |
| watchers | 3 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
50Moderate
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (Apache-2.0) |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Ecosystem adoption (downloads)
58Moderate
How it's scored
| 46.7/80 | Monthly downloads — 3,184 downloads/month across npm |
| 0/20 | Registry dependents — not reported by this ecosystem |
Inputs used
| packages | @eventicle/eventiclejs |
| dependents | — |
| ecosystems | npm |
| total_downloads | — |
| monthly_downloads | 3,184 |
Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
53
Maintainer resilience (bus factor)
22Critical
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 2.2/22.5 | Commit distribution — top contributor authored 90% of commits |
| 8.1/13.5 | Contributor breadth — 6 contributors |
| 3/10 | OpenSSF Scorecard: Contributors — project has 1 contributing companies or organizations -- score normalized to 3 |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 6 |
| top_contributor_share | 0.903 |
Issue & PR responsiveness
58Moderate
How it's scored
| 23.4/46.8 | Issue resolution — 50% of issues closed |
| 34.3/38.3 | PR acceptance — 26/29 decided PRs merged |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/15 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 26 |
| open_issues | 2 |
| closed_issues | 2 |
| issue_closed_ratio | 0.5 |
| closed_unmerged_prs | 3 |
Ownership & stewardship
48At risk
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 0/25 | Owner reach — 0 followers of eventicle |
| 17.7/25 | Track record — 5 public repos, account ~6 yr old |
Inputs used
| followers | 0 |
| owner_type | Organization |
| is_verified | — |
| owner_login | eventicle |
| public_repos | 5 |
| account_age_days | 2,389 |
Package maintenance
100Excellent
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on npm |
| 35/35 | Publish recency — latest publish 8 days ago |
| 20/20 | Version history — 171 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | @eventicle/eventiclejs |
| ecosystems | npm |
| any_deprecated | no |
| min_days_since_publish | 8 |
Engineering Quality
Are baseline engineering and documentation practices in place?
72
Engineering practices
66Moderate
How it's scored
| 24/24 | CI workflows — 2 workflow(s) |
| 24/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 6.4/6.4 | .editorconfig |
| 12/20 | OpenSSF Scorecard: CI-Tests — 2 out of 3 merged PRs checked by a CI test -- score normalized to 6 |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | yes |
| has_linter_config | no |
| has_precommit_config | no |
Documentation
80Good
How it's scored
| 30/30 | README |
| 25/25 | Documentation directory |
| 15/15 | Documentation / homepage site — https://book.eventicle.com |
| 10/10 | Repository description |
| 0/10 | Topics |
| 0/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | no |
| homepage | https://book.eventicle.com |
| has_readme | yes |
| has_docs_dir | yes |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
42
Security posture
39At risk
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 1.5/2.5 | CI-Tests — 2 out of 3 merged PRs checked by a CI test -- score normalized to 6 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/15 approved changesets -- score normalized to 0 |
| 0.8/2.5 | Contributors — project has 1 contributing companies or organizations -- score normalized to 3 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 5/5 | Packaging — packaging workflow detected |
| 3/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 6 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 33 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 17 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 1 |
| scorecard_aggregate | 3.9 |
Excluded from scoring (no data or not applicable): signed_releases. Remaining weights renormalized.
Dependency advisories
52Moderate
How it's scored
| 14/35 | Direct dependencies free of known advisories — 1 affected: uuid 9.0.1 (high 7.5) |
| 7.6/25 | Indirect dependencies free of known advisories — 3 affected: brace-expansion 1.1.17 (high 7.5), js-yaml 4.1.1 (high 7.5), ajv 8.13.0 (moderate 5.3) |
| 30.3/40 | No advisories left outstanding — 2 advisory-carrying package(s) unaddressed past 90 days; oldest published 169 days ago |
Inputs used
| source | osv |
| advisories | 5 |
| affected_packages | 4 |
| assessed_packages | 206 |
| unassessed_packages | 0 |
| affected_by_severity | high 3, moderate 1 |
| direct_affected_packages | 1 |
Matched the npm:@eventicle/eventiclejs@1.3.6 runtime dependency closure — what installing the published package pulls in — 206 packages. Reachability is not analyzed.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
45
Agent context & guidance
16Critical
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 16.5/40 | Legible commit history — 31 of 100 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.31 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
How it's scored
| 0/18 | One-command bootstrap |
| 22/22 | Automated tests |
| 0/11 | Lint / format config |
| 11/11 | Static type checking — docs/modules/book/examples/app/tsconfig.json, tsconfig.json |
| 10/10 | Reproducible environment — lockfile |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 100 |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 6/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 6 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | package-lock.json, pnpm-lock.yaml |
| has_dockerfile | no |
| typed_language | yes |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | docs/modules/book/examples/app/tsconfig.json, tsconfig.json |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
Code legibility for models
99Excellent
How it's scored
| 45/45 | Type-checkable code — TypeScript (statically typed) |
| 54/55 | Manageable file sizes — 1/56 source files over 60KB |
Inputs used
| primary_language | TypeScript |
| largest_source_bytes | 70,041 |
| source_files_sampled | 56 |
| oversized_source_files | 1 |
Machine-readable interfaces
40At risk
How it's scored
| 0/40 | API schema (OpenAPI/GraphQL/proto) |
| 0/20 | MCP server |
| 40/40 | Runnable examples — examples |
Inputs used
| example_dirs | examples |
| has_mcp_signal | no |
| api_schema_files | — |
Key facts
9GitHub stars
6contributors
63commits, last 12 months
8days since last push
10releases
1bus factor
2open issues
npmpackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
Star and fork history 0 ★ / 6 ⇿
0Stars
6Forks
4Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 0Patch 4
Each point covers 5 days.
OpenSSF Scorecard 3.9 / 10
3.9aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 6 | CI-Tests | 2 out of 3 merged PRs checked by a CI test -- score normalized to 6 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/15 approved changesets -- score normalized to 0 |
| 3 | Contributors | project has 1 contributing companies or organizations -- score normalized to 3 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 10 | Packaging | packaging workflow detected |
| 6 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 6 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| n/a | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 33 existing vulnerabilities detected |
Direct dependencies 19
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| npm | @confluentinc/kafka-javascript | ^1.9.1 | package.json |
| npm | @microsoft/api-documenter | ^7.19.27 | package.json |
| npm | @microsoft/api-extractor | ^7.33.7 | package.json |
| npm | @types/crypto-js | ^4.1.1 | package.json |
| npm | @types/serialize-error | ^4.0.1 | package.json |
| npm | api-documenter-yaml-to-antora-asciidoc | ^0.0.0-11 | package.json |
| npm | asynchronous-local-storage | ^1.0.2 | package.json |
| npm | avsc | ^5.7.7 | package.json |
| npm | cron-parser | ^5.5.0 | package.json |
| npm | crypto-js | ^4.1.1 | package.json |
| npm | deep-equal | ^2.1.0 | package.json |
| npm | fast-safe-stringify | ^2.1.1 | package.json |
| npm | ioredis | ^5.10.0 | package.json |
| npm | lodash | ^4.17.21 | package.json |
| npm | node-cron | ^4.2.1 | package.json |
| npm | serialize-error | ^7.0.1 | package.json |
| npm | uuid | ^9.0.0 | package.json |
| npm | winston | ^3.8.2 | package.json |
| npm | xstate | ^4.35.1 | package.json |
All dependencies not collected
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Dependency advisories 4
Installing npm:@eventicle/eventiclejs@1.3.6 pulls in 206 packages, direct and transitive: 4 carry known advisories, of which 1 are direct dependencies.
| Package | Version | Relation | Severity | Advisories | Fixed in |
|---|---|---|---|---|---|
| uuid | 9.0.1 | direct | high | 1 | 13.0.1 |
| brace-expansion | 1.1.17 | indirect | high | 1 | 5.0.8 |
| js-yaml | 4.1.1 | indirect | high | 2 | 4.3.0 |
| ajv | 8.13.0 | indirect | moderate | 1 | 8.18.0 |
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 1715,
"has_wiki": false,
"homepage": "https://book.eventicle.com",
"languages": {
"TypeScript": 335337
},
"pushed_at": "2026-07-22T08:19:17Z",
"created_at": "2020-10-19T10:54:38Z",
"owner_type": "Organization",
"updated_at": "2026-07-22T08:19:26Z",
"description": "Event based systems, made easy.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "master",
"license_spdx_raw": "Apache-2.0",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript"
]
},
"owner": {
"blog": null,
"name": null,
"type": "Organization",
"login": "eventicle",
"company": null,
"location": null,
"followers": 0,
"avatar_url": "https://avatars.githubusercontent.com/u/59878596?v=4",
"created_at": "2020-01-14T14:52:22Z",
"is_verified": null,
"public_repos": 5,
"account_age_days": 2389
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v1.3.6",
"kind": "patch",
"published_at": "2026-07-22T08:19:24Z"
},
{
"tag": "v1.3.5",
"kind": "patch",
"published_at": "2026-07-22T07:42:28Z"
},
{
"tag": "v1.3.4",
"kind": "patch",
"published_at": "2026-07-22T06:17:27Z"
},
{
"tag": "v1.3.3",
"kind": "patch",
"published_at": "2026-07-20T15:21:37Z"
},
{
"tag": "v1.3.2",
"kind": "patch",
"published_at": "2026-07-03T12:52:54Z"
},
{
"tag": "v1.1.8",
"kind": "patch",
"published_at": "2025-10-14T07:56:00Z"
},
{
"tag": "v1.0.4",
"kind": "patch",
"published_at": "2024-08-28T13:59:48Z"
},
{
"tag": "0.0.60",
"kind": "patch",
"published_at": "2021-09-10T09:46:47Z"
},
{
"tag": "0.0.56",
"kind": "patch",
"published_at": "2021-06-22T07:15:31Z"
},
{
"tag": "0.0.49",
"kind": "patch",
"published_at": "2021-06-01T16:45:33Z"
}
],
"recent_commits": [
{
"oid": "6a02f12f05462e9d5762b6308d236dc416e9b10a",
"body": null,
"is_bot": false,
"headline": "Release v1.3.6",
"author_name": "Eventicle Bot",
"author_login": "daviddawson",
"committed_at": "2026-07-22T08:19:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bb18bdf9780408979c4e2ed0c71ad6f3a1ce3faf",
"body": "fix: add pause/resume to EventSubscriptionControl for hot and cold streams",
"is_bot": false,
"headline": "Merge pull request #35 from eventicle/fix/subscription-pause-resume",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2026-07-22T08:18:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "afa7f76f6c0d9b7132eaf2134fecac49d201e7e8",
"body": "…use-resume",
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/master' into fix/subscription-pa…",
"author_name": "David Dawson",
"author_login": null,
"committed_at": "2026-07-22T08:17:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "acd913ef35b65cff08b69ef26b55b12d6561548d",
"body": null,
"is_bot": false,
"headline": "Release v1.3.5",
"author_name": "Eventicle Bot",
"author_login": "daviddawson",
"committed_at": "2026-07-22T07:42:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e15fb5d61a70edac43a6074b06df678078d3205c",
"body": null,
"is_bot": false,
"headline": "Release v1.3.4",
"author_name": "Eventicle Bot",
"author_login": "daviddawson",
"committed_at": "2026-07-22T06:17:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "14cb86dbfbfbd8a0125f40a0f1d140869d68fc34",
"body": null,
"is_bot": false,
"headline": "Release v1.3.3",
"author_name": "Eventicle Bot",
"author_login": "daviddawson",
"committed_at": "2026-07-20T15:21:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3a4a7b6be772a270ccd0c36a93502efd18992c6e",
"body": "- coldHotStream now returns working pause/resume (topic-level cons.pause/resume)\n via the same topics-hoisted-out-of-retry-callback pattern used for hotStream\n- New integration test covers coldHotStream pause/resume with the same shape as\n hotStream (baseline emit -> pause -> emit-during-pause -> \n[…]\narmup pause before emit loop and\n deadline bumped 60s -> 90s, so it survives slower rebalance when running after\n earlier tests in the file have registered other consumer groups against the\n broker",
"is_bot": false,
"headline": "fix: add pause/resume to coldHotStream + harden hotStream test timing",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2026-07-20T14:03:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8657210382de739f30a13772bf1ac5361d44c97c",
"body": "The EventSubscriptionControl interface and its implementations were missing\npause/resume methods, making it impossible for consumers to implement\nbackpressure by pausing Kafka consumption.\n\nChanges:\n- Add optional pause/resume to EventSubscriptionControl interface\n- Return pause/resume from hotStrea\n[…]\n proxy\n\nThis fixes BID-13591 where notification-service backpressure was silently\nfailing because the proxy swallowed the pause/resume methods.\n\nRelease tagging is handled by the release.yml workflow.",
"is_bot": false,
"headline": "fix: add pause/resume to EventSubscriptionControl for hot streams",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2026-07-10T09:06:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "161dfbb248bdda23f2aa9e073a9e5f6978bd8e1e",
"body": null,
"is_bot": false,
"headline": "Release v1.3.2",
"author_name": "Eventicle Bot",
"author_login": "daviddawson",
"committed_at": "2026-07-03T12:52:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ae6a2188cb021f2241a44b93dc7f8aa4cf08b52b",
"body": null,
"is_bot": false,
"headline": "chore: bump typescript to ^5.9.3",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2026-06-30T06:10:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "461be929f96bc2a342a1064257fed19158910f5e",
"body": "The confluent KafkaJS compatibility layer does not expose consumer\nlifecycle events (.on('consumer.crash'), .on('consumer.disconnect'),\n.on('consumer.stop')) that the original kafkajs client provided.\n\nHealth status is only updated at consumer startup (after successful\nsubscribe/run) and on explicit\n[…]\nlose/disconnect. Runtime disconnects\nor broker-initiated rebalances are handled internally by librdkafka\nbut will not be reflected in getKafkaClientHealth().\n\nThis addresses review item 3 from PR #32.",
"is_bot": false,
"headline": "docs: document health monitoring limitation after confluent migration",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2026-06-29T16:50:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b532a30c47cd12b5e58e050681abf927a606e122",
"body": null,
"is_bot": false,
"headline": "Release v1.3.1",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2026-06-26T16:35:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "74bc729a8103e347aced2e35c4a1527bdbb51f5e",
"body": "The confluent kafkaJS compat layer rejects unknown keys like logCreator\nat consumer.connect() time. Since logCreator is a kafkajs-specific\nfactory pattern that has no equivalent in the confluent client, strip it\nfrom the config to maintain backward compatibility with services that\npass logCreator in their KafkaConfig.",
"is_bot": false,
"headline": "fix: strip logCreator from config before passing to confluent client",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2026-06-26T16:35:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "02251b9cc8b68100ffa38872895a7ffe84a471e9",
"body": null,
"is_bot": false,
"headline": "Release v1.3.0",
"author_name": "Eventicle Bot",
"author_login": "daviddawson",
"committed_at": "2026-06-20T08:56:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cbe1a6006afd74a593745036c820d5dabc4270ff",
"body": null,
"is_bot": false,
"headline": "fix: use api-extractor --local to allow warnings in doc generation",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2026-06-20T08:55:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b65aa66b8816ae6befa2a3749c015b42b215f850",
"body": "feat: migrate from kafkajs to @confluentinc/kafka-javascript",
"is_bot": false,
"headline": "Merge pull request #32 from eventicle/feature/confluent-kafka-migration",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2026-06-20T07:51:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "191e40f7b5e86f4ae9b0d1f8536538f17be30a8d",
"body": "1. Replace yarn refs with npm in scripts, chain with && (P1)\n2. coldHotStream.close() now resets healthStatus (P1)\n3. Move health assignment after subscribe/run succeed (P2)\n4. Spread full consumerConfigFactory output instead of cherry-picking (P1)",
"is_bot": false,
"headline": "fix: address review feedback on confluent migration",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2026-06-18T05:35:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c194175979d9458855dd95c76cc1fcb996bf2596",
"body": "The confluent client's consumer group rebalance can take variable time\nin CI. Instead of a fixed pre-emit wait, retry emitting until the\nconsumer confirms receipt. This handles the case where the consumer\nisn't assigned partitions yet when the first emit fires.",
"is_bot": false,
"headline": "fix: hot stream test retries emit until consumer is ready",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2026-06-10T12:38:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "debbc26ce606374e4396a44f69ea564e057dc3e5",
"body": "… test\n\nReplace fixed pause() calls with a waitFor() polling helper that checks\nfor event delivery with a 30s timeout. The confluent librdkafka client\nhas variable rebalance timing in CI that makes fixed sleeps unreliable.",
"is_bot": false,
"headline": "fix: use polling waitFor instead of fixed sleeps in kafka integration…",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2026-06-10T12:34:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cd515b2fff2867f27d73008c3e2d8b914440c2ba",
"body": "The confluent librdkafka client takes longer to complete consumer group\nrebalancing than kafkajs did. Added proper consumerConfig/consumerRunConfig\nmatching the regression test pattern, and increased wait times for event\ndelivery.",
"is_bot": false,
"headline": "fix: increase kafka integration test timeouts and add consumer config",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2026-06-10T12:29:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "308871b2e61cf45d18bad23e7cb5cdb30cd62d9f",
"body": "- eventclient-redis.integration.ts: use GenericContainer('redis:7-alpine')\n instead of hardcoded localhost:6379\n- eventclient-kafka.integration.ts: use KafkaContainer('confluentinc/cp-kafka:7.5.0')\n instead of hardcoded localhost:9092\n- Add @testcontainers/redis dev dependency\n- CI now runs all integration tests (all self-contained via testcontainers)",
"is_bot": false,
"headline": "fix: migrate integration tests to testcontainers",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2026-06-10T09:25:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5806624923a23cfb6ab8a038ee5a9cc360f03cf6",
"body": "The legacy eventclient-kafka and eventclient-redis integration tests\nrequire external infrastructure (localhost:9092, localhost:6379) which\nis not available in GitHub Actions. Only the kafka-regression test\nuses testcontainers and is self-contained.",
"is_bot": false,
"headline": "fix(ci): run only testcontainer-based integration tests in CI",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2026-06-10T09:16:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd49b62687cbc36e67bba361c64b54e463bd47e0",
"body": "…cks)\n\n- Update cron-parser to ^5.0.0 (master uses CronExpressionParser API)\n- Update node-cron to ^4.0.0 (master uses .destroy() method)\n- Remove @types/node-cron (no v4 types published, node-cron 4 works untyped)\n- Fix kafka-throttle tests: use KafkaJSError instances instead of plain\n objects (isKafkaJSProtocolError checks instanceof)",
"is_bot": false,
"headline": "fix: resolve CI failures (cron-parser v5, node-cron v4, test error mo…",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2026-06-10T07:00:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "45687c143eb81a1b216957d435f47107d3f8ab29",
"body": "…afka-migration",
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/master' into feature/confluent-k…",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2026-06-09T21:29:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7bec07f167a745218c04092dda9854bb86f31879",
"body": "…n.lock)",
"is_bot": false,
"headline": "fix(ci): use npm instead of yarn (repo has package-lock.json, not yar…",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2026-06-09T21:27:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "792a4eeb56b56c4b0d5d1ec9e180d2e0cb3e0c1e",
"body": "CI workflow:\n- Runs on push to master and on pull requests\n- Builds TypeScript, runs unit tests, runs integration tests\n (testcontainers Kafka)\n\nRelease workflow (manual dispatch):\n- Runs unit tests\n- Builds dist/\n- Generates API docs\n- Bumps version (patch/minor/major)\n- Commits release to master with tag\n- Publishes to npm\n- Creates GitHub Release with auto-generated notes\n- Triggers eventicle-docs rebuild",
"is_bot": false,
"headline": "ci: add GitHub Actions for test (push+PR) and release workflows",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2026-06-09T20:18:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0f2d2296b9060615a5274f19d1b20aad182e3cb1",
"body": "Replace kafkajs (unmaintained) with the official Confluent Kafka\nJavaScript client using its kafkajs compatibility layer.\n\nChanges:\n- eventclient-kafka.ts: import swap, consumer config restructured\n (fromBeginning/autoCommit at consumer level), error detection via\n numeric codes instead of error n\n[…]\nfluentinc/kafka-javascript\n- kafka-throttle.test.ts: updated for new error types\n- kafka-regression.integration.ts: new 14-test regression pack using\n testcontainers for end-to-end Kafka verification",
"is_bot": false,
"headline": "feat: migrate from kafkajs to @confluentinc/kafka-javascript",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2026-06-09T20:17:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "737c1dad6797a96170356320df41a46e7534de79",
"body": null,
"is_bot": false,
"headline": "Bump version to 1.2.0",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2026-05-06T15:46:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f5323eddbb4ba6354d0274f61425ad97c66b2ef",
"body": null,
"is_bot": false,
"headline": "Merge branch 'feature/saga-hot-cold-consumer-groups'",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2026-05-06T15:38:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5a0dbf9f4583bca23c39b138ae7a45060e91e0d0",
"body": null,
"is_bot": false,
"headline": "Fix saga subscription lifecycle and scheduler compatibility",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2026-05-06T15:38:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "75a26830ed1a8d9cea13855b086491c56993bf77",
"body": "…itisation\n\nWhen a saga supplies an isHotPredicate, registerSaga subscribes two Kafka\nconsumer groups on the same streams: saga-${name} (cold lane, processes\nevents where the predicate returns false) and saga-${name}-hot (hot lane,\nprocesses events where the predicate returns true). Each lane has it\n[…]\n without withHotPredicate get the existing\nsingle-consumer-group behaviour unchanged.\n\nwithHotParallelEvents(n) configures the hot lane's slot count separately\nfrom the cold lane's parallelEventCount.",
"is_bot": false,
"headline": "Saga: optional withHotPredicate for two-consumer-group hot/cold prior…",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2026-04-28T13:20:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8cf2060ad7c815693c6e60675557d8fa6d9fe2f4",
"body": "- Implement parallelEventCount with chunked Promise.all concurrency\n- Add 18 unit tests for buildStreamEntryFields/parseStreamEntry round-trip\n- Export buildStreamEntryFields and parseStreamEntry for testability\n- Remove dead claimIdleTimeMs config (XCLAIM not yet implemented)",
"is_bot": false,
"headline": "Address QA review: parallelEventCount, codec tests, dead config",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2026-03-09T11:40:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "06aa94ea16deac9c3b76f1bdd201dbe4faf047f6",
"body": null,
"is_bot": false,
"headline": "Update generated files as of b8a34b34cb3b3f50bd8536827f1f69817348f3aa",
"author_name": "Eventicle Bot",
"author_login": "daviddawson",
"committed_at": "2026-03-09T11:27:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b8a34b34cb3b3f50bd8536827f1f69817348f3aa",
"body": "- EventclientRedis with emit, hotStream, hotRawStream, coldStream, coldHotStream\n- Uses ioredis with XADD, XREADGROUP, XRANGE, XACK, consumer groups\n- Poison pill protection, MAXLEN trimming, consumer group cleanup\n- Factory: eventClientOnRedis(config) with transactional wrapper\n- 10 integration tests covering all stream types and edge cases",
"is_bot": false,
"headline": "Add Redis Streams EventClient implementation",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2026-03-09T11:27:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "805574fffc1c6590ad605510e4bd29c925166474",
"body": "…n-cleanup\n\nFeature/aggregate observer admin cleanup",
"is_bot": false,
"headline": "Merge pull request #29 from eventicle/feature/aggregate-observer-admi…",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2025-11-11T08:53:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f06617e87d04b869a9a56d78335b84a692c43094",
"body": null,
"is_bot": false,
"headline": "Create LICENSE",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2025-11-03T09:52:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "376c50dd95689ee44b6b5d0c2a24e9d5ba002007",
"body": null,
"is_bot": false,
"headline": "Update generated files as of 0c5b429d86cf1ef88e4a2ce8733792f6d679b323",
"author_name": "Eventicle Bot",
"author_login": "daviddawson",
"committed_at": "2025-10-31T18:42:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c5b429d86cf1ef88e4a2ce8733792f6d679b323",
"body": null,
"is_bot": false,
"headline": "Bump version to 1.1.9-beta.1",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2025-10-31T09:28:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c5bd6cd585d0843f06f66fcca03ebbec2b2b56b0",
"body": "The shutdown() method now clears:\n- subscriptions array\n- consumerGroups array\n- event emitter listeners\n- streams Map\n\nThis prevents stale subscriptions and consumer group conflicts when\nreinitializing the event client in test scenarios.",
"is_bot": false,
"headline": "Fix shutdown() to properly clear all event client state",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2025-10-31T09:27:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91696cd504b88c48536ab108854a70a705ddf610",
"body": null,
"is_bot": false,
"headline": "Release 1.1.8",
"author_name": "Eventicle Bot",
"author_login": "daviddawson",
"committed_at": "2025-10-14T07:55:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "69907aba0e3f8d0480204e146d3c34a4f6ffd1c6",
"body": null,
"is_bot": false,
"headline": "Remove custom .npmrc, let setup-node handle auth",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2025-10-14T07:19:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a6f6fafb2f5ecc5ca0b0cad5344d80b1b20ada4",
"body": null,
"is_bot": false,
"headline": "Release 1.1.7",
"author_name": "Eventicle Bot",
"author_login": "daviddawson",
"committed_at": "2025-10-14T07:16:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1517aff5b5c504f51db7ef614c2c8c712f55101a",
"body": null,
"is_bot": false,
"headline": "Configure npm auth token for publishing",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2025-10-14T07:14:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eeef2297e2ce9a04fbaed6088e725ab4b9fcddd3",
"body": null,
"is_bot": false,
"headline": "Release 1.1.6",
"author_name": "Eventicle Bot",
"author_login": "daviddawson",
"committed_at": "2025-10-14T07:12:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "46c2aa385c042e4218e5b17f11f0822341e380ea",
"body": null,
"is_bot": false,
"headline": "Release 1.1.5",
"author_name": "Eventicle Bot",
"author_login": "daviddawson",
"committed_at": "2025-10-14T07:06:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b4fef182644a7e8eb267eac7418c94682304ecb3",
"body": null,
"is_bot": false,
"headline": "Release 1.1.4",
"author_name": "Eventicle Bot",
"author_login": "daviddawson",
"committed_at": "2025-10-14T07:02:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38008421c92f9bc35d3428fc5b6f86d9a6897bea",
"body": null,
"is_bot": false,
"headline": "Release 1.1.3",
"author_name": "Eventicle Bot",
"author_login": "daviddawson",
"committed_at": "2025-10-13T15:25:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6daf0e5e2a4407ec208f39cdb00573821e69f7b9",
"body": null,
"is_bot": false,
"headline": "Add npm publish config and use npm instead of yarn for publishing",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2025-10-13T15:23:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b30b8417437898ebd5d08825401f1511d0d96504",
"body": null,
"is_bot": false,
"headline": "Release 1.1.2",
"author_name": "Eventicle Bot",
"author_login": "daviddawson",
"committed_at": "2025-10-13T15:19:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab1cd826d85feae106780b8948b32f51b3d29edc",
"body": null,
"is_bot": false,
"headline": "Run only unit tests in release workflow",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2025-10-13T15:18:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "372ffbba466675fd3ecec09b12bf9a8243338ad6",
"body": null,
"is_bot": false,
"headline": "Fix integration test API signatures for event client",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2025-10-13T15:10:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6b7b3ce35d24cc801c5357c9f662ec59e10a7cff",
"body": null,
"is_bot": false,
"headline": "Fix flaky cron test timing expectation",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2025-10-13T11:43:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cf465ed7d4fe6867286a310ed302fdb7aa0ce000",
"body": null,
"is_bot": false,
"headline": "Update generated files as of 48acf7dc9d172e75362dc8aaa9b043ff5dbc588e",
"author_name": "Eventicle Bot",
"author_login": "daviddawson",
"committed_at": "2025-10-13T10:56:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "48acf7dc9d172e75362dc8aaa9b043ff5dbc588e",
"body": null,
"is_bot": false,
"headline": "Update CI workflow to Node 20 and latest actions",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2025-10-13T10:56:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa6551f0da6f1c661ff2f373aea14d5c2308d2e9",
"body": null,
"is_bot": false,
"headline": "Fix CI workflow missing runs-on property",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2025-10-13T10:54:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f33321084c69f46ba03e6429acfed5fe19cd4665",
"body": "- Add missing Saga type import to saga.test.ts\n- Fix saga type definition to include all state properties\n- Update kafka-throttle tests to work with mocked dependencies\n- Fix async handling and timing issues in kafka tests\n- Switch saga tests from BullMQ to LocalScheduleJobRunner\n- Fix listener signature and await missing in schedule tests\n- Add proper test cleanup hooks",
"is_bot": false,
"headline": "Fix failing tests",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2025-10-13T10:48:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b26274068ceea471ea0a61ea02c78dbf5adaf0a4",
"body": "- Fix kafka-throttle race condition in concurrent topic creation\n- Add per-instance serialization to DefaultSagaScheduler\n- Fix cron jobs not starting (missing scheduled option)\n- Fix cron parameter order mismatch (name,id,data)\n- Fix cron removal key mismatch causing memory leaks",
"is_bot": false,
"headline": "Fix race conditions and serialization bugs",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2025-10-13T10:48:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "16c8891cfc6e393e5a71cf6dfb8ac587cc430917",
"body": null,
"is_bot": false,
"headline": "Fix release workflow Node version and update README",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2025-10-11T12:30:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d90416cb4f41620f91e5cd7dd64457c7aa6ba565",
"body": null,
"is_bot": false,
"headline": "Add automated release workflow",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2025-10-11T12:26:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "33ad21bcc8d6099ef09d3016e87ce158c361d63a",
"body": "Remove vulnerable and unused npm packages",
"is_bot": false,
"headline": "Merge pull request #28 from alebruck/remove-npm-global",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2025-10-11T12:16:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2569057f052e57acf7c59d95383f6f734ab8abf9",
"body": "Remove as unused and introducing vulnerable dependencies.",
"is_bot": false,
"headline": "Remove mermaid-cli from devDependencies",
"author_name": "Alessandro Bruckheimer",
"author_login": "alebruck",
"committed_at": "2025-10-09T20:19:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e945833a7d94269f3be739a1f719d867ef9f4a70",
"body": null,
"is_bot": false,
"headline": "Remove vulnerable and unused npm module global.",
"author_name": "Alessandro Bruckheimer",
"author_login": "alebruck",
"committed_at": "2025-10-07T11:02:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d30106ef33b77f043e1bea47ecfca22dd3dbf3e5",
"body": null,
"is_bot": false,
"headline": "Release 1.1.1",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2025-08-20T12:18:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d914156ce36672c17c0c832968dde9d75036977d",
"body": "Feature/saga middleware",
"is_bot": false,
"headline": "Merge pull request #27 from eventicle/feature/saga-middleware",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2025-06-05T11:22:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "88676db57acc71491767553176a0878d9b233185",
"body": null,
"is_bot": false,
"headline": "Extend documentation",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2025-06-05T11:21:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6415fbe8e4106e89eacee319620a30d43818f345",
"body": null,
"is_bot": false,
"headline": "1.1.0, Saga scheduler concept.",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2025-05-22T13:24:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "11feeb3eaa23d6d2641b52c4189e3376b04f83e5",
"body": "This allows sagas to offload the actual execution to some scheduling algorithm to given them true serial execution semantics (across topics, and also across topics + timers).\nBeyond what the underlying eventClient implementation provides, as it also includes timers.\n\nExample would be using the BullMQ pro queue group feature.",
"is_bot": false,
"headline": "Introduce saga scheduler concept.",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2025-05-06T21:14:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "20dbb7059fb5e241461a97d25ae2c11502e16d96",
"body": "This allows sagas to offload the actual execution to some scheduling algorithm to given them true serial execution semantics (across topics, and also across topics + timers).\nBeyond what the underlying eventClient implementation provides, as it also includes timers.\n\nExample would be using the BullMQ pro queue group feature.",
"is_bot": false,
"headline": "Introduce saga scheduler concept.",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2025-05-06T21:13:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fc0b33bec5ab8df33417e2830d09262ea859ef59",
"body": "… topic config.",
"is_bot": false,
"headline": "Rework cold replay to create topics when not present with appropriate…",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2025-05-01T08:42:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ee807fe90ac72caae9dec4fb63ffa8281e025501",
"body": "… topic config.",
"is_bot": false,
"headline": "Rework cold replay to create topics when not present with appropriate…",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2025-05-01T08:42:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e21256f3c5ea60c1a55cbb4763d22324182b4bd6",
"body": null,
"is_bot": false,
"headline": "Rework cold replay to be more reliable when highly concurrent.",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2025-04-30T21:08:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f093f6c552ee2b29f14a0b3156bc1a91a638800",
"body": null,
"is_bot": false,
"headline": "Rework cold replay to be more reliable when highly concurrent.",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2025-04-27T19:33:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15ee8cf10fee331d1392700239a03d9669348508",
"body": "…concurrent.\n\nDocument various components.",
"is_bot": false,
"headline": "Boost kafka outbox to read-committed to avoid multi send when highly …",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2025-03-30T15:05:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "435c8af4da2f6b16ec3310e9b1761bf793d941d1",
"body": null,
"is_bot": false,
"headline": "Logging in outbox send failure case.",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2025-02-24T15:45:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ecb01aca8a39283e0c9c47156bf61e72fb7b23fd",
"body": null,
"is_bot": false,
"headline": "Logging in outbox send failure case.",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2025-02-24T13:43:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "806fbc532caadee4cd06083dbd024b0aca33060b",
"body": null,
"is_bot": false,
"headline": "Allow control of isolation level in transaction handling.",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2025-01-20T16:59:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "769507d276e80b1ea8e2653ffb9d21f20c6b038d",
"body": null,
"is_bot": false,
"headline": "Allow control of isolation level in transaction handling.",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2024-12-17T15:13:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ff4bcca5311fabe2acdeee919a8705e137dd42ce",
"body": null,
"is_bot": false,
"headline": "Update generated files as of 0dafb4f93841951c3cf9bfc7b15469df4cae107b",
"author_name": "Eventicle Bot",
"author_login": "daviddawson",
"committed_at": "2024-12-16T15:24:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0dafb4f93841951c3cf9bfc7b15469df4cae107b",
"body": null,
"is_bot": false,
"headline": "Outbox update, make EventicleEvent optionally generic.",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2024-12-16T15:23:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60707340cb15b6a99849a939f54b806c62e2a2e2",
"body": null,
"is_bot": false,
"headline": "Handle transactions correctly in kafka outbox.",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2024-12-02T20:27:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fcc7d04a594b02eef42327c233c10fe3b9423589",
"body": null,
"is_bot": false,
"headline": "Handle transactions correctly in kafka outbox.",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2024-11-29T20:00:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "90ee8ccfaac48fa23a6c01184c4c7e5de20263be",
"body": "wrap a transaction around outbox read code to avoid multiple sending.",
"is_bot": false,
"headline": "Event Outbox fixes",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2024-11-25T10:56:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b641a33867d0aafd6685f01cf9da28ad4bb3d7d9",
"body": null,
"is_bot": false,
"headline": "Hot only event processing doesn't use idempotency filter.",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2024-11-21T17:26:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8afdbd6aa6251944143d66be36582c66cbb64f16",
"body": null,
"is_bot": false,
"headline": "bump version",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2024-10-25T10:30:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "983605ad6ae16bebed5e05bc4421ffe9379408e6",
"body": "Bump eventicle/utitilies",
"is_bot": false,
"headline": "Merge pull request #26 from eventicle/chore/bumpEventicleUtilities",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2024-10-25T10:29:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "506a3ab3bfe5665cfcd87da03e6ce6df2f43c550",
"body": null,
"is_bot": false,
"headline": "Bump eventicle/utitilies",
"author_name": "Martijn Lammaing",
"author_login": "mLammaingAurena",
"committed_at": "2024-10-25T10:10:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e15659c517212fdcffe94093538d900e39ee5375",
"body": null,
"is_bot": false,
"headline": "Update generated files as of fb825b81e0dd865bbd263e14a94b73ba33796bf7",
"author_name": "Eventicle Bot",
"author_login": "daviddawson",
"committed_at": "2024-10-25T10:08:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb825b81e0dd865bbd263e14a94b73ba33796bf7",
"body": null,
"is_bot": false,
"headline": "Allow dispatchDirectCommand to take optional TransactionOptions",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2024-10-25T10:08:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "482a62603db09fce397e43aed7c0282fa4420d5c",
"body": null,
"is_bot": false,
"headline": "Clear consumer groups in the mock event client when it is cleared.",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2024-10-15T15:30:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "023c0cca85edb53646e64628b51006c0d69d19b4",
"body": null,
"is_bot": false,
"headline": "Explicitly auto create topics using lazy config on event emit.",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2024-10-09T10:36:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ecc74ea8714a6933c8ec4495a888ee85e322fd60",
"body": null,
"is_bot": false,
"headline": "Update generated files as of 546e1eb019fa26aab3ed21edd42c4e4de9843c2c",
"author_name": "Eventicle Bot",
"author_login": "daviddawson",
"committed_at": "2024-09-26T09:31:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "546e1eb019fa26aab3ed21edd42c4e4de9843c2c",
"body": null,
"is_bot": false,
"headline": "Allow consumers to lazy create topics on startup.",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2024-09-26T09:30:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b0b63b22a14e370eaef26331de75342c61d0c9ca",
"body": null,
"is_bot": false,
"headline": "Kafka outbox sender log datastore transaction failures without spamming.",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2024-08-28T13:58:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5eeeb4a4aa79aee077e33186456a6341a672579c",
"body": null,
"is_bot": false,
"headline": "Update generated files as of 6d965744861734c6360288d92dc7f5f9afaed83b",
"author_name": "Eventicle Bot",
"author_login": "daviddawson",
"committed_at": "2024-08-19T15:42:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d965744861734c6360288d92dc7f5f9afaed83b",
"body": "… give codecs the ability to encode different streams differently.",
"is_bot": false,
"headline": "Ensure that `EventicleEvent.stream` is set before event is encoded to…",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2024-08-19T15:42:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0f18f17c0050284d87a8e5b221ecce4b3806e7d8",
"body": null,
"is_bot": false,
"headline": "Improve logging in saga failure handling.",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2024-06-16T19:26:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "93477ba791055f13a27ca6c0421bc161fc1e217f",
"body": null,
"is_bot": false,
"headline": "Relax transactionality guarantees on idempotency filter.",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2024-05-28T08:14:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a96182fa3fc10d4a57245a5684e062b4aee24532",
"body": null,
"is_bot": false,
"headline": "Update generated files as of 66848ef06daece1e679599da15b95647d6cdfd13",
"author_name": "Eventicle Bot",
"author_login": "daviddawson",
"committed_at": "2024-05-24T20:34:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "66848ef06daece1e679599da15b95647d6cdfd13",
"body": "Allow setting parallelEvent counts in views and sagas as well as raw eventClient.",
"is_bot": false,
"headline": "COnvert all eventClient api to config object, not params.",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2024-05-24T20:33:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "915f5b5b62c8e5b60e120cc537e2c5b92086ca73",
"body": null,
"is_bot": false,
"headline": "Updates to kafka outbox.",
"author_name": "David Dawson",
"author_login": "daviddawson",
"committed_at": "2024-03-28T19:48:45Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 10,
"commits_last_year": 63,
"latest_release_at": "2026-07-22T08:19:24Z",
"latest_release_tag": "v1.3.6",
"releases_from_tags": false,
"days_since_last_push": 8,
"active_weeks_last_year": 14,
"days_since_latest_release": 8,
"mean_days_between_releases": 208.5
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 37,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "@eventicle/eventiclejs",
"exists": true,
"license": "Apache-2.0",
"keywords": [],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@eventicle/eventiclejs",
"is_deprecated": false,
"latest_version": "1.3.6",
"repository_url": "https://github.com/eventicle/eventiclejs",
"versions_count": 171,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 3184,
"first_published_at": "2020-10-19T16:22:49.931000Z",
"latest_published_at": "2026-07-22T08:19:19.199000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 8
}
]
},
"popularity": {
"forks": 6,
"stars": 9,
"watchers": 3,
"fork_history": {
"days": [
{
"date": "2021-06-22",
"count": 1
},
{
"date": "2022-08-18",
"count": 1
},
{
"date": "2023-02-28",
"count": 1
},
{
"date": "2023-05-26",
"count": 1
},
{
"date": "2025-10-07",
"count": 1
},
{
"date": "2026-04-13",
"count": 1
}
],
"complete": true,
"collected": 6,
"total_forks": 6
},
"star_history": null,
"open_issues_and_prs": 4
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"docs/modules/book/examples/app/tsconfig.json",
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 70041,
"source_files_sampled": 56,
"oversized_source_files": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [
{
"name": "uuid",
"direct": true,
"version": "9.0.1",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-w5hq-g745-h8pq"
],
"fixed_version": "13.0.1",
"advisory_count": 1,
"oldest_advisory_days": 99
},
{
"name": "brace-expansion",
"direct": false,
"version": "1.1.17",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-mh99-v99m-4gvg"
],
"fixed_version": "5.0.8",
"advisory_count": 1,
"oldest_advisory_days": 6
},
{
"name": "js-yaml",
"direct": false,
"version": "4.1.1",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-52cp-r559-cp3m",
"GHSA-h67p-54hq-rp68"
],
"fixed_version": "4.3.0",
"advisory_count": 2,
"oldest_advisory_days": 45
},
{
"name": "ajv",
"direct": false,
"version": "8.13.0",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-2g4f-4pwh-qvx6"
],
"fixed_version": "8.18.0",
"advisory_count": 1,
"oldest_advisory_days": 169
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"high": 3,
"moderate": 1
},
"advisory_count": 5,
"affected_count": 4,
"assessed_count": 206,
"malicious_count": 0,
"assessed_package": "npm:@eventicle/eventiclejs@1.3.6",
"unassessed_count": 0,
"direct_affected_count": 1
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "@confluentinc/kafka-javascript",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.9.1"
},
{
"name": "@microsoft/api-documenter",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^7.19.27"
},
{
"name": "@microsoft/api-extractor",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^7.33.7"
},
{
"name": "@types/crypto-js",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.1.1"
},
{
"name": "@types/serialize-error",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.0.1"
},
{
"name": "api-documenter-yaml-to-antora-asciidoc",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^0.0.0-11"
},
{
"name": "asynchronous-local-storage",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.0.2"
},
{
"name": "avsc",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^5.7.7"
},
{
"name": "cron-parser",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^5.5.0"
},
{
"name": "crypto-js",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.1.1"
},
{
"name": "deep-equal",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^2.1.0"
},
{
"name": "fast-safe-stringify",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^2.1.1"
},
{
"name": "ioredis",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^5.10.0"
},
{
"name": "lodash",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.17.21"
},
{
"name": "node-cron",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.2.1"
},
{
"name": "serialize-error",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^7.0.1"
},
{
"name": "uuid",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^9.0.0"
},
{
"name": "winston",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^3.8.2"
},
{
"name": "xstate",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.35.1"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 2,
"merged_prs": 26,
"open_issues": 2,
"closed_ratio": 0.5,
"closed_issues": 2,
"closed_unmerged_prs": 3
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "daviddawson",
"commits": 215,
"avatar_url": "https://avatars.githubusercontent.com/u/206276?v=4"
},
{
"type": "User",
"login": "gjdawson",
"commits": 16,
"avatar_url": "https://avatars.githubusercontent.com/u/1094939?v=4"
},
{
"type": "User",
"login": "s3ru",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/47429037?v=4"
},
{
"type": "User",
"login": "alebruck",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/489860?v=4"
},
{
"type": "User",
"login": "mLammaingAurena",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/186251598?v=4"
},
{
"type": "User",
"login": "MartinJK",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/5148993?v=4"
}
],
"contributors_sampled": 6,
"top_contributor_share": 0.903
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"release.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": true,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"package-lock.json",
"pnpm-lock.yaml"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 6,
"reason": "2 out of 3 merged PRs checked by a CI test -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/15 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 6,
"reason": "dependency not pinned by hash detected -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "33 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "6a02f12f05462e9d5762b6308d236dc416e9b10a",
"ran_at": "2026-07-31T07:21:43Z",
"aggregate_score": 3.9,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-22T08:19:16Z",
"oldest_open_prs": [
{
"number": 30,
"created_at": "2026-01-19T09:40:06Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 34,
"created_at": "2026-06-26T08:14:48Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-22T08:18:13Z",
"ci_last_conclusion": null,
"oldest_open_issues": [
{
"number": 21,
"created_at": "2022-09-23T07:57:30Z",
"last_comment_at": "2022-09-23T08:01:51Z",
"last_comment_author": "daviddawson"
},
{
"number": 22,
"created_at": "2022-11-10T17:01:32Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/eventicle/eventiclejs",
"host": "github.com",
"name": "eventiclejs",
"owner": "eventicle"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 57,
"inputs": {
"security": 42,
"vitality": 73,
"community": 41,
"governance": 53,
"engineering": 72
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 73,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"commits_last_year": 63,
"human_commit_share": 1,
"days_since_last_push": 8,
"active_weeks_last_year": 14
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 8 days ago",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 8
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "14/52 weeks with commits",
"points": 9.7,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 14
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "63 commits in the last year",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 63
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "good",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 84,
"inputs": {
"releases_count": 10,
"latest_release_tag": "v1.3.6",
"releases_from_tags": false,
"days_since_latest_release": 8,
"mean_days_between_releases": 208.5
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "10 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 10
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 8 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 8
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~208.5 days",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 208.5
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 8,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 8 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 8
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 41,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 22,
"inputs": {
"forks": 6,
"stars": 9,
"watchers": 3,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "9 stars",
"points": 14.6,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 9
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "6 forks",
"points": 5.8,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 6
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "3 watchers",
"points": 1.7,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 3
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 58,
"inputs": {
"packages": [
"@eventicle/eventiclejs"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 3184
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "3,184 downloads/month across npm",
"points": 46.7,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 3184,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 53,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 22,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 6,
"top_contributor_share": 0.903
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 90% of commits",
"points": 2.2,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 90
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "6 contributors",
"points": 8.1,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 6
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 58,
"inputs": {
"merged_prs": 26,
"open_issues": 2,
"closed_issues": 2,
"issue_closed_ratio": 0.5,
"closed_unmerged_prs": 3
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "50% of issues closed",
"points": 23.4,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 50
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "26/29 decided PRs merged",
"points": 34.3,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 26,
"decided": 29
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/15 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 48,
"inputs": {
"followers": 0,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "eventicle",
"public_repos": 5,
"account_age_days": 2389
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "0 followers of eventicle",
"points": 0,
"status": "missed",
"details": [
{
"code": "owner_followers",
"params": {
"count": 0,
"login": "eventicle"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "5 public repos, account ~6 yr old",
"points": 17.7,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 5
}
},
{
"code": "account_age_years",
"params": {
"years": 6
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"@eventicle/eventiclejs"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 8
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 8 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 8
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "171 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 171
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 72,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 66,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": true,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "2 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 2
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 6.4,
"status": "met",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "2 out of 3 merged PRs checked by a CI test -- score normalized to 6",
"points": 12,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": "https://book.eventicle.com",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://book.eventicle.com",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 42,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 39,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 3.9
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "2 out of 3 merged PRs checked by a CI test -- score normalized to 6",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/15 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 6",
"points": 3,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "33 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "moderate",
"name": "Dependency advisories",
"note": "Matched the npm:@eventicle/eventiclejs@1.3.6 runtime dependency closure — what installing the published package pulls in — 206 packages. Reachability is not analyzed.",
"notes": [
{
"code": "advisories_scope_published",
"params": {
"package": "npm:@eventicle/eventiclejs@1.3.6",
"assessed": 206
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 52,
"inputs": {
"source": "osv",
"advisories": 5,
"affected_packages": 4,
"assessed_packages": 206,
"unassessed_packages": 0,
"affected_by_severity": "high 3, moderate 1",
"direct_affected_packages": 1
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "1 affected: uuid 9.0.1 (high 7.5)",
"points": 14,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 1,
"packages": "uuid 9.0.1 (high 7.5)"
}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "3 affected: brace-expansion 1.1.17 (high 7.5), js-yaml 4.1.1 (high 7.5), ajv 8.13.0 (moderate 5.3)",
"points": 7.6,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 3,
"packages": "brace-expansion 1.1.17 (high 7.5), js-yaml 4.1.1 (high 7.5), ajv 8.13.0 (moderate 5.3)"
}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "2 advisory-carrying package(s) unaddressed past 90 days; oldest published 169 days ago",
"points": 30.3,
"status": "partial",
"details": [
{
"code": "advisories_stale",
"params": {
"days": 90,
"count": 2,
"oldest": 169
}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 206,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 7
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "at_risk",
"name": "AI Readiness",
"value": 45,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "critical",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 16,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.31,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "31 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 16.5,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 31,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 49,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"package-lock.json",
"pnpm-lock.yaml"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
"docs/modules/book/examples/app/tsconfig.json",
"tsconfig.json"
],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "docs/modules/book/examples/app/tsconfig.json, tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "docs/modules/book/examples/app/tsconfig.json, tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 6",
"points": 6,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 99,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 70041,
"source_files_sampled": 56,
"oversized_source_files": 1
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "1/56 source files over 60KB",
"points": 54,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 56,
"oversized": 1
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-31T07:21:58.692674Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/e/eventicle/eventiclejs.svg",
"full_name": "eventicle/eventiclejs",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — npm.