Public recordModerate
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-30 15:16 UTC
flarum / extension-manager
[READ ONLY] Subtree split of Flarum package manager extension.
flarum/extension-manager holds a health index of 61 out of 100, placing it in the Moderate band. It scores highest on Vitality (80/100) and lowest on Engineering Quality (38/100). It was last updated today. 2 contributors account for most of its recent work.
61
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
61
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
FlarumOrganization
798 followers53 public repossince Sep 2013
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish | Tags |
|---|---|---|---|---|---|---|
| Packagist | flarum/extension-manager | v2.0.0-rc.5 | 3,476 | 28 | 22 days ago | composermanagerextensionsupdaterpackages |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
80
Development activity
67Moderate
How it's scored
| 36/36 | Push recency — last push 0 days ago |
| 13.2/36 | Commit cadence — 19/52 weeks with commits |
| 12.6/18 | Commit volume — 24 commits in the last year |
| 5/10 | OpenSSF Scorecard: Maintained — 6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5 |
Inputs used
| commits_last_year | 24 |
| human_commit_share | 0.98 |
| days_since_last_push | 0 |
| active_weeks_last_year | 19 |
Release discipline
100Excellent
How it's scored
| 27/27 | Ships releases — 27 releases published |
| 36/36 | Release recency — latest release 21 days ago |
| 27/27 | Release cadence — a release every ~25 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 27 |
| latest_release_tag | v2.0.0-rc.5 |
| releases_from_tags | no |
| days_since_latest_release | 21 |
| mean_days_between_releases | 25 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
48
Popularity & adoption
24Critical
How it's scored
| 15.5/60 | Stars — 10 stars |
| 6.5/25 | Forks — 7 forks |
| 1.7/15 | Watchers — 3 watchers |
Inputs used
| forks | 7 |
| stars | 10 |
| watchers | 3 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
77Good
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (MIT) |
| 18/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 6.3/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | yes |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | yes |
Ecosystem adoption (downloads)
47At risk
How it's scored
| 47.2/80 | Monthly downloads — 3,476 downloads/month across packagist |
| 0/20 | Registry dependents — 0 packages depend on it |
Inputs used
| packages | flarum/extension-manager |
| dependents | 0 |
| ecosystems | packagist |
| total_downloads | 227,011 |
| monthly_downloads | 3,476 |
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
76
Maintainer resilience (bus factor)
59Moderate
How it's scored
| 25.2/54 | Bus factor — 2 contributor(s) cover half of all commits |
| 11.7/22.5 | Commit distribution — top contributor authored 48% of commits |
| 12.2/13.5 | Contributor breadth — 9 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 13 contributing companies or organizations |
Inputs used
| bus_factor | 2 |
| contributors_sampled | 9 |
| top_contributor_share | 0.482 |
How it's scored
| 38.9/46.8 | Issue resolution — 83% of issues closed |
| 38.2/38.3 | PR acceptance — 4/4 decided PRs merged |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 4 |
| open_issues | 2 |
| closed_issues | 10 |
| issue_closed_ratio | 0.833 |
| closed_unmerged_prs | 0 |
Ownership & stewardship
76Good
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 20.9/25 | Owner reach — 798 followers of flarum |
| 24.6/25 | Track record — 53 public repos, account ~12 yr old |
Inputs used
| followers | 798 |
| owner_type | Organization |
| is_verified | — |
| owner_login | flarum |
| public_repos | 53 |
| account_age_days | 4,690 |
Package maintenance
100Excellent
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on packagist |
| 35/35 | Publish recency — latest publish 22 days ago |
| 20/20 | Version history — 28 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | flarum/extension-manager |
| ecosystems | packagist |
| any_deprecated | no |
| min_days_since_publish | 22 |
Engineering Quality
Are baseline engineering and documentation practices in place?
38
Engineering practices
30At risk
How it's scored
| 0/24 | CI workflows |
| 24/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — no data |
Inputs used
| has_ci | no |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.
Documentation
50Moderate
How it's scored
| 30/30 | README |
| 0/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 10/10 | Repository description |
| 0/10 | Topics |
| 10/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | yes |
| homepage | — |
| has_readme | yes |
| has_docs_dir | no |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
54
Security posture
54Moderate
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — no data |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 13 contributing companies or organizations |
| 0/10 | Dangerous-Workflow — no data |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 3.8/7.5 | Maintained — 6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5 |
| 0/5 | Packaging — no data |
| 0/5 | Pinned-Dependencies — no data |
| 0/5 | SAST — no SAST tool detected |
| 5/5 | Security-Policy — security policy file detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — no data |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 12 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 6 |
| scorecard_aggregate | 5.4 |
Excluded from scoring (no data or not applicable): ci_tests, dangerous_workflow, packaging, pinned_dependencies, signed_releases, token_permissions. Remaining weights renormalized.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
53
Agent context & guidance
40At risk
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 94 of 98 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.959 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Verify loop (build / test / typecheck)
52Moderate
How it's scored
| 0/18 | One-command bootstrap |
| 22/22 | Automated tests |
| 0/11 | Lint / format config |
| 11/11 | Static type checking — js/tsconfig.json |
| 0/10 | Reproducible environment |
| 6/10 | Demonstrated agent practice — 3 of the last 100 commits agent-authored or agent-credited |
| 8/8 | Automated maintenance — 2 of the last 100 commits are automated dependency updates |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — no data |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | — |
| has_dockerfile | no |
| typed_language | no |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | js/tsconfig.json |
| agent_commit_share | 0.03 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0.02 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.
How it's scored
| 27/45 | Type-checkable code — PHP with type-check config (js/tsconfig.json) |
| 55/55 | Manageable file sizes — 0/146 source files over 60KB |
Inputs used
| primary_language | PHP |
| largest_source_bytes | 9,623 |
| source_files_sampled | 146 |
| oversized_source_files | 0 |
Key facts
10GitHub stars
9contributors
24commits, last 12 months
0days since last push
27releases
2bus factor
2open issues
npm, Packagistpackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- No resolved dependencies carried a version and a supported ecosystem
More detail
Star and fork history 0 ★ / 7 ⇿
0Stars
7Forks
26Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 1Minor 0Patch 8
Each point covers 5 days.
OpenSSF Scorecard 5.4 / 10
5.4aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| n/a | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 13 contributing companies or organizations |
| n/a | Dangerous-Workflow | no workflows found |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 5 | Maintained | 6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5 |
| n/a | Packaging | packaging workflow not detected |
| n/a | Pinned-Dependencies | no dependencies found |
| 0 | SAST | no SAST tool detected |
| 10 | Security-Policy | security policy file detected |
| n/a | Signed-Releases | no releases found |
| n/a | Token-Permissions | No tokens found |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
Direct dependencies 2
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| Packagist | flarum/core | ^2.0.0-rc.5 | composer.json |
| npm | pretty-bytes | ^6.0.0 | js/package.json |
All dependencies 13
Full resolved dependency set from the GitHub dependency graph: 2 direct and 11 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|---|---|---|
| npm | pretty-bytes | ^6.0.0 | direct |
| Packagist | flarum/core | — | direct |
| npm | @flarum/prettier-config | ^1.0.0 | indirect |
| npm | flarum-tsconfig | ^2.0.0 | indirect |
| npm | flarum-webpack-config | ^3.0.0 | indirect |
| npm | prettier | ^2.5.1 | indirect |
| npm | typescript | ^4.5.4 | indirect |
| npm | typescript-coverage-report | ^0.6.1 | indirect |
| npm | webpack | ^5.104.1 | indirect |
| npm | webpack-cli | ^4.9.1 | indirect |
| Packagist | composer/composer | — | indirect |
| Packagist | flarum/tags | — | indirect |
| Packagist | flarum/testing | — | indirect |
Dependency advisories not assessed
Advisory matching could not run for this report: No resolved dependencies carried a version and a supported ecosystem
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 1066,
"has_wiki": true,
"homepage": null,
"languages": {
"PHP": 131856,
"Less": 7968,
"JavaScript": 53,
"TypeScript": 86628
},
"pushed_at": "2026-07-30T15:09:30Z",
"created_at": "2021-09-01T18:50:09Z",
"owner_type": "Organization",
"updated_at": "2026-07-30T15:13:30Z",
"description": "[READ ONLY] Subtree split of Flarum package manager extension.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "2.x",
"license_spdx_raw": "MIT",
"primary_language": "PHP",
"significant_languages": [
"PHP",
"TypeScript"
]
},
"owner": {
"blog": "http://flarum.org",
"name": "Flarum",
"type": "Organization",
"login": "flarum",
"company": null,
"location": null,
"followers": 798,
"avatar_url": "https://avatars.githubusercontent.com/u/5549034?v=4",
"created_at": "2013-09-26T11:15:45Z",
"is_verified": null,
"public_repos": 53,
"account_age_days": 4690
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v2.0.0-rc.5",
"kind": "prerelease",
"published_at": "2026-07-08T15:54:42Z"
},
{
"tag": "v2.0.0-rc.4",
"kind": "prerelease",
"published_at": "2026-06-18T11:59:43Z"
},
{
"tag": "v2.0.0-rc.3",
"kind": "prerelease",
"published_at": "2026-06-09T18:53:56Z"
},
{
"tag": "v2.0.0-rc.2",
"kind": "prerelease",
"published_at": "2026-06-01T18:17:54Z"
},
{
"tag": "v2.0.0-rc.1",
"kind": "prerelease",
"published_at": "2026-04-20T10:23:07Z"
},
{
"tag": "v1.0.8",
"kind": "patch",
"published_at": "2026-03-09T08:09:26Z"
},
{
"tag": "v2.0.0-beta.7",
"kind": "prerelease",
"published_at": "2026-02-22T17:16:12Z"
},
{
"tag": "v2.0.0-beta.6",
"kind": "prerelease",
"published_at": "2026-01-30T09:23:52Z"
},
{
"tag": "v2.0.0-beta.5",
"kind": "prerelease",
"published_at": "2025-12-20T22:41:48Z"
},
{
"tag": "v2.0.0-beta.4",
"kind": "prerelease",
"published_at": "2025-11-25T18:03:12Z"
},
{
"tag": "v2.0.0-beta.3",
"kind": "prerelease",
"published_at": "2025-05-02T08:16:12Z"
},
{
"tag": "v1.0.7",
"kind": "patch",
"published_at": "2025-02-07T09:08:33Z"
},
{
"tag": "v2.0.0-beta.2",
"kind": "prerelease",
"published_at": "2025-01-17T09:06:22Z"
},
{
"tag": "v2.0.0-beta.1",
"kind": "prerelease",
"published_at": "2025-01-03T09:00:55Z"
},
{
"tag": "v1.0.6",
"kind": "patch",
"published_at": "2024-11-30T13:30:09Z"
},
{
"tag": "v1.0.5",
"kind": "patch",
"published_at": "2024-11-20T20:06:41Z"
},
{
"tag": "v1.0.4",
"kind": "patch",
"published_at": "2024-10-08T07:08:42Z"
},
{
"tag": "v1.0.3",
"kind": "patch",
"published_at": "2024-02-22T11:09:33Z"
},
{
"tag": "v1.0.2",
"kind": "patch",
"published_at": "2024-02-04T13:06:56Z"
},
{
"tag": "v1.0.1",
"kind": "patch",
"published_at": "2024-01-12T17:06:50Z"
},
{
"tag": "v1.0.0",
"kind": "major",
"published_at": "2024-01-10T15:33:28Z"
},
{
"tag": "v1.0.0-rc.3",
"kind": "prerelease",
"published_at": "2024-01-06T17:12:28Z"
},
{
"tag": "v1.0.0-rc.2",
"kind": "prerelease",
"published_at": "2024-01-06T12:09:21Z"
},
{
"tag": "v1.0.0-rc.1",
"kind": "prerelease",
"published_at": "2024-01-06T10:00:11Z"
},
{
"tag": "v1.0.0-beta.2",
"kind": "prerelease",
"published_at": "2023-04-15T15:37:39Z"
},
{
"tag": "v1.0.0-beta.1.1",
"kind": "prerelease",
"published_at": "2022-09-27T09:01:10Z"
},
{
"tag": "v1.0.0-beta.1",
"kind": "prerelease",
"published_at": "2022-09-17T11:54:59Z"
}
],
"recent_commits": [
{
"oid": "1576646c29c8237eddd662c1f0bcd6dae6ede70a",
"body": "… place (#4857)\n\n* fix: derive asset revisions from compiled output and rebuild in place on change\n\nThe asset revision was a hash of source paths and mtimes, and an extension\ntoggle flushed the compiled assets (deleting files and their manifest\nrevisions) to be lazily rebuilt by the next request. To\n[…]\nly assets, and stale chunk revisions of disabled extensions are\npruned after rebuilds rather than dropped up front.\n\n* Apply fixes from StyleCI\n\n---------\n\nCo-authored-by: StyleCI Bot <bot@styleci.io>",
"is_bot": false,
"headline": "[2.x] fix: derive asset revisions from compiled output and rebuild in…",
"author_name": "IanM",
"author_login": "imorland",
"committed_at": "2026-07-30T11:41:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3cbbb8b28c55fc69873f3dfcd99b22c541ee7fd3",
"body": "* docs: add changelog for 2.0.0-rc.5\n\n* docs: add #4806 to rc.5 changelog\n\n* docs: add #4807 to rc.5 changelog\n\n* chore: bump version and dependency constraints to 2.0.0-rc.5",
"is_bot": false,
"headline": "[2.x] chore: prepare 2.0.0-rc.5 (#4805)",
"author_name": "IanM",
"author_login": "imorland",
"committed_at": "2026-07-08T15:08:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "94bd3d66460a3e3c1f699800bb82f8062e293d0a",
"body": null,
"is_bot": false,
"headline": "chore: prep 2.0.0-rc.4 (#4741)",
"author_name": "IanM",
"author_login": "imorland",
"committed_at": "2026-06-16T10:05:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "83159ca7fc0ff7a829080c68c9d5329cb5b41e33",
"body": "* chore: prep rc.3\n\n* chore: bump composer reqs",
"is_bot": false,
"headline": "chore: prep `2.0.0-rc.3` (#4698)",
"author_name": "IanM",
"author_login": "imorland",
"committed_at": "2026-06-09T12:39:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26643e1961394728ce42a7a080f37936eb9e691e",
"body": null,
"is_bot": false,
"headline": "chore: prep rc2 (#4676)",
"author_name": "IanM",
"author_login": "imorland",
"committed_at": "2026-05-30T22:29:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c8ebd6fae18bfa99e99c512b093d2a5c43f76c3",
"body": "…656)\n\n* [2.x] feat(queue): restore per-class queue routing on AbstractJob\n\nReintroduces the `$onQueue` static property + constructor that 1.x jobs\nrelied on for per-class queue routing. Without this, operators have no\nbuilt-in way to send a specific job class to a dedicated queue without\npatching e\n[…]\nr from\n`Flarum\\Realtime\\Push\\Jobs\\Job` — both are now provided by the base\nclass.\n\nIf we're restoring the convention, the standard library should lead\nby example: every shipped job should be routable.",
"is_bot": false,
"headline": "[2.x] feat(queue): restore per-class queue routing on AbstractJob (#4…",
"author_name": "IanM",
"author_login": "imorland",
"committed_at": "2026-05-12T20:33:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "17dcd0315c978c4c214bb43e08895807626776dd",
"body": null,
"is_bot": false,
"headline": "chore: prep rc.1 (#4581)",
"author_name": "IanM",
"author_login": "imorland",
"committed_at": "2026-04-17T12:43:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eec0bf24ac116c70afa97df7c476af62510be8f3",
"body": "Includes transpiled JS/TS, and Typescript declaration files (typings).\n\n[skip ci]",
"is_bot": false,
"headline": "Bundled output for commit 5c5e3ef24be8c691642846723752e48eeef78973",
"author_name": "flarum-bot",
"author_login": "flarum-bot",
"committed_at": "2026-04-15T11:19:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e7da93379efedf1eddb773e60a8715f1eb576abc",
"body": "* prep for beta.8\n\n* chore: update changelog for beta.8 (#4480, #4481)",
"is_bot": false,
"headline": "[2.x] prep for beta.8 (#4478)",
"author_name": "IanM",
"author_login": "imorland",
"committed_at": "2026-03-21T22:45:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "384e22b9f54e0608a38f28e39e4ebb1b1a34390f",
"body": "Includes transpiled JS/TS, and Typescript declaration files (typings).\n\n[skip ci]",
"is_bot": false,
"headline": "Bundled output for commit 07b889106007aa614e089e0f67e371d99d1f7183",
"author_name": "flarum-bot",
"author_login": "flarum-bot",
"committed_at": "2026-03-07T22:31:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c39a4f2f4b88f85a7c6bb0713b55b414bade226d",
"body": "…nt Flarum major version (#4412)\n\n* fix(package-manager): reject extensions incompatible with current Flarum major version\n\nExtensions with '*' or overly broad flarum/core constraints (e.g. '^1.0')\npass Composer's resolver on 2.x but fail at runtime. Add a pre-install\ncheck via the Packagist p2 API \n[…]\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>\n\n* Apply fixes from StyleCI\n\n---------\n\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>\nCo-authored-by: StyleCI Bot <bot@styleci.io>",
"is_bot": false,
"headline": "[2.x] fix(package-manager): reject extensions incompatible with curre…",
"author_name": "IanM",
"author_login": "imorland",
"committed_at": "2026-03-07T22:28:33Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "0f2223f4dc2ab31ebcdd4570c5a2a56c3c0b3475",
"body": "The TaskResource index endpoint was missing ->authenticated()->admin()\nguards, allowing unauthenticated users to access task logs containing\nfilesystem paths, package versions, and composer error output.\n\nFixes #4386\n\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(package-manager): restrict task list endpoint to admins only (#4410)",
"author_name": "IanM",
"author_login": "imorland",
"committed_at": "2026-03-07T15:58:25Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "3ac8049db337453322f3607fd1087d705847f905",
"body": "Includes transpiled JS/TS, and Typescript declaration files (typings).\n\n[skip ci]",
"is_bot": false,
"headline": "Bundled output for commit 60fa03a83cd62ff42d6812499d535a7d7de64ff5",
"author_name": "flarum-bot",
"author_login": "flarum-bot",
"committed_at": "2026-03-02T08:14:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "46d7fa891d2824549ca5979eb719a303258a8da8",
"body": "…arch (#4394)\n\n* feat(package-manager): replace flarum.org API with Packagist search\n\nThe flarum.org extension API is being shut down. This replaces the\nDiscover tab's backend with the public Packagist search API, keeping\nthe feature functional with minimal disruption.\n\nChanges:\n- ExternalExtensionR\n[…]\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>\n\n* Apply fixes from StyleCI\n\n---------\n\nCo-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>\nCo-authored-by: StyleCI Bot <bot@styleci.io>",
"is_bot": false,
"headline": "[2.x] feat(package-manager): replace flarum.org API with Packagist se…",
"author_name": "IanM",
"author_login": "imorland",
"committed_at": "2026-03-02T08:11:34Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "643723e4abe32059de63efc9dfe67aa8f2c2327d",
"body": null,
"is_bot": false,
"headline": "chore: prep for beta.7 (#4377)",
"author_name": "IanM",
"author_login": "imorland",
"committed_at": "2026-02-21T13:40:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "162100504f0aa3ceae88e3a409aabb69ea66abfb",
"body": "Includes transpiled JS/TS, and Typescript declaration files (typings).\n\n[skip ci]",
"is_bot": false,
"headline": "Bundled output for commit 6402e639bb64b06ecdc92ea69e6dacb3655504f7",
"author_name": "flarum-bot",
"author_login": "flarum-bot",
"committed_at": "2026-02-15T21:46:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60ce0088eb7df942adc744ff72042256f890fbb1",
"body": "Bumps [webpack](https://github.com/webpack/webpack) from 5.95.0 to 5.104.1.\n- [Release notes](https://github.com/webpack/webpack/releases)\n- [Changelog](https://github.com/webpack/webpack/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/webpack/webpack/compare/v5.95.0...v5.104.1)\n\n---\nupdated-\n[…]\ndency-version: 5.104.1\n dependency-type: direct:production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump webpack from 5.95.0 to 5.104.1 (#4354)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-02-15T21:42:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "16f66466d32b86948ef46db02076f524c55e052b",
"body": null,
"is_bot": false,
"headline": "chore: prep for beta.6 (#4343)",
"author_name": "IanM",
"author_login": "imorland",
"committed_at": "2026-01-24T08:00:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "110f9a16e9058394c7ea57e9b6496f6c3162d435",
"body": "* bump laravel - let's see what the tests do...\n\n* chore: upgrade phpstan to 2.x, larastan to 3.x\n\n* Apply fixes from StyleCI\n\n* fix: phpstan 8.4 property hooks compat\n\n* chore: phpstan fixes after rebase\n\n* fix: test expectation\n\n* fix: flag query pgsql\n\n* fix: pgsql flag query\n\n---------\n\nCo-authored-by: StyleCI Bot <bot@styleci.io>",
"is_bot": false,
"headline": "[2.x] feat: upgrade to Laravel 12 (#4268)",
"author_name": "IanM",
"author_login": "imorland",
"committed_at": "2026-01-14T08:05:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91df6094a022cf1734d2b88eeecdcb0fd3846568",
"body": null,
"is_bot": false,
"headline": "chore: prep for beta.5 (#4313)",
"author_name": "IanM",
"author_login": "imorland",
"committed_at": "2025-12-20T10:31:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "17ddbd376bf0a5c18229e165f75f5572d1b3cbab",
"body": null,
"is_bot": false,
"headline": "chore: prep beta.4 (#4291)",
"author_name": "IanM",
"author_login": "imorland",
"committed_at": "2025-11-25T08:50:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fbd64749babd051921dffcff8145672aa3a4229f",
"body": "Includes transpiled JS/TS, and Typescript declaration files (typings).\n\n[skip ci]",
"is_bot": false,
"headline": "Bundled output for commit 10e769988d6e553ee0e2a1cdb1bd4645f42763b9",
"author_name": "flarum-bot",
"author_login": "flarum-bot",
"committed_at": "2025-11-02T11:44:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9dae8a278681eccf319c37df50238b65a90eace8",
"body": "Includes transpiled JS/TS, and Typescript declaration files (typings).\n\n[skip ci]",
"is_bot": false,
"headline": "Bundled output for commit 43f7a68f2b88f8e5f0a82bab581296f84cd2f8ef",
"author_name": "flarum-bot",
"author_login": "flarum-bot",
"committed_at": "2025-10-27T05:25:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "270a3e27a74c175fc31fe9d5ef6ad24be1507a48",
"body": "Includes transpiled JS/TS, and Typescript declaration files (typings).\n\n[skip ci]",
"is_bot": false,
"headline": "Bundled output for commit 005706bdb4f7fd02ca100131ccc27d4053d099ee",
"author_name": "flarum-bot",
"author_login": "flarum-bot",
"committed_at": "2025-10-18T21:13:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "63b6117c1bfc03f45317549057e4cc8ad01ee74d",
"body": "Includes transpiled JS/TS, and Typescript declaration files (typings).\n\n[skip ci]",
"is_bot": false,
"headline": "Bundled output for commit 83318e51cfeed66f92b938c7aca481ac0fb14126",
"author_name": "flarum-bot",
"author_login": "flarum-bot",
"committed_at": "2025-10-17T17:14:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e5f2ca10ebe50c32c4380dd4f3afe432ea01e253",
"body": null,
"is_bot": false,
"headline": "chore: prepare 2.0.0-beta.3",
"author_name": "Sami Mazouz",
"author_login": "SychO9",
"committed_at": "2025-04-25T09:19:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "09f9ff2171419e4a45c642d5d9f65edb5196f5b0",
"body": null,
"is_bot": false,
"headline": "Apply fixes from StyleCI",
"author_name": "StyleCI Bot",
"author_login": "StyleCIBot",
"committed_at": "2025-04-11T09:07:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c63f806739a9261b0c3177778bce45ea7f4a126",
"body": null,
"is_bot": false,
"headline": "chore: increase composer job timeout",
"author_name": "Sami Mazouz",
"author_login": "SychO9",
"committed_at": "2025-04-11T09:07:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f15b9f3435e2e59d2016751cce15166b7b2d3c5",
"body": null,
"is_bot": false,
"headline": "fix(em): skip incompatible extension updates (#4177)",
"author_name": "Sami Mazouz",
"author_login": "SychO9",
"committed_at": "2025-02-08T18:01:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "989dbbf177419eb58bf9758b8e3b99332c726e67",
"body": null,
"is_bot": false,
"headline": "chore: v2.0.0-beta.2",
"author_name": "Sami Mazouz",
"author_login": "SychO9",
"committed_at": "2025-01-17T08:44:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e675f0a9f984fc7d40bae8a46f1fc4c4d4f7223",
"body": "Includes transpiled JS/TS, and Typescript declaration files (typings).\n\n[skip ci]",
"is_bot": false,
"headline": "Bundled output for commit 9d611d1ee2aad142461ed1bd1d17a6455fb14b73",
"author_name": "flarum-bot",
"author_login": "flarum-bot",
"committed_at": "2025-01-04T10:08:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1fd0252c2b150679465301df5e1680cb033abe97",
"body": null,
"is_bot": false,
"headline": "fix(em): incorrect extension compatibility check (#4155)",
"author_name": "Sami Mazouz",
"author_login": "SychO9",
"committed_at": "2025-01-04T10:05:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "43708498ae550865a80a2f7e336dc574ba84c7d3",
"body": null,
"is_bot": false,
"headline": "chore: prepare `2.0.0-beta.1`",
"author_name": "Sami Mazouz",
"author_login": "SychO9",
"committed_at": "2024-12-07T08:50:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bfc04d887b26ca19665f74a3db27d60801aea176",
"body": null,
"is_bot": false,
"headline": "fix: improve the flarum validator (#4133)",
"author_name": "Sami Mazouz",
"author_login": "SychO9",
"committed_at": "2024-12-06T09:23:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fd9035554add07dd1f3a901b785ea01dea45ed23",
"body": "Includes transpiled JS/TS, and Typescript declaration files (typings).\n\n[skip ci]",
"is_bot": false,
"headline": "Bundled output for commit f6e84a0dc576d1cfe8539b7438244edf156e3b1a",
"author_name": "flarum-bot",
"author_login": "flarum-bot",
"committed_at": "2024-11-29T13:58:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9ff85e788b9a02bbcfe481e2bfd19ab6eb053d4a",
"body": null,
"is_bot": false,
"headline": "fix(em): production ready check",
"author_name": "Sami Mazouz",
"author_login": "SychO9",
"committed_at": "2024-11-29T13:56:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b9713335f78d9287b3115395354861219337d4dd",
"body": "Includes transpiled JS/TS, and Typescript declaration files (typings).\n\n[skip ci]",
"is_bot": false,
"headline": "Bundled output for commit 94b0d67a4020e1b7027e0df53dee1d681dc822e1",
"author_name": "flarum-bot",
"author_login": "flarum-bot",
"committed_at": "2024-11-29T13:41:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7143668421e3f569ece51d57ea68ff47c7da3107",
"body": null,
"is_bot": false,
"headline": "fix(em): prevent use if missing php functions",
"author_name": "Sami Mazouz",
"author_login": "SychO9",
"committed_at": "2024-11-29T13:38:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "be75885fc071f4ddf4668d41b0dc6970530aa0df",
"body": "Includes transpiled JS/TS, and Typescript declaration files (typings).\n\n[skip ci]",
"is_bot": false,
"headline": "Bundled output for commit dd45d75cd8b9c1789b093562eb312db1ad333c9c",
"author_name": "flarum-bot",
"author_login": "flarum-bot",
"committed_at": "2024-11-09T10:10:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b1a55223a4dfa13642598f8a85422e37a1f31962",
"body": "* test: php 8.4\r\n\r\n* fix: php 8.4 deprecations\r\n\r\n* fix: make argument required\r\n\r\n* chore: review changes",
"is_bot": false,
"headline": "test: php 8.4 (#4103)",
"author_name": "Sami Mazouz",
"author_login": "SychO9",
"committed_at": "2024-11-08T16:33:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "56efcf83c5ac2528385c007d81d0f1ec10664a0d",
"body": "Includes transpiled JS/TS, and Typescript declaration files (typings).\n\n[skip ci]",
"is_bot": false,
"headline": "Bundled output for commit 471529316447f19e3a3b4a80b6194e6148b13222",
"author_name": "flarum-bot",
"author_login": "flarum-bot",
"committed_at": "2024-10-25T09:15:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "41aea5ee1793f0d07965bb4a760bb414e9bd2909",
"body": null,
"is_bot": false,
"headline": "fix: caught warnings and missing locale",
"author_name": "Sami Mazouz",
"author_login": "SychO9",
"committed_at": "2024-10-25T09:13:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d3d4278cd1afbc1f953b7daac7f158fcc454bf80",
"body": null,
"is_bot": false,
"headline": "chore: update tsconfig version",
"author_name": "Sami Mazouz",
"author_login": "SychO9",
"committed_at": "2024-10-25T08:39:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d7e831ccf75d1102d5f397d605dc67e4a5c8dd2",
"body": "Includes transpiled JS/TS, and Typescript declaration files (typings).\n\n[skip ci]",
"is_bot": false,
"headline": "Bundled output for commit 3b66925a666ad1f5e3e0ba2c1513bd501d6470e2",
"author_name": "flarum-bot",
"author_login": "flarum-bot",
"committed_at": "2024-10-24T17:49:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "96398bbac433b1c4ad94715b25ec0c43c8464bfe",
"body": null,
"is_bot": false,
"headline": "chore: fix typos (#4021)",
"author_name": "Viktor Szépe",
"author_login": "szepeviktor",
"committed_at": "2024-10-21T15:00:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9ee6d9a54c9be822f525e9e272c46b826559dee9",
"body": "Includes transpiled JS/TS, and Typescript declaration files (typings).\n\n[skip ci]",
"is_bot": false,
"headline": "Bundled output for commit b9b52d85a77dffb1423211ad4a9ce8a6a662e749",
"author_name": "flarum-bot",
"author_login": "flarum-bot",
"committed_at": "2024-10-21T10:52:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab8ca9d4d5e5d22096f46d183e406a8c10c2a859",
"body": "Includes transpiled JS/TS, and Typescript declaration files (typings).\n\n[skip ci]",
"is_bot": false,
"headline": "Bundled output for commit a3333320d71863b2596e0886a6eb6a81a9db61ad",
"author_name": "flarum-bot",
"author_login": "flarum-bot",
"committed_at": "2024-10-19T19:34:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "71f78e6a5e68a8b319afe4e21aa81101e3076f71",
"body": "Includes transpiled JS/TS, and Typescript declaration files (typings).\n\n[skip ci]",
"is_bot": false,
"headline": "Bundled output for commit 6f823731caa95439526ab7d8ec7dba13cd98e91b",
"author_name": "flarum-bot",
"author_login": "flarum-bot",
"committed_at": "2024-10-19T18:12:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0b1279ccc75ca85e87d17477bc0cb66d78341fab",
"body": "Includes transpiled JS/TS, and Typescript declaration files (typings).\n\n[skip ci]",
"is_bot": false,
"headline": "Bundled output for commit a47bd2d45730f004e739d91c290f22330ab93dc4",
"author_name": "flarum-bot",
"author_login": "flarum-bot",
"committed_at": "2024-10-19T17:44:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "68ca7d631008223f8bf0a5ab87aa2b6858f02a0f",
"body": "Includes transpiled JS/TS, and Typescript declaration files (typings).\n\n[skip ci]",
"is_bot": false,
"headline": "Bundled output for commit 321020ab83b715d00b44434f9313c91e66b863dd",
"author_name": "flarum-bot",
"author_login": "flarum-bot",
"committed_at": "2024-10-19T16:48:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac8bd830793e59edaa5bbdaf614afffdbc3862ee",
"body": null,
"is_bot": false,
"headline": "fix: skip major updater if not ready for prod (#4080)",
"author_name": "Sami Mazouz",
"author_login": "SychO9",
"committed_at": "2024-10-19T16:45:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "78583e3f96f7452beee5d6431817652736798a69",
"body": "Includes transpiled JS/TS, and Typescript declaration files (typings).\n\n[skip ci]",
"is_bot": false,
"headline": "Bundled output for commit 139adb0e65e3b3a455f875eb50b21592f023b888",
"author_name": "flarum-bot",
"author_login": "flarum-bot",
"committed_at": "2024-10-17T18:31:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2fdbd6078086920103e0483a26fb613cb8fe2420",
"body": null,
"is_bot": false,
"headline": "chore: fix typings",
"author_name": "Sami Mazouz",
"author_login": "SychO9",
"committed_at": "2024-10-17T18:28:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5358ffca226c4d98ef94b40ee255328b80a9b94",
"body": null,
"is_bot": false,
"headline": "Apply fixes from StyleCI",
"author_name": "StyleCI Bot",
"author_login": "StyleCIBot",
"committed_at": "2024-10-17T15:45:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6018f5234974039609eb61a795de7327c5c56f7f",
"body": null,
"is_bot": false,
"headline": "chore(em): port fix from 1.x",
"author_name": "Sami Mazouz",
"author_login": "SychO9",
"committed_at": "2024-10-17T14:19:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a55f892f34aab951d352ef4de2ff4ac4173cf70e",
"body": "Includes transpiled JS/TS, and Typescript declaration files (typings).\n\n[skip ci]",
"is_bot": false,
"headline": "Bundled output for commit 0107c96fb7677cc61b119cee8b8b857f87bd4863",
"author_name": "flarum-bot",
"author_login": "flarum-bot",
"committed_at": "2024-10-16T17:15:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8262bf56df5e18b65e11aaca88bbc3a389ad3967",
"body": null,
"is_bot": false,
"headline": "feat: extension list UI (#4066)",
"author_name": "Sami Mazouz",
"author_login": "SychO9",
"committed_at": "2024-10-16T17:12:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "75ea7b1f9c654e089da30423a0a886cc9ecee7de",
"body": "Includes transpiled JS/TS, and Typescript declaration files (typings).\n\n[skip ci]",
"is_bot": false,
"headline": "Bundled output for commit 7383bc94df39a03169349b6b7f2e07801fb7d981",
"author_name": "flarum-bot",
"author_login": "flarum-bot",
"committed_at": "2024-10-16T16:54:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13889b843ea466cb69ff5a96fe0ff5db9dba1aaa",
"body": "Includes transpiled JS/TS, and Typescript declaration files (typings).\n\n[skip ci]",
"is_bot": false,
"headline": "Bundled output for commit f83020cd1fb62b90719921bbcc2add3fcf9f655d",
"author_name": "flarum-bot",
"author_login": "flarum-bot",
"committed_at": "2024-10-12T13:40:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "09d4b6c4023640a902129616986817ded63e8963",
"body": "* feat: add `Admin.generalIndexItems` extender\r\n* docs",
"is_bot": false,
"headline": "feat: add `Admin.generalIndexItems` extender (#4068)",
"author_name": "Sami Mazouz",
"author_login": "SychO9",
"committed_at": "2024-10-12T13:37:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e1f459be2be77ccd047b3e7569ec6cdf82e80ebb",
"body": "Includes transpiled JS/TS, and Typescript declaration files (typings).\n\n[skip ci]",
"is_bot": false,
"headline": "Bundled output for commit f8560ef51b484f1c6369863673078053e3f53be9",
"author_name": "flarum-bot",
"author_login": "flarum-bot",
"committed_at": "2024-09-28T16:11:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8defec664226e9c4984998bfc85b5ba67da28119",
"body": "* chore: wrap RepositoryModal's fields in Form component\r\n\r\n* wip",
"is_bot": false,
"headline": "chore: wrap RepositoryModal's fields in Form component (#4034)",
"author_name": "Ngô Quốc Đạt",
"author_login": "datlechin",
"committed_at": "2024-09-28T16:08:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1d9054b94d59e12674a6294f92d846b072d7c315",
"body": "Includes transpiled JS/TS, and Typescript declaration files (typings).\n\n[skip ci]",
"is_bot": false,
"headline": "Bundled output for commit 257be2b9db6f5365faa017bd9cc4a0e870efb449",
"author_name": "flarum-bot",
"author_login": "flarum-bot",
"committed_at": "2024-09-28T14:51:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7235899b1edaaef97ac23aca54541b5a90819b5c",
"body": "Includes transpiled JS/TS, and Typescript declaration files (typings).\n\n[skip ci]",
"is_bot": false,
"headline": "Bundled output for commit feca3d0da6c7e6780a42c6e34b474c7a4268a704",
"author_name": "flarum-bot",
"author_login": "flarum-bot",
"committed_at": "2024-09-28T13:00:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c297e974b0bfb9e9252beda708ceb71f4b8c3d63",
"body": "Includes transpiled JS/TS, and Typescript declaration files (typings).\n\n[skip ci]",
"is_bot": false,
"headline": "Bundled output for commit 5ff66fd033ad64efa7ae16575ec868eed6cabadf",
"author_name": "flarum-bot",
"author_login": "flarum-bot",
"committed_at": "2024-09-28T12:41:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7446f6531afcac91b8733a17b830142ffebca067",
"body": "Includes transpiled JS/TS, and Typescript declaration files (typings).\n\n[skip ci]",
"is_bot": false,
"headline": "Bundled output for commit e5389acd6e85dc392676609d9a895f3a6e368e26",
"author_name": "flarum-bot",
"author_login": "flarum-bot",
"committed_at": "2024-09-28T10:42:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "32d80c08caadba03c9ed07a5e2ea07d8440a83f8",
"body": "Includes transpiled JS/TS, and Typescript declaration files (typings).\n\n[skip ci]",
"is_bot": false,
"headline": "Bundled output for commit b74ecbfacf684eb0dc70e708c4763d36ebd93405",
"author_name": "flarum-bot",
"author_login": "flarum-bot",
"committed_at": "2024-09-28T10:16:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3fe287ef0fff7a131cfa0b082fe3a0f80f0ca497",
"body": "* feat: private messages",
"is_bot": false,
"headline": "feat: messages extension (#4028)",
"author_name": "Sami Mazouz",
"author_login": "SychO9",
"committed_at": "2024-09-28T10:12:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0b96e928bd97c487624f18ee7846f94d9c350d66",
"body": "Includes transpiled JS/TS, and Typescript declaration files (typings).\n\n[skip ci]",
"is_bot": false,
"headline": "Bundled output for commit 5cea3d3b9bc4c5c6ae751bc4920a37bf032931af",
"author_name": "flarum-bot",
"author_login": "flarum-bot",
"committed_at": "2024-09-28T08:38:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8865814f425dcacb1a47b15259771d48cfbe4277",
"body": null,
"is_bot": false,
"headline": "feat: admin search UI (#4022)",
"author_name": "Sami Mazouz",
"author_login": "SychO9",
"committed_at": "2024-09-28T08:35:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60a6982bbbe100cd51b7a8211f818b2d161d492c",
"body": "* chore: phpunit 10\r\n\r\n* chore: config\r\n\r\n* Apply fixes from StyleCI\r\n\r\n* chore: phpunit 11 (php 8.2 minimum requirement)\r\n\r\n* feat: laravel 11\r\n\r\n* Apply fixes from StyleCI\r\n\r\n* feat: carbon v3\r\n\r\n* fixes",
"is_bot": false,
"headline": "chore: update dependencies (#4012)",
"author_name": "Sami Mazouz",
"author_login": "SychO9",
"committed_at": "2024-08-06T15:50:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "da0d4515699609489f9b4b277ca254abfdf4685a",
"body": null,
"is_bot": false,
"headline": "fix: 2.0 bugs (#4011)",
"author_name": "Sami Mazouz",
"author_login": "SychO9",
"committed_at": "2024-08-02T11:49:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb4860479c11b1ecb9e7941cc7f6d7fb8b97d6bf",
"body": null,
"is_bot": false,
"headline": "Simplify variable assignment using null coalescing operator (#4000)",
"author_name": "Ngô Quốc Đạt",
"author_login": "datlechin",
"committed_at": "2024-06-22T09:53:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1ba4f6e10fce5dabfb8a81a19e008981eee025dc",
"body": "* feat: vanilla CSS color scheme changes\r\n* chore: scheme mixin\r\n* chore: remove darkmode & colored header less variables\r\n* feat: high contrast schemes",
"is_bot": false,
"headline": "feat: vanilla CSS color scheme changes (#3996)",
"author_name": "Sami Mazouz",
"author_login": "SychO9",
"committed_at": "2024-06-22T07:05:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "034441281c0698aa53f3e170e7671a2636bbe44f",
"body": "Includes transpiled JS/TS, and Typescript declaration files (typings).\n\n[skip ci]",
"is_bot": false,
"headline": "Bundled output for commit a8777c6198edd520011731d939ae92b45fcec176",
"author_name": "flarum-bot",
"author_login": "flarum-bot",
"committed_at": "2024-06-21T08:39:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef10d0636c612a9e6830e2619b75b41fd64095ca",
"body": "* refactor: json:api refactor iteration 1\r\n* chore: delete dead code\r\n* fix: regressions\r\n* chore: move additions/changes to package\r\n* feat: AccessTokenResource\r\n* feat: allow dependency injection in resources\r\n* feat: `ApiResource` extender\r\n* feat: improve\r\n* feat: refactor tags extension\r\n* feat\n[…]\nt\r\n* feat: eager loading\r\n* test: adapt\r\n* test: phpstan\r\n* test: adapt\r\n* fix: typing\r\n* fix: approving content\r\n* tet: adapt frontend tests\r\n* chore: typings\r\n* chore: review\r\n* fix: breaking change",
"is_bot": false,
"headline": "refactor: JSON:API (#3971)",
"author_name": "Sami Mazouz",
"author_login": "SychO9",
"committed_at": "2024-06-21T08:36:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8dd9a6a20404929a299e7926e67f4e92c5828e47",
"body": "Seems composer has a vulnerability, see https://github.com/advisories/GHSA-7c6p-848j-wh5h\r\n\r\n\r\nAffected versions\r\n>= 2.0.0-alpha1, < 2.2.23 -- patched in 2.2.23\r\n>= 2.3.0-rc1, < 2.7.0 -- patched in 2.7.0\r\n\r\n---\r\n\r\nLet's raise the minimum to enforce the latest.\r\n\r\nThank you @peopleinside for reporting this.",
"is_bot": false,
"headline": "Patch vulnerability advisory (#3966)",
"author_name": "Daniël Klabbers",
"author_login": "luceos",
"committed_at": "2024-02-22T10:40:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "829207c415fa3dbbdcffd99b047b563aef39f674",
"body": "Includes transpiled JS/TS, and Typescript declaration files (typings).\n\n[skip ci]",
"is_bot": false,
"headline": "Bundled output for commit 3fbe05fd1808c515f41469167b04566300fee031",
"author_name": "flarum-bot",
"author_login": "flarum-bot",
"committed_at": "2024-01-22T18:01:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de9e63e4503c90d41f3dc3c1de1c48d93d168ee1",
"body": "* feat(em): port extension manager from 1.0\r\n\r\n* Apply fixes from StyleCI\r\n\r\n* chore: phpstan\r\n\r\n---------\r\n\r\nCo-authored-by: StyleCI Bot <bot@styleci.io>",
"is_bot": false,
"headline": "feat(em): port extension manager from 1.0 (#3959)",
"author_name": "Sami Mazouz",
"author_login": "SychO9",
"committed_at": "2024-01-22T17:58:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "780ed81ce21f774fc580c1ba9777853fcdbaf7f1",
"body": "* fix: paginated list limit hard to change\r\n\r\n* chore: use the default value\r\n\r\n* chore: apply to other list states\r\n\r\n* chore: remove debugging code\r\n\r\n* fix: typings",
"is_bot": false,
"headline": "fix: paginated list limit hard to change (#3918)",
"author_name": "Sami Mazouz",
"author_login": "SychO9",
"committed_at": "2023-11-10T21:31:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f5bb8043cb5bf84b58c2b063376058161864c579",
"body": "…ction (#3910)",
"is_bot": false,
"headline": "Use `::class` syntax to fetch class name instead of `get_class()` fun…",
"author_name": "Ngô Quốc Đạt",
"author_login": "datlechin",
"committed_at": "2023-10-29T13:43:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a4bf053e006db71c01bb51611f31f4e7aeb9bd65",
"body": "Includes transpiled JS/TS, and Typescript declaration files (typings).\n\n[skip ci]",
"is_bot": false,
"headline": "Bundled output for commit 5ab5257ff521bede446613c1dcd61effdac99090",
"author_name": "flarum-bot",
"author_login": "flarum-bot",
"committed_at": "2023-10-10T20:41:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b97cb44bd42d6a4070c0f1106aee88f33f4d9282",
"body": "* feat: make page structure customizable across different pages (#3867)\r\n\r\n* feat: create `PageStructure` component\r\n* feat: apply to `DiscussionPage`\r\n* feat: apply to `UserPage`\r\n* feat: apply to `TagsPage`\r\n* fix: adapt subscriptions ext\r\n* chore: cleanup\r\n\r\n* chore: use grid & flexbox for the di\n[…]\nnvert `UploadImageButton` to tsx\r\n* feat: reusable `UploadImageButton` component\r\n* feat: add `image-upload` setting type\r\n\r\n* feat: extensible default footer component (#3883)\r\n\r\n* chore: yarn format",
"is_bot": false,
"headline": "feat: theming and extensibility improvements (#3876)",
"author_name": "Sami Mazouz",
"author_login": "SychO9",
"committed_at": "2023-10-10T20:36:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f7de6fa798cb806d84e6e58edc4aa2de71005325",
"body": null,
"is_bot": false,
"headline": "chore: use str_contains (#3841)",
"author_name": "Ngô Quốc Đạt",
"author_login": "datlechin",
"committed_at": "2023-09-14T20:05:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f27f1805df438d4e3b1c1dcebb685092fdaac5c6",
"body": "Includes transpiled JS/TS, and Typescript declaration files (typings).\n\n[skip ci]",
"is_bot": false,
"headline": "Bundled output for commit 229a7affa5cb0652da0cc4fd8b420900992c6f96",
"author_name": "flarum-bot",
"author_login": "flarum-bot",
"committed_at": "2023-08-02T17:04:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8297cc87698966e929f9608e585eef7ebf5190ab",
"body": "Includes transpiled JS/TS, and Typescript declaration files (typings).\n\n[skip ci]",
"is_bot": false,
"headline": "Bundled output for commit 016503d8c37eab107b36830b6fbcb5468bcb1226",
"author_name": "flarum-bot",
"author_login": "flarum-bot",
"committed_at": "2023-06-29T18:24:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "98c48426314ea22619170ce3e219b7540a37a031",
"body": "…es (#3835)",
"is_bot": false,
"headline": "chore(phpstan): upgrade to be compatible with latest dependency updat…",
"author_name": "Sami Mazouz",
"author_login": "SychO9",
"committed_at": "2023-06-15T16:49:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "daa96d447a5318ce5108a5d6d25cbda1939028b4",
"body": "Allows running tests without constantly running `composer install` on each extension.",
"is_bot": false,
"headline": "chore: improve test suite (#3814)",
"author_name": "Sami Mazouz",
"author_login": "SychO9",
"committed_at": "2023-06-15T12:26:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1c8d97ef5748bf73ac470ffadd6e36057e2c41ae",
"body": "Includes transpiled JS/TS, and Typescript declaration files (typings).\n\n[skip ci]",
"is_bot": false,
"headline": "Bundled output for commit f67ca5782a0b22d194526b6b11a2086443863921",
"author_name": "flarum-bot",
"author_login": "flarum-bot",
"committed_at": "2023-06-07T10:45:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f51fc5824bb9ab72423593b83f210b6a90daf276",
"body": "Signed-off-by: Sami Mazouz <sychocouldy@gmail.com>",
"is_bot": false,
"headline": "fix(regression): require `flarum/testing:2.0`",
"author_name": "Sami Mazouz",
"author_login": "SychO9",
"committed_at": "2023-05-31T08:53:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b3527a6f8e988527c3ca5fe925d3ac1d93d5c4e",
"body": "Signed-off-by: Sami Mazouz <sychocouldy@gmail.com>",
"is_bot": false,
"headline": "fix(regression): caught errors",
"author_name": "Sami Mazouz",
"author_login": "SychO9",
"committed_at": "2023-05-31T08:50:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5be887938a78154cc20340b5466a63557edd80cb",
"body": "This reverts commit c94c1404843033a407c306895ed0a64333f55bf9.",
"is_bot": false,
"headline": "Revert \"fix(regression): caught errors\"",
"author_name": "Sami Mazouz",
"author_login": "SychO9",
"committed_at": "2023-05-31T08:47:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6478863c07e228d7b7b5e31570dd6dd5322ab168",
"body": "Signed-off-by: Sami Mazouz <sychocouldy@gmail.com>",
"is_bot": false,
"headline": "fix(regression): caught errors",
"author_name": "Sami Mazouz",
"author_login": "SychO9",
"committed_at": "2023-05-31T08:45:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d9c84079d53b92884358dcc41f86dfc19c27510",
"body": "* chore: set minimum php version to 8.1\r\n\r\nSigned-off-by: Sami Mazouz <sychocouldy@gmail.com>\r\n\r\n* chore: update codebase to php8.1\r\n\r\nSigned-off-by: Sami Mazouz <sychocouldy@gmail.com>\r\n\r\n* Apply fixes from StyleCI\r\n\r\n* chore: update workflow php version\r\n\r\nSigned-off-by: Sami Mazouz <sychocouldy@g\n[…]\nail.com>\r\n\r\n* fix: one last error\r\n\r\nSigned-off-by: Sami Mazouz <sychocouldy@gmail.com>\r\n\r\n---------\r\n\r\nSigned-off-by: Sami Mazouz <sychocouldy@gmail.com>\r\nCo-authored-by: StyleCI Bot <bot@styleci.io>",
"is_bot": false,
"headline": "chore: update codebase to php8.1 (#3827)",
"author_name": "Sami Mazouz",
"author_login": "SychO9",
"committed_at": "2023-05-30T10:36:12Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "73c10bc649a46d9e0125ba5e6c0ac2aeb9399322",
"body": "Signed-off-by: Sami Mazouz <sychocouldy@gmail.com>",
"is_bot": false,
"headline": "chore: v1.8 preparations",
"author_name": "Sami Mazouz",
"author_login": "SychO9",
"committed_at": "2023-05-20T15:08:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5691d2555b543eddf2a3eceba32e58280c9588db",
"body": "Includes transpiled JS/TS, and Typescript declaration files (typings).\n\n[skip ci]",
"is_bot": false,
"headline": "Bundled output for commit feb968780afb7b39a82f09dbae792fe445e8040c",
"author_name": "flarum-bot",
"author_login": "flarum-bot",
"committed_at": "2023-05-14T20:41:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b8435ae981ce530705f33becdf7197b4c221361b",
"body": "Signed-off-by: Sami Mazouz <sychocouldy@gmail.com>",
"is_bot": false,
"headline": "chore(regression): use correct imports from core js",
"author_name": "Sami Mazouz",
"author_login": "SychO9",
"committed_at": "2023-05-14T20:34:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a776940df570b1e18369ca374157722995ca781",
"body": "Includes transpiled JS/TS, and Typescript declaration files (typings).\n\n[skip ci]",
"is_bot": false,
"headline": "Bundled output for commit e63e161be6d62d7a29998bf0cacbf5641e7a8a4f",
"author_name": "flarum-bot",
"author_login": "flarum-bot",
"committed_at": "2023-05-07T16:49:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5beb7cb60594de0b05ee3f51b446262d8facba5",
"body": null,
"is_bot": false,
"headline": "chore: major frontend JS cleanup (#3609)",
"author_name": "David Wheatley",
"author_login": "davwheat",
"committed_at": "2023-05-07T16:40:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "93e57e257d67d9131d3e494378b979037e6d9377",
"body": "Bumps [webpack](https://github.com/webpack/webpack) from 5.75.0 to 5.76.0.\r\n- [Release notes](https://github.com/webpack/webpack/releases)\r\n- [Commits](https://github.com/webpack/webpack/compare/v5.75.0...v5.76.0)\r\n\r\n---\r\nupdated-dependencies:\r\n- dependency-name: webpack\r\n dependency-type: direct:production\r\n...\r\n\r\nSigned-off-by: dependabot[bot] <support@github.com>\r\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): bump webpack from 5.75.0 to 5.76.0 (#3761)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2023-04-19T06:45:00Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 27,
"commits_last_year": 24,
"latest_release_at": "2026-07-08T15:54:42Z",
"latest_release_tag": "v2.0.0-rc.5",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 19,
"days_since_latest_release": 21,
"mean_days_between_releases": 25
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 75,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "flarum/extension-manager",
"exists": true,
"license": "MIT",
"keywords": [
"composer",
"manager",
"extensions",
"updater",
"packages"
],
"ecosystem": "packagist",
"matches_repo": true,
"registry_url": "https://packagist.org/packages/flarum/extension-manager",
"is_deprecated": false,
"latest_version": "v2.0.0-rc.5",
"repository_url": "https://github.com/flarum/extension-manager",
"versions_count": 28,
"total_downloads": 227011,
"dependents_count": 0,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 3476,
"first_published_at": null,
"latest_published_at": "2026-07-08T15:08:06Z",
"latest_version_yanked": null,
"days_since_latest_publish": 22
}
]
},
"popularity": {
"forks": 7,
"stars": 10,
"watchers": 3,
"fork_history": {
"days": [
{
"date": "2021-09-01",
"count": 1
},
{
"date": "2021-11-03",
"count": 1
},
{
"date": "2022-02-25",
"count": 1
},
{
"date": "2025-06-07",
"count": 1
},
{
"date": "2025-08-15",
"count": 1
},
{
"date": "2025-09-02",
"count": 1
},
{
"date": "2026-06-27",
"count": 1
}
],
"complete": true,
"collected": 7,
"total_forks": 7
},
"star_history": null,
"open_issues_and_prs": 2
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"js/tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 9623,
"source_files_sampled": 146,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"composer.json",
"js/package.json"
],
"advisories": {
"error": "No resolved dependencies carried a version and a supported ecosystem",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 13,
"direct_affected_count": 0
},
"ecosystems": [
"npm",
"packagist"
],
"dependencies": [
{
"name": "flarum/core",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^2.0.0-rc.5"
},
{
"name": "pretty-bytes",
"manifest": "js/package.json",
"ecosystem": "npm",
"version_constraint": "^6.0.0"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "pretty-bytes",
"direct": true,
"version": "^6.0.0",
"ecosystem": "npm"
},
{
"name": "flarum/core",
"direct": true,
"version": null,
"ecosystem": "packagist"
},
{
"name": "@flarum/prettier-config",
"direct": false,
"version": "^1.0.0",
"ecosystem": "npm"
},
{
"name": "flarum-tsconfig",
"direct": false,
"version": "^2.0.0",
"ecosystem": "npm"
},
{
"name": "flarum-webpack-config",
"direct": false,
"version": "^3.0.0",
"ecosystem": "npm"
},
{
"name": "prettier",
"direct": false,
"version": "^2.5.1",
"ecosystem": "npm"
},
{
"name": "typescript",
"direct": false,
"version": "^4.5.4",
"ecosystem": "npm"
},
{
"name": "typescript-coverage-report",
"direct": false,
"version": "^0.6.1",
"ecosystem": "npm"
},
{
"name": "webpack",
"direct": false,
"version": "^5.104.1",
"ecosystem": "npm"
},
{
"name": "webpack-cli",
"direct": false,
"version": "^4.9.1",
"ecosystem": "npm"
},
{
"name": "composer/composer",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "flarum/tags",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "flarum/testing",
"direct": false,
"version": null,
"ecosystem": "packagist"
}
],
"collected": true,
"truncated": false,
"total_count": 13,
"direct_count": 2,
"indirect_count": 11
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 4,
"open_issues": 2,
"closed_ratio": 0.833,
"closed_issues": 10,
"closed_unmerged_prs": 0
},
"bus_factor": 2,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "SychO9",
"commits": 92,
"avatar_url": "https://avatars.githubusercontent.com/u/20267363?v=4"
},
{
"type": "User",
"login": "flarum-bot",
"commits": 55,
"avatar_url": "https://avatars.githubusercontent.com/u/39334649?v=4"
},
{
"type": "User",
"login": "imorland",
"commits": 17,
"avatar_url": "https://avatars.githubusercontent.com/u/16573496?v=4"
},
{
"type": "User",
"login": "askvortsov1",
"commits": 13,
"avatar_url": "https://avatars.githubusercontent.com/u/38059171?v=4"
},
{
"type": "User",
"login": "datlechin",
"commits": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/56961917?v=4"
},
{
"type": "User",
"login": "StyleCIBot",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/11048387?v=4"
},
{
"type": "User",
"login": "davwheat",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/7406822?v=4"
},
{
"type": "User",
"login": "luceos",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/504687?v=4"
},
{
"type": "User",
"login": "szepeviktor",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/952007?v=4"
}
],
"contributors_sampled": 9,
"top_contributor_share": 0.482
},
"quality_signals": {
"has_ci": false,
"has_tests": true,
"ci_workflows": [],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 13 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": null,
"reason": "no workflows found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 5,
"reason": "6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": null,
"reason": "no dependencies found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": null,
"reason": "No tokens found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "1576646c29c8237eddd662c1f0bcd6dae6ede70a",
"ran_at": "2026-07-30T15:16:30Z",
"aggregate_score": 5.4,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-30T15:09:31Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2022-01-25T23:51:56Z",
"ci_last_conclusion": null,
"oldest_open_issues": [
{
"number": 15,
"created_at": "2026-03-04T02:07:49Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 16,
"created_at": "2026-05-21T17:38:36Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/flarum/extension-manager",
"host": "github.com",
"name": "extension-manager",
"owner": "flarum"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 61,
"inputs": {
"security": 54,
"vitality": 80,
"community": 48,
"governance": 76,
"engineering": 38
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 80,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 67,
"inputs": {
"commits_last_year": 24,
"human_commit_share": 0.98,
"days_since_last_push": 0,
"active_weeks_last_year": 19
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "19/52 weeks with commits",
"points": 13.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 19
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "24 commits in the last year",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 24
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5",
"points": 5,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 27,
"latest_release_tag": "v2.0.0-rc.5",
"releases_from_tags": false,
"days_since_latest_release": 21,
"mean_days_between_releases": 25
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "27 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 27
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 21 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 21
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~25 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 25
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 0,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 0 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 0
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 48,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 24,
"inputs": {
"forks": 7,
"stars": 10,
"watchers": 3,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "10 stars",
"points": 15.5,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 10
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "7 forks",
"points": 6.5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 7
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "3 watchers",
"points": 1.7,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 3
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 77,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "at_risk",
"name": "Ecosystem adoption (downloads)",
"note": null,
"notes": [],
"value": 47,
"inputs": {
"packages": [
"flarum/extension-manager"
],
"dependents": 0,
"ecosystems": "packagist",
"total_downloads": 227011,
"monthly_downloads": 3476
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "3,476 downloads/month across packagist",
"points": 47.2,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 3476,
"ecosystems": "packagist"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "0 packages depend on it",
"points": 0,
"status": "missed",
"details": [
{
"code": "registry_dependents",
"params": {
"count": 0
}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 76,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "moderate",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 59,
"inputs": {
"bus_factor": 2,
"contributors_sampled": 9,
"top_contributor_share": 0.482
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "2 contributor(s) cover half of all commits",
"points": 25.2,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 2
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 48% of commits",
"points": 11.7,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 48
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "9 contributors",
"points": 12.2,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 9
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 13 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 77,
"inputs": {
"merged_prs": 4,
"open_issues": 2,
"closed_issues": 10,
"issue_closed_ratio": 0.833,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "83% of issues closed",
"points": 38.9,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 83
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "4/4 decided PRs merged",
"points": 38.2,
"status": "met",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 4,
"decided": 4
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"followers": 798,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "flarum",
"public_repos": 53,
"account_age_days": 4690
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "798 followers of flarum",
"points": 20.9,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 798,
"login": "flarum"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "53 public repos, account ~12 yr old",
"points": 24.6,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 53
}
},
{
"code": "account_age_years",
"params": {
"years": 12
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"flarum/extension-manager"
],
"ecosystems": "packagist",
"any_deprecated": false,
"min_days_since_publish": 22
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on packagist",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "packagist"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 22 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 22
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "28 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 28
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "at_risk",
"name": "Engineering Quality",
"value": 38,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "at_risk",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 30,
"inputs": {
"has_ci": false,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 54,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests, Dangerous-Workflow, Packaging, Pinned-Dependencies, Signed-Releases, Token-Permissions. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests",
"dangerous_workflow",
"packaging",
"pinned_dependencies",
"signed_releases",
"token_permissions"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 54,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 12,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 6,
"scorecard_aggregate": 5.4
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 13 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no workflows found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5",
"points": 3.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "No tokens found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 21
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 53,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.959,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "94 of 98 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 94,
"sampled": 98
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_pinned_dependencies"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 52,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
"js/tsconfig.json"
],
"agent_commit_share": 0.03,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0.02
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "js/tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "js/tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "3 of the last 100 commits agent-authored or agent-credited",
"points": 6,
"status": "partial",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 3,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "2 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 2,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "good",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"primary_language": "PHP",
"largest_source_bytes": 9623,
"source_files_sampled": 146,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "PHP with type-check config (js/tsconfig.json)",
"points": 27,
"status": "partial",
"details": [
{
"code": "typecheck_config_language",
"params": {
"files": "js/tsconfig.json",
"language": "PHP"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/146 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 146,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"No resolved dependencies carried a version and a supported ecosystem"
],
"report_type": "repository",
"generated_at": "2026-07-30T15:16:40.080145Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/f/flarum/extension-manager.svg",
"full_name": "flarum/extension-manager",
"license_state": "standard",
"license_spdx": "MIT"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — Packagist.