Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"ai",
"anthropic",
"claude-code",
"cli",
"codex",
"cost-optimization",
"cursor",
"developer-tools",
"finops",
"github-copilot",
"llm",
"mcp",
"openai"
],
"is_fork": false,
"size_kb": 33091,
"has_wiki": true,
"homepage": "https://ai-spend-agent.vercel.app",
"languages": {
"CSS": 5677,
"Shell": 4453,
"JavaScript": 67589,
"TypeScript": 552048
},
"pushed_at": "2026-07-20T05:05:03Z",
"created_at": "2026-06-12T23:39:17Z",
"owner_type": "User",
"updated_at": "2026-07-20T05:04:40Z",
"description": "Your AI bill in one view — npx aibill. Local-first CLI that reads the Claude Code/Codex logs on your machine: real usage by project, plan value multiple, dead context, paste-ready fixes. Weekly artifacts coming: limits, wrapped, context health, secrets. Nothing leaves your laptop.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript",
"JavaScript"
]
},
"owner": {
"blog": null,
"name": null,
"type": "User",
"login": "futurastudio",
"company": null,
"location": null,
"followers": 0,
"avatar_url": "https://avatars.githubusercontent.com/u/212994492?v=4",
"created_at": "2025-05-23T02:55:52Z",
"is_verified": null,
"public_repos": 3,
"account_age_days": 429
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.5.4",
"kind": "patch",
"published_at": "2026-07-20T05:04:35Z"
},
{
"tag": "v0.5.3",
"kind": "patch",
"published_at": "2026-07-20T04:42:36Z"
},
{
"tag": "v0.5.2",
"kind": "patch",
"published_at": "2026-07-20T03:32:07Z"
},
{
"tag": "v0.5.1",
"kind": "patch",
"published_at": "2026-07-10T02:24:38Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2026-07-06T00:48:55Z"
},
{
"tag": "v0.4.4",
"kind": "patch",
"published_at": "2026-07-05T23:37:22Z"
},
{
"tag": "v0.4.3",
"kind": "patch",
"published_at": "2026-07-05T23:25:22Z"
},
{
"tag": "v0.4.2",
"kind": "patch",
"published_at": "2026-07-05T23:08:41Z"
},
{
"tag": "v0.4.1",
"kind": "patch",
"published_at": "2026-07-05T22:48:19Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2026-07-05T22:43:29Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2026-07-04T14:55:59Z"
},
{
"tag": "v0.2.2",
"kind": "patch",
"published_at": "2026-07-04T14:43:32Z"
},
{
"tag": "v0.2.1",
"kind": "patch",
"published_at": "2026-07-03T04:14:00Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2026-07-03T01:10:42Z"
},
{
"tag": "v0.1.5",
"kind": "patch",
"published_at": "2026-07-03T00:08:37Z"
},
{
"tag": "v0.1.4",
"kind": "patch",
"published_at": "2026-07-02T23:32:43Z"
},
{
"tag": "v0.1.3",
"kind": "patch",
"published_at": "2026-07-02T22:43:30Z"
},
{
"tag": "v0.1.2",
"kind": "patch",
"published_at": "2026-06-17T22:17:16Z"
}
],
"recent_commits": [
{
"oid": "d2f74b263cc696b7473ed10986dc0bf88d865e91",
"body": "0.5.4: terminal-native shareable report design",
"is_bot": false,
"headline": "Merge pull request #26 from futurastudio/feat/terminal-report-design",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-20T05:04:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "542f6f9053d51206ff07b52e1bb8194e0bed4e76",
"body": "Terminal window chrome, value-multiple hero, stat cards, gradient bars,\ndead-context chips; sections = the loop (WHAT HAPPENED / WHY / FIX /\nVERIFY). Own CSS, ~10KB, agency CSS no longer shared.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(report): terminal-native shareable report design (0.5.4)",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-20T05:02:24Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f0d504a35d11f21486beb835f59b9451dee7ee45",
"body": "0.5.3: watch state-poisoning fix + command-sequence invariant suite",
"is_bot": false,
"headline": "Merge pull request #25 from futurastudio/fix/watch-integrity-0.5.3",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-20T04:42:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6eeae5ab866b22a1f6cc51fc3c4da8dc22822e98",
"body": "… sequence invariant suite (0.5.3)\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(watch): state-poisoning — persist TRUE data mode; compact cycles;…",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-20T04:41:11Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a6bf1f8160362c4597304b81784e2539ea936d65",
"body": "Landing: show the weekly-artifact roadmap + concrete waitlist promise",
"is_bot": false,
"headline": "Merge pull request #24 from futurastudio/feat/landing-roadmap",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-20T04:33:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c6e157993f7fa0208d4bb1e5f9ecf8ca44d23487",
"body": "… promise\n\n- 'What's next' grid: aibill limits / wrapped / context / secrets, one per\n week, free in the CLI, local-only\n- Beta CTA now says what the waitlist is FOR: history forever, alerts while\n the laptop is off, living share URL, multi-machine, team rollups\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(landing): weekly-artifact roadmap section + concrete hosted-tier…",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-20T04:32:49Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "20c76f57580b796edc16788e13e5442c22afe222",
"body": "0.5.2: model prices for Gemini, DeepSeek, Kimi, Grok — honest coverage docs",
"is_bot": false,
"headline": "Merge pull request #22 from futurastudio/feat/model-coverage-0.5.2",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-20T03:32:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c9c7ab55d81c37feb68d08a614de03a23482b317",
"body": "… docs (0.5.2)\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(pricing): Gemini/DeepSeek/Kimi/Grok list prices; honest coverage…",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-20T03:29:04Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ef5d87ca0305cdf30651e683315ef37249fb83ad",
"body": "feat(web): liquid-glass redesign with fluid-interface animations",
"is_bot": false,
"headline": "Merge pull request #21 from futurastudio/feat/liquid-glass-landing",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-10T04:12:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dec4fdbe496f97f67ac4886b958d5a7edf613c0f",
"body": "Applies Apple fluid-interface principles (emilkowalski/skills apple-design):\n- Glass material ladder (.glass/.glass-heavy/.glass-well) — translucent\n layers with backdrop blur+saturate, 1px specular top edge; material\n weight encodes hierarchy (nav heaviest, inputs recessed)\n- Ambient aurora field\n[…]\ndown (active scale), hover lift on cards\n- prefers-reduced-motion: cross-fades only, no drift/elasticity\n- Display tracking tightened (-0.025em)\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(web): liquid-glass redesign with fluid-interface animations",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-10T04:11:46Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3031d505165d42ddb3ddd7e2f4645f42b54c06c6",
"body": "….5.1\n\n0.5.1: apply-prompt hardening — owning projects + prohibitive approval gate",
"is_bot": false,
"headline": "Merge pull request #20 from futurastudio/fix/apply-prompt-hardening-0…",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-10T02:24:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c254c8260280427f88ef79a6796ce108b71b26a7",
"body": "…e (0.5.1)\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(apply): owning projects per MCP server + prohibitive approval gat…",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-10T02:13:20Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "c1b683aef0929eeb8f71672a4680a886c86b9546",
"body": "chore(web): regenerate hero demo from 0.5.0 CLI (final pre-launch refresh)",
"is_bot": false,
"headline": "Merge pull request #19 from futurastudio/chore/regen-demo-0.5.0",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-10T01:41:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b2d468d416e8bf7200f65d67fa045813be60ada8",
"body": "…resh)\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(web): regenerate hero demo from 0.5.0 CLI (final pre-launch ref…",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-10T01:38:55Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "632c1ea7bb8cb3e2334a02e5ee2192d4dee648f6",
"body": "0.5.0: the HTML report is now actually shareable",
"is_bot": false,
"headline": "Merge pull request #18 from futurastudio/feat/shareable-report-0.5.0",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-06T00:48:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eb678808838124d5c2ab6b3cac8f2dec8c78363c",
"body": "44KB agency board pack -> ~23KB share-first page built from the readout's\nown engines: value multiple hero, TL;DR, by-project/model, named dead\ncontext, deduplicated cut list, plan check, npx aibill footer. Agency\nreport kept for connected/mapped data; regression test bars agency\nframing from the shareable report.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(report): compact shareable HTML report for local-log users (0.5.0)",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-06T00:45:28Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "26242398545ea0b41bc9fc98c2bd1c284b676d3b",
"body": "0.4.4: one freshness rule — artifact can never disagree with the readout",
"is_bot": false,
"headline": "Merge pull request #17 from futurastudio/fix/fresh-artifact-0.4.4",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-05T23:37:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "68359286d0e5df8f2a10a234688ec9a4bfd5b859",
"body": "… plural fix (0.4.4)\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(consistency): report/apply re-read logs fresh; aibill everywhere;…",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-05T23:36:15Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f260eb8683c829ece7747f2deb0c9c2e638787e4",
"body": "0.4.3: TL;DR opener — decide in five lines whether to read sixty",
"is_bot": false,
"headline": "Merge pull request #16 from futurastudio/fix/tldr-digest-0.4.3",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-05T23:25:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "84c95c7dcaaf31ee17221898da79e2baf4d1026e",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(readout): TL;DR opener + plan-check line wrapping (0.4.3)",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-05T23:22:48Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "e569dd44bdeecac696a8018b93ed4ca0fd28a616",
"body": "….4.2\n\n0.4.2: apply artifact rebuilt from the readout's own engines",
"is_bot": false,
"headline": "Merge pull request #15 from futurastudio/fix/apply-artifact-rewrite-0…",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-05T23:08:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a6933194a5d1212f4b507f154c7c792b8e4e14a7",
"body": "…xt items (0.4.2)\n\nThe old artifact came from the agency workflow engine: generic advice a\ncoding agent can't act on, unmapped-client noise, numbers conflicting with\nthe readout. Now: named MCP removals with config paths and commands,\nheavy-context guidance, config-only constraints, per-removal rollback,\nnpx aibill verify. Agency artifact kept for attributed data.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(apply): local-log artifact built from cut list + named dead-conte…",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-05T23:06:18Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "4026971b09f54072c425356832fb573dbd2968b6",
"body": "0.4.1: npx aibill (npm blocked aispend/aireceipt as typosquats)",
"is_bot": false,
"headline": "Merge pull request #14 from futurastudio/fix/aibill-alias-0.4.1",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-05T22:48:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c3a8d6236ea2a64840d132b8edf7640380a9ba52",
"body": "…t (0.4.1)\n\nai-spend and ai-receipt exist on the registry (not ours); npm refuses\nunscoped near-matches. aibill + ai-bill are both free. Readout/README updated\nso no printed command points at an unpublished package.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(brand): npx aibill — npm similarity rule blocked aispend/aireceip…",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-05T22:46:44Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "b4281b1c42f8b3c594ed5317392a71d623077b9c",
"body": "0.4.0: npx aispend / npx aireceipt aliases + apply command",
"is_bot": false,
"headline": "Merge pull request #13 from futurastudio/feat/aliases-0.4.0",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-05T22:43:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d105961b88abd78825f19e35a79a268c77f00af",
"body": "- aispend (promoted, speakable) and aireceipt (brand) alias packages: 4-line\n wrappers over the exported runMain — one CLI, several names\n- apply = short form of apply-artifact; readout APPLY step is npx aispend apply\n- CI smoke-tests both alias bins\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(brand): npx aispend + npx aireceipt aliases, apply command (0.4.0)",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-05T22:37:18Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "4aaf2d5a814f7855a1d01981c7c0105d6696d697",
"body": "0.3.0: subscription-first readout for the launch audience",
"is_bot": false,
"headline": "Merge pull request #12 from futurastudio/feat/subscription-first-0.3.0",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-04T14:55:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d28a4040e42b92fcb51ef72036a2ac2498b19131",
"body": "…-default table, hard limit evidence (0.3.0)\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(persona): subscription-first readout — value-led header, project…",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-04T14:51:22Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "b46f5e8495acbe479ebac64a3e8e7c5c797be9c5",
"body": "0.2.2: focused drill-downs, inline apply-artifact prompt",
"is_bot": false,
"headline": "Merge pull request #11 from futurastudio/fix/drilldown-artifacts-0.2.2",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-04T14:43:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab0174f8b39d0f8c70bbaa5af1a77109b69e855b",
"body": "…t open hints (0.2.2)\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(ux): focused --group-by view, inline apply-artifact prompt, repor…",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-04T14:38:16Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "76c6587be6af535e55bb26f9790887b4bdb53b5e",
"body": "0.2.1: complete the apply/verify loop for quickstart users",
"is_bot": false,
"headline": "Merge pull request #10 from futurastudio/fix/loop-completion-0.2.1",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-03T04:14:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "04b00187167d28016b5ac420da16ace5656c4351",
"body": "…$1 cuts; (home) project label (0.2.1)\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(loop): report/apply-artifact work after quickstart; collapse sub-…",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-03T04:07:08Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "b0b61ec73649647956d9d6899f650e698c15dfe9",
"body": "0.2.0: local plan detection — the tool knows who it's talking to",
"is_bot": false,
"headline": "Merge pull request #9 from futurastudio/feat/plan-detection-0.2.0",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-03T01:10:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b69a421b20c79f2c6d87e5b4840f52bcdf4777a",
"body": "- core planDetection: Claude Max/Pro tier + ChatGPT plan read from the agents'\n own local config (whitelisted fields only, tokens never read, no network)\n- plan check speaks in facts (detected plan, real value multiple) and warns\n when usage runs past the detected tier (trim first, upgrade second)\n[…]\ncaveat\n keys off detection; unknown tiers named honestly without invented prices\n- --plan <id> explicit override; doctor reports detected plans\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(plan-detection): the tool knows who it's talking to (0.2.0)",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-03T01:05:30Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "cf2c32494df62f69284c23f859ed226443a12e8d",
"body": "chore(web): regenerate demo recording from 0.1.5 CLI output",
"is_bot": false,
"headline": "Merge pull request #8 from futurastudio/chore/regen-demo-0.1.5",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-03T00:27:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc80c3c604c0e47c3eab2e9d780ac5ce28161ffc",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(web): regenerate demo recording from 0.1.5 CLI output",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-03T00:26:29Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "7366dcf6f76cfdd5c1185e09f40076f778b55b25",
"body": "fix(web): don't lose signups when waitlist table lacks source_ref",
"is_bot": false,
"headline": "Merge pull request #7 from futurastudio/fix/waitlist-source-ref-fallback",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-03T00:19:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ed833e4a2796861837149b9e9de23e0f4073aa69",
"body": "The production Supabase table predates the attribution column, so every\ninsert 400'd (PGRST204) and the API returned 503. Retry the insert\nwithout source_ref and log the ALTER statement to run — a signup with\nlost attribution beats a lost signup.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(web): don't lose signups when waitlist table lacks source_ref",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-03T00:14:10Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f30cc246c7f2489d85ce8db5cf2572fe3918b15c",
"body": "….1.5\n\n0.1.5: npx-safe commands, plan value multiple, honest flat-plan framing",
"is_bot": false,
"headline": "Merge pull request #6 from futurastudio/fix/npx-paths-value-framing-0…",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-03T00:08:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "227f01ca28e7134f624d99f7d8f9a222f156baa3",
"body": "Landing: real terminal demo video, hero copy, waitlist hardening",
"is_bot": false,
"headline": "Merge pull request #5 from futurastudio/feat/launch-landing-demo",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-03T00:06:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "effafe698a83c4f7c6a9679e341fccd189faaabe",
"body": "…-plan savings framing (0.1.5)\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(readout): npx-prefixed commands, plan value multiple, honest flat…",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-03T00:06:23Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "e02e20c5b1f76e90424364f88637d44a0c943ecd",
"body": "- Hero demo is now a real terminal recording (webm/mp4 + poster),\n regenerated from the actual CLI by scripts/record-demo.sh so it can\n never drift from the product. Removes the hand-coded TerminalDemo\n mockup (it had already drifted: non-deduplicated savings figure).\n- Hero subheadline leads wit\n[…]\nction, masked email in\n server logs.\n- README: animated demo gif up top; AI Receipt SVG moved next to the\n report-card feature it illustrates.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(web): VHS terminal demo, hero copy, waitlist hardening",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-02T23:50:55Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "fb6d3ca573350b8feddd5e78cf30545ee0b5d7a5",
"body": "0.1.4: readout restructured as diagnose→recommend→apply→verify + coding-agent accuracy",
"is_bot": false,
"headline": "Merge pull request #4 from futurastudio/fix/readout-loop-0.1.4",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-02T23:32:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0269fd684781d837aaa79505259e251e23bedba9",
"body": "…t accuracy (0.1.4)\n\n- terminal readout restructured as numbered stages: 1·DIAGNOSE 2·RECOMMEND 3·APPLY 4·VERIFY\n- APPLY surfaces apply-artifact (copy-paste prompt); VERIFY surfaces re-run/watch + connect\n- no result-cache advice for local agent session aggregates (aggregation != repetition)\n- sessi\n[…]\n plan-check headlines state their projection basis (active days) + list-price transparency\n- <$0.01 display for tiny real amounts; bump to 0.1.4\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(readout): diagnose/recommend/apply/verify structure + coding-agen…",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-02T23:30:20Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "024b3a9a291f591b0e130956076c3c321d3bb01d",
"body": "Launch hardening 0.1.3: precision, reliability, safety + CI/release floor",
"is_bot": false,
"headline": "Merge pull request #3 from futurastudio/fix/launch-hardening-0.1.3",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-02T22:43:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a1bb46fa840bdbdadd36c7290ce60644a0b0f63d",
"body": "Honest numbers:\n- replace undocumented savings multipliers with documented impactRatios\n- derive provider completeness from record confidence (Copilot/Cursor -> estimated)\n- demo-only sample dead-context; real readouts get an honest 'none found'\n\nReliability:\n- discovery walk survives dangling symli\n[…]\nuild hooks + engines.node>=22 in all packages; CHANGELOG backfilled\n- bump to 0.1.3; CLI npm README; drop unused picocolors; exclude tsbuildinfo\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(launch): precision, reliability, and safety hardening for 0.1.3",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-07-02T22:02:24Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f11cc9f7d3426a0a26e200301823c4e8db27a6bc",
"body": "… 0.1.2\n\nThe repo logic was hardened in 9ea5d7a, but the user-facing demo surfaces still\nshowed the old impossible ~$1,151.45/mo additive savings. Sync them:\n\n- apps/web/components/Terminal.tsx: ~$1,151.45/mo \"identified savings\" ->\n ~$539.70/mo recommended-plan savings (deduplicated) + ~$611.75/mo\n[…]\nupdated) for republish.\n\nNo \"1151.45\" remains anywhere in tracked sources. typecheck/build clean,\n152 tests pass, npm audit clean.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(launch): sync public surfaces to deduplicated savings + bump to…",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-06-17T22:17:16Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "9ea5d7a51fa245b3915e4b049b2fcbf1aaf08736",
"body": "…e, audit, watch, doctor, docs)\n\nTrust-critical:\n- Overlapping savings math: add record-level coverage to cut actions and a\n deduplicated recommended-plan total (buildRecommendedPlan). CLI/report-card/\n report now show a recommended-plan figure that can never exceed the spend it\n draws from; over\n[…]\ncheck, build, 152 tests pass; npm audit clean; smoke tests\n(--sample, group-by, doctor, watch x2, report-card, report) all behave.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: launch-readiness trust hardening (savings math, confidence, stat…",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-06-17T21:45:43Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "08b069a8d5d2b368b7fdcf5eccc98820b28d2dad",
"body": "…ery install)\n\nThe previous version assigned a confident-looking token/$ figure to MCP servers\nusing a fabricated per-server token floor — not measurable from config, and\neasily fact-checked wrong. Rework for per-install accuracy:\n\n- Headline is the COUNT + utilization % (defensible; the part that a\n[…]\nfollow, not shipped here. 145 tests pass; verified on a real\nMCP-only machine (count only, zero fabricated numbers) and on sample.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(dead-context): count-led + measured-only pricing (accuracy for ev…",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-06-17T19:31:43Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "073e6309395695a4af0fca20c7d5f5644d14106b",
"body": "This planning doc names a competitor and references internal launch strategy\n(the Hermes handoff); it belongs only in the private dev repo. Keeps the\nclient-facing repo free of internal/competitive material.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: remove internal dead-context scope doc from public repo",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-06-17T19:19:56Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "929863189ebed779a1a6e3c19c8649011f2f6c99",
"body": "Port the launch-surface work from the dev repo into the client-facing repo,\nadapted onto the current files (forced-color fix, window-day messaging, and the\npolished README/landing all preserved).\n\n- README opener: bill-shock headline + \"half of what your agent loads, you pay\n for and never use\" + \"\n[…]\nscriptions + keywords reflect AI Receipt + dead context.\n\n143 tests pass; built CLI smoke-tested (bars, dead-context, AI Receipt).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: AI Receipt, \"where your money goes\" bars, dead-context cost",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-06-17T19:09:02Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3ec42fedca15fead9169e5557848971d4e236b27",
"body": "fix: clear Next PostCSS audit warning",
"is_bot": false,
"headline": "Merge pull request #2 from futurastudio/fix/next-postcss-audit",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-06-16T21:31:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f4bff1039bbf96a997d5907fc7da66a7c29f19cf",
"body": null,
"is_bot": false,
"headline": "fix: clear Next PostCSS audit warning",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-06-15T20:38:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1ac80d110090dd8644e16a2434415abe3f1f30bb",
"body": "fix: harden launch readiness paths",
"is_bot": false,
"headline": "Merge pull request #1 from futurastudio/fix/launch-readiness",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-06-15T20:20:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c1e21842b92a85191b172e4d07be785027527f2a",
"body": null,
"is_bot": false,
"headline": "fix: harden launch readiness paths",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-06-15T20:17:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2cdbe11a686b398eab25d6073aa46687fadb9d6a",
"body": "1. Honest projections: the monthly savings line now states the window\n ('30-day projection from N days of data') and caveats windows under 3\n days, so a short sample can't read as a confident monthly figure.\n2. Downgrade disclaimer: model-downgrade suggestions now carry a one-line\n 'verify bef\n[…]\n an\n issue link) instead of silently reporting $0 on an unrecognized shape.\n\n+2 tests (Cursor loud-failure, short-window caveat). 117 passing.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: pre-launch credibility hardening (3 adversarial-audit findings)",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-06-15T16:39:05Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3c23f7627bf9099d7003f0ef23fbdb87e39c44c1",
"body": "Rebuilt the landing page in a high-craft terminal idiom (OpenCode/Warp/\nResend references): Geist Mono headlines, cool near-black surface ladder,\ngreen-for-savings accent reserved for terminal contexts, traffic-light\nterminal window showing REAL ai-spend-agent output instead of the demo.gif\nplaceholder, single restrained green glow, blinking-cursor copy command,\nGitHub social proof, how-it-works steps, OG/social image metadata.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(web): terminal-aesthetic landing page redesign",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-06-15T16:02:38Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "abcbeb8b0b7aad7eea501ed941dbeb1acf85a7a6",
"body": null,
"is_bot": false,
"headline": "docs: 1280x640 social preview image",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-06-13T00:52:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "40c9144bf4bef04e6760e0f88d4eba873bbca93a",
"body": null,
"is_bot": false,
"headline": "test: update fixtures to mid-2026 sample models",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-06-13T00:17:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "57c009aef5cd9eaf7fb9d23a770c124a32472cfc",
"body": "The savings amount and its label were absolutely positioned and collided\non wide amounts — now a single text element with flowing tspans. Sample\ndata and downgrade rules updated to mid-2026 models (claude-fable-5 ->\nclaude-opus-4-8, gpt-5.5 -> gpt-5.5-mini); gpt-5-mini pricing tier added.",
"is_bot": false,
"headline": "fix(report-card): savings line text overlap; modernize sample models",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-06-13T00:13:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f47bee077b535f9d16cb8a8684bccb12a3280d9d",
"body": null,
"is_bot": false,
"headline": "docs: 60-second onboarding and who-this-is-for sections",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-06-12T23:41:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31bb92df6e0a4ded6cf2d6b3f79aeb74ea61bf31",
"body": "Your AI spend in one view, in 90 seconds. Local-first CLI + MCP server:\nreads Claude Code/Codex session logs and OpenAI/Anthropic/Cursor/Copilot\nbilling APIs, attributes spend, and produces a ranked savings cut list\nwith a subscription-vs-API plan check.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "ai-spend-agent v0.1.1 — initial public release",
"author_name": "futurastudio",
"author_login": "futurastudio",
"committed_at": "2026-06-11T02:21:41Z",
"body_truncated": false,
"is_coding_agent": true
}
],
"releases_count": 18,
"commits_last_year": 62,
"latest_release_at": "2026-07-20T05:04:35Z",
"latest_release_tag": "v0.5.4",
"releases_from_tags": true,
"days_since_last_push": 5,
"active_weeks_last_year": 5,
"days_since_latest_release": 6,
"mean_days_between_releases": 1.6
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 42,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "ai-spend-agent",
"exists": true,
"license": "MIT",
"keywords": [
"ai",
"spend",
"cost",
"finops",
"openai",
"anthropic",
"claude-code",
"codex",
"copilot",
"cursor",
"llm",
"token",
"billing",
"cli",
"mcp",
"claude-code-skills",
"dead-context"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/ai-spend-agent",
"is_deprecated": false,
"latest_version": "0.5.4",
"repository_url": "https://github.com/futurastudio/ai-spend-agent",
"versions_count": 19,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 3120,
"first_published_at": "2026-06-11T02:10:20.120000Z",
"latest_published_at": "2026-07-20T05:05:00.109000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
},
{
"name": "@agent-finops/core",
"exists": true,
"license": "MIT",
"keywords": [],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@agent-finops/core",
"is_deprecated": false,
"latest_version": "0.5.4",
"repository_url": "https://github.com/futurastudio/ai-spend-agent",
"versions_count": 19,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 3494,
"first_published_at": "2026-06-11T02:10:16.333000Z",
"latest_published_at": "2026-07-20T05:04:56.789000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
},
{
"name": "aibill",
"exists": true,
"license": "MIT",
"keywords": [
"ai",
"spend",
"cost",
"finops",
"claude-code",
"codex",
"cli"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/aibill",
"is_deprecated": false,
"latest_version": "0.5.4",
"repository_url": "https://github.com/futurastudio/ai-spend-agent",
"versions_count": 9,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 1446,
"first_published_at": "2026-07-05T22:48:47.107000Z",
"latest_published_at": "2026-07-20T05:05:01.607000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
},
{
"name": "@agent-finops/report",
"exists": true,
"license": "MIT",
"keywords": [],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@agent-finops/report",
"is_deprecated": false,
"latest_version": "0.5.4",
"repository_url": "https://github.com/futurastudio/ai-spend-agent",
"versions_count": 19,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 3218,
"first_published_at": "2026-06-11T02:10:18.166000Z",
"latest_published_at": "2026-07-20T05:04:58.428000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
}
]
},
"popularity": {
"forks": 0,
"stars": 0,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0,
"collected_at": null
},
"open_issues_and_prs": 1
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"samples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": true,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"apps/web/tsconfig.json",
"packages/cli/tsconfig.json",
"packages/core/tsconfig.json",
"packages/mcp/tsconfig.json",
"packages/report/tsconfig.json",
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 86100,
"source_files_sampled": 61,
"oversized_source_files": 2,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 13,
"malicious_count": 0,
"assessed_package": "npm:ai-spend-agent@0.5.4",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "zod",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.1.0"
},
{
"name": "next",
"manifest": "apps/web/package.json",
"ecosystem": "npm",
"version_constraint": "16.3.0-preview.3"
},
{
"name": "react",
"manifest": "apps/web/package.json",
"ecosystem": "npm",
"version_constraint": "18.3.1"
},
{
"name": "react-dom",
"manifest": "apps/web/package.json",
"ecosystem": "npm",
"version_constraint": "18.3.1"
},
{
"name": "ai-spend-agent",
"manifest": "packages/aibill/package.json",
"ecosystem": "npm",
"version_constraint": "0.5.4"
},
{
"name": "@agent-finops/core",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "0.5.4"
},
{
"name": "@agent-finops/report",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "0.5.4"
},
{
"name": "yocto-spinner",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^1.2.0"
},
{
"name": "zod",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^4.1.0"
},
{
"name": "@agent-finops/core",
"manifest": "packages/mcp/package.json",
"ecosystem": "npm",
"version_constraint": "0.5.4"
},
{
"name": "@modelcontextprotocol/sdk",
"manifest": "packages/mcp/package.json",
"ecosystem": "npm",
"version_constraint": "^1.29.0"
},
{
"name": "zod",
"manifest": "packages/mcp/package.json",
"ecosystem": "npm",
"version_constraint": "^4.1.0"
},
{
"name": "@agent-finops/core",
"manifest": "packages/report/package.json",
"ecosystem": "npm",
"version_constraint": "0.5.4"
},
{
"name": "cli-table3",
"manifest": "packages/report/package.json",
"ecosystem": "npm",
"version_constraint": "^0.6.5"
},
{
"name": "picocolors",
"manifest": "packages/report/package.json",
"ecosystem": "npm",
"version_constraint": "^1.1.1"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 1,
"merged_prs": 25,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "futurastudio",
"commits": 62,
"avatar_url": "https://avatars.githubusercontent.com/u/212994492?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "15 out of 15 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/15 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 2,
"reason": "dependency not pinned by hash detected -- score normalized to 2",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "10 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "d2f74b263cc696b7473ed10986dc0bf88d865e91",
"ran_at": "2026-07-26T05:04:43Z",
"aggregate_score": 2.5,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-20T05:05:11Z",
"oldest_open_prs": [
{
"number": 23,
"created_at": "2026-07-20T03:32:19Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-20T05:04:36Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/futurastudio/ai-spend-agent",
"host": "github.com",
"name": "ai-spend-agent",
"owner": "futurastudio"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"security": 40,
"vitality": 69,
"community": 35,
"governance": 46,
"engineering": 81
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 69,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"commits_last_year": 62,
"human_commit_share": 1,
"days_since_last_push": 5,
"active_weeks_last_year": 5
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 5 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 5
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "5/52 weeks with commits",
"points": 3.5,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 5
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "62 commits in the last year",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 62
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 88,
"inputs": {
"releases_count": 18,
"latest_release_tag": "v0.5.4",
"releases_from_tags": true,
"days_since_latest_release": 6,
"mean_days_between_releases": 1.6
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "18 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 18
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 6 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 6
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~1.6 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 1.6
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 35,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 0,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 68,
"inputs": {
"packages": [
"ai-spend-agent",
"@agent-finops/core",
"aibill",
"@agent-finops/report"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 11278
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "11,278 downloads/month across npm",
"points": 54,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 11278,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 46,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 10,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 72,
"inputs": {
"merged_prs": 25,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "25/25 decided PRs merged",
"points": 38.2,
"status": "met",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 25,
"decided": 25
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/15 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "critical",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 21,
"inputs": {
"followers": 0,
"owner_type": "User",
"is_verified": null,
"owner_login": "futurastudio",
"public_repos": 3,
"account_age_days": 429
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "0 followers of futurastudio",
"points": 0,
"status": "missed",
"details": [
{
"code": "owner_followers",
"params": {
"count": 0,
"login": "futurastudio"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "3 public repos, account ~1 yr old",
"points": 6.7,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 3
}
},
{
"code": "account_age_years",
"params": {
"years": 1
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"ai-spend-agent",
"@agent-finops/core",
"aibill",
"@agent-finops/report"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 5
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "4 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 4,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 5 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 5
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "19 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 19
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 81,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "15 out of 15 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"topics": [
"ai",
"anthropic",
"claude-code",
"cli",
"codex",
"cost-optimization",
"cursor",
"developer-tools",
"finops",
"github-copilot",
"llm",
"mcp",
"openai"
],
"has_wiki": true,
"homepage": "https://ai-spend-agent.vercel.app",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://ai-spend-agent.vercel.app",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "13 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 13
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 40,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "critical",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 25,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 2.5
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "15 out of 15 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/15 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 2",
"points": 1,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "10 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:ai-spend-agent@0.5.4 runtime dependency closure — what installing the published package pulls in — 13 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "npm:ai-spend-agent@0.5.4",
"assessed": 13
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 13,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 13,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 58,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "62 of 62 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 62,
"sampled": 62
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"package-lock.json"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
"apps/web/tsconfig.json",
"packages/cli/tsconfig.json",
"packages/core/tsconfig.json",
"packages/mcp/tsconfig.json",
"packages/report/tsconfig.json",
"tsconfig.json"
],
"agent_commit_share": 0.5,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "apps/web/tsconfig.json, packages/cli/tsconfig.json, packages/core/tsconfig.json, packages/mcp/tsconfig.json, packages/report/tsconfig.json, tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "apps/web/tsconfig.json, packages/cli/tsconfig.json, packages/core/tsconfig.json, packages/mcp/tsconfig.json, packages/report/tsconfig.json, tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "31 of the last 62 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 31,
"sampled": 62
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 2",
"points": 2,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 98,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 86100,
"source_files_sampled": 61,
"oversized_source_files": 2
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "2/61 source files over 60KB",
"points": 53.2,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 61,
"oversized": 2
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "moderate",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"example_dirs": [
"samples"
],
"has_mcp_signal": true,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 20,
"status": "met",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "samples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "samples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Could not fetch npm package '@agent-finops/mcp' from its registry",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-26T05:04:57.520943Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/f/futurastudio/ai-spend-agent.svg",
"full_name": "futurastudio/ai-spend-agent",
"license_state": "standard",
"license_spdx": "MIT"
}