Terminal coding agent powered by Kimchi's multi-model orchestration
TypeScriptApache-2.0★ 2,149 stars⑂ 122 forkssince Apr 2026View on GitHub ↗
getkimchi/kimchi holds a health index of 74 out of 100, placing it in the Good band. It scores highest on Community & Adoption (82/100) and lowest on Security (50/100). It was last updated today. 5 contributors account for most of its recent work.
74
overall / 100
Good
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
74
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Direct dependencies free of known advisories — 6 affected: shell-quote 1.8.3 (critical 9.8), shell-quote 1.8.4 (high 7.5), tar 7.5.14 (high 7.5), +3 more
0/25
Indirect dependencies free of known advisories — transitive set not separable from development and test dependencies in this scope
40/40
No advisories left outstanding — no advisory has been public longer than 90 days
Inputs used
source
osv
advisories
157
affected_packages
34
assessed_packages
819
unassessed_packages
1
affected_by_severity
critical 3, high 25, moderate 4, low 2
direct_affected_packages
6
Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 819 resolved dependencies against OSV. 1 could not be assessed — no resolved version, an unsupported ecosystem, or beyond the reported package list. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Could not fetch npm package '@kimchi-dev/cli' from its registry
Could not fetch go package 'github.com/castai/kimchi/tools/proxy-helper' from its registry
More detail
Star and fork history 0 ★ / 122 ⇿
0Stars
122Forks
99Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 1Patch 96
OpenSSF Scorecard 4.8 / 10
4.8aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-27 02:54 UTC
Full resolved dependency set from the GitHub dependency graph: 33 direct and 787 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
Registry
Package
Version
Relation
Go
github.com/coder/websocket
v1.8.14
direct
Go
github.com/spf13/cobra
v1.10.2
direct
npm
@agentclientprotocol/sdk
0.19.2
direct
npm
@bulkhead-ai/core
0.7.0
direct
npm
@clack/prompts
1.3.0
direct
npm
@earendil-works/pi-coding-agent
0.79.10
direct
npm
@earendil-works/pi-tui
0.79.10
direct
npm
@modelcontextprotocol/ext-apps
1.7.1
direct
npm
@modelcontextprotocol/sdk
1.29.0
direct
npm
@shikijs/cli
4.0.2
direct
npm
@types/diff
8.0.0
direct
npm
@types/proper-lockfile
4.1.4
direct
npm
@types/ssh2
1.15.5
direct
npm
@xterm/headless
6.0.0
direct
npm
diff
8.0.4
direct
npm
diff
9.0.0
direct
npm
micromatch
4.0.8
direct
npm
open
10.2.0
direct
npm
proper-lockfile
4.1.2
direct
npm
shell-quote
1.8.3
direct
npm
shell-quote
1.8.4
direct
npm
shiki
4.0.2
direct
npm
ssh2
1.17.0
direct
npm
tar
7.5.14
direct
npm
tar
7.5.15
direct
npm
undici
7.25.0
direct
npm
undici
8.2.0
direct
npm
undici
8.5.0
direct
npm
uuid
14.0.0
direct
npm
wcwidth
1.0.1
direct
npm
yaml
2.8.4
direct
npm
yaml
2.9.0
direct
npm
zod
4.4.3
direct
Go
github.com/inconshreveable/mousetrap
v1.1.0
indirect
Go
github.com/spf13/pflag
v1.0.9
indirect
npm
@anthropic-ai/sdk
0.91.1
indirect
npm
@aws-crypto/crc32
5.2.0
indirect
npm
@aws-crypto/sha256-browser
5.2.0
indirect
npm
@aws-crypto/sha256-js
5.2.0
indirect
npm
@aws-crypto/supports-web-crypto
5.2.0
indirect
npm
@aws-crypto/util
5.2.0
indirect
npm
@aws-sdk/client-bedrock-runtime
3.1044.0
indirect
npm
@aws-sdk/client-bedrock-runtime
3.1048.0
indirect
npm
@aws-sdk/core
3.974.11
indirect
npm
@aws-sdk/core
3.974.8
indirect
npm
@aws-sdk/credential-provider-env
3.972.34
indirect
npm
@aws-sdk/credential-provider-env
3.972.37
indirect
npm
@aws-sdk/credential-provider-http
3.972.36
indirect
npm
@aws-sdk/credential-provider-http
3.972.39
indirect
npm
@aws-sdk/credential-provider-ini
3.972.38
indirect
npm
@aws-sdk/credential-provider-ini
3.972.41
indirect
npm
@aws-sdk/credential-provider-login
3.972.38
indirect
npm
@aws-sdk/credential-provider-login
3.972.41
indirect
npm
@aws-sdk/credential-provider-node
3.972.39
indirect
npm
@aws-sdk/credential-provider-node
3.972.42
indirect
npm
@aws-sdk/credential-provider-process
3.972.34
indirect
npm
@aws-sdk/credential-provider-process
3.972.37
indirect
npm
@aws-sdk/credential-provider-sso
3.972.38
indirect
npm
@aws-sdk/credential-provider-sso
3.972.41
indirect
npm
@aws-sdk/credential-provider-web-identity
3.972.38
indirect
npm
@aws-sdk/credential-provider-web-identity
3.972.41
indirect
npm
@aws-sdk/eventstream-handler-node
3.972.14
indirect
npm
@aws-sdk/eventstream-handler-node
3.972.16
indirect
npm
@aws-sdk/middleware-eventstream
3.972.10
indirect
npm
@aws-sdk/middleware-eventstream
3.972.12
indirect
npm
@aws-sdk/middleware-host-header
3.972.10
indirect
npm
@aws-sdk/middleware-logger
3.972.10
indirect
npm
@aws-sdk/middleware-recursion-detection
3.972.11
indirect
npm
@aws-sdk/middleware-sdk-s3
3.972.37
indirect
npm
@aws-sdk/middleware-user-agent
3.972.38
indirect
npm
@aws-sdk/middleware-websocket
3.972.16
indirect
npm
@aws-sdk/middleware-websocket
3.972.19
indirect
npm
@aws-sdk/nested-clients
3.997.6
indirect
npm
@aws-sdk/nested-clients
3.997.9
indirect
npm
@aws-sdk/region-config-resolver
3.972.13
indirect
npm
@aws-sdk/signature-v4-multi-region
3.996.25
indirect
npm
@aws-sdk/signature-v4-multi-region
3.996.27
indirect
npm
@aws-sdk/token-providers
3.1041.0
indirect
npm
@aws-sdk/token-providers
3.1044.0
indirect
npm
@aws-sdk/token-providers
3.1048.0
indirect
npm
@aws-sdk/types
3.973.8
indirect
npm
@aws-sdk/util-arn-parser
3.972.3
indirect
npm
@aws-sdk/util-endpoints
3.996.8
indirect
npm
@aws-sdk/util-format-url
3.972.10
indirect
npm
@aws-sdk/util-locate-window
3.965.5
indirect
npm
@aws-sdk/util-user-agent-browser
3.972.10
indirect
npm
@aws-sdk/util-user-agent-node
3.973.24
indirect
npm
@aws-sdk/xml-builder
3.972.22
indirect
npm
@aws-sdk/xml-builder
3.972.24
indirect
npm
@aws/lambda-invoke-store
0.2.4
indirect
npm
@babel/code-frame
7.29.7
indirect
npm
@babel/helper-validator-identifier
7.29.7
indirect
npm
@babel/runtime
7.29.2
indirect
npm
@biomejs/biome
1.9.4
indirect
npm
@biomejs/biome
2.5.3
indirect
npm
@biomejs/cli-darwin-arm64
1.9.4
indirect
npm
@biomejs/cli-darwin-arm64
2.5.3
indirect
npm
@biomejs/cli-darwin-x64
1.9.4
indirect
npm
@biomejs/cli-darwin-x64
2.5.3
indirect
npm
@biomejs/cli-linux-arm64
1.9.4
indirect
npm
@biomejs/cli-linux-arm64
2.5.3
indirect
npm
@biomejs/cli-linux-arm64-musl
1.9.4
indirect
npm
@biomejs/cli-linux-arm64-musl
2.5.3
indirect
npm
@biomejs/cli-linux-x64
1.9.4
indirect
npm
@biomejs/cli-linux-x64
2.5.3
indirect
npm
@biomejs/cli-linux-x64-musl
1.9.4
indirect
npm
@biomejs/cli-linux-x64-musl
2.5.3
indirect
npm
@biomejs/cli-win32-arm64
1.9.4
indirect
npm
@biomejs/cli-win32-arm64
2.5.3
indirect
npm
@biomejs/cli-win32-x64
1.9.4
indirect
npm
@biomejs/cli-win32-x64
2.5.3
indirect
npm
@borewit/text-codec
0.2.2
indirect
npm
@clack/core
1.3.0
indirect
npm
@earendil-works/pi-agent-core
0.79.10
indirect
npm
@earendil-works/pi-ai
0.79.10
indirect
npm
@esbuild/aix-ppc64
0.27.7
indirect
npm
@esbuild/android-arm
0.27.7
indirect
npm
@esbuild/android-arm64
0.27.7
indirect
npm
@esbuild/android-x64
0.27.7
indirect
npm
@esbuild/darwin-arm64
0.27.7
indirect
npm
@esbuild/darwin-x64
0.27.7
indirect
npm
@esbuild/freebsd-arm64
0.27.7
indirect
npm
@esbuild/freebsd-x64
0.27.7
indirect
npm
@esbuild/linux-arm
0.27.7
indirect
npm
@esbuild/linux-arm64
0.27.7
indirect
npm
@esbuild/linux-ia32
0.27.7
indirect
npm
@esbuild/linux-loong64
0.27.7
indirect
npm
@esbuild/linux-mips64el
0.27.7
indirect
npm
@esbuild/linux-ppc64
0.27.7
indirect
npm
@esbuild/linux-riscv64
0.27.7
indirect
npm
@esbuild/linux-s390x
0.27.7
indirect
npm
@esbuild/linux-x64
0.27.7
indirect
npm
@esbuild/netbsd-arm64
0.27.7
indirect
npm
@esbuild/netbsd-x64
0.27.7
indirect
npm
@esbuild/openbsd-arm64
0.27.7
indirect
npm
@esbuild/openbsd-x64
0.27.7
indirect
npm
@esbuild/openharmony-arm64
0.27.7
indirect
npm
@esbuild/sunos-x64
0.27.7
indirect
npm
@esbuild/win32-arm64
0.27.7
indirect
npm
@esbuild/win32-ia32
0.27.7
indirect
npm
@esbuild/win32-x64
0.27.7
indirect
npm
@google/genai
1.52.0
indirect
npm
@hono/node-server
1.19.14
indirect
npm
@isaacs/cliui
8.0.2
indirect
npm
@isaacs/fs-minipass
4.0.1
indirect
npm
@jest/expect-utils
29.7.0
indirect
npm
@jest/schemas
29.6.3
indirect
npm
@jest/types
29.6.3
indirect
npm
@jridgewell/sourcemap-codec
1.5.5
indirect
npm
@mariozechner/clipboard
0.3.5
indirect
npm
@mariozechner/clipboard
0.3.9
indirect
npm
@mariozechner/clipboard-darwin-arm64
0.3.2
indirect
npm
@mariozechner/clipboard-darwin-arm64
0.3.6
indirect
npm
@mariozechner/clipboard-darwin-arm64
0.3.9
indirect
npm
@mariozechner/clipboard-darwin-universal
0.3.2
indirect
npm
@mariozechner/clipboard-darwin-universal
0.3.6
indirect
npm
@mariozechner/clipboard-darwin-universal
0.3.9
indirect
npm
@mariozechner/clipboard-darwin-x64
0.3.2
indirect
npm
@mariozechner/clipboard-darwin-x64
0.3.6
indirect
npm
@mariozechner/clipboard-darwin-x64
0.3.9
indirect
npm
@mariozechner/clipboard-linux-arm64-gnu
0.3.2
indirect
npm
@mariozechner/clipboard-linux-arm64-gnu
0.3.6
indirect
npm
@mariozechner/clipboard-linux-arm64-gnu
0.3.9
indirect
npm
@mariozechner/clipboard-linux-arm64-musl
0.3.2
indirect
npm
@mariozechner/clipboard-linux-arm64-musl
0.3.6
indirect
npm
@mariozechner/clipboard-linux-arm64-musl
0.3.9
indirect
npm
@mariozechner/clipboard-linux-riscv64-gnu
0.3.2
indirect
npm
@mariozechner/clipboard-linux-riscv64-gnu
0.3.9
indirect
npm
@mariozechner/clipboard-linux-x64-gnu
0.3.2
indirect
npm
@mariozechner/clipboard-linux-x64-gnu
0.3.6
indirect
npm
@mariozechner/clipboard-linux-x64-gnu
0.3.9
indirect
npm
@mariozechner/clipboard-linux-x64-musl
0.3.2
indirect
npm
@mariozechner/clipboard-linux-x64-musl
0.3.6
indirect
npm
@mariozechner/clipboard-linux-x64-musl
0.3.9
indirect
npm
@mariozechner/clipboard-win32-arm64-msvc
0.3.2
indirect
npm
@mariozechner/clipboard-win32-arm64-msvc
0.3.6
indirect
npm
@mariozechner/clipboard-win32-arm64-msvc
0.3.9
indirect
npm
@mariozechner/clipboard-win32-x64-msvc
0.3.2
indirect
npm
@mariozechner/clipboard-win32-x64-msvc
0.3.6
indirect
npm
@mariozechner/clipboard-win32-x64-msvc
0.3.9
indirect
npm
@mariozechner/jiti
2.6.5
indirect
npm
@mariozechner/pi-agent-core
0.72.1
indirect
npm
@mariozechner/pi-ai
0.72.1
indirect
npm
@mariozechner/pi-coding-agent
0.72.1
indirect
npm
@mariozechner/pi-tui
0.72.1
indirect
npm
@microsoft/tui-test
0.0.4
indirect
npm
@mistralai/mistralai
2.2.1
indirect
npm
@mistralai/mistralai
2.2.6
indirect
npm
@mixmark-io/domino
2.2.0
indirect
npm
@nodable/entities
2.1.0
indirect
npm
@opentelemetry/api
1.9.0
indirect
npm
@opentelemetry/semantic-conventions
1.41.1
indirect
npm
@pkgjs/parseargs
0.11.0
indirect
npm
@protobufjs/aspromise
1.1.2
indirect
npm
@protobufjs/base64
1.1.2
indirect
npm
@protobufjs/codegen
2.0.5
indirect
npm
@protobufjs/eventemitter
1.1.0
indirect
npm
@protobufjs/fetch
1.1.0
indirect
npm
@protobufjs/fetch
1.1.1
indirect
npm
@protobufjs/float
1.0.2
indirect
npm
@protobufjs/inquire
1.1.1
indirect
npm
@protobufjs/inquire
1.1.2
indirect
npm
@protobufjs/path
1.1.2
indirect
npm
@protobufjs/pool
1.1.0
indirect
npm
@protobufjs/utf8
1.1.1
indirect
npm
@rollup/rollup-android-arm-eabi
4.60.3
indirect
npm
@rollup/rollup-android-arm64
4.60.3
indirect
npm
@rollup/rollup-darwin-arm64
4.60.3
indirect
npm
@rollup/rollup-darwin-x64
4.60.3
indirect
npm
@rollup/rollup-freebsd-arm64
4.60.3
indirect
npm
@rollup/rollup-freebsd-x64
4.60.3
indirect
npm
@rollup/rollup-linux-arm-gnueabihf
4.60.3
indirect
npm
@rollup/rollup-linux-arm-musleabihf
4.60.3
indirect
npm
@rollup/rollup-linux-arm64-gnu
4.60.3
indirect
npm
@rollup/rollup-linux-arm64-musl
4.60.3
indirect
npm
@rollup/rollup-linux-loong64-gnu
4.60.3
indirect
npm
@rollup/rollup-linux-loong64-musl
4.60.3
indirect
npm
@rollup/rollup-linux-ppc64-gnu
4.60.3
indirect
npm
@rollup/rollup-linux-ppc64-musl
4.60.3
indirect
npm
@rollup/rollup-linux-riscv64-gnu
4.60.3
indirect
npm
@rollup/rollup-linux-riscv64-musl
4.60.3
indirect
npm
@rollup/rollup-linux-s390x-gnu
4.60.3
indirect
npm
@rollup/rollup-linux-x64-gnu
4.60.3
indirect
npm
@rollup/rollup-linux-x64-musl
4.60.3
indirect
npm
@rollup/rollup-openbsd-x64
4.60.3
indirect
npm
@rollup/rollup-openharmony-arm64
4.60.3
indirect
npm
@rollup/rollup-win32-arm64-msvc
4.60.3
indirect
npm
@rollup/rollup-win32-ia32-msvc
4.60.3
indirect
npm
@rollup/rollup-win32-x64-gnu
4.60.3
indirect
npm
@rollup/rollup-win32-x64-msvc
4.60.3
indirect
npm
@shikijs/core
4.0.2
indirect
npm
@shikijs/engine-javascript
4.0.2
indirect
npm
@shikijs/engine-oniguruma
4.0.2
indirect
npm
@shikijs/langs
4.0.2
indirect
npm
@shikijs/primitive
4.0.2
indirect
npm
@shikijs/themes
4.0.2
indirect
npm
@shikijs/types
4.0.2
indirect
npm
@shikijs/vscode-textmate
10.0.2
indirect
npm
@silvia-odwyer/photon-node
0.3.4
indirect
npm
@sinclair/typebox
0.27.10
indirect
npm
@smithy/config-resolver
4.4.17
indirect
npm
@smithy/core
3.23.17
indirect
npm
@smithy/core
3.24.3
indirect
npm
@smithy/credential-provider-imds
4.2.14
indirect
npm
@smithy/credential-provider-imds
4.3.3
indirect
npm
@smithy/eventstream-codec
4.2.14
indirect
npm
@smithy/eventstream-serde-browser
4.2.14
indirect
npm
@smithy/eventstream-serde-config-resolver
4.3.14
indirect
npm
@smithy/eventstream-serde-node
4.2.14
indirect
npm
@smithy/eventstream-serde-universal
4.2.14
indirect
npm
@smithy/fetch-http-handler
5.3.17
indirect
npm
@smithy/fetch-http-handler
5.4.3
indirect
npm
@smithy/hash-node
4.2.14
indirect
npm
@smithy/invalid-dependency
4.2.14
indirect
npm
@smithy/is-array-buffer
2.2.0
indirect
npm
@smithy/is-array-buffer
4.2.2
indirect
npm
@smithy/middleware-content-length
4.2.14
indirect
npm
@smithy/middleware-endpoint
4.4.32
indirect
npm
@smithy/middleware-retry
4.5.7
indirect
npm
@smithy/middleware-serde
4.2.20
indirect
npm
@smithy/middleware-stack
4.2.14
indirect
npm
@smithy/node-config-provider
4.3.14
indirect
npm
@smithy/node-http-handler
4.6.1
indirect
npm
@smithy/node-http-handler
4.7.3
indirect
npm
@smithy/property-provider
4.2.14
indirect
npm
@smithy/protocol-http
5.3.14
indirect
npm
@smithy/querystring-builder
4.2.14
indirect
npm
@smithy/querystring-parser
4.2.14
indirect
npm
@smithy/service-error-classification
4.3.1
indirect
npm
@smithy/shared-ini-file-loader
4.4.9
indirect
npm
@smithy/signature-v4
5.3.14
indirect
npm
@smithy/signature-v4
5.4.3
indirect
npm
@smithy/smithy-client
4.12.13
indirect
npm
@smithy/types
4.14.1
indirect
npm
@smithy/types
4.14.2
indirect
npm
@smithy/url-parser
4.2.14
indirect
npm
@smithy/util-base64
4.3.2
indirect
npm
@smithy/util-body-length-browser
4.2.2
indirect
npm
@smithy/util-body-length-node
4.2.3
indirect
npm
@smithy/util-buffer-from
2.2.0
indirect
npm
@smithy/util-buffer-from
4.2.2
indirect
npm
@smithy/util-config-provider
4.2.2
indirect
npm
@smithy/util-defaults-mode-browser
4.3.49
indirect
npm
@smithy/util-defaults-mode-node
4.2.54
indirect
npm
@smithy/util-endpoints
3.4.2
indirect
npm
@smithy/util-hex-encoding
4.2.2
indirect
npm
@smithy/util-middleware
4.2.14
indirect
npm
@smithy/util-retry
4.3.8
indirect
npm
@smithy/util-stream
4.5.25
indirect
npm
@smithy/util-uri-escape
4.2.2
indirect
npm
@smithy/util-utf8
2.3.0
indirect
npm
@smithy/util-utf8
4.2.2
indirect
npm
@smithy/uuid
1.1.2
indirect
npm
@standard-schema/spec
1.1.0
indirect
npm
@swc/core
1.15.41
indirect
npm
@swc/core-darwin-arm64
1.15.41
indirect
npm
@swc/core-darwin-x64
1.15.41
indirect
npm
@swc/core-linux-arm-gnueabihf
1.15.41
indirect
npm
@swc/core-linux-arm64-gnu
1.15.41
indirect
npm
@swc/core-linux-arm64-musl
1.15.41
indirect
npm
@swc/core-linux-ppc64-gnu
1.15.41
indirect
npm
@swc/core-linux-s390x-gnu
1.15.41
indirect
npm
@swc/core-linux-x64-gnu
1.15.41
indirect
npm
@swc/core-linux-x64-musl
1.15.41
indirect
npm
@swc/core-win32-arm64-msvc
1.15.41
indirect
npm
@swc/core-win32-ia32-msvc
1.15.41
indirect
npm
@swc/core-win32-x64-msvc
1.15.41
indirect
npm
@swc/counter
0.1.3
indirect
npm
@swc/types
0.1.26
indirect
npm
@tokenizer/inflate
0.4.1
indirect
npm
@tokenizer/token
0.3.0
indirect
npm
@tootallnate/quickjs-emscripten
0.23.0
indirect
npm
@types/braces
3.0.5
indirect
npm
@types/chai
5.2.3
indirect
npm
@types/deep-eql
4.0.2
indirect
npm
@types/estree
1.0.8
indirect
npm
@types/estree
1.0.9
indirect
npm
@types/hast
3.0.4
indirect
npm
@types/istanbul-lib-coverage
2.0.6
indirect
npm
@types/istanbul-lib-report
3.0.3
indirect
npm
@types/istanbul-reports
3.0.4
indirect
npm
@types/mdast
4.0.4
indirect
npm
@types/micromatch
4.0.10
indirect
npm
@types/mime-types
2.1.4
indirect
npm
@types/node
18.19.130
indirect
npm
@types/node
22.19.17
indirect
npm
@types/node
22.19.18
indirect
npm
@types/retry
0.12.0
indirect
npm
@types/retry
0.12.5
indirect
npm
@types/shell-quote
1.7.5
indirect
npm
@types/stack-utils
2.0.3
indirect
npm
@types/tar
7.0.87
indirect
npm
@types/turndown
5.0.6
indirect
npm
@types/unist
3.0.3
indirect
npm
@types/ws
8.18.1
indirect
npm
@types/yargs
17.0.35
indirect
npm
@types/yargs-parser
21.0.3
indirect
npm
@types/yauzl
2.10.3
indirect
npm
@ungap/structured-clone
1.3.1
indirect
npm
@vitest/expect
3.2.4
indirect
npm
@vitest/mocker
3.2.4
indirect
npm
@vitest/pretty-format
3.2.4
indirect
npm
@vitest/runner
3.2.4
indirect
npm
@vitest/snapshot
3.2.4
indirect
npm
@vitest/spy
3.2.4
indirect
npm
@vitest/utils
3.2.4
indirect
npm
accepts
2.0.0
indirect
npm
agent-base
7.1.4
indirect
npm
ajv
8.20.0
indirect
npm
ajv-formats
3.0.1
indirect
npm
ansi-regex
5.0.1
indirect
npm
ansi-regex
6.2.2
indirect
npm
ansi-styles
4.3.0
indirect
npm
ansi-styles
5.2.0
indirect
npm
ansi-styles
6.2.3
indirect
npm
ansis
4.3.0
indirect
npm
any-promise
1.3.0
indirect
npm
asn1
0.2.6
indirect
npm
assertion-error
2.0.1
indirect
npm
ast-types
0.13.4
indirect
npm
balanced-match
1.0.2
indirect
npm
balanced-match
4.0.4
indirect
npm
base64-js
1.5.1
indirect
npm
basic-ftp
5.3.1
indirect
npm
bcrypt-pbkdf
1.0.2
indirect
npm
bignumber.js
9.3.1
indirect
npm
body-parser
2.2.2
indirect
npm
bowser
2.14.1
indirect
npm
brace-expansion
2.1.1
indirect
npm
brace-expansion
5.0.5
indirect
npm
brace-expansion
5.0.6
indirect
npm
braces
3.0.3
indirect
npm
buffer-crc32
0.2.13
indirect
npm
buffer-equal-constant-time
1.0.1
indirect
npm
bundle-name
4.1.0
indirect
npm
bytes
3.1.2
indirect
npm
cac
6.7.14
indirect
npm
cac
7.0.0
indirect
npm
call-bind-apply-helpers
1.0.2
indirect
npm
call-bound
1.0.4
indirect
npm
ccount
2.0.1
indirect
npm
chai
5.3.3
indirect
npm
chalk
4.1.2
indirect
npm
chalk
5.6.2
indirect
npm
character-entities-html4
2.1.0
indirect
npm
character-entities-legacy
3.0.0
indirect
npm
check-error
2.1.3
indirect
npm
chownr
3.0.0
indirect
npm
ci-info
3.9.0
indirect
npm
cli-highlight
2.1.11
indirect
npm
cliui
7.0.4
indirect
npm
clone
1.0.4
indirect
npm
color-convert
2.0.1
indirect
npm
color-name
1.1.4
indirect
npm
comma-separated-tokens
2.0.3
indirect
npm
commander
11.1.0
indirect
npm
content-disposition
1.1.0
indirect
npm
content-type
1.0.5
indirect
npm
cookie
0.7.2
indirect
npm
cookie-signature
1.2.2
indirect
npm
cors
2.8.6
indirect
npm
cross-spawn
7.0.6
indirect
npm
data-uri-to-buffer
4.0.1
indirect
npm
data-uri-to-buffer
6.0.2
indirect
npm
debug
4.4.3
indirect
npm
deep-eql
5.0.2
indirect
npm
default-browser
5.5.0
indirect
npm
default-browser-id
5.0.1
indirect
npm
defaults
1.0.4
indirect
npm
define-lazy-prop
3.0.0
indirect
npm
degenerator
5.0.1
indirect
npm
depd
2.0.0
indirect
npm
dequal
2.0.3
indirect
npm
devlop
1.1.0
indirect
npm
diff-sequences
29.6.3
indirect
npm
dunder-proto
1.0.1
indirect
npm
eastasianwidth
0.2.0
indirect
npm
ecdsa-sig-formatter
1.0.11
indirect
npm
ee-first
1.1.1
indirect
npm
emoji-regex
8.0.0
indirect
npm
emoji-regex
9.2.2
indirect
npm
encodeurl
2.0.0
indirect
npm
end-of-stream
1.4.5
indirect
npm
es-define-property
1.0.1
indirect
npm
es-errors
1.3.0
indirect
npm
es-module-lexer
1.7.0
indirect
npm
es-object-atoms
1.1.1
indirect
npm
esbuild
0.27.7
indirect
npm
escalade
3.2.0
indirect
npm
escape-html
1.0.3
indirect
npm
escape-string-regexp
2.0.0
indirect
npm
escodegen
2.1.0
indirect
npm
esprima
4.0.1
indirect
npm
estraverse
5.3.0
indirect
npm
estree-walker
3.0.3
indirect
npm
esutils
2.0.3
indirect
npm
etag
1.8.1
indirect
npm
eventsource
3.0.7
indirect
npm
eventsource-parser
3.0.8
indirect
npm
expect
29.7.0
indirect
npm
expect-type
1.3.0
indirect
npm
express
5.2.1
indirect
npm
express-rate-limit
8.5.1
indirect
npm
extend
3.0.2
indirect
npm
extract-zip
2.0.1
indirect
npm
fast-deep-equal
3.1.3
indirect
npm
fast-string-truncated-width
3.0.3
indirect
npm
fast-string-width
3.0.2
indirect
npm
fast-uri
3.1.2
indirect
npm
fast-wrap-ansi
0.2.0
indirect
npm
fast-xml-builder
1.1.9
indirect
npm
fast-xml-builder
1.2.0
indirect
npm
fast-xml-parser
5.7.2
indirect
npm
fast-xml-parser
5.7.3
indirect
npm
fd-slicer
1.1.0
indirect
npm
fdir
6.5.0
indirect
npm
fetch-blob
3.2.0
indirect
npm
file-type
21.3.4
indirect
npm
fill-range
7.1.1
indirect
npm
finalhandler
2.1.1
indirect
npm
foreground-child
3.3.1
indirect
npm
formdata-polyfill
4.0.10
indirect
npm
forwarded
0.2.0
indirect
npm
fresh
2.0.0
indirect
npm
fsevents
2.3.2
indirect
npm
fsevents
2.3.3
indirect
npm
function-bind
1.1.2
indirect
npm
gaxios
7.1.4
indirect
npm
gcp-metadata
8.1.2
indirect
npm
get-caller-file
2.0.5
indirect
npm
get-east-asian-width
1.5.0
indirect
npm
get-east-asian-width
1.6.0
indirect
npm
get-intrinsic
1.3.0
indirect
npm
get-proto
1.0.1
indirect
npm
get-stream
5.2.0
indirect
npm
get-tsconfig
4.14.0
indirect
npm
get-uri
6.0.5
indirect
npm
glob
10.5.0
indirect
npm
glob
13.0.6
indirect
npm
google-auth-library
10.6.2
indirect
npm
google-logging-utils
1.1.3
indirect
npm
gopd
1.2.0
indirect
npm
graceful-fs
4.2.11
indirect
npm
has-flag
4.0.0
indirect
npm
has-symbols
1.1.0
indirect
npm
hasown
2.0.3
indirect
npm
hast-util-to-html
9.0.5
indirect
npm
hast-util-whitespace
3.0.0
indirect
npm
highlight.js
10.7.3
indirect
npm
hono
4.12.18
indirect
npm
hosted-git-info
9.0.3
indirect
npm
html-void-elements
3.0.0
indirect
npm
http-errors
2.0.1
indirect
npm
http-proxy-agent
7.0.2
indirect
npm
https-proxy-agent
7.0.6
indirect
npm
husky
9.1.7
indirect
npm
iconv-lite
0.7.2
indirect
npm
ieee754
1.2.1
indirect
npm
ignore
7.0.5
indirect
npm
inherits
2.0.4
indirect
npm
ip-address
10.2.0
indirect
npm
ipaddr.js
1.9.1
indirect
npm
is-docker
3.0.0
indirect
npm
is-fullwidth-code-point
3.0.0
indirect
npm
is-inside-container
1.0.0
indirect
npm
is-number
7.0.0
indirect
npm
is-promise
4.0.0
indirect
npm
is-wsl
3.1.1
indirect
npm
isexe
2.0.0
indirect
npm
isexe
3.1.5
indirect
npm
jackspeak
3.4.3
indirect
npm
jest-diff
29.7.0
indirect
npm
jest-get-type
29.6.3
indirect
npm
jest-matcher-utils
29.7.0
indirect
npm
jest-message-util
29.7.0
indirect
npm
jest-util
29.7.0
indirect
npm
jiti
2.7.0
indirect
npm
jose
6.2.3
indirect
npm
js-tokens
4.0.0
indirect
npm
js-tokens
9.0.1
indirect
npm
json-bigint
1.0.0
indirect
npm
json-schema-to-ts
3.1.1
indirect
npm
json-schema-traverse
1.0.0
indirect
npm
json-schema-typed
8.0.2
indirect
npm
jwa
2.0.1
indirect
npm
jws
4.0.1
indirect
npm
koffi
2.16.2
indirect
npm
long
5.3.2
indirect
npm
loupe
3.2.1
indirect
npm
lru-cache
10.4.3
indirect
npm
lru-cache
11.3.6
indirect
npm
lru-cache
11.4.0
indirect
npm
lru-cache
7.18.3
indirect
npm
magic-string
0.30.21
indirect
npm
marked
15.0.12
indirect
npm
marked
18.0.5
indirect
npm
math-intrinsics
1.1.0
indirect
npm
mdast-util-to-hast
13.2.1
indirect
npm
media-typer
1.1.0
indirect
npm
merge-descriptors
2.0.0
indirect
npm
micromark-util-character
2.1.1
indirect
npm
micromark-util-encode
2.0.1
indirect
npm
micromark-util-sanitize-uri
2.0.1
indirect
npm
micromark-util-symbol
2.0.1
indirect
npm
micromark-util-types
2.0.2
indirect
npm
mime-db
1.54.0
indirect
npm
mime-types
3.0.2
indirect
npm
minimatch
10.2.5
indirect
npm
minimatch
9.0.9
indirect
npm
minipass
7.1.3
indirect
npm
minizlib
3.1.0
indirect
npm
ms
2.1.3
indirect
npm
mz
2.7.0
indirect
npm
nanoid
3.3.12
indirect
npm
negotiator
1.0.0
indirect
npm
netmask
2.1.1
indirect
npm
node-addon-api
7.1.1
indirect
npm
node-domexception
1.0.0
indirect
npm
node-fetch
3.3.2
indirect
npm
node-pty
1.1.0
indirect
npm
node-pty
1.2.0-beta.11
indirect
npm
object-assign
4.1.1
indirect
npm
object-inspect
1.13.4
indirect
npm
on-finished
2.4.1
indirect
npm
once
1.4.0
indirect
npm
oniguruma-parser
0.12.2
indirect
npm
oniguruma-to-es
4.3.6
indirect
npm
openai
6.26.0
indirect
npm
p-retry
4.6.2
indirect
npm
pac-proxy-agent
7.2.0
indirect
npm
pac-resolver
7.0.1
indirect
npm
package-json-from-dist
1.0.1
indirect
npm
parse-ms
3.0.0
indirect
npm
parse5
5.1.1
indirect
npm
parse5
6.0.1
indirect
npm
parse5-htmlparser2-tree-adapter
6.0.1
indirect
npm
parseurl
1.3.3
indirect
npm
partial-json
0.1.7
indirect
npm
path-expression-matcher
1.5.0
indirect
npm
path-key
3.1.1
indirect
npm
path-scurry
1.11.1
indirect
npm
path-scurry
2.0.2
indirect
npm
path-to-regexp
8.4.2
indirect
npm
pathe
2.0.3
indirect
npm
pathval
2.0.1
indirect
npm
pend
1.2.0
indirect
npm
picocolors
1.1.1
indirect
npm
picomatch
2.3.2
indirect
npm
picomatch
4.0.4
indirect
npm
pkce-challenge
5.0.1
indirect
npm
playwright
1.59.1
indirect
npm
playwright-core
1.59.1
indirect
npm
postcss
8.5.14
indirect
npm
pretty-format
29.7.0
indirect
npm
pretty-ms
8.0.0
indirect
npm
property-information
7.1.0
indirect
npm
protobufjs
7.5.6
indirect
npm
protobufjs
7.5.9
indirect
npm
proxy-addr
2.0.7
indirect
npm
proxy-agent
6.5.0
indirect
npm
proxy-from-env
1.1.0
indirect
npm
pump
3.0.4
indirect
npm
qs
6.15.1
indirect
npm
range-parser
1.2.1
indirect
npm
raw-body
3.0.2
indirect
npm
react-is
18.3.1
indirect
npm
regex
6.1.0
indirect
npm
regex-recursion
6.0.2
indirect
npm
regex-utilities
2.3.0
indirect
npm
require-directory
2.1.1
indirect
npm
require-from-string
2.0.2
indirect
npm
resolve-pkg-maps
1.0.0
indirect
npm
retry
0.12.0
indirect
npm
retry
0.13.1
indirect
npm
rollup
4.60.3
indirect
npm
router
2.2.0
indirect
npm
run-applescript
7.1.0
indirect
npm
safe-buffer
5.2.1
indirect
npm
safer-buffer
2.1.2
indirect
npm
semver
7.8.0
indirect
npm
send
1.2.1
indirect
npm
serve-static
2.2.1
indirect
npm
setprototypeof
1.2.0
indirect
npm
shebang-command
2.0.0
indirect
npm
shebang-regex
3.0.0
indirect
npm
side-channel
1.1.0
indirect
npm
side-channel-list
1.0.1
indirect
npm
side-channel-map
1.0.1
indirect
npm
side-channel-weakmap
1.0.2
indirect
npm
siginfo
2.0.0
indirect
npm
signal-exit
3.0.7
indirect
npm
signal-exit
4.1.0
indirect
npm
sisteransi
1.0.5
indirect
npm
slash
3.0.0
indirect
npm
smart-buffer
4.2.0
indirect
npm
socks
2.8.8
indirect
npm
socks-proxy-agent
8.0.5
indirect
npm
source-map
0.6.1
indirect
npm
source-map-js
1.2.1
indirect
npm
space-separated-tokens
2.0.2
indirect
npm
stack-utils
2.0.6
indirect
npm
stackback
0.0.2
indirect
npm
statuses
2.0.2
indirect
npm
std-env
3.10.0
indirect
npm
string-similarity
4.0.4
indirect
npm
string-width
4.2.3
indirect
npm
string-width
5.1.2
indirect
npm
stringify-entities
4.0.4
indirect
npm
strip-ansi
6.0.1
indirect
npm
strip-ansi
7.2.0
indirect
npm
strip-literal
3.1.0
indirect
npm
strnum
2.2.3
indirect
npm
strnum
2.3.0
indirect
npm
strtok3
10.3.5
indirect
npm
supports-color
10.2.2
indirect
npm
supports-color
7.2.0
indirect
npm
thenify
3.3.1
indirect
npm
thenify-all
1.6.0
indirect
npm
tinybench
2.9.0
indirect
npm
tinyexec
0.3.2
indirect
npm
tinyglobby
0.2.16
indirect
npm
tinypool
1.1.1
indirect
npm
tinyrainbow
2.0.0
indirect
npm
tinyspy
4.0.4
indirect
npm
to-regex-range
5.0.1
indirect
npm
toidentifier
1.0.1
indirect
npm
token-types
6.1.2
indirect
npm
trim-lines
3.0.1
indirect
npm
ts-algebra
2.0.0
indirect
npm
tslib
2.8.1
indirect
npm
tsx
4.21.0
indirect
npm
turndown
7.2.4
indirect
npm
tweetnacl
0.14.5
indirect
npm
type-is
2.0.1
indirect
npm
typebox
1.1.38
indirect
npm
typescript
5.9.3
indirect
npm
uint8array-extras
1.5.0
indirect
npm
undici-types
5.26.5
indirect
npm
undici-types
6.21.0
indirect
npm
unist-util-is
6.0.1
indirect
npm
unist-util-position
5.0.0
indirect
npm
unist-util-stringify-position
4.0.0
indirect
npm
unist-util-visit
5.1.0
indirect
npm
unist-util-visit-parents
6.0.2
indirect
npm
unpipe
1.0.0
indirect
npm
vary
1.1.2
indirect
npm
vfile
6.0.3
indirect
npm
vfile-message
4.0.3
indirect
npm
vite
7.3.3
indirect
npm
vite-node
3.2.4
indirect
npm
vitest
3.2.4
indirect
npm
web-streams-polyfill
3.3.3
indirect
npm
which
2.0.2
indirect
npm
which
4.0.0
indirect
npm
why-is-node-running
2.3.0
indirect
npm
workerpool
9.3.4
indirect
npm
wrap-ansi
7.0.0
indirect
npm
wrap-ansi
8.1.0
indirect
npm
wrappy
1.0.2
indirect
npm
ws
8.20.0
indirect
npm
ws
8.20.1
indirect
npm
wsl-utils
0.1.0
indirect
npm
xml-naming
0.1.0
indirect
npm
y18n
5.0.8
indirect
npm
yallist
5.0.0
indirect
npm
yargs
16.2.0
indirect
npm
yargs-parser
20.2.9
indirect
npm
yauzl
2.10.0
indirect
npm
yoctocolors
2.1.2
indirect
npm
zod-to-json-schema
3.25.2
indirect
npm
zwitch
2.0.4
indirect
PyPI
aiohappyeyeballs
2.6.1
indirect
PyPI
aiohttp
3.13.5
indirect
PyPI
aiosignal
1.4.0
indirect
PyPI
annotated-doc
0.0.4
indirect
PyPI
annotated-types
0.7.0
indirect
PyPI
anyio
4.13.0
indirect
PyPI
attrs
26.1.0
indirect
PyPI
cachetools
6.2.6
indirect
PyPI
certifi
2026.2.25
indirect
PyPI
cffi
2.0.0
indirect
PyPI
charset-normalizer
3.4.7
indirect
PyPI
claude-agent-sdk
0.1.63
indirect
PyPI
click
8.3.2
indirect
PyPI
colorama
0.4.6
indirect
PyPI
cryptography
46.0.7
indirect
PyPI
datasets
4.8.4
indirect
PyPI
deprecation
2.1.0
indirect
PyPI
dill
0.4.1
indirect
PyPI
dirhash
0.5.0
indirect
PyPI
distro
1.9.0
indirect
PyPI
fastapi
0.136.0
indirect
PyPI
fastuuid
0.14.0
indirect
PyPI
filelock
3.28.0
indirect
PyPI
frozenlist
1.8.0
indirect
PyPI
fsspec
2026.2.0
indirect
PyPI
h11
0.16.0
indirect
PyPI
h2
4.3.0
indirect
PyPI
harbor
0.4.0
indirect
PyPI
hf-xet
1.4.3
indirect
PyPI
hpack
4.1.0
indirect
PyPI
httpcore
1.0.9
indirect
PyPI
httpx
0.28.1
indirect
PyPI
httpx-sse
0.4.3
indirect
PyPI
huggingface-hub
1.11.0
indirect
PyPI
hyperframe
6.1.0
indirect
PyPI
idna
3.11
indirect
PyPI
importlib-metadata
9.0.0
indirect
PyPI
jinja2
3.1.6
indirect
PyPI
jiter
0.14.0
indirect
PyPI
jsonschema
4.26.0
indirect
PyPI
jsonschema-specifications
2025.9.1
indirect
PyPI
kimchi-agent
0.1.0
indirect
PyPI
litellm
1.83.0
indirect
PyPI
markdown-it-py
4.0.0
indirect
PyPI
markupsafe
3.0.3
indirect
PyPI
mcp
1.27.0
indirect
PyPI
mdurl
0.1.2
indirect
PyPI
mmh3
5.2.1
indirect
PyPI
multidict
6.7.1
indirect
PyPI
multiprocess
0.70.19
indirect
PyPI
numpy
2.4.4
indirect
PyPI
openai
2.32.0
indirect
PyPI
packaging
26.1
indirect
PyPI
pandas
3.0.2
indirect
PyPI
pathspec
1.0.4
indirect
PyPI
postgrest
2.28.3
indirect
PyPI
propcache
0.4.1
indirect
PyPI
pyarrow
23.0.1
indirect
PyPI
pycparser
3.0
indirect
PyPI
pydantic
2.13.2
indirect
PyPI
pydantic-core
2.46.2
indirect
PyPI
pydantic-settings
2.13.1
indirect
PyPI
pygments
2.20.0
indirect
PyPI
pyiceberg
0.11.1
indirect
PyPI
pyjwt
2.12.1
indirect
PyPI
pyparsing
3.3.2
indirect
PyPI
pyroaring
1.0.4
indirect
PyPI
python-dateutil
2.9.0.post0
indirect
PyPI
python-dotenv
1.2.2
indirect
PyPI
python-multipart
0.0.26
indirect
PyPI
pywin32
311
indirect
PyPI
pyyaml
6.0.3
indirect
PyPI
realtime
2.28.3
indirect
PyPI
referencing
0.37.0
indirect
PyPI
regex
2026.4.4
indirect
PyPI
requests
2.33.1
indirect
PyPI
rich
14.3.4
indirect
PyPI
rpds-py
0.30.0
indirect
PyPI
ruff
0.15.11
indirect
PyPI
scantree
0.0.4
indirect
PyPI
shellingham
1.5.4
indirect
PyPI
shortuuid
1.0.13
indirect
PyPI
six
1.17.0
indirect
PyPI
sniffio
1.3.1
indirect
PyPI
sse-starlette
3.3.4
indirect
PyPI
starlette
1.0.0
indirect
PyPI
storage3
2.28.3
indirect
PyPI
strenum
0.4.15
indirect
PyPI
strictyaml
1.7.3
indirect
PyPI
supabase
2.28.3
indirect
PyPI
supabase-auth
2.28.3
indirect
PyPI
supabase-functions
2.28.3
indirect
PyPI
tenacity
9.1.4
indirect
PyPI
tiktoken
0.12.0
indirect
PyPI
tokenizers
0.22.2
indirect
PyPI
toml
0.10.2
indirect
PyPI
tqdm
4.67.3
indirect
PyPI
typer
0.24.1
indirect
PyPI
typing-extensions
4.15.0
indirect
PyPI
typing-inspection
0.4.2
indirect
PyPI
tzdata
2026.1
indirect
PyPI
urllib3
2.6.3
indirect
PyPI
uv-build
—
indirect
PyPI
uvicorn
0.44.0
indirect
PyPI
websockets
15.0.1
indirect
PyPI
xxhash
3.6.0
indirect
PyPI
yarl
1.23.0
indirect
PyPI
zipp
3.23.1
indirect
PyPI
zstandard
0.25.0
indirect
Dependency advisories 34
This repository publishes no package the index resolves, so its own dependency graph was assessed — 819 packages, which also include development and test pins that never ship: 34 carry known advisories, of which 6 are direct. 1 could not be assessed — no resolved version, an unsupported ecosystem, or beyond the reported package list.
Package
Version
Relation
Severity
Advisories
Fixed in
shell-quote
1.8.3
direct
critical
2
1.9.0
litellm
1.83.0
indirect
critical
20
1.84.0
vitest
3.2.4
indirect
critical
1
4.1.0
shell-quote
1.8.4
direct
high
1
1.9.0
tar
7.5.14
direct
high
6
7.5.21
tar
7.5.15
direct
high
6
7.5.21
undici
7.25.0
direct
high
7
8.5.0
undici
8.2.0
direct
high
7
8.5.0
@mariozechner/pi-coding-agent
0.72.1
indirect
high
3
0.78.1
aiohttp
3.13.5
indirect
high
22
3.14.1
brace-expansion
2.1.1
indirect
high
2
5.0.8
brace-expansion
5.0.5
indirect
high
3
5.0.8
brace-expansion
5.0.6
indirect
high
2
5.0.8
click
8.3.2
indirect
high
1
8.3.3
cryptography
46.0.7
indirect
high
1
48.0.1
fast-uri
3.1.2
indirect
high
2
4.1.1
hono
4.12.18
indirect
high
12
4.12.27
mcp
1.27.0
indirect
high
6
1.28.1
postcss
8.5.14
indirect
high
1
8.5.18
protobufjs
7.5.6
indirect
high
4
8.6.6
protobufjs
7.5.9
indirect
high
3
8.6.6
pyjwt
2.12.1
indirect
high
9
2.13.0
python-multipart
0.0.26
indirect
high
10
0.0.31
starlette
1.0.0
indirect
high
10
1.3.1
urllib3
2.6.3
indirect
high
4
2.7.0
vite
7.3.3
indirect
high
2
8.0.16
ws
8.20.0
indirect
high
2
8.21.0
ws
8.20.1
indirect
high
1
8.21.0
@hono/node-server
1.19.14
indirect
moderate
1
2.0.5
idna
3.11
indirect
moderate
2
3.15
pydantic-settings
2.13.1
indirect
moderate
1
2.14.2
qs
6.15.1
indirect
moderate
1
6.15.2
body-parser
2.2.2
indirect
low
1
2.3.0
esbuild
0.27.7
indirect
low
1
0.28.1
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 16237,
"has_wiki": false,
"homepage": "https://kimchi.dev",
"languages": {
"Go": 45806,
"HTML": 21326,
"Shell": 52013,
"Python": 214348,
"Makefile": 175,
"JavaScript": 416175,
"PowerShell": 8339,
"TypeScript": 8673525
},
"pushed_at": "2026-07-26T18:30:16Z",
"created_at": "2026-04-07T16:44:41Z",
"owner_type": "Organization",
"updated_at": "2026-07-27T02:15:12Z",
"description": "Terminal coding agent powered by Kimchi's multi-model orchestration ",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "master",
"license_spdx_raw": "Apache-2.0",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript"
]
},
"owner": {
"blog": "https://kimchi.dev/",
"name": "Kimchi",
"type": "Organization",
"login": "getkimchi",
"company": null,
"location": null,
"followers": 36,
"avatar_url": "https://avatars.githubusercontent.com/u/286906789?v=4",
"created_at": "2026-05-22T08:22:07Z",
"is_verified": null,
"public_repos": 2,
"account_age_days": 65
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "canary",
"kind": "other",
"published_at": "2026-07-24T15:18:00Z"
},
{
"tag": "v0.1.74",
"kind": "patch",
"published_at": "2026-07-21T09:24:45Z"
},
{
"tag": "v0.1.73",
"kind": "patch",
"published_at": "2026-07-20T05:28:44Z"
},
{
"tag": "v0.1.72",
"kind": "patch",
"published_at": "2026-07-17T11:56:58Z"
},
{
"tag": "v0.1.71",
"kind": "patch",
"published_at": "2026-07-17T09:28:30Z"
},
{
"tag": "v0.1.70",
"kind": "patch",
"published_at": "2026-07-16T08:06:18Z"
},
{
"tag": "v0.1.69",
"kind": "patch",
"published_at": "2026-07-15T15:51:54Z"
},
{
"tag": "v0.1.68",
"kind": "patch",
"published_at": "2026-07-15T13:24:29Z"
},
{
"tag": "v0.1.67",
"kind": "patch",
"published_at": "2026-07-14T16:17:57Z"
},
{
"tag": "v0.1.66",
"kind": "patch",
"published_at": "2026-07-14T13:16:07Z"
},
{
"tag": "v0.1.65",
"kind": "patch",
"published_at": "2026-07-13T12:29:49Z"
},
{
"tag": "v0.1.64",
"kind": "patch",
"published_at": "2026-07-13T06:36:14Z"
},
{
"tag": "v0.1.63",
"kind": "patch",
"published_at": "2026-07-10T09:08:27Z"
},
{
"tag": "v0.1.62",
"kind": "patch",
"published_at": "2026-07-08T15:39:39Z"
},
{
"tag": "v0.1.61",
"kind": "patch",
"published_at": "2026-07-08T11:02:33Z"
},
{
"tag": "v0.1.60",
"kind": "patch",
"published_at": "2026-07-06T12:41:52Z"
},
{
"tag": "v0.1.59",
"kind": "patch",
"published_at": "2026-07-06T09:14:04Z"
},
{
"tag": "v0.1.58",
"kind": "patch",
"published_at": "2026-07-03T10:14:04Z"
},
{
"tag": "v0.1.57",
"kind": "patch",
"published_at": "2026-07-03T07:19:00Z"
},
{
"tag": "v0.1.56",
"kind": "patch",
"published_at": "2026-07-01T15:13:47Z"
},
{
"tag": "v0.1.55",
"kind": "patch",
"published_at": "2026-07-01T09:30:23Z"
},
{
"tag": "v0.1.54",
"kind": "patch",
"published_at": "2026-07-01T09:32:01Z"
},
{
"tag": "v0.1.53",
"kind": "patch",
"published_at": "2026-06-30T12:15:59Z"
},
{
"tag": "v0.1.52",
"kind": "patch",
"published_at": "2026-06-29T15:23:30Z"
},
{
"tag": "v0.1.51",
"kind": "patch",
"published_at": "2026-06-29T14:28:40Z"
},
{
"tag": "v0.1.50",
"kind": "patch",
"published_at": "2026-06-26T17:52:15Z"
},
{
"tag": "v0.1.49",
"kind": "patch",
"published_at": "2026-06-26T13:30:29Z"
},
{
"tag": "v0.1.48",
"kind": "patch",
"published_at": "2026-06-26T11:25:16Z"
},
{
"tag": "v0.1.47",
"kind": "patch",
"published_at": "2026-06-26T10:55:04Z"
},
{
"tag": "v.0.1.46",
"kind": "other",
"published_at": "2026-06-26T10:50:44Z"
},
{
"tag": "v.0.1.45",
"kind": "other",
"published_at": "2026-06-26T10:41:20Z"
},
{
"tag": "v0.1.44",
"kind": "patch",
"published_at": "2026-06-26T09:05:15Z"
},
{
"tag": "v0.1.43",
"kind": "patch",
"published_at": "2026-06-26T08:46:34Z"
},
{
"tag": "v0.1.42",
"kind": "patch",
"published_at": "2026-06-26T06:27:04Z"
},
{
"tag": "v0.1.41",
"kind": "patch",
"published_at": "2026-06-25T13:59:54Z"
},
{
"tag": "v0.1.40",
"kind": "patch",
"published_at": "2026-06-25T06:04:51Z"
},
{
"tag": "v0.1.39",
"kind": "patch",
"published_at": "2026-06-23T13:59:24Z"
},
{
"tag": "v0.1.38",
"kind": "patch",
"published_at": "2026-06-23T11:58:44Z"
},
{
"tag": "v0.1.37",
"kind": "patch",
"published_at": "2026-06-23T11:35:28Z"
},
{
"tag": "v0.1.36",
"kind": "patch",
"published_at": "2026-06-23T10:07:43Z"
},
{
"tag": "v0.1.35",
"kind": "patch",
"published_at": "2026-06-23T07:18:06Z"
},
{
"tag": "v0.1.34",
"kind": "patch",
"published_at": "2026-06-22T10:27:18Z"
},
{
"tag": "v0.1.33",
"kind": "patch",
"published_at": "2026-06-22T08:56:58Z"
},
{
"tag": "v0.1.32",
"kind": "patch",
"published_at": "2026-06-19T16:29:14Z"
},
{
"tag": "v0.1.31",
"kind": "patch",
"published_at": "2026-06-19T14:00:47Z"
},
{
"tag": "v0.1.30",
"kind": "patch",
"published_at": "2026-06-19T10:49:42Z"
},
{
"tag": "v0.1.29",
"kind": "patch",
"published_at": "2026-06-19T09:54:00Z"
},
{
"tag": "v0.1.28",
"kind": "patch",
"published_at": "2026-06-18T15:39:47Z"
},
{
"tag": "v0.1.27",
"kind": "patch",
"published_at": "2026-06-18T14:12:32Z"
},
{
"tag": "v0.1.26",
"kind": "patch",
"published_at": "2026-06-18T12:48:18Z"
},
{
"tag": "v0.1.25",
"kind": "patch",
"published_at": "2026-06-17T16:35:50Z"
},
{
"tag": "v0.1.24",
"kind": "patch",
"published_at": "2026-06-17T10:55:08Z"
},
{
"tag": "v0.1.23",
"kind": "patch",
"published_at": "2026-06-16T15:34:22Z"
},
{
"tag": "v0.1.22",
"kind": "patch",
"published_at": "2026-06-16T07:43:52Z"
},
{
"tag": "v0.1.21",
"kind": "patch",
"published_at": "2026-06-15T08:04:43Z"
},
{
"tag": "v0.1.20",
"kind": "patch",
"published_at": "2026-06-11T06:22:35Z"
},
{
"tag": "v0.1.19",
"kind": "patch",
"published_at": "2026-06-10T16:34:59Z"
},
{
"tag": "v0.1.18",
"kind": "patch",
"published_at": "2026-06-10T10:09:41Z"
},
{
"tag": "v0.1.17",
"kind": "patch",
"published_at": "2026-06-08T14:14:26Z"
},
{
"tag": "v0.1.16",
"kind": "patch",
"published_at": "2026-06-07T09:34:10Z"
},
{
"tag": "v0.1.15",
"kind": "patch",
"published_at": "2026-06-06T07:06:26Z"
},
{
"tag": "v0.1.14",
"kind": "patch",
"published_at": "2026-06-05T15:21:48Z"
},
{
"tag": "v0.1.13",
"kind": "patch",
"published_at": "2026-06-05T12:16:45Z"
},
{
"tag": "v0.1.12",
"kind": "patch",
"published_at": "2026-06-05T10:02:26Z"
},
{
"tag": "v0.1.11",
"kind": "patch",
"published_at": "2026-06-04T16:19:15Z"
},
{
"tag": "v0.1.10",
"kind": "patch",
"published_at": "2026-06-04T13:15:51Z"
},
{
"tag": "v0.1.9",
"kind": "patch",
"published_at": "2026-06-04T07:28:07Z"
},
{
"tag": "v0.1.8",
"kind": "patch",
"published_at": "2026-06-03T15:45:08Z"
},
{
"tag": "v0.1.7",
"kind": "patch",
"published_at": "2026-06-03T12:50:05Z"
},
{
"tag": "v0.1.6",
"kind": "patch",
"published_at": "2026-06-03T10:39:08Z"
},
{
"tag": "v0.1.5",
"kind": "patch",
"published_at": "2026-06-02T14:09:53Z"
},
{
"tag": "v0.1.4",
"kind": "patch",
"published_at": "2026-06-02T13:05:52Z"
},
{
"tag": "v0.1.3",
"kind": "patch",
"published_at": "2026-06-02T12:14:24Z"
},
{
"tag": "v0.1.2",
"kind": "patch",
"published_at": "2026-06-02T09:22:04Z"
},
{
"tag": "v0.1.1",
"kind": "patch",
"published_at": "2026-06-02T08:56:37Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2026-06-02T06:30:13Z"
},
{
"tag": "v0.0.99",
"kind": "patch",
"published_at": "2026-06-01T13:16:54Z"
},
{
"tag": "v0.0.98",
"kind": "patch",
"published_at": "2026-06-01T07:07:48Z"
},
{
"tag": "v0.0.97",
"kind": "patch",
"published_at": "2026-06-01T05:52:16Z"
},
{
"tag": "v0.0.96",
"kind": "patch",
"published_at": "2026-05-29T14:16:49Z"
},
{
"tag": "v0.0.95",
"kind": "patch",
"published_at": "2026-05-29T09:00:54Z"
},
{
"tag": "v0.0.94",
"kind": "patch",
"published_at": "2026-05-29T07:42:23Z"
},
{
"tag": "v0.0.93",
"kind": "patch",
"published_at": "2026-05-29T07:10:56Z"
},
{
"tag": "v0.0.92",
"kind": "patch",
"published_at": "2026-05-28T15:02:12Z"
},
{
"tag": "v0.0.91",
"kind": "patch",
"published_at": "2026-05-28T09:15:07Z"
},
{
"tag": "v0.0.90",
"kind": "patch",
"published_at": "2026-05-27T08:36:14Z"
},
{
"tag": "v0.0.89",
"kind": "patch",
"published_at": "2026-05-26T14:32:27Z"
},
{
"tag": "v0.0.88",
"kind": "patch",
"published_at": "2026-05-26T14:06:23Z"
},
{
"tag": "v0.0.87",
"kind": "patch",
"published_at": "2026-05-26T10:03:48Z"
},
{
"tag": "v0.0.86",
"kind": "patch",
"published_at": "2026-05-26T08:17:25Z"
},
{
"tag": "v0.0.85",
"kind": "patch",
"published_at": "2026-05-26T06:29:41Z"
},
{
"tag": "v0.0.84",
"kind": "patch",
"published_at": "2026-05-25T12:53:03Z"
},
{
"tag": "v0.0.83",
"kind": "patch",
"published_at": "2026-05-25T11:30:19Z"
},
{
"tag": "v0.0.82",
"kind": "patch",
"published_at": "2026-05-25T11:19:09Z"
},
{
"tag": "v0.0.81",
"kind": "patch",
"published_at": "2026-05-25T09:44:12Z"
},
{
"tag": "v0.0.80",
"kind": "patch",
"published_at": "2026-05-24T21:33:10Z"
},
{
"tag": "v0.0.79",
"kind": "patch",
"published_at": "2026-05-24T13:44:06Z"
},
{
"tag": "v0.0.78",
"kind": "patch",
"published_at": "2026-05-24T10:37:39Z"
},
{
"tag": "v0.0.77",
"kind": "patch",
"published_at": "2026-05-24T06:40:52Z"
},
{
"tag": "v0.0.76",
"kind": "patch",
"published_at": "2026-05-22T15:46:15Z"
}
],
"recent_commits": [
{
"oid": "5f5ff385b59fd455c133bffbea9d78324ca5b58b",
"body": "## Linked issue\n\nCloses #0\n\n<!-- Every PR must link to an existing issue. PRs without a linked issue\nwill not be reviewed.\n Use one of: Closes #N / Fixes #N / Resolves #N -->\n\n## What does this PR do?\n\n### Restore HTTP idle timeout\n\nWe effectively had no HTTP idle timeout, and consequently no wa\n[…]\nTING.md) and agree to the\nCLA\n- [ ] This PR links to an open issue above\n- [x] Tests pass locally (`pnpm run test`)\n- [x] Lint passes (`pnpm run check`)\n- [x] Documentation updated if behavior changed",
"is_bot": false,
"headline": "fix: Restore client-side HTTP idle timeouts (#841)",
"author_name": "Mat",
"author_login": "pmateusz",
"committed_at": "2026-07-24T15:08:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7f8241e456f345ad63c66579776ff39d5af4c978",
"body": "## Linked issue\n\nCloses #634 \n\n<!-- Every PR must link to an existing issue. PRs without a linked issue\nwill not be reviewed.\n Use one of: Closes #N / Fixes #N / Resolves #N -->\n\n## What does this PR do?\n\n`fetchAvailableModels` in `src/models.ts` only wrapped `fetch()` in a\ntry/catch,\nso the fol\n[…]\nTING.md) and agree to the\nCLA\n- [x] This PR links to an open issue above\n- [x] Tests pass locally (`pnpm run test`)\n- [x] Lint passes (`pnpm run check`)\n- [x] Documentation updated if behavior changed",
"is_bot": false,
"headline": "fix: Wrap the JSON parse and classify parse failures as transient (#629)",
"author_name": "Taey",
"author_login": "PythonToGo",
"committed_at": "2026-07-24T14:02:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dee97d1a53058aaf4e14b8f2e8dce13066016cac",
"body": "## Linked issue\n\nCloses #919 \n\n<!-- Every PR must link to an existing issue. PRs without a linked issue\nwill not be reviewed.\n Use one of: Closes #N / Fixes #N / Resolves #N -->\n\n## What does this PR do?\n\nThe welcome workflow (actions/first-interaction@v1) posts its welcome\nmessage on PRs by cre\n[…]\nusing\n\"Resource not accessible by integration\" on first-time PRs.\n\nAdded issues: write as well, since the same action posts issue comments\nand would hit the same class of failure on first-time issues.",
"is_bot": false,
"headline": "fix(ci): grant welcome action permissions (#920)",
"author_name": "Linas N.",
"author_login": "soundvibe",
"committed_at": "2026-07-24T09:30:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0a0f4ced18b7fd374d417ae175e7e0fe4f322516",
"body": "## Linked issue\n\nCloses #0",
"is_bot": false,
"headline": "ci: fix command injection via task_id input in arc-terminal-bench (#918)",
"author_name": "Patrick Pichler",
"author_login": "patrickpichler",
"committed_at": "2026-07-23T08:43:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a83f3d7975565b7f645ce5e8b7eb15d77fab06f6",
"body": "## Summary\n\nAll models go through a single `kimchi-dev` provider using\n`openai-completions` and `/openai/v1` base URL. Claude models get compat\nflags for prompt caching (`cacheControlFormat: \"anthropic\"`) and\nstreaming usage (`supportsUsageInStreaming: true`).\n\nThis replaces the band-aid from #866 a\n[…]\ns`), and achieves the same caching and\nusage reporting via compat flags.\n\n## Test results\n```\nTypeScript: No errors found\nPASS (46) FAIL (0)\n```\n\n---------\n\nCo-authored-by: Kimchi <noreply@kimchi.dev>",
"is_bot": false,
"headline": "split models.json providers by upstream provider config (#868)",
"author_name": "Ilie",
"author_login": "castabar",
"committed_at": "2026-07-22T10:59:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "664cea174b515e92894d3f42d3e66ac528c61076",
"body": "## Linked issue\n\nCloses #856\n\n## What does this PR do?\n\n### Summary\nThis PR updates outdated user-facing references from **\"pi\"** to\n**\"kimchi\"** for better consistency with the current project name.\n\n### Changes made\n- Updated user-facing notification messages to replace **\"restart pi\"**\nwith **\"re\n[…]\nTING.md) and agree to the\nCLA\n- [x] This PR links to an open issue above\n- [ ] Tests pass locally (`pnpm run test`)\n- [ ] Lint passes (`pnpm run check`)\n- [x] Documentation updated if behavior changed",
"is_bot": false,
"headline": "fix: update user-facing references from pi to kimchi (#912)",
"author_name": "VAISHNAVI UTTAM KUMAR",
"author_login": "VaishnaviKumar0704",
"committed_at": "2026-07-22T06:23:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cd54a9606f05e5db4ca1cd6d294de7bb604d7ebd",
"body": "## What does this PR do?\n\nThe PR allows commands that end with `2>&1` (\"redirect stderr to\nstdout\") to be always allowed in 'default' mode.\nIt is very annoying when using GLM.\n\n## Checklist\n\n- [x] I have read [CONTRIBUTING.md](../CONTRIBUTING.md) and agree to the\nCLA\n- [ ] This PR links to an open issue above\n- [x] Tests pass locally (`pnpm run test`)\n- [x] Lint passes (`pnpm run check`)\n- [ ] Documentation updated if behavior changed",
"is_bot": false,
"headline": "feat(permissions): treat shell fd redirect as safe (#902)",
"author_name": "Dmitry Baynak",
"author_login": "kr3v",
"committed_at": "2026-07-21T17:31:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dfd21f971ae84ff676bd2afbd65d1ea531b89fdf",
"body": "…#906)\n\n## What does this PR do?\n\nAdds a readFlag telemetry wrapper around the two\npi.getFlag('ferment-oneshot') reads in events.ts (turn_end\nstopReason='error' branch and session_shutdown branch). Records the raw\nreturn value, whether the read threw, and the error message (including\nstale-ctx detec\n[…]\n a one-shot ferment is incorrectly paused, so we can fix the\nunderlying cause rather than working around it. Telemetry is temporary —\nremove once the root cause is confirmed and fixed.\n\nCloses #123456",
"is_bot": false,
"headline": "telemetry(ferment): log pi.getFlag reads in error/shutdown branches (…",
"author_name": "Linas N.",
"author_login": "soundvibe",
"committed_at": "2026-07-21T08:58:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f9a8e111fa1285526649a832fb4a2a94cb985b19",
"body": "…odel param (#903)\n\n## Problem\n\nWhen multi-model mode is enabled and the orchestrator omits the `model`\nparameter on an `Agent` tool call, sub-agents were defaulting to the\norchestrator's model (kimi-k2.7) instead of the configured role model\n(e.g. minimax-m3 for Builder). Benchmark analysis showed \n[…]\nppings\n- [x] Type check passes\n- [x] Lint passes\n\n## Checklist\n\n- [x] Bug fix\n- [ ] New feature\n- [ ] Breaking change\n- [ ] Documentation update\n\n---------\n\nCo-authored-by: Kimchi <noreply@kimchi.dev>",
"is_bot": false,
"headline": "fix: resolve default model from role config when orchestrator omits m…",
"author_name": "Mike Norgate",
"author_login": "mikenorgate",
"committed_at": "2026-07-21T08:52:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "53a1d48a95211d8dcf93878f5d707debb19c9a78",
"body": "## Linked issue\n\nCloses #0\n\n## Problem\n\nA previous ferment's \"automated\" continuation policy (set when the user\nchose \"Start execution in auto mode\") persisted into subsequent ferments\nin the same session. This was a precondition for the continuation loop\nreported by a user: the stale automated poli\n[…]\ndated if behavior changed\n\n---------\n\nCo-authored-by: Mateusz Otmianowski <mateusz.otmianowski@cast.ai>\nCo-authored-by: Kimchi <noreply@kimchi.dev>\nCo-authored-by: Vytautas <vytautas.mizgiris@cast.ai>",
"is_bot": false,
"headline": "fix(ferment): reset continuation policy on new ferment creation (#865)",
"author_name": "MateuszOtmianowski",
"author_login": "MateuszOtmianowski",
"committed_at": "2026-07-17T13:31:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c7a89f8e6e8d1cf847c902dd7765b9f2263ce855",
"body": "## Linked issue\n\nCloses #2395\n\n## Problem\n\nIn automated/one-shot mode, when the model ends a turn with no tool\ncalls while a lifecycle transition is still pending (e.g. it writes\n\"Calling scope_ferment now\" but returns toolCalls: []), the old reactive\nnudge had a budget of 1 keyed only by Ferment ID\n[…]\nLint passes (`pnpm run check`)\n- [x] Documentation updated if behavior changed\n\n---------\n\nCo-authored-by: Mateusz Otmianowski <mateusz.otmianowski@cast.ai>\nCo-authored-by: Kimchi <noreply@kimchi.dev>",
"is_bot": false,
"headline": "Fix stalled lifecycle transitions in auto ferment (#850)",
"author_name": "MateuszOtmianowski",
"author_login": "MateuszOtmianowski",
"committed_at": "2026-07-17T12:12:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dd1e69d581d9cfee8fc07ce3a601d336ead60b2f",
"body": "…ication (#880)\n\n## Summary\n\nFixes a process crash caused by stale extension context after\n`ctx.compact()` in the model-guard `turn_end` handler.\n\n## Problem\n\n`ctx.compact()` replaces the session internally, which invalidates the\n`ctx` captured in the `turn_end` handler's closure. When the\n`onComple\n[…]\nedit)\n- [x] Regression tests cover the stale-ctx scenario by firing\n`session_compact` with a fresh ctx\n- [x] Existing tests updated to assert the new contract (no\n`onComplete`, notification via event)",
"is_bot": false,
"headline": "fix(model-guard): use session_compact event for post-compaction notif…",
"author_name": "Mike Norgate",
"author_login": "mikenorgate",
"committed_at": "2026-07-17T11:58:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4936efafaf58764785ebee73455f70fdd28d838c",
"body": "…881)\n\n## Linked issue\n\nCloses #\n\n<!-- Every PR must link to an existing issue. PRs without a linked issue\nwill not be reviewed.\n Use one of: Closes #N / Fixes #N / Resolves #N -->\n\n## What does this PR do?\n\n<!-- Brief description of the change and why it's needed. -->\n\n## Checklist\n\n- [ ] I hav\n[…]\nan open issue above\n- [ ] Tests pass locally (`pnpm run test`)\n- [ ] Lint passes (`pnpm run check`)\n- [ ] Documentation updated if behavior changed\n\nCo-authored-by: tautvydasLiekis <tautvydas@cast.ai>",
"is_bot": false,
"headline": "feat(status-line): Include billing status details in status object (#…",
"author_name": "Tautvydas Liekis",
"author_login": "tautvydasLiekis",
"committed_at": "2026-07-17T11:55:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e7a74cad0a786dcdfb4d507cc9d8e0c53ba771fd",
"body": "…uto-update hint (#862)\n\n## Summary\n\nFollow-up to #713 with the last round of review feedback that was pushed\nafter merge:\n\n1. **30s hard timeout on `applyUpdate`** —\n[6783d0e](https://github.com/getkimchi/kimchi/commit/6783d0e94e585c79f81ff87a48e8060be5080532).\nA hung network or filesystem during d\n[…]\nte`, if auto-update is still off, shows a\ntoast: `Tip: enable auto-update from /update so kimchi stays up to date\nautomatically.`\n\nResolves #606\n\n---------\n\nCo-authored-by: Kimchi <noreply@kimchi.dev>",
"is_bot": false,
"headline": "fix(update): post-merge follow-up — applyUpdate timeout, argv scan, a…",
"author_name": "Alex Zamai",
"author_login": "zamai",
"committed_at": "2026-07-17T11:51:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "475bdcc6ceb12661b7502f502955a114e9ec7ded",
"body": "## Linked issue\n\nCloses #0\nLLM-2573\n\n<!-- Every PR must link to an existing issue. PRs without a linked issue\nwill not be reviewed.\n Use one of: Closes #N / Fixes #N / Resolves #N -->\n\n## What does this PR do?\n\nFixes phase/tag state leaking across keyed sessions in the same process,\nand makes ta\n[…]\nTING.md) and agree to the\nCLA\n- [x] This PR links to an open issue above\n- [x] Tests pass locally (`pnpm run test`)\n- [x] Lint passes (`pnpm run check`)\n- [ ] Documentation updated if behavior changed",
"is_bot": false,
"headline": "fix: phase and tags session state leak (#877)",
"author_name": "Vytautas",
"author_login": "vmizg",
"committed_at": "2026-07-17T09:55:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e9a3d18210581620d82d8ed7c7cde55b32de88ca",
"body": "…ion (#876)\n\n<img width=\"878\" height=\"200\" alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/1f834ffd-d7c4-4ea0-bc3f-1744b21f19d1\"\n/>\n\n<img width=\"778\" height=\"222\" alt=\"Screenshot 2026-07-17 at 10 58 53\"\nsrc=\"https://github.com/user-attachments/assets/56b8c3a2-6258-411a-8322-1a99f2bc8f85\"\n[…]\nue above\n- [ ] Tests pass locally (`pnpm run test`)\n- [ ] Lint passes (`pnpm run check`)\n- [ ] Documentation updated if behavior changed\n\n---------\n\nCo-authored-by: tautvydasLiekis <tautvydas@cast.ai>",
"is_bot": false,
"headline": "feat(budget): Add support for displaying and managing budget informat…",
"author_name": "Tautvydas Liekis",
"author_login": "tautvydasLiekis",
"committed_at": "2026-07-17T09:26:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3f38796fe4a458a1e29a18eb659680476a558131",
"body": "## Linked issue\n\nCloses #0\n\n<!-- Every PR must link to an existing issue. PRs without a linked issue\nwill not be reviewed.\n Use one of: Closes #N / Fixes #N / Resolves #N -->\n\n## What does this PR do?\n\nUpdates AGENTS.md with common gotchas that AI models should keep in mind\nwhen writing new code\n[…]\nTING.md) and agree to the\nCLA\n- [ ] This PR links to an open issue above\n- [x] Tests pass locally (`pnpm run test`)\n- [x] Lint passes (`pnpm run check`)\n- [x] Documentation updated if behavior changed",
"is_bot": false,
"headline": "docs: update AGENTS.md (#878)",
"author_name": "Vytautas",
"author_login": "vmizg",
"committed_at": "2026-07-17T08:35:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2633e6b7f083b8dc0899f657da6649986d43a9cd",
"body": "## Linked issue\n\nCloses #0\nLLM-2572\n\n<!-- Every PR must link to an existing issue. PRs without a linked issue\nwill not be reviewed.\n Use one of: Closes #N / Fixes #N / Resolves #N -->\n\n## What does this PR do?\n\nFixes a critical bug in todo scoping where todos leaked between multiple\nsessions due\n[…]\nTING.md) and agree to the\nCLA\n- [x] This PR links to an open issue above\n- [x] Tests pass locally (`pnpm run test`)\n- [x] Lint passes (`pnpm run check`)\n- [ ] Documentation updated if behavior changed",
"is_bot": false,
"headline": "fix(todos): todo session scope leak (#872)",
"author_name": "Vytautas",
"author_login": "vmizg",
"committed_at": "2026-07-17T05:58:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8e5784af93110498b9ce95cfd57e00c9214b296c",
"body": "…benchmarks (#875)\n\n## Linked issue\n\nCloses #0\n\n<!-- Every PR must link to an existing issue. PRs without a linked issue\nwill not be reviewed.\n Use one of: Closes #N / Fixes #N / Resolves #N -->\n\n## What does this PR do?\n\nAdds a `disable-compaction=true` kwarg to the terminal-bench-2 agent\nthat \n[…]\nTING.md) and agree to the\nCLA\n- [x] This PR links to an open issue above\n- [x] Tests pass locally (`pnpm run test`)\n- [x] Lint passes (`pnpm run check`)\n- [x] Documentation updated if behavior changed",
"is_bot": false,
"headline": "fix(benchmarks): Add a parameter to enable/disable autocompaction in …",
"author_name": "Mat",
"author_login": "pmateusz",
"committed_at": "2026-07-16T15:35:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "86fe52bda922dce597bff55bbaf71c8b71b8fd86",
"body": "## Summary\n\nSuperpowers skills are no longer bundled with kimchi by default. Users\nwho want them can install manually via\n`~/.config/kimchi/harness/skills/` or `.claude/skills/`.\n\n## What changed\n\n**Removed:**\n- `vendor/superpowers` git submodule\n- `src/extensions/superpowers/` directory (extension,\n[…]\nx\nwill need to install them manually. See\nhttps://github.com/obra/superpowers for installation instructions.\n\n- [x] Code changes\n- [x] Tests updated\n- [x] Typecheck passes\n- [x] Lint passes\n\nFixes #0.",
"is_bot": false,
"headline": "Remove superpowers skills as bundled by default (#874)",
"author_name": "josemonteiro",
"author_login": "josemonteiro",
"committed_at": "2026-07-16T15:16:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a9937a04ea0dc20123ae8f3ec88a82d2b56bb35e",
"body": "…hand-parsing (#873)\n\n## Linked issue\n\nCloses #0\n\n<!-- Every PR must link to an existing issue. PRs without a linked issue\nwill not be reviewed.\n Use one of: Closes #N / Fixes #N / Resolves #N -->\n\n## What does this PR do?\n\ngetCompactionEnabled and getActiveThemeName previously hand-parsed the\ng\n[…]\nTING.md) and agree to the\nCLA\n- [x] This PR links to an open issue above\n- [x] Tests pass locally (`pnpm run test`)\n- [x] Lint passes (`pnpm run check`)\n- [x] Documentation updated if behavior changed",
"is_bot": false,
"headline": "fix(settings): read settings through pi's SettingsManager instead of …",
"author_name": "Mat",
"author_login": "pmateusz",
"committed_at": "2026-07-16T13:54:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4359261caafe79bf7c3b29a5b2eb2efbb7b65e6a",
"body": "## Linked issue\n\nCloses #0\n\n<!-- Every PR must link to an existing issue. PRs without a linked issue\nwill not be reviewed.\n Use one of: Closes #N / Fixes #N / Resolves #N -->\n\n## What does this PR do?\n\n`benchmark/terminal-bench-2/scripts/run-local.sh` cross-builds a\nlinux-x64 kimchi binary befor\n[…]\nTING.md) and agree to the\nCLA\n- [x] This PR links to an open issue above\n- [x] Tests pass locally (`pnpm run test`)\n- [x] Lint passes (`pnpm run check`)\n- [x] Documentation updated if behavior changed",
"is_bot": false,
"headline": "fix: install linux native deps for cross-building on macOS (#871)",
"author_name": "Mat",
"author_login": "pmateusz",
"committed_at": "2026-07-16T13:29:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a3a081d37ceff67653c503ccdb78ba451472efff",
"body": "The upstream bash tool spawns a fresh shell for every call, so `cd`\nnever persists between tool calls. Models that run `cd subdir` lose\ntrack of their working directory and fail on relative paths in\nsubsequent calls.\n\nAdded description override (via registerTool on session_start) now\nincludes a para\n[…]\nTING.md) and agree to the\nCLA\n- [ ] This PR links to an open issue above\n- [x] Tests pass locally (`pnpm run test`)\n- [x] Lint passes (`pnpm run check`)\n- [x] Documentation updated if behavior changed",
"is_bot": false,
"headline": "fix(bash-tool-guard): document cd persistence (#852)",
"author_name": "Mat",
"author_login": "pmateusz",
"committed_at": "2026-07-16T10:52:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "782093e48cc15909a89a2e4b2aba911de87c6886",
"body": "…on (#851)\n\nThe ferment extension's own compaction paths\n(maybeTriggerFermentCompaction at turn_end/agent_end, and\nmaybeTriggerMidTurnFermentCompaction mid-turn) bypassed the upstream\nautoCompactionEnabled setting — disabling auto-compact in /settings only\nstopped upstream compaction, not ferment-dr\n[…]\nct for both trigger functions)\n- index.test.ts: added default-true settings-watcher mock to decouple\nintegration tests from the dev machine's global compaction.enabled\n\n## Linked issue\n\nCloses #123456",
"is_bot": false,
"headline": "fix(ferment): honor /settings Auto-compact toggle in ferment compacti…",
"author_name": "Linas N.",
"author_login": "soundvibe",
"committed_at": "2026-07-16T10:13:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "34ae5a50998278248b76bf6dd0c525207a3bc820",
"body": "…der (#866)\n\n## Problem\n\nThe models metadata API returns the same Claude slug under both\n`anthropic` and `azure_ai` providers (e.g. `claude-sonnet-4-6` appears\ntwice). Both entries are written into the same `kimchi-dev` block in\n`models.json`.\n\nPi's\n[`mergeCustomModels`](https://github.com/earendil-\n[…]\nhen\nsilently last-wins. The proper fix is dedup in `buildModelsConfig`, but\nthis unblocks caching immediately.\n\nCo-Authored-By: Kimchi <noreply@kimchi.dev>\n\nCo-authored-by: Kimchi <noreply@kimchi.dev>",
"is_bot": false,
"headline": "fix: apply anthropic compat to all claude- models regardless of provi…",
"author_name": "Ilie",
"author_login": "castabar",
"committed_at": "2026-07-16T07:54:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ea57bc1969afe6888b4deb54ec32d58e115d6150",
"body": "## Problem\nIn iTerm2 on macOS, the terminal viewport sometimes jumps to the very\nstart of the session in long sessions or when rendering large diffs.\n\nCloses #863\n\n## Change\n- Patches `@earendil-works/pi-tui` so `ESC[3J` (erase scrollback) is\nonly emitted when `PI_TUI_NO_CLEAR_SCROLLBACK` is **not**\n[…]\nt this to disable scrollback clearing and avoid the iTerm2 viewport jump:\nPI_TUI_NO_CLEAR_SCROLLBACK=1 kimchi\n```\n\n## Verification\n- `pnpm vitest run tests/unit/pi-tui-scrollback-flag.test.ts` passes.",
"is_bot": false,
"headline": "fix(tui): make ESC[3J opt-in to prevent iTerm2 scroll-to-top (#864)",
"author_name": "josemonteiro",
"author_login": "josemonteiro",
"committed_at": "2026-07-15T15:00:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f0483eecae6176a8b61ad8b286f0536a2fd742bd",
"body": "## Problem\n\nThe system prompt contained conflicting instructions about who writes\nplans and who performs reviews, creating ambiguous execution paths the\nagent could not reliably resolve.\n\n**Planning conflict** — three incompatible models:\n1. *\"Decide whether to write the plan yourself or delegate to\n[…]\nended`, `\"on\"` instead of `\"error\"`). This is a pre-existing\nissue unrelated to this PR.\n\nCo-Authored-By: Kimchi <noreply@kimchi.dev>\n\nCloses #0\n\n---------\n\nCo-authored-by: Kimchi <noreply@kimchi.dev>",
"is_bot": false,
"headline": "fix: resolve planning and review ownership in code, not in prompt (#849)",
"author_name": "Krzysztof Reczek",
"author_login": "krzysztofreczek",
"committed_at": "2026-07-15T14:01:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "df53cae70f5ceb706e6c4a7b09895de6d81a2877",
"body": "## Linked issue\n\nCloses #\n\n<!-- Every PR must link to an existing issue. PRs without a linked issue\nwill not be reviewed.\n Use one of: Closes #N / Fixes #N / Resolves #N -->\n\n## What does this PR do?\n\n<!-- Brief description of the change and why it's needed. -->\n\n## Checklist\n\n- [ ] I have read \n[…]\nan open issue above\n- [ ] Tests pass locally (`pnpm run test`)\n- [ ] Lint passes (`pnpm run check`)\n- [ ] Documentation updated if behavior changed\n\nCo-authored-by: tautvydasLiekis <tautvydas@cast.ai>",
"is_bot": false,
"headline": "fix(harness): permissions don't work with RTK (#861)",
"author_name": "Tautvydas Liekis",
"author_login": "tautvydasLiekis",
"committed_at": "2026-07-15T13:23:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "55a0de1fe44c0323efea455e18e20dc4b8463528",
"body": "## Summary\n\nResolves #606\n\nAdds an opt-in (default-on) auto-update feature that mirrors Claude\nCode's native-install behavior. Users can toggle via the new `/update`\nslash command.\n\n- On TUI launch, if `autoUpdate` is on and the user is not on Homebrew,\nthe harness checks for a new version, download\n[…]\ngo through first-class\n`pi.registerCommand` + extension `pi.on(\"session_start\")` events.\n\n---------\n\nCo-authored-by: Kimchi <noreply@kimchi.dev>\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(update): auto-update on launch with opt-out toggle (#713)",
"author_name": "Alex Zamai",
"author_login": "zamai",
"committed_at": "2026-07-15T09:57:55Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b4d5dee4512979e8ccb3c132644accd01c540b5d",
"body": "…(#857)\n\n## Linked issue\n\nCloses #858\n\n## What does this PR do?\n\nSwaps the default multi-model `explorer` role from\n`nemotron-3-ultra-fp4` to `deepseek-v4-flash`.\n\n- Changes `DEFAULT_MODEL_ROLES.explorer` in `model-roles.ts` to\n`kimchi-dev/deepseek-v4-flash`\n- Adds `deepseek-v4-flash` to both `MODEL\n[…]\nopen issue above\n- [x] Tests pass locally (`pnpm run test`)\n- [x] Lint passes (`pnpm run check`)\n- [x] Documentation updated if behavior changed\n\n---------\n\nCo-authored-by: Kimchi <noreply@kimchi.dev>",
"is_bot": false,
"headline": "feat: swap default explorer model from nemotron to deepseek-v4-flash …",
"author_name": "Mike Norgate",
"author_login": "mikenorgate",
"committed_at": "2026-07-15T09:55:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dd91ff6a8ef07e78a8c7ed9f076a8d914fcaa0f0",
"body": "## Linked issue\n\nCloses #420\n\n## What does this PR do?\n\nAdds a `Notification` hook event to the command-hook adapter system,\nenabling external tools (e.g. peon-ping, context-mode) to react to\nlifecycle notifications via JSON-configured hooks.\n\n**Changes:**\n\n- **`src/extensions/hook-adapters/adapter.\n[…]\nan open issue above (#420)\n- [x] Tests pass locally (`pnpm run test` — all 151 tests in changed\nfiles pass)\n- [x] Lint passes (`pnpm run check` — clean)\n- [ ] Documentation updated if behavior changed",
"is_bot": false,
"headline": "feat: add notification hook (#855)",
"author_name": "cast-vytautas",
"author_login": "cast-vytautas",
"committed_at": "2026-07-15T09:48:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "082d9f80c7cbe090c48ad4b2febb30fca8a9bf46",
"body": "## Linked issue\n\nCloses #802\n\n<!-- Every PR must link to an existing issue. PRs without a linked issue\nwill not be reviewed.\n Use one of: Closes #N / Fixes #N / Resolves #N -->\n\n## What does this PR do?\n\nAdds non-aborting inline compaction for Ferment stage boundaries. This\nlets Ferment compact \n[…]\nTING.md) and agree to the\nCLA\n- [x] This PR links to an open issue above\n- [x] Tests pass locally (`pnpm run test`)\n- [x] Lint passes (`pnpm run check`)\n- [x] Documentation updated if behavior changed",
"is_bot": false,
"headline": "feature: Inline compaction for one-shot ferment (#775)",
"author_name": "Mat",
"author_login": "pmateusz",
"committed_at": "2026-07-14T16:05:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f27834b8741614a87cfc68febf5562ec56f36c53",
"body": "…nding (#847)\n\n## Problem\n\nAfter `propose_ferment_scoping` returns \"Plan ready for review\" in TUI\nmode, the plan review dialog was not displayed. The agent reported that\nthe plan was submitted but kept looping through text-only turns.\nPressing ESC could eventually surface the dialog, but clicking \"S\n[…]\nt.ts`: 44 tests pass\n- `tool-scope.test.ts`: 20 tests pass\n- `ferment-plan-review` TUI E2E (4 tests): all pass\n\n## Type of change\n\n- [x] Bug fix\n\n---------\n\nCo-authored-by: Kimchi <noreply@kimchi.dev>",
"is_bot": false,
"headline": "fix(ferment): block turn_end nudges/dropdowns while plan review is pe…",
"author_name": "josemonteiro",
"author_login": "josemonteiro",
"committed_at": "2026-07-14T15:11:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "268bc0c169fc86f5919cb2908986aa871a6805a7",
"body": "…#853)\n\nExisting installs whose settings.json predates the quietStartup default\n(or otherwise lacks the key) fell back to pi-coding-agent's verbose\nstartup listing, exposing the raw [Extensions]/[Themes] resource dump —\nincluding synthetic <inline:N> placeholder names for factory-registered\nextensio\n[…]\nTING.md) and agree to the\nCLA\n- [x] This PR links to an open issue above\n- [x] Tests pass locally (`pnpm run test`)\n- [x] Lint passes (`pnpm run check`)\n- [x] Documentation updated if behavior changed",
"is_bot": false,
"headline": "fix: backfill quietStartup default for existing settings.json files (…",
"author_name": "Mat",
"author_login": "pmateusz",
"committed_at": "2026-07-14T14:20:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9be6a515accc06737f9a6ac6af10a0470e4026c3",
"body": "## Summary\n\nGeneral-Purpose was the only default agent using `promptMode: \"append\"`,\nwhich inherited the parent's entire system prompt. When the parent was a\nferment orchestrator, this injected all ferment lifecycle instructions,\norchestration rules, and delegation guidelines that the subagent canno\n[…]\nDocumentation update\n\n## Testing\n\n- `pnpm run typecheck` ✅\n- `pnpm run lint` ✅\n- All 104 affected tests pass ✅\n\nCo-Authored-By: Kimchi <noreply@kimchi.dev>\n\nCo-authored-by: Kimchi <noreply@kimchi.dev>",
"is_bot": false,
"headline": "feat: General-Purpose subagent prompt refactoring (#843)",
"author_name": "Mike Norgate",
"author_login": "mikenorgate",
"committed_at": "2026-07-14T12:04:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c10d5b389911ed29c7ed66ee9a0c0cf9e1f1822a",
"body": "## Linked issue\n\nCloses #0\n\n<!-- Every PR must link to an existing issue. PRs without a linked issue\nwill not be reviewed.\n Use one of: Closes #N / Fixes #N / Resolves #N -->\n\n## What does this PR do?\n\n* Upgrades Biome to v2\n* Formats all files\n* Fixes linter scope to include E2E tests dir\n* Fix\n[…]\nTING.md) and agree to the\nCLA\n- [ ] This PR links to an open issue above\n- [x] Tests pass locally (`pnpm run test`)\n- [x] Lint passes (`pnpm run check`)\n- [ ] Documentation updated if behavior changed",
"is_bot": false,
"headline": "chore: upgrade biome, run format (#846)",
"author_name": "Vytautas",
"author_login": "vmizg",
"committed_at": "2026-07-14T10:30:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "371c21010a7dd56569a8e651d9300d3e9fb64bec",
"body": "…orkers (#836)\n\n## What changed\n- Added a thinking-level policy that maps each delegation shape\n(explore, research, plan, build, review, fix) and chunk complexity\n(simple/complex) to a concrete `thinking` level.\n- Each scope has a retry ceiling so retries bump the level by one tier\nwithout wasting x\n[…]\nhe level resets to a coordination baseline when it goes back to\ndelegating. The same scope/complexity/retry mapping keeps self-performed\nwork and delegated work on the same reasoning scale.\n\nCloses #0",
"is_bot": false,
"headline": "feat(orchestration): dynamic thinking-level selection for delegated w…",
"author_name": "Krzysztof Reczek",
"author_login": "krzysztofreczek",
"committed_at": "2026-07-14T08:28:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "91e565b73c2cd36946908ef31e5a1a54dc39f5c5",
"body": "…council prompt (#839)\n\n## Summary\n\nThis PR overhauls the ferment grading system to address a critical issue\nidentified in benchmark testing: the grader was trusting the agent's\nself-reported claims without independent verification, leading to false\npass grades.\n\n## Background\n\nBenchmark analysis (t\n[…]\n prompts\n- All existing tests updated and passing (1137 total)\n\n- [x] Bug fix\n- [x] New feature\n- [ ] Breaking change\n- [ ] Documentation update\n\n---------\n\nCo-authored-by: Kimchi <noreply@kimchi.dev>",
"is_bot": false,
"headline": "feat: ferment grader improvements — evidence field, subagent grader, …",
"author_name": "Mike Norgate",
"author_login": "mikenorgate",
"committed_at": "2026-07-14T08:18:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3063953c1194c53b959d46a090b0ba13a167461c",
"body": "…ngle system-prompt section (#835)\n\n## What changed\n- Merged the orchestrator's team roster, role ownership, workflow, phase\nresponsibilities, delegation rules, budgets, and plan-quality checklist\ninto a single `## Orchestration` chapter in the system prompt.\n- Removed duplicated/overlapping delegat\n[…]\nr opened and, if it\nlanded on L2, presses Escape to return to L1 before asserting the\nprogress bar, `human:` timing line, and step count. This was verified\nwith 10 consecutive passing runs.\n\nCloses #0",
"is_bot": false,
"headline": "feat(orchestration): consolidate orchestration instructions into a si…",
"author_name": "Krzysztof Reczek",
"author_login": "krzysztofreczek",
"committed_at": "2026-07-14T07:14:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "25cccff41cbb8ffe63d9f518554493a2e6617ecb",
"body": "Closes #0\n\nThis reverts commit 59250d5f4d114c33d3c973bb758457cf197cd5e6.",
"is_bot": false,
"headline": "Revert \"chore(deps): upgrade pi packages to 0.80.5 (#832)\" (#845)",
"author_name": "Mat",
"author_login": "pmateusz",
"committed_at": "2026-07-14T05:44:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "59250d5f4d114c33d3c973bb758457cf197cd5e6",
"body": "Pin the PI package family to 0.80.5 and regenerate patched dependency\nhashes.\n\nRebase the PI patches against upstream changes, retain Kimchi\ncompatibility behavior, and migrate removed pi-ai exports to the\ncompatibility entrypoint.\n\n## Linked issue\n\nCloses #0\n\n<!-- Every PR must link to an existing \n[…]\nTING.md) and agree to the\nCLA\n- [ ] This PR links to an open issue above\n- [x] Tests pass locally (`pnpm run test`)\n- [x] Lint passes (`pnpm run check`)\n- [x] Documentation updated if behavior changed",
"is_bot": false,
"headline": "chore(deps): upgrade pi packages to 0.80.5 (#832)",
"author_name": "Mat",
"author_login": "pmateusz",
"committed_at": "2026-07-13T13:47:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b24086bd216c7b29ce38aff77585d8e0a463954e",
"body": "<img width=\"1050\" height=\"778\" alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/4a44cad9-8ce2-496a-b5c9-c939b42c3994\"\n/>\n\n\n<img width=\"520\" height=\"154\" alt=\"image\"\nsrc=\"https://github.com/user-attachments/assets/b4e455f7-6056-4460-b472-f181197ca829\"\n/>\n\n\n## Linked issue\n\nCloses #\n\n<!-- E\n[…]\nue above\n- [ ] Tests pass locally (`pnpm run test`)\n- [ ] Lint passes (`pnpm run check`)\n- [ ] Documentation updated if behavior changed\n\n---------\n\nCo-authored-by: tautvydasLiekis <tautvydas@cast.ai>",
"is_bot": false,
"headline": "Feat(billing)/warning when user ran out of credits (#819)",
"author_name": "Tautvydas Liekis",
"author_login": "tautvydasLiekis",
"committed_at": "2026-07-13T12:20:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "792bbbb3d945c3948b853fe5bff0e0ae9962acae",
"body": "## Problem\n\nWhen a bash command times out, the upstream error message is just\n`Command timed out after N seconds` — no guidance on what to do\ndifferently. Benchmark data (terminal-bench-2-1) shows the agent's\nnatural response is to retry with a larger timeout, burning 2+ hours on\nrepeated timeouts w\n[…]\nl test: agent runs `sleep 30` with `timeout=5`, receives the\nsteering message, and acknowledges the guidance instead of blindly\nretrying\n\n- [x] Tests added\n\nCo-authored-by: Kimchi <noreply@kimchi.dev>",
"is_bot": false,
"headline": "feat: steer agent on bash timeout to avoid repeated wasted runs (#842)",
"author_name": "Mike Norgate",
"author_login": "mikenorgate",
"committed_at": "2026-07-13T11:54:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0255288fdc5a476181816deda4132709232adc33",
"body": "## Linked issue\n\nCloses #0\n\n<!-- Every PR must link to an existing issue. PRs without a linked issue\nwill not be reviewed.\n Use one of: Closes #N / Fixes #N / Resolves #N -->\n\n## What does this PR do?\n\n<!-- Brief description of the change and why it's needed. -->\n\n## Checklist\n\n- [ ] I have read\n[…]\nTING.md) and agree to the\nCLA\n- [ ] This PR links to an open issue above\n- [ ] Tests pass locally (`pnpm run test`)\n- [ ] Lint passes (`pnpm run check`)\n- [ ] Documentation updated if behavior changed",
"is_bot": false,
"headline": "Refactor footer terminology to status line (#762)",
"author_name": "Pedro",
"author_login": "pbrczan",
"committed_at": "2026-07-13T09:15:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "782e624b3ccc2d0ee669a527c0c936d44b0159df",
"body": "## Linked issue\n\nCloses #0 (LLM-2472)\n\n<!-- Every PR must link to an existing issue. PRs without a linked issue\nwill not be reviewed.\n Use one of: Closes #N / Fixes #N / Resolves #N -->\n\n## What does this PR do?\n\nThis PR exposes multi-model support in the ACP (Agent Connection\nProtocol) surface,\n[…]\nTING.md) and agree to the\nCLA\n- [x] This PR links to an open issue above\n- [x] Tests pass locally (`pnpm run test`)\n- [x] Lint passes (`pnpm run check`)\n- [x] Documentation updated if behavior changed",
"is_bot": false,
"headline": "feat(acp): multi-model via config options and availableModels (#838)",
"author_name": "Vytautas",
"author_login": "vmizg",
"committed_at": "2026-07-13T09:01:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6e7855b2013d9a2d3b1d76c78c1b72d34620d214",
"body": "…ick (#828)\n\n```\nThe thinking preview showed only the last five lines, \nbut every animation redraw reprocessed the entire reasoning text; \nEssentially, the spinner forces a rerender 10 times a second. \nAs the response grew, rendering was blocked from input in the whole TUI. \nSame for expanded. Have \n[…]\nue above\n- [ ] Tests pass locally (`pnpm run test`)\n- [ ] Lint passes (`pnpm run check`)\n- [ ] Documentation updated if behavior changed\n\n---------\n\nCo-authored-by: tautvydasLiekis <tautvydas@cast.ai>",
"is_bot": false,
"headline": "fix(harness): renders on all thinking block for preview and spinner t…",
"author_name": "Tautvydas Liekis",
"author_login": "tautvydasLiekis",
"committed_at": "2026-07-13T06:35:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1010f45ac835f62d5e870001a006fc80a041a4fc",
"body": "## What does this PR do?\n\nThis PR adds multi-model tracking per session ID. This requires\nthreading sessionId and/or ctx (`ExtensionContext`) object to specific\nlocations + updated Pi patch to use a `sessionId -> flag` map.\n\nHaving per-session multi-model setting will allow us to expose the\nmulti-mo\n[…]\nior changed\n\n## Linked issue\n\nCloses #0\nLLM-2471\n\n<!-- Every PR must link to an existing issue. PRs without a linked issue\nwill not be reviewed.\n Use one of: Closes #N / Fixes #N / Resolves #N -->",
"is_bot": false,
"headline": "feat(multi-model): per-session multi model (#785)",
"author_name": "Vytautas",
"author_login": "vmizg",
"committed_at": "2026-07-10T17:00:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f96021810908f610110525a147331269d30bb92a",
"body": "…sed (#834)\n\n## Summary\n\nCrash recovery (commit `06e8e713`) explicitly pauses stale ferments on\nstartup and after provider errors. After that change, `resumeFerment()`\ncould send the model a 'RESUMING ... Pick up the work immediately' nudge\neven when the ferment remained in `PAUSED` state. This cont\n[…]\nd agree to the\nCLA\n- [x] This PR links to an open issue above\n- [x] Tests pass locally (`pnpm run test`)\n- [x] Lint passes (`pnpm run check`)\n- [x] Documentation updated if behavior changed\n\nCloses #0",
"is_bot": false,
"headline": "fix(ferment): do not send 'RESUMING' nudge while ferment is still pau…",
"author_name": "Krzysztof Reczek",
"author_login": "krzysztofreczek",
"committed_at": "2026-07-10T14:37:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0aa2c9cfe3af42a92979772794f81b481ccbd7ed",
"body": "Closes #N\n\n## Problem\n\nBash command timeouts were not being enforced. When a timeout fired, the\nbash process was killed, but the tool call **never returned** — it hung\nindefinitely until an external hard timeout (e.g. the benchmark runner)\nkilled the entire container.\n\n### Root cause\n\nThe bash tool'\n[…]\ne filed as an upstream PR against pi-mono. The fix is\nminimal and non-breaking — it only adds stream destruction after a\ntimeout kill, which only affects the error path (not normal command\nexecution).",
"is_bot": false,
"headline": "fix: enforce bash timeout by destroying stdio after kill (#833)",
"author_name": "Mike Norgate",
"author_login": "mikenorgate",
"committed_at": "2026-07-10T11:33:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "52078c73a7765dc931beebaca2e6af6efb32bd6f",
"body": "…a exit (#830)\n\n## Linked issue\n\nCloses #0\n\n<!-- Every PR must link to an existing issue. PRs without a linked issue\nwill not be reviewed.\n Use one of: Closes #N / Fixes #N / Resolves #N -->\n\n## What does this PR do?\n\nAdds a structured classifier for provider/gateway failures and uses it\nas the \n[…]\nTING.md) and agree to the\nCLA\n- [ ] This PR links to an open issue above\n- [x] Tests pass locally (`pnpm run test`)\n- [x] Lint passes (`pnpm run check`)\n- [x] Documentation updated if behavior changed",
"is_bot": false,
"headline": "fix(error-handling): classify LLM gateway failures for retry and infr…",
"author_name": "Mat",
"author_login": "pmateusz",
"committed_at": "2026-07-10T09:35:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f6ad14bec87761f493dcc8a6052f9d54f0bffce8",
"body": "## Linked issue\n\nCloses #0\n\n<!-- Every PR must link to an existing issue. PRs without a linked issue\nwill not be reviewed.\n Use one of: Closes #N / Fixes #N / Resolves #N -->\n\n## What does this PR do?\n\nMulti-model configuration is now managed by Kimchi roles. Drive the\nadapter's multi-model mode\n[…]\nTING.md) and agree to the\nCLA\n- [ ] This PR links to an open issue above\n- [x] Tests pass locally (`pnpm run test`)\n- [x] Lint passes (`pnpm run check`)\n- [x] Documentation updated if behavior changed",
"is_bot": false,
"headline": "fix(terminal-bench-2): select multi-model mode via model alias (#831)",
"author_name": "Mat",
"author_login": "pmateusz",
"committed_at": "2026-07-10T08:48:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1467271161dd7951d818deb20ee070bae30a9b52",
"body": "## What\n\nRewrites `ferment-progress-overlay.test.ts` to eliminate the flakiness\nand slowness identified in investigation, and adds a `beforeReady` hook\nto `runKimchiSession` to handle startup dialogs.\n\nVerified stable across **15 consecutive runs** locally (was failing\n4-8/10 before).\n\n## Root cause\n[…]\nptional\n`beforeReady` hook to `runKimchiSession`\n\n## Checklist\n\n- [x] Bug fix\n- [ ] New feature\n- [ ] Breaking change\n- [ ] Documentation update\n\n---------\n\nCo-authored-by: Kimchi <noreply@kimchi.dev>",
"is_bot": false,
"headline": "fix(e2e): stabilise ferment-progress-overlay TUI test (#829)",
"author_name": "Mike Norgate",
"author_login": "mikenorgate",
"committed_at": "2026-07-10T08:32:12Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "aa80a5b6bb700841cf65772f83629b9e009b9aa2",
"body": "## Summary\n\nAdd structured OTLP telemetry events for loop-guard warn and\nsubagent_abort, following the same domain-event → telemetry-subscription\npattern as the bash-tool-guard. This lets the backend track how often\nthe loop guard warns and aborts subagents.\n\n## Changes\n\n**New file: `src/extensions/\n[…]\nxisting patterns (bash-tool-guard precedent)\n- [x] Tests added covering new behavior + edge cases\n- [x] No raw user data in telemetry attrs (privacy stance)\n- [x] Typecheck passes\n- [x] All tests pass",
"is_bot": false,
"headline": "feat: add loop-guard OTLP telemetry events (#827)",
"author_name": "Mike Norgate",
"author_login": "mikenorgate",
"committed_at": "2026-07-09T13:45:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d098af11c96484cb08e79f10efb41c450e9cc730",
"body": "…de (#825)\n\n## Summary\n\nWhen the harness is in multi-model mode, the `Agent` tool now rejects\nexplicit `model` parameters that are not configured in the multi-model\nrole pool. The rejection message lists the allowed models and notes that\nomitting the `model` parameter falls back to the current sessi\n[…]\nfication\n\n- `pnpm run typecheck` — passed\n- `pnpm run lint` — passed\n- `pnpm run test src/extensions/orchestration/model-roles.test.ts\nsrc/extensions/agents/index.test.ts` — 64 tests passed\n\nCloses #0",
"is_bot": false,
"headline": "feat: restrict Agent tool models to multi-model role pool in multi-mo…",
"author_name": "Krzysztof Reczek",
"author_login": "krzysztofreczek",
"committed_at": "2026-07-09T10:59:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f95997254d60ad7d4756f4ee0750936a1af1fd0f",
"body": "…tended PII redaction, and request-timing diagnostics (#805)\n\n## Summary\n\nThis PR enriches exported session archives with sub-agent transcript\ncontent and per-request diagnostics, tightens secret/PII redaction for\npatterns not covered by upstream tooling, fixes a failing TUI e2e test,\nand ensures tr\n[…]\nort.test.ts`\n- TUI e2e suite: `pnpm run test:e2e:tui` exits 0.\n- Full suite: 6565 tests pass.\n\n## Checklist\n\n- [x] New feature\n- [x] Bug fix\n- [ ] Breaking change\n- [ ] Documentation update\n\nCloses #0",
"is_bot": false,
"headline": "feat(export): sub-agent transcript enrichment, tabbed HTML export, ex…",
"author_name": "Krzysztof Reczek",
"author_login": "krzysztofreczek",
"committed_at": "2026-07-09T10:28:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5ce1da5d5591125644cf5e8af67d72a3ea2eab58",
"body": "## Summary\n\nFixes four issues with the ferment progress bar:\n\n1. **Footer didn't show when there was an active ferment** — the ferment\nsegment was gated on the user's `pinned` list, and `ferment` is not in\n`DEFAULT_FOOTER_PINNED`. Now always renders when there's an active\nferment (matching the Scrip\n[…]\n- [x] State is persisted *after* the user's choice, not before.\n- [x] No hardcoded values that duplicate an existing constant.\n- [x] Correlation keys are stable IDs, not display text or array\nindices.",
"is_bot": false,
"headline": "fix: ferment progress bar visibility and live updates (#821)",
"author_name": "Mike Norgate",
"author_login": "mikenorgate",
"committed_at": "2026-07-09T09:44:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ebdc01d2c2730308355f768121c301f1b8f1579d",
"body": "… a session (#736)\n\n## Bug: Teleport sometimes fails with a operation aborted error when\ncreating a session\n\nCloses #2297\n\n## What does this PR do?\n\nGive createSession a longer per-call timeout\n\nTeleport on large repos failed with\n\"Could not create session: The operation was aborted\" even though the\n[…]\nopen issue above\n- [x] Tests pass locally (`pnpm run test`)\n- [x] Lint passes (`pnpm run check`)\n- [x] Documentation updated if behavior changed\n\n---------\n\nCo-authored-by: Kimchi <noreply@kimchi.dev>",
"is_bot": false,
"headline": "Teleport sometimes fails with a operation aborted error when creating…",
"author_name": "Linas N.",
"author_login": "soundvibe",
"committed_at": "2026-07-09T06:24:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "65438813c17c0bae7dd86fb7c7169d7768a3d885",
"body": "## Summary\n\nNew users get thinking blocks hidden by default — a cleaner,\ncollapsed-thinking UI out of the box.\n\nThis also applies when `settings.json` already exists but never had the\nsetting (e.g. partial configs from tests or older installs). Previously\nthose sessions could still show expanded thi\n[…]\ndeThinkingBlock: false` in settings — thinking\nvisible/dimmed again\n\nCloses #0\n\n---------\n\nCo-authored-by: Vytautas Mizgiris <vytautas.mizgiris@cast.ai>\nCo-authored-by: Cursor <cursoragent@cursor.com>",
"is_bot": false,
"headline": "feat: default hideThinkingBlock to true (#807)",
"author_name": "Krzysztof Reczek",
"author_login": "krzysztofreczek",
"committed_at": "2026-07-09T05:21:20Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c2068025e70cd8b1e6474cd376e9428bc6e67e37",
"body": "## Linked issue\n\nCloses #0\n\n## What does this PR do?\n\n - Upgrade harbor to 0.18 - adopt the new error handling API\n- Add infra circuit breaker - `KIMCHI_INFRA_BREAKER_THRESHOLD` (default\n3) caps consecutive kimchi failures per trial before aborting;\nKimchiExitError captures command, exit code, and t\n[…]\nTING.md) and agree to the\nCLA\n- [ ] This PR links to an open issue above\n- [x] Tests pass locally (`pnpm run test`)\n- [x] Lint passes (`pnpm run check`)\n- [x] Documentation updated if behavior changed",
"is_bot": false,
"headline": "feat: Install infra circuit breaker in benchmarks (#822)",
"author_name": "Mat",
"author_login": "pmateusz",
"committed_at": "2026-07-08T16:21:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "370c1f2397be401ee3fc6cfd0de66900d703a351",
"body": "## Summary\n\nChanges the default for PII/secret redaction from **enabled** to\n**disabled**.\n\nUsers who want redaction can opt in via:\n- `KIMCHI_REDACTION_ENABLED=1` env var\n- `config.json { \"redaction\": { \"enabled\": true } }`\n\n## Changes\n\n- `src/extensions/pii-redaction/config.ts` — default fallback \n[…]\nxit.test.ts` — updated stale comment\nabout redaction being on by default\n\n## Checklist\n\n- [x] Bug fix / new feature (select one)\n- [ ] Breaking change\n- [ ] Documentation update\n\nLabels: `new feature`",
"is_bot": false,
"headline": "feat: change default redaction setting to disabled (#820)",
"author_name": "Mike Norgate",
"author_login": "mikenorgate",
"committed_at": "2026-07-08T14:42:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f11f75b66f4b800cea8862be7a37c3a3c5925d61",
"body": "## Linked issue\n\nCloses #750 \n\n<!-- Every PR must link to an existing issue. PRs without a linked issue\nwill not be reviewed.\n Use one of: Closes #N / Fixes #N / Resolves #N -->\n\n## What does this PR do?\n\nThis updates the questionnaire tool description to clarify that\nmulti-question forms are fl\n[…]\ne above\n- [x] Tests pass locally (`pnpm run test`)\n- [x] Lint passes (`pnpm run check`)\n- [x] Documentation updated if behavior changed\n\n---------\n\nCo-authored-by: Vytautas <vytautas.mizgiris@cast.ai>",
"is_bot": false,
"headline": "fix(questionnaire): clarify conditional follow-up behavior (#790)",
"author_name": "Mat",
"author_login": "pmateusz",
"committed_at": "2026-07-08T14:27:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "28bf4f75163a7f980f478952f7ad0538d5a9dfbf",
"body": "## Linked issue\n\nCloses #814\n\n<!-- Every PR must link to an existing issue. PRs without a linked issue\nwill not be reviewed.\n Use one of: Closes #N / Fixes #N / Resolves #N -->\n\n## What does this PR do?\n\nApply the Kimchi provider baseUrl at session_start using the session\ncwd, so project-level l\n[…]\nTING.md) and agree to the\nCLA\n- [x] This PR links to an open issue above\n- [x] Tests pass locally (`pnpm run test`)\n- [x] Lint passes (`pnpm run check`)\n- [x] Documentation updated if behavior changed",
"is_bot": false,
"headline": "fix: honor project llmEndpoint for chat routing (#817)",
"author_name": "Mat",
"author_login": "pmateusz",
"committed_at": "2026-07-08T13:03:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d5183c3fc5a97a7ec2442500f6b0871a30a5aa0b",
"body": "## Summary\n\nWhen a project has an LSP marker file (`go.mod`, `tsconfig.json`,\n`package.json`) but the corresponding language server binary is not on\nPATH, LSP support silently no-op'd — no status bar segment, no warning,\nand the agent was still told to prefer `lsp_*` tools that would fail.\nThis PR m\n[…]\nking change\n- [ ] Documentation update\n- [x] Tests added/updated\n- [x] `pnpm run typecheck` passes\n- [x] `pnpm run lint` passes\n- [x] `pnpm exec vitest run src/extensions/lsp.test.ts` passes (521/521)",
"is_bot": false,
"headline": "feat(lsp): surface degraded state when LSP binary is missing (#810)",
"author_name": "Mike Norgate",
"author_login": "mikenorgate",
"committed_at": "2026-07-08T10:34:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0dc701d73f2374a995ab410d794b99196c3df89d",
"body": "## Summary\n\nIn one-shot mode, the ferment was being paused when the LLM returned an\nerror () or when the session shut down. This is wrong because there is\nno user to run `/ferment resume` — the ferment stays stuck in `paused`\npermanently.\n\nBenchmark data from terminal-bench-2-1 showed **29 of 93 one\n[…]\ntdown` → ferment pauses (existing behavior\npreserved)\n\n## Checklist\n\n- [x] Bug fix\n- [ ] New feature\n- [ ] Breaking change\n- [ ] Documentation update\n\nCo-Authored-By: Kimchi <[REDACTED-EMAIL_ADDRESS]>",
"is_bot": false,
"headline": "fix: don't pause one-shot ferment on LLM error or shutdown (#816)",
"author_name": "Mike Norgate",
"author_login": "mikenorgate",
"committed_at": "2026-07-08T10:34:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "652bd831dd3ec0b94729a926aad6e01dba39a118",
"body": "… error classification (#813)\n\n## Linked issue\n\nCloses #0\n\n<!-- Every PR must link to an existing issue. PRs without a linked issue\nwill not be reviewed.\n Use one of: Closes #N / Fixes #N / Resolves #N -->\n\n## What does this PR do?\n\n- Classify provider transport failures (gateway 500/502/503/529\n[…]\nTING.md) and agree to the\nCLA\n- [x] This PR links to an open issue above\n- [x] Tests pass locally (`pnpm run test`)\n- [x] Lint passes (`pnpm run check`)\n- [x] Documentation updated if behavior changed",
"is_bot": false,
"headline": "fix(provider-retry-policy): transport error circuit breaker and infra…",
"author_name": "Mat",
"author_login": "pmateusz",
"committed_at": "2026-07-08T10:31:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "962738bb34dad89a4eb0ce10e2a35da5294de1a4",
"body": null,
"is_bot": false,
"headline": "fix: restore windows install script (#815)",
"author_name": "Mike Norgate",
"author_login": "mikenorgate",
"committed_at": "2026-07-08T08:33:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b160a52abb46032d63cbec5fbe7de1e7582ff171",
"body": "Co-authored-by: Kimchi <noreply@kimchi.dev>",
"is_bot": false,
"headline": "feat: secure API key storage and prompt PII redaction (#800)",
"author_name": "Mike Norgate",
"author_login": "mikenorgate",
"committed_at": "2026-07-07T15:31:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "46ecffedb05850e6ed04d87af24f9ee3c55a787e",
"body": "updated the Remote Sessions description\n\n## Linked issue\n\nCloses #\n\n<!-- Every PR must link to an existing issue. PRs without a linked issue\nwill not be reviewed.\n Use one of: Closes #N / Fixes #N / Resolves #N -->\n\n## What does this PR do?\n\n<!-- Brief description of the change and why it's need\n[…]\nTING.md) and agree to the\nCLA\n- [ ] This PR links to an open issue above\n- [ ] Tests pass locally (`pnpm run test`)\n- [ ] Lint passes (`pnpm run check`)\n- [ ] Documentation updated if behavior changed",
"is_bot": false,
"headline": "Update README.md (#806)",
"author_name": "roman-commits-code",
"author_login": "roman-commits-code",
"committed_at": "2026-07-07T12:00:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f7a5f216be497d4c540db41a622956eeb45a2bbc",
"body": "…re (#779)\n\n## Linked issue\n\nCloses #\n\n<!-- Every PR must link to an existing issue. PRs without a linked issue\nwill not be reviewed.\n Use one of: Closes #N / Fixes #N / Resolves #N -->\n\n## What does this PR do?\n\nMakes the cooking animation logic simpler and more robust.\nQuestionnaire hides the \n[…]\nTING.md) and agree to the\nCLA\n- [ ] This PR links to an open issue above\n- [ ] Tests pass locally (`pnpm run test`)\n- [ ] Lint passes (`pnpm run check`)\n- [ ] Documentation updated if behavior changed",
"is_bot": false,
"headline": "fix: simplify cooking animation lifecycle and hide during questionnai…",
"author_name": "Ihor Shchupliak",
"author_login": "kodburn",
"committed_at": "2026-07-07T10:52:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f27c6997919f1fab7b986fb618d4e7b210699cd0",
"body": "…ce (#799)\n\n## Summary\n\nFixes #798\n\nA race condition in the agents extension caused intermittent crashes\nwhen background agents completed during `session_shutdown`. The nudge\ntimer system could schedule new timers after the shutdown handler had\ncleared existing ones, and those timers would fire with\n[…]\nunrelated and present on master\n\n## Checklist\n\n- [x] Bug fix\n- [x] Tests added (regression tests for the exact crash scenario)\n- [x] Code follows existing patterns (isStaleCtxError guard from\ncurator)",
"is_bot": false,
"headline": "fix(agents): prevent stale-ctx crash during session shutdown nudge ra…",
"author_name": "josemonteiro",
"author_login": "josemonteiro",
"committed_at": "2026-07-06T15:27:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b40109a93fd123c2a26fc58332e502cd99515834",
"body": "## Linked issue\n\nCloses #\n\n<!-- Every PR must link to an existing issue. PRs without a linked issue\nwill not be reviewed.\n Use one of: Closes #N / Fixes #N / Resolves #N -->\n\n## What does this PR do?\n\nUpgrade @earendil-works/pi-coding-agent, pi-ai, and pi-tui from 0.78.1\nto 0.79.10 — the last st\n[…]\nTING.md) and agree to the\nCLA\n- [ ] This PR links to an open issue above\n- [ ] Tests pass locally (`pnpm run test`)\n- [ ] Lint passes (`pnpm run check`)\n- [ ] Documentation updated if behavior changed",
"is_bot": false,
"headline": "chore(deps): upgrade pi-mono to 0.79.10 (#782)",
"author_name": "Mat",
"author_login": "pmateusz",
"committed_at": "2026-07-06T12:33:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1090e39a8a3a814f2442a93577d77e99af93dcd8",
"body": "## Linked issue\n\nCloses #797\n\n<!-- Every PR must link to an existing issue. PRs without a linked issue\nwill not be reviewed.\n Use one of: Closes #N / Fixes #N / Resolves #N -->\n\n## What does this PR do?\n\nAllows users to install an exact Kimchi release (or release candidate)\nby passing a version \n[…]\nTING.md) and agree to the\nCLA\n- [x] This PR links to an open issue above\n- [x] Tests pass locally (`pnpm run test`)\n- [x] Lint passes (`pnpm run check`)\n- [x] Documentation updated if behavior changed",
"is_bot": false,
"headline": "feat(update): support installing a specific kimchi release (#793)",
"author_name": "Mat",
"author_login": "pmateusz",
"committed_at": "2026-07-06T12:29:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "06e8e71392001219a0bd79d6ca6010dc7c9ddb50",
"body": "…796)\n\nThree changes that close gaps where socket/provider/gateway failures\nduring a ferment run could leave unclear state or send the planner back\ninto a broken turn:\n## Added in this PR\n- **Provider stream disconnect or socket closes during a planner turn**\n— `turn_end` with `stopReason: \"error\"` \n[…]\nopen issue above\n- [ ] Tests pass locally (`pnpm run test`)\n- [ ] Lint passes (`pnpm run check`)\n- [ ] Documentation updated if behavior changed\n\n---------\n\nCo-authored-by: Kimchi <noreply@kimchi.dev>",
"is_bot": false,
"headline": "feat(ferment): handle connection errors and improve crash recovery (#…",
"author_name": "Ihor Shchupliak",
"author_login": "kodburn",
"committed_at": "2026-07-06T10:58:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e2c9b825ac711fc405cc0b3c621938f3853a61fc",
"body": "## Summary\n\nFix the `assertActive()` stale-extension-context crash during the\n`--ferment-oneshot` planning→worker transition.\n\n### Root cause\n\nThe ferment extension captures `pi` references in event handlers and\ndeferred callbacks (e.g. `turn_end` → `scheduleNextFermentAction` →\n`void pi.sendMessage\n[…]\no new third-party dependencies\n- ✅ Fix lives entirely in `src/extensions/` — no patches/ changes needed\n\n### Checklist\n\n- [x] Bug fix\n- [ ] New feature\n- [ ] Breaking change\n- [ ] Documentation update",
"is_bot": false,
"headline": "fix: guard stale-ctx crash in ferment oneshot transition (#789)",
"author_name": "Mike Norgate",
"author_login": "mikenorgate",
"committed_at": "2026-07-03T15:11:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "20bbee93154a2a3aa6c6377bd5ba974bef3f997a",
"body": "## Linked issue\n\nCloses #\n\n<!-- Every PR must link to an existing issue. PRs without a linked issue\nwill not be reviewed.\n Use one of: Closes #N / Fixes #N / Resolves #N -->\n\n## What does this PR do?\n\nCtrl+B: Detach a running foreground agent to background\nLets you press Ctrl+B while a foregroun\n[…]\nTING.md) and agree to the\nCLA\n- [ ] This PR links to an open issue above\n- [ ] Tests pass locally (`pnpm run test`)\n- [ ] Lint passes (`pnpm run check`)\n- [ ] Documentation updated if behavior changed",
"is_bot": false,
"headline": "feat: ctrl+b runs agents in a background (#770)",
"author_name": "Ihor Shchupliak",
"author_login": "kodburn",
"committed_at": "2026-07-03T15:08:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fd57b7249fceacf742f6ed8a805b44fc02d19b7f",
"body": "## Linked issue\n\nCloses #\n\n<!-- Every PR must link to an existing issue. PRs without a linked issue\nwill not be reviewed.\n Use one of: Closes #N / Fixes #N / Resolves #N -->\n\n## What does this PR do?\n\n\nFixes a bug where hitting Esc/Ctrl+C in a ferment session failed to stop\nthe agent loop: the r\n[…]\nTING.md) and agree to the\nCLA\n- [ ] This PR links to an open issue above\n- [ ] Tests pass locally (`pnpm run test`)\n- [ ] Lint passes (`pnpm run check`)\n- [ ] Documentation updated if behavior changed",
"is_bot": false,
"headline": "fix(ferment): pause ferment and suppress nudges on user abort (#777)",
"author_name": "Ihor Shchupliak",
"author_login": "kodburn",
"committed_at": "2026-07-03T14:45:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2f8d8405bbafb5fd4dd3c8131151677e2f993ab0",
"body": "## Linked issue\n\nCloses #0\n\n<!-- Every PR must link to an existing issue. PRs without a linked issue\nwill not be reviewed.\n Use one of: Closes #N / Fixes #N / Resolves #N -->\n\n## What does this PR do?\n\nSession title changes were never propagated to ACP clients due to a\nmissing session event hand\n[…]\nTING.md) and agree to the\nCLA\n- [ ] This PR links to an open issue above\n- [x] Tests pass locally (`pnpm run test`)\n- [x] Lint passes (`pnpm run check`)\n- [ ] Documentation updated if behavior changed",
"is_bot": false,
"headline": "feat(acp): emit session_info_update when session title changes (#791)",
"author_name": "Vytautas",
"author_login": "vmizg",
"committed_at": "2026-07-03T13:53:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "beb04009fdcbd536b0013612d7c8b78c303e67aa",
"body": "…ut (#787)\n\n## Summary\n\nSubagent budgets (`max_duration`, `token_budget`) were advisory, not\nhard-enforced — a subagent running a blocking bash command (e.g. `sleep\n3600`) would hang past its `max_duration` because `session.abort()` does\nnot kill in-flight bash processes. Similarly, `token_budget` w\n[…]\nfic failure (`workflow.test.ts` expects `amd64` on an\narm64 Mac, unrelated to this PR)\n\n## PR checklist\n\n- [x] Bug fix — label: `bug`\n- [ ] New feature\n- [ ] Breaking change\n- [ ] Documentation update",
"is_bot": false,
"headline": "fix: hard-enforce subagent max_duration, token_budget, and bash timeo…",
"author_name": "Mike Norgate",
"author_login": "mikenorgate",
"committed_at": "2026-07-03T13:02:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3db48d8b0cf9449336b2a96284ada90b34b92265",
"body": "## Linked issue\n\nCloses #\n\n<!-- Every PR must link to an existing issue. PRs without a linked issue\nwill not be reviewed.\n Use one of: Closes #N / Fixes #N / Resolves #N -->\n\n## What does this PR do?\n\nAdd support for running the release pipeline in dry-run mode. This makes\nit easier to debug rel\n[…]\nTING.md) and agree to the\nCLA\n- [x] This PR links to an open issue above\n- [x] Tests pass locally (`pnpm run test`)\n- [x] Lint passes (`pnpm run check`)\n- [x] Documentation updated if behavior changed",
"is_bot": false,
"headline": "feat(release): add dry-run workflow dispatch (#788)",
"author_name": "Mat",
"author_login": "pmateusz",
"committed_at": "2026-07-03T13:00:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a151af6b3d68a165f543067dfb52c2e34344ab4f",
"body": "## Linked issue\n\nCloses #\n\n<!-- Every PR must link to an existing issue. PRs without a linked issue\nwill not be reviewed.\n Use one of: Closes #N / Fixes #N / Resolves #N -->\n\n## What does this PR do?\n\nThis PR refactor the classifier model selection to deterministically set\nthe primary and fallba\n[…]\nTING.md) and agree to the\nCLA\n- [ ] This PR links to an open issue above\n- [ ] Tests pass locally (`pnpm run test`)\n- [ ] Lint passes (`pnpm run check`)\n- [ ] Documentation updated if behavior changed",
"is_bot": false,
"headline": "refactor(classifier): explicitly set primary and fallback models (#784)",
"author_name": "Ihor Shchupliak",
"author_login": "kodburn",
"committed_at": "2026-07-03T12:41:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4941ac53c98d0a417a32e807da04a6678d484715",
"body": "…ed (#778)\n\n## Linked issue\n\nCloses #\n\n<!-- Every PR must link to an existing issue. PRs without a linked issue\nwill not be reviewed.\n Use one of: Closes #N / Fixes #N / Resolves #N -->\n\n## What does this PR do?\n\nCurrently the orchestrator refuses to delegate to agents with different\nmodels even\n[…]\nTING.md) and agree to the\nCLA\n- [ ] This PR links to an open issue above\n- [ ] Tests pass locally (`pnpm run test`)\n- [ ] Lint passes (`pnpm run check`)\n- [ ] Documentation updated if behavior changed",
"is_bot": false,
"headline": "fix(single-model): orchestrator does not spawn agents unless instruct…",
"author_name": "Ihor Shchupliak",
"author_login": "kodburn",
"committed_at": "2026-07-03T12:40:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b3b23756b8cd83d8bc715ba4b94449512fc58c60",
"body": "## Linked issue\n\nCloses #\n\n<!-- Every PR must link to an existing issue. PRs without a linked issue\nwill not be reviewed.\n Use one of: Closes #N / Fixes #N / Resolves #N -->\n\n## What does this PR do?\n\nSkill tool should be read only\n## Checklist\n\n- [ ] I have read [CONTRIBUTING.md](../CONTRIBUTING.md) and agree to the\nCLA\n- [ ] This PR links to an open issue above\n- [ ] Tests pass locally (`pnpm run test`)\n- [ ] Lint passes (`pnpm run check`)\n- [ ] Documentation updated if behavior changed",
"is_bot": false,
"headline": "fix: set 'skill' tool as read only (#786)",
"author_name": "Ihor Shchupliak",
"author_login": "kodburn",
"committed_at": "2026-07-03T12:39:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "654af79bd7dfac16dc057ecffda798004ff0d044",
"body": "## Summary\n\nIn single-model mode, the ferment planner forced the orchestrator to\ndelegate **every** implementation step to a subagent — even trivial\nfixes. This caused abort-and-redelegate cycles that wasted wall-clock: 4\nof 11 timeouts in terminal-bench-2-1 were caused by 10-20 Agent calls\nper tria\n[…]\nfy commands\n- In strict mode, the orchestrator still prefers delegation\n- `submit_agent_report` requirement for subagents is unchanged\n- Verification commands and gate verdicts are unchanged\n\nLLM-2414",
"is_bot": false,
"headline": "feat: relax ferment delegation mandate for single-model mode (#774)",
"author_name": "Mike Norgate",
"author_login": "mikenorgate",
"committed_at": "2026-07-03T11:54:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5772f1c441ec3b3d944ea1cd1c4dbd1e9dc33bec",
"body": "## What does this PR do?\n\n`shouldSuppressHiddenNudge` unconditionally suppressed the reactive\ncontinuation nudge for `action.kind === \"scope\"`. In one-shot/automated\nmode this silently dropped the nudge after a text-only stop during draft\nscoping, ending the session instead of driving a follow-up tu\n[…]\nns\n\n## Checklist\n\n- [x] I have read CONTRIBUTING.md and agree to the CLA\n- [x] Tests pass locally (`pnpm run test`)\n- [x] Lint passes (`pnpm run check`)\n- [x] Documentation updated if behavior changed",
"is_bot": false,
"headline": "fix(ferment): gate scope-nudge suppression on continuation policy (#776)",
"author_name": "Mike Norgate",
"author_login": "mikenorgate",
"committed_at": "2026-07-03T10:12:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c3417d0e0960cac1ac894543e00b066af466411c",
"body": "…n ctx (#781)\n\n## Linked issue\n\nCloses #783\n\n## What does this PR do?\n\nFixes a process crash caused by an unguarded `ctx.isIdle()` call in the\n`prompt-summary` extension's `trySend` polling loop\n(`src/extensions/prompt-summary.ts`).\n\n### The crash path\n\n1. `agent_end` fires → the `prompt-summary` ha\n[…]\ntypecheck failures on master (`mode` property\nmissing from `ExtensionContext`/`ExtensionBindings` in `acp/` and\n`resources/` files) are unrelated to this change — confirmed by stashing\nand re-running.",
"is_bot": false,
"headline": "fix: guard prompt-summary trySend polling loop against stale extensio…",
"author_name": "josemonteiro",
"author_login": "josemonteiro",
"committed_at": "2026-07-03T09:54:12Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d25eeaf6f73290728ae26009ac91ad04a1072465",
"body": "…xt (#773)\n\n## Linked issue\n\nCloses #0\n\n<!-- Every PR must link to an existing issue. PRs without a linked issue\nwill not be reviewed.\n Use one of: Closes #N / Fixes #N / Resolves #N -->\n\n## What does this PR do?\n\nWe had previously mocked the theme object to return undefined values for\nany acces\n[…]\nTING.md) and agree to the\nCLA\n- [ ] This PR links to an open issue above\n- [x] Tests pass locally (`pnpm run test`)\n- [x] Lint passes (`pnpm run check`)\n- [ ] Documentation updated if behavior changed",
"is_bot": false,
"headline": "fix(acp): themed text should return the original text in acp ui conte…",
"author_name": "Vytautas",
"author_login": "vmizg",
"committed_at": "2026-07-03T07:30:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "103571314573ec462b02037c0315d5fb691aa486",
"body": "…tive ferment session (#658)\n\n## Linked issue\n\nCloses #769\n\n<!-- Every PR must link to an existing issue. PRs without a linked issue\nwill not be reviewed.\n Use one of: Closes #N / Fixes #N / Resolves #N -->\n\n## What does this PR do?\n\nInternal benchmarks showed that standard non-Ferment orchestra\n[…]\nTING.md) and agree to the\nCLA\n- [x] This PR links to an open issue above\n- [x] Tests pass locally (`pnpm run test`)\n- [x] Lint passes (`pnpm run check`)\n- [x] Documentation updated if behavior changed",
"is_bot": false,
"headline": "fix: Ferment tools are called in single/multi mode runs outside of ac…",
"author_name": "Mat",
"author_login": "pmateusz",
"committed_at": "2026-07-02T14:21:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ddeb57a739429c25d9b2e19414249e8e258dcc79",
"body": "…forget events (#771)\n\n## What does this PR do?\n\n<!-- Brief description of the change and why it's needed. -->\n\n- Dropped three redundant ACP capabilities (`pi_setStatus`,\n`pi_setWidget`, `pi_set_editor_text`) and the per-method\n`supportsMethod` / `warnUnsupportedMethod` guards around them.\n- `creat\n[…]\nTING.md) and agree to the\nCLA\n- [ ] This PR links to an open issue above\n- [x] Tests pass locally (`pnpm run test`)\n- [x] Lint passes (`pnpm run check`)\n- [ ] Documentation updated if behavior changed",
"is_bot": false,
"headline": "refactor: use _kimchi.dev/pi_notify acp notification on all fire-and-…",
"author_name": "Vytautas",
"author_login": "vmizg",
"committed_at": "2026-07-02T11:43:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9bc18322694ded12e0f435b4fff8e8f0869b87ed",
"body": "…e process alive after session end (#765)\n\n## Linked issue\n\nCloses #766\n\n## What does this PR do?\n\nFixes process-lifetime leaks that could keep `--ferment-oneshot` runs\nalive after the agent had already completed and emitted `agent_end`.\n\nThe PR now covers three cleanup paths:\n\n- Marks Kimchi file w\n[…]\nTING.md) and agree to the\nCLA\n- [x] This PR links to an open issue above\n- [x] Tests pass locally (`pnpm run test`)\n- [x] Lint passes (`pnpm run check`)\n- [x] Documentation updated if behavior changed",
"is_bot": false,
"headline": "fix(one-shot-ferment-hangs): prevent fs.watch handles from keeping th…",
"author_name": "Mat",
"author_login": "pmateusz",
"committed_at": "2026-07-01T17:07:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9655a93b57cee2e63c98e7c23a9e59a1e7815a10",
"body": "…nt (#767)\n\n## Summary\n\nReplaces `llm.cast.ai` reference with `llm.kimchi.dev` to ensure\nconsistent endpoint usage across the codebase.\n\n## Changes\n\n- `src/config.ts`: Changed default LLM endpoint from\n`https://llm.cast.ai/openai/v1` to `https://llm.kimchi.dev/openai/v1`\n- `src/config.ts`: Renamed c\n[…]\nist\n\n- [x] Code changes\n- [ ] Tests added/updated (no test asserts the default endpoint value;\nexisting tests use custom endpoints)\n- [x] Lint passes\n- [x] Type check passes (no new errors introduced)",
"is_bot": false,
"headline": "fix: use llm.kimchi.dev instead of llm.cast.ai for default LLM endpoi…",
"author_name": "josemonteiro",
"author_login": "josemonteiro",
"committed_at": "2026-07-01T16:14:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "42a8df1b914cc2206abba22b021250ba4fa777fa",
"body": "…g mode",
"is_bot": false,
"headline": "fix: make MCP gateway and read-only direct tools available in plannin…",
"author_name": "Mike Norgate",
"author_login": "mikenorgate",
"committed_at": "2026-07-01T15:11:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f554f01e3d47bb0c11dabc03e3b4521f72128413",
"body": "## Linked issue\n\nCloses #\n\n<!-- Every PR must link to an existing issue. PRs without a linked issue\nwill not be reviewed.\n Use one of: Closes #N / Fixes #N / Resolves #N -->\n\n## What does this PR do?\n\n<!-- Brief description of the change and why it's needed. -->\n\n## Checklist\n\n- [ ] I have read \n[…]\nTING.md) and agree to the\nCLA\n- [ ] This PR links to an open issue above\n- [ ] Tests pass locally (`pnpm run test`)\n- [ ] Lint passes (`pnpm run check`)\n- [ ] Documentation updated if behavior changed",
"is_bot": false,
"headline": "fix: add exponential backoff for claude code retryable errors (#759)",
"author_name": "kamilcast",
"author_login": "kamilcast",
"committed_at": "2026-07-01T13:28:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d0f96334e168b02b53b80d566d66cfd4aa683870",
"body": "## Summary\n\nAfter `propose_ferment_scoping` returns \"Plan ready for review\", the\nferment extension suppresses ALL tools via `pi.setActiveTools([])` to\nforce the turn to end so the review dialog can appear. The todos\nextension was unaware of this — it kept sending `reconcile_todos`\nfollow-up messages\n[…]\non\n- `pnpm run check` (lint + typecheck): pass\n- `pnpm vitest run src/extensions/todos/index.test.ts`: 17 tests pass\n(15 existing + 2 new regression tests)\n\nCo-Authored-By: Kimchi <noreply@kimchi.dev>",
"is_bot": false,
"headline": "fix: skip todo reconciliation when todo tools are unavailable (#760)",
"author_name": "Mike Norgate",
"author_login": "mikenorgate",
"committed_at": "2026-07-01T13:20:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "28d8de1378c17f37b911f4634708ab12746cf192",
"body": "## Problem\n\nAfter `propose_ferment_scoping` set a `pendingPlanReview` and the\n`agent_end` handler presented the plan review dialog to the user,\ndismissing the dialog (Esc) or providing feedback (\"Let me say\nsomething\") did **not** clear the `pendingPlanReview` from the in-memory\nmap. On the next `ag\n[…]\nappear after feedback\"` — provides\nfeedback, waits for model response, asserts dialog does NOT re-appear\n\n## Checklist\n\n- [x] Bug fix\n- [ ] New feature\n- [ ] Breaking change\n- [ ] Documentation update",
"is_bot": false,
"headline": "fix(ferment): clear pendingPlanReview on dismiss/feedback (#720)",
"author_name": "Mike Norgate",
"author_login": "mikenorgate",
"committed_at": "2026-07-01T12:43:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2c393c13ca670ee95f1193557ba3b93a43178177",
"body": "## Problem\n\nAfter `propose_ferment_scoping` returns \"Plan ready for review\", the\nmodel continued calling tools instead of ending its turn. This prevented\nthe `agent_end` event from firing, so the review dialog never appeared —\nthe ferment stayed stuck in draft.\n\n## Fix\n\nSuppress all tools via `pi.se\n[…]\n` passes (6 pre-existing failures in\nmodel-guard/permissions, unchanged from baseline)\n- [x] `pnpm run test:e2e:tui` passes (37 tests, all pass)\n\n---------\n\nCo-authored-by: Kimchi <noreply@kimchi.dev>",
"is_bot": false,
"headline": "fix: suppress tools after plan review to force turn end (#715)",
"author_name": "Mike Norgate",
"author_login": "mikenorgate",
"committed_at": "2026-07-01T12:27:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "95ca5129d26c36bd279aa8ea76c856fa7ce5b011",
"body": "## Summary\n\nCapture MCP `ToolAnnotations` end-to-end and enforce a hard read-only\nfilter so that only read-only MCP tools are callable during planning\n(scoping) profiles, while the implementation profile keeps full MCP\naccess.\n\n## Changes\n\n### Phase 1 — Types & metadata propagation\n- Added `annotati\n[…]\nt` — 6080 passed (6 pre-existing failures in\nmodel-guard/permissions confirmed via `git stash` on clean tree)\n\n## Checklist\n- [x] Bug fix / new feature\n- [ ] Breaking change\n- [ ] Documentation update",
"is_bot": false,
"headline": "feat: enforce read-only MCP tools in planning profiles (#718)",
"author_name": "Mike Norgate",
"author_login": "mikenorgate",
"committed_at": "2026-07-01T10:50:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "23ec7afbff34a002b6db87c54fc50f8d1c62fa61",
"body": "…coping (#711)\n\n## Problem\n\nAfter calling `propose_ferment_scoping`, the agent was telling users\nabout its internal tool availability (e.g. \"this session has no\nedit/write/bash tools\") and instructing them to resume in a different\nsession. The host already manages all tool transitions automatically \n[…]\nls on pre-existing errors in unrelated\nfiles (`src/cli.ts`, `orphan-tool-result-sanitizer.ts`,\n`orphan-tool-result-repair.ts`). Committed with `--no-verify` since\nthose are not related to this change.",
"is_bot": false,
"headline": "fix(ferment): prevent agent from discussing tool availability after s…",
"author_name": "Mike Norgate",
"author_login": "mikenorgate",
"committed_at": "2026-07-01T10:50:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5b357e785062553cb7d17aaf79848f7adfa98314",
"body": "…Defender quarantine (#757)\n\nBitDefender immediately quarantined install.ps1 due to the\nInvoke-DownloadFile function being flagged. Replace it with an\nequivalent download approach that does not trigger the false positive.\n\n## Linked issue\n\nCloses #758\n\n<!-- Every PR must link to an existing issue. P\n[…]\nTING.md) and agree to the\nCLA\n- [x] This PR links to an open issue above\n- [x] Tests pass locally (`pnpm run test`)\n- [x] Lint passes (`pnpm run check`)\n- [x] Documentation updated if behavior changed",
"is_bot": false,
"headline": "fix(windows-install-script): replace Invoke-DownloadFile to avoid Bit…",
"author_name": "Mat",
"author_login": "pmateusz",
"committed_at": "2026-07-01T10:46:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3b5fbf1a352ac9a3bee5ded6b4b1097de6dcb734",
"body": "## Summary\n\nThe ferment agent-spawn-guard deadlocked the orchestrator out of\nspawning workers for any step that wasn't the last in its phase.\n\nAfter `start_ferment_step(step-1)`, the engine immediately\nforward-suggests `start_step(step-2)` (engine branch 9 fires before\nbranch 10's `complete_step`; c\n[…]\n the all-pending block case\n- [x] `pnpm run typecheck` clean\n- [x] `pnpm run lint` clean\n- [x] `pnpm vitest run src/extensions/ferment/agent-spawn-guard.test.ts\nsrc/ferment/engine.test.ts` — 38 passed",
"is_bot": false,
"headline": "fix(ferment): allow Agent spawn when a step is running (#719)",
"author_name": "Mike Norgate",
"author_login": "mikenorgate",
"committed_at": "2026-07-01T10:34:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b363e82267d4c2c11298c91a71ff0abeeb40382c",
"body": "…orts (#755)\n\n## Summary\n\nSurfaces host/OS info, launch-time config snapshot (including multimodel\nconfig), and in-session config changes in the local JSONL and HTML\nsession exports, making them visible from `/export`.\n\nIntroduces commit ff21cd55's metadata into export — previously captured\nbut not \n[…]\nd to this work\n\n## Checklist\n\n- [x] Bug fix / new feature: `new feature`\n- [ ] Breaking change\n- [ ] Documentation update\n- [x] Tests added/updated\n- [x] No new dependencies\n- [x] No PII surface added",
"is_bot": false,
"headline": "feat(export): surface host/OS info and config metadata in session exp…",
"author_name": "Mike Norgate",
"author_login": "mikenorgate",
"committed_at": "2026-07-01T10:34:15Z",
"body_truncated": true,
"is_coding_agent": false
}
],
"releases_count": 100,
"commits_last_year": 693,
"latest_release_at": "2026-07-24T15:18:00Z",
"latest_release_tag": "canary",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 16,
"days_since_latest_release": 2,
"mean_days_between_releases": 1.1
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 100,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"ecosystem": {
"packages": []
},
"popularity": {
"forks": 122,
"stars": 2149,
"watchers": 4,
"fork_history": {
"days": [
{
"date": "2026-05-12",
"count": 1
},
{
"date": "2026-05-15",
"count": 1
},
{
"date": "2026-05-16",
"count": 3
},
{
"date": "2026-05-22",
"count": 3
},
{
"date": "2026-05-27",
"count": 1
},
{
"date": "2026-05-28",
"count": 1
},
{
"date": "2026-05-29",
"count": 2
},
{
"date": "2026-05-31",
"count": 1
},
{
"date": "2026-06-01",
"count": 1
},
{
"date": "2026-06-02",
"count": 2
},
{
"date": "2026-06-03",
"count": 3
},
{
"date": "2026-06-04",
"count": 1
},
{
"date": "2026-06-05",
"count": 2
},
{
"date": "2026-06-06",
"count": 1
},
{
"date": "2026-06-07",
"count": 3
},
{
"date": "2026-06-08",
"count": 2
},
{
"date": "2026-06-09",
"count": 3
},
{
"date": "2026-06-10",
"count": 10
},
{
"date": "2026-06-11",
"count": 3
},
{
"date": "2026-06-12",
"count": 3
},
{
"date": "2026-06-14",
"count": 5
},
{
"date": "2026-06-15",
"count": 4
},
{
"date": "2026-06-16",
"count": 6
},
{
"date": "2026-06-17",
"count": 2
},
{
"date": "2026-06-18",
"count": 2
},
{
"date": "2026-06-19",
"count": 12
},
{
"date": "2026-06-21",
"count": 1
},
{
"date": "2026-06-22",
"count": 5
},
{
"date": "2026-06-23",
"count": 1
},
{
"date": "2026-06-25",
"count": 4
},
{
"date": "2026-06-26",
"count": 2
},
{
"date": "2026-06-27",
"count": 1
},
{
"date": "2026-06-28",
"count": 2
},
{
"date": "2026-06-29",
"count": 5
},
{
"date": "2026-07-06",
"count": 2
},
{
"date": "2026-07-07",
"count": 1
},
{
"date": "2026-07-08",
"count": 1
},
{
"date": "2026-07-10",
"count": 2
},
{
"date": "2026-07-15",
"count": 4
},
{
"date": "2026-07-16",
"count": 1
},
{
"date": "2026-07-17",
"count": 1
},
{
"date": "2026-07-18",
"count": 2
},
{
"date": "2026-07-19",
"count": 3
},
{
"date": "2026-07-20",
"count": 3
},
{
"date": "2026-07-21",
"count": 1
},
{
"date": "2026-07-24",
"count": 2
}
],
"complete": true,
"collected": 122,
"total_forks": 122
},
"star_history": null,
"open_issues_and_prs": 71
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": true,
"bootstrap_files": [
"tools/proxy-helper/Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"tsconfig.json"
],
"toolchain_manifests": [
"benchmark/manual/seeds/explore-refactor/go.mod",
"tools/proxy-helper/go.mod"
],
"largest_source_bytes": 360435,
"source_files_sampled": 1102,
"oversized_source_files": 9,
"agent_instruction_files": [
"AGENTS.md",
"docs/agents.md"
],
"agent_instruction_max_bytes": 12367
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "repository_graph",
"source": "osv",
"findings": [
{
"name": "shell-quote",
"direct": true,
"version": "1.8.3",
"severity": "critical",
"ecosystem": "npm",
"cvss_score": 9.8,
"advisory_ids": [
"GHSA-395f-4hp3-45gv",
"GHSA-w7jw-789q-3m8p"
],
"fixed_version": "1.9.0",
"advisory_count": 2,
"oldest_advisory_days": 47
},
{
"name": "litellm",
"direct": false,
"version": "1.83.0",
"severity": "critical",
"ecosystem": "pypi",
"cvss_score": 9.8,
"advisory_ids": [
"GHSA-4g5m-c9r5-49xf",
"GHSA-4xpc-pv4p-pm3w",
"GHSA-5jmr-gcrj-2c9q",
"GHSA-7488-6r32-c95q",
"GHSA-qrc4-49gv-mv9m",
"GHSA-r75f-5x8p-qvmc",
"GHSA-v4p8-mg3p-g94g",
"GHSA-wpfp-gwwc-vwq6",
"GHSA-wxxx-gvqv-xp7p",
"GHSA-xqmj-j6mv-4862"
],
"fixed_version": "1.84.0",
"advisory_count": 20,
"oldest_advisory_days": 93
},
{
"name": "vitest",
"direct": false,
"version": "3.2.4",
"severity": "critical",
"ecosystem": "npm",
"cvss_score": 9.8,
"advisory_ids": [
"GHSA-5xrq-8626-4rwp"
],
"fixed_version": "4.1.0",
"advisory_count": 1,
"oldest_advisory_days": 55
},
{
"name": "shell-quote",
"direct": true,
"version": "1.8.4",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-395f-4hp3-45gv"
],
"fixed_version": "1.9.0",
"advisory_count": 1,
"oldest_advisory_days": 6
},
{
"name": "tar",
"direct": true,
"version": "7.5.14",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-23hp-3jrh-7fpw",
"GHSA-8x88-c5mf-7j5w",
"GHSA-gvwx-54wh-qm9j",
"GHSA-r292-9mhp-454m",
"GHSA-vmf3-w455-68vh",
"GHSA-w8wr-v893-vjvp"
],
"fixed_version": "7.5.21",
"advisory_count": 6,
"oldest_advisory_days": 41
},
{
"name": "tar",
"direct": true,
"version": "7.5.15",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-23hp-3jrh-7fpw",
"GHSA-8x88-c5mf-7j5w",
"GHSA-gvwx-54wh-qm9j",
"GHSA-r292-9mhp-454m",
"GHSA-vmf3-w455-68vh",
"GHSA-w8wr-v893-vjvp"
],
"fixed_version": "7.5.21",
"advisory_count": 6,
"oldest_advisory_days": 41
},
{
"name": "undici",
"direct": true,
"version": "7.25.0",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-35p6-xmwp-9g52",
"GHSA-g8m3-5g58-fq7m",
"GHSA-hm92-r4w5-c3mj",
"GHSA-p88m-4jfj-68fv",
"GHSA-pr7r-676h-xcf6",
"GHSA-vmh5-mc38-953g",
"GHSA-vxpw-j846-p89q"
],
"fixed_version": "8.5.0",
"advisory_count": 7,
"oldest_advisory_days": 38
},
{
"name": "undici",
"direct": true,
"version": "8.2.0",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-35p6-xmwp-9g52",
"GHSA-38rv-x7px-6hhq",
"GHSA-g8m3-5g58-fq7m",
"GHSA-p88m-4jfj-68fv",
"GHSA-pr7r-676h-xcf6",
"GHSA-vmh5-mc38-953g",
"GHSA-vxpw-j846-p89q"
],
"fixed_version": "8.5.0",
"advisory_count": 7,
"oldest_advisory_days": 38
},
{
"name": "@mariozechner/pi-coding-agent",
"direct": false,
"version": "0.72.1",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.3,
"advisory_ids": [
"GHSA-7v5m-pr3q-6453",
"GHSA-jfgx-wxx8-mp94",
"GHSA-r95r-rj6r-c39x"
],
"fixed_version": "0.78.1",
"advisory_count": 3,
"oldest_advisory_days": 40
},
{
"name": "aiohttp",
"direct": false,
"version": "3.13.5",
"severity": "high",
"ecosystem": "pypi",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-2fqr-mr3j-6wp8",
"GHSA-4fvr-rgm6-gqmc",
"GHSA-4m7w-qmgq-4wj5",
"GHSA-63hw-fmq6-xxg2",
"GHSA-9x8q-7h8h-wcw9",
"GHSA-g3cq-j2xw-wf74",
"GHSA-hg6j-4rv6-33pg",
"GHSA-hpj7-wq8m-9hgp",
"GHSA-jg22-mg44-37j8",
"GHSA-m6qw-4cw2-hm4m"
],
"fixed_version": "3.14.1",
"advisory_count": 22,
"oldest_advisory_days": 54
},
{
"name": "brace-expansion",
"direct": false,
"version": "2.1.1",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-3jxr-9vmj-r5cp",
"GHSA-mh99-v99m-4gvg"
],
"fixed_version": "5.0.8",
"advisory_count": 2,
"oldest_advisory_days": 6
},
{
"name": "brace-expansion",
"direct": false,
"version": "5.0.5",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-3jxr-9vmj-r5cp",
"GHSA-jxxr-4gwj-5jf2",
"GHSA-mh99-v99m-4gvg"
],
"fixed_version": "5.0.8",
"advisory_count": 3,
"oldest_advisory_days": 69
},
{
"name": "brace-expansion",
"direct": false,
"version": "5.0.6",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-3jxr-9vmj-r5cp",
"GHSA-mh99-v99m-4gvg"
],
"fixed_version": "5.0.8",
"advisory_count": 2,
"oldest_advisory_days": 6
},
{
"name": "click",
"direct": false,
"version": "8.3.2",
"severity": "high",
"ecosystem": "pypi",
"cvss_score": 7.2,
"advisory_ids": [
"PYSEC-2026-2132"
],
"fixed_version": "8.3.3",
"advisory_count": 1,
"oldest_advisory_days": 87
},
{
"name": "cryptography",
"direct": false,
"version": "46.0.7",
"severity": "high",
"ecosystem": "pypi",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-537c-gmf6-5ccf"
],
"fixed_version": "48.0.1",
"advisory_count": 1,
"oldest_advisory_days": 41
},
{
"name": "fast-uri",
"direct": false,
"version": "3.1.2",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-4c8g-83qw-93j6",
"GHSA-v2hh-gcrm-f6hx"
],
"fixed_version": "4.1.1",
"advisory_count": 2,
"oldest_advisory_days": 5
},
{
"name": "hono",
"direct": false,
"version": "4.12.18",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.1,
"advisory_ids": [
"GHSA-2gcr-mfcq-wcc3",
"GHSA-3hrh-pfw6-9m5x",
"GHSA-88fw-hqm2-52qc",
"GHSA-f577-qrjj-4474",
"GHSA-hvrm-45r6-mjfj",
"GHSA-j6c9-x7qj-28xf",
"GHSA-rv63-4mwf-qqc2",
"GHSA-w62v-xxxg-mg59",
"GHSA-wgpf-jwqj-8h8p",
"GHSA-wwfh-h76j-fc44"
],
"fixed_version": "4.12.27",
"advisory_count": 12,
"oldest_advisory_days": 52
},
{
"name": "mcp",
"direct": false,
"version": "1.27.0",
"severity": "high",
"ecosystem": "pypi",
"cvss_score": 7.6,
"advisory_ids": [
"GHSA-hvrp-rf83-w775",
"GHSA-jpw9-pfvf-9f58",
"GHSA-vj7q-gjh5-988w",
"PYSEC-2026-3481",
"PYSEC-2026-3482",
"PYSEC-2026-3483"
],
"fixed_version": "1.28.1",
"advisory_count": 6,
"oldest_advisory_days": 10
},
{
"name": "postcss",
"direct": false,
"version": "8.5.14",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-r28c-9q8g-f849"
],
"fixed_version": "8.5.18",
"advisory_count": 1,
"oldest_advisory_days": 2
},
{
"name": "protobufjs",
"direct": false,
"version": "7.5.6",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-f38q-mgvj-vph7",
"GHSA-j3f2-48v5-ccww",
"GHSA-jggg-4jg4-v7c6",
"GHSA-wcpc-wj8m-hjx6"
],
"fixed_version": "8.6.6",
"advisory_count": 4,
"oldest_advisory_days": 68
},
{
"name": "protobufjs",
"direct": false,
"version": "7.5.9",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-f38q-mgvj-vph7",
"GHSA-j3f2-48v5-ccww",
"GHSA-wcpc-wj8m-hjx6"
],
"fixed_version": "8.6.6",
"advisory_count": 3,
"oldest_advisory_days": 41
},
{
"name": "pyjwt",
"direct": false,
"version": "2.12.1",
"severity": "high",
"ecosystem": "pypi",
"cvss_score": 7.4,
"advisory_ids": [
"GHSA-993g-76c3-p5m4",
"GHSA-fhv5-28vv-h8m8",
"GHSA-jq35-7prp-9v3f",
"GHSA-w7vc-732c-9m39",
"GHSA-xgmm-8j9v-c9wx",
"PYSEC-2026-175",
"PYSEC-2026-177",
"PYSEC-2026-178",
"PYSEC-2026-179"
],
"fixed_version": "2.13.0",
"advisory_count": 9,
"oldest_advisory_days": 59
},
{
"name": "python-multipart",
"direct": false,
"version": "0.0.26",
"severity": "high",
"ecosystem": "pypi",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-5rvq-cxj2-64vf",
"GHSA-6jv3-5f52-599m",
"GHSA-pp6c-gr5w-3c5g",
"GHSA-v9pg-7xvm-68hf",
"GHSA-vffw-93wf-4j4q",
"PYSEC-2026-3036",
"PYSEC-2026-3037",
"PYSEC-2026-3039",
"PYSEC-2026-3040",
"PYSEC-2026-3041"
],
"fixed_version": "0.0.31",
"advisory_count": 10,
"oldest_advisory_days": 81
},
{
"name": "starlette",
"direct": false,
"version": "1.0.0",
"severity": "high",
"ecosystem": "pypi",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-82w8-qh3p-5jfq",
"GHSA-86qp-5c8j-p5mr",
"GHSA-jp82-jpqv-5vv3",
"GHSA-wqp7-x3pw-xc5r",
"GHSA-x746-7m8f-x49c",
"PYSEC-2026-161",
"PYSEC-2026-2280",
"PYSEC-2026-2281",
"PYSEC-2026-248",
"PYSEC-2026-249"
],
"fixed_version": "1.3.1",
"advisory_count": 10,
"oldest_advisory_days": 65
},
{
"name": "urllib3",
"direct": false,
"version": "2.6.3",
"severity": "high",
"ecosystem": "pypi",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-mf9v-mfxr-j63j",
"GHSA-qccp-gfcp-xxvc",
"PYSEC-2026-141",
"PYSEC-2026-142"
],
"fixed_version": "2.7.0",
"advisory_count": 4,
"oldest_advisory_days": 76
},
{
"name": "vite",
"direct": false,
"version": "7.3.3",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-fx2h-pf6j-xcff",
"GHSA-v6wh-96g9-6wx3"
],
"fixed_version": "8.0.16",
"advisory_count": 2,
"oldest_advisory_days": 41
},
{
"name": "ws",
"direct": false,
"version": "8.20.0",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-58qx-3vcg-4xpx",
"GHSA-96hv-2xvq-fx4p"
],
"fixed_version": "8.21.0",
"advisory_count": 2,
"oldest_advisory_days": 69
},
{
"name": "ws",
"direct": false,
"version": "8.20.1",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-96hv-2xvq-fx4p"
],
"fixed_version": "8.21.0",
"advisory_count": 1,
"oldest_advisory_days": 41
},
{
"name": "@hono/node-server",
"direct": false,
"version": "1.19.14",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 5.9,
"advisory_ids": [
"GHSA-frvp-7c67-39w9"
],
"fixed_version": "2.0.5",
"advisory_count": 1,
"oldest_advisory_days": 5
},
{
"name": "idna",
"direct": false,
"version": "3.11",
"severity": "moderate",
"ecosystem": "pypi",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-65pc-fj4g-8rjx",
"PYSEC-2026-215"
],
"fixed_version": "3.15",
"advisory_count": 2,
"oldest_advisory_days": 68
},
{
"name": "pydantic-settings",
"direct": false,
"version": "2.13.1",
"severity": "moderate",
"ecosystem": "pypi",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-4xgf-cpjx-pc3j"
],
"fixed_version": "2.14.2",
"advisory_count": 1,
"oldest_advisory_days": 37
},
{
"name": "qs",
"direct": false,
"version": "6.15.1",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 5.3,
"advisory_ids": [
"GHSA-q8mj-m7cp-5q26"
],
"fixed_version": "6.15.2",
"advisory_count": 1,
"oldest_advisory_days": 65
},
{
"name": "body-parser",
"direct": false,
"version": "2.2.2",
"severity": "low",
"ecosystem": "npm",
"cvss_score": 3.7,
"advisory_ids": [
"GHSA-v422-hmwv-36x6"
],
"fixed_version": "2.3.0",
"advisory_count": 1,
"oldest_advisory_days": 6
},
{
"name": "esbuild",
"direct": false,
"version": "0.27.7",
"severity": "low",
"ecosystem": "npm",
"cvss_score": 2.5,
"advisory_ids": [
"GHSA-g7r4-m6w7-qqqr"
],
"fixed_version": "0.28.1",
"advisory_count": 1,
"oldest_advisory_days": 44
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"low": 2,
"high": 25,
"critical": 3,
"moderate": 4
},
"advisory_count": 157,
"affected_count": 34,
"assessed_count": 819,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 1,
"direct_affected_count": 6
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "@agentclientprotocol/sdk",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "0.19.2"
},
{
"name": "@bulkhead-ai/core",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^0.7.0"
},
{
"name": "@clack/prompts",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.3.0"
},
{
"name": "@earendil-works/pi-coding-agent",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "0.79.10"
},
{
"name": "@earendil-works/pi-tui",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "0.79.10"
},
{
"name": "@modelcontextprotocol/ext-apps",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.7.1"
},
{
"name": "@modelcontextprotocol/sdk",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.29.0"
},
{
"name": "@shikijs/cli",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.0.2"
},
{
"name": "@types/diff",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^8.0.0"
},
{
"name": "@types/proper-lockfile",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.1.4"
},
{
"name": "@types/ssh2",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.15.5"
},
{
"name": "@xterm/headless",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^6.0.0"
},
{
"name": "diff",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^9.0.0"
},
{
"name": "micromatch",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.0.8"
},
{
"name": "open",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^10.2.0"
},
{
"name": "proper-lockfile",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.1.2"
},
{
"name": "shell-quote",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "1.8.4"
},
{
"name": "shiki",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.0.2"
},
{
"name": "ssh2",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.17.0"
},
{
"name": "tar",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^7.5.15"
},
{
"name": "undici",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^8.2.0"
},
{
"name": "uuid",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^14.0.0"
},
{
"name": "wcwidth",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.0.1"
},
{
"name": "yaml",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^2.8.4"
},
{
"name": "zod",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.4.3"
},
{
"name": "github.com/coder/websocket",
"manifest": "tools/proxy-helper/go.mod",
"ecosystem": "go",
"version_constraint": "v1.8.14"
},
{
"name": "github.com/spf13/cobra",
"manifest": "tools/proxy-helper/go.mod",
"ecosystem": "go",
"version_constraint": "v1.10.2"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "github.com/coder/websocket",
"direct": true,
"version": "v1.8.14",
"ecosystem": "go"
},
{
"name": "github.com/spf13/cobra",
"direct": true,
"version": "v1.10.2",
"ecosystem": "go"
},
{
"name": "@agentclientprotocol/sdk",
"direct": true,
"version": "0.19.2",
"ecosystem": "npm"
},
{
"name": "@bulkhead-ai/core",
"direct": true,
"version": "0.7.0",
"ecosystem": "npm"
},
{
"name": "@clack/prompts",
"direct": true,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "@earendil-works/pi-coding-agent",
"direct": true,
"version": "0.79.10",
"ecosystem": "npm"
},
{
"name": "@earendil-works/pi-tui",
"direct": true,
"version": "0.79.10",
"ecosystem": "npm"
},
{
"name": "@modelcontextprotocol/ext-apps",
"direct": true,
"version": "1.7.1",
"ecosystem": "npm"
},
{
"name": "@modelcontextprotocol/sdk",
"direct": true,
"version": "1.29.0",
"ecosystem": "npm"
},
{
"name": "@shikijs/cli",
"direct": true,
"version": "4.0.2",
"ecosystem": "npm"
},
{
"name": "@types/diff",
"direct": true,
"version": "8.0.0",
"ecosystem": "npm"
},
{
"name": "@types/proper-lockfile",
"direct": true,
"version": "4.1.4",
"ecosystem": "npm"
},
{
"name": "@types/ssh2",
"direct": true,
"version": "1.15.5",
"ecosystem": "npm"
},
{
"name": "@xterm/headless",
"direct": true,
"version": "6.0.0",
"ecosystem": "npm"
},
{
"name": "diff",
"direct": true,
"version": "8.0.4",
"ecosystem": "npm"
},
{
"name": "diff",
"direct": true,
"version": "9.0.0",
"ecosystem": "npm"
},
{
"name": "micromatch",
"direct": true,
"version": "4.0.8",
"ecosystem": "npm"
},
{
"name": "open",
"direct": true,
"version": "10.2.0",
"ecosystem": "npm"
},
{
"name": "proper-lockfile",
"direct": true,
"version": "4.1.2",
"ecosystem": "npm"
},
{
"name": "shell-quote",
"direct": true,
"version": "1.8.3",
"ecosystem": "npm"
},
{
"name": "shell-quote",
"direct": true,
"version": "1.8.4",
"ecosystem": "npm"
},
{
"name": "shiki",
"direct": true,
"version": "4.0.2",
"ecosystem": "npm"
},
{
"name": "ssh2",
"direct": true,
"version": "1.17.0",
"ecosystem": "npm"
},
{
"name": "tar",
"direct": true,
"version": "7.5.14",
"ecosystem": "npm"
},
{
"name": "tar",
"direct": true,
"version": "7.5.15",
"ecosystem": "npm"
},
{
"name": "undici",
"direct": true,
"version": "7.25.0",
"ecosystem": "npm"
},
{
"name": "undici",
"direct": true,
"version": "8.2.0",
"ecosystem": "npm"
},
{
"name": "undici",
"direct": true,
"version": "8.5.0",
"ecosystem": "npm"
},
{
"name": "uuid",
"direct": true,
"version": "14.0.0",
"ecosystem": "npm"
},
{
"name": "wcwidth",
"direct": true,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "yaml",
"direct": true,
"version": "2.8.4",
"ecosystem": "npm"
},
{
"name": "yaml",
"direct": true,
"version": "2.9.0",
"ecosystem": "npm"
},
{
"name": "zod",
"direct": true,
"version": "4.4.3",
"ecosystem": "npm"
},
{
"name": "github.com/inconshreveable/mousetrap",
"direct": false,
"version": "v1.1.0",
"ecosystem": "go"
},
{
"name": "github.com/spf13/pflag",
"direct": false,
"version": "v1.0.9",
"ecosystem": "go"
},
{
"name": "@anthropic-ai/sdk",
"direct": false,
"version": "0.91.1",
"ecosystem": "npm"
},
{
"name": "@aws-crypto/crc32",
"direct": false,
"version": "5.2.0",
"ecosystem": "npm"
},
{
"name": "@aws-crypto/sha256-browser",
"direct": false,
"version": "5.2.0",
"ecosystem": "npm"
},
{
"name": "@aws-crypto/sha256-js",
"direct": false,
"version": "5.2.0",
"ecosystem": "npm"
},
{
"name": "@aws-crypto/supports-web-crypto",
"direct": false,
"version": "5.2.0",
"ecosystem": "npm"
},
{
"name": "@aws-crypto/util",
"direct": false,
"version": "5.2.0",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/client-bedrock-runtime",
"direct": false,
"version": "3.1044.0",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/client-bedrock-runtime",
"direct": false,
"version": "3.1048.0",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/core",
"direct": false,
"version": "3.974.11",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/core",
"direct": false,
"version": "3.974.8",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/credential-provider-env",
"direct": false,
"version": "3.972.34",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/credential-provider-env",
"direct": false,
"version": "3.972.37",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/credential-provider-http",
"direct": false,
"version": "3.972.36",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/credential-provider-http",
"direct": false,
"version": "3.972.39",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/credential-provider-ini",
"direct": false,
"version": "3.972.38",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/credential-provider-ini",
"direct": false,
"version": "3.972.41",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/credential-provider-login",
"direct": false,
"version": "3.972.38",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/credential-provider-login",
"direct": false,
"version": "3.972.41",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/credential-provider-node",
"direct": false,
"version": "3.972.39",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/credential-provider-node",
"direct": false,
"version": "3.972.42",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/credential-provider-process",
"direct": false,
"version": "3.972.34",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/credential-provider-process",
"direct": false,
"version": "3.972.37",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/credential-provider-sso",
"direct": false,
"version": "3.972.38",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/credential-provider-sso",
"direct": false,
"version": "3.972.41",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/credential-provider-web-identity",
"direct": false,
"version": "3.972.38",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/credential-provider-web-identity",
"direct": false,
"version": "3.972.41",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/eventstream-handler-node",
"direct": false,
"version": "3.972.14",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/eventstream-handler-node",
"direct": false,
"version": "3.972.16",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/middleware-eventstream",
"direct": false,
"version": "3.972.10",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/middleware-eventstream",
"direct": false,
"version": "3.972.12",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/middleware-host-header",
"direct": false,
"version": "3.972.10",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/middleware-logger",
"direct": false,
"version": "3.972.10",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/middleware-recursion-detection",
"direct": false,
"version": "3.972.11",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/middleware-sdk-s3",
"direct": false,
"version": "3.972.37",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/middleware-user-agent",
"direct": false,
"version": "3.972.38",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/middleware-websocket",
"direct": false,
"version": "3.972.16",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/middleware-websocket",
"direct": false,
"version": "3.972.19",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/nested-clients",
"direct": false,
"version": "3.997.6",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/nested-clients",
"direct": false,
"version": "3.997.9",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/region-config-resolver",
"direct": false,
"version": "3.972.13",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/signature-v4-multi-region",
"direct": false,
"version": "3.996.25",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/signature-v4-multi-region",
"direct": false,
"version": "3.996.27",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/token-providers",
"direct": false,
"version": "3.1041.0",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/token-providers",
"direct": false,
"version": "3.1044.0",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/token-providers",
"direct": false,
"version": "3.1048.0",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/types",
"direct": false,
"version": "3.973.8",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/util-arn-parser",
"direct": false,
"version": "3.972.3",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/util-endpoints",
"direct": false,
"version": "3.996.8",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/util-format-url",
"direct": false,
"version": "3.972.10",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/util-locate-window",
"direct": false,
"version": "3.965.5",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/util-user-agent-browser",
"direct": false,
"version": "3.972.10",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/util-user-agent-node",
"direct": false,
"version": "3.973.24",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/xml-builder",
"direct": false,
"version": "3.972.22",
"ecosystem": "npm"
},
{
"name": "@aws-sdk/xml-builder",
"direct": false,
"version": "3.972.24",
"ecosystem": "npm"
},
{
"name": "@aws/lambda-invoke-store",
"direct": false,
"version": "0.2.4",
"ecosystem": "npm"
},
{
"name": "@babel/code-frame",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/helper-validator-identifier",
"direct": false,
"version": "7.29.7",
"ecosystem": "npm"
},
{
"name": "@babel/runtime",
"direct": false,
"version": "7.29.2",
"ecosystem": "npm"
},
{
"name": "@biomejs/biome",
"direct": false,
"version": "1.9.4",
"ecosystem": "npm"
},
{
"name": "@biomejs/biome",
"direct": false,
"version": "2.5.3",
"ecosystem": "npm"
},
{
"name": "@biomejs/cli-darwin-arm64",
"direct": false,
"version": "1.9.4",
"ecosystem": "npm"
},
{
"name": "@biomejs/cli-darwin-arm64",
"direct": false,
"version": "2.5.3",
"ecosystem": "npm"
},
{
"name": "@biomejs/cli-darwin-x64",
"direct": false,
"version": "1.9.4",
"ecosystem": "npm"
},
{
"name": "@biomejs/cli-darwin-x64",
"direct": false,
"version": "2.5.3",
"ecosystem": "npm"
},
{
"name": "@biomejs/cli-linux-arm64",
"direct": false,
"version": "1.9.4",
"ecosystem": "npm"
},
{
"name": "@biomejs/cli-linux-arm64",
"direct": false,
"version": "2.5.3",
"ecosystem": "npm"
},
{
"name": "@biomejs/cli-linux-arm64-musl",
"direct": false,
"version": "1.9.4",
"ecosystem": "npm"
},
{
"name": "@biomejs/cli-linux-arm64-musl",
"direct": false,
"version": "2.5.3",
"ecosystem": "npm"
},
{
"name": "@biomejs/cli-linux-x64",
"direct": false,
"version": "1.9.4",
"ecosystem": "npm"
},
{
"name": "@biomejs/cli-linux-x64",
"direct": false,
"version": "2.5.3",
"ecosystem": "npm"
},
{
"name": "@biomejs/cli-linux-x64-musl",
"direct": false,
"version": "1.9.4",
"ecosystem": "npm"
},
{
"name": "@biomejs/cli-linux-x64-musl",
"direct": false,
"version": "2.5.3",
"ecosystem": "npm"
},
{
"name": "@biomejs/cli-win32-arm64",
"direct": false,
"version": "1.9.4",
"ecosystem": "npm"
},
{
"name": "@biomejs/cli-win32-arm64",
"direct": false,
"version": "2.5.3",
"ecosystem": "npm"
},
{
"name": "@biomejs/cli-win32-x64",
"direct": false,
"version": "1.9.4",
"ecosystem": "npm"
},
{
"name": "@biomejs/cli-win32-x64",
"direct": false,
"version": "2.5.3",
"ecosystem": "npm"
},
{
"name": "@borewit/text-codec",
"direct": false,
"version": "0.2.2",
"ecosystem": "npm"
},
{
"name": "@clack/core",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "@earendil-works/pi-agent-core",
"direct": false,
"version": "0.79.10",
"ecosystem": "npm"
},
{
"name": "@earendil-works/pi-ai",
"direct": false,
"version": "0.79.10",
"ecosystem": "npm"
},
{
"name": "@esbuild/aix-ppc64",
"direct": false,
"version": "0.27.7",
"ecosystem": "npm"
},
{
"name": "@esbuild/android-arm",
"direct": false,
"version": "0.27.7",
"ecosystem": "npm"
},
{
"name": "@esbuild/android-arm64",
"direct": false,
"version": "0.27.7",
"ecosystem": "npm"
},
{
"name": "@esbuild/android-x64",
"direct": false,
"version": "0.27.7",
"ecosystem": "npm"
},
{
"name": "@esbuild/darwin-arm64",
"direct": false,
"version": "0.27.7",
"ecosystem": "npm"
},
{
"name": "@esbuild/darwin-x64",
"direct": false,
"version": "0.27.7",
"ecosystem": "npm"
},
{
"name": "@esbuild/freebsd-arm64",
"direct": false,
"version": "0.27.7",
"ecosystem": "npm"
},
{
"name": "@esbuild/freebsd-x64",
"direct": false,
"version": "0.27.7",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-arm",
"direct": false,
"version": "0.27.7",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-arm64",
"direct": false,
"version": "0.27.7",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-ia32",
"direct": false,
"version": "0.27.7",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-loong64",
"direct": false,
"version": "0.27.7",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-mips64el",
"direct": false,
"version": "0.27.7",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-ppc64",
"direct": false,
"version": "0.27.7",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-riscv64",
"direct": false,
"version": "0.27.7",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-s390x",
"direct": false,
"version": "0.27.7",
"ecosystem": "npm"
},
{
"name": "@esbuild/linux-x64",
"direct": false,
"version": "0.27.7",
"ecosystem": "npm"
},
{
"name": "@esbuild/netbsd-arm64",
"direct": false,
"version": "0.27.7",
"ecosystem": "npm"
},
{
"name": "@esbuild/netbsd-x64",
"direct": false,
"version": "0.27.7",
"ecosystem": "npm"
},
{
"name": "@esbuild/openbsd-arm64",
"direct": false,
"version": "0.27.7",
"ecosystem": "npm"
},
{
"name": "@esbuild/openbsd-x64",
"direct": false,
"version": "0.27.7",
"ecosystem": "npm"
},
{
"name": "@esbuild/openharmony-arm64",
"direct": false,
"version": "0.27.7",
"ecosystem": "npm"
},
{
"name": "@esbuild/sunos-x64",
"direct": false,
"version": "0.27.7",
"ecosystem": "npm"
},
{
"name": "@esbuild/win32-arm64",
"direct": false,
"version": "0.27.7",
"ecosystem": "npm"
},
{
"name": "@esbuild/win32-ia32",
"direct": false,
"version": "0.27.7",
"ecosystem": "npm"
},
{
"name": "@esbuild/win32-x64",
"direct": false,
"version": "0.27.7",
"ecosystem": "npm"
},
{
"name": "@google/genai",
"direct": false,
"version": "1.52.0",
"ecosystem": "npm"
},
{
"name": "@hono/node-server",
"direct": false,
"version": "1.19.14",
"ecosystem": "npm"
},
{
"name": "@isaacs/cliui",
"direct": false,
"version": "8.0.2",
"ecosystem": "npm"
},
{
"name": "@isaacs/fs-minipass",
"direct": false,
"version": "4.0.1",
"ecosystem": "npm"
},
{
"name": "@jest/expect-utils",
"direct": false,
"version": "29.7.0",
"ecosystem": "npm"
},
{
"name": "@jest/schemas",
"direct": false,
"version": "29.6.3",
"ecosystem": "npm"
},
{
"name": "@jest/types",
"direct": false,
"version": "29.6.3",
"ecosystem": "npm"
},
{
"name": "@jridgewell/sourcemap-codec",
"direct": false,
"version": "1.5.5",
"ecosystem": "npm"
},
{
"name": "@mariozechner/clipboard",
"direct": false,
"version": "0.3.5",
"ecosystem": "npm"
},
{
"name": "@mariozechner/clipboard",
"direct": false,
"version": "0.3.9",
"ecosystem": "npm"
},
{
"name": "@mariozechner/clipboard-darwin-arm64",
"direct": false,
"version": "0.3.2",
"ecosystem": "npm"
},
{
"name": "@mariozechner/clipboard-darwin-arm64",
"direct": false,
"version": "0.3.6",
"ecosystem": "npm"
},
{
"name": "@mariozechner/clipboard-darwin-arm64",
"direct": false,
"version": "0.3.9",
"ecosystem": "npm"
},
{
"name": "@mariozechner/clipboard-darwin-universal",
"direct": false,
"version": "0.3.2",
"ecosystem": "npm"
},
{
"name": "@mariozechner/clipboard-darwin-universal",
"direct": false,
"version": "0.3.6",
"ecosystem": "npm"
},
{
"name": "@mariozechner/clipboard-darwin-universal",
"direct": false,
"version": "0.3.9",
"ecosystem": "npm"
},
{
"name": "@mariozechner/clipboard-darwin-x64",
"direct": false,
"version": "0.3.2",
"ecosystem": "npm"
},
{
"name": "@mariozechner/clipboard-darwin-x64",
"direct": false,
"version": "0.3.6",
"ecosystem": "npm"
},
{
"name": "@mariozechner/clipboard-darwin-x64",
"direct": false,
"version": "0.3.9",
"ecosystem": "npm"
},
{
"name": "@mariozechner/clipboard-linux-arm64-gnu",
"direct": false,
"version": "0.3.2",
"ecosystem": "npm"
},
{
"name": "@mariozechner/clipboard-linux-arm64-gnu",
"direct": false,
"version": "0.3.6",
"ecosystem": "npm"
},
{
"name": "@mariozechner/clipboard-linux-arm64-gnu",
"direct": false,
"version": "0.3.9",
"ecosystem": "npm"
},
{
"name": "@mariozechner/clipboard-linux-arm64-musl",
"direct": false,
"version": "0.3.2",
"ecosystem": "npm"
},
{
"name": "@mariozechner/clipboard-linux-arm64-musl",
"direct": false,
"version": "0.3.6",
"ecosystem": "npm"
},
{
"name": "@mariozechner/clipboard-linux-arm64-musl",
"direct": false,
"version": "0.3.9",
"ecosystem": "npm"
},
{
"name": "@mariozechner/clipboard-linux-riscv64-gnu",
"direct": false,
"version": "0.3.2",
"ecosystem": "npm"
},
{
"name": "@mariozechner/clipboard-linux-riscv64-gnu",
"direct": false,
"version": "0.3.9",
"ecosystem": "npm"
},
{
"name": "@mariozechner/clipboard-linux-x64-gnu",
"direct": false,
"version": "0.3.2",
"ecosystem": "npm"
},
{
"name": "@mariozechner/clipboard-linux-x64-gnu",
"direct": false,
"version": "0.3.6",
"ecosystem": "npm"
},
{
"name": "@mariozechner/clipboard-linux-x64-gnu",
"direct": false,
"version": "0.3.9",
"ecosystem": "npm"
},
{
"name": "@mariozechner/clipboard-linux-x64-musl",
"direct": false,
"version": "0.3.2",
"ecosystem": "npm"
},
{
"name": "@mariozechner/clipboard-linux-x64-musl",
"direct": false,
"version": "0.3.6",
"ecosystem": "npm"
},
{
"name": "@mariozechner/clipboard-linux-x64-musl",
"direct": false,
"version": "0.3.9",
"ecosystem": "npm"
},
{
"name": "@mariozechner/clipboard-win32-arm64-msvc",
"direct": false,
"version": "0.3.2",
"ecosystem": "npm"
},
{
"name": "@mariozechner/clipboard-win32-arm64-msvc",
"direct": false,
"version": "0.3.6",
"ecosystem": "npm"
},
{
"name": "@mariozechner/clipboard-win32-arm64-msvc",
"direct": false,
"version": "0.3.9",
"ecosystem": "npm"
},
{
"name": "@mariozechner/clipboard-win32-x64-msvc",
"direct": false,
"version": "0.3.2",
"ecosystem": "npm"
},
{
"name": "@mariozechner/clipboard-win32-x64-msvc",
"direct": false,
"version": "0.3.6",
"ecosystem": "npm"
},
{
"name": "@mariozechner/clipboard-win32-x64-msvc",
"direct": false,
"version": "0.3.9",
"ecosystem": "npm"
},
{
"name": "@mariozechner/jiti",
"direct": false,
"version": "2.6.5",
"ecosystem": "npm"
},
{
"name": "@mariozechner/pi-agent-core",
"direct": false,
"version": "0.72.1",
"ecosystem": "npm"
},
{
"name": "@mariozechner/pi-ai",
"direct": false,
"version": "0.72.1",
"ecosystem": "npm"
},
{
"name": "@mariozechner/pi-coding-agent",
"direct": false,
"version": "0.72.1",
"ecosystem": "npm"
},
{
"name": "@mariozechner/pi-tui",
"direct": false,
"version": "0.72.1",
"ecosystem": "npm"
},
{
"name": "@microsoft/tui-test",
"direct": false,
"version": "0.0.4",
"ecosystem": "npm"
},
{
"name": "@mistralai/mistralai",
"direct": false,
"version": "2.2.1",
"ecosystem": "npm"
},
{
"name": "@mistralai/mistralai",
"direct": false,
"version": "2.2.6",
"ecosystem": "npm"
},
{
"name": "@mixmark-io/domino",
"direct": false,
"version": "2.2.0",
"ecosystem": "npm"
},
{
"name": "@nodable/entities",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "@opentelemetry/api",
"direct": false,
"version": "1.9.0",
"ecosystem": "npm"
},
{
"name": "@opentelemetry/semantic-conventions",
"direct": false,
"version": "1.41.1",
"ecosystem": "npm"
},
{
"name": "@pkgjs/parseargs",
"direct": false,
"version": "0.11.0",
"ecosystem": "npm"
},
{
"name": "@protobufjs/aspromise",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "@protobufjs/base64",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "@protobufjs/codegen",
"direct": false,
"version": "2.0.5",
"ecosystem": "npm"
},
{
"name": "@protobufjs/eventemitter",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "@protobufjs/fetch",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "@protobufjs/fetch",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "@protobufjs/float",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "@protobufjs/inquire",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "@protobufjs/inquire",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "@protobufjs/path",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "@protobufjs/pool",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "@protobufjs/utf8",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-android-arm-eabi",
"direct": false,
"version": "4.60.3",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-android-arm64",
"direct": false,
"version": "4.60.3",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-darwin-arm64",
"direct": false,
"version": "4.60.3",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-darwin-x64",
"direct": false,
"version": "4.60.3",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-freebsd-arm64",
"direct": false,
"version": "4.60.3",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-freebsd-x64",
"direct": false,
"version": "4.60.3",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-linux-arm-gnueabihf",
"direct": false,
"version": "4.60.3",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-linux-arm-musleabihf",
"direct": false,
"version": "4.60.3",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-linux-arm64-gnu",
"direct": false,
"version": "4.60.3",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-linux-arm64-musl",
"direct": false,
"version": "4.60.3",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-linux-loong64-gnu",
"direct": false,
"version": "4.60.3",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-linux-loong64-musl",
"direct": false,
"version": "4.60.3",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-linux-ppc64-gnu",
"direct": false,
"version": "4.60.3",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-linux-ppc64-musl",
"direct": false,
"version": "4.60.3",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-linux-riscv64-gnu",
"direct": false,
"version": "4.60.3",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-linux-riscv64-musl",
"direct": false,
"version": "4.60.3",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-linux-s390x-gnu",
"direct": false,
"version": "4.60.3",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-linux-x64-gnu",
"direct": false,
"version": "4.60.3",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-linux-x64-musl",
"direct": false,
"version": "4.60.3",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-openbsd-x64",
"direct": false,
"version": "4.60.3",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-openharmony-arm64",
"direct": false,
"version": "4.60.3",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-win32-arm64-msvc",
"direct": false,
"version": "4.60.3",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-win32-ia32-msvc",
"direct": false,
"version": "4.60.3",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-win32-x64-gnu",
"direct": false,
"version": "4.60.3",
"ecosystem": "npm"
},
{
"name": "@rollup/rollup-win32-x64-msvc",
"direct": false,
"version": "4.60.3",
"ecosystem": "npm"
},
{
"name": "@shikijs/core",
"direct": false,
"version": "4.0.2",
"ecosystem": "npm"
},
{
"name": "@shikijs/engine-javascript",
"direct": false,
"version": "4.0.2",
"ecosystem": "npm"
},
{
"name": "@shikijs/engine-oniguruma",
"direct": false,
"version": "4.0.2",
"ecosystem": "npm"
},
{
"name": "@shikijs/langs",
"direct": false,
"version": "4.0.2",
"ecosystem": "npm"
},
{
"name": "@shikijs/primitive",
"direct": false,
"version": "4.0.2",
"ecosystem": "npm"
},
{
"name": "@shikijs/themes",
"direct": false,
"version": "4.0.2",
"ecosystem": "npm"
},
{
"name": "@shikijs/types",
"direct": false,
"version": "4.0.2",
"ecosystem": "npm"
},
{
"name": "@shikijs/vscode-textmate",
"direct": false,
"version": "10.0.2",
"ecosystem": "npm"
},
{
"name": "@silvia-odwyer/photon-node",
"direct": false,
"version": "0.3.4",
"ecosystem": "npm"
},
{
"name": "@sinclair/typebox",
"direct": false,
"version": "0.27.10",
"ecosystem": "npm"
},
{
"name": "@smithy/config-resolver",
"direct": false,
"version": "4.4.17",
"ecosystem": "npm"
},
{
"name": "@smithy/core",
"direct": false,
"version": "3.23.17",
"ecosystem": "npm"
},
{
"name": "@smithy/core",
"direct": false,
"version": "3.24.3",
"ecosystem": "npm"
},
{
"name": "@smithy/credential-provider-imds",
"direct": false,
"version": "4.2.14",
"ecosystem": "npm"
},
{
"name": "@smithy/credential-provider-imds",
"direct": false,
"version": "4.3.3",
"ecosystem": "npm"
},
{
"name": "@smithy/eventstream-codec",
"direct": false,
"version": "4.2.14",
"ecosystem": "npm"
},
{
"name": "@smithy/eventstream-serde-browser",
"direct": false,
"version": "4.2.14",
"ecosystem": "npm"
},
{
"name": "@smithy/eventstream-serde-config-resolver",
"direct": false,
"version": "4.3.14",
"ecosystem": "npm"
},
{
"name": "@smithy/eventstream-serde-node",
"direct": false,
"version": "4.2.14",
"ecosystem": "npm"
},
{
"name": "@smithy/eventstream-serde-universal",
"direct": false,
"version": "4.2.14",
"ecosystem": "npm"
},
{
"name": "@smithy/fetch-http-handler",
"direct": false,
"version": "5.3.17",
"ecosystem": "npm"
},
{
"name": "@smithy/fetch-http-handler",
"direct": false,
"version": "5.4.3",
"ecosystem": "npm"
},
{
"name": "@smithy/hash-node",
"direct": false,
"version": "4.2.14",
"ecosystem": "npm"
},
{
"name": "@smithy/invalid-dependency",
"direct": false,
"version": "4.2.14",
"ecosystem": "npm"
},
{
"name": "@smithy/is-array-buffer",
"direct": false,
"version": "2.2.0",
"ecosystem": "npm"
},
{
"name": "@smithy/is-array-buffer",
"direct": false,
"version": "4.2.2",
"ecosystem": "npm"
},
{
"name": "@smithy/middleware-content-length",
"direct": false,
"version": "4.2.14",
"ecosystem": "npm"
},
{
"name": "@smithy/middleware-endpoint",
"direct": false,
"version": "4.4.32",
"ecosystem": "npm"
},
{
"name": "@smithy/middleware-retry",
"direct": false,
"version": "4.5.7",
"ecosystem": "npm"
},
{
"name": "@smithy/middleware-serde",
"direct": false,
"version": "4.2.20",
"ecosystem": "npm"
},
{
"name": "@smithy/middleware-stack",
"direct": false,
"version": "4.2.14",
"ecosystem": "npm"
},
{
"name": "@smithy/node-config-provider",
"direct": false,
"version": "4.3.14",
"ecosystem": "npm"
},
{
"name": "@smithy/node-http-handler",
"direct": false,
"version": "4.6.1",
"ecosystem": "npm"
},
{
"name": "@smithy/node-http-handler",
"direct": false,
"version": "4.7.3",
"ecosystem": "npm"
},
{
"name": "@smithy/property-provider",
"direct": false,
"version": "4.2.14",
"ecosystem": "npm"
},
{
"name": "@smithy/protocol-http",
"direct": false,
"version": "5.3.14",
"ecosystem": "npm"
},
{
"name": "@smithy/querystring-builder",
"direct": false,
"version": "4.2.14",
"ecosystem": "npm"
},
{
"name": "@smithy/querystring-parser",
"direct": false,
"version": "4.2.14",
"ecosystem": "npm"
},
{
"name": "@smithy/service-error-classification",
"direct": false,
"version": "4.3.1",
"ecosystem": "npm"
},
{
"name": "@smithy/shared-ini-file-loader",
"direct": false,
"version": "4.4.9",
"ecosystem": "npm"
},
{
"name": "@smithy/signature-v4",
"direct": false,
"version": "5.3.14",
"ecosystem": "npm"
},
{
"name": "@smithy/signature-v4",
"direct": false,
"version": "5.4.3",
"ecosystem": "npm"
},
{
"name": "@smithy/smithy-client",
"direct": false,
"version": "4.12.13",
"ecosystem": "npm"
},
{
"name": "@smithy/types",
"direct": false,
"version": "4.14.1",
"ecosystem": "npm"
},
{
"name": "@smithy/types",
"direct": false,
"version": "4.14.2",
"ecosystem": "npm"
},
{
"name": "@smithy/url-parser",
"direct": false,
"version": "4.2.14",
"ecosystem": "npm"
},
{
"name": "@smithy/util-base64",
"direct": false,
"version": "4.3.2",
"ecosystem": "npm"
},
{
"name": "@smithy/util-body-length-browser",
"direct": false,
"version": "4.2.2",
"ecosystem": "npm"
},
{
"name": "@smithy/util-body-length-node",
"direct": false,
"version": "4.2.3",
"ecosystem": "npm"
},
{
"name": "@smithy/util-buffer-from",
"direct": false,
"version": "2.2.0",
"ecosystem": "npm"
},
{
"name": "@smithy/util-buffer-from",
"direct": false,
"version": "4.2.2",
"ecosystem": "npm"
},
{
"name": "@smithy/util-config-provider",
"direct": false,
"version": "4.2.2",
"ecosystem": "npm"
},
{
"name": "@smithy/util-defaults-mode-browser",
"direct": false,
"version": "4.3.49",
"ecosystem": "npm"
},
{
"name": "@smithy/util-defaults-mode-node",
"direct": false,
"version": "4.2.54",
"ecosystem": "npm"
},
{
"name": "@smithy/util-endpoints",
"direct": false,
"version": "3.4.2",
"ecosystem": "npm"
},
{
"name": "@smithy/util-hex-encoding",
"direct": false,
"version": "4.2.2",
"ecosystem": "npm"
},
{
"name": "@smithy/util-middleware",
"direct": false,
"version": "4.2.14",
"ecosystem": "npm"
},
{
"name": "@smithy/util-retry",
"direct": false,
"version": "4.3.8",
"ecosystem": "npm"
},
{
"name": "@smithy/util-stream",
"direct": false,
"version": "4.5.25",
"ecosystem": "npm"
},
{
"name": "@smithy/util-uri-escape",
"direct": false,
"version": "4.2.2",
"ecosystem": "npm"
},
{
"name": "@smithy/util-utf8",
"direct": false,
"version": "2.3.0",
"ecosystem": "npm"
},
{
"name": "@smithy/util-utf8",
"direct": false,
"version": "4.2.2",
"ecosystem": "npm"
},
{
"name": "@smithy/uuid",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "@standard-schema/spec",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "@swc/core",
"direct": false,
"version": "1.15.41",
"ecosystem": "npm"
},
{
"name": "@swc/core-darwin-arm64",
"direct": false,
"version": "1.15.41",
"ecosystem": "npm"
},
{
"name": "@swc/core-darwin-x64",
"direct": false,
"version": "1.15.41",
"ecosystem": "npm"
},
{
"name": "@swc/core-linux-arm-gnueabihf",
"direct": false,
"version": "1.15.41",
"ecosystem": "npm"
},
{
"name": "@swc/core-linux-arm64-gnu",
"direct": false,
"version": "1.15.41",
"ecosystem": "npm"
},
{
"name": "@swc/core-linux-arm64-musl",
"direct": false,
"version": "1.15.41",
"ecosystem": "npm"
},
{
"name": "@swc/core-linux-ppc64-gnu",
"direct": false,
"version": "1.15.41",
"ecosystem": "npm"
},
{
"name": "@swc/core-linux-s390x-gnu",
"direct": false,
"version": "1.15.41",
"ecosystem": "npm"
},
{
"name": "@swc/core-linux-x64-gnu",
"direct": false,
"version": "1.15.41",
"ecosystem": "npm"
},
{
"name": "@swc/core-linux-x64-musl",
"direct": false,
"version": "1.15.41",
"ecosystem": "npm"
},
{
"name": "@swc/core-win32-arm64-msvc",
"direct": false,
"version": "1.15.41",
"ecosystem": "npm"
},
{
"name": "@swc/core-win32-ia32-msvc",
"direct": false,
"version": "1.15.41",
"ecosystem": "npm"
},
{
"name": "@swc/core-win32-x64-msvc",
"direct": false,
"version": "1.15.41",
"ecosystem": "npm"
},
{
"name": "@swc/counter",
"direct": false,
"version": "0.1.3",
"ecosystem": "npm"
},
{
"name": "@swc/types",
"direct": false,
"version": "0.1.26",
"ecosystem": "npm"
},
{
"name": "@tokenizer/inflate",
"direct": false,
"version": "0.4.1",
"ecosystem": "npm"
},
{
"name": "@tokenizer/token",
"direct": false,
"version": "0.3.0",
"ecosystem": "npm"
},
{
"name": "@tootallnate/quickjs-emscripten",
"direct": false,
"version": "0.23.0",
"ecosystem": "npm"
},
{
"name": "@types/braces",
"direct": false,
"version": "3.0.5",
"ecosystem": "npm"
},
{
"name": "@types/chai",
"direct": false,
"version": "5.2.3",
"ecosystem": "npm"
},
{
"name": "@types/deep-eql",
"direct": false,
"version": "4.0.2",
"ecosystem": "npm"
},
{
"name": "@types/estree",
"direct": false,
"version": "1.0.8",
"ecosystem": "npm"
},
{
"name": "@types/estree",
"direct": false,
"version": "1.0.9",
"ecosystem": "npm"
},
{
"name": "@types/hast",
"direct": false,
"version": "3.0.4",
"ecosystem": "npm"
},
{
"name": "@types/istanbul-lib-coverage",
"direct": false,
"version": "2.0.6",
"ecosystem": "npm"
},
{
"name": "@types/istanbul-lib-report",
"direct": false,
"version": "3.0.3",
"ecosystem": "npm"
},
{
"name": "@types/istanbul-reports",
"direct": false,
"version": "3.0.4",
"ecosystem": "npm"
},
{
"name": "@types/mdast",
"direct": false,
"version": "4.0.4",
"ecosystem": "npm"
},
{
"name": "@types/micromatch",
"direct": false,
"version": "4.0.10",
"ecosystem": "npm"
},
{
"name": "@types/mime-types",
"direct": false,
"version": "2.1.4",
"ecosystem": "npm"
},
{
"name": "@types/node",
"direct": false,
"version": "18.19.130",
"ecosystem": "npm"
},
{
"name": "@types/node",
"direct": false,
"version": "22.19.17",
"ecosystem": "npm"
},
{
"name": "@types/node",
"direct": false,
"version": "22.19.18",
"ecosystem": "npm"
},
{
"name": "@types/retry",
"direct": false,
"version": "0.12.0",
"ecosystem": "npm"
},
{
"name": "@types/retry",
"direct": false,
"version": "0.12.5",
"ecosystem": "npm"
},
{
"name": "@types/shell-quote",
"direct": false,
"version": "1.7.5",
"ecosystem": "npm"
},
{
"name": "@types/stack-utils",
"direct": false,
"version": "2.0.3",
"ecosystem": "npm"
},
{
"name": "@types/tar",
"direct": false,
"version": "7.0.87",
"ecosystem": "npm"
},
{
"name": "@types/turndown",
"direct": false,
"version": "5.0.6",
"ecosystem": "npm"
},
{
"name": "@types/unist",
"direct": false,
"version": "3.0.3",
"ecosystem": "npm"
},
{
"name": "@types/ws",
"direct": false,
"version": "8.18.1",
"ecosystem": "npm"
},
{
"name": "@types/yargs",
"direct": false,
"version": "17.0.35",
"ecosystem": "npm"
},
{
"name": "@types/yargs-parser",
"direct": false,
"version": "21.0.3",
"ecosystem": "npm"
},
{
"name": "@types/yauzl",
"direct": false,
"version": "2.10.3",
"ecosystem": "npm"
},
{
"name": "@ungap/structured-clone",
"direct": false,
"version": "1.3.1",
"ecosystem": "npm"
},
{
"name": "@vitest/expect",
"direct": false,
"version": "3.2.4",
"ecosystem": "npm"
},
{
"name": "@vitest/mocker",
"direct": false,
"version": "3.2.4",
"ecosystem": "npm"
},
{
"name": "@vitest/pretty-format",
"direct": false,
"version": "3.2.4",
"ecosystem": "npm"
},
{
"name": "@vitest/runner",
"direct": false,
"version": "3.2.4",
"ecosystem": "npm"
},
{
"name": "@vitest/snapshot",
"direct": false,
"version": "3.2.4",
"ecosystem": "npm"
},
{
"name": "@vitest/spy",
"direct": false,
"version": "3.2.4",
"ecosystem": "npm"
},
{
"name": "@vitest/utils",
"direct": false,
"version": "3.2.4",
"ecosystem": "npm"
},
{
"name": "accepts",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "agent-base",
"direct": false,
"version": "7.1.4",
"ecosystem": "npm"
},
{
"name": "ajv",
"direct": false,
"version": "8.20.0",
"ecosystem": "npm"
},
{
"name": "ajv-formats",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "ansi-regex",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "ansi-regex",
"direct": false,
"version": "6.2.2",
"ecosystem": "npm"
},
{
"name": "ansi-styles",
"direct": false,
"version": "4.3.0",
"ecosystem": "npm"
},
{
"name": "ansi-styles",
"direct": false,
"version": "5.2.0",
"ecosystem": "npm"
},
{
"name": "ansi-styles",
"direct": false,
"version": "6.2.3",
"ecosystem": "npm"
},
{
"name": "ansis",
"direct": false,
"version": "4.3.0",
"ecosystem": "npm"
},
{
"name": "any-promise",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "asn1",
"direct": false,
"version": "0.2.6",
"ecosystem": "npm"
},
{
"name": "assertion-error",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "ast-types",
"direct": false,
"version": "0.13.4",
"ecosystem": "npm"
},
{
"name": "balanced-match",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "balanced-match",
"direct": false,
"version": "4.0.4",
"ecosystem": "npm"
},
{
"name": "base64-js",
"direct": false,
"version": "1.5.1",
"ecosystem": "npm"
},
{
"name": "basic-ftp",
"direct": false,
"version": "5.3.1",
"ecosystem": "npm"
},
{
"name": "bcrypt-pbkdf",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "bignumber.js",
"direct": false,
"version": "9.3.1",
"ecosystem": "npm"
},
{
"name": "body-parser",
"direct": false,
"version": "2.2.2",
"ecosystem": "npm"
},
{
"name": "bowser",
"direct": false,
"version": "2.14.1",
"ecosystem": "npm"
},
{
"name": "brace-expansion",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "brace-expansion",
"direct": false,
"version": "5.0.5",
"ecosystem": "npm"
},
{
"name": "brace-expansion",
"direct": false,
"version": "5.0.6",
"ecosystem": "npm"
},
{
"name": "braces",
"direct": false,
"version": "3.0.3",
"ecosystem": "npm"
},
{
"name": "buffer-crc32",
"direct": false,
"version": "0.2.13",
"ecosystem": "npm"
},
{
"name": "buffer-equal-constant-time",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "bundle-name",
"direct": false,
"version": "4.1.0",
"ecosystem": "npm"
},
{
"name": "bytes",
"direct": false,
"version": "3.1.2",
"ecosystem": "npm"
},
{
"name": "cac",
"direct": false,
"version": "6.7.14",
"ecosystem": "npm"
},
{
"name": "cac",
"direct": false,
"version": "7.0.0",
"ecosystem": "npm"
},
{
"name": "call-bind-apply-helpers",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "call-bound",
"direct": false,
"version": "1.0.4",
"ecosystem": "npm"
},
{
"name": "ccount",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "chai",
"direct": false,
"version": "5.3.3",
"ecosystem": "npm"
},
{
"name": "chalk",
"direct": false,
"version": "4.1.2",
"ecosystem": "npm"
},
{
"name": "chalk",
"direct": false,
"version": "5.6.2",
"ecosystem": "npm"
},
{
"name": "character-entities-html4",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "character-entities-legacy",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "check-error",
"direct": false,
"version": "2.1.3",
"ecosystem": "npm"
},
{
"name": "chownr",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "ci-info",
"direct": false,
"version": "3.9.0",
"ecosystem": "npm"
},
{
"name": "cli-highlight",
"direct": false,
"version": "2.1.11",
"ecosystem": "npm"
},
{
"name": "cliui",
"direct": false,
"version": "7.0.4",
"ecosystem": "npm"
},
{
"name": "clone",
"direct": false,
"version": "1.0.4",
"ecosystem": "npm"
},
{
"name": "color-convert",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "color-name",
"direct": false,
"version": "1.1.4",
"ecosystem": "npm"
},
{
"name": "comma-separated-tokens",
"direct": false,
"version": "2.0.3",
"ecosystem": "npm"
},
{
"name": "commander",
"direct": false,
"version": "11.1.0",
"ecosystem": "npm"
},
{
"name": "content-disposition",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "content-type",
"direct": false,
"version": "1.0.5",
"ecosystem": "npm"
},
{
"name": "cookie",
"direct": false,
"version": "0.7.2",
"ecosystem": "npm"
},
{
"name": "cookie-signature",
"direct": false,
"version": "1.2.2",
"ecosystem": "npm"
},
{
"name": "cors",
"direct": false,
"version": "2.8.6",
"ecosystem": "npm"
},
{
"name": "cross-spawn",
"direct": false,
"version": "7.0.6",
"ecosystem": "npm"
},
{
"name": "data-uri-to-buffer",
"direct": false,
"version": "4.0.1",
"ecosystem": "npm"
},
{
"name": "data-uri-to-buffer",
"direct": false,
"version": "6.0.2",
"ecosystem": "npm"
},
{
"name": "debug",
"direct": false,
"version": "4.4.3",
"ecosystem": "npm"
},
{
"name": "deep-eql",
"direct": false,
"version": "5.0.2",
"ecosystem": "npm"
},
{
"name": "default-browser",
"direct": false,
"version": "5.5.0",
"ecosystem": "npm"
},
{
"name": "default-browser-id",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "defaults",
"direct": false,
"version": "1.0.4",
"ecosystem": "npm"
},
{
"name": "define-lazy-prop",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "degenerator",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "depd",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "dequal",
"direct": false,
"version": "2.0.3",
"ecosystem": "npm"
},
{
"name": "devlop",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "diff-sequences",
"direct": false,
"version": "29.6.3",
"ecosystem": "npm"
},
{
"name": "dunder-proto",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "eastasianwidth",
"direct": false,
"version": "0.2.0",
"ecosystem": "npm"
},
{
"name": "ecdsa-sig-formatter",
"direct": false,
"version": "1.0.11",
"ecosystem": "npm"
},
{
"name": "ee-first",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "emoji-regex",
"direct": false,
"version": "8.0.0",
"ecosystem": "npm"
},
{
"name": "emoji-regex",
"direct": false,
"version": "9.2.2",
"ecosystem": "npm"
},
{
"name": "encodeurl",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "end-of-stream",
"direct": false,
"version": "1.4.5",
"ecosystem": "npm"
},
{
"name": "es-define-property",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "es-errors",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "es-module-lexer",
"direct": false,
"version": "1.7.0",
"ecosystem": "npm"
},
{
"name": "es-object-atoms",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "esbuild",
"direct": false,
"version": "0.27.7",
"ecosystem": "npm"
},
{
"name": "escalade",
"direct": false,
"version": "3.2.0",
"ecosystem": "npm"
},
{
"name": "escape-html",
"direct": false,
"version": "1.0.3",
"ecosystem": "npm"
},
{
"name": "escape-string-regexp",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "escodegen",
"direct": false,
"version": "2.1.0",
"ecosystem": "npm"
},
{
"name": "esprima",
"direct": false,
"version": "4.0.1",
"ecosystem": "npm"
},
{
"name": "estraverse",
"direct": false,
"version": "5.3.0",
"ecosystem": "npm"
},
{
"name": "estree-walker",
"direct": false,
"version": "3.0.3",
"ecosystem": "npm"
},
{
"name": "esutils",
"direct": false,
"version": "2.0.3",
"ecosystem": "npm"
},
{
"name": "etag",
"direct": false,
"version": "1.8.1",
"ecosystem": "npm"
},
{
"name": "eventsource",
"direct": false,
"version": "3.0.7",
"ecosystem": "npm"
},
{
"name": "eventsource-parser",
"direct": false,
"version": "3.0.8",
"ecosystem": "npm"
},
{
"name": "expect",
"direct": false,
"version": "29.7.0",
"ecosystem": "npm"
},
{
"name": "expect-type",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "express",
"direct": false,
"version": "5.2.1",
"ecosystem": "npm"
},
{
"name": "express-rate-limit",
"direct": false,
"version": "8.5.1",
"ecosystem": "npm"
},
{
"name": "extend",
"direct": false,
"version": "3.0.2",
"ecosystem": "npm"
},
{
"name": "extract-zip",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "fast-deep-equal",
"direct": false,
"version": "3.1.3",
"ecosystem": "npm"
},
{
"name": "fast-string-truncated-width",
"direct": false,
"version": "3.0.3",
"ecosystem": "npm"
},
{
"name": "fast-string-width",
"direct": false,
"version": "3.0.2",
"ecosystem": "npm"
},
{
"name": "fast-uri",
"direct": false,
"version": "3.1.2",
"ecosystem": "npm"
},
{
"name": "fast-wrap-ansi",
"direct": false,
"version": "0.2.0",
"ecosystem": "npm"
},
{
"name": "fast-xml-builder",
"direct": false,
"version": "1.1.9",
"ecosystem": "npm"
},
{
"name": "fast-xml-builder",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "fast-xml-parser",
"direct": false,
"version": "5.7.2",
"ecosystem": "npm"
},
{
"name": "fast-xml-parser",
"direct": false,
"version": "5.7.3",
"ecosystem": "npm"
},
{
"name": "fd-slicer",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "fdir",
"direct": false,
"version": "6.5.0",
"ecosystem": "npm"
},
{
"name": "fetch-blob",
"direct": false,
"version": "3.2.0",
"ecosystem": "npm"
},
{
"name": "file-type",
"direct": false,
"version": "21.3.4",
"ecosystem": "npm"
},
{
"name": "fill-range",
"direct": false,
"version": "7.1.1",
"ecosystem": "npm"
},
{
"name": "finalhandler",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "foreground-child",
"direct": false,
"version": "3.3.1",
"ecosystem": "npm"
},
{
"name": "formdata-polyfill",
"direct": false,
"version": "4.0.10",
"ecosystem": "npm"
},
{
"name": "forwarded",
"direct": false,
"version": "0.2.0",
"ecosystem": "npm"
},
{
"name": "fresh",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "fsevents",
"direct": false,
"version": "2.3.2",
"ecosystem": "npm"
},
{
"name": "fsevents",
"direct": false,
"version": "2.3.3",
"ecosystem": "npm"
},
{
"name": "function-bind",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "gaxios",
"direct": false,
"version": "7.1.4",
"ecosystem": "npm"
},
{
"name": "gcp-metadata",
"direct": false,
"version": "8.1.2",
"ecosystem": "npm"
},
{
"name": "get-caller-file",
"direct": false,
"version": "2.0.5",
"ecosystem": "npm"
},
{
"name": "get-east-asian-width",
"direct": false,
"version": "1.5.0",
"ecosystem": "npm"
},
{
"name": "get-east-asian-width",
"direct": false,
"version": "1.6.0",
"ecosystem": "npm"
},
{
"name": "get-intrinsic",
"direct": false,
"version": "1.3.0",
"ecosystem": "npm"
},
{
"name": "get-proto",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "get-stream",
"direct": false,
"version": "5.2.0",
"ecosystem": "npm"
},
{
"name": "get-tsconfig",
"direct": false,
"version": "4.14.0",
"ecosystem": "npm"
},
{
"name": "get-uri",
"direct": false,
"version": "6.0.5",
"ecosystem": "npm"
},
{
"name": "glob",
"direct": false,
"version": "10.5.0",
"ecosystem": "npm"
},
{
"name": "glob",
"direct": false,
"version": "13.0.6",
"ecosystem": "npm"
},
{
"name": "google-auth-library",
"direct": false,
"version": "10.6.2",
"ecosystem": "npm"
},
{
"name": "google-logging-utils",
"direct": false,
"version": "1.1.3",
"ecosystem": "npm"
},
{
"name": "gopd",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "graceful-fs",
"direct": false,
"version": "4.2.11",
"ecosystem": "npm"
},
{
"name": "has-flag",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "has-symbols",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "hasown",
"direct": false,
"version": "2.0.3",
"ecosystem": "npm"
},
{
"name": "hast-util-to-html",
"direct": false,
"version": "9.0.5",
"ecosystem": "npm"
},
{
"name": "hast-util-whitespace",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "highlight.js",
"direct": false,
"version": "10.7.3",
"ecosystem": "npm"
},
{
"name": "hono",
"direct": false,
"version": "4.12.18",
"ecosystem": "npm"
},
{
"name": "hosted-git-info",
"direct": false,
"version": "9.0.3",
"ecosystem": "npm"
},
{
"name": "html-void-elements",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "http-errors",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "http-proxy-agent",
"direct": false,
"version": "7.0.2",
"ecosystem": "npm"
},
{
"name": "https-proxy-agent",
"direct": false,
"version": "7.0.6",
"ecosystem": "npm"
},
{
"name": "husky",
"direct": false,
"version": "9.1.7",
"ecosystem": "npm"
},
{
"name": "iconv-lite",
"direct": false,
"version": "0.7.2",
"ecosystem": "npm"
},
{
"name": "ieee754",
"direct": false,
"version": "1.2.1",
"ecosystem": "npm"
},
{
"name": "ignore",
"direct": false,
"version": "7.0.5",
"ecosystem": "npm"
},
{
"name": "inherits",
"direct": false,
"version": "2.0.4",
"ecosystem": "npm"
},
{
"name": "ip-address",
"direct": false,
"version": "10.2.0",
"ecosystem": "npm"
},
{
"name": "ipaddr.js",
"direct": false,
"version": "1.9.1",
"ecosystem": "npm"
},
{
"name": "is-docker",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "is-fullwidth-code-point",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "is-inside-container",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "is-number",
"direct": false,
"version": "7.0.0",
"ecosystem": "npm"
},
{
"name": "is-promise",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "is-wsl",
"direct": false,
"version": "3.1.1",
"ecosystem": "npm"
},
{
"name": "isexe",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "isexe",
"direct": false,
"version": "3.1.5",
"ecosystem": "npm"
},
{
"name": "jackspeak",
"direct": false,
"version": "3.4.3",
"ecosystem": "npm"
},
{
"name": "jest-diff",
"direct": false,
"version": "29.7.0",
"ecosystem": "npm"
},
{
"name": "jest-get-type",
"direct": false,
"version": "29.6.3",
"ecosystem": "npm"
},
{
"name": "jest-matcher-utils",
"direct": false,
"version": "29.7.0",
"ecosystem": "npm"
},
{
"name": "jest-message-util",
"direct": false,
"version": "29.7.0",
"ecosystem": "npm"
},
{
"name": "jest-util",
"direct": false,
"version": "29.7.0",
"ecosystem": "npm"
},
{
"name": "jiti",
"direct": false,
"version": "2.7.0",
"ecosystem": "npm"
},
{
"name": "jose",
"direct": false,
"version": "6.2.3",
"ecosystem": "npm"
},
{
"name": "js-tokens",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "js-tokens",
"direct": false,
"version": "9.0.1",
"ecosystem": "npm"
},
{
"name": "json-bigint",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "json-schema-to-ts",
"direct": false,
"version": "3.1.1",
"ecosystem": "npm"
},
{
"name": "json-schema-traverse",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "json-schema-typed",
"direct": false,
"version": "8.0.2",
"ecosystem": "npm"
},
{
"name": "jwa",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "jws",
"direct": false,
"version": "4.0.1",
"ecosystem": "npm"
},
{
"name": "koffi",
"direct": false,
"version": "2.16.2",
"ecosystem": "npm"
},
{
"name": "long",
"direct": false,
"version": "5.3.2",
"ecosystem": "npm"
},
{
"name": "loupe",
"direct": false,
"version": "3.2.1",
"ecosystem": "npm"
},
{
"name": "lru-cache",
"direct": false,
"version": "10.4.3",
"ecosystem": "npm"
},
{
"name": "lru-cache",
"direct": false,
"version": "11.3.6",
"ecosystem": "npm"
},
{
"name": "lru-cache",
"direct": false,
"version": "11.4.0",
"ecosystem": "npm"
},
{
"name": "lru-cache",
"direct": false,
"version": "7.18.3",
"ecosystem": "npm"
},
{
"name": "magic-string",
"direct": false,
"version": "0.30.21",
"ecosystem": "npm"
},
{
"name": "marked",
"direct": false,
"version": "15.0.12",
"ecosystem": "npm"
},
{
"name": "marked",
"direct": false,
"version": "18.0.5",
"ecosystem": "npm"
},
{
"name": "math-intrinsics",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "mdast-util-to-hast",
"direct": false,
"version": "13.2.1",
"ecosystem": "npm"
},
{
"name": "media-typer",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "merge-descriptors",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "micromark-util-character",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "micromark-util-encode",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "micromark-util-sanitize-uri",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "micromark-util-symbol",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "micromark-util-types",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "mime-db",
"direct": false,
"version": "1.54.0",
"ecosystem": "npm"
},
{
"name": "mime-types",
"direct": false,
"version": "3.0.2",
"ecosystem": "npm"
},
{
"name": "minimatch",
"direct": false,
"version": "10.2.5",
"ecosystem": "npm"
},
{
"name": "minimatch",
"direct": false,
"version": "9.0.9",
"ecosystem": "npm"
},
{
"name": "minipass",
"direct": false,
"version": "7.1.3",
"ecosystem": "npm"
},
{
"name": "minizlib",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "ms",
"direct": false,
"version": "2.1.3",
"ecosystem": "npm"
},
{
"name": "mz",
"direct": false,
"version": "2.7.0",
"ecosystem": "npm"
},
{
"name": "nanoid",
"direct": false,
"version": "3.3.12",
"ecosystem": "npm"
},
{
"name": "negotiator",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "netmask",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "node-addon-api",
"direct": false,
"version": "7.1.1",
"ecosystem": "npm"
},
{
"name": "node-domexception",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "node-fetch",
"direct": false,
"version": "3.3.2",
"ecosystem": "npm"
},
{
"name": "node-pty",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "node-pty",
"direct": false,
"version": "1.2.0-beta.11",
"ecosystem": "npm"
},
{
"name": "object-assign",
"direct": false,
"version": "4.1.1",
"ecosystem": "npm"
},
{
"name": "object-inspect",
"direct": false,
"version": "1.13.4",
"ecosystem": "npm"
},
{
"name": "on-finished",
"direct": false,
"version": "2.4.1",
"ecosystem": "npm"
},
{
"name": "once",
"direct": false,
"version": "1.4.0",
"ecosystem": "npm"
},
{
"name": "oniguruma-parser",
"direct": false,
"version": "0.12.2",
"ecosystem": "npm"
},
{
"name": "oniguruma-to-es",
"direct": false,
"version": "4.3.6",
"ecosystem": "npm"
},
{
"name": "openai",
"direct": false,
"version": "6.26.0",
"ecosystem": "npm"
},
{
"name": "p-retry",
"direct": false,
"version": "4.6.2",
"ecosystem": "npm"
},
{
"name": "pac-proxy-agent",
"direct": false,
"version": "7.2.0",
"ecosystem": "npm"
},
{
"name": "pac-resolver",
"direct": false,
"version": "7.0.1",
"ecosystem": "npm"
},
{
"name": "package-json-from-dist",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "parse-ms",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "parse5",
"direct": false,
"version": "5.1.1",
"ecosystem": "npm"
},
{
"name": "parse5",
"direct": false,
"version": "6.0.1",
"ecosystem": "npm"
},
{
"name": "parse5-htmlparser2-tree-adapter",
"direct": false,
"version": "6.0.1",
"ecosystem": "npm"
},
{
"name": "parseurl",
"direct": false,
"version": "1.3.3",
"ecosystem": "npm"
},
{
"name": "partial-json",
"direct": false,
"version": "0.1.7",
"ecosystem": "npm"
},
{
"name": "path-expression-matcher",
"direct": false,
"version": "1.5.0",
"ecosystem": "npm"
},
{
"name": "path-key",
"direct": false,
"version": "3.1.1",
"ecosystem": "npm"
},
{
"name": "path-scurry",
"direct": false,
"version": "1.11.1",
"ecosystem": "npm"
},
{
"name": "path-scurry",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "path-to-regexp",
"direct": false,
"version": "8.4.2",
"ecosystem": "npm"
},
{
"name": "pathe",
"direct": false,
"version": "2.0.3",
"ecosystem": "npm"
},
{
"name": "pathval",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "pend",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "picocolors",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "picomatch",
"direct": false,
"version": "2.3.2",
"ecosystem": "npm"
},
{
"name": "picomatch",
"direct": false,
"version": "4.0.4",
"ecosystem": "npm"
},
{
"name": "pkce-challenge",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "playwright",
"direct": false,
"version": "1.59.1",
"ecosystem": "npm"
},
{
"name": "playwright-core",
"direct": false,
"version": "1.59.1",
"ecosystem": "npm"
},
{
"name": "postcss",
"direct": false,
"version": "8.5.14",
"ecosystem": "npm"
},
{
"name": "pretty-format",
"direct": false,
"version": "29.7.0",
"ecosystem": "npm"
},
{
"name": "pretty-ms",
"direct": false,
"version": "8.0.0",
"ecosystem": "npm"
},
{
"name": "property-information",
"direct": false,
"version": "7.1.0",
"ecosystem": "npm"
},
{
"name": "protobufjs",
"direct": false,
"version": "7.5.6",
"ecosystem": "npm"
},
{
"name": "protobufjs",
"direct": false,
"version": "7.5.9",
"ecosystem": "npm"
},
{
"name": "proxy-addr",
"direct": false,
"version": "2.0.7",
"ecosystem": "npm"
},
{
"name": "proxy-agent",
"direct": false,
"version": "6.5.0",
"ecosystem": "npm"
},
{
"name": "proxy-from-env",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "pump",
"direct": false,
"version": "3.0.4",
"ecosystem": "npm"
},
{
"name": "qs",
"direct": false,
"version": "6.15.1",
"ecosystem": "npm"
},
{
"name": "range-parser",
"direct": false,
"version": "1.2.1",
"ecosystem": "npm"
},
{
"name": "raw-body",
"direct": false,
"version": "3.0.2",
"ecosystem": "npm"
},
{
"name": "react-is",
"direct": false,
"version": "18.3.1",
"ecosystem": "npm"
},
{
"name": "regex",
"direct": false,
"version": "6.1.0",
"ecosystem": "npm"
},
{
"name": "regex-recursion",
"direct": false,
"version": "6.0.2",
"ecosystem": "npm"
},
{
"name": "regex-utilities",
"direct": false,
"version": "2.3.0",
"ecosystem": "npm"
},
{
"name": "require-directory",
"direct": false,
"version": "2.1.1",
"ecosystem": "npm"
},
{
"name": "require-from-string",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "resolve-pkg-maps",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "retry",
"direct": false,
"version": "0.12.0",
"ecosystem": "npm"
},
{
"name": "retry",
"direct": false,
"version": "0.13.1",
"ecosystem": "npm"
},
{
"name": "rollup",
"direct": false,
"version": "4.60.3",
"ecosystem": "npm"
},
{
"name": "router",
"direct": false,
"version": "2.2.0",
"ecosystem": "npm"
},
{
"name": "run-applescript",
"direct": false,
"version": "7.1.0",
"ecosystem": "npm"
},
{
"name": "safe-buffer",
"direct": false,
"version": "5.2.1",
"ecosystem": "npm"
},
{
"name": "safer-buffer",
"direct": false,
"version": "2.1.2",
"ecosystem": "npm"
},
{
"name": "semver",
"direct": false,
"version": "7.8.0",
"ecosystem": "npm"
},
{
"name": "send",
"direct": false,
"version": "1.2.1",
"ecosystem": "npm"
},
{
"name": "serve-static",
"direct": false,
"version": "2.2.1",
"ecosystem": "npm"
},
{
"name": "setprototypeof",
"direct": false,
"version": "1.2.0",
"ecosystem": "npm"
},
{
"name": "shebang-command",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "shebang-regex",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "side-channel",
"direct": false,
"version": "1.1.0",
"ecosystem": "npm"
},
{
"name": "side-channel-list",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "side-channel-map",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "side-channel-weakmap",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "siginfo",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "signal-exit",
"direct": false,
"version": "3.0.7",
"ecosystem": "npm"
},
{
"name": "signal-exit",
"direct": false,
"version": "4.1.0",
"ecosystem": "npm"
},
{
"name": "sisteransi",
"direct": false,
"version": "1.0.5",
"ecosystem": "npm"
},
{
"name": "slash",
"direct": false,
"version": "3.0.0",
"ecosystem": "npm"
},
{
"name": "smart-buffer",
"direct": false,
"version": "4.2.0",
"ecosystem": "npm"
},
{
"name": "socks",
"direct": false,
"version": "2.8.8",
"ecosystem": "npm"
},
{
"name": "socks-proxy-agent",
"direct": false,
"version": "8.0.5",
"ecosystem": "npm"
},
{
"name": "source-map",
"direct": false,
"version": "0.6.1",
"ecosystem": "npm"
},
{
"name": "source-map-js",
"direct": false,
"version": "1.2.1",
"ecosystem": "npm"
},
{
"name": "space-separated-tokens",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "stack-utils",
"direct": false,
"version": "2.0.6",
"ecosystem": "npm"
},
{
"name": "stackback",
"direct": false,
"version": "0.0.2",
"ecosystem": "npm"
},
{
"name": "statuses",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "std-env",
"direct": false,
"version": "3.10.0",
"ecosystem": "npm"
},
{
"name": "string-similarity",
"direct": false,
"version": "4.0.4",
"ecosystem": "npm"
},
{
"name": "string-width",
"direct": false,
"version": "4.2.3",
"ecosystem": "npm"
},
{
"name": "string-width",
"direct": false,
"version": "5.1.2",
"ecosystem": "npm"
},
{
"name": "stringify-entities",
"direct": false,
"version": "4.0.4",
"ecosystem": "npm"
},
{
"name": "strip-ansi",
"direct": false,
"version": "6.0.1",
"ecosystem": "npm"
},
{
"name": "strip-ansi",
"direct": false,
"version": "7.2.0",
"ecosystem": "npm"
},
{
"name": "strip-literal",
"direct": false,
"version": "3.1.0",
"ecosystem": "npm"
},
{
"name": "strnum",
"direct": false,
"version": "2.2.3",
"ecosystem": "npm"
},
{
"name": "strnum",
"direct": false,
"version": "2.3.0",
"ecosystem": "npm"
},
{
"name": "strtok3",
"direct": false,
"version": "10.3.5",
"ecosystem": "npm"
},
{
"name": "supports-color",
"direct": false,
"version": "10.2.2",
"ecosystem": "npm"
},
{
"name": "supports-color",
"direct": false,
"version": "7.2.0",
"ecosystem": "npm"
},
{
"name": "thenify",
"direct": false,
"version": "3.3.1",
"ecosystem": "npm"
},
{
"name": "thenify-all",
"direct": false,
"version": "1.6.0",
"ecosystem": "npm"
},
{
"name": "tinybench",
"direct": false,
"version": "2.9.0",
"ecosystem": "npm"
},
{
"name": "tinyexec",
"direct": false,
"version": "0.3.2",
"ecosystem": "npm"
},
{
"name": "tinyglobby",
"direct": false,
"version": "0.2.16",
"ecosystem": "npm"
},
{
"name": "tinypool",
"direct": false,
"version": "1.1.1",
"ecosystem": "npm"
},
{
"name": "tinyrainbow",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "tinyspy",
"direct": false,
"version": "4.0.4",
"ecosystem": "npm"
},
{
"name": "to-regex-range",
"direct": false,
"version": "5.0.1",
"ecosystem": "npm"
},
{
"name": "toidentifier",
"direct": false,
"version": "1.0.1",
"ecosystem": "npm"
},
{
"name": "token-types",
"direct": false,
"version": "6.1.2",
"ecosystem": "npm"
},
{
"name": "trim-lines",
"direct": false,
"version": "3.0.1",
"ecosystem": "npm"
},
{
"name": "ts-algebra",
"direct": false,
"version": "2.0.0",
"ecosystem": "npm"
},
{
"name": "tslib",
"direct": false,
"version": "2.8.1",
"ecosystem": "npm"
},
{
"name": "tsx",
"direct": false,
"version": "4.21.0",
"ecosystem": "npm"
},
{
"name": "turndown",
"direct": false,
"version": "7.2.4",
"ecosystem": "npm"
},
{
"name": "tweetnacl",
"direct": false,
"version": "0.14.5",
"ecosystem": "npm"
},
{
"name": "type-is",
"direct": false,
"version": "2.0.1",
"ecosystem": "npm"
},
{
"name": "typebox",
"direct": false,
"version": "1.1.38",
"ecosystem": "npm"
},
{
"name": "typescript",
"direct": false,
"version": "5.9.3",
"ecosystem": "npm"
},
{
"name": "uint8array-extras",
"direct": false,
"version": "1.5.0",
"ecosystem": "npm"
},
{
"name": "undici-types",
"direct": false,
"version": "5.26.5",
"ecosystem": "npm"
},
{
"name": "undici-types",
"direct": false,
"version": "6.21.0",
"ecosystem": "npm"
},
{
"name": "unist-util-is",
"direct": false,
"version": "6.0.1",
"ecosystem": "npm"
},
{
"name": "unist-util-position",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "unist-util-stringify-position",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "unist-util-visit",
"direct": false,
"version": "5.1.0",
"ecosystem": "npm"
},
{
"name": "unist-util-visit-parents",
"direct": false,
"version": "6.0.2",
"ecosystem": "npm"
},
{
"name": "unpipe",
"direct": false,
"version": "1.0.0",
"ecosystem": "npm"
},
{
"name": "vary",
"direct": false,
"version": "1.1.2",
"ecosystem": "npm"
},
{
"name": "vfile",
"direct": false,
"version": "6.0.3",
"ecosystem": "npm"
},
{
"name": "vfile-message",
"direct": false,
"version": "4.0.3",
"ecosystem": "npm"
},
{
"name": "vite",
"direct": false,
"version": "7.3.3",
"ecosystem": "npm"
},
{
"name": "vite-node",
"direct": false,
"version": "3.2.4",
"ecosystem": "npm"
},
{
"name": "vitest",
"direct": false,
"version": "3.2.4",
"ecosystem": "npm"
},
{
"name": "web-streams-polyfill",
"direct": false,
"version": "3.3.3",
"ecosystem": "npm"
},
{
"name": "which",
"direct": false,
"version": "2.0.2",
"ecosystem": "npm"
},
{
"name": "which",
"direct": false,
"version": "4.0.0",
"ecosystem": "npm"
},
{
"name": "why-is-node-running",
"direct": false,
"version": "2.3.0",
"ecosystem": "npm"
},
{
"name": "workerpool",
"direct": false,
"version": "9.3.4",
"ecosystem": "npm"
},
{
"name": "wrap-ansi",
"direct": false,
"version": "7.0.0",
"ecosystem": "npm"
},
{
"name": "wrap-ansi",
"direct": false,
"version": "8.1.0",
"ecosystem": "npm"
},
{
"name": "wrappy",
"direct": false,
"version": "1.0.2",
"ecosystem": "npm"
},
{
"name": "ws",
"direct": false,
"version": "8.20.0",
"ecosystem": "npm"
},
{
"name": "ws",
"direct": false,
"version": "8.20.1",
"ecosystem": "npm"
},
{
"name": "wsl-utils",
"direct": false,
"version": "0.1.0",
"ecosystem": "npm"
},
{
"name": "xml-naming",
"direct": false,
"version": "0.1.0",
"ecosystem": "npm"
},
{
"name": "y18n",
"direct": false,
"version": "5.0.8",
"ecosystem": "npm"
},
{
"name": "yallist",
"direct": false,
"version": "5.0.0",
"ecosystem": "npm"
},
{
"name": "yargs",
"direct": false,
"version": "16.2.0",
"ecosystem": "npm"
},
{
"name": "yargs-parser",
"direct": false,
"version": "20.2.9",
"ecosystem": "npm"
},
{
"name": "yauzl",
"direct": false,
"version": "2.10.0",
"ecosystem": "npm"
},
{
"name": "yoctocolors",
"direct": false,
"version": "2.1.2",
"ecosystem": "npm"
},
{
"name": "zod-to-json-schema",
"direct": false,
"version": "3.25.2",
"ecosystem": "npm"
},
{
"name": "zwitch",
"direct": false,
"version": "2.0.4",
"ecosystem": "npm"
},
{
"name": "aiohappyeyeballs",
"direct": false,
"version": "2.6.1",
"ecosystem": "pypi"
},
{
"name": "aiohttp",
"direct": false,
"version": "3.13.5",
"ecosystem": "pypi"
},
{
"name": "aiosignal",
"direct": false,
"version": "1.4.0",
"ecosystem": "pypi"
},
{
"name": "annotated-doc",
"direct": false,
"version": "0.0.4",
"ecosystem": "pypi"
},
{
"name": "annotated-types",
"direct": false,
"version": "0.7.0",
"ecosystem": "pypi"
},
{
"name": "anyio",
"direct": false,
"version": "4.13.0",
"ecosystem": "pypi"
},
{
"name": "attrs",
"direct": false,
"version": "26.1.0",
"ecosystem": "pypi"
},
{
"name": "cachetools",
"direct": false,
"version": "6.2.6",
"ecosystem": "pypi"
},
{
"name": "certifi",
"direct": false,
"version": "2026.2.25",
"ecosystem": "pypi"
},
{
"name": "cffi",
"direct": false,
"version": "2.0.0",
"ecosystem": "pypi"
},
{
"name": "charset-normalizer",
"direct": false,
"version": "3.4.7",
"ecosystem": "pypi"
},
{
"name": "claude-agent-sdk",
"direct": false,
"version": "0.1.63",
"ecosystem": "pypi"
},
{
"name": "click",
"direct": false,
"version": "8.3.2",
"ecosystem": "pypi"
},
{
"name": "colorama",
"direct": false,
"version": "0.4.6",
"ecosystem": "pypi"
},
{
"name": "cryptography",
"direct": false,
"version": "46.0.7",
"ecosystem": "pypi"
},
{
"name": "datasets",
"direct": false,
"version": "4.8.4",
"ecosystem": "pypi"
},
{
"name": "deprecation",
"direct": false,
"version": "2.1.0",
"ecosystem": "pypi"
},
{
"name": "dill",
"direct": false,
"version": "0.4.1",
"ecosystem": "pypi"
},
{
"name": "dirhash",
"direct": false,
"version": "0.5.0",
"ecosystem": "pypi"
},
{
"name": "distro",
"direct": false,
"version": "1.9.0",
"ecosystem": "pypi"
},
{
"name": "fastapi",
"direct": false,
"version": "0.136.0",
"ecosystem": "pypi"
},
{
"name": "fastuuid",
"direct": false,
"version": "0.14.0",
"ecosystem": "pypi"
},
{
"name": "filelock",
"direct": false,
"version": "3.28.0",
"ecosystem": "pypi"
},
{
"name": "frozenlist",
"direct": false,
"version": "1.8.0",
"ecosystem": "pypi"
},
{
"name": "fsspec",
"direct": false,
"version": "2026.2.0",
"ecosystem": "pypi"
},
{
"name": "h11",
"direct": false,
"version": "0.16.0",
"ecosystem": "pypi"
},
{
"name": "h2",
"direct": false,
"version": "4.3.0",
"ecosystem": "pypi"
},
{
"name": "harbor",
"direct": false,
"version": "0.4.0",
"ecosystem": "pypi"
},
{
"name": "hf-xet",
"direct": false,
"version": "1.4.3",
"ecosystem": "pypi"
},
{
"name": "hpack",
"direct": false,
"version": "4.1.0",
"ecosystem": "pypi"
},
{
"name": "httpcore",
"direct": false,
"version": "1.0.9",
"ecosystem": "pypi"
},
{
"name": "httpx",
"direct": false,
"version": "0.28.1",
"ecosystem": "pypi"
},
{
"name": "httpx-sse",
"direct": false,
"version": "0.4.3",
"ecosystem": "pypi"
},
{
"name": "huggingface-hub",
"direct": false,
"version": "1.11.0",
"ecosystem": "pypi"
},
{
"name": "hyperframe",
"direct": false,
"version": "6.1.0",
"ecosystem": "pypi"
},
{
"name": "idna",
"direct": false,
"version": "3.11",
"ecosystem": "pypi"
},
{
"name": "importlib-metadata",
"direct": false,
"version": "9.0.0",
"ecosystem": "pypi"
},
{
"name": "jinja2",
"direct": false,
"version": "3.1.6",
"ecosystem": "pypi"
},
{
"name": "jiter",
"direct": false,
"version": "0.14.0",
"ecosystem": "pypi"
},
{
"name": "jsonschema",
"direct": false,
"version": "4.26.0",
"ecosystem": "pypi"
},
{
"name": "jsonschema-specifications",
"direct": false,
"version": "2025.9.1",
"ecosystem": "pypi"
},
{
"name": "kimchi-agent",
"direct": false,
"version": "0.1.0",
"ecosystem": "pypi"
},
{
"name": "litellm",
"direct": false,
"version": "1.83.0",
"ecosystem": "pypi"
},
{
"name": "markdown-it-py",
"direct": false,
"version": "4.0.0",
"ecosystem": "pypi"
},
{
"name": "markupsafe",
"direct": false,
"version": "3.0.3",
"ecosystem": "pypi"
},
{
"name": "mcp",
"direct": false,
"version": "1.27.0",
"ecosystem": "pypi"
},
{
"name": "mdurl",
"direct": false,
"version": "0.1.2",
"ecosystem": "pypi"
},
{
"name": "mmh3",
"direct": false,
"version": "5.2.1",
"ecosystem": "pypi"
},
{
"name": "multidict",
"direct": false,
"version": "6.7.1",
"ecosystem": "pypi"
},
{
"name": "multiprocess",
"direct": false,
"version": "0.70.19",
"ecosystem": "pypi"
},
{
"name": "numpy",
"direct": false,
"version": "2.4.4",
"ecosystem": "pypi"
},
{
"name": "openai",
"direct": false,
"version": "2.32.0",
"ecosystem": "pypi"
},
{
"name": "packaging",
"direct": false,
"version": "26.1",
"ecosystem": "pypi"
},
{
"name": "pandas",
"direct": false,
"version": "3.0.2",
"ecosystem": "pypi"
},
{
"name": "pathspec",
"direct": false,
"version": "1.0.4",
"ecosystem": "pypi"
},
{
"name": "postgrest",
"direct": false,
"version": "2.28.3",
"ecosystem": "pypi"
},
{
"name": "propcache",
"direct": false,
"version": "0.4.1",
"ecosystem": "pypi"
},
{
"name": "pyarrow",
"direct": false,
"version": "23.0.1",
"ecosystem": "pypi"
},
{
"name": "pycparser",
"direct": false,
"version": "3.0",
"ecosystem": "pypi"
},
{
"name": "pydantic",
"direct": false,
"version": "2.13.2",
"ecosystem": "pypi"
},
{
"name": "pydantic-core",
"direct": false,
"version": "2.46.2",
"ecosystem": "pypi"
},
{
"name": "pydantic-settings",
"direct": false,
"version": "2.13.1",
"ecosystem": "pypi"
},
{
"name": "pygments",
"direct": false,
"version": "2.20.0",
"ecosystem": "pypi"
},
{
"name": "pyiceberg",
"direct": false,
"version": "0.11.1",
"ecosystem": "pypi"
},
{
"name": "pyjwt",
"direct": false,
"version": "2.12.1",
"ecosystem": "pypi"
},
{
"name": "pyparsing",
"direct": false,
"version": "3.3.2",
"ecosystem": "pypi"
},
{
"name": "pyroaring",
"direct": false,
"version": "1.0.4",
"ecosystem": "pypi"
},
{
"name": "python-dateutil",
"direct": false,
"version": "2.9.0.post0",
"ecosystem": "pypi"
},
{
"name": "python-dotenv",
"direct": false,
"version": "1.2.2",
"ecosystem": "pypi"
},
{
"name": "python-multipart",
"direct": false,
"version": "0.0.26",
"ecosystem": "pypi"
},
{
"name": "pywin32",
"direct": false,
"version": "311",
"ecosystem": "pypi"
},
{
"name": "pyyaml",
"direct": false,
"version": "6.0.3",
"ecosystem": "pypi"
},
{
"name": "realtime",
"direct": false,
"version": "2.28.3",
"ecosystem": "pypi"
},
{
"name": "referencing",
"direct": false,
"version": "0.37.0",
"ecosystem": "pypi"
},
{
"name": "regex",
"direct": false,
"version": "2026.4.4",
"ecosystem": "pypi"
},
{
"name": "requests",
"direct": false,
"version": "2.33.1",
"ecosystem": "pypi"
},
{
"name": "rich",
"direct": false,
"version": "14.3.4",
"ecosystem": "pypi"
},
{
"name": "rpds-py",
"direct": false,
"version": "0.30.0",
"ecosystem": "pypi"
},
{
"name": "ruff",
"direct": false,
"version": "0.15.11",
"ecosystem": "pypi"
},
{
"name": "scantree",
"direct": false,
"version": "0.0.4",
"ecosystem": "pypi"
},
{
"name": "shellingham",
"direct": false,
"version": "1.5.4",
"ecosystem": "pypi"
},
{
"name": "shortuuid",
"direct": false,
"version": "1.0.13",
"ecosystem": "pypi"
},
{
"name": "six",
"direct": false,
"version": "1.17.0",
"ecosystem": "pypi"
},
{
"name": "sniffio",
"direct": false,
"version": "1.3.1",
"ecosystem": "pypi"
},
{
"name": "sse-starlette",
"direct": false,
"version": "3.3.4",
"ecosystem": "pypi"
},
{
"name": "starlette",
"direct": false,
"version": "1.0.0",
"ecosystem": "pypi"
},
{
"name": "storage3",
"direct": false,
"version": "2.28.3",
"ecosystem": "pypi"
},
{
"name": "strenum",
"direct": false,
"version": "0.4.15",
"ecosystem": "pypi"
},
{
"name": "strictyaml",
"direct": false,
"version": "1.7.3",
"ecosystem": "pypi"
},
{
"name": "supabase",
"direct": false,
"version": "2.28.3",
"ecosystem": "pypi"
},
{
"name": "supabase-auth",
"direct": false,
"version": "2.28.3",
"ecosystem": "pypi"
},
{
"name": "supabase-functions",
"direct": false,
"version": "2.28.3",
"ecosystem": "pypi"
},
{
"name": "tenacity",
"direct": false,
"version": "9.1.4",
"ecosystem": "pypi"
},
{
"name": "tiktoken",
"direct": false,
"version": "0.12.0",
"ecosystem": "pypi"
},
{
"name": "tokenizers",
"direct": false,
"version": "0.22.2",
"ecosystem": "pypi"
},
{
"name": "toml",
"direct": false,
"version": "0.10.2",
"ecosystem": "pypi"
},
{
"name": "tqdm",
"direct": false,
"version": "4.67.3",
"ecosystem": "pypi"
},
{
"name": "typer",
"direct": false,
"version": "0.24.1",
"ecosystem": "pypi"
},
{
"name": "typing-extensions",
"direct": false,
"version": "4.15.0",
"ecosystem": "pypi"
},
{
"name": "typing-inspection",
"direct": false,
"version": "0.4.2",
"ecosystem": "pypi"
},
{
"name": "tzdata",
"direct": false,
"version": "2026.1",
"ecosystem": "pypi"
},
{
"name": "urllib3",
"direct": false,
"version": "2.6.3",
"ecosystem": "pypi"
},
{
"name": "uv-build",
"direct": false,
"version": null,
"ecosystem": "pypi"
},
{
"name": "uvicorn",
"direct": false,
"version": "0.44.0",
"ecosystem": "pypi"
},
{
"name": "websockets",
"direct": false,
"version": "15.0.1",
"ecosystem": "pypi"
},
{
"name": "xxhash",
"direct": false,
"version": "3.6.0",
"ecosystem": "pypi"
},
{
"name": "yarl",
"direct": false,
"version": "1.23.0",
"ecosystem": "pypi"
},
{
"name": "zipp",
"direct": false,
"version": "3.23.1",
"ecosystem": "pypi"
},
{
"name": "zstandard",
"direct": false,
"version": "0.25.0",
"ecosystem": "pypi"
}
],
"collected": true,
"truncated": false,
"total_count": 820,
"direct_count": 33,
"indirect_count": 787
}
},
"maintainership": {
"issues": {
"open_prs": 32,
"merged_prs": 688,
"open_issues": 39,
"closed_ratio": 0.541,
"closed_issues": 46,
"closed_unmerged_prs": 116
},
"bus_factor": 5,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "pmateusz",
"commits": 112,
"avatar_url": "https://avatars.githubusercontent.com/u/6845320?v=4"
},
{
"type": "User",
"login": "krzysztofreczek",
"commits": 94,
"avatar_url": "https://avatars.githubusercontent.com/u/5250697?v=4"
},
{
"type": "User",
"login": "mikenorgate",
"commits": 83,
"avatar_url": "https://avatars.githubusercontent.com/u/2479870?v=4"
},
{
"type": "User",
"login": "castabar",
"commits": 51,
"avatar_url": "https://avatars.githubusercontent.com/u/230999653?v=4"
},
{
"type": "User",
"login": "tautvydasLiekis",
"commits": 44,
"avatar_url": "https://avatars.githubusercontent.com/u/62600250?v=4"
},
{
"type": "User",
"login": "kodburn",
"commits": 33,
"avatar_url": "https://avatars.githubusercontent.com/u/10180759?v=4"
},
{
"type": "User",
"login": "pbrczan",
"commits": 23,
"avatar_url": "https://avatars.githubusercontent.com/u/278408013?v=4"
},
{
"type": "User",
"login": "Zilv1nas",
"commits": 23,
"avatar_url": "https://avatars.githubusercontent.com/u/13708871?v=4"
},
{
"type": "User",
"login": "kiriloman",
"commits": 18,
"avatar_url": "https://avatars.githubusercontent.com/u/13869306?v=4"
},
{
"type": "User",
"login": "vmizg",
"commits": 17,
"avatar_url": "https://avatars.githubusercontent.com/u/9007308?v=4"
}
],
"contributors_sampled": 49,
"top_contributor_share": 0.162
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"acp-e2e.yml",
"arc-terminal-bench-poc.yml",
"auto-label-pr.yml",
"canary.yml",
"ci.yml",
"close-stale.yml",
"release.yml",
"require-linked-issue.yml",
"stale.yml",
"tui-e2e.yml",
"welcome.yml"
],
"has_docs_dir": true,
"linter_configs": [
"biome.json"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum",
"package-lock.json",
"pnpm-lock.yaml",
"uv.lock"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 9,
"reason": "binaries present in source code",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 6,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 9,
"reason": "29 out of 30 merged PRs checked by a CI test -- score normalized to 9",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 10,
"reason": "all changesets reviewed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 6 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "77 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "5f5ff385b59fd455c133bffbea9d78324ca5b58b",
"ran_at": "2026-07-27T02:54:07Z",
"aggregate_score": 4.8,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-26T19:09:11Z",
"oldest_open_prs": [
{
"number": 552,
"created_at": "2026-06-10T04:30:01Z",
"last_comment_at": "2026-06-10T04:30:04Z",
"last_comment_author": "readme-ai-writer"
},
{
"number": 564,
"created_at": "2026-06-11T04:46:01Z",
"last_comment_at": "2026-06-19T05:52:33Z",
"last_comment_author": "kr3shna"
},
{
"number": 586,
"created_at": "2026-06-14T15:41:37Z",
"last_comment_at": "2026-06-14T15:41:40Z",
"last_comment_author": "readme-ai-writer"
},
{
"number": 625,
"created_at": "2026-06-18T07:57:39Z",
"last_comment_at": "2026-06-18T07:57:45Z",
"last_comment_author": "kimchi-review"
},
{
"number": 632,
"created_at": "2026-06-18T13:08:03Z",
"last_comment_at": "2026-07-25T04:42:18Z",
"last_comment_author": "github-actions"
},
{
"number": 644,
"created_at": "2026-06-19T13:19:56Z",
"last_comment_at": "2026-07-25T04:42:17Z",
"last_comment_author": "github-actions"
},
{
"number": 664,
"created_at": "2026-06-22T14:43:28Z",
"last_comment_at": "2026-07-25T04:42:15Z",
"last_comment_author": "github-actions"
},
{
"number": 688,
"created_at": "2026-06-25T02:20:44Z",
"last_comment_at": "2026-07-25T04:42:14Z",
"last_comment_author": "github-actions"
},
{
"number": 689,
"created_at": "2026-06-25T06:31:18Z",
"last_comment_at": "2026-07-24T04:47:14Z",
"last_comment_author": "github-actions"
},
{
"number": 690,
"created_at": "2026-06-25T07:00:56Z",
"last_comment_at": "2026-07-24T04:47:12Z",
"last_comment_author": "github-actions"
},
{
"number": 700,
"created_at": "2026-06-25T12:53:08Z",
"last_comment_at": "2026-07-24T04:47:11Z",
"last_comment_author": "github-actions"
},
{
"number": 721,
"created_at": "2026-06-26T18:33:22Z",
"last_comment_at": "2026-07-24T04:47:09Z",
"last_comment_author": "github-actions"
},
{
"number": 735,
"created_at": "2026-06-29T15:50:38Z",
"last_comment_at": "2026-07-24T04:47:07Z",
"last_comment_author": "github-actions"
},
{
"number": 763,
"created_at": "2026-07-01T15:11:31Z",
"last_comment_at": "2026-07-24T04:47:05Z",
"last_comment_author": "github-actions"
},
{
"number": 801,
"created_at": "2026-07-06T14:47:48Z",
"last_comment_at": "2026-07-24T04:47:03Z",
"last_comment_author": "github-actions"
},
{
"number": 809,
"created_at": "2026-07-07T11:37:23Z",
"last_comment_at": "2026-07-13T07:09:14Z",
"last_comment_author": "Tsonov"
},
{
"number": 818,
"created_at": "2026-07-08T12:18:18Z",
"last_comment_at": "2026-07-24T04:47:02Z",
"last_comment_author": "github-actions"
},
{
"number": 854,
"created_at": "2026-07-14T14:25:24Z",
"last_comment_at": "2026-07-14T14:25:27Z",
"last_comment_author": "kimchi-review"
},
{
"number": 867,
"created_at": "2026-07-16T08:02:39Z",
"last_comment_at": "2026-07-16T08:02:42Z",
"last_comment_author": "kimchi-review"
},
{
"number": 879,
"created_at": "2026-07-17T09:45:57Z",
"last_comment_at": "2026-07-17T09:46:01Z",
"last_comment_author": "kimchi-review"
}
],
"last_merged_pr_at": "2026-07-24T15:09:04Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 446,
"created_at": "2026-05-28T15:57:31Z",
"last_comment_at": "2026-06-05T11:41:29Z",
"last_comment_author": "rohitg00"
},
{
"number": 448,
"created_at": "2026-05-28T15:57:34Z",
"last_comment_at": "2026-06-05T11:42:03Z",
"last_comment_author": "iamhatesz"
},
{
"number": 453,
"created_at": "2026-05-29T10:59:20Z",
"last_comment_at": "2026-06-08T15:45:32Z",
"last_comment_author": "castabar"
},
{
"number": 455,
"created_at": "2026-05-29T11:24:32Z",
"last_comment_at": "2026-06-09T05:23:35Z",
"last_comment_author": "moKshagna-p"
},
{
"number": 520,
"created_at": "2026-06-04T18:11:38Z",
"last_comment_at": "2026-06-05T11:50:48Z",
"last_comment_author": "iamhatesz"
},
{
"number": 535,
"created_at": "2026-06-06T07:06:08Z",
"last_comment_at": "2026-06-08T07:30:00Z",
"last_comment_author": "iamhatesz"
},
{
"number": 538,
"created_at": "2026-06-07T03:02:46Z",
"last_comment_at": "2026-06-08T09:26:07Z",
"last_comment_author": "iamhatesz"
},
{
"number": 541,
"created_at": "2026-06-07T14:47:25Z",
"last_comment_at": "2026-06-08T09:27:37Z",
"last_comment_author": "iamhatesz"
},
{
"number": 546,
"created_at": "2026-06-09T04:25:29Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 555,
"created_at": "2026-06-10T05:38:19Z",
"last_comment_at": "2026-06-11T13:05:09Z",
"last_comment_author": "arnasnn"
},
{
"number": 560,
"created_at": "2026-06-10T11:49:54Z",
"last_comment_at": "2026-07-21T21:25:55Z",
"last_comment_author": "VaishnaviKumar0704"
},
{
"number": 580,
"created_at": "2026-06-12T12:59:41Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 585,
"created_at": "2026-06-12T22:14:18Z",
"last_comment_at": "2026-06-18T05:32:41Z",
"last_comment_author": "UndeadRat22"
},
{
"number": 604,
"created_at": "2026-06-16T06:31:21Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 618,
"created_at": "2026-06-17T12:45:57Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 636,
"created_at": "2026-06-19T04:34:09Z",
"last_comment_at": "2026-07-02T12:00:05Z",
"last_comment_author": "BikramGole"
},
{
"number": 652,
"created_at": "2026-06-21T14:09:48Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 667,
"created_at": "2026-06-22T17:51:51Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 677,
"created_at": "2026-06-23T12:39:35Z",
"last_comment_at": "2026-06-25T07:07:28Z",
"last_comment_author": "vmizg"
},
{
"number": 680,
"created_at": "2026-06-23T22:14:06Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/getkimchi/kimchi",
"host": "github.com",
"name": "kimchi",
"owner": "getkimchi"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": null,
"notes": [],
"value": 74,
"inputs": {
"security": 50,
"vitality": 81,
"community": 82,
"governance": 70,
"engineering": 81
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 81,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"commits_last_year": 693,
"human_commit_share": 1,
"days_since_last_push": 0,
"active_weeks_last_year": 16
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "16/52 weeks with commits",
"points": 11.1,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 16
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "693 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 693
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 100,
"latest_release_tag": "canary",
"releases_from_tags": false,
"days_since_latest_release": 2,
"mean_days_between_releases": 1.1
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "100 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 100
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 2 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 2
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~1.1 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 1.1
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "good",
"name": "Community & Adoption",
"value": 82,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "good",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 74,
"inputs": {
"forks": 122,
"stars": 2149,
"watchers": 4,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "2,149 stars",
"points": 54,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 2149
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "122 forks",
"points": 17.4,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 122
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "4 watchers",
"points": 2.7,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 4
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "excellent",
"name": "Community health",
"note": null,
"notes": [],
"value": 92,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "good",
"name": "Sustainability & Governance",
"value": 70,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "excellent",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 88,
"inputs": {
"bus_factor": 5,
"contributors_sampled": 49,
"top_contributor_share": 0.162
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "5 contributor(s) cover half of all commits",
"points": 45.9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 5
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 16% of commits",
"points": 18.9,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 16
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "49 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 49
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 6 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 73,
"inputs": {
"merged_prs": 688,
"open_issues": 39,
"closed_issues": 46,
"issue_closed_ratio": 0.541,
"closed_unmerged_prs": 116
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "54% of issues closed",
"points": 25.3,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 54
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "688/804 decided PRs merged",
"points": 32.7,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 688,
"decided": 804
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "all changesets reviewed",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 45,
"inputs": {
"followers": 36,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "getkimchi",
"public_repos": 2,
"account_age_days": 65
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "36 followers of getkimchi",
"points": 11.3,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 36,
"login": "getkimchi"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "2 public repos, account ~0 yr old",
"points": 3.8,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 2
}
},
{
"code": "account_age_years",
"params": {
"years": 0
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 81,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "11 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 11
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "biome.json",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "biome.json"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "29 out of 30 merged PRs checked by a CI test -- score normalized to 9",
"points": 18,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": "https://kimchi.dev",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://kimchi.dev",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 50,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 48,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 4.8
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "binaries present in source code",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "29 out of 30 merged PRs checked by a CI test -- score normalized to 9",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "all changesets reviewed",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 6 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "77 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "moderate",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories. Remaining weights renormalized. Matched 819 resolved dependencies against OSV; 1 could not be assessed (no resolved version, an unsupported ecosystem, or beyond the reported package list). This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"indirect_dependencies_free_of_known_advisories"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_repository",
"params": {
"assessed": 819
}
},
{
"code": "advisories_unassessed",
"params": {
"count": 1
}
},
{
"code": "advisories_repo_graph_caveat",
"params": {}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 59,
"inputs": {
"source": "osv",
"advisories": 157,
"affected_packages": 34,
"assessed_packages": 819,
"unassessed_packages": 1,
"affected_by_severity": "critical 3, high 25, moderate 4, low 2",
"direct_affected_packages": 6
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "6 affected: shell-quote 1.8.3 (critical 9.8), shell-quote 1.8.4 (high 7.5), tar 7.5.14 (high 7.5), +3 more",
"points": 3.9,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 6,
"packages": "shell-quote 1.8.3 (critical 9.8), shell-quote 1.8.4 (high 7.5), tar 7.5.14 (high 7.5)"
}
},
{
"code": "advisories_affected_more",
"params": {
"count": 3
}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "transitive set not separable from development and test dependencies in this scope",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_scope_not_separable",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory has been public longer than 90 days",
"points": 40,
"status": "met",
"details": [
{
"code": "advisories_none_stale",
"params": {
"days": 90
}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 819,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 7
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 74,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [
"AGENTS.md",
"docs/agents.md"
],
"agent_instruction_max_bytes": 12367
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "AGENTS.md, docs/agents.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "AGENTS.md, docs/agents.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "100 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 100,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum",
"package-lock.json",
"pnpm-lock.yaml",
"uv.lock"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [
"tools/proxy-helper/Makefile"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"tsconfig.json"
],
"agent_commit_share": 0.02,
"toolchain_manifests": [
"benchmark/manual/seeds/explore-refactor/go.mod",
"tools/proxy-helper/go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "tools/proxy-helper/Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tools/proxy-helper/Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "biome.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "biome.json"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "2 of the last 100 commits agent-authored or agent-credited",
"points": 4,
"status": "partial",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 2,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 360435,
"source_files_sampled": 1102,
"oversized_source_files": 9
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "9/1102 source files over 60KB",
"points": 54.6,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 1102,
"oversized": 9
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "critical",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"example_dirs": [],
"has_mcp_signal": true,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 20,
"status": "met",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"Could not fetch npm package '@kimchi-dev/cli' from its registry",
"Could not fetch go package 'github.com/castai/kimchi/tools/proxy-helper' from its registry"
],
"report_type": "repository",
"generated_at": "2026-07-27T02:54:35.644698Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/g/getkimchi/kimchi.svg",
"full_name": "getkimchi/kimchi",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with getkimchi/kimchi. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
