Public recordModerate
Software health reportschema 0.26.0 · metrics 1.13.0 · 2026-07-22 04:16 UTC
githits-com / githits-cli
Command Line Interface for GitHits - Context Layer for Open Source
githits-com/githits-cli holds a health index of 68 out of 100, placing it in the Moderate band. It scores highest on Engineering Quality (94/100) and lowest on Community & Adoption (47/100). It was last updated today. A single contributor accounts for most of its recent work.
68
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
68
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
GitHitsOrganization
14 followers7 public repossince Feb 2025
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish | Tags |
|---|---|---|---|---|---|---|
| npm | githits | 0.6.4 | 3,418 | 44 | 4 days ago | githitscode-examplessearchclimcpmodel-context-protocolaillm |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
86
Development activity
77Good
How it's scored
| 36/36 | Push recency — last push 0 days ago |
| 13.2/36 | Commit cadence — 19/52 weeks with commits |
| 18/18 | Commit volume — 545 commits in the last year |
| 10/10 | OpenSSF Scorecard: Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
Inputs used
| commits_last_year | 545 |
| human_commit_share | 0.98 |
| days_since_last_push | 0 |
| active_weeks_last_year | 19 |
Release discipline
100Excellent
How it's scored
| 27/27 | Ships releases — 54 releases published |
| 36/36 | Release recency — latest release 4 days ago |
| 27/27 | Release cadence — a release every ~2 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 54 |
| latest_release_tag | mcp-v0.6.3 |
| releases_from_tags | no |
| days_since_latest_release | 4 |
| mean_days_between_releases | 2 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
47
Popularity & adoption
37At risk
How it's scored
| 30.1/60 | Stars — 73 stars |
| 6.5/25 | Forks — 7 forks |
| 0/15 | Watchers — 0 watchers |
Inputs used
| forks | 7 |
| stars | 73 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | below_threshold |
Community health
50Moderate
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (Apache-2.0) |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Ecosystem adoption (downloads)
59Moderate
How it's scored
| 47.1/80 | Monthly downloads — 3,418 downloads/month across npm |
| 0/20 | Registry dependents — not reported by this ecosystem |
Inputs used
| packages | githits |
| dependents | — |
| ecosystems | npm |
| total_downloads | — |
| monthly_downloads | 3,418 |
Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
58
Maintainer resilience (bus factor)
30At risk
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 5.4/22.5 | Commit distribution — top contributor authored 76% of commits |
| 5.4/13.5 | Contributor breadth — 4 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 4 contributing companies or organizations |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 4 |
| top_contributor_share | 0.761 |
Issue & PR responsiveness
69Moderate
How it's scored
| 33.4/46.8 | Issue resolution — 71% of issues closed |
| 35.5/38.3 | PR acceptance — 196/211 decided PRs merged |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/12 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 196 |
| open_issues | 2 |
| closed_issues | 5 |
| issue_closed_ratio | 0.714 |
| closed_unmerged_prs | 15 |
Ownership & stewardship
48At risk
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 8.5/25 | Owner reach — 14 followers of githits-com |
| 9.4/25 | Track record — 7 public repos, account ~1 yr old |
Inputs used
| followers | 14 |
| owner_type | Organization |
| is_verified | — |
| owner_login | githits-com |
| public_repos | 7 |
| account_age_days | 509 |
Package maintenance
100Excellent
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on npm |
| 35/35 | Publish recency — latest publish 4 days ago |
| 20/20 | Version history — 44 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | githits |
| ecosystems | npm |
| any_deprecated | no |
| min_days_since_publish | 4 |
Engineering Quality
Are baseline engineering and documentation practices in place?
94
Engineering practices
90Excellent
How it's scored
| 24/24 | CI workflows — 5 workflow(s) |
| 24/24 | Tests present |
| 16/16 | Linter config — biome.json |
| 0/9.6 | Pre-commit hooks |
| 6.4/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 12 out of 12 merged PRs checked by a CI test -- score normalized to 10 |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | yes |
| has_linter_config | yes |
| has_precommit_config | no |
Documentation
100Excellent
How it's scored
| 30/30 | README |
| 25/25 | Documentation directory |
| 15/15 | Documentation / homepage site — https://githits.com |
| 10/10 | Repository description |
| 10/10 | Topics — 15 topics |
| 10/10 | Wiki |
Inputs used
| topics | ai-coding-tools, ai-tools, cli, context-api, context-engineering, context-layer-for-ai, index, mcp, mcp-server, remote-mcp, skills, code-graph, code-search, context7-alternative, documentation-mcp |
| has_wiki | yes |
| homepage | https://githits.com |
| has_readme | yes |
| has_docs_dir | yes |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
48
Security posture
48At risk
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 2.2/7.5 | Branch-Protection — branch protection is not maximal on development and all release branches |
| 2.5/2.5 | CI-Tests — 12 out of 12 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/12 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 4 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 7.5/7.5 | Dependency-Update-Tool — update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 5/5 | Packaging — packaging workflow detected |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 40 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 17 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 1 |
| scorecard_aggregate | 4.8 |
Excluded from scoring (no data or not applicable): signed_releases. Remaining weights renormalized.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
65
Agent context & guidance
85Excellent
How it's scored
| 45/45 | Agent instructions — AGENTS.md, CLAUDE.md, GEMINI.md |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 98 of 98 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 1 |
| agent_instruction_files | AGENTS.md, CLAUDE.md, GEMINI.md |
| agent_instruction_max_bytes | 10,524 |
Verify loop (build / test / typecheck)
54Moderate
How it's scored
| 0/18 | One-command bootstrap |
| 22/22 | Automated tests |
| 11/11 | Lint / format config — biome.json |
| 11/11 | Static type checking — tsconfig.json |
| 0/10 | Reproducible environment |
| 2/10 | Demonstrated agent practice — 1 of the last 100 commits agent-authored or agent-credited |
| 8/8 | Automated maintenance — 2 of the last 100 commits are automated dependency updates |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | — |
| has_dockerfile | no |
| typed_language | yes |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | yes |
| typecheck_configs | tsconfig.json |
| agent_commit_share | 0.01 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0.02 |
Code legibility for models
99Excellent
How it's scored
| 45/45 | Type-checkable code — TypeScript (statically typed) |
| 53.9/55 | Manageable file sizes — 7/346 source files over 60KB |
Inputs used
| primary_language | TypeScript |
| largest_source_bytes | 189,340 |
| source_files_sampled | 346 |
| oversized_source_files | 7 |
Machine-readable interfaces
20Critical
How it's scored
| 0/40 | API schema (OpenAPI/GraphQL/proto) |
| 20/20 | MCP server |
| 0/40 | Runnable examples |
Inputs used
| example_dirs | — |
| has_mcp_signal | yes |
| api_schema_files | — |
Key facts
73GitHub stars
4contributors
545commits, last 12 months
0days since last push
54releases
1bus factor
2open issues
npmpackage ecosystems
Data collection warnings
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
- deps.dev does not index npm:githits@0.6.4; advisories assessed against the repository dependency graph instead
More detail
Star and fork history 73 ★ / 7 ⇿
73Stars
7Forks
50Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 5Patch 36
OpenSSF Scorecard 4.8 / 10
4.8aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 3 | Branch-Protection | branch protection is not maximal on development and all release branches |
| 10 | CI-Tests | 12 out of 12 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/12 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 4 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 10 | Dependency-Update-Tool | update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 10 | Packaging | packaging workflow detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| n/a | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 40 existing vulnerabilities detected |
Direct dependencies 14
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| npm | @inquirer/checkbox | 5.1.5 | package.json |
| npm | @inquirer/confirm | 6.0.13 | package.json |
| npm | @inquirer/core | 11.1.10 | package.json |
| npm | @inquirer/select | 5.1.5 | package.json |
| npm | @modelcontextprotocol/sdk | ^1.29.0 | package.json |
| npm | @napi-rs/keyring | ^1.3.0 | package.json |
| npm | commander | 15.0.0 | package.json |
| npm | jsonc-parser | ^3.3.1 | package.json |
| npm | open | ^11.0.0 | package.json |
| npm | semver | 7.8.5 | package.json |
| npm | smol-toml | ^1.6.1 | package.json |
| npm | undici | 7.28.0 | package.json |
| npm | yaml | ^2.9.0 | package.json |
| npm | zod | ^4.4.3 | package.json |
All dependencies not collected
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"ai-coding-tools",
"ai-tools",
"cli",
"context-api",
"context-engineering",
"context-layer-for-ai",
"index",
"mcp",
"mcp-server",
"remote-mcp",
"skills",
"code-graph",
"code-search",
"context7-alternative",
"documentation-mcp"
],
"is_fork": false,
"size_kb": 2756,
"has_wiki": true,
"homepage": "https://githits.com",
"languages": {
"JavaScript": 15268,
"TypeScript": 3488246
},
"pushed_at": "2026-07-21T19:44:26Z",
"created_at": "2026-02-24T07:18:55Z",
"owner_type": "Organization",
"updated_at": "2026-07-21T12:44:44Z",
"description": "Command Line Interface for GitHits - Context Layer for Open Source",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript"
]
},
"owner": {
"blog": null,
"name": "GitHits",
"type": "Organization",
"login": "githits-com",
"company": null,
"location": "United States of America",
"followers": 14,
"avatar_url": "https://avatars.githubusercontent.com/u/201102800?v=4",
"created_at": "2025-02-27T12:49:09Z",
"is_verified": null,
"public_repos": 7,
"account_age_days": 509
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "mcp-v0.6.3",
"kind": "other",
"published_at": "2026-07-17T08:35:32Z"
},
{
"tag": "v0.6.4",
"kind": "patch",
"published_at": "2026-07-17T08:35:26Z"
},
{
"tag": "v0.6.3",
"kind": "patch",
"published_at": "2026-07-16T08:39:55Z"
},
{
"tag": "mcp-v0.6.2",
"kind": "other",
"published_at": "2026-07-16T08:39:51Z"
},
{
"tag": "mcp-v0.6.1",
"kind": "other",
"published_at": "2026-07-10T13:28:30Z"
},
{
"tag": "v0.6.2",
"kind": "patch",
"published_at": "2026-07-06T09:47:12Z"
},
{
"tag": "v0.6.1",
"kind": "patch",
"published_at": "2026-07-03T11:19:32Z"
},
{
"tag": "mcp-v0.6.0",
"kind": "other",
"published_at": "2026-07-03T07:14:28Z"
},
{
"tag": "v0.6.0",
"kind": "minor",
"published_at": "2026-07-03T07:13:48Z"
},
{
"tag": "mcp-v0.5.3",
"kind": "other",
"published_at": "2026-06-29T06:10:09Z"
},
{
"tag": "v0.5.4",
"kind": "patch",
"published_at": "2026-06-29T06:09:26Z"
},
{
"tag": "mcp-v0.5.2",
"kind": "other",
"published_at": "2026-06-26T08:21:31Z"
},
{
"tag": "v0.5.3",
"kind": "patch",
"published_at": "2026-06-26T08:20:50Z"
},
{
"tag": "mcp-v0.5.1",
"kind": "other",
"published_at": "2026-06-25T07:40:33Z"
},
{
"tag": "v0.5.2",
"kind": "patch",
"published_at": "2026-06-25T07:39:55Z"
},
{
"tag": "mcp-v0.5.0",
"kind": "other",
"published_at": "2026-06-23T08:27:51Z"
},
{
"tag": "v0.5.1",
"kind": "patch",
"published_at": "2026-06-23T08:11:07Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2026-06-18T09:49:31Z"
},
{
"tag": "mcp-v0.4.15",
"kind": "other",
"published_at": "2026-06-18T09:04:30Z"
},
{
"tag": "v0.4.15",
"kind": "patch",
"published_at": "2026-06-18T05:54:19Z"
},
{
"tag": "v0.4.14",
"kind": "patch",
"published_at": "2026-06-17T11:45:18Z"
},
{
"tag": "v0.4.13",
"kind": "patch",
"published_at": "2026-06-09T18:36:11Z"
},
{
"tag": "v0.4.12",
"kind": "patch",
"published_at": "2026-06-04T00:03:58Z"
},
{
"tag": "v0.4.11",
"kind": "patch",
"published_at": "2026-05-28T23:25:08Z"
},
{
"tag": "v0.4.10",
"kind": "patch",
"published_at": "2026-05-27T11:31:40Z"
},
{
"tag": "v0.4.9",
"kind": "patch",
"published_at": "2026-05-25T06:32:25Z"
},
{
"tag": "v0.4.8",
"kind": "patch",
"published_at": "2026-05-22T00:55:11Z"
},
{
"tag": "v0.4.7",
"kind": "patch",
"published_at": "2026-05-20T09:20:55Z"
},
{
"tag": "v0.4.6",
"kind": "patch",
"published_at": "2026-05-19T08:15:41Z"
},
{
"tag": "v0.4.5",
"kind": "patch",
"published_at": "2026-05-13T09:59:33Z"
},
{
"tag": "v0.4.4",
"kind": "patch",
"published_at": "2026-05-12T06:34:45Z"
},
{
"tag": "v0.4.3",
"kind": "patch",
"published_at": "2026-05-07T11:48:12Z"
},
{
"tag": "v0.4.2",
"kind": "patch",
"published_at": "2026-05-06T07:22:23Z"
},
{
"tag": "v0.4.1",
"kind": "patch",
"published_at": "2026-05-05T13:57:07Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2026-05-05T12:09:44Z"
},
{
"tag": "v0.3.3",
"kind": "patch",
"published_at": "2026-05-05T10:04:00Z"
},
{
"tag": "v0.3.2",
"kind": "patch",
"published_at": "2026-05-04T10:02:19Z"
},
{
"tag": "v0.3.1",
"kind": "patch",
"published_at": "2026-04-29T15:05:11Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2026-04-29T09:01:21Z"
},
{
"tag": "v0.2.3",
"kind": "patch",
"published_at": "2026-04-28T09:32:32Z"
},
{
"tag": "v0.2.2",
"kind": "patch",
"published_at": "2026-04-28T01:08:22Z"
},
{
"tag": "v0.2.1",
"kind": "patch",
"published_at": "2026-04-27T10:40:34Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2026-04-24T13:50:47Z"
},
{
"tag": "v0.1.11",
"kind": "patch",
"published_at": "2026-04-22T22:55:58Z"
},
{
"tag": "v0.1.10",
"kind": "patch",
"published_at": "2026-04-22T08:12:55Z"
},
{
"tag": "v0.1.9",
"kind": "patch",
"published_at": "2026-04-21T14:00:51Z"
},
{
"tag": "v0.1.8",
"kind": "patch",
"published_at": "2026-04-17T23:57:41Z"
},
{
"tag": "v0.1.7",
"kind": "patch",
"published_at": "2026-04-16T23:49:01Z"
},
{
"tag": "v0.1.5",
"kind": "patch",
"published_at": "2026-03-28T01:30:10Z"
},
{
"tag": "v0.1.4",
"kind": "patch",
"published_at": "2026-03-28T01:20:45Z"
},
{
"tag": "v0.1.3",
"kind": "patch",
"published_at": "2026-03-03T15:11:21Z"
},
{
"tag": "v0.1.2",
"kind": "patch",
"published_at": "2026-02-24T22:54:27Z"
},
{
"tag": "v0.1.1",
"kind": "patch",
"published_at": "2026-02-24T09:44:33Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2026-02-24T07:19:45Z"
}
],
"recent_commits": [
{
"oid": "78f01dcf296bd4dabc993f8f4b00ddccb67db158",
"body": "fix: prepare MCP tools for marketplace submission",
"is_bot": false,
"headline": "Merge pull request #227 from githits-com/agent/add-mcp-tool-annotations",
"author_name": "Olli-Pekka Heinisuo",
"author_login": "skvark",
"committed_at": "2026-07-17T08:33:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8b23396f9cb95d8d63dcf254e75899aa0aa87f81",
"body": "Bump the githits CLI, plugin manifests, Gemini extension, and MCP registry package entry to 0.6.4.\n\nKeep @githits/mcp at its next unpublished patch version, 0.6.3, for the coordinated release.",
"is_bot": false,
"headline": "chore: prepare 0.6.4 release",
"author_name": "Olli-Pekka Heinisuo",
"author_login": "skvark",
"committed_at": "2026-07-17T08:31:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a5e7f3c5399c07d2e225228e2946bfcde1abaab6",
"body": "Add concise text-over-JSON guidance to the canonical MCP skill, Claude skill, server instructions, and installed agent guidance.\n\nRewrite marketplace annotation rationales in terms of observable public behavior without exposing implementation-specific service details.",
"is_bot": false,
"headline": "docs: prefer compact MCP text output",
"author_name": "Olli-Pekka Heinisuo",
"author_login": "skvark",
"committed_at": "2026-07-17T08:25:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "89c9a0d53c74e766229d029d87d089db2b1a6c22",
"body": "Advertise text-v1 as the explicit default and first output-format option for every format-selectable MCP tool while retaining JSON compatibility.\n\nDocument why outputSchema is deferred until GitHits has a compact structured result contract that does not duplicate large tool payloads.",
"is_bot": false,
"headline": "fix: prefer compact MCP text output",
"author_name": "Olli-Pekka Heinisuo",
"author_login": "skvark",
"committed_at": "2026-07-17T08:19:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "757fe9e68eb3a868cc6b68c68f1466f166f4511c",
"body": "Require marketplace impact hints for every shared MCP tool and classify hidden indexing and crawl writes accurately.\n\nAdd regression coverage and reviewer-facing annotation rationales, then bump @githits/mcp to 0.6.3.",
"is_bot": false,
"headline": "fix: add complete MCP tool annotations",
"author_name": "Olli-Pekka Heinisuo",
"author_login": "skvark",
"committed_at": "2026-07-17T08:04:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a061d1da4d0f9851bc7472803e9aa981a8e1ce22",
"body": "test: smoke built artifacts in CI",
"is_bot": false,
"headline": "Merge pull request #226 from githits-com/built-artifact-smoke-ci",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-07-17T07:11:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "46c286ac0af4fa6b3a8c15031b43a7ecec056587",
"body": "Add secret-free CLI and MCP modes that launch dist/cli.js under Node, validate command and tool registration, and run in PR CI. Preserve local live smoke behavior and document the product validation contract.",
"is_bot": false,
"headline": "test: smoke built artifacts in CI",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-07-17T06:51:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8e085dd386189570d58a35fa91343107372def44",
"body": "fix: harden credential persistence",
"is_bot": false,
"headline": "Merge pull request #225 from githits-com/credential-persistence-safety",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-07-16T15:18:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6bf51d63bba98cc72c99ec39fb77ee742377e309",
"body": "Use a writable replacement target on Windows, where mode 0400 maps to a read-only attribute and blocks rename. Keep the restrictive-mode assertion on POSIX while still exercising replacement content on Windows.",
"is_bot": false,
"headline": "test: keep permission test portable",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-07-16T13:13:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e9a0395797dd4d4fef5fb478daef4ae7d4cb2df2",
"body": "Retain refresh credentials after transient failures, cap auth file permissions, and reconcile ambiguous legacy copies behind the auth lock. Add file-backed and concurrency regression coverage and document the storage guarantees.",
"is_bot": false,
"headline": "fix: harden credential persistence",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-07-16T13:08:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c250d4e50d5bf2dd365a6cda293036dc42d256f",
"body": "* fix: preserve API rate-limit errors\n\nClassify API rate-limit and timeout responses consistently across CLI and MCP consumers. Preserve standard retry metadata, keep public messages generic, and verify the behavior through packed package entrypoints.\n\n* fix: extend example request timeout\n\nAllow lo\n[…]\nrver manifest.\n\n* docs: preserve MCP registry discoverability\n\nKeep capability keywords in server metadata for registry search while retaining the product tagline across user-facing branding surfaces.",
"is_bot": false,
"headline": "fix: preserve API rate-limit errors (#223)",
"author_name": "Olli-Pekka Heinisuo",
"author_login": "skvark",
"committed_at": "2026-07-16T08:37:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "98466e0aecd3ec5706d372f497db97552811f5a6",
"body": "fix: harden CLI network error handling",
"is_bot": false,
"headline": "Merge pull request #224 from githits-com/southern-court",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-07-16T06:30:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4626c1951257ed7a94e101175ae78e86af75832f",
"body": "Sanitize transport and OAuth failures, enforce secure service URLs, and route all startup errors through one CLI boundary. Add strict response validation, local-only recovery behavior, and regression coverage for the reviewed P0/P1 findings.",
"is_bot": false,
"headline": "fix: harden CLI network error handling",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-07-16T05:08:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "77509b2b46da32105e0dea1a435a6d9014c5ed8d",
"body": "fix: stop upgrading release workflows to broken npm 12",
"is_bot": false,
"headline": "Merge pull request #221 from githits-com/fringe-monday",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-07-10T13:26:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "86b843937abc6c950565477d85d286e5fe808f2b",
"body": "npm 12.0.0 (latest since 2026-07-08) self-installs without sigstore\nbecause the tarball ships it under node_modules without declaring it in\nbundleDependencies, so \"npm install -g npm@latest\" prunes it as\nextraneous. Every npm publish, including --dry-run, then fails with\n\"Cannot find module 'sigstor\n[…]\nwhich already satisfies it. Remove the step from release.yml and both\nmcp-release.yml jobs and document why npm@latest must not be\nreintroduced.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: stop upgrading release workflows to broken npm 12",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-07-10T13:23:10Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "832857addf1fe278446dabe77caa16310d73575a",
"body": "feat: add CLI proxy support",
"is_bot": false,
"headline": "Merge pull request #219 from githits-com/pinto-repair",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-07-10T12:58:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aadaec3e19e738e1d7a104c313d508e04abceb28",
"body": "fix: classify missing repositories as not found",
"is_bot": false,
"headline": "Merge pull request #220 from githits-com/ribbon-drip",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-07-10T06:56:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a9d81f9f2f7d07ebd3264d972673409e6c0c8515",
"body": null,
"is_bot": false,
"headline": "fix: tolerate npm pack missing filename",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-07-10T06:52:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8cb5bdc9ab05f6c46f9a438534a5139c47895079",
"body": null,
"is_bot": false,
"headline": "fix: classify missing repositories as not found",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-07-10T06:37:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e00245059850a39935fe4ad1d6c3dd7bf90b57b4",
"body": "Use lazy proxy fetch construction for auth command dependencies so local auth status/logout paths are not blocked by malformed proxy env before network use. Add regression coverage and document the dependency-construction rule for future agents.",
"is_bot": false,
"headline": "fix: defer auth proxy validation",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-07-08T11:03:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d40d436359eada54a771d04ef9c283f43751eb8",
"body": "Honor HTTP_PROXY, HTTPS_PROXY, and NO_PROXY for CLI-originated traffic via a centralized proxy-aware fetch implementation. Add Node proxy smoke coverage, update the Node engine floor for undici 7, and bump @githits/mcp metadata for the engine change.",
"is_bot": false,
"headline": "feat: add CLI proxy support",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-07-08T10:28:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "161b1a16701c9243e19f067c10398567ce31d2d6",
"body": "feat: add auth token command",
"is_bot": false,
"headline": "Merge pull request #211 from githits-com/abrasive-twine",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-07-06T18:54:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5969834f31e5089a5967fc74b20b8f9de59668e6",
"body": null,
"is_bot": false,
"headline": "feat: add auth token command",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-07-06T17:50:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7084871af1f8590e520836ce0f14a7758372971b",
"body": "Adds official MCP registry metadata for com.githits/githits, publishes the registry entry from the root release workflow after npm trusted publishing, and documents the registry release flow.",
"is_bot": false,
"headline": "feat: add MCP registry publishing",
"author_name": "Olli-Pekka Heinisuo",
"author_login": "skvark",
"committed_at": "2026-07-06T09:45:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "016b280dff9a4bd24a27509754e4403ddf1fc944",
"body": "Refine GitHits guidance copy and auth URL fallback",
"is_bot": false,
"headline": "Merge pull request #208 from githits-com/copy/githits-guidance-feedback",
"author_name": "Olli-Pekka Heinisuo",
"author_login": "skvark",
"committed_at": "2026-07-06T07:00:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7728a68bc050608f60f6416b6146258e233aa888",
"body": "Clarifies that agents should wait or retry when a public target is still indexing instead of falling back to generic web search.",
"is_bot": false,
"headline": "docs: prefer waiting for GitHits indexing",
"author_name": "Olli-Pekka Heinisuo",
"author_login": "skvark",
"committed_at": "2026-07-06T06:56:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "97aacefc58d1cc7f89834548a00baacaf75f798f",
"body": "GitHits can index public targets on demand, so the installed skill guidance should not suggest stale snapshots as a reason to avoid GitHits.",
"is_bot": false,
"headline": "docs: remove stale snapshot caveat",
"author_name": "Olli-Pekka Heinisuo",
"author_login": "skvark",
"committed_at": "2026-07-06T06:55:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b8e96a8ce61b47326ff95b8926f7440ece79918c",
"body": "Removes a redundant sentence from the installed GitHits MCP skill copy while keeping the public OSS scope boundary.",
"is_bot": false,
"headline": "docs: trim GitHits MCP scope guidance",
"author_name": "Olli-Pekka Heinisuo",
"author_login": "skvark",
"committed_at": "2026-07-06T06:52:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d4d45b3d64d3a36afbeae4513c298090ab3282f7",
"body": "Refines installed GitHits guidance copy to use calmer wording, clarify public OSS scope, and avoid recommending unrelated local tools.\n\nPrints the browser auth URL during normal login as a fallback when automatic browser launch is hidden or fails.",
"is_bot": false,
"headline": "fix: show auth URL fallback during login",
"author_name": "Olli-Pekka Heinisuo",
"author_login": "skvark",
"committed_at": "2026-07-06T06:49:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2c887beb6bdc5e38776119297682ab98dff7c998",
"body": "chore: release 0.6.1",
"is_bot": false,
"headline": "Merge pull request #207 from githits-com/release/0.6.1",
"author_name": "Olli-Pekka Heinisuo",
"author_login": "skvark",
"committed_at": "2026-07-03T11:17:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "beaafc179fa63e6936e0bf79c6656ba0a9ccc0cf",
"body": "Bump the root githits package and plugin/assistant manifests for the CLI-only patch release.\n\nKeep @githits/mcp at 0.6.0 and harden CLI smoke auth probing so live package/source coverage is only run when that auth path is available.",
"is_bot": false,
"headline": "chore: release 0.6.1",
"author_name": "Olli-Pekka Heinisuo",
"author_login": "skvark",
"committed_at": "2026-07-03T11:15:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "19c0f997b0b2f7bae8b6b0a71d226ce1a994264d",
"body": "Fix init no-browser auth flow",
"is_bot": false,
"headline": "Merge pull request #206 from githits-com/fix/init-no-browser-auth",
"author_name": "Olli-Pekka Heinisuo",
"author_login": "skvark",
"committed_at": "2026-07-03T11:04:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1426966af77f1c7b29a46ae039fb149db8fb7b6c",
"body": "Add an init --no-browser option that reuses the login flow's manual URL mode so SSH and headless sessions do not open a remote browser.\n\nUpdate auth test fixtures and docs to reflect the production accounts.githits.com OAuth host.",
"is_bot": false,
"headline": "fix: support no-browser init auth",
"author_name": "Olli-Pekka Heinisuo",
"author_login": "skvark",
"committed_at": "2026-07-03T11:01:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0d07a2c6d240725d7a61a26f5363287d6ded835a",
"body": "chore: prepare 0.6.0 release",
"is_bot": false,
"headline": "Merge pull request #205 from githits-com/chore/prepare-0.6.0-release",
"author_name": "Olli-Pekka Heinisuo",
"author_login": "skvark",
"committed_at": "2026-07-03T07:11:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "99c8308b0164c3d3c7259acdefe4decb60e327b2",
"body": "Align the root npm package description with the README positioning around version-aware open-source context instead of code examples only.",
"is_bot": false,
"headline": "chore: use README package description",
"author_name": "Olli-Pekka Heinisuo",
"author_login": "skvark",
"committed_at": "2026-07-03T07:10:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "531a25377bd4115e22b2d1fe4976c1c5f0acc18f",
"body": "Use the same code-examples framing in the root npm package metadata as the plugin and assistant manifests.",
"is_bot": false,
"headline": "chore: align package description",
"author_name": "Olli-Pekka Heinisuo",
"author_login": "skvark",
"committed_at": "2026-07-03T07:08:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e47e56c4ae9923b81924421386b2d759c4b7f5a",
"body": "Bump the root package, plugin manifests, Gemini extension, and @githits/mcp package to 0.6.0 for the coordinated guided MCP init release.\n\nUse Node chmod in the build script so release validation works on Windows as well as POSIX shells.",
"is_bot": false,
"headline": "chore: prepare 0.6.0 release",
"author_name": "Olli-Pekka Heinisuo",
"author_login": "skvark",
"committed_at": "2026-07-03T07:05:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "81caaeeb588bc4779f98c2a9658d76a005595a16",
"body": "…-staged\n\nchore(deps): update semver, biome, and lint-staged",
"is_bot": false,
"headline": "Merge pull request #204 from githits-com/chore/deps-semver-biome-lint…",
"author_name": "Olli-Pekka Heinisuo",
"author_login": "skvark",
"committed_at": "2026-07-03T06:42:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "57cb66199d935a5fa631d5840cf2717e25b075f0",
"body": "Bumps semver to 7.8.5, @biomejs/biome to 2.5.1, and lint-staged to 17.0.8.\n\nRegenerates the Bun lockfile and migrates the Biome config schema for the new CLI version.",
"is_bot": false,
"headline": "chore(deps): update semver, biome, and lint-staged",
"author_name": "Olli-Pekka Heinisuo",
"author_login": "skvark",
"committed_at": "2026-07-03T06:40:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "92c85600efdab8b50b9d0e3b7cee2b2242c45342",
"body": "feat: add guided GitHits MCP init",
"is_bot": false,
"headline": "Merge pull request #203 from githits-com/feat/guided-mcp-init",
"author_name": "Olli-Pekka Heinisuo",
"author_login": "skvark",
"committed_at": "2026-07-03T06:32:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e4dbffd7d876b0bf160d5361736a4f9483ceb0ec",
"body": "Use agentic software development phrasing in the README tagline while keeping the OSS lifecycle positioning in the surrounding intro.",
"is_bot": false,
"headline": "docs: refine README tagline",
"author_name": "Olli-Pekka Heinisuo",
"author_login": "skvark",
"committed_at": "2026-07-03T06:30:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "512a2dbb11017d45f7c763959dad1af81ee0c663",
"body": "Align the README tagline with the full software development lifecycle positioning used in guided MCP agent guidance.",
"is_bot": false,
"headline": "docs: add lifecycle framing to README tagline",
"author_name": "Olli-Pekka Heinisuo",
"author_login": "skvark",
"committed_at": "2026-07-03T06:29:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "48abd3c33569366ce48f5847b6a2a4c085fedcaf",
"body": "Align README positioning and use cases with the guided MCP skill guidance, including discovery, planning, research, debugging, and maintenance use cases.",
"is_bot": false,
"headline": "docs: frame README around OSS lifecycle",
"author_name": "Olli-Pekka Heinisuo",
"author_login": "skvark",
"committed_at": "2026-07-03T06:27:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a0cda2740cfddee40cc5c1e47608f1fde6008a19",
"body": "Keep README and implementation notes aligned with the expanded non-sunset agent setup coverage in guided MCP init.",
"is_bot": false,
"headline": "docs: refresh guided init coverage list",
"author_name": "Olli-Pekka Heinisuo",
"author_login": "skvark",
"committed_at": "2026-07-03T06:25:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b2213c9264b8f2ff665ce0a4429b75e386f69295",
"body": "Avoid duplicating the managed GitHits guidance block in implementation notes by referring to GITHITS_GUIDANCE_BLOCK as the canonical source.",
"is_bot": false,
"headline": "docs: point init guidance note to source block",
"author_name": "Olli-Pekka Heinisuo",
"author_login": "skvark",
"committed_at": "2026-07-03T06:19:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2dfb6a58e15e92e3c71bfaf373b69eb3c57426e4",
"body": "Make staged agent installs include guidance by default while preserving --no-guidance as the opt-out. Remove sunset Roo Code setup support, tighten githits-mcp routing and external-content guidance, and add the skills.sh README badge.",
"is_bot": false,
"headline": "fix: refine guided MCP agent guidance",
"author_name": "Olli-Pekka Heinisuo",
"author_login": "skvark",
"committed_at": "2026-07-03T06:13:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f79cb9f228615130c040914cf91efb53eabf029f",
"body": "Adds guided MCP onboarding with supporting skill and managed instruction guidance, expands current MCP client setup targets, and wires generated Claude skill packaging from the canonical GitHits MCP skill.\n\nCovers idempotent reruns, uninstall cleanup, guidance flags, and packaging tests.",
"is_bot": false,
"headline": "feat: add guided GitHits MCP init",
"author_name": "Olli-Pekka Heinisuo",
"author_login": "skvark",
"committed_at": "2026-07-02T14:21:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f9353503154a0e900e65455877bc4a7ca1667078",
"body": "chore: reduce CLI dependency surface",
"is_bot": false,
"headline": "Merge pull request #202 from githits-com/sour-aspen",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-07-01T15:07:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eb2ad1b22d0ba54c0f663a3e286aac45aa178912",
"body": "Replace the aggregate Inquirer prompts package with the leaf prompt packages actually used by the CLI, and bundle reviewed safe Dependabot updates for commander, semver, Biome, and lint-staged.",
"is_bot": false,
"headline": "chore: reduce CLI dependency surface",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-07-01T15:02:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2c14ee3daa96100d53642779d8f3d6e68c561753",
"body": "docs: refresh README",
"is_bot": false,
"headline": "Merge pull request #201 from githits-com/docs/refresh-readme",
"author_name": "Olli-Pekka Heinisuo",
"author_login": "skvark",
"committed_at": "2026-07-01T12:53:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c20b12a572ac017cdf99bbc81ef9e5d7ba92812",
"body": "Streamlines the public environment variable and source layout sections so the README focuses on user-facing configuration and repository orientation.",
"is_bot": false,
"headline": "docs: clean up public README details",
"author_name": "Olli-Pekka Heinisuo",
"author_login": "skvark",
"committed_at": "2026-07-01T12:47:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "986989ddf7070546908e904868664dc9df52689c",
"body": "Reframes the root README around current CLI and MCP capabilities, adds badges and the GitHits header image, and keeps plugin packaging details concise.",
"is_bot": false,
"headline": "docs: refresh README",
"author_name": "Olli-Pekka Heinisuo",
"author_login": "skvark",
"committed_at": "2026-07-01T12:45:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dbac43536ad9f4076e022fb5932f84f62b2b52de",
"body": "…tions/checkout-7\n\nchore(deps): bump actions/checkout from 6 to 7",
"is_bot": false,
"headline": "Merge pull request #191 from githits-com/dependabot/github_actions/ac…",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-07-01T07:41:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a5775f6b70d08e01adeb3c01fa0d256309c1c9cc",
"body": "…tions/cache-6\n\nchore(deps): bump actions/cache from 5 to 6",
"is_bot": false,
"headline": "Merge pull request #200 from githits-com/dependabot/github_actions/ac…",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-07-01T07:41:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b61b2bf3bb78a891f87006b3b51f9766bbe547a",
"body": "Bumps [actions/cache](https://github.com/actions/cache) from 5 to 6.\n- [Release notes](https://github.com/actions/cache/releases)\n- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md)\n- [Commits](https://github.com/actions/cache/compare/v5...v6)\n\n---\nupdated-dependencies:\n- dependency-name: actions/cache\n dependency-version: '6'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "chore(deps): bump actions/cache from 5 to 6",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-30T19:43:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d49c1603379b5006b1ca5c372b88338329ff30f5",
"body": "chore: prepare 0.5.4 release",
"is_bot": false,
"headline": "Merge pull request #199 from githits-com/half-archduke",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-29T06:07:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0355be9639036cbe32d959aa791a73f1cb29b3c7",
"body": null,
"is_bot": false,
"headline": "chore: prepare 0.5.4 release",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-28T18:48:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "35b6dbde724108c4f5812434ab07879a48fc8477",
"body": "fix: clarify search indexing status output",
"is_bot": false,
"headline": "Merge pull request #198 from githits-com/knowing-shrine",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-28T17:44:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c00efd1f4b8c4c7585de1026920fedd8775179db",
"body": "Treat completed search responses as authoritative even when target metadata still reports indexing, and present target resolution freshness as supporting context.\\n\\nAdds regression coverage for stale metadata on completed results plus clearer CLI and MCP copy for fallback snapshots and incomplete search-status targets.",
"is_bot": false,
"headline": "fix: clarify search indexing status output",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-28T17:29:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "520a611668f19d3299e5959e69d4520a87e33003",
"body": "chore: prepare 0.5.3 release",
"is_bot": false,
"headline": "Merge pull request #197 from githits-com/eastern-chipmunk",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-26T08:18:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5a682a81a6c778805f8e74fa70966ae194be999d",
"body": "Bumps root package and plugin manifests to 0.5.3 and @githits/mcp to 0.5.2. Updates indexing-estimate guidance for CLI, MCP tool descriptions, implementation docs, and the public code skill.",
"is_bot": false,
"headline": "chore: prepare 0.5.3 release",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-26T08:13:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f92c26e5b86afcb1c8da075ec128d01c929cbdcb",
"body": "fix: surface indexing duration estimates",
"is_bot": false,
"headline": "Merge pull request #196 from githits-com/satisfying-atmosphere",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-26T07:43:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d172ce5274cca7062b12247e5099eff8a5f12d0c",
"body": null,
"is_bot": false,
"headline": "fix: surface indexing duration estimates",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-26T07:40:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3282e12c18917268d16ec87ec0701e200d87ea7c",
"body": "chore: prepare 0.5.2 release",
"is_bot": false,
"headline": "Merge pull request #195 from githits-com/thinkable-deltadromeus",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-25T07:38:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7fa029e3063c7623a0d7a8130a35ad634cb176e8",
"body": "Bump the root githits package and plugin manifests to 0.5.2.\n\nAlso bump @githits/mcp to 0.5.1 because the release range includes MCP-visible code navigation behavior changes.",
"is_bot": false,
"headline": "chore: prepare 0.5.2 release",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-25T07:32:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "16605f60d25f109405b6d92c54bbbdf71e95f3fe",
"body": "fix: separate suggested repository refs",
"is_bot": false,
"headline": "Merge pull request #194 from githits-com/coal-ceder",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-24T15:23:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f4355ba24cf33d7207e02e7712f124b37fc0dd6",
"body": null,
"is_bot": false,
"headline": "fix: separate suggested repository refs",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-24T15:16:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "67f08cba5d0f9d6bee59e81381445c118abbf826",
"body": "fix: surface unresolved repo ref suggestions",
"is_bot": false,
"headline": "Merge pull request #193 from githits-com/pollen-spectrograph",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-24T06:22:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "35fbb5e4c8aecc99f18414f2440adea7becb18e4",
"body": "Parse REF_NOT_FOUND available_refs from the code navigation GraphQL error extensions and expose them through CLI/MCP error details. Add fallback did-you-mean text only when the backend message does not already include suggestions.",
"is_bot": false,
"headline": "fix: surface unresolved repo ref suggestions",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-24T06:13:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "598024195c2082f485332409924572018f319857",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v6...v7)\n\n---\nupdated-dependenc\n[…]\n:\n- dependency-name: actions/checkout\n dependency-version: '7'\n dependency-type: direct:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "chore(deps): bump actions/checkout from 6 to 7",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-23T19:43:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6fcf8869b2b3b693d27ecb0bf1ba036f76878ea1",
"body": "fix: skip published MCP release tags",
"is_bot": false,
"headline": "Merge pull request #190 from githits-com/rhetorical-child",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-23T13:45:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "28907be170c51a2c4bf21c29e053bedd5edefafb",
"body": "Check the published npm version before enforcing that the MCP release tag points at HEAD, so normal Main runs with an unchanged MCP version skip cleanly instead of failing on the historical tag.",
"is_bot": false,
"headline": "fix: skip published MCP release tags",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-23T13:41:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "974ec9447aa159f31784b9fafcf9025e59645f7a",
"body": "fix: canonicalize repository target refs",
"is_bot": false,
"headline": "Merge pull request #189 from githits-com/blushing-timbale",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-23T11:49:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9965a89bd3a05c470c1ab8661876cd39b6a9afc4",
"body": null,
"is_bot": false,
"headline": "test: update search status repo target expectation",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-23T11:47:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "33839b7aa6af38f68872313ae2cb311e6e052357",
"body": null,
"is_bot": false,
"headline": "fix: canonicalize repository target refs",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-23T11:43:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1c3190bc289c25b02ebcb2630faa54bc53ac69df",
"body": "fix: publish MCP package after main succeeds",
"is_bot": false,
"headline": "Merge pull request #188 from githits-com/fix/mcp-release-workflow",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-23T08:25:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "da01776d5ef326bb0849937d4c219b0f501703db",
"body": "Add a workflow_run trigger so the MCP package release runs automatically after Main succeeds on main, matching the root release pipeline. Document the automatic MCP publish path and clean up output quoting in the release-state script.",
"is_bot": false,
"headline": "fix: publish MCP package after main succeeds",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-23T08:20:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c2153f256981c7bce7cb6306585b90f46e1af711",
"body": "chore: prepare CLI and MCP releases",
"is_bot": false,
"headline": "Merge pull request #187 from githits-com/cerulean-paddleboat",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-23T08:09:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6fe8272ba35f8febeae98e4c6388b14b53d746d1",
"body": "Bump githits to 0.5.1 and @githits/mcp to 0.5.0, align plugin manifests, and document coordinated MCP versioning plus release docs updates.",
"is_bot": false,
"headline": "chore: prepare CLI and MCP releases",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-23T08:04:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc01f54b7801cf5a08f0280a79347e292b6f9e2d",
"body": "feat: use aggregate package upgrade review",
"is_bot": false,
"headline": "Merge pull request #186 from githits-com/magical-prawn",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-23T07:46:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb4440e8b57f9b4d1e5275e04c85604fe6fe6a8e",
"body": null,
"is_bot": false,
"headline": "test: update upgrade review hook expectation",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-23T07:40:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1a781e8997f3c79476d0ace69e5073771489d265",
"body": null,
"is_bot": false,
"headline": "feat: use aggregate package upgrade review",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-23T07:35:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b8cb069bc13ab12064fe318801081d47ca2910cb",
"body": "feat: add MCP tool execution hook",
"is_bot": false,
"headline": "Merge pull request #185 from githits-com/triangular-prose",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-22T15:01:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1d1f064edb6fc3fe01973b30d2fd9d4fb42d0277",
"body": "Expose an optional traceTool hook for public MCP tool handlers so remote servers can wrap one full tool call without receiving arguments or auth metadata.\\n\\nAdd coverage for a simple tool and pkg_upgrade_review to ensure composed downstream service calls still produce one hook invocation.",
"is_bot": false,
"headline": "feat: add MCP tool execution hook",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-22T14:51:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "652aa3d2cdc34596fbd4bfa91c9b7481f8c5640d",
"body": "Export MCP smoke test runner for remote reuse",
"is_bot": false,
"headline": "Merge pull request #184 from githits-com/succinct-dirigible",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-22T10:39:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eaeb0bfd2dd68a50da6cb343bdd610642a8db9c5",
"body": "Move the local MCP smoke corpus into a transport-neutral @githits/mcp/smoke-test subpath so remote MCP servers can reuse the same checks. Keep local unauthenticated stdio behavior in the script adapter and add package-boundary validation for the new public export.",
"is_bot": false,
"headline": "feat: export MCP smoke test runner",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-22T10:33:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "764034858fe200038ef6e8e643c3b2240f71025f",
"body": "fix: improve init CLI status rows",
"is_bot": false,
"headline": "Merge pull request #183 from githits-com/rainy-twilight",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-22T09:53:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f89048165dd60f64d1c5037cdbde5740cbd24f07",
"body": null,
"is_bot": false,
"headline": "fix: improve init CLI status rows",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-22T09:48:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b8dc6ae4babbc7187e1ce51fbdb87bdd32db9a83",
"body": "fix: reduce package GraphQL overfetching",
"is_bot": false,
"headline": "Merge pull request #182 from githits-com/branch-region",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-22T08:52:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "695f32da641c716f318e3e0eeb73276d683159c6",
"body": "Document minimal data fetching as a tool contract for GraphQL/API-backed tools, including mode-specific query selection and wire-level regression tests.",
"is_bot": false,
"headline": "docs: require GraphQL data-fetching review",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-22T08:51:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3806407663b5c7dd4cb088422073111d56f1cd70",
"body": "Use GraphQL conditional field selection for package summary, dependency, and changelog calls so compact text and no-body modes avoid unused fields while JSON and verbose paths keep required data. Add regression coverage for dependency hidden-group hints.",
"is_bot": false,
"headline": "fix: reduce package GraphQL overfetching",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-22T08:49:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5cba825ef59bc823410313a00d3dcfe7fc66615b",
"body": "chore: prepare 0.5.0 release",
"is_bot": false,
"headline": "Merge pull request #177 from githits-com/massive-research",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-18T09:48:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a9d8e06637b633eea16960271f74b529d51887a",
"body": "Correct the testing guide example to import MCP tool test helpers from the current packages/mcp services helper location.",
"is_bot": false,
"headline": "docs: fix MCP test helper import",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-18T09:43:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0bf8d362aa4b267108a2a7d5a78db0c81fe82d14",
"body": "Bump the root githits package and assistant/plugin manifests for the 0.5.0 minor release. Update implementation documentation and tool-instruction references for the current packages/mcp workspace layout, and keep the lockfile aligned with the published MCP package boundary.",
"is_bot": false,
"headline": "chore: prepare 0.5.0 release",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-18T09:36:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aa61c455a2ea1cce0dbddd5864320861697c13f1",
"body": "…rsion\n\nSkip MCP publish dry-run for published versions",
"is_bot": false,
"headline": "Merge pull request #176 from githits-com/fix-mcp-dry-run-published-ve…",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-18T09:17:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9cb2da9b5f279da66591e7d8109c27b5338ab848",
"body": "Let release validation continue after the current MCP package version has already been published, while still running npm publish --dry-run for unpublished versions.",
"is_bot": false,
"headline": "fix: skip MCP dry-run for published versions",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-18T09:11:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "08801456d43546db6c2053c27a48a1604aaa160a",
"body": "Build public artifacts before package validation",
"is_bot": false,
"headline": "Merge pull request #175 from githits-com/fix-package-validation-build",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-18T08:58:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "37336effdcb96fd57bbbb9c244ce52c14d41d2a2",
"body": "feat: report per-tool config changes in init and unify uninstall UX",
"is_bot": false,
"headline": "Merge pull request #172 from githits-com/agate-fabrosaurus",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-18T08:57:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "48aa17ff6c79f48b6e3a366b756c5e6b707b7ce5",
"body": "Make the public package validator self-contained so validate:packages:mcp-publish works from a clean checkout without preexisting dist directories.",
"is_bot": false,
"headline": "fix: build public artifacts before package validation",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-18T08:54:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "89f0abc22d8739d81b21d72cc6dd680412ffb128",
"body": "Expose MCP package release and remote runtime surfaces",
"is_bot": false,
"headline": "Merge pull request #173 from githits-com/plan-mcp-publishing-remote",
"author_name": "Juha Litola",
"author_login": "jlitola",
"committed_at": "2026-06-18T08:51:10Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 54,
"commits_last_year": 545,
"latest_release_at": "2026-07-17T08:35:32Z",
"latest_release_tag": "mcp-v0.6.3",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 19,
"days_since_latest_release": 4,
"mean_days_between_releases": 2
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 37,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "githits",
"exists": true,
"license": "Apache-2.0",
"keywords": [
"githits",
"code-examples",
"search",
"cli",
"mcp",
"model-context-protocol",
"ai",
"llm"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/githits",
"is_deprecated": false,
"latest_version": "0.6.4",
"repository_url": "https://github.com/githits-com/githits-cli",
"versions_count": 44,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 3,
"monthly_downloads": 3418,
"first_published_at": "2026-02-24T07:50:59.598000Z",
"latest_published_at": "2026-07-17T08:34:48.886000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 4
}
]
},
"popularity": {
"forks": 7,
"stars": 73,
"watchers": 0,
"fork_history": {
"days": [
{
"date": "2026-06-16",
"count": 1
},
{
"date": "2026-06-17",
"count": 1
},
{
"date": "2026-06-20",
"count": 1
},
{
"date": "2026-06-22",
"count": 1
},
{
"date": "2026-07-06",
"count": 1
},
{
"date": "2026-07-07",
"count": 1
},
{
"date": "2026-07-22",
"count": 1
}
],
"complete": true,
"collected": 7,
"total_forks": 7
},
"star_history": {
"days": [
{
"date": "2026-03-25",
"count": 1
},
{
"date": "2026-04-27",
"count": 1
},
{
"date": "2026-05-02",
"count": 1
},
{
"date": "2026-05-12",
"count": 1
},
{
"date": "2026-05-19",
"count": 1
},
{
"date": "2026-05-20",
"count": 1
},
{
"date": "2026-05-22",
"count": 1
},
{
"date": "2026-05-24",
"count": 1
},
{
"date": "2026-05-25",
"count": 1
},
{
"date": "2026-05-28",
"count": 1
},
{
"date": "2026-06-04",
"count": 1
},
{
"date": "2026-06-06",
"count": 1
},
{
"date": "2026-06-07",
"count": 1
},
{
"date": "2026-06-09",
"count": 1
},
{
"date": "2026-06-13",
"count": 1
},
{
"date": "2026-06-16",
"count": 1
},
{
"date": "2026-06-17",
"count": 1
},
{
"date": "2026-06-18",
"count": 3
},
{
"date": "2026-06-20",
"count": 1
},
{
"date": "2026-06-27",
"count": 1
},
{
"date": "2026-07-01",
"count": 38
},
{
"date": "2026-07-02",
"count": 4
},
{
"date": "2026-07-05",
"count": 1
},
{
"date": "2026-07-07",
"count": 1
},
{
"date": "2026-07-12",
"count": 1
},
{
"date": "2026-07-13",
"count": 3
},
{
"date": "2026-07-14",
"count": 1
},
{
"date": "2026-07-21",
"count": 2
}
],
"complete": true,
"collected": 73,
"total_stars": 73
},
"open_issues_and_prs": 13
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": true,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 189340,
"source_files_sampled": 346,
"oversized_source_files": 7,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md",
"GEMINI.md"
],
"agent_instruction_max_bytes": 10524
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "@inquirer/checkbox",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "5.1.5"
},
{
"name": "@inquirer/confirm",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "6.0.13"
},
{
"name": "@inquirer/core",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "11.1.10"
},
{
"name": "@inquirer/select",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "5.1.5"
},
{
"name": "@modelcontextprotocol/sdk",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.29.0"
},
{
"name": "@napi-rs/keyring",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.3.0"
},
{
"name": "commander",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "15.0.0"
},
{
"name": "jsonc-parser",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^3.3.1"
},
{
"name": "open",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^11.0.0"
},
{
"name": "semver",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "7.8.5"
},
{
"name": "smol-toml",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.6.1"
},
{
"name": "undici",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "7.28.0"
},
{
"name": "yaml",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^2.9.0"
},
{
"name": "zod",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.4.3"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 11,
"merged_prs": 196,
"open_issues": 2,
"closed_ratio": 0.714,
"closed_issues": 5,
"closed_unmerged_prs": 15
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "jlitola",
"commits": 410,
"avatar_url": "https://avatars.githubusercontent.com/u/1092375?v=4"
},
{
"type": "User",
"login": "nathanBurg",
"commits": 67,
"avatar_url": "https://avatars.githubusercontent.com/u/58287074?v=4"
},
{
"type": "User",
"login": "skvark",
"commits": 53,
"avatar_url": "https://avatars.githubusercontent.com/u/695340?v=4"
},
{
"type": "User",
"login": "eze-githits",
"commits": 9,
"avatar_url": "https://avatars.githubusercontent.com/u/261939443?v=4"
}
],
"contributors_sampled": 4,
"top_contributor_share": 0.761
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"main.yml",
"mcp-release.yml",
"pr.yml",
"release.yml"
],
"has_docs_dir": true,
"linter_configs": [
"biome.json"
],
"has_editorconfig": true,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 3,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/12 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 4 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "40 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "78f01dcf296bd4dabc993f8f4b00ddccb67db158",
"ran_at": "2026-07-22T04:15:59Z",
"aggregate_score": 4.8,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-21T19:44:29Z",
"oldest_open_prs": [
{
"number": 178,
"created_at": "2026-06-20T14:03:19Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 181,
"created_at": "2026-06-22T06:21:07Z",
"last_comment_at": "2026-06-22T06:46:53Z",
"last_comment_author": "santhil-cyber"
},
{
"number": 212,
"created_at": "2026-07-07T11:01:11Z",
"last_comment_at": "2026-07-07T18:03:46Z",
"last_comment_author": "jlitola"
},
{
"number": 213,
"created_at": "2026-07-07T19:43:47Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 214,
"created_at": "2026-07-07T19:44:05Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 215,
"created_at": "2026-07-07T19:44:11Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 216,
"created_at": "2026-07-07T19:44:17Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 217,
"created_at": "2026-07-07T19:44:25Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 218,
"created_at": "2026-07-07T19:44:30Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 228,
"created_at": "2026-07-21T19:44:22Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 229,
"created_at": "2026-07-22T01:17:52Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-17T08:33:13Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 179,
"created_at": "2026-06-20T14:17:04Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 180,
"created_at": "2026-06-22T06:06:58Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/githits-com/githits-cli",
"host": "github.com",
"name": "githits-cli",
"owner": "githits-com"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"security": 48,
"vitality": 86,
"community": 47,
"governance": 58,
"engineering": 94
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 86,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 77,
"inputs": {
"commits_last_year": 545,
"human_commit_share": 0.98,
"days_since_last_push": 0,
"active_weeks_last_year": 19
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "19/52 weeks with commits",
"points": 13.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 19
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "545 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 545
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 54,
"latest_release_tag": "mcp-v0.6.3",
"releases_from_tags": false,
"days_since_latest_release": 4,
"mean_days_between_releases": 2
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "54 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 54
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 4 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 4
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~2 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 2
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 47,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 37,
"inputs": {
"forks": 7,
"stars": 73,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "below_threshold"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "73 stars",
"points": 30.1,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 73
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "7 forks",
"points": 6.5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 7
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 59,
"inputs": {
"packages": [
"githits"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 3418
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "3,418 downloads/month across npm",
"points": 47.1,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 3418,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 58,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 30,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 4,
"top_contributor_share": 0.761
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 76% of commits",
"points": 5.4,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 76
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "4 contributors",
"points": 5.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 4
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 4 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 69,
"inputs": {
"merged_prs": 196,
"open_issues": 2,
"closed_issues": 5,
"issue_closed_ratio": 0.714,
"closed_unmerged_prs": 15
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "71% of issues closed",
"points": 33.4,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 71
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "196/211 decided PRs merged",
"points": 35.5,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 196,
"decided": 211
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/12 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 48,
"inputs": {
"followers": 14,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "githits-com",
"public_repos": 7,
"account_age_days": 509
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "14 followers of githits-com",
"points": 8.5,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 14,
"login": "githits-com"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "7 public repos, account ~1 yr old",
"points": 9.4,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 7
}
},
{
"code": "account_age_years",
"params": {
"years": 1
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"githits"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 4
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 4 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 4
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "44 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 44
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 94,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "excellent",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": true,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "5 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 5
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "biome.json",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "biome.json"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 6.4,
"status": "met",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"topics": [
"ai-coding-tools",
"ai-tools",
"cli",
"context-api",
"context-engineering",
"context-layer-for-ai",
"index",
"mcp",
"mcp-server",
"remote-mcp",
"skills",
"code-graph",
"code-search",
"context7-alternative",
"documentation-mcp"
],
"has_wiki": true,
"homepage": "https://githits.com",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://githits.com",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "15 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 15
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 48,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 48,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 4.8
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/12 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 4 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "40 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 6
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 65,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md",
"GEMINI.md"
],
"agent_instruction_max_bytes": 10524
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "AGENTS.md, CLAUDE.md, GEMINI.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "AGENTS.md, CLAUDE.md, GEMINI.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "98 of 98 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 98,
"sampled": 98
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 54,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"tsconfig.json"
],
"agent_commit_share": 0.01,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0.02
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "biome.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "biome.json"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "1 of the last 100 commits agent-authored or agent-credited",
"points": 2,
"status": "partial",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 1,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "2 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 2,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 99,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 189340,
"source_files_sampled": 346,
"oversized_source_files": 7
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "7/346 source files over 60KB",
"points": 53.9,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 346,
"oversized": 7
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "critical",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"example_dirs": [],
"has_mcp_signal": true,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 20,
"status": "met",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"deps.dev does not index npm:githits@0.6.4; advisories assessed against the repository dependency graph instead"
],
"report_type": "repository",
"generated_at": "2026-07-22T04:16:18.549951Z",
"schema_version": "0.26.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/g/githits-com/githits-cli.svg",
"full_name": "githits-com/githits-cli",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.26.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — npm.