Public recordModerate
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-24 03:22 UTC
gultyayev / ngx-virtual-dnd
Virtual Scroll with Drag'n'drop support
gultyayev/ngx-virtual-dnd holds a health index of 60 out of 100, placing it in the Moderate band. It scores highest on Vitality (80/100) and lowest on Community & Adoption (41/100). It was last updated 5 days ago. A single contributor accounts for most of its recent work.
60
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
60
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
Sergey Gultyayev (aka Serhii Hultiaiev)Personal account
9 followers53 public repossince Sep 2016EPAM Systems
This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish | Tags |
|---|---|---|---|---|---|---|
| npm | ngx-virtual-dnd | 3.1.3 | 39,711 | 24 | 5 days ago | angulardrag-and-dropdndvirtual-scrollvirtual-scrollingsortablereordersignals |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
80
Development activity
74Good
How it's scored
| 36/36 | Push recency — last push 5 days ago |
| 10.4/36 | Commit cadence — 15/52 weeks with commits |
| 18/18 | Commit volume — 181 commits in the last year |
| 10/10 | OpenSSF Scorecard: Maintained — 30 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10 |
Inputs used
| commits_last_year | 181 |
| human_commit_share | 1 |
| days_since_last_push | 5 |
| active_weeks_last_year | 15 |
Release discipline
88Excellent
How it's scored
| 16.2/27 | Ships releases — 24 version tags (no GitHub releases) |
| 36/36 | Release recency — latest release 5 days ago |
| 27/27 | Release cadence — a release every ~17.2 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 24 |
| latest_release_tag | v3.1.3 |
| releases_from_tags | yes |
| days_since_latest_release | 5 |
| mean_days_between_releases | 17.2 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
41
Popularity & adoption
5Critical
How it's scored
| 4.9/60 | Stars — 3 stars |
| 0/25 | Forks — 0 forks |
| 0/15 | Watchers — 0 watchers |
Inputs used
| forks | 0 |
| stars | 3 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
57Moderate
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (MIT) |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 6.3/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | yes |
How it's scored
| 61.3/80 | Monthly downloads — 39,711 downloads/month across npm |
| 0/20 | Registry dependents — not reported by this ecosystem |
Inputs used
| packages | ngx-virtual-dnd |
| dependents | — |
| ecosystems | npm |
| total_downloads | — |
| monthly_downloads | 39,711 |
Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
52
Maintainer resilience (bus factor)
13Critical
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 0/22.5 | Commit distribution — top contributor authored 100% of commits |
| 1.4/13.5 | Contributor breadth — 1 contributors |
| 3/10 | OpenSSF Scorecard: Contributors — project has 1 contributing companies or organizations -- score normalized to 3 |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
Issue & PR responsiveness
60Moderate
How it's scored
| 26.2/46.8 | Issue resolution — 56% of issues closed |
| 33.5/38.3 | PR acceptance — 35/40 decided PRs merged |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 35 |
| open_issues | 11 |
| closed_issues | 14 |
| issue_closed_ratio | 0.56 |
| closed_unmerged_prs | 5 |
Ownership & stewardship
52Moderate
How it's scored
| 10/30 | Ownership backing — personal (user) account |
| 0/20 | Verified domain — not applicable to user accounts |
| 7.2/25 | Owner reach — 9 followers of gultyayev |
| 24.6/25 | Track record — 53 public repos, account ~9 yr old |
Inputs used
| followers | 9 |
| owner_type | User |
| is_verified | — |
| owner_login | gultyayev |
| public_repos | 53 |
| account_age_days | 3,591 |
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.
Package maintenance
100Excellent
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on npm |
| 35/35 | Publish recency — latest publish 5 days ago |
| 20/20 | Version history — 24 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | ngx-virtual-dnd |
| ecosystems | npm |
| any_deprecated | no |
| min_days_since_publish | 5 |
Engineering Quality
Are baseline engineering and documentation practices in place?
76
Engineering practices
84Good
How it's scored
| 24/24 | CI workflows — 3 workflow(s) |
| 24/24 | Tests present |
| 16/16 | Linter config — eslint.config.mjs |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 17 out of 17 merged PRs checked by a CI test -- score normalized to 10 |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | yes |
| has_precommit_config | no |
Documentation
65Moderate
How it's scored
| 30/30 | README |
| 0/25 | Documentation directory |
| 15/15 | Documentation / homepage site — https://gultyayev.github.io/ngx-virtual-dnd/ |
| 10/10 | Repository description |
| 0/10 | Topics |
| 10/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | yes |
| homepage | https://gultyayev.github.io/ngx-virtual-dnd/ |
| has_readme | yes |
| has_docs_dir | no |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
47
Security posture
34At risk
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 2.2/7.5 | Branch-Protection — branch protection is not maximal on development and all release branches |
| 2.5/2.5 | CI-Tests — 17 out of 17 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 0.8/2.5 | Contributors — project has 1 contributing companies or organizations -- score normalized to 3 |
| 0/10 | Dangerous-Workflow — dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — no data |
| 1/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 2 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — no data |
| 7.5/7.5 | Token-Permissions — GitHub workflow tokens follow principle of least privilege |
| 0/7.5 | Vulnerabilities — 122 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 3.4 |
Excluded from scoring (no data or not applicable): packaging, signed_releases. Remaining weights renormalized.
Dependency advisories
100Excellent
How it's scored
| 35/35 | Direct dependencies free of known advisories — no direct dependency carries a known advisory |
| 25/25 | Indirect dependencies free of known advisories — no indirect dependency carries a known advisory |
| 0/40 | No advisories left outstanding — no advisory carries a publication date |
Inputs used
| source | osv |
| advisories | 0 |
| affected_packages | 0 |
| assessed_packages | 1 |
| unassessed_packages | 0 |
| affected_by_severity | none |
| direct_affected_packages | 0 |
Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:ngx-virtual-dnd@3.1.3 runtime dependency closure — what installing the published package pulls in — 1 packages. Reachability is not analyzed.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
79
Agent context & guidance
85Excellent
How it's scored
| 45/45 | Agent instructions — .claude/CLAUDE.md, AGENTS.md |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 100 of 100 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 1 |
| agent_instruction_files | .claude/CLAUDE.md, AGENTS.md |
| agent_instruction_max_bytes | 25,961 |
Verify loop (build / test / typecheck)
66Moderate
How it's scored
| 0/18 | One-command bootstrap |
| 22/22 | Automated tests |
| 11/11 | Lint / format config — eslint.config.mjs |
| 11/11 | Static type checking — .storybook/tsconfig.json, tsconfig.json |
| 10/10 | Reproducible environment — lockfile |
| 10/10 | Demonstrated agent practice — 5 of the last 100 commits agent-authored or agent-credited |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 2/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 2 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | package-lock.json |
| has_dockerfile | no |
| typed_language | yes |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | yes |
| typecheck_configs | .storybook/tsconfig.json, tsconfig.json |
| agent_commit_share | 0.05 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
Code legibility for models
100Excellent
How it's scored
| 45/45 | Type-checkable code — TypeScript (statically typed) |
| 55/55 | Manageable file sizes — 0/132 source files over 60KB |
Inputs used
| primary_language | TypeScript |
| largest_source_bytes | 50,528 |
| source_files_sampled | 132 |
| oversized_source_files | 0 |
Key facts
3GitHub stars
1contributors
181commits, last 12 months
5days since last push
24releases
1bus factor
11open issues
npmpackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
OpenSSF Scorecard 3.4 / 10
3.4aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 3 | Branch-Protection | branch protection is not maximal on development and all release branches |
| 10 | CI-Tests | 17 out of 17 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 3 | Contributors | project has 1 contributing companies or organizations -- score normalized to 3 |
| 0 | Dangerous-Workflow | dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10 |
| n/a | Packaging | packaging workflow not detected |
| 2 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 2 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| n/a | Signed-Releases | no releases found |
| 10 | Token-Permissions | GitHub workflow tokens follow principle of least privilege |
| 0 | Vulnerabilities | 122 existing vulnerabilities detected |
Direct dependencies 10
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| npm | @angular/common | ^21.0.0 | package.json |
| npm | @angular/compiler | ^21.0.0 | package.json |
| npm | @angular/core | ^21.0.0 | package.json |
| npm | @angular/forms | ^21.0.0 | package.json |
| npm | @angular/platform-browser | ^21.0.0 | package.json |
| npm | @angular/router | ^21.0.0 | package.json |
| npm | @ionic/angular | ^8.7.16 | package.json |
| npm | rxjs | ~7.8.0 | package.json |
| npm | tslib | ^2.3.0 | package.json |
| npm | tslib | ^2.3.0 | projects/ngx-virtual-dnd/package.json |
All dependencies not collected
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Dependency advisories 0
Installing npm:ngx-virtual-dnd@3.1.3 pulls in 1 packages, direct and transitive: 0 carry known advisories, of which 0 are direct dependencies.
No known advisories affect the assessed dependencies.
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 2269,
"has_wiki": true,
"homepage": "https://gultyayev.github.io/ngx-virtual-dnd/",
"languages": {
"CSS": 2390,
"MDX": 11555,
"HTML": 30255,
"SCSS": 29619,
"Shell": 145,
"JavaScript": 7094,
"TypeScript": 935354
},
"pushed_at": "2026-07-18T20:44:09Z",
"created_at": "2025-12-21T19:06:50Z",
"owner_type": "User",
"updated_at": "2026-07-18T17:43:57Z",
"description": "Virtual Scroll with Drag'n'drop support",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "master",
"license_spdx_raw": "MIT",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript"
]
},
"owner": {
"blog": null,
"name": "Sergey Gultyayev (aka Serhii Hultiaiev)",
"type": "User",
"login": "gultyayev",
"company": "EPAM Systems",
"location": "Warsaw, Poland",
"followers": 9,
"avatar_url": "https://avatars.githubusercontent.com/u/22374911?v=4",
"created_at": "2016-09-22T15:33:57Z",
"is_verified": null,
"public_repos": 53,
"account_age_days": 3591
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v3.1.3",
"kind": "patch",
"published_at": "2026-07-18T17:35:51Z"
},
{
"tag": "v3.1.2",
"kind": "patch",
"published_at": "2026-07-07T17:29:35Z"
},
{
"tag": "v3.1.1",
"kind": "patch",
"published_at": "2026-06-24T18:50:00Z"
},
{
"tag": "v3.1.0",
"kind": "minor",
"published_at": "2026-06-23T19:41:13Z"
},
{
"tag": "v3.0.1",
"kind": "patch",
"published_at": "2026-03-05T19:44:08Z"
},
{
"tag": "v3.0.0",
"kind": "major",
"published_at": "2026-02-20T11:53:21Z"
},
{
"tag": "v2.0.0",
"kind": "major",
"published_at": "2026-02-17T17:55:19Z"
},
{
"tag": "v2.0.0-alpha.1",
"kind": "prerelease",
"published_at": "2026-02-14T14:35:37Z"
},
{
"tag": "v2.0.0-alpha.0",
"kind": "prerelease",
"published_at": "2026-02-13T22:58:34Z"
},
{
"tag": "v1.3.0-alpha.6",
"kind": "prerelease",
"published_at": "2026-02-13T20:24:43Z"
},
{
"tag": "v1.3.0-alpha.5",
"kind": "prerelease",
"published_at": "2026-02-13T13:18:23Z"
},
{
"tag": "v1.3.0-alpha.4",
"kind": "prerelease",
"published_at": "2026-02-13T12:24:15Z"
},
{
"tag": "v1.3.0-alpha.3",
"kind": "prerelease",
"published_at": "2026-02-13T11:22:05Z"
},
{
"tag": "v1.3.0-alpha.2",
"kind": "prerelease",
"published_at": "2026-02-13T11:07:28Z"
},
{
"tag": "v1.3.0-alpha.1",
"kind": "prerelease",
"published_at": "2026-02-12T17:16:49Z"
},
{
"tag": "v1.3.0-alpha.0",
"kind": "prerelease",
"published_at": "2026-02-11T14:10:45Z"
},
{
"tag": "v1.2.3",
"kind": "patch",
"published_at": "2026-02-06T10:12:16Z"
},
{
"tag": "v1.2.2",
"kind": "patch",
"published_at": "2026-01-24T08:13:46Z"
},
{
"tag": "v1.2.1",
"kind": "patch",
"published_at": "2026-01-23T18:47:34Z"
},
{
"tag": "v1.2.0",
"kind": "minor",
"published_at": "2026-01-23T09:27:55Z"
},
{
"tag": "v1.1.2",
"kind": "patch",
"published_at": "2026-01-14T09:34:09Z"
},
{
"tag": "v1.1.1",
"kind": "patch",
"published_at": "2026-01-08T12:09:43Z"
},
{
"tag": "v1.1.0",
"kind": "minor",
"published_at": "2026-01-08T09:40:14Z"
},
{
"tag": "v1.0.0",
"kind": "major",
"published_at": "2025-12-30T12:41:19Z"
}
],
"recent_commits": [
{
"oid": "ca4558e23a072ae8b77bc96212772c1b0bf132f0",
"body": null,
"is_bot": false,
"headline": "chore: limit changelog scope by path",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-07-18T17:43:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "242f7bcd8bcda11fb7c531f0aa97a31c2bc6d4dc",
"body": null,
"is_bot": false,
"headline": "chore: align repo URLs and Pages base-href with ngx-virtual-dnd rename",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-07-18T17:39:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "92556209afd2b32242df1cf51cd553649090dde2",
"body": null,
"is_bot": false,
"headline": "chore(release): 3.1.3",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-07-18T17:35:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "74e4242da76c5d1c78ea0d1e61a39997dd994f40",
"body": null,
"is_bot": false,
"headline": "fix(e2e): wait for stable demo layout (#65)",
"author_name": "Sergey Gultyayev (aka Serhii Hultiaiev)",
"author_login": "gultyayev",
"committed_at": "2026-07-18T17:33:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "00c2a6c20cb9aa3c502b6a897511c941a3304c40",
"body": null,
"is_bot": false,
"headline": "docs(deps): align repository URLs with npm package name",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-07-18T16:53:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "30b51953e0e20e18bfd731d14c9a09cdcd096169",
"body": null,
"is_bot": false,
"headline": "docs: correct lockAxis semantics to match implementation (#64)",
"author_name": "Sergey Gultyayev (aka Serhii Hultiaiev)",
"author_login": "gultyayev",
"committed_at": "2026-07-18T16:52:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "62d314f5c471a9269dbe6c5cc661d2695c78a3ea",
"body": null,
"is_bot": false,
"headline": "fix: gate perf by measuring base and head on the same runner (#63)",
"author_name": "Sergey Gultyayev (aka Serhii Hultiaiev)",
"author_login": "gultyayev",
"committed_at": "2026-07-18T16:28:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b2acd8a3212411151d575d976b26ef0afb40a5d4",
"body": "…ame (#62)\n\nCo-authored-by: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "perf(lib): stop active droppable effect from re-snapshotting every fr…",
"author_name": "Sergey Gultyayev (aka Serhii Hultiaiev)",
"author_login": "gultyayev",
"committed_at": "2026-07-18T12:19:40Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "c71c51c5ade6a535216149e05e37e0222bdbfbed",
"body": "…changes (#61)",
"is_bot": false,
"headline": "fix(lib): make autoscroll registration resilient to post-init layout …",
"author_name": "Sergey Gultyayev (aka Serhii Hultiaiev)",
"author_login": "gultyayev",
"committed_at": "2026-07-18T10:10:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38eee565d5c46e85dda1b880a8904c125653b574",
"body": "Co-authored-by: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(lib): fall through exhausted nested containers in autoscroll (#60)",
"author_name": "Sergey Gultyayev (aka Serhii Hultiaiev)",
"author_login": "gultyayev",
"committed_at": "2026-07-17T19:27:33Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a2bd95678b48c04bd2447ed62a6f131a460f6b81",
"body": "…Service (#59)\n\nCo-authored-by: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(lib): route keyboard cross-list count through DragIndexCalculator…",
"author_name": "Sergey Gultyayev (aka Serhii Hultiaiev)",
"author_login": "gultyayev",
"committed_at": "2026-07-17T18:32:49Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "b9d21d7bd8c8bed754627c0cb4e0ccd212e70303",
"body": null,
"is_bot": false,
"headline": "fix(lib): refresh drag hit-test candidates on mid-drag DOM changes (#58)",
"author_name": "Sergey Gultyayev (aka Serhii Hultiaiev)",
"author_login": "gultyayev",
"committed_at": "2026-07-17T15:15:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e6128925c62521b9baba3c3077a5fd9cdb701a0e",
"body": null,
"is_bot": false,
"headline": "docs: add pull request template",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-07-17T13:25:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c6330d2cc7f4edd1ae30a52248f0550c52d4d39",
"body": "Co-authored-by: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: run full browser matrix on PR E2E and surface flaky tests (#54)",
"author_name": "Sergey Gultyayev (aka Serhii Hultiaiev)",
"author_login": "gultyayev",
"committed_at": "2026-07-17T13:11:48Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "39515f4dc62e1bf91c418ffa6bc3511493e141ba",
"body": null,
"is_bot": false,
"headline": "test(e2e): stabilize cross-browser autoscroll drags (#56)",
"author_name": "Sergey Gultyayev (aka Serhii Hultiaiev)",
"author_login": "gultyayev",
"committed_at": "2026-07-15T18:38:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ba9ecb98e09c7f8811f0cd31e1433894b214f88c",
"body": null,
"is_bot": false,
"headline": "chore: update instructions",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-07-14T19:58:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "44379e46b9fb42aabf1ac77f3487e17e7e4e2fab",
"body": null,
"is_bot": false,
"headline": "test(e2e): fix Firefox Playwright tests hanging behind HTTP proxy (#57)",
"author_name": "Sergey Gultyayev (aka Serhii Hultiaiev)",
"author_login": "gultyayev",
"committed_at": "2026-07-14T19:55:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c981a3c751b39f4a4e1aa6e78a8a49a874e4836",
"body": null,
"is_bot": false,
"headline": "ci: check out PR merge commit and drop noisy heap benchmark metric (#53)",
"author_name": "Sergey Gultyayev (aka Serhii Hultiaiev)",
"author_login": "gultyayev",
"committed_at": "2026-07-14T12:38:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "833b22f923a9cf0e9b2881733590f6f901524766",
"body": null,
"is_bot": false,
"headline": "chore: refresh baseline",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-07-13T19:28:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "061828c7402e5f769fa42d92428d2f51c808bf7b",
"body": null,
"is_bot": false,
"headline": "fix: make performance regression gate reliable (#52)",
"author_name": "Sergey Gultyayev (aka Serhii Hultiaiev)",
"author_login": "gultyayev",
"committed_at": "2026-07-13T19:24:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1865768632d398017a7d9bb2527d21c70e917c6b",
"body": null,
"is_bot": false,
"headline": "chore: tune claude",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-07-13T18:01:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0efb3ec740c3536c1d05e7a72f2e4ddd0f4d3a7b",
"body": "…#51)\n\nCo-authored-by: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(lib): exclude disabled droppables from drag-time candidate sets (…",
"author_name": "Sergey Gultyayev (aka Serhii Hultiaiev)",
"author_login": "gultyayev",
"committed_at": "2026-07-13T18:01:15Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "5c15bc732ddfc3e0ca78f442ec8e354e88dc6324",
"body": null,
"is_bot": false,
"headline": "test(e2e): stabilize dynamic-height reorder drag (#50)",
"author_name": "Sergey Gultyayev (aka Serhii Hultiaiev)",
"author_login": "gultyayev",
"committed_at": "2026-07-13T09:42:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4f54b8ffb85ccd331e150a8c7f19139b68f6060d",
"body": null,
"is_bot": false,
"headline": "fix(lib): normalize keyboard drag end index (#45)",
"author_name": "Sergey Gultyayev (aka Serhii Hultiaiev)",
"author_login": "gultyayev",
"committed_at": "2026-07-11T20:30:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f23c56ca7e4189644683a8f79a9f8e5c49ef6e1",
"body": null,
"is_bot": false,
"headline": "chore: return npm ci",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-07-11T19:34:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6695753c3691930ea1a880a58a7fe128abefa4cc",
"body": null,
"is_bot": false,
"headline": "fix(lib): preserve source index across rapid cross-list drags (#44)",
"author_name": "Sergey Gultyayev (aka Serhii Hultiaiev)",
"author_login": "gultyayev",
"committed_at": "2026-07-11T18:10:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ec1cb029b8ab48bbeb56e6e5e8c7bc4f27ac68f",
"body": null,
"is_bot": false,
"headline": "chore: drop claude workarounds",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-07-11T18:02:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "30e5d75387457980a760bb0559963ef6aa5db2ce",
"body": null,
"is_bot": false,
"headline": "chore: humble claude",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-07-10T20:27:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e22ee19410cc215faf57c48c49674af5e5d34373",
"body": null,
"is_bot": false,
"headline": "fix(demo): remove Ionic md elevation shadow from task page headers",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-07-08T15:28:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f12e62d470d5885aea35158eaf7143a949fa8e8",
"body": null,
"is_bot": false,
"headline": "chore(release): 3.1.2",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-07-07T17:29:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a3f21aadab6dc77c199c57d844ab09f576b65689",
"body": null,
"is_bot": false,
"headline": "test(e2e): make constrained bottom drag deterministic",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-07-07T17:27:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e519c90574752739f59c6f1a97bc5fc4357653f9",
"body": null,
"is_bot": false,
"headline": "test(e2e): stabilize virtual scroll drag assertions",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-07-07T16:16:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5aae0ee0fde369e4f9737de40099172972ee2b18",
"body": null,
"is_bot": false,
"headline": "chore(demo): update demo UI",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-07-07T15:15:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab2ea17091ba7ff883c4a55518a60434c5861461",
"body": null,
"is_bot": false,
"headline": "fix(lib): safely resolve consumer IDs in attribute lookups",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-07-07T07:29:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "78ba6396a9e641a064ddc3a5a0b615073741f3a6",
"body": null,
"is_bot": false,
"headline": "chore: update skills",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-07-06T19:57:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a9993016b5ad53615d6621c72a8b7599fd14e94a",
"body": null,
"is_bot": false,
"headline": "test(e2e): harden selectors and timing policy",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-07-06T19:53:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c084a32aa458326a8a684e17270c3ab4c5bf50f9",
"body": null,
"is_bot": false,
"headline": "fix(lib): sync auto-scroll registration with signal inputs",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-07-06T19:14:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2057a387398dc5b3ff02b4a3c2fff42d39e4acf9",
"body": null,
"is_bot": false,
"headline": "fix(lib): refresh viewport transforms on drag exclusion changes",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-07-06T18:59:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "326d8e29f055a98b15e4575dc3ad6847853015fe",
"body": null,
"is_bot": false,
"headline": "chore(release): 3.1.1",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-06-24T18:50:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7f075621c78886ae1ced105f3835b2844c11cb5b",
"body": null,
"is_bot": false,
"headline": "perf(lib): drag-and-drop hot-path optimizations (#18)",
"author_name": "Sergey Gultyayev (aka Serhii Hultiaiev)",
"author_login": "gultyayev",
"committed_at": "2026-06-24T18:45:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2a4ef44e6f57aabf439a090edfde7fc93b289f3e",
"body": null,
"is_bot": false,
"headline": "docs: add 4.0 architecture review and refactor plan",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-06-23T20:34:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3a220f46703a9bc611adfc091eb885e82db1235d",
"body": null,
"is_bot": false,
"headline": "chore(release): 3.1.0",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-06-23T19:41:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "40db3087867e44bd0698c7940bd278e44135549f",
"body": null,
"is_bot": false,
"headline": "feat(lib): allow Angular 22 in peer dependency range",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-06-23T19:38:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d773ae353ae773f093ff79a5e2ce5a37f609b74d",
"body": null,
"is_bot": false,
"headline": "chore(e2e): add automated performance benchmarks with Playwright (#17)",
"author_name": "Sergey Gultyayev (Serhii Hultiaiev)",
"author_login": "gultyayev",
"committed_at": "2026-03-06T21:35:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5dc0daf91e780ec7f8ff86a4dc50a36efd5f27b",
"body": null,
"is_bot": false,
"headline": "chore: add chrome devtools plugin",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-03-06T09:18:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1da054b0515c7c99b4d6490976c64c90888ae846",
"body": null,
"is_bot": false,
"headline": "chore: drop mcp",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-03-06T09:15:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0db73020594e575adfea0897d6106e87f63ecc66",
"body": null,
"is_bot": false,
"headline": "chore(release): 3.0.1",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-03-05T19:44:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6be81b4ce4fbd088b9ca739b0058be182973afbc",
"body": "Three targeted optimizations to the per-frame hot path:\n\n1. Skip pointerEvents toggle for hidden elements: During active drag\n the dragged element has display:none, so offsetParent is null.\n Skip the style.pointerEvents write-read-write cycle that forces\n style recalculation on every elementFr\n[…]\nessure.\n\n3. Skip autoscroll tick when cursor is stationary: When cursor\n position hasn't changed and no scrolling is active, skip the\n container iteration and getBoundingClientRect calls entirely.",
"is_bot": false,
"headline": "perf(lib): optimize hot-path services for active drag",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-03-05T19:30:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "53f9c59fd231172cdfe120113dc7abaf320895d7",
"body": "Cache DOM queries (querySelector, matches, closest, getAttribute,\nhasAttribute) that are invariant during a drag session in a per-element\nMap. The cache is populated on first access per droppable and cleared\nwhen the drag ends (pointer or keyboard).\n\nAlso inlines the strategy.getItemCount() check in\ncalculatePlaceholderIndex to avoid duplicate DOM queries previously\nperformed by #getTotalItemCount.\n\nEliminates ~9 redundant DOM queries per frame during drag (~120x/sec).",
"is_bot": false,
"headline": "perf(lib): cache droppable metadata during active drag",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-03-05T19:30:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2e1bddb09d32fde04c74501e7b463e69cad18fba",
"body": null,
"is_bot": false,
"headline": "chore: update port",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-03-05T14:43:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dd8db6eee4c98b3b6c80595a94a5669b204a8bc0",
"body": null,
"is_bot": false,
"headline": "chore(release): 3.0.0",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-20T11:53:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ea2a0d5918ab69d9a9504369444794e8a5e78373",
"body": null,
"is_bot": false,
"headline": "chore: drop unneeded skills",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-20T10:34:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ac1bd673f10435b05b7613883b87e2317d89412",
"body": "… E2E reorder\n\nconstrainToContainer was clamping against the droppable element's rect, which\nin virtual scroll scenarios extends far beyond the visible viewport. Now clamps\nagainst the nearest `.vdnd-scrollable` ancestor (the visible viewport). Also\nadds a cursor override to AutoScrollService so edg\n[…]\nes flaky `should correctly reorder after scrolling` in WebKit by capturing\nfresh target coordinates after drag starts (source hides, items shift) and\nadding a direct mouse.move after the stepped move.",
"is_bot": false,
"headline": "fix(lib): clamp constrainToContainer to scroll viewport and fix flaky…",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-19T19:24:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c00199e8d2d9cecd399199fffc89a3eabe34a0a6",
"body": null,
"is_bot": false,
"headline": "chore: improve instructions",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-19T08:12:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ff680d82183e4e95e6b3f61cc3940d8c7962eca8",
"body": "Remove outputs with zero consumer usage that created feedback loop\nrisks (effects emitting events consumers could write back into tracked\nsignals with no deduplication).\n\nRemoved outputs:\n- DraggableDirective: dragMove, dragReadyChange\n- DroppableDirective: dragEnter, dragLeave, dragOver\n- VirtualSc\n[…]\nionChange outputs have\nbeen removed along with their associated event types. Use\nDragStateService signals for equivalent reactive state, and the\nvdnd-drag-pending CSS class instead of dragReadyChange.",
"is_bot": false,
"headline": "feat(lib)!: remove 7 unused outputs from public API",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-18T21:00:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c05420c194bafd396d78d4cf3bc322c609950c3a",
"body": "…undant wrapper\n\nStatic host and template [style.*] bindings that never change at runtime\nare now CSS rules on :host or named classes. Removes the redundant\n.vdnd-virtual-scroll-content wrapper div. Updates unit tests to verify\nclass presence instead of inline styles (jsdom limitation). Documents\nthe static-CSS/dynamic-binding convention in CLAUDE.md.",
"is_bot": false,
"headline": "refactor(lib): move static style bindings to CSS rules and remove red…",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-18T20:18:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "470059380576dd86c5fa674bb66386400d87df56",
"body": "Audit confirmed zero issues in current code — all high-frequency listeners\nalready use programmatic addEventListener inside runOutsideAngular. Added\nguidance to prevent future regressions:\n\n- Expand runOutsideAngular bullet to include ResizeObserver\n- New bullet explaining why template bindings are unsafe for high-frequency\n events (mousemove, scroll, etc.) and which events are fine as host bindings\n- Cross-reference in Templates section reinforcing the same guidance",
"is_bot": false,
"headline": "docs: document high-frequency event binding performance pattern",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-18T19:45:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4584225f21788f89885a40863b48b4b249103c60",
"body": null,
"is_bot": false,
"headline": "chore(release): 2.0.0",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-17T17:55:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7067a4d2dfafd10d4499ba75bb921b48012d5869",
"body": "Add skills/ngx-virtual-dnd/ with SKILL.md (integration guide) and\nreferences/api-reference.md (exhaustive API tables) so AI coding\nassistants can correctly integrate the library via `npx skills add`.\nUpdate CLAUDE.md with rule 11 (keep skills in sync), lazy doc entries,\ncommon task, and project structure table. Add AI Agent Skills section\nto README.md.",
"is_bot": false,
"headline": "docs: add installable AI agent skill for library consumers",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-14T18:42:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8391c0bb5e5dfe666fc0ca0d925bc884c37b4649",
"body": "… extract lazy docs\n\n- Fix ngDevMode contradiction (use isDevMode() consistently)\n- Fix data-item-height \"Set By\" attribution\n- Remove phantom void element.offsetHeight from Safari example\n- Fix E2E edge offset contradiction with .ai/E2E.md\n- Add missing component, data attributes, directive inputs,\n[…]\nzy docs\n- Add \"When to Create Lazy Documentation\" guidelines\n- Strengthen Rule #9 to cover code examples, architecture, and lazy docs\n- Update Event Listener Cleanup to reference createBoundListener()",
"is_bot": false,
"headline": "docs: audit and fix CLAUDE.md — remove contradictions, update tables,…",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-14T17:02:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0ef43c4054e562cb783b217fb6793c798c99b025",
"body": null,
"is_bot": false,
"headline": "chore(release): 2.0.0-alpha.1",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-14T14:35:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac816836fab7cf040d67ba7314a06f90e8c33c07",
"body": null,
"is_bot": false,
"headline": "test(e2e): eliminate TOCTOU race in E2E placeholder helpers",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-14T14:31:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15edc88747ca64d7242388a37f09890f3a38a7ce",
"body": "Remove Firefox skip from simplified mode autoscroll test by fixing\nthree compounding issues: replace two-step drag with single edge move,\nadd direct follow-up after stepped move for Firefox, and replace\nwaitForTimeout with retrying assertion.",
"is_bot": false,
"headline": "test(lib): fix Firefox-skipped autoscroll E2E test",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-14T14:09:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "10cc475e9b96c4323395f1433c126287732696a5",
"body": null,
"is_bot": false,
"headline": "docs: add unit test quality guidelines to CLAUDE.md",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-14T11:02:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8fa37b9e865ece1a10328f5df7459d74fad18d50",
"body": null,
"is_bot": false,
"headline": "test(lib): expand virtual-for directive tests and fix axis lock tests",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-14T11:02:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "84e8e2744d787a87a264099bb6ccc2a606700071",
"body": null,
"is_bot": false,
"headline": "test(lib): replace waitForTimeout with web-first assertions in E2E tests",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-14T11:02:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8544bb571eafe727dcb10ca6773054209f3dda39",
"body": null,
"is_bot": false,
"headline": "test(lib): expand DynamicHeightStrategy test coverage",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-14T11:02:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "baae85ce86db7be70390dff3ee7917e85a83097d",
"body": null,
"is_bot": false,
"headline": "test(lib): add unit tests for KeyboardDragService",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-14T11:01:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cfad2a3a070ce3d989b1afc958edf71493926ec1",
"body": null,
"is_bot": false,
"headline": "test(lib): rewrite auto-scroll service tests with real assertions",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-14T11:01:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "18d642f880461f4c59d5252ab1eee1b8c0bbc506",
"body": null,
"is_bot": false,
"headline": "perf(lib): split high-frequency signals from monolithic drag state",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-14T11:01:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "78f3cc716a9d52b0a3655847ef4e4ce4183c54ce",
"body": null,
"is_bot": false,
"headline": "chore: cleanup",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-13T23:00:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a5126a964c9883959ee43b3150f89645f61811c5",
"body": null,
"is_bot": false,
"headline": "chore(release): 2.0.0-alpha.0",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-13T22:58:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b94b6345f2d0f8e2da861ed72d9e7cc6e40ac73f",
"body": "…ctive\n\nEliminate ~20 lines of ResizeObserver boilerplate per consumer by letting\nVirtualContentComponent own the header DOM via content projection. A new\n`vdndContentHeader` marker directive is projected into a named slot and\nauto-measured with ResizeObserver, replacing the manual `contentOffset`\ni\n[…]\nAKING CHANGE: VirtualContentComponent template restructured — virtual\narea is now wrapped in a `.vdnd-virtual-area` div. Consumers using\n`contentOffset` are unaffected (it remains as an escape hatch).",
"is_bot": false,
"headline": "feat(lib): auto-measure projected header height via ContentHeaderDire…",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-13T22:54:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9adf28c669327a022af4b6a4c0769a7845d6a5b0",
"body": null,
"is_bot": false,
"headline": "chore: add angular skills",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-13T22:07:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9e20230df4d1870787660579f123c0bfb6432eb5",
"body": "Constrained mode had separate probe logic (top-edge probe, no midpoint\nrefinement) that conflicted with the improved capped center probe,\ncausing placeholder drift with dynamic heights. Unified the index\ncalculation so both modes use the same capped center + midpoint\nrefinement. Edge snapping is retained for boundary cases and now\nuses the droppable rect instead of the scroll container rect.",
"is_bot": false,
"headline": "fix(lib): unify constrained mode probe logic with capped center",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-13T21:52:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2745934ea1280f17ca7c01c622ec7409a5f789e0",
"body": "BREAKING CHANGE: `totalItems` input removed from `VirtualViewportComponent`\nand `VirtualContentComponent`. The total item count is now derived\nautomatically from the child `VirtualForDirective` via the shared strategy.\n\nDX improvements:\n- `*vdndVirtualFor` inherits `itemHeight`, `dynamicItemHeight`,\n[…]\nItems]` bindings from `vdnd-virtual-viewport` and\n`vdnd-virtual-content`. Remove redundant `itemHeight`, `dynamicItemHeight`,\nand `droppableId` from `*vdndVirtualFor` when inside a viewport component.",
"is_bot": false,
"headline": "feat(lib)!: eliminate data duplication in Pattern B consumer API",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-13T21:23:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d83e7d5dc2311bfcee563bdf10c33c5fb17bbc71",
"body": "Add drag handles, container constraints, axis locking, drag\nthreshold/delay, custom drag preview, auto-scroll configuration,\nand disabling sections to Advanced Usage. Add Events table covering\nall outputs. Update Features list and API Overview to reflect the\nfull set of consumer-facing capabilities.",
"is_bot": false,
"headline": "docs: document missing features and configuration options in README",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-13T20:35:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "07290f44fafc7e71d149c68f782a46040ebeded1",
"body": null,
"is_bot": false,
"headline": "chore(release): 1.3.0-alpha.6",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-13T20:24:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7fe85c7c22cf6a72a6c12ce8bc30cb969a6a40b6",
"body": "Rewrite Critical Rule #6 to be unconditional — every bug fix requires\na test written before the fix, no exceptions. Replace the vague\nDocumentation Updates section with clear audience/purpose/trigger\ndefinitions that distinguish consumer-facing content from internal\ndetails. Remove internal algorithm details from README (displacement\nthresholds, prefix-sum/binary-search mechanics).",
"is_bot": false,
"headline": "docs: strengthen TDD rule and refine README documentation guidelines",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-13T20:22:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "916d97eded0261ccb135daafc3b4d0b0b56cc29b",
"body": null,
"is_bot": false,
"headline": "fix(lib): dynamic height drift cases",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-13T20:20:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "80bd5c975fe6e39161528778328bcac6e0dcef9e",
"body": null,
"is_bot": false,
"headline": "chore: ignore codemie",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-13T15:18:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b40452d0c3fd1e54502f5ca6a4a1d66a918c4d1",
"body": null,
"is_bot": false,
"headline": "chore: fix formatting drift",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-13T13:59:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "420aadba986067ec48a5532cf44aebe0bd6e4aea",
"body": null,
"is_bot": false,
"headline": "chore(release): 1.3.0-alpha.5",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-13T13:18:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9caac28ecd32fe8c9d41d4cd3098bd1a59a29a08",
"body": null,
"is_bot": false,
"headline": "fix(lib): harden dynamic height strategy performance and correctness",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-13T13:16:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b6346d1113b733dc6fd94f5cfa8e5dbf7b13152b",
"body": null,
"is_bot": false,
"headline": "fix(lib): use direction-aware probing for dynamic drag index",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-13T12:49:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ca420e5b99ee60b89ad378f09708bc26edf8370d",
"body": null,
"is_bot": false,
"headline": "chore(release): 1.3.0-alpha.4",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-13T12:24:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38519b27648d1d8c8de6d0f50f2af55b5dea5da4",
"body": null,
"is_bot": false,
"headline": "fix(lib): allow constrained dynamic drag to reach list edges",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-13T12:21:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d691833d55f312bf4b429494f00a865e0abb2fc0",
"body": null,
"is_bot": false,
"headline": "chore(release): 1.3.0-alpha.3",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-13T11:22:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "087f77de697854e0f7cd96431c65a4bb491f4a27",
"body": null,
"is_bot": false,
"headline": "feat(lib): warn of trackBy duplicates",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-13T11:20:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b0a195006413918a3cba010444bef59af75c4860",
"body": null,
"is_bot": false,
"headline": "chore(release): 1.3.0-alpha.2",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-13T11:07:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe6063dc77cdc8db02e5ca814d78daf23fe4854c",
"body": "…ion sync",
"is_bot": false,
"headline": "fix(lib): stabilize same-list dynamic placeholder index before exclus…",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-13T10:57:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2fe954f4b2cc3f92929bad01df679b7692243197",
"body": null,
"is_bot": false,
"headline": "feat(lib): constrain drag by container (#16)",
"author_name": "Sergey Gultyayev (Serhii Hultiaiev)",
"author_login": "gultyayev",
"committed_at": "2026-02-13T10:45:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a7479e38671b8269b897fa56f781a7182609e150",
"body": null,
"is_bot": false,
"headline": "feat(lib): add dynamic item height support for virtual scroll (#15)",
"author_name": "Sergey Gultyayev (Serhii Hultiaiev)",
"author_login": "gultyayev",
"committed_at": "2026-02-12T22:26:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8512688518f570111ddfae799310f483697993fc",
"body": "Extract keyboard and pointer drag logic into focused handler classes,\nreducing the directive from 1,017 to 561 LOC while keeping the same\npublic API. Handlers are plain classes (not injectable) instantiated\nby the directive.\n\n- KeyboardDragHandler: unified key dispatch, activate/complete/cancel,\n d\n[…]\n Angular inputs/outputs, and host bindings as thin delegates\n- Consolidated 4 arrow key host bindings into single onArrowKey handler\n- 59 new unit tests for handlers, all 417 E2E tests pass unchanged",
"is_bot": false,
"headline": "refactor(lib): extract handler classes from DraggableDirective",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-07T10:31:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d987c96bbd98c8ae0a5d94c9668d02a6e06f7792",
"body": null,
"is_bot": false,
"headline": "fix(lib): don't print warnings in prod mode",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-06T15:16:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fbc843b31a21cca7909e44d06b2a45b4ea93a304",
"body": null,
"is_bot": false,
"headline": "refactor(demo): dogfood utils",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-06T15:15:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "98bee557b128d8b1c72fec99e5bac05f16e5101c",
"body": null,
"is_bot": false,
"headline": "chore(release): 1.2.3",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-06T10:12:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "74f7e830efce7d2f6bd2eb4f121c8d2718c1eb89",
"body": null,
"is_bot": false,
"headline": "refactor: fix tests",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-06T10:09:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9d3fbb1de6202e267d9954aa1fa776358c5e025e",
"body": "Strip visual styling (opacity, box-shadow, border-radius, colors, text)\nfrom drag preview and element clone placeholders. Retain only structural\nstyles needed for correct positioning and layout.",
"is_bot": false,
"headline": "refactor(lib): remove opinionated cosmetic styles for headless design",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-06T09:48:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "979c44372b1b6e4c93c48567ac06515b2a01409f",
"body": "…offset\n\nDragPreviewComponent uses position: fixed + translate3d for cursor-following,\nbut any ancestor with a CSS transform creates a new containing block (per spec),\nbreaking viewport-relative positioning. This affects frameworks like Ionic that\napply transforms to page containers.\n\nAdd OverlayCon\n[…]\ntainer, and have\nDragPreviewComponent teleport its host element there via afterNextRender. Angular\nchange detection operates on the logical component tree, so bindings keep working\nafter the DOM move.",
"is_bot": false,
"headline": "fix(lib): teleport drag preview to body overlay to fix CSS transform …",
"author_name": "Sergey Gultyayev",
"author_login": "gultyayev",
"committed_at": "2026-02-06T09:35:14Z",
"body_truncated": true,
"is_coding_agent": false
}
],
"releases_count": 24,
"commits_last_year": 181,
"latest_release_at": "2026-07-18T17:35:51Z",
"latest_release_tag": "v3.1.3",
"releases_from_tags": true,
"days_since_last_push": 5,
"active_weeks_last_year": 15,
"days_since_latest_release": 5,
"mean_days_between_releases": 17.2
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 57,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "ngx-virtual-dnd",
"exists": true,
"license": "MIT",
"keywords": [
"angular",
"drag-and-drop",
"dnd",
"virtual-scroll",
"virtual-scrolling",
"sortable",
"reorder",
"signals"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/ngx-virtual-dnd",
"is_deprecated": false,
"latest_version": "3.1.3",
"repository_url": "https://github.com/gultyayev/ngx-virtual-dnd",
"versions_count": 24,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 39711,
"first_published_at": "2025-12-30T12:42:13.289000Z",
"latest_published_at": "2026-07-18T17:36:26.805000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
}
]
},
"popularity": {
"forks": 0,
"stars": 3,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": null,
"open_issues_and_prs": 12
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
".storybook/tsconfig.json",
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 50528,
"source_files_sampled": 132,
"oversized_source_files": 0,
"agent_instruction_files": [
".claude/CLAUDE.md",
"AGENTS.md"
],
"agent_instruction_max_bytes": 25961
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 1,
"malicious_count": 0,
"assessed_package": "npm:ngx-virtual-dnd@3.1.3",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "@angular/common",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^21.0.0"
},
{
"name": "@angular/compiler",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^21.0.0"
},
{
"name": "@angular/core",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^21.0.0"
},
{
"name": "@angular/forms",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^21.0.0"
},
{
"name": "@angular/platform-browser",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^21.0.0"
},
{
"name": "@angular/router",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^21.0.0"
},
{
"name": "@ionic/angular",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^8.7.16"
},
{
"name": "rxjs",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "~7.8.0"
},
{
"name": "tslib",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^2.3.0"
},
{
"name": "tslib",
"manifest": "projects/ngx-virtual-dnd/package.json",
"ecosystem": "npm",
"version_constraint": "^2.3.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 1,
"merged_prs": 35,
"open_issues": 11,
"closed_ratio": 0.56,
"closed_issues": 14,
"closed_unmerged_prs": 5
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "gultyayev",
"commits": 181,
"avatar_url": "https://avatars.githubusercontent.com/u/22374911?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"main.yml",
"perf.yml",
"pr-checks.yml"
],
"has_docs_dir": false,
"linter_configs": [
"eslint.config.mjs"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 3,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "17 out of 17 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 0,
"reason": "dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 2,
"reason": "dependency not pinned by hash detected -- score normalized to 2",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 10,
"reason": "GitHub workflow tokens follow principle of least privilege",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "122 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "ca4558e23a072ae8b77bc96212772c1b0bf132f0",
"ran_at": "2026-07-24T03:22:31Z",
"aggregate_score": 3.4,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-18T17:43:54Z",
"oldest_open_prs": [
{
"number": 66,
"created_at": "2026-07-18T18:29:56Z",
"last_comment_at": "2026-07-18T18:34:14Z",
"last_comment_author": "github-actions"
}
],
"last_merged_pr_at": "2026-07-18T17:33:41Z",
"ci_last_conclusion": null,
"oldest_open_issues": [
{
"number": 29,
"created_at": "2026-07-11T16:35:16Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 31,
"created_at": "2026-07-11T16:35:18Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 32,
"created_at": "2026-07-11T16:35:19Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 33,
"created_at": "2026-07-11T16:35:21Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 34,
"created_at": "2026-07-11T16:35:22Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 35,
"created_at": "2026-07-11T16:35:23Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 36,
"created_at": "2026-07-11T16:35:48Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 37,
"created_at": "2026-07-11T16:35:50Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 38,
"created_at": "2026-07-11T16:35:51Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 39,
"created_at": "2026-07-11T16:35:52Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 43,
"created_at": "2026-07-11T16:35:57Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/gultyayev/ngx-virtual-dnd",
"host": "github.com",
"name": "ngx-virtual-dnd",
"owner": "gultyayev"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"security": 47,
"vitality": 80,
"community": 41,
"governance": 52,
"engineering": 76
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 80,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 74,
"inputs": {
"commits_last_year": 181,
"human_commit_share": 1,
"days_since_last_push": 5,
"active_weeks_last_year": 15
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 5 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 5
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "15/52 weeks with commits",
"points": 10.4,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 15
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "181 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 181
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 88,
"inputs": {
"releases_count": 24,
"latest_release_tag": "v3.1.3",
"releases_from_tags": true,
"days_since_latest_release": 5,
"mean_days_between_releases": 17.2
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "24 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 24
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 5 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 5
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~17.2 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 17.2
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 5,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 5 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 5
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 41,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 5,
"inputs": {
"forks": 0,
"stars": 3,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "3 stars",
"points": 4.9,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 3
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 57,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "good",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 77,
"inputs": {
"packages": [
"ngx-virtual-dnd"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 39711
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "39,711 downloads/month across npm",
"points": 61.3,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 39711,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 52,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 13,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"merged_prs": 35,
"open_issues": 11,
"closed_issues": 14,
"issue_closed_ratio": 0.56,
"closed_unmerged_prs": 5
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "56% of issues closed",
"points": 26.2,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 56
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "35/40 decided PRs merged",
"points": 33.5,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 35,
"decided": 40
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 52,
"inputs": {
"followers": 9,
"owner_type": "User",
"is_verified": null,
"owner_login": "gultyayev",
"public_repos": 53,
"account_age_days": 3591
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "9 followers of gultyayev",
"points": 7.2,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 9,
"login": "gultyayev"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "53 public repos, account ~9 yr old",
"points": 24.6,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 53
}
},
{
"code": "account_age_years",
"params": {
"years": 9
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"ngx-virtual-dnd"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 5
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 5 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 5
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "24 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 24
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 76,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "3 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 3
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "eslint.config.mjs",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.mjs"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "17 out of 17 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": "https://gultyayev.github.io/ngx-virtual-dnd/",
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://gultyayev.github.io/ngx-virtual-dnd/",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 47,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 34,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 3.4
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "17 out of 17 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "dangerous workflow patterns detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 25 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 2",
"points": 1,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "GitHub workflow tokens follow principle of least privilege",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "122 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:ngx-virtual-dnd@3.1.3 runtime dependency closure — what installing the published package pulls in — 1 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "npm:ngx-virtual-dnd@3.1.3",
"assessed": 1
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 1,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 1,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 2
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 79,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [
".claude/CLAUDE.md",
"AGENTS.md"
],
"agent_instruction_max_bytes": 25961
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": ".claude/CLAUDE.md, AGENTS.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".claude/CLAUDE.md, AGENTS.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "100 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 100,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 66,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"package-lock.json"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
".storybook/tsconfig.json",
"tsconfig.json"
],
"agent_commit_share": 0.05,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "eslint.config.mjs",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.mjs"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": ".storybook/tsconfig.json, tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".storybook/tsconfig.json, tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "5 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 5,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 2",
"points": 2,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 50528,
"source_files_sampled": 132,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/132 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 132,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-24T03:22:42.134676Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/g/gultyayev/ngx-virtual-dnd.svg",
"full_name": "gultyayev/ngx-virtual-dnd",
"license_state": "standard",
"license_spdx": "MIT"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — npm.