Public recordModerate
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-30 19:31 UTC
imri-engineer / glidesheet
A performant React bottom sheet with reliable scroll-vs-drag detection. Zero dependencies.
imri-engineer/glidesheet holds a health index of 53 out of 100, placing it in the Moderate band. It scores highest on Vitality (69/100) and lowest on Security (34/100). It was last updated 5 days ago. A single contributor accounts for most of its recent work.
53
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
53
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
Imri BalourdPersonal account
2 followers27 public repossince Jul 2019
This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish | Tags |
|---|---|---|---|---|---|---|
| npm | glidesheet | 0.7.1 | 1,649 | 19 | 0 days ago | reactbottom-sheetsheetmodalglidesheetdrawermobile |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
69
Development activity
56Moderate
How it's scored
| 36/36 | Push recency — last push 5 days ago |
| 4.8/36 | Commit cadence — 7/52 weeks with commits |
| 15.6/18 | Commit volume — 54 commits in the last year |
| 0/10 | OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully |
Inputs used
| commits_last_year | 54 |
| human_commit_share | 1 |
| days_since_last_push | 5 |
| active_weeks_last_year | 7 |
Release discipline
88Excellent
How it's scored
| 16.2/27 | Ships releases — 10 version tags (no GitHub releases) |
| 36/36 | Release recency — latest release 13 days ago |
| 27/27 | Release cadence — a release every ~7.3 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 10 |
| latest_release_tag | v0.6.0 |
| releases_from_tags | yes |
| days_since_latest_release | 13 |
| mean_days_between_releases | 7.3 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
41
Popularity & adoption
8Critical
How it's scored
| 7.7/60 | Stars — 4 stars |
| 0/25 | Forks — 0 forks |
| 0/15 | Watchers — 0 watchers |
Inputs used
| forks | 0 |
| stars | 4 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
70Good
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (MIT) |
| 18/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | yes |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Ecosystem adoption (downloads)
54Moderate
How it's scored
| 42.9/80 | Monthly downloads — 1,649 downloads/month across npm |
| 0/20 | Registry dependents — not reported by this ecosystem |
Inputs used
| packages | glidesheet |
| dependents | — |
| ecosystems | npm |
| total_downloads | — |
| monthly_downloads | 1,649 |
Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
53
Maintainer resilience (bus factor)
13Critical
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 1.7/22.5 | Commit distribution — top contributor authored 93% of commits |
| 2.7/13.5 | Contributor breadth — 2 contributors |
| 0/10 | OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 2 |
| top_contributor_share | 0.926 |
How it's scored
| 0/46.8 | Issue resolution — no issues or no data |
| 38.2/38.3 | PR acceptance — 4/4 decided PRs merged |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/28 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 4 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 0 |
Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.
Ownership & stewardship
45At risk
How it's scored
| 10/30 | Ownership backing — personal (user) account |
| 0/20 | Verified domain — not applicable to user accounts |
| 3.4/25 | Owner reach — 2 followers of imri-engineer |
| 22.5/25 | Track record — 27 public repos, account ~7 yr old |
Inputs used
| followers | 2 |
| owner_type | User |
| is_verified | — |
| owner_login | imri-engineer |
| public_repos | 27 |
| account_age_days | 2,586 |
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.
Package maintenance
100Excellent
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on npm |
| 35/35 | Publish recency — latest publish 0 days ago |
| 20/20 | Version history — 19 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | glidesheet |
| ecosystems | npm |
| any_deprecated | no |
| min_days_since_publish | 0 |
Engineering Quality
Are baseline engineering and documentation practices in place?
61
Engineering practices
68Moderate
How it's scored
| 24/24 | CI workflows — 1 workflow(s) |
| 24/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 4 out of 4 merged PRs checked by a CI test -- score normalized to 10 |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Documentation
50Moderate
How it's scored
| 30/30 | README |
| 0/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 10/10 | Repository description |
| 0/10 | Topics |
| 10/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | yes |
| homepage | — |
| has_readme | yes |
| has_docs_dir | no |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
34
Security posture
34At risk
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — no data |
| 2.5/2.5 | CI-Tests — 4 out of 4 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/28 approved changesets -- score normalized to 0 |
| 0/2.5 | Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 0/7.5 | Maintained — project was created within the last 90 days. Please review its contents carefully |
| 0/5 | Packaging — no data |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 6/7.5 | Vulnerabilities — 2 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 15 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 3 |
| scorecard_aggregate | 3.4 |
Excluded from scoring (no data or not applicable): branch_protection, packaging, signed_releases. Remaining weights renormalized.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
63
Agent context & guidance
85Excellent
How it's scored
| 45/45 | Agent instructions — AGENTS.md, CLAUDE.md |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 54 of 54 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 1 |
| agent_instruction_files | AGENTS.md, CLAUDE.md |
| agent_instruction_max_bytes | 931 |
How it's scored
| 0/18 | One-command bootstrap |
| 22/22 | Automated tests |
| 0/11 | Lint / format config |
| 11/11 | Static type checking — tsconfig.json |
| 0/10 | Reproducible environment |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 54 |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | — |
| has_dockerfile | no |
| typed_language | yes |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | tsconfig.json |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
Code legibility for models
100Excellent
How it's scored
| 45/45 | Type-checkable code — TypeScript (statically typed) |
| 55/55 | Manageable file sizes — 0/35 source files over 60KB |
Inputs used
| primary_language | TypeScript |
| largest_source_bytes | 8,890 |
| source_files_sampled | 35 |
| oversized_source_files | 0 |
Key facts
4GitHub stars
2contributors
54commits, last 12 months
5days since last push
10releases
1bus factor
0open issues
npmpackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
- deps.dev does not index npm:glidesheet@0.7.1; advisories assessed against the repository dependency graph instead
More detail
OpenSSF Scorecard 3.4 / 10
3.4aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| n/a | Branch-Protection | internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md |
| 10 | CI-Tests | 4 out of 4 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/28 approved changesets -- score normalized to 0 |
| 0 | Contributors | project has 0 contributing companies or organizations -- score normalized to 0 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 0 | Maintained | project was created within the last 90 days. Please review its contents carefully |
| n/a | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| n/a | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 8 | Vulnerabilities | 2 existing vulnerabilities detected |
All dependencies not collected
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 1758,
"has_wiki": true,
"homepage": null,
"languages": {
"CSS": 6354,
"TypeScript": 93300
},
"pushed_at": "2026-07-25T01:00:10Z",
"created_at": "2026-05-12T04:42:34Z",
"owner_type": "User",
"updated_at": "2026-07-25T01:00:22Z",
"description": "A performant React bottom sheet with reliable scroll-vs-drag detection. Zero dependencies.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript"
]
},
"owner": {
"blog": null,
"name": "Imri Balourd",
"type": "User",
"login": "imri-engineer",
"company": null,
"location": null,
"followers": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/52404120?v=4",
"created_at": "2019-07-01T08:49:05Z",
"is_verified": null,
"public_repos": 27,
"account_age_days": 2586
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.6.0",
"kind": "minor",
"published_at": "2026-07-17T01:00:41Z"
},
{
"tag": "v0.5.6",
"kind": "patch",
"published_at": "2026-06-22T18:55:22Z"
},
{
"tag": "v0.5.1",
"kind": "patch",
"published_at": "2026-05-14T20:41:04Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2026-05-14T20:10:53Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2026-05-12T20:15:19Z"
},
{
"tag": "v0.3.1",
"kind": "patch",
"published_at": "2026-05-12T18:22:36Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2026-05-12T15:35:16Z"
},
{
"tag": "v0.2.2",
"kind": "patch",
"published_at": "2026-05-12T06:59:49Z"
},
{
"tag": "v0.2.1",
"kind": "patch",
"published_at": "2026-05-12T05:46:29Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2026-05-12T05:45:03Z"
}
],
"recent_commits": [
{
"oid": "52ead91f31a71866b6da49b8b39dda87ad88fc28",
"body": "The RAF update loop called setPosition with a fresh object every frame,\nre-rendering every consumer 60x/s even at rest. Bail out (return prev)\nwhen top/opacity/visible/sheetTop are all unchanged.",
"is_bot": false,
"headline": "fix(floating-bar): skip re-render when position unchanged (v0.6.1)",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-07-24T19:52:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "97750c870a722afd257cd02cd827ca1d21e6b6b6",
"body": "…e position (v0.6.0)\n\nAdds `gapFade`: paints a gradient in the gap between the bar and the sheet, so\ncontent scrolling underneath dissolves into the sheet instead of being cut off\nat a hard edge.\n\nThe layer spans from the TOP of the bar down to the sheet, not just the gap\nbelow it: the bar is narrow\n[…]\ne node inside the\nRAF loop, where the node is already laid out. Side benefit: the height is re-read\nevery frame, so a bar whose content changes height now repositions instead of\nkeeping a stale value.",
"is_bot": false,
"headline": "feat(floating-bar): gapFade — gradient in the gap, and fix first-fram…",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-07-17T01:00:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3e9f5fc07e13f58876c13bf3507efa49af24c526",
"body": "… (#4)\n\n* fix(handle): restreint la zone de toggle à la pill + hit-padding invisible\n\nLe toggle se déclenchait sur toute la largeur (98%) du handle. Désormais\n[data-glidesheet-handle] a pointer-events:none et seul le hitarea (pill)\ncapte le clic, avec une zone tactile invisible étendue via ::before\n\n[…]\nd horizontal scrollers and no-drag areas back to\nthe browser. Vertical drag/scroll behaviour is unchanged.\n\nBump 0.5.7 -> 0.5.8.\n\n---------\n\nCo-authored-by: Imri Balourd (US) <imri.balourd@emcitv.com>",
"is_bot": false,
"headline": "fix(content): don't block horizontal scroll on touch devices (v0.5.8)…",
"author_name": "Imri Balourd",
"author_login": "imri-engineer",
"committed_at": "2026-07-10T11:16:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2cf30fc1fc8831e7e1dea9a4edabe3b9dafea64c",
"body": "Narrower default grab-bar pill.\nBump 0.5.5 → 0.5.6.",
"is_bot": false,
"headline": "feat: handle pill 40px wide (was 45px)",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-06-22T18:55:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2b0f989b25ce58c81e7bbdfe985e29e84f39140",
"body": "Slightly narrower and thicker default grab-bar pill.\nBump 0.5.3 → 0.5.5 (0.5.4 already taken on npm).\n\nCo-authored-by: Imri Balourd (US) <imri.balourd@emcitv.com>",
"is_bot": false,
"headline": "feat: handle pill 45×5px (was 50×4px) (#3)",
"author_name": "Imri Balourd",
"author_login": "imri-engineer",
"committed_at": "2026-06-22T18:24:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b7327db20160163c5d1b5d6ba8d72f560534ed74",
"body": "fix: theme-aware grab bar handle default colour",
"is_bot": false,
"headline": "Merge pull request #2 from imri-engineer/fix/handle-pill-theme-aware",
"author_name": "Imri Balourd",
"author_login": "imri-engineer",
"committed_at": "2026-06-10T18:08:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c3ea42b74d378343accb31ee317bf43d6b869c0e",
"body": "The handle pill default was hard-coded to rgba(0,0,0,0.25) (black), invisible\nin dark mode. Derive it from the sheet's text colour via\ncolor-mix(in srgb, currentColor 25%, transparent) so it stays visible in both\nthemes with no consumer config, tracking whatever theme system the host uses\n(class, data-attr, media query) rather than the OS color-scheme.\n--glidesheet-handle-pill-bg override still wins.\n\nRelease 0.5.3",
"is_bot": false,
"headline": "fix: theme-aware grab bar handle default colour",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-06-10T18:06:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dfc9d817d401f92011f544960ae266a53386c13a",
"body": "fix: overlay flash on drag-to-close (no @keyframes fadeOut)",
"is_bot": false,
"headline": "Merge pull request #1 from imri-engineer/fix/overlay-close-flash",
"author_name": "Imri Balourd",
"author_login": "imri-engineer",
"committed_at": "2026-06-10T17:07:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9c08a5b97652641f05b049894f98fdcd3f936705",
"body": "When dragging a non-snap-point sheet down to close, the overlay's inline\nopacity is lowered live during the drag, but the close was driven by\n@keyframes glidesheet-fadeOut (no `from`, ignores the current inline value),\nso the browser re-rendered the overlay at its base opacity for one frame\nbefore a\n[…]\n value\ninstead (matches Vaul). Apply the glidesheet-dragging class to the overlay\ntoo so its transition is suppressed during the drag. Remove the now-unused\nglidesheet-fadeOut keyframe.\n\nRelease 0.5.2",
"is_bot": false,
"headline": "fix: overlay flash on drag-to-close (no @keyframes fadeOut)",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-06-10T17:00:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9ff439b8d025e6a35716e317149c36827f92c97f",
"body": null,
"is_bot": false,
"headline": "chore: release v0.5.1 — iOS scroll fix, progressive overlay click fix",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-14T20:41:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ee520bee452d745b24460cc8a38eb8f81252307f",
"body": "Add pointer-events: none to progressive overlay when the sheet is\nclosed or when opacity is 0, preventing it from intercepting clicks\non elements behind the sheet.",
"is_bot": false,
"headline": "fix: progressive overlay blocking clicks when transparent",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-14T20:39:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cc1e5eb118fc704eba33fdc2f0399cfebb976ab3",
"body": "Skip setPointerCapture (via onPress) when touching inside a scrollable\nelement that is not at scrollTop=0. pointerStartRef is still set so\nthe drag system can activate if the user scrolls back to top.",
"is_bot": false,
"headline": "fix: prevent drag from stealing scroll on iOS",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-14T20:34:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6eda7e39fd710d3e1a16d97be3ee072745988844",
"body": "Replace onPointerOut with onPointerLeave to prevent false drag\ninterruptions from child element pointer events bubbling.\n\nRemove scroll check from onPointerDown — drag always initiates,\nshouldDrag() in onDrag decides scroll-vs-drag (matching Vaul).\n\nRework touchmove listener: preventDefault on non-s\n[…]\nle children; guard e.cancelable to suppress\nbrowser intervention warnings.\n\nChange handle touch-action from pan-y to none so the browser does\nnot capture touch gestures on the handle as native scroll.",
"is_bot": false,
"headline": "fix: reliable drag on Android, desktop, and responsive modes",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-14T20:10:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5b5224c2e03cc45a1b0d109c5d122e7cede72ae0",
"body": null,
"is_bot": false,
"headline": "chore: remove release workflow",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-13T13:40:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "136208e8d7fe5e7c203094f2e63e7034083a6278",
"body": null,
"is_bot": false,
"headline": "docs: add website link to README",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-12T20:15:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eeb0eeaef5c64bca1a3e960775746b2a0bb81cf9",
"body": null,
"is_bot": false,
"headline": "chore: release v0.4.0 — AI agent skill, handle redesign",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-12T19:44:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7f2f97ce1f927053df6fa37262a7b03aaf364af0",
"body": null,
"is_bot": false,
"headline": "feat: add AI agent skill for Claude Code, Cursor, Copilot, etc.",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-12T18:59:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e6fa1e3c8d85c178b2737dd0c65506f911983cb0",
"body": "Wide container (98%) with rounded top corners and centered pill,\nmatching the Vaul-style grab bar. Customizable via CSS variables.",
"is_bot": false,
"headline": "feat: redesign Handle to match grab bar style",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-12T18:39:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf78e5add3dd10db1ab9998025ac5622fa6fe2b3",
"body": null,
"is_bot": false,
"headline": "docs: add FloatingBar, Footer, and progressive overlay to README",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-12T18:25:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a1689614ac7fec76a6f4348eb387e4f238c39181",
"body": "Non-scrollable slot at the bottom of the sheet for action buttons.",
"is_bot": false,
"headline": "feat: add Footer component",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-12T18:22:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d91e4482f900407ca67b47b392c592af0d7ef5e",
"body": "- Floating: bottom/left/right only on non-floating, floating uses CSS vars\n- closeSheet: clear all inline styles + reset style-cache\n- openSheet: clear leftover inline styles from previous session",
"is_bot": false,
"headline": "fix: floating mode positioning, inline style cleanup on close/open",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-12T16:52:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "40d217b4d9bf1742c551a126d964af95002ca1ac",
"body": null,
"is_bot": false,
"headline": "chore: add release script to package.json",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-12T15:36:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b6db864b1ca6f2f988cc186bd49d55c46d4a4ce3",
"body": "See CHANGELOG.md for full details.",
"is_bot": false,
"headline": "chore: release v0.3.0 — scroll fixes, progressive overlay, floating bar",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-12T15:35:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f97a5c1fd68c69d0da61556f629f8425447eb989",
"body": "- Removed touch-action: none from sheet (was blocking native scroll)\n- Removed overscroll-behavior: none from children (was killing momentum)\n- Content: skip pointer capture when touching scrolled content (scrollTop > 1)\n- Removed bottom-boundary preventDefault (was blocking scroll-up from bottom)\n- Native scroll works with momentum, sheet only drags when content is at top",
"is_bot": false,
"headline": "fix: scroll behavior — smooth native scroll, no close when scrolled",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-12T15:18:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4f054629d172d219987bf994bdab97bfb8e2c627",
"body": "Set overscroll-behavior: none on html element whenever a sheet is open,\nregardless of modal mode. Prevents Chrome from triggering native\npull-to-refresh when dragging down inside the sheet.\nAlso restore close animation by re-enabling CSS transition before closing.",
"is_bot": false,
"headline": "fix: prevent Chrome pull-to-refresh when sheet is open",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-12T14:01:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "edfa48bd0aee4d623aadfc6994cecc9627d579ae",
"body": "When releasing after a small drag, shouldDrag() could return false (due to\nscrollTop > 1 in a parent) causing the function to return without calling\nresetDrawer or closeSheet. The sheet stayed stuck at the dragged position.\n\nNow: always call resetDrawer() as fallback when conditions aren't met,\nensuring the sheet always returns to its open position or closes.\nAlso fixed swipeAmount === 0 check (was !swipeAmount which blocked on 0).",
"is_bot": false,
"headline": "fix: always resetDrawer on release — prevent sheet from getting stuck",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-12T13:54:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d7934de80db69e72b7b6741b83b8552ed7d2ad86",
"body": "Backward compatibility for projects migrating from Vaul.\nThe shouldDrag function now checks both attributes.",
"is_bot": false,
"headline": "fix: support data-vaul-no-drag alongside data-glidesheet-no-drag",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-12T12:46:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d884b33b95b4e78aa8a889b5248cf0b0354cf03",
"body": "When closing with progressiveOverlay enabled, the inline backgroundColor\nstayed at its last drag value until Portal unmount, causing a visible flash.\nNow transitions to transparent on close.",
"is_bot": false,
"headline": "fix: progressive overlay flicker on close",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-12T06:59:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ea53d97ae91afa2522199c46fc3631197c45c236",
"body": null,
"is_bot": false,
"headline": "chore: bump version to 0.2.1",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-12T05:46:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "69d16e6c3c08adb5f1b91d8612a926f78967c37d",
"body": null,
"is_bot": false,
"headline": "fix: remove --provenance from npm publish",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-12T05:45:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7689660e95af1727292e4f2a965e30f55cb897e2",
"body": null,
"is_bot": false,
"headline": "docs: add CONTRIBUTING.md and branch protection on main",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-12T05:20:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2a7b049b882db588fe279e35c84693937929d2da",
"body": null,
"is_bot": false,
"headline": "chore: bump version to 0.2.0",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-12T05:15:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "647b9cd97744cd8827981f210c65f2007d237ada",
"body": "The previous approach relied on dragProgress which only updates during active\ndrag. Now uses a continuous RAF loop reading getBoundingClientRect() every\nframe, matching the sheet position during both drag AND CSS transitions.\nSame approach as maBible's DrawerPositionTracker.",
"is_bot": false,
"headline": "fix: FloatingBar — use RAF loop to track sheet position in real-time",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-12T05:13:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "03f4d381d72042694c03bc7e2e1a6aa3cbdd799a",
"body": "…ide-down\n\n- Follows sheet position in real-time via dragProgress\n- Slides down and fades out between 50-65% screen height (configurable)\n- hideWhileDragging option\n- Customizable gap from sheet top\n- Renders in Portal, outside Content",
"is_bot": false,
"headline": "feat: add FloatingBar component — positioned above sheet with auto sl…",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-12T05:01:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e44a39866de6b862b5576196c7cddf3558645435",
"body": "- progressiveOverlay prop on Root: enables gradual opacity change\n- progressiveOverlayMaxOpacity prop: max opacity value (default 0.35)\n- dragProgress tracked in real-time during drag (0=closed, 1=fully open)\n- Overlay calculates opacity based on first snap point threshold\n- CSS: transparent background in progressive mode, JS controls rgba",
"is_bot": false,
"headline": "feat: progressive overlay — opacity based on drag position",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-12T04:59:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b9dbf3083b85b35d7afd475a8e409481bb3900c",
"body": "- CI: lint, test, build on push/PR to main\n- Release: auto-publish to npm on version tag (requires NPM_TOKEN secret)\n- Issue templates: bug report + feature request",
"is_bot": false,
"headline": "ci: add GitHub Actions workflows and issue templates",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-12T04:45:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b5d265cbf7de5466faac8cd1c11a80cceef413ab",
"body": null,
"is_bot": false,
"headline": "fix: update repo URL to imri-engineer/glidesheet",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-12T04:42:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61b138d4304da8712e1d74d3236918c1fb7162be",
"body": null,
"is_bot": false,
"headline": "fix: update repo URL to imribalourd/glidesheet",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-12T04:40:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "933c3f86415d93b2b59112013a5bfb16db30e520",
"body": null,
"is_bot": false,
"headline": "docs: rewrite README — focus on the problem, compare multiple libs",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-12T04:37:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e1be1d2fd29c14312c82c24d2b54f1186c83e1a2",
"body": null,
"is_bot": false,
"headline": "docs: add comprehensive README with API reference and comparisons",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-12T04:35:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f4022f258491871c79fc4ddad93de61f7686c6a",
"body": "- use-drag.ts: shouldDrag, onPress, onDrag, onRelease, cancelDrag\n- use-keyboard.ts: visualViewport resize handler for iOS keyboard\n- use-nested.ts: onNestedOpenChange, onNestedDrag, onNestedRelease\n- bottom-sheet.tsx: reduced to orchestration only (~200 lines, was ~500)\n- Added project logo",
"is_bot": false,
"headline": "refactor: extract drag, keyboard and nested logic into dedicated hooks",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-12T04:26:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "baa4878fd66000263d37afb9e6b1a0bba16e2714",
"body": "inset:0 forced the sheet to cover the full screen, overriding the consumer's\nheight/max-height classes. Changed to bottom:0 left:0 right:0 so the sheet\nanchors to the bottom and the consumer controls the height.",
"is_bot": false,
"headline": "fix: sheet positioning — bottom/left/right instead of inset:0",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-12T04:13:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "528d4ea8022737069232b659f22e38f323550852",
"body": "- scrollTop threshold: treat scrollTop <= 1 as \"at top\" (subpixel tolerance)\n- scrollLockTimeout: reduced from 100ms to 50ms for less delay on slow gestures\n- isDraggingInDirection: only block if content is NOT at top of scroll\n (allows sheet drag when at scroll boundary even with slight upward oscillation)",
"is_bot": false,
"headline": "fix: smoother drag transition from scroll to sheet movement",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-12T03:57:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7b1369ca887ee05f0ab145423ec5a83735c9c32e",
"body": "When scrollable content is at scrollTop=0 and user pulls down, preventDefault\non touchmove to prevent browser bounce and let pointer handler drag the sheet.\nSame for bottom boundary pulling up. This enables the sheet to follow the\nfinger when at scroll boundaries instead of rubber-banding.",
"is_bot": false,
"headline": "fix: intercept touchmove at scroll boundaries to enable drag-to-dismiss",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-12T03:36:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e900c89e912cb4deb26b95cdd91ec715506e32fb",
"body": "- Snap points: clamp drag between first and last snap point offset (no overscroll)\n- No snap points: block upward drag past open position (no dampen stretch)\n- CSS: removed -webkit-overflow-scrolling, kept overscroll-behavior: contain\n- iOS rubber-band prevention via 1px scroll offset trick on touchstart",
"is_bot": false,
"headline": "fix: remove stretch/rubber-band effect on drag",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-12T03:25:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "89923249f64ac8d236b443658d2e1f47ea245c20",
"body": "…osed state\n\nWith snap points, data-delayed-snap-points=true kept the transform at snap-point-height\neven after closing. Added a CSS rule that forces translate3d(0, 100%, 0) when\ndata-state=closed regardless of snap point config, so the exit transition always plays.",
"is_bot": false,
"headline": "fix: close animation with snap points — force transform to 100% on cl…",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-11T23:57:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e0f02da028a46e69284d7cfc1e0ac07cdef694f6",
"body": "Portal remounts Content on each open, so delayedSnapPoints must reset to false\nthen transition to true after double RAF to ensure the browser paints the\ninitial position (100%) before transitioning to the snap point height.",
"is_bot": false,
"headline": "fix: snap points enter animation — reset delayedSnapPoints on each mount",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-11T23:38:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b10df9e12fdcfa5738d475c4eed08668800cb093",
"body": "Vaul uses @keyframes slideFromBottom/slideToBottom for open/close animations.\nCSS transitions don't work on mount because there's no initial frame to transition from.\n@keyframes play immediately on mount, solving the instant-appear problem.",
"is_bot": false,
"headline": "fix: use @keyframes animations instead of CSS transitions for enter/exit",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-11T23:33:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6bb34e1edfc6742b7e3eafdb4f65977ffa06d3a1",
"body": "- Content starts with data-state=closed, transitions to open after double RAF\n- Portal stays mounted during exit animation (500ms delay before unmount)\n- CSS transitions now play correctly on both open and close",
"is_bot": false,
"headline": "fix: enter/exit animations — mount closed then transition to open",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-11T23:22:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8b3aa68eacd73f3989e90e18229455e02b71b93f",
"body": "- Portal returns null when isOpen=false (prevents ghost rendering)\n- Added forceMount prop on Portal for cases that need persistent mount\n- CSS: position fixed, inset 0, z-index, overlay background, pointer-events none when closed\n- Handle: added default margin for spacing\n- Updated tests to verify unmount on close",
"is_bot": false,
"headline": "fix: Portal unmounts when closed, add default positioning CSS",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-11T23:15:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2f52f5530d987c2d5143ef86f588773fd34d18b7",
"body": "…ve dragEndTime, merge effects\n\nBefore: 5 useState, 14 useRef, 6 useEffect\nAfter: 3 useState, 13 useRef, 5 useEffect",
"is_bot": false,
"headline": "perf: reduce hooks — convert hasBeenOpened/justReleased to refs, remo…",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-11T22:53:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5090778aaf4cff831eb5a84ed860021bd7822b20",
"body": "- useBottomSheet(): public hook exposing isOpen, isDragging, isFullyOpen, isMinimized, isClosed, close(), open(), snapTo()\n- onDragStart/onDragEnd callbacks on Root props\n- Exported from package entry point",
"is_bot": false,
"headline": "feat: add useBottomSheet hook and drag lifecycle callbacks",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-11T22:48:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "08e4e16ac3f9cd1133ea749e604b9a0dc210245e",
"body": "- bottom-sheet: open/close, controlled mode, aria attributes, floating, dismissible\n- snap-points: data attributes, CSS variables, pixel strings, handle hit area\n- body-lock: overflow hidden on modal, restore on close, no lock on non-modal\n- focus-trap: aria-modal, ESC to close, overlay rendering\n- 27 tests passing in 206ms via Bun + happy-dom + RTL",
"is_bot": false,
"headline": "test: add unit tests for core functionality",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-11T22:40:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a03c1cc2368d16dc356bd1012be09a1102804c2a",
"body": "…ncies\n\n- BottomSheet compound component (Root, Content, Overlay, Handle, Portal, Trigger, Close, Title, Description, NestedRoot)\n- Snap points (fraction + px), snapToSequentialPoint, controlled/uncontrolled\n- Modal/non-modal, dismissible, handleOnly, nested sheets with stacking\n- Body lock: overflo\n[…]\n dependency)\n- onAnimationEnd via transitionend (fixes Vaul #520)\n- Safe area extension via real element (fixes Vaul #573)\n- Floating mode support\n- 44KB ESM bundle, 1726 lines, 0 runtime dependencies",
"is_bot": false,
"headline": "feat: initial glidesheet library — Vaul replacement with zero depende…",
"author_name": "Imri Balourd (US)",
"author_login": "imribalourd",
"committed_at": "2026-05-11T22:37:23Z",
"body_truncated": true,
"is_coding_agent": false
}
],
"releases_count": 10,
"commits_last_year": 54,
"latest_release_at": "2026-07-17T01:00:41Z",
"latest_release_tag": "v0.6.0",
"releases_from_tags": true,
"days_since_last_push": 5,
"active_weeks_last_year": 7,
"days_since_latest_release": 13,
"mean_days_between_releases": 7.3
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 71,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "glidesheet",
"exists": true,
"license": "MIT",
"keywords": [
"react",
"bottom-sheet",
"sheet",
"modal",
"glidesheet",
"drawer",
"mobile"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/glidesheet",
"is_deprecated": false,
"latest_version": "0.7.1",
"repository_url": "https://github.com/imri-engineer/glidesheet",
"versions_count": 19,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 1649,
"first_published_at": "2026-05-12T04:54:35.766000Z",
"latest_published_at": "2026-07-30T14:28:04.222000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 0
}
]
},
"popularity": {
"forks": 0,
"stars": 4,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 8890,
"source_files_sampled": 35,
"oversized_source_files": 0,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md"
],
"agent_instruction_max_bytes": 931
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 4,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "imribalourd",
"commits": 50,
"avatar_url": "https://avatars.githubusercontent.com/u/130581571?v=4"
},
{
"type": "User",
"login": "imri-engineer",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/52404120?v=4"
}
],
"contributors_sampled": 2,
"top_contributor_share": 0.926
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "4 out of 4 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/28 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 8,
"reason": "2 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "52ead91f31a71866b6da49b8b39dda87ad88fc28",
"ran_at": "2026-07-30T19:31:50Z",
"aggregate_score": 3.4,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-25T01:00:29Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-10T11:16:20Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/imri-engineer/glidesheet",
"host": "github.com",
"name": "glidesheet",
"owner": "imri-engineer"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 53,
"inputs": {
"security": 34,
"vitality": 69,
"community": 41,
"governance": 53,
"engineering": 61
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 69,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"commits_last_year": 54,
"human_commit_share": 1,
"days_since_last_push": 5,
"active_weeks_last_year": 7
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 5 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 5
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "7/52 weeks with commits",
"points": 4.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 7
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "54 commits in the last year",
"points": 15.6,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 54
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 88,
"inputs": {
"releases_count": 10,
"latest_release_tag": "v0.6.0",
"releases_from_tags": true,
"days_since_latest_release": 13,
"mean_days_between_releases": 7.3
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "10 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 10
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 13 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 13
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~7.3 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 7.3
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 41,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 8,
"inputs": {
"forks": 0,
"stars": 4,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "4 stars",
"points": 7.7,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 4
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 54,
"inputs": {
"packages": [
"glidesheet"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 1649
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "1,649 downloads/month across npm",
"points": 42.9,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 1649,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 53,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 13,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 2,
"top_contributor_share": 0.926
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 93% of commits",
"points": 1.7,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 93
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "2 contributors",
"points": 2.7,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 2
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 72,
"inputs": {
"merged_prs": 4,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "4/4 decided PRs merged",
"points": 38.2,
"status": "met",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 4,
"decided": 4
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/28 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 45,
"inputs": {
"followers": 2,
"owner_type": "User",
"is_verified": null,
"owner_login": "imri-engineer",
"public_repos": 27,
"account_age_days": 2586
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "2 followers of imri-engineer",
"points": 3.4,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 2,
"login": "imri-engineer"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "27 public repos, account ~7 yr old",
"points": 22.5,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 27
}
},
{
"code": "account_age_years",
"params": {
"years": 7
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"glidesheet"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 0
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 0 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 0
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "19 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 19
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 61,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "4 out of 4 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 34,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 34,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 15,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 3,
"scorecard_aggregate": 3.4
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "4 out of 4 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/28 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "2 existing vulnerabilities detected",
"points": 6,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 63,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md"
],
"agent_instruction_max_bytes": 931
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "AGENTS.md, CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "AGENTS.md, CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "54 of 54 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 54,
"sampled": 54
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 33,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
"tsconfig.json"
],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 54",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 54
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 8890,
"source_files_sampled": 35,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/35 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 35,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"deps.dev does not index npm:glidesheet@0.7.1; advisories assessed against the repository dependency graph instead"
],
"report_type": "repository",
"generated_at": "2026-07-30T19:31:58.444966Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/i/imri-engineer/glidesheet.svg",
"full_name": "imri-engineer/glidesheet",
"license_state": "standard",
"license_spdx": "MIT"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — npm.