Public recordAt risk
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-29 17:02 UTC
intisy-ai / antigravity-auth
Google Antigravity provider for the intisy-ai AI-proxy ecosystem.
intisy-ai/antigravity-auth holds a health index of 48 out of 100, placing it in the At risk band. It scores highest on Vitality (72/100) and lowest on Community & Adoption (24/100). It was last updated today. A single contributor accounts for most of its recent work.
48
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
48
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
intisy-aiOrganization
1 follower30 public repossince Jun 2026
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish | Tags |
|---|---|---|---|---|---|---|
| npm | antigravity-auth | 1.13.4 | 3,230 | 21 | 8 days ago | opencodeclaudeantigravitygoogleoauthgeminicore-authprovider |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
72
Development activity
60Moderate
How it's scored
| 36/36 | Push recency — last push 0 days ago |
| 6.2/36 | Commit cadence — 9/52 weeks with commits |
| 18/18 | Commit volume — 262 commits in the last year |
| 0/10 | OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully |
Inputs used
| commits_last_year | 262 |
| human_commit_share | 0.81 |
| days_since_last_push | 0 |
| active_weeks_last_year | 9 |
Release discipline
90Excellent
How it's scored
| 27/27 | Ships releases — 6 releases published |
| 36/36 | Release recency — latest release 8 days ago |
| 27/27 | Release cadence — a release every ~0.8 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases. |
Inputs used
| releases_count | 6 |
| latest_release_tag | 1.13.4 |
| releases_from_tags | no |
| days_since_latest_release | 8 |
| mean_days_between_releases | 0.8 |
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
24
Popularity & adoption
1Critical
How it's scored
| 0/60 | Stars — 0 stars |
| 0/25 | Forks — 0 forks |
| 0/15 | Watchers — 0 watchers |
Inputs used
| forks | 0 |
| stars | 0 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
25Critical
How it's scored
| 22.5/22.5 | README |
| 0/22.5 | License — no license file detected |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | no |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Ecosystem adoption (downloads)
58Moderate
How it's scored
| 46.8/80 | Monthly downloads — 3,230 downloads/month across npm |
| 0/20 | Registry dependents — not reported by this ecosystem |
Inputs used
| packages | antigravity-auth |
| dependents | — |
| ecosystems | npm |
| total_downloads | — |
| monthly_downloads | 3,230 |
Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
37
Maintainer resilience (bus factor)
20Critical
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 0/22.5 | Commit distribution — top contributor authored 100% of commits |
| 1.4/13.5 | Contributor breadth — 1 contributors |
| 10/10 | OpenSSF Scorecard: Contributors — project has 4 contributing companies or organizations |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
Issue & PR responsiveness
1Critical
How it's scored
| 0/46.8 | Issue resolution — no issues or no data |
| 0/38.3 | PR acceptance — no decided pull requests or no data |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 0 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 0 |
Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.
Ownership & stewardship
43At risk
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 2.2/25 | Owner reach — 1 followers of intisy-ai |
| 11/25 | Track record — 30 public repos, account ~0 yr old |
Inputs used
| followers | 1 |
| owner_type | Organization |
| is_verified | — |
| owner_login | intisy-ai |
| public_repos | 30 |
| account_age_days | 33 |
Package maintenance
100Excellent
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on npm |
| 35/35 | Publish recency — latest publish 8 days ago |
| 20/20 | Version history — 21 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | antigravity-auth |
| ecosystems | npm |
| any_deprecated | no |
| min_days_since_publish | 8 |
Engineering Quality
Are baseline engineering and documentation practices in place?
60
Engineering practices
60Moderate
How it's scored
| 24/24 | CI workflows — 4 workflow(s) |
| 24/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — no data |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.
Documentation
60Moderate
How it's scored
| 30/30 | README |
| 0/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 10/10 | Repository description |
| 10/10 | Topics — 8 topics |
| 10/10 | Wiki |
Inputs used
| topics | ai, ai-provider, ai-proxy, gemini, intisy-ai, llm, provider, typescript |
| has_wiki | yes |
| homepage | — |
| has_readme | yes |
| has_docs_dir | no |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
45
Security posture
31At risk
How it's scored
| 6.8/7.5 | Binary-Artifacts — binaries present in source code |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — no data |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 2.5/2.5 | Contributors — project has 4 contributing companies or organizations |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 0/2.5 | License — license file not detected |
| 0/7.5 | Maintained — project was created within the last 90 days. Please review its contents carefully |
| 5/5 | Packaging — packaging workflow detected |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — no SAST tool detected |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — Project has not signed or included provenance with any releases. |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 17 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 1 |
| scorecard_aggregate | 3.1 |
Excluded from scoring (no data or not applicable): ci_tests. Remaining weights renormalized.
Dependency advisories
100Excellent
How it's scored
| 35/35 | Direct dependencies free of known advisories — no direct dependency carries a known advisory |
| 25/25 | Indirect dependencies free of known advisories — no indirect dependency carries a known advisory |
| 0/40 | No advisories left outstanding — no advisory carries a publication date |
Inputs used
| source | osv |
| advisories | 0 |
| affected_packages | 0 |
| assessed_packages | 4 |
| unassessed_packages | 0 |
| affected_by_severity | none |
| direct_affected_packages | 0 |
Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:antigravity-auth@1.13.4 runtime dependency closure — what installing the published package pulls in — 4 packages. Reachability is not analyzed.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
53
Agent context & guidance
40At risk
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 80 of 81 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.988 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
How it's scored
| 12.6/18 | One-command bootstrap — java/antigravity-provider/build.gradle, java/antigravity-teavm/build.gradle, java/build.gradle (toolchain convention, no task runner) |
| 22/22 | Automated tests |
| 0/11 | Lint / format config |
| 11/11 | Static type checking — tsconfig.json |
| 0/10 | Reproducible environment |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 100 |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | — |
| has_dockerfile | no |
| typed_language | yes |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | tsconfig.json |
| agent_commit_share | 0 |
| toolchain_manifests | java/antigravity-provider/build.gradle, java/antigravity-teavm/build.gradle, java/build.gradle |
| dependency_bot_commit_share | 0 |
Code legibility for models
100Excellent
How it's scored
| 45/45 | Type-checkable code — Java (statically typed) |
| 54.6/55 | Manageable file sizes — 1/134 source files over 60KB |
Inputs used
| primary_language | Java |
| largest_source_bytes | 74,895 |
| source_files_sampled | 134 |
| oversized_source_files | 1 |
Key facts
0GitHub stars
1contributors
262commits, last 12 months
0days since last push
6releases
1bus factor
0open issues
Maven, npmpackage ecosystems
Data collection warnings
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
OpenSSF Scorecard 3.1 / 10
3.1aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 9 | Binary-Artifacts | binaries present in source code |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| n/a | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 10 | Contributors | project has 4 contributing companies or organizations |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 0 | License | license file not detected |
| 0 | Maintained | project was created within the last 90 days. Please review its contents carefully |
| 10 | Packaging | packaging workflow detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | no SAST tool detected |
| 0 | Security-Policy | security policy file not detected |
| 0 | Signed-Releases | Project has not signed or included provenance with any releases. |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
Direct dependencies 1
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| npm | @openauthjs/openauth | ^0.4.3 | package.json |
All dependencies not collected
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Dependency advisories 0
Installing npm:antigravity-auth@1.13.4 pulls in 4 packages, direct and transitive: 0 carry known advisories, of which 0 are direct dependencies.
No known advisories affect the assessed dependencies.
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"ai",
"ai-provider",
"ai-proxy",
"gemini",
"intisy-ai",
"llm",
"provider",
"typescript"
],
"is_fork": false,
"size_kb": 1392,
"has_wiki": true,
"homepage": null,
"languages": {
"Java": 1133647,
"JavaScript": 14590,
"TypeScript": 207976
},
"pushed_at": "2026-07-29T09:17:06Z",
"created_at": "2026-06-18T14:41:31Z",
"owner_type": "Organization",
"updated_at": "2026-07-29T15:36:59Z",
"description": "Google Antigravity provider for the intisy-ai AI-proxy ecosystem.",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "main",
"license_spdx_raw": null,
"primary_language": "Java",
"significant_languages": [
"Java",
"TypeScript"
]
},
"owner": {
"blog": null,
"name": null,
"type": "Organization",
"login": "intisy-ai",
"company": null,
"location": null,
"followers": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/297198117?v=4",
"created_at": "2026-06-26T15:06:14Z",
"is_verified": null,
"public_repos": 30,
"account_age_days": 33
},
"license": {
"state": "absent",
"spdx_id": null,
"raw_spdx": null,
"file_present": false,
"scorecard_found": false,
"profile_has_license": false
},
"activity": {
"releases": [
{
"tag": "1.13.4",
"kind": "patch",
"published_at": "2026-07-21T11:26:10Z"
},
{
"tag": "1.13.3",
"kind": "patch",
"published_at": "2026-07-19T05:15:32Z"
},
{
"tag": "1.12.0",
"kind": "minor",
"published_at": "2026-07-18T18:51:52Z"
},
{
"tag": "1.11.1",
"kind": "patch",
"published_at": "2026-07-18T12:35:36Z"
},
{
"tag": "1.11.0",
"kind": "minor",
"published_at": "2026-07-18T08:49:24Z"
},
{
"tag": "1.10.0",
"kind": "minor",
"published_at": "2026-07-17T07:41:18Z"
}
],
"recent_commits": [
{
"oid": "47d17f9513fedecd6ed189420646f2c5bc2c9b25",
"body": "…om drifting ahead)",
"is_bot": false,
"headline": "Merge release-merge history from main into experimental (keep main fr…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-29T05:45:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d03bbfaaa32552d2d6db1ed2a75da0f615774416",
"body": null,
"is_bot": false,
"headline": "refactor: use anthropic-translator submodule in the Java SSE bridge",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-28T23:09:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "03b74f6d0318dd344fe89f20a3fa0ce37a3b117c",
"body": "…ped)",
"is_bot": false,
"headline": "ci: dual-name tokenless trusted publishing (unscoped + @intisy-ai sco…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-28T16:31:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b4e11bc01732e6a45ed5051d51ac6367a2ad3362",
"body": null,
"is_bot": false,
"headline": "feat: export provider def metadata for the dashboard",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-21T16:05:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f70391e2f65a4f404b8fe70dfabc86e212457144",
"body": "…covered in CI); keep async smoke gate",
"is_bot": false,
"headline": "ci: checkout ai-java sibling so the provider JUnit suite runs (was un…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-21T11:52:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aa0c8948b80f85b12b18663fa9b69a64e85dc7a3",
"body": "…r (TS comparison target removed)",
"is_bot": false,
"headline": "test: rename parity/matchesTs method names to describe actual behavio…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-21T11:49:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c43450584da231f8f26a501f0668fe0c0bb78cd",
"body": "… suspend/resume smoke",
"is_bot": false,
"headline": "ci: gate every push/PR on build + vitest + gradle tests + TeaVM async…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-21T11:46:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c4c3baecd684c82cd6bc67fe04d2106cbe2969a6",
"body": null,
"is_bot": true,
"headline": "Automated merge from tag v1.13.4 into main",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-21T11:24:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c2f15bdcdbe4989e17b0b500b8b60fc3e0519243",
"body": "…a-exhausted message (synced fixture+test)",
"is_bot": false,
"headline": "test: drop redundant versions-parity duplicate; clean em dash in quot…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-21T08:30:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f7a9da18e88f670125d50275a54da663beefb562",
"body": "…s (Java)",
"is_bot": false,
"headline": "docs: finish stripping migration archaeology from antigravity comment…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-21T08:13:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d1459d126f90b2a2c059a5bb786d00da1cc9004f",
"body": "…ed by a dangling import after the monolith retirement)",
"is_bot": false,
"headline": "fix(types): restore src/plugin/types.ts (auth + model shapes referenc…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-21T07:23:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "39a86ab093e644950f5e3449d558bbc06d105dc9",
"body": "TS: drop the fetch-interception cluster in plugin/request.ts\n(requestInfoToUrlString, isGenerativeLanguageRequest, mergeInitFromRequest,\nmaterializeGenerativeLanguageFetchInput) and its tests. Confirmed dead:\ncore-auth's OpenCode loader.fetch hook (core-auth/src/opencode.ts) calls\nhandleIr/handle di\n[…]\n-prune, npx knip, and per-symbol grep across src/, java/,\nand the bundled core-auth/core submodules before each deletion. Full suite\ngreen: npm run build, vitest run (117/117), gradlew test (510/510).",
"is_bot": false,
"headline": "refactor: remove verified-dead code",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-21T07:19:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9783f5e9b736b4e71d1f70f40705176178417eb3",
"body": "…/) and untrack docs/",
"is_bot": false,
"headline": "chore: gitignore planning scratch (docs/, .superpowers/, graphify-out…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-21T06:03:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c47c159503dc593c3a5f316e7d045feebe79bcc",
"body": "…y framing, em dashes); describe current behavior only",
"is_bot": false,
"headline": "docs: strip migration archaeology from comments (task numbers, histor…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-21T06:03:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f8eafbb2478032044f53c90de0b7b978faddec0",
"body": null,
"is_bot": true,
"headline": "Automated merge from tag v1.13.3 into main",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-19T05:13:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a6637a152d29aaaa718e5998d19e3d0875bb1a8c",
"body": "…aDir path\n\ncore-auth's OpenCode IR front-door imports ../../core-ir/dist, so the direct core-ir must be\nbuilt before esbuild bundles core-auth (claude/stub already do this); clean CI/deploy builds\nfailed without it. Also replaces the hardcoded F:/Documents default aiJavaDir with a relative\nmonorepo path (CI gracefully falls back to the published jvm dep when ai-java is absent).",
"is_bot": false,
"headline": "fix(build): build core-ir before esbuild + drop leaked absolute aiJav…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-19T05:13:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c63b7b291b4250e602710a848d37d94606e7000",
"body": null,
"is_bot": true,
"headline": "Automated merge from tag v1.13.2 into main",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-19T05:08:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3c44e6b0e54c85bf0eb91232539b3f63286a09dc",
"body": "…oxy/dist\n\nThe provider never builds core-proxy, so importing its HandleIrError broke clean-checkout builds\n(CI + fresh deploy). The front-door duck-types the error by its stable name marker, so a local copy\nis functionally identical and removes the build dependency. Test imports repointed to the local class.",
"is_bot": false,
"headline": "fix(build): define HandleIrError locally instead of importing core-pr…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-19T05:07:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e9fb4bfb086c6ca03092d52d7fbce9566dcefcc2",
"body": null,
"is_bot": true,
"headline": "Automated merge from tag v1.13.1 into main",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-19T04:53:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c2dabbaa13572a126808f2b9294faff64617fdd0",
"body": "…h jar/npm build works on Linux CI",
"is_bot": false,
"headline": "fix(ci): re-pin core-ir to a1fc174 (executable gradlew) so the Publis…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-19T04:53:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60f37d3e8341d9c183bd58c2b641bbe4fbd9ca1c",
"body": null,
"is_bot": true,
"headline": "Automated merge from tag v1.13.0 into main",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-19T04:47:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf9e6919e735d9d98136e6ab3190c32c60b3697a",
"body": "antigravity serves via handleIr -> HostIrRequestPreparer (IR->Gemini\ndirect), so the Anthropic-wire cluster was reachable only from its own\ntests and TeaVM exercisers. Delete:\n\n- AntigravityIrBridge: isAnthropicMessages, decodeAnthropicToIr,\n anthropicToGemini (keep supportsThinking, encodeIrToGemi\n[…]\npicToGemini and isAnthropicMessages\n JS exports (keep supportsThinking).\n- AntigravityIrBridgeTest: the anthropicToGemini-driven tests and\n isAnthropicMessages_parity (keep supportsThinking_parity).",
"is_bot": false,
"headline": "Remove dead Anthropic-wire code left over after IR migration",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-19T04:18:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "03b32c90a7fd4db9147d2d5718f91c5dd9047280",
"body": "…s, T4)",
"is_bot": false,
"headline": "chore(core-auth): bump to 5057923 (drop dead legacy handle() fallback…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-19T03:41:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "87b77cc2291ea0456984bff1ce2a53144644d047",
"body": "…handle()\n\nRemove the provider's legacy app-wire handle() wrapper on both sides so no\napp-wire (Anthropic) format code remains; the front-door owns app<->IR and\ncalls handleIr, which stays the real serving path.\n\nTypeScript (src):\n- driver/index.ts: drop the `handle` delegate + its `handle` property\n[…]\nchTest: drop the handle() URL-routing regression tests (the\n typed models/quota capabilities are the live coverage).\n\nBump core-proxy submodule to af99c16 (front-door accepts handleIr-only handlers).",
"is_bot": false,
"headline": "T4: make antigravity IR-native by deleting the legacy Anthropic-wire …",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-19T03:37:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "35573c1f7c3f486419d4a8c11acb501d22e0b570",
"body": null,
"is_bot": false,
"headline": "chore(core-auth): bump to 6011176 (OpenCode native IR front-door, SP-4)",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-19T02:58:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "558fb45c89c67b7d2b61bc7b7fb30ac0fae8e4c7",
"body": "…3c-2)\n\nBoth handleIr implementations (the TS TeaVM-delegation shell in\ndriver/javaHandle.ts and the JVM AntigravityProvider) used to throw an ad-hoc\nenriched exception carrying only a message plus loose status/errorType/\nretryAfterMs fields, which core-proxy's front door could not parse into a\nreal\n[…]\nde-up constant); AntigravityProviderTest gains a no-account case proving\nhandleIr throws HandleIrException with the same 503 status/body the\nexisting handle() test already returns as a plain response.",
"is_bot": false,
"headline": "fix(handleIr): throw the canonical HandleIrError/HandleIrException (T…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-19T02:27:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1e2f5134f5b14fbf4d14db6250015aa3fd68ecda",
"body": "Pulls in the typed transport-error contract for handleIr (HandleIrError/\nHandleIrException) so the front door can reconstruct a real status/headers/\nbody from a caught handleIr throw instead of collapsing everything to a flat\n502. Providers throwing this typed error is T3c-2 (next commit).",
"is_bot": false,
"headline": "chore(core-proxy): bump submodule pin bf56fc0 -> 011811c",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-19T02:27:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "78764197325fac9a8444865b81e1bc3ecafe8ea0",
"body": "Adds a handleIr(IrRequest, HandlerCtx) entry on both the Java Provider SPI\n(AntigravityProvider) and the TS handler surface (handler.ts/driver/index.ts),\nmatching core-proxy's Provider/ProxyHandler handleIr contract exactly.\n\nJava: AntigravityGeminiSseBridge splits its enrich (id-minting/model-overw\n[…]\ned 9bc6a3c -> bf56fc0 (T1's Provider/ProxyHandler\nhandleIr contract, already published) to make the interface available; core-ir\nstays pinned at a57bdd5 (already the SP-3 target, confirmed unchanged).",
"is_bot": false,
"headline": "feat(SP-3 T2): add IR-native handleIr alongside legacy handle",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-19T01:12:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f81c666d9ed05b44465f40e159550dbebc9e0598",
"body": null,
"is_bot": false,
"headline": "fix(antigravity): remove stray em dash in javaStream.ts comment",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-19T00:15:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d013f04c35b454027482606f897ab6c828be8e60",
"body": "Adds core-ir as a submodule (pinned to main@a57bdd5, which includes two fidelity fixes this\nmigration surfaced -- see below), aliases its :ir module into java/settings.gradle exactly like\n:routing/:teavm, and depends on it compileOnly from antigravity-provider (thin shipped jar, same\ndiscipline as :\n[…]\nown :ir suite via the composite build), antigravity-provider.jar verified thin (0 core-ir\nclasses), :antigravity-teavm:generateJavaScript green (TeaVM transpiles the whole core-ir\ndependency cleanly).",
"is_bot": false,
"headline": "SP-2: migrate antigravity-auth's Anthropic<->Gemini bridge to core-ir",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-19T00:14:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6cda25d428d62736cb9700c46081521b6c016814",
"body": null,
"is_bot": true,
"headline": "Automated merge from tag v1.12.0 into main",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-18T18:50:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1ee6bb13f803e91fd623ab53b89c5da61e9fdc2e",
"body": null,
"is_bot": false,
"headline": "chore(antigravity): bump core-auth to main 08c59bd (LP-3 opt-in proxy)",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-18T18:49:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2a25942680035e818e155437cadc8ebd63dba0b",
"body": "…ignature_cache, prune dead config keys\n\nPart A - wire up 3 half-built features into real behavior + the Settings tab:\n- request_jitter_max_ms: javaHandle.ts's jsExec now awaits a random [0, max) delay\n right before the outbound fetch (applyRequestJitter); 0 (default) is a no-op.\n- cli_first: threa\n[…]\nd as if functional.\n\nTests: focused new tests for each wired feature (javaHandle.test.ts, cache.test.ts) plus\nupdated Java tests for the pruned config surface and the cliFirst-threading resolver path.",
"is_bot": false,
"headline": "feat(antigravity-provider): wire up request_jitter_max_ms/cli_first/s…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-18T18:23:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b864c70ae24b84c25bddcd64dd2c6b1ed23fa3be",
"body": null,
"is_bot": true,
"headline": "Automated merge from tag v1.11.1 into main",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-18T12:34:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "11faf16ce5a749e93e9af347b7f5d581eb099662",
"body": "…pdates are the updater's job)",
"is_bot": false,
"headline": "refactor(antigravity-provider): drop the auto_update config option (u…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-18T12:24:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af9ed405f91f91767abe63fa35e1cdc37751053b",
"body": null,
"is_bot": true,
"headline": "Automated merge from tag v1.11.0 into main",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-18T08:48:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3942bc01687135897db0ff2a90f6b01628f44acb",
"body": "…/Quota/OAuth incl. new config+oauth), retire /v1/* handle() branches\n\nbump core-proxy submodule to 9bc6a3c (main lineage): typed provider\ncapability interfaces (ConfigurableProvider/ModelCatalogProvider/\nQuotaProvider/OAuthProvider) + POJOs, with QuotaProvider returning\nList<AccountQuota> (per-acco\n[…]\ne-classpath collision (githubCompileOnly ai-java 1.0.7\nbundles a pre-SPI HandlerCtx) by prepending :routing's compiled\noutput to compileJava/compileTestJava, matching claude-code-auth's\nidentical fix.",
"is_bot": false,
"headline": "feat(antigravity-provider): typed capability SPI (Config/ModelCatalog…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-18T08:23:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "31a81e055d0d05bf7aae761e7e68eb9a3158c41a",
"body": "…orkflows)",
"is_bot": false,
"headline": "ci: remove sync-experimental-to-main (replaced by tag-gated promote w…",
"author_name": "Finn Birich",
"author_login": "intisy",
"committed_at": "2026-07-17T12:17:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e38600b59f40961570a8ca4ba8e9c46caeaed57a",
"body": null,
"is_bot": true,
"headline": "Automated merge from experimental to main",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-17T12:16:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d2be43a7baee928f6feb159a47f090ce279cd912",
"body": null,
"is_bot": false,
"headline": "ci: add tag-gated promote workflow (promote-main.yml)",
"author_name": "Finn Birich",
"author_login": "intisy",
"committed_at": "2026-07-17T12:16:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a5332b067eb12760c8f2923e8ebe0a309fa7819a",
"body": null,
"is_bot": false,
"headline": "ci: add tag-gated promote workflow (promote-experimental.yml)",
"author_name": "Finn Birich",
"author_login": "intisy",
"committed_at": "2026-07-17T12:16:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0bedf038d694db23f05cb1c074af46073f32ba94",
"body": null,
"is_bot": true,
"headline": "Automated merge from experimental to main",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-17T07:40:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac59094eaba5518c1e9c0bfcc4c2e773f9b23a22",
"body": "…rtable (scrub home dir)",
"is_bot": false,
"headline": "test(antigravity): make serve-transform image-path fixture machine-po…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-17T07:39:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "06218d033aaa614c8003ac6cc1e2c684cf9017a3",
"body": null,
"is_bot": true,
"headline": "Automated merge from experimental to main",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-17T07:32:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4eb779aeeb4bba28510845dbdf0e1facade1bf72",
"body": "…e (scrub reset date)",
"is_bot": false,
"headline": "test(antigravity): make handle-parity fixture locale/timezone-portabl…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-17T07:32:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2a6f4129108f92703704adc98273b07ad1863f86",
"body": null,
"is_bot": true,
"headline": "Automated merge from experimental to main",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-17T07:27:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b5dbfb5bd62488b64ec90bcf4222479751d2519",
"body": "… TS LOC)",
"is_bot": false,
"headline": "chore(antigravity): v1.10.0 — TeaVM de-dup (Java single source, -8238…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-17T07:27:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a7f9097afe4a0bb4f7d06e113fddbb68cd29746f",
"body": null,
"is_bot": true,
"headline": "Automated merge from experimental to main",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-16T23:46:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a065b6ce0bd8d9d8b9df740f81f9aeaacc0e752",
"body": "… (098ecef)",
"is_bot": false,
"headline": "chore(antigravity): gradlew +x, reconcile core-auth submodule to main…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-16T23:38:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9acd03cdead9749a00b7c8fb85b4c6a555e6d8b8",
"body": "Deletes ensureProjectContext (the project-id discovery decision) and its\nper-refresh-token projectContextResultCache/projectContextPendingCache —\nAntigravityProjectContext.ensureProjectContext (Java) owns that decision now\n(Task 7b-2), and ensureProjectContext was the cache's only consumer, so it ha\n[…]\nmport (types.ts doesn't exist in this repo)\nflagged by tsc — is gone now that ensureProjectContext no longer needs it;\nauth.ts and config/models.ts have the same pre-existing break, out of scope here.",
"is_bot": false,
"headline": "refactor(antigravity): trim project.ts to host I/O + dedup cache (7b-3)",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-16T23:26:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dbaf7a8e2d3a4e4811faf7f6bbc68fc689ab8dfa",
"body": "…ava; drop dup TS (7b-2)\n\nAdds resolveProjectIdProd + generateSyntheticProjectIdProd (AntigravityProviderJs,\nreal jsRandom/jsUuid seams) and driver/javaHandle.ts's resolveProjectIdViaJava /\ngenerateSyntheticProjectIdViaJava wrappers. resolveProjectIdProd constructs a\nstandalone AntigravityHandleOrch\n[…]\nsists a\nsyntheticProjectId) exactly like the deleted TS did. request.test.ts's\ngenerateSyntheticProjectId tests now assert the same format/uniqueness\nproperties against generateSyntheticProjectIdProd.",
"is_bot": false,
"headline": "refactor(antigravity): route fetchModels project-resolution through J…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-16T23:24:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a804c0176767251322311eae1ae7b1d212e93807",
"body": "…orts (7b-1)\n\nAdds pickVersionProd + driftAccountVersionsProd (AntigravityProviderJs), real\njsRandom seams over the already-ported AntigravityVersions.pickVersion and\nAntigravityHandleRouting.driftAccountVersions. Deletes the duplicated TS\npickVersion/driftVersion/nextVersionDriftDelay; fingerprint.\n[…]\ned-random values already used by\nAntigravityVersionsTest/AntigravityHandleRoutingTest (extracted from the real\nTS via a node harness, per that suite's javadoc) — one recorded ground truth,\ntwo suites.",
"is_bot": false,
"headline": "refactor(antigravity): route version drift/pick through Java Prod exp…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-16T23:15:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "030b32ff107807052966b247ecc862b88717bf6a",
"body": "…op dup TS (7a)",
"is_bot": false,
"headline": "refactor(antigravity): route catalog + quota through Java exports; dr…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-16T22:56:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a4cfa3e3c509e5e27cafcb4a586b064f2a3306a8",
"body": "…gerprint logic (6c)\n\n- src/plugin/recovery.ts + src/plugin/thinking-recovery.ts (+ tests) deleted: ported to Java in\n Task 1 (AntigravityThinkingRecovery / AntigravityResponseParse.detectErrorType), and had zero\n remaining importers once request.ts's dead functions were removed in 6a.\n- src/drive\n[…]\n the deleted\n lanes.ts/request-helpers.ts/transform/*/core-streaming paths.\n\ndriver/lanes.ts itself was already deleted in 6a (forced there once model-resolver.ts was deleted;\nit had zero importers).",
"is_bot": false,
"headline": "refactor(antigravity): delete duplicated TS driver/quota/versions/fin…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-16T22:24:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a9d38a60611c0087af181b3fd0b5b1b44b33efd7",
"body": "…logic (6b)\n\nrequest.ts was already trimmed to its host I/O KEEP surface in 6a (forced there since its\nprepareAntigravityRequest/transformAntigravityResponse depended directly on the deleted transform\nbarrel). This commit deletes the rest of the logic that surface's removal orphaned:\n\n- src/plugin/r\n[…]\n (the real, live signature store — distinct from transformer.ts's\n now-dead duplicate createThoughtBuffer), so those three types are inlined into signature-store.ts\n before the directory is removed.",
"is_bot": false,
"headline": "refactor(antigravity): delete duplicated TS request/bridge/streaming …",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-16T22:19:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1d6f936c4e8a8bf1a3003ecd7ff47eeea5e3f9d7",
"body": "Delete src/plugin/transform/{claude,gemini,cross-model-sanitizer,model-resolver,index}.ts\nand their tests — each is covered by a Java test (ClaudeTransformsTest/GeminiTransformsTest/\nCrossModelSanitizerTest/AntigravityModelResolverTest). isGemini3Model moves verbatim to a new\nsrc/plugin/transform-ja\n[…]\ner/lanes.ts (superseded by AntigravityLanes via the orchestrator) had zero remaining\nimporters already, so it is deleted now rather than in 6c — its only import was\nmodel-resolver.ts's getModelFamily.",
"is_bot": false,
"headline": "refactor(antigravity): delete duplicated TS transform modules (6a)",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-16T22:15:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1ad1aa3cbf06736fcc9abe2fe0b23ec44981f019",
"body": "…ve flag + TS decision loop",
"is_bot": false,
"headline": "refactor(antigravity): handle unconditionally delegates to Java; remo…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-16T21:51:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4b27fb885e0cc5440d6eb4ff702d2ef3adcacd32",
"body": "…RVE transform (Task 3d)",
"is_bot": false,
"headline": "fix(antigravity): wire gemini-3 thought-dedup set through the Java SE…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-16T21:23:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c98b4f55f6cb7b0af132fa59efb941bc0426a0b9",
"body": "…VE through Java (Task 3c)",
"is_bot": false,
"headline": "feat(antigravity): real-seamed response-transform exports + route SER…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-16T21:04:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9dc840e28412a4ce7887da63e3ba15c5ce66c107",
"body": "… real seams",
"is_bot": false,
"headline": "feat(antigravity): javaHandle calls Java prepare/transform/stream via…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-16T20:33:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aa8e065011fcd3ba178d5c276f6b5251eefea223",
"body": "…per factory, sig cache)",
"is_bot": false,
"headline": "feat(antigravity-teavm): production seam exports (prepare, stream-map…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-16T19:59:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6c839201a9b3802842185d31796671ec38f91bdc",
"body": "…l seam for jar + TeaVM)",
"is_bot": false,
"headline": "feat(antigravity-java): port thinking-recovery + detectErrorType (rea…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-16T19:42:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95926500f744b3daf69becd1c44ce1dd9f293dd7",
"body": null,
"is_bot": true,
"headline": "Automated merge from experimental to main",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-16T19:11:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "94a61a2b2c731c8e211e66e31365884869406af6",
"body": null,
"is_bot": false,
"headline": "docs: antigravity TeaVM de-dup implementation plan",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-16T19:10:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d226f922ab04f3c7569498ace36194c6023b2489",
"body": null,
"is_bot": true,
"headline": "Automated merge from experimental to main",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-16T18:42:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3bb07bfbb18386f9c13c66f235591b0ce09521d7",
"body": null,
"is_bot": false,
"headline": "docs: antigravity TeaVM de-dup design spec",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-16T18:41:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "81146b15933b1cc8acc6e5d77a34c537c3b3d5e8",
"body": null,
"is_bot": true,
"headline": "Automated merge from experimental to main",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-16T15:10:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5393b3f56cf3a743201c3b9b24c613859fddafc4",
"body": "…er jar",
"is_bot": false,
"headline": "ci: unify publish workflow — one v* tag publishes npm plugin + provid…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-16T15:10:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e19c9cc9274e57230cd9dd7de3fdf253e0e382c4",
"body": null,
"is_bot": true,
"headline": "Automated merge from experimental to main",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-16T13:47:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "185465d96a1222c15d030a5d094a7c12732318a8",
"body": "…hared upstream transport\n\nExtracts the shared fetchAvailableModels POST-over-endpoint-fallback transport out of\nAntigravityModelsFetch into a new AntigravityUpstream helper (behaviour-preserving refactor,\nexisting models/serve tests stay green), then adds AntigravityQuotaFetch + a GET /v1/quota\nhan\n[…]\nlies, persisted to meta.cachedQuota, status via\nAntigravityQuotaParser.antigravityStatus. Never throws out of fetch(); one bad account folds\ninto an error entry instead of aborting the whole response.",
"is_bot": false,
"headline": "feat(antigravity-provider): quota-display Task 2 -- GET /v1/quota + s…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-16T13:46:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "775a9c4da83914ff446c6eaf04cd77ef58848fe8",
"body": null,
"is_bot": true,
"headline": "Automated merge from experimental to main",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-16T11:30:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "46d7a1632e25df2209da92c5e17f3de6a63860c9",
"body": "Model-map Task 2: mirrors claude-code-auth's ClaudeModelsFetch. Adds\nAntigravityModelsFetch.fetch (first enabled account via ensureAccess, no\nproject discovery/onboarding, POST v1internal:fetchAvailableModels across\nthe antigravity endpoint fallbacks, buildAntigravityCatalog mapping) and\nwires it into AntigravityProvider.handle before the messages orchestrator.\nWidens HostProjectLoader.loadHeaders to package-visible so the header\nconstruction is reused rather than duplicated.",
"is_bot": false,
"headline": "Add GET /v1/models discovery to the antigravity JVM provider",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-16T11:30:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "63b8a5f6d6fce67f65622bd6ba8a187fff6bc1bd",
"body": null,
"is_bot": true,
"headline": "Automated merge from experimental to main",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-16T10:28:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d2a2cc92df222c33a4e3d0bbd7fd2855325b1da",
"body": "…> main)",
"is_bot": false,
"headline": "ci: add sync-experimental-to-main workflow (auto-merge experimental -…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-16T10:28:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b14021f41217c887d75bd0b1ca4bca1af7153f08",
"body": "…lish\n\nReplace the CI-unresolvable compileOnly \"io.github.intisy:jvm:0.1.0\" (only\nresolves through the local composite includeBuild) with githubCompileOnly\n\"intisy-ai:ai-java:1.0.7:standalone\", which pulls the published standalone\nfat asset (jvm.backend + shared.manager/model + shared.routing + gson) via\ngithub-gradle. Keeps the jar thin (compileOnly) and the local composite\npath intact for :test.",
"is_bot": false,
"headline": "fix(antigravity-provider): consume published ai-java 1.0.7 for CI pub…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-16T09:51:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ca18ea10f48624fca1c6c9dc924de32b0ba061e5",
"body": "…ge guard + comment nits\n\ngeminiSseToAnthropic now falls back to the verbatim upstream response when the upstream body\nis non-empty and parsed but the mapper produced zero content blocks (a likely envelope-shape\nmismatch, e.g. cloudcode-pa's unverified response-wrap), instead of silently emitting a\nlook-alike empty SSE body. Also fixes a stale transformer.ts line citation and updates the\nnow-inaccurate BRIDGE_STREAM TODO comment in AntigravityProvider.",
"is_bot": false,
"headline": "fix(antigravity-provider): phase-4 review fixes -- empty-content brid…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-15T23:22:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1c5f52dd8dcc5f7e392962fc0b0cf07bf26d3898",
"body": "…ic-shaped buffered SSE\n\nSERVE now requests streamGenerateContent (SSE, cloudcode-pa host kept) and pipes the buffered\nGemini SSE upstream through a new AntigravityAnthropicBridge (reusing the already-ported\nAntigravityStreamMapper) instead of returning Gemini-shaped JSON, closing the gap where an\nA\n[…]\nisions are now\nalso rewrapped into Anthropic error shape (rate_limit_error/api_error); TERMINAL_ERROR was\nalready Anthropic-shaped. AntigravityResponseTransform stays in the tree, unused by SERVE now.",
"is_bot": false,
"headline": "feat(antigravity-provider): Phase 4 -- bridge SERVE output to Anthrop…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-15T23:12:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5f9c63947c11d1c86f45592fa06fa0d1bc697eed",
"body": "…response transform\n\nPorts the OK, non-streaming JSON branch of transformAntigravityResponse\n(src/plugin/request.ts:1863-1926) as AntigravityResponseTransform.transformServe:\ncloudcode-pa array/`.response` unwrap, preview-access-error rewrite, usage-metadata\nheaders, and transformThinkingParts, reus\n[…]\nThinkingBlocks helpers. Wired into AntigravityProvider's SERVE materialization\nbranch (previously a Phase 3a verbatim shim); SERVE_RAW/BRIDGE_STREAM are unchanged\n(streaming/SSE bridge stays Phase 4).",
"is_bot": false,
"headline": "feat(antigravity-provider): Phase 3b -- port the SERVE non-streaming …",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-15T22:52:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fe219cdec7badd8013d48f346c209b00ffb46128",
"body": "…ator into the serve path\n\nAntigravityProvider.handle() now runs every request through the fully-ported\nAntigravityHandleOrchestrator instead of the Phase 2 ad-hoc single POST, so\nretry/account-rotation/Auto-walk/terminal-error/synthetic-response all come\nfrom the orchestrator's decision loop for fr\n[…]\ntigravityProvider.handle end-to-end. AntigravityProviderTest updated for\n the orchestrator's own (different) no-account decision.\n\nOAuth client secret still read from env only; no runtime deps added.",
"is_bot": false,
"headline": "feat(antigravity-provider): Phase 3a — wire AntigravityHandleOrchestr…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-15T22:33:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "01ff8c5779833f75812cd6fe47750c0cc4a3dd90",
"body": "…bound POST; client_secret null when env unset (review)",
"is_bot": false,
"headline": "fix(antigravity-provider): seed Content-Type: application/json on out…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-15T21:54:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ace1152a72492950da9d906ed4f38feb93085f4",
"body": "…untManager acquire, request-prep + single non-streaming POST (OAuth client secret read from env, never hardcoded)",
"is_bot": false,
"headline": "feat: AntigravityProvider Phase 2 — self-assembled :jvm backend, Acco…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-15T21:46:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "efb2061052b4c1a86709dbb9aebab43f75302103",
"body": "…-gradle publish scaffold",
"is_bot": false,
"headline": "feat: AntigravityProvider JVM skeleton (implements Provider) + github…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-15T21:05:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9790e02749faca715e71d465e1724d67b3d1ebe9",
"body": "…d correlation)",
"is_bot": false,
"headline": "fix: T7g2 inject real random/uuid into live orchestrator (synthetic-i…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-15T11:50:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "21a36fba6daaaa8f3345579e8168688e588a226b",
"body": null,
"is_bot": false,
"headline": "feat: T7g2 flag-gated Java-orchestrator handle delegation (dormant)",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-15T11:31:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e4b9144223f6f3b8983bd849477bd0f08080143e",
"body": null,
"is_bot": false,
"headline": "feat(java): T7g1 async JS bridges + prove multi-@Async composition",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-15T09:12:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f0cdf0a73064f3ce2907e9b82d7c747641b8bc2e",
"body": null,
"is_bot": false,
"headline": "feat(java): T7f port handle DECISION orchestrator (Bucket B)",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-15T08:42:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c324de91fc0b236f1ee4072f9845809a165c5fc",
"body": "…NUL byte)\n\nThe MapLookup cache-key delimiter was written as a raw U+0000 control byte\ninside the string literal, which made the file git-binary (undiffable). Replace\nwith the equivalent \\u0000 Java escape -- identical compiled value, plain-text\nsource. Test-only; no production/behavior change. :antigravity-provider:test green.",
"is_bot": false,
"headline": "chore(java): T7e use \\u0000 escape in test-double delimiter (was raw …",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-15T07:42:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7b2a3ae4c4f86e784aa20bad8592f719529a6449",
"body": "…pers",
"is_bot": false,
"headline": "feat(java): T7e port prepareAntigravityRequest core + fingerprint hel…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-15T07:36:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9ee2e1fee4b6de267300691e64ea96ef1cadd0e5",
"body": null,
"is_bot": false,
"headline": "feat(java): T7d port format bridge + streaming pure halves",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-15T06:39:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "880594890d1712ad248923074f43f4d4c735948a",
"body": "Completes the request-helpers.ts port. Adds AntigravityResponseParse\n(parseAntigravityApiBody incl. cloudcode-pa array shape, extractUsageMetadata,\nextractUsageFromSsePayload, rewriteAntigravityPreviewAccessError,\nisEmptyResponseBody, isMeaningfulSseLine, recursivelyParseJsonStrings,\ncreateSynthetic\n[…]\nSPI,\nDate.now via Clock SPI; tool-id counter is deterministic (no IdGenerator/UUID);\nsignature-cache Store SPI not reached. 33 harness-derived parity tests + 12\n@JSExports. Additive; src/** untouched.",
"is_bot": false,
"headline": "feat(java): T7c-3 port request-helpers tool-pairing + usage/error parse",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-14T23:30:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "907d0ea0ea134b56bef2e9278911211ccaf51444",
"body": "The Anthropic branch of sanitizeThinkingPart built `part.thinking ?? part.text`\n(request-helpers.ts:1101) with an UNDEFINED sentinel as the first nullish operand;\nsince JsCoercion.nullish only falls through on == null, an ABSENT `thinking` key\nreturned UNDEFINED instead of falling through to `text`,\n[…]\natching ?? semantics); the sentinel stays only on the text fallback.\n\nAdds regression test filterUnsigned_thinkingContentInTextKey_preserved\n(contents + messages shapes), snapshotted from the real TS.",
"is_bot": false,
"headline": "fix(java): T7c-2 sanitizeThinkingPart thinking??text fallback parity",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-14T23:01:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0396d73331177f2bb27e4a0b0335018d888623b8",
"body": "Port the thinking-config + thinking-block-filtering slice of\nsrc/plugin/request-helpers.ts to transpilable Java (T7c-2):\n\n- AntigravityThinkingConfig: DEFAULT_THINKING_BUDGET, isThinkingCapableModel,\n extractThinkingConfig, extractVariantThinkingConfig, resolveThinkingConfig,\n normalizeThinkingCon\n[…]\n\nMIN_SIGNATURE_LENGTH; introduces SKIP_THOUGHT_SIGNATURE.\n\nParity tests snapshotted from the real TS via a two-pass keep_thinking harness.\nAdds @JSExports; :antigravity-teavm:generateJavaScript green.",
"is_bot": false,
"headline": "feat(java): T7c-2 port request-helpers thinking config + block filtering",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-14T22:49:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4cecc8d6f0583581bc98d05a0d77045bd14c29a0",
"body": "…maForAntigravity)",
"is_bot": false,
"headline": "feat(java): T7c-1 port request-helpers schema cleaning (cleanJSONSche…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-14T22:16:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f507ef86994913458f6a55e5ed58d6f7a1cee37",
"body": "…r fix)",
"is_bot": false,
"headline": "fix(java): T7b mergeTextParts empty-string truthiness parity (reviewe…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-14T18:37:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "172056b1c24a44c1c4328af8b5194727afe01d7e",
"body": "…tizer/gemini/claude)",
"is_bot": false,
"headline": "feat(java): T7b port transform layer (model-resolver/cross-model-sani…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-14T18:24:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "846ec513d34e89dcee16742b8653b1f72a37ccb3",
"body": "…rsions/catalog/quota)\n\nScaffolds antigravity-auth's Java module (core-proxy submodule pinned at 3b0ae4e for the\nJsonCodec/Clock/Random SPIs, Gradle build aliasing core-proxy's :routing/:teavm, an\n:antigravity-teavm TeaVM target) and ports the five safest pure-logic slices of the TS\ndriver, mirrorin\n[…]\ndle/fetch/quota-refresh/\nproject-context) and Bucket C (login/TUI/opencode-merge/streaming) are untouched.\nantigravity-auth's TS build + 662 vitest tests remain green -- additive only, no live impact.",
"is_bot": false,
"headline": "feat(java): T7a scaffold + port small pure-logic units (auth/lanes/ve…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-14T17:20:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f4722a10ca9318a0cb46e16124e1e86d3f6cc18e",
"body": "…e-limited + retry-after) to Claude Code path so the loader proxy advances the tier fallback chain (opus->claude-code) and renders the native rate-limit UI instead of a terminal 400",
"is_bot": false,
"headline": "fix(antigravity bridge): propagate rate-limit signal (429 + x-hub-rat…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-11T14:33:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "248840e991bb2df0255afaec332ed12a1d739aa8",
"body": "… must not be masked by a sandbox endpoint's 403 — surface the 429 so the user sees 'quota resets X' instead of an irrelevant GCP staging-project error",
"is_bot": false,
"headline": "fix(antigravity): a real rate-limit (429 from licensed prod endpoint)…",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-11T14:25:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1fecf695696b92f9987c670b188eed8db02bdb3b",
"body": "…(string-only), keep native type + values in description; force type string on string enums (fixes 'Invalid value ... TYPE_STRING' 400)",
"is_bot": false,
"headline": "fix(schema): normalize enums for Gemini — drop boolean/numeric enums …",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-11T14:13:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "85ec5ee8d631396b00639396f77cada0ead6d8d5",
"body": null,
"is_bot": false,
"headline": "chore: bump core-auth -> fd30a7d (sticky-at-cap fix)",
"author_name": "intisy (Finn Birich)",
"author_login": "intisy",
"committed_at": "2026-07-11T13:51:29Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 6,
"commits_last_year": 262,
"latest_release_at": "2026-07-21T11:26:10Z",
"latest_release_tag": "1.13.4",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 9,
"days_since_latest_release": 8,
"mean_days_between_releases": 0.8
},
"community": {
"has_readme": true,
"has_license": false,
"has_description": true,
"has_contributing": false,
"health_percentage": 25,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "antigravity-auth",
"exists": true,
"license": "MIT",
"keywords": [
"opencode",
"claude",
"antigravity",
"google",
"oauth",
"gemini",
"core-auth",
"provider"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/antigravity-auth",
"is_deprecated": false,
"latest_version": "1.13.4",
"repository_url": "https://github.com/intisy-ai/antigravity-auth",
"versions_count": 21,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 3230,
"first_published_at": "2026-06-03T05:57:11.664000Z",
"latest_published_at": "2026-07-21T11:26:07.094000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 8
}
]
},
"popularity": {
"forks": 0,
"stars": 0,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0,
"collected_at": null
},
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"tsconfig.json"
],
"toolchain_manifests": [
"java/antigravity-provider/build.gradle",
"java/antigravity-teavm/build.gradle",
"java/build.gradle"
],
"largest_source_bytes": 74895,
"source_files_sampled": 134,
"oversized_source_files": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"java/build.gradle",
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 4,
"malicious_count": 0,
"assessed_package": "npm:antigravity-auth@1.13.4",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"maven",
"npm"
],
"dependencies": [
{
"name": "@openauthjs/openauth",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^0.4.3"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 0,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "intisy",
"commits": 244,
"avatar_url": "https://avatars.githubusercontent.com/u/105643708?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"promote-experimental.yml",
"promote-main.yml",
"publish.yml",
"test.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 9,
"reason": "binaries present in source code",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 4 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 0,
"reason": "license file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "47d17f9513fedecd6ed189420646f2c5bc2c9b25",
"ran_at": "2026-07-29T17:01:59Z",
"aggregate_score": 3.1,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-29T05:47:37Z",
"oldest_open_prs": [],
"last_merged_pr_at": null,
"ci_last_conclusion": "FAILURE",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/intisy-ai/antigravity-auth",
"host": "github.com",
"name": "antigravity-auth",
"owner": "intisy-ai"
},
"metrics": {
"overall": {
"key": "overall",
"band": "at_risk",
"name": "Overall health",
"note": null,
"notes": [],
"value": 48,
"inputs": {
"security": 45,
"vitality": 72,
"community": 24,
"governance": 37,
"engineering": 60
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 72,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"commits_last_year": 262,
"human_commit_share": 0.81,
"days_since_last_push": 0,
"active_weeks_last_year": 9
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "9/52 weeks with commits",
"points": 6.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 9
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "262 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 262
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 6,
"latest_release_tag": "1.13.4",
"releases_from_tags": false,
"days_since_latest_release": 8,
"mean_days_between_releases": 0.8
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "6 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 6
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 8 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 8
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~0.8 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 0.8
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "critical",
"name": "Community & Adoption",
"value": 24,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 0,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "critical",
"name": "Community health",
"note": null,
"notes": [],
"value": 25,
"inputs": {
"has_readme": true,
"has_license": false,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "no license file detected",
"points": 0,
"status": "missed",
"details": [
{
"code": "license_absent",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 58,
"inputs": {
"packages": [
"antigravity-auth"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 3230
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "3,230 downloads/month across npm",
"points": 46.8,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 3230,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 37,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 4 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "critical",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution",
"pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"merged_prs": 0,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "no decided pull requests or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_decided_prs_or_data",
"params": {}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 43,
"inputs": {
"followers": 1,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "intisy-ai",
"public_repos": 30,
"account_age_days": 33
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "1 followers of intisy-ai",
"points": 2.2,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 1,
"login": "intisy-ai"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "30 public repos, account ~0 yr old",
"points": 11,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 30
}
},
{
"code": "account_age_years",
"params": {
"years": 0
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"antigravity-auth"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 8
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 8 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 8
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "21 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 21
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 60,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 60,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "4 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 4
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"topics": [
"ai",
"ai-provider",
"ai-proxy",
"gemini",
"intisy-ai",
"llm",
"provider",
"typescript"
],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "8 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 8
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 45,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 31,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 3.1
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "binaries present in source code",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 4 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:antigravity-auth@1.13.4 runtime dependency closure — what installing the published package pulls in — 4 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "npm:antigravity-auth@1.13.4",
"assessed": 4
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 4,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 4,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 1
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 53,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.988,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "80 of 81 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 80,
"sampled": 81
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 46,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
"tsconfig.json"
],
"agent_commit_share": 0,
"toolchain_manifests": [
"java/antigravity-provider/build.gradle",
"java/antigravity-teavm/build.gradle",
"java/build.gradle"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "java/antigravity-provider/build.gradle, java/antigravity-teavm/build.gradle, java/build.gradle (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "java/antigravity-provider/build.gradle, java/antigravity-teavm/build.gradle, java/build.gradle"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Java",
"largest_source_bytes": 74895,
"source_files_sampled": 134,
"oversized_source_files": 1
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Java (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Java"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "1/134 source files over 60KB",
"points": 54.6,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 134,
"oversized": 1
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-29T17:02:06.529647Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/i/intisy-ai/antigravity-auth.svg",
"full_name": "intisy-ai/antigravity-auth",
"license_state": "absent",
"license_spdx": null
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — npm.