Public recordAt Risk
Software health reportschema 0.27.0 · metrics 2.1.0 · 2026-07-25 18:05 UTC
isr4el-silv4 / pi-web-ui
Chrome side-panel UI and local bridge extension for Pi Coding Agent
isr4el-silv4/pi-web-ui holds a health index of 33 out of 100, placing it in the At Risk band. It scores highest on Sustainability & Governance (46/100) and lowest on Engineering Quality (30/100). It was last updated 5 days ago. A single contributor accounts for most of its recent work.
33
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.
33
Exceptional93-100The record's top tier (≈ top 5%); essentially all checked criteria met
Excellent80-92Strong across the board; minor gaps
Good65-79Healthy; gaps are limited and manageable
Moderate50-64Acceptable with notable gaps; review recommended
Weak35-49Material weaknesses across several areas
At Risk20-34Significant weaknesses; adoption warrants caution
Critical1-19Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
The weighted overall 38 is calibrated to 33 on the published index scale (record calibration 2026-08-02).
Ownership
Israel SilvaPersonal account
3 followers6 public repossince Jun 2019
This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish | Tags |
|---|---|---|---|---|---|---|
| npm | @isr4el-silv4/pi-web-ui | 1.0.15 | 2,574 | 16 | 5 days ago | pi-packagepi-extensionpipi-coding-agentchromevivaldiedgebravebrowserchromiumaiharnessbrowser-tools |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
36
Development activity
59Moderate
How it's scored
| 36/36 | Push recency — last push 5 days ago |
| 4.8/36 | Commit cadence — 7/52 weeks with commits |
| 18/18 | Commit volume — 105 commits in the last year |
| 0/10 | OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully |
Inputs used
| commits_last_year | 105 |
| human_commit_share | 1 |
| days_since_last_push | 5 |
| active_weeks_last_year | 7 |
Release discipline
1Critical
How it's scored
| 0/27 | Ships releases — no releases published |
| 0/36 | Release recency — no releases |
| 0/27 | Release cadence — no releases |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 0 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
36
Popularity & adoption
17Critical
How it's scored
| 16.9/60 | Stars — 12 stars |
| 0/25 | Forks — 1 forks |
| 0/15 | Watchers — 0 watchers |
Inputs used
| forks | 1 |
| stars | 12 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
44Weak
How it's scored
| 22.5/22.5 | README |
| 16.9/22.5 | License — license file present, not a recognized license |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| readme_badges | — |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| readme_badge_services | — |
| has_pull_request_template | no |
Ecosystem adoption (downloads)
57Moderate
How it's scored
| 45.5/80 | Monthly downloads — 2,574 downloads/month across npm |
| 0/20 | Registry dependents — not reported by this ecosystem |
Inputs used
| packages | @isr4el-silv4/pi-web-ui |
| dependents | — |
| ecosystems | npm |
| total_downloads | — |
| monthly_downloads | 2,574 |
Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
46
Maintainer resilience (bus factor)
10Critical
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 0/22.5 | Commit distribution — top contributor authored 100% of commits |
| 1.4/13.5 | Contributor breadth — 1 contributors |
| 0/10 | OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
Issue & PR responsiveness
51Moderate
How it's scored
| 14/42 | Issue resolution — 33% of issues closed |
| 30/30 | PR acceptance — 1/1 decided PRs merged |
| 0/13 | Newcomer PR acceptance — no first-time contributor's PR decided in 30d |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/26 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 1 |
| open_issues | 2 |
| closed_issues | 1 |
| prs_merged_7d | — |
| prs_decided_7d | — |
| prs_merged_30d | — |
| prs_decided_30d | — |
| issue_closed_ratio | 0.333 |
| closed_unmerged_prs | 0 |
| first_time_authors_30d | — |
| first_time_prs_merged_30d | — |
| first_time_prs_decided_30d | — |
Excluded from scoring (no data or not applicable): newcomer_pr_acceptance. Remaining weights renormalized.
Ownership & stewardship
41Weak
How it's scored
| 10/30 | Ownership backing — personal (user) account |
| 0/20 | Verified domain — not applicable to user accounts |
| 4.3/25 | Owner reach — 3 followers of isr4el-silv4 |
| 18.2/25 | Track record — 6 public repos, account ~7 yr old |
Inputs used
| followers | 3 |
| owner_type | User |
| is_verified | — |
| owner_login | isr4el-silv4 |
| public_repos | 6 |
| account_age_days | 2,593 |
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.
Package maintenance
100Exceptional
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on npm |
| 35/35 | Publish recency — latest publish 5 days ago |
| 20/20 | Version history — 16 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | @isr4el-silv4/pi-web-ui |
| ecosystems | npm |
| any_deprecated | no |
| min_days_since_publish | 5 |
Engineering Quality
Are baseline engineering and documentation practices in place?
30
Engineering practices
24At Risk
How it's scored
| 0/24 | CI workflows |
| 24/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — 0 out of 1 merged PRs checked by a CI test -- score normalized to 0 |
Inputs used
| has_ci | no |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Documentation
40Weak
How it's scored
| 30/30 | README |
| 0/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 10/10 | Repository description |
| 0/10 | Topics |
| 0/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | no |
| homepage | — |
| has_readme | yes |
| has_docs_dir | no |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
40
Security posture
25At Risk
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — 0 out of 1 merged PRs checked by a CI test -- score normalized to 0 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/26 approved changesets -- score normalized to 0 |
| 0/2.5 | Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
| 0/10 | Dangerous-Workflow — no data |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.2/2.5 | License — license file detected |
| 0/7.5 | Maintained — project was created within the last 90 days. Please review its contents carefully |
| 0/5 | Packaging — no data |
| 0/5 | Pinned-Dependencies — no data |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — no data |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 13 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 5 |
| scorecard_aggregate | 2.5 |
Excluded from scoring (no data or not applicable): dangerous_workflow, packaging, pinned_dependencies, signed_releases, token_permissions. Remaining weights renormalized.
Dependency advisories
100Exceptional
How it's scored
| 35/35 | Direct dependencies free of known advisories — no direct dependency carries a known advisory |
| 25/25 | Indirect dependencies free of known advisories — no indirect dependency carries a known advisory |
| 0/40 | No advisories left outstanding — no advisory carries a publication date |
Inputs used
| source | osv |
| advisories | 0 |
| affected_packages | 0 |
| assessed_packages | 2 |
| unassessed_packages | 0 |
| affected_by_severity | none |
| direct_affected_packages | 0 |
Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:@isr4el-silv4/pi-web-ui@1.0.15 runtime dependency closure — what installing the published package pulls in — 2 packages. Reachability is not analyzed.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.
46
Agent context & guidance
32At Risk
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 32/40 | Legible commit history — 60 of 100 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.6 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
How it's scored
| 0/18 | One-command bootstrap |
| 22/22 | Automated tests |
| 0/11 | Lint / format config |
| 11/11 | Static type checking — tsconfig.json |
| 0/10 | Reproducible environment |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 100 |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — no data |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | — |
| has_dockerfile | no |
| typed_language | yes |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | tsconfig.json |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.
Code legibility for models
100Exceptional
How it's scored
| 45/45 | Type-checkable code — TypeScript (statically typed) |
| 55/55 | Manageable file sizes — 0/48 source files over 60KB |
Inputs used
| primary_language | TypeScript |
| largest_source_bytes | 41,602 |
| source_files_sampled | 48 |
| oversized_source_files | 0 |
Key facts
12GitHub stars
1contributors
105commits, last 12 months
5days since last push
0releases
1bus factor
2open issues
npmpackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
OpenSSF Scorecard 2.5 / 10
2.5aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 0 | CI-Tests | 0 out of 1 merged PRs checked by a CI test -- score normalized to 0 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/26 approved changesets -- score normalized to 0 |
| 0 | Contributors | project has 0 contributing companies or organizations -- score normalized to 0 |
| n/a | Dangerous-Workflow | no workflows found |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 9 | License | license file detected |
| 0 | Maintained | project was created within the last 90 days. Please review its contents carefully |
| n/a | Packaging | packaging workflow not detected |
| n/a | Pinned-Dependencies | no dependencies found |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| n/a | Signed-Releases | no releases found |
| n/a | Token-Permissions | No tokens found |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
Direct dependencies 2
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| npm | @sinclair/typebox | ^0.34.49 | package.json |
| npm | ws | ^8.21.0 | package.json |
All dependencies not collected
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Dependency advisories 0
Installing npm:@isr4el-silv4/pi-web-ui@1.0.15 pulls in 2 packages, direct and transitive: 0 carry known advisories, of which 0 are direct dependencies.
No known advisories affect the assessed dependencies.
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 408,
"has_wiki": false,
"homepage": null,
"languages": {
"JavaScript": 1106,
"TypeScript": 219851
},
"pushed_at": "2026-07-19T19:05:15Z",
"created_at": "2026-06-05T21:12:42Z",
"owner_type": "User",
"updated_at": "2026-07-23T06:59:14Z",
"description": "Chrome side-panel UI and local bridge extension for Pi Coding Agent",
"is_archived": false,
"is_disabled": false,
"license_spdx": null,
"default_branch": "main",
"license_spdx_raw": "NOASSERTION",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript"
]
},
"owner": {
"blog": null,
"name": "Israel Silva",
"type": "User",
"login": "isr4el-silv4",
"company": null,
"location": null,
"followers": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/51991395?v=4",
"created_at": "2019-06-19T08:50:57Z",
"is_verified": null,
"public_repos": 6,
"account_age_days": 2593
},
"license": {
"state": "custom",
"spdx_id": null,
"raw_spdx": "NOASSERTION",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [],
"recent_commits": [
{
"oid": "f460063655e4d860150f7064cd05c60c2c3b57ae",
"body": null,
"is_bot": false,
"headline": "Updated package.json version",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-19T19:05:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8324f16dbeccb34e991ae5aa5b62c8823d4f98b7",
"body": "fix(bridge): use host Pi version + version-resilient model API",
"is_bot": false,
"headline": "Merge pull request #3 from isr4el-silv4/bugfix/1-local-models-not-listed",
"author_name": "Israel Silva",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-19T18:55:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d5185069f796bfc18fce65e7912e60639d17e31",
"body": "…(#1)\n\nRoot cause: the bridge is a separate spawned process that resolved its OWN\nbundled @earendil-works/pi-coding-agent (0.78.x), which lagged the host\n CLI. Two concrete consequences:\n 1. glm-5.2 was missing — 0.78.x's static model catalog predates it.\n 2. Even when pointed at 0.80.x, the bridge \n[…]\nts: normalizeModelRegistry across both shapes, loadPiSdk honoring\nPI_HOST_PI (+cache), and bridge-process passing/omitting PI_HOST_PI.\n6 pre-existing version-drift failures unchanged; no new failures.",
"is_bot": false,
"headline": ":bug: fix(bridge): use host Pi version + version-resilient model API …",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-19T18:38:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ba9ef783529f4e04a97586568d6aa802421fdb13",
"body": "Reverts the bump to ^0.80.10. While 0.80.x ships glm-5.2, it introduced\nan auth-detection regression: modelRegistry.getAvailable() returned only\nthe active model (openrouter/zai catalogs dropped), so the extension\nshowed only one model. Confirmed live: 0.78.1 returns 266+ models, while\n0.80.10 retur\n[…]\n's models.json (built-in provider 'zai' inherits api/baseUrl,\nauth from auth.json), verified to appear alongside all other models.\n\nThe earlier mergeCurrentModel + slash-safe selection commits remain.",
"is_bot": false,
"headline": ":revert: revert(deps): pi-coding-agent back to ^0.78.1 (#1)",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-19T17:03:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ed2f231386e87dfd8106b495d4fb60bfa008596c",
"body": "…istered (#1)\n\nThe user's default model zai/glm-5.2 was invisible in the extension\nbecause @earendil-works/pi-ai 0.78.1 does not yet ship glm-5.2 (only\nglm-5 / glm-5.1). With glm-5.2 unregistered, modelRegistry.find() could\nnot resolve the configured default, so findInitialModel silently dropped\nit \n[…]\ned). After the bump glm-5.2 is registered, resolves as the\ndefault, and appears in the model_list broadcast (verified live).\n\nVerified live: currentModel becomes zai/glm-5.2 and RESULT_HAS_GLM52=true.",
"is_bot": false,
"headline": ":arrow_up: fix(deps): bump pi-coding-agent ^0.80.10 so glm-5.2 is reg…",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-19T16:37:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "93a6beae49576be06f24547db25b6c8f11b8f6eb",
"body": "The bridge's broadcastModelList built the model picker list solely from\nmodelRegistry.getAvailable(), which excludes the session's active model\nwhen it is a synthesized fallback. This happens whenever a default model\nid does not exactly match a registered built-in — e.g. the user's\ndefault `zai/glm-\n[…]\n early return when the\n available list is empty but an active model exists\n- Add unit tests for the helper and end-to-end tests asserting the\n model_list broadcast contains the fallback active model",
"is_bot": false,
"headline": "bug fix(bridge): include active model in extension model list (#1)",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-19T16:14:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "02100f0696191fc4765448096545094fe384b72f",
"body": null,
"is_bot": false,
"headline": "Updated package version and updated ignore files",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-11T12:46:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "332d59da3d42936e003b9e048d008fa51a7bc203",
"body": null,
"is_bot": false,
"headline": "Updated package.json version",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-11T12:39:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3c8931763e54de115ea2799df6f28f7af51dded8",
"body": null,
"is_bot": false,
"headline": "Updated .gitignore",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-11T12:36:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61ff5d22e817c9b2a2f87c54c107e240ac283328",
"body": "- Changed /pi-web-ui start to open the extension's Chrome Web Store\n page instead of http://localhost:<port>/open\n- Updated tests to use the new STORE_URL constant",
"is_bot": false,
"headline": "🔗 open Chrome Web Store page instead of localhost on start",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-11T11:41:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "46b11ac1251dd1cb52362f2cd0a3f5e7b29b6a24",
"body": null,
"is_bot": false,
"headline": "Added .github/ to .npmignore",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-02T18:32:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "432a00640de0c9cfaaeb768cfd6b5cffa263c38c",
"body": null,
"is_bot": false,
"headline": "Updated package.json",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-02T18:31:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1a07d48c25ae7130c69947b98613c644b7cb1f03",
"body": null,
"is_bot": false,
"headline": "Updated README",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-02T18:30:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d4557e378bcd3b6ad8dda3bbf21693b150f1ff4",
"body": null,
"is_bot": false,
"headline": "Create FUNDING.yml",
"author_name": "Israel Silva",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-02T15:16:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b896a82c0fb5256fb2a185326915eb23f1f46b22",
"body": null,
"is_bot": false,
"headline": "Updated package.json",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-02T13:52:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e90728dbdfa0d4169e5714d8021684142484174",
"body": "Model selection is now handled exclusively through the <select> element\nin the chrome extension. The set_model command path and broadcastModelList\non session creation remain intact, so model selection functionality is\nunchanged.",
"is_bot": false,
"headline": "refactor: remove /model slash command from bridge",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-02T12:21:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a8942c183928510ddf97b8bad1be73eb24f511d",
"body": null,
"is_bot": false,
"headline": "Allow model selection",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-07-01T22:04:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b5f1c7567f869cbceb96114c9fd8e5b34daf0f4c",
"body": null,
"is_bot": false,
"headline": "Updated version",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-28T19:32:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0bd41958a284bc474aca2e10b7aefc7c0c5d97c8",
"body": "- Call resourceLoader.reload() after construction (SDK skips reload\n when a resourceLoader is provided, so extensions/skills/templates\n were never discovered from disk)\n- Access _extensionRunner private field (was extensionRunner without\n underscore, which was always undefined)\n- Add theme.fg/bg/bold/italic/underline/inverse/strikethrough/reset\n methods to WebUiContext (extensions call these during init; missing\n methods caused 'theme.fg is not a function' errors)",
"is_bot": false,
"headline": "fix: discover extension commands, skills, and templates",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-28T13:56:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fdef6b46b391c8d716cb6277ae5f675ad50d8da4",
"body": null,
"is_bot": false,
"headline": "Added handling for bridge-process.ts",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-28T13:05:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c82e071b2d065a00c149a52f693312b740302810",
"body": null,
"is_bot": false,
"headline": "changed bin in package.json",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-28T11:37:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4e0edfeec47f7a26f2eebbacee1037a1cf914d50",
"body": null,
"is_bot": false,
"headline": "Updated README and added logs",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-28T11:21:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82d94d4becbbc9e85120bfa55b326913072d5142",
"body": null,
"is_bot": false,
"headline": "Changed bridge IP",
"author_name": "AI Coding Agent",
"author_login": null,
"committed_at": "2026-06-25T21:48:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "59f9399335acbad6c88525fc9fd364a80b2e24d5",
"body": null,
"is_bot": false,
"headline": "Updated package version",
"author_name": "AI Coding Agent",
"author_login": null,
"committed_at": "2026-06-25T21:41:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b95a2a14c19471618aeb5a8baaae3aba296ce208",
"body": null,
"is_bot": false,
"headline": "Updated .gitignore",
"author_name": "AI Coding Agent",
"author_login": null,
"committed_at": "2026-06-25T20:53:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "24abc5b356a5f80a535fcc900b32fbc5959e608f",
"body": "Not needed for a published library — consumers resolve their own\ndependency tree. Added to .gitignore to prevent future commits.",
"is_bot": false,
"headline": "chore: remove package-lock.json from tracking",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-25T20:50:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f00c465a84bc83a03de2dc9ca0c7ff21fe482eb7",
"body": null,
"is_bot": false,
"headline": "chore: bump version to 1.0.3",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-25T20:49:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a827821be6de15b406bc95f1d882f42a2b44b46",
"body": "The bridge was failing to start when no Chrome/Chromium browser was found,\nbecause chrome.open() threw an error after the bridge was already running.\n\nNow chrome.open() is wrapped in try-catch so the bridge starts regardless.\nUsers can open any browser (Firefox, etc.) manually on the bridge port.\n\nAlso adds tests for the new behavior.",
"is_bot": false,
"headline": "fix: make Chrome open best-effort so bridge starts even without Chrome",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-25T20:43:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cbb6c134d06c5d7717f1429c737e4f3c42aedc37",
"body": "…very, completions\n\nBridge-side implementation for Pi extension commands on Chrome:\n\n- WebUiContext: full ExtensionUIContext implementation via WebSocket\n - confirm/select/input with 30s timeout and default responses\n - notify as fire-and-forget broadcast\n - All TUI-only methods as no-ops\n - cle\n[…]\n command_completions event with items\n- Protocol types: list_resources, get_completions, resources_list,\n command_completions, extension_command_error\n- 131 tests passing, TypeScript compiles cleanly",
"is_bot": false,
"headline": "feat: bridge-side extension commands — bindExtensions, resource disco…",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-23T21:26:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cbb44258e973d6802b2cae24d5094802d8a90fa8",
"body": null,
"is_bot": false,
"headline": "1.0.2",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T21:54:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2f68b7e220643c7b89262cad24ff4fc5c1cebc85",
"body": null,
"is_bot": false,
"headline": "updated image in package.json",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T21:53:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4df2d3f368d40982cb7d0f883a8e94e291eaaf21",
"body": null,
"is_bot": false,
"headline": "1.0.1",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T21:44:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31e4f6e606a29069fa7fab76581e93129b3ce363",
"body": null,
"is_bot": false,
"headline": "Add license field to package.json",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T21:44:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa4644b02061fc5d9fd7bd179ba02003996ca19d",
"body": null,
"is_bot": false,
"headline": "Fix npm badge URL and add repository field",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T21:44:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b42b2f8267bd8c4e2da15cda6f33d012f8d1ec3",
"body": null,
"is_bot": false,
"headline": "updated package name",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T21:29:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "09a33ca42f04ea495df2b33785386234e8fa269c",
"body": null,
"is_bot": false,
"headline": "Added Pi tag to package.json",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T21:25:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d974bd61cd8be5e5f2ccc5bb0159c208426bba93",
"body": null,
"is_bot": false,
"headline": "Replace header logos with pi-web-ui screenshot",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T21:18:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7863b32f00c5d6bb7069e3cd7ab2f091aabe9685",
"body": null,
"is_bot": false,
"headline": "added keywords",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T20:57:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8929cee54481ae9d97a2f90b58da3dddd2834538",
"body": null,
"is_bot": false,
"headline": "set version to 1.0.0",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T20:55:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3e0b53cc0b16ba865365866dd09b785f9e087172",
"body": null,
"is_bot": false,
"headline": "Removed divider from README",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T20:53:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c2a9258d4214a563025a46d4fd701c11d015d667",
"body": null,
"is_bot": false,
"headline": "docs: center logos",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T20:51:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13afc2eabd85513eb11ac67d4ccd04b6fe9e3eae",
"body": null,
"is_bot": false,
"headline": "docs: move logos to top and equalize sizes at 64px",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T20:50:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d1cc18b777fed0c032dbfdaec76d4bae7dee71e",
"body": null,
"is_bot": false,
"headline": "docs: constrain logo sizes in README",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T20:47:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ab6dacbbfd9fba92d01b54a87c7fa07f101d88b",
"body": null,
"is_bot": false,
"headline": "docs: add Pi and Chrome logo assets",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T20:47:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b6c46fc8d6923e5bdf378fb399e314ad83c7bbb",
"body": null,
"is_bot": false,
"headline": "docs: add Pi and Chrome logos to README header",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T20:46:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "917f8636c187c2c34fc1c2b4eda77cf914b68d34",
"body": "- Rewrite README with philosophy, architecture, setup, usage examples,\n browser tools, frontend workflows, session management, and permissions\n- Add emojis to section titles for readability\n- Create LICENSE file (Apache 2.0)\n- Set package.json private to false for npm publishing",
"is_bot": false,
"headline": "docs: comprehensive README, Apache 2.0 license, set package public",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T20:41:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b0bf508281e2565a566f19250de21a4d8ff106a2",
"body": null,
"is_bot": false,
"headline": "moved chrome-extension to specific repo",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-17T20:12:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c0cd537bbcbad5bc9139addc74230fd55cfb539",
"body": "- Scroll target now points to main (the actual scrollable container)\n instead of #messages (a no-op since main has overflow-y: auto)\n- Added bottom padding to main and margin-bottom to last message\n for breathing room between conversation and textarea",
"is_bot": false,
"headline": "Fix spacing between last message and prompt input",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T13:48:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ac40464fa853b8bf049e9805676d0d33aa6fa6a",
"body": "…ing old one\n\nOn WebSocket connect, send new_session with cwd from /status instead of\ndispatching session_state which restored the previous session. This ensures\na fresh session starts immediately when the extension is refreshed.",
"is_bot": false,
"headline": "fix(chrome-extension): start new session on refresh instead of restor…",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T13:31:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aea229d9acf89a0f2b6c3d4306e2cb98e92c3d47",
"body": "Relocate UI request dialogs from main content area into the header,\npositioned between the attached tabs list and the CWD/resume row.\nRestyled with yellow warning colors for clear action-required visibility.",
"is_bot": false,
"headline": "Move confirmation banners to header above CWD row",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T13:14:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cd75629e4262d4bc94047db07d98f90ec085cac4",
"body": null,
"is_bot": false,
"headline": "clean up: remove stray IDE/plan files from tracking, update gitignore",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T12:19:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9fd04ecd84b6ef07254bc4a3f61339a7ffc9b6a6",
"body": "- Switch form to column layout so send/abort button stays visible\n- Enable overflow-y: auto on textarea so long text is scrollable\n- Add thin custom scrollbar for the textarea",
"is_bot": false,
"headline": "fix prompt form layout and textarea scrolling",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T12:17:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6946e9d9f270cca030a195499ea6b85f41b07730",
"body": null,
"is_bot": false,
"headline": "restore original .gitignore",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T12:14:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "323a922a4cc7a41f0dc9b4662c66581389640dae",
"body": null,
"is_bot": false,
"headline": "preserve README.md in gitignore",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T12:13:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9084ff404d93ca445d8df1296dc5390333fc584d",
"body": null,
"is_bot": false,
"headline": "unstage IDE and plan files, add to gitignore",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T12:12:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e93b1b00ad22f3ef2e456efa8d4370931ff7810f",
"body": "- Changed <input> to <textarea> for multi-line support\n- Auto-resizes vertically (max 180px) as user types\n- Enter sends message, Shift+Enter adds newline\n- Resets height after sending",
"is_bot": false,
"headline": "replace prompt input with auto-growing textarea",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T12:12:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1b30a64ef34deaa29bf188551ff5756f2a655fcf",
"body": null,
"is_bot": false,
"headline": "add Pi badge as extension icons (16, 32, 48, 128px)",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T12:04:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6137512382973f573cb5a875baaec1ee4836bca5",
"body": "- Complete CSS rewrite with CSS custom properties for theming\n- Light mode: warm stone palette, blue accent\n- Dark mode: deep zinc palette, blue accent\n- User messages as blue bubbles flush-right\n- Assistant messages as bordered cards with rich markdown\n- Catppuccin Mocha code blocks for developer-n\n[…]\n) in header\n- Persists preference to localStorage\n- Respects OS prefers-color-scheme as default\n- Green dot status indicator for bridge online/offline\n- Custom thin scrollbar, smooth theme transitions",
"is_bot": false,
"headline": "redesign sidepanel with light/dark mode",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T12:00:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dc8d0455fede9c44a243d010ba6a383f891fd075",
"body": "- Move pi-badge.svg into chrome-extension/ directory\n- Display 20px badge next to \"Pi Web UI\" title in header\n- Style with rounded corners and proper alignment",
"is_bot": false,
"headline": "Add Pi badge logo to chrome-extension header",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T11:43:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "869f8a6ea1a7474b1fb9865f1674af85d3b32b61",
"body": "Switch from hidden attribute to CSS class-based visibility:\n- .error-pill defaults to display: none\n- Only shows when .visible class is present (set only with real error text)\n- Clear textContent on hide to prevent stale content",
"is_bot": false,
"headline": "Fix empty error pill always visible",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T11:34:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "353413ed13ff7a92121a306c0102bb61f8c8b5f1",
"body": "- Clear sessionError on sessions_list and session_history events so\n the error pill hides when sessions load successfully after an error\n- Add defensive trim() check in renderErrorPill to guard against\n empty/whitespace-only error strings\n- Add tests for error pill clear-on-success scenarios",
"is_bot": false,
"headline": "Fix empty error pill showing when no error exists",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T11:29:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "480f8c692c2991007b321e165b31b504ef148011",
"body": "Relocate the cwd path/Browse button and Resume/session dropdown from\nthe session section into the header for a cleaner layout matching\nthe design mockup.\n\n- Restructured header HTML with semantic elements\n- Added pill-shaped session select with custom chevron\n- Styled cwd path with monospace font and ellipsis truncation\n- No functional changes — purely aesthetic",
"is_bot": false,
"headline": "Move cwd and session select into header bar",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T11:24:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c55a6ae9ddbd03d6f7eec4849880f46ac2c0597",
"body": "The thinking toggle button and block were appended to the DOM via\nappendChild, but then immediately destroyed by 'innerHTML +=' which\nreplaces all children. Replaced with insertAdjacentHTML('beforeend')\nto preserve the thinking elements.\n\nAlso updated the assistant_message ServerEvent type to include the\noptional thinking field that was already being sent at runtime.",
"is_bot": false,
"headline": "fix: thinking emoji not rendered in live chat assistant messages",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T11:09:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5dbc4582212ae7aeba96bcb3646fd6dcfa1c3d28",
"body": null,
"is_bot": false,
"headline": "Added missing files",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T10:52:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d7db9adbcfa86e31c95f4a845c894b25323b6567",
"body": "…nts in live chat\n\nThe bridge server broadcasts tool_call/tool_result events during live chat\nbut the client reducer ignored them, so only the final assistant_message\nwas rendered. Now the reducer handles all intermediate events to match\nthe session_history display.\n\nAlso includes thinking block extraction in assistant_message broadcast.",
"is_bot": false,
"headline": "fix(chrome-extension): render tool_call, tool_result and thinking eve…",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T10:47:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f0b0f97c860fb47c1a85176d5c796c904365fb70",
"body": "The model can finish generating before the abort signal reaches the\nprovider, resulting in a normal message_end (stopReason: end_turn)\nthat was incorrectly broadcast to the UI after 'Aborted' appeared.\n\nTrack an 'aborted' flag on the bridge: set on abort command, reset on\nnew prompt/new session. Any message_end arriving while the flag is set\nis suppressed, regardless of stopReason.",
"is_bot": false,
"headline": "fix(abort): suppress all assistant messages after user clicks abort",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-14T10:14:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8b010aae3969eb9a4df247a3a074ef60db53fecf",
"body": "…elay\n\n- Add reconnection logic to bridge-client.js (7 attempts, 2s between each)\n- Emit bridge_reconnect_exhausted event after all retries fail\n- Show reload banner in sidepanel when reconnection is exhausted\n- Suppress duplicate bridge_error notifications during reconnection\n- Clear notifications on successful reconnection\n- Add tests for reconnection, exhaustion, counter reset, and disconnect cleanup",
"is_bot": false,
"headline": "feat(chrome-extension): auto-reconnect bridge up to 7 times with 2s d…",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-13T16:11:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7aa3811b6958e36af6bedf6a73ffd30df8dce54c",
"body": "- Delete src/protocol/permissions.ts (PermissionMode type, isPermissionMode)\n- Remove observe/debug/control mode selector from Chrome extension UI\n- Remove set_permission_mode command from protocol\n- Simplify permission enforcement: all tools allowed by default\n- Cookie/storage toggles and confirmation prompts retained\n- Remove permissionMode from session state, bridge context, and all fixtures\n- Update 16 test files to remove permissionMode references",
"is_bot": false,
"headline": "Remove permission mode selector from UI and simplify bridge permissions",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-13T15:46:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f1fa8848023a5d768021cbebdf0cd0cd864eb8e",
"body": "… chat on new session\n\n- Extract cwd from session file header on resume instead of using bridge context cwd\n- Fix list_sessions returning partial session that overwrote sessionPath in UI state\n- Highlight the currently active session in the dropdown selector\n- Clear chat history when creating a new session via the dropdown\n- Add session_history event with empty messages for new_session\n- Add 4 tests for resume_session cwd behavior",
"is_bot": false,
"headline": "fix: resume_session uses session cwd, highlight active session, clear…",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-13T13:28:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cbee86ef2704fb5558f2c3eb396b38a79fb3501e",
"body": "The Pi SDK's createAgentSession ignores the sessionPath option — it only\naccepts a pre-built sessionManager. When resuming, create a\nSessionManager.open(sessionPath) and pass it so the model loads the full\nconversation history.\n\nAlso removed the async IIFE in resume_session that broadcast a second\nsession_state after the WebSocket already sent one, causing an infinite\nfetchSessionsForCwd → list_sessions → session_state loop.",
"is_bot": false,
"headline": "fix: resume_session loads conversation history into SDK context",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-13T12:40:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c7d844b16ea325b49b17b11871050db0efa9b6d8",
"body": "- Add list_sessions command to protocol with SessionHistoryMessage type\n- Implement bridge handlers for list_sessions and enhanced resume_session\n- Add session dropdown UI next to cwd label with auto-fetch on cwd change\n- Support rich message rendering: tool calls, bash output, compaction, thinking \n[…]\ngistry\n- Extract cwd from session file when resuming for correct directory context\n- Add error pill display for session loading errors\n- Add comprehensive tests for protocol, bridge, client, and state",
"is_bot": false,
"headline": "feat: add session resume with rich conversation history",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-13T11:42:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ac8504fbeb0b1f84af5e19d4be94472b6df28417",
"body": null,
"is_bot": false,
"headline": "docs: save auto-start-session plan to plans/ dir",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-12T22:55:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ac568b2a5c4f004dd3a3f578341c33279749adb",
"body": "The Browse button now immediately sends new_session to the bridge\nafter the user picks a directory, removing the extra \"New session\"\nclick. Shows an error notification if the bridge is offline.\n\n- sidepanel.js: auto-send new_session after directory picker resolves\n- sidepanel.html: remove the \"New session\" button\n- tests: add coverage for new_session command and cwd in session_state",
"is_bot": false,
"headline": "feat: auto-start new session when browsing a directory",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-12T22:51:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d4534d4587720a267d5f64f5bbda11897bba616",
"body": "The extension showed 'not set' for cwd even when the bridge was running\nwith a valid working directory. Three fixes:\n\n1. Server: send session_state to new WebSocket clients on connect\n2. Client: fetch session state from HTTP /status endpoint on connect\n3. UI: render() now reads state.session.cwd and updates the display",
"is_bot": false,
"headline": "fix: populate cwd in Chrome extension from bridge session state",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-12T22:33:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2001c1c69455a5aeda5b94d5ff7223babd83efe1",
"body": "- Integrated attached tabs bar into the main header\n- Header now shows title, bridge status, and debugger tabs together\n- Removed fixed positioning, tabs flow naturally in header\n- Cleaned up duplicate CSS rules",
"is_bot": false,
"headline": "refactor: move debugger tabs into header bar",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-12T21:51:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e4aed7f71c9b6f3ec5122d795ee0f0c7ef235c31",
"body": "- network.startCapture now sends Network.enable to all attached tabs\n- network.stopCapture now sends Network.disable to all attached tabs\n- console.getLogs now sends Runtime.enable to target tab\n- tabs.getCurrent returns debuggerAttached boolean flag\n- Tool descriptions updated to clarify capture is auto-enabled on attach\n- Agent no longer needs to call startCapture before getNetworkRequests\n- Added 8 new tests for CDP command dispatch and debuggerAttached flag",
"is_bot": false,
"headline": "fix: network/console capture starts immediately on debugger attach",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-12T21:41:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a757eaa2e22a894fb8b90bd158377e753fd7fc07",
"body": "…ls_conflict events\n\nThe sidepanel had its own chrome.tabs.onActivated listener that fired\nbefore the tool executor's auto-attach could complete, causing false\ndevtools_conflict events on every tab switch.\n\nRemoved the sidepanel's onActivated listener and added onAttachFailed\ncallback to the tool executor so the sidepanel only shows the DevTools\nwarning when auto-attach actually fails on a newly activated tab.",
"is_bot": false,
"headline": "fix: remove duplicate tab activation listener causing spurious devtoo…",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-10T21:53:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b71d1bfeb5efb2cb65d4eafc13835ae082fb2d3",
"body": "debugger.sendCdpCommand, debugger.evaluateScript, and\nnetwork.getResponseBody now auto-attach to the target tab if the\ndebugger is not already attached. Previously, sending a CDP command\nto an unattached tab would cause the chrome.debugger.sendCommand call\nto fail in an unhandled way, leaving the bridge promise hanging\nindefinitely and blocking the Pi agent conversation.\n\nAlso removes duplicate network.getResponseBody case.",
"is_bot": false,
"headline": "fix: auto-attach debugger before CDP commands to prevent hangs",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-10T21:37:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a5d0feae32db8f6beeea3041b78e6ae3fcc151c",
"body": "…lict UI\n\n- Auto-start network capture on tool executor creation\n- Auto-attach debugger to active tab on startup\n- Auto-reattach debugger when DevTools closes (1s retry interval)\n- Auto-attach on tab activation\n- Fixed header bar showing all tabs with active debuggers (with X to detach)\n- DevTools c\n[…]\nxpose isAttached(), attachedTabIds, networkCapture, detachTab() on executor\n- Add devtoolsConflict and attachedTabs to sidepanel state\n- Update tests for new auto-attach, reattach, and detach behavior",
"is_bot": false,
"headline": "feat: auto-attach debugger, auto-start network capture, DevTools conf…",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-10T19:21:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3747d6b37a77ffbf46587075fefe385698090cd3",
"body": "- Add global box-sizing: border-box so padding never expands elements\n- Add max-width: 100% to .message and .message.assistant pre\n- Code blocks now scroll internally without pushing the panel wider\n- Text after code blocks wraps correctly at any panel width",
"is_bot": false,
"headline": "fix: constrain code blocks and messages to panel width",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-10T18:01:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f0ce855b05d6cd2490aa9f4f1af3724387411b46",
"body": "Add overflow-wrap and word-break rules across all message elements,\nheaders, code, tables, links, and notifications so text wraps properly\nin narrow panels instead of overflowing horizontally.",
"is_bot": false,
"headline": "fix: prevent text cutoff when side panel is narrowed",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-10T16:51:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5a09705984b0826c3ea133ddd68defac4538b133",
"body": "…ering\n\n- Fix 'content is not iterable' error: browser tool execute functions now\n return { content: [{ type: 'text', text: ... }], details: {...} } as\n required by the Pi SDK agent runtime, instead of raw executor results\n- Fix execute parameter signature: now accepts (_toolCallId, params) instea\n[…]\nssages using marked + DOMPurify\n- Style code blocks, tables, lists, headings, links, and blockquotes in CSS\n- Sanitize all rendered HTML to prevent XSS\n- Add tests for both fixes and markdown renderer",
"is_bot": false,
"headline": "fix: wrap browser tool results in Pi SDK format and add markdown rend…",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-10T16:46:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7dee9626730a86aa4897b1846a16ec2966381668",
"body": "- Fix async getAsEntry() handling in cwd-picker.js (newer Chrome returns Promise)\n- Add server-side CWD fallback: search home dir subdirs and parent of process.cwd()\n- Show warning + editable input in UI when only directory name is available\n- Add tests for async getAsEntry and expanded CWD search",
"is_bot": false,
"headline": "fix: resolve CWD when chrome.fileSystem.getDisplayPath fails",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-07T15:38:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "79fe9b27396b00e68f03dc8bca932d393deed5a9",
"body": "Root cause: createAgentSession returns { session: { ... } } but the bridge\nwas using the wrapper directly, so sdkSession.prompt was undefined.\n\nChanges:\n- Extract inner session from { session } wrapper in sdk-session.ts\n- Add input validation for non-object messages in bridge-client.js\n- Add try-cat\n[…]\nocket-server.ts\n- Handle 'error' events in sidepanel-state.js reducer\n- Add comprehensive logging throughout the message flow\n- Add tests for session extraction, error handling, and round-trip prompts",
"is_bot": false,
"headline": "fix: extract session from Pi SDK wrapper and add robust error handling",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-07T14:59:12Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3d0c43171389101bad2155bfe3816511db1a3c33",
"body": "The bridge was not creating an SDK session when started via createHttpServer,\nso prompts from the extension had nowhere to go.\n\nChanges:\n- createBridgeApp now creates SDK session automatically when no sdkHost is\n provided, using createDefaultPiSdkAdapter\n- SDK session events (assistant_message, tool_call, tool_result) are\n subscribed to and relayed to connected WebSocket clients\n- Add 4 integration tests for SDK session creation and prompt relay",
"is_bot": false,
"headline": "fix(bridge): create SDK session automatically for prompt forwarding",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-07T12:03:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3076b5b8fda65210712b6815f5d669da95629baf",
"body": "The bridge was not actually processing prompts from the extension — it only\nbroadcasted a prompt_received acknowledgement but never forwarded the message\nto Pi's SDK session.\n\nChanges:\n- Bridge now forwards prompt commands to sdkSession.prompt()\n- WebSocket connections are registered in browser clie\n[…]\nribed to and relayed back to connected clients\n- Extension ignores prompt_received echo to avoid duplicating user messages\n- Add 3 integration tests for prompt relay and 2 unit tests for state reducer",
"is_bot": false,
"headline": "fix(bridge): forward prompts to Pi and relay assistant messages",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-07T11:52:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f059eccfb2436cefe4ef43e79b40516eae0e628b",
"body": "The CWD picker was silently failing and always showing 'not set' because\ngetAsEntry() and chrome.fileSystem.getDisplayPath() are deprecated/unreliable.\n\n- Extract path resolution into cwd-picker.js with proper error handling\n- Support both callback-style and promise-style getDisplayPath APIs\n- Fall back to directory name when APIs are unavailable\n- Add 7 unit tests covering all edge cases",
"is_bot": false,
"headline": "fix(chrome-extension): show selected directory path in CWD picker",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-07T11:39:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "30800d12fde85b40dd447e65d94b18921a1f733d",
"body": "- Unref stderr stream after bridge is ready so it doesn't keep\n the event loop alive\n- Chrome opener uses setImmediate instead of waiting for exit\n event (xdg-open may not emit exit reliably)",
"is_bot": false,
"headline": "fix: prevent CLI from hanging after bridge start",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-06T18:43:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2665448f6ca238e2404216df8149c87eb541973d",
"body": "When Pi loads the extension from src/, import.meta.url resolves to\nsrc/bridge-process.js, making the relative path point to\nsrc/bridge/server.js which doesn't exist. Now checks both dist and\nsrc paths, always returning the compiled dist/bridge/server.js.",
"is_bot": false,
"headline": "fix: resolve bridge entry path for both src and dist contexts",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-06T18:26:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f2e5379b3c24aca3e208e9dc421f47f8e0e8bcc1",
"body": "- Bridge now responds to POST /stop by closing server and exiting\n- bridge-process stop() checks if running before calling stopFn\n- No-op if bridge is already stopped\n- Added tests for stop behavior",
"is_bot": false,
"headline": "feat: implement bridge stop via POST /stop endpoint",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-06T18:12:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "858287b5d6bab69d6a8484762ee23fde8e3ad9d1",
"body": "- Pipe bridge stderr instead of ignoring it\n- Include stderr output in timeout error message\n- Helps diagnose why bridge fails to start",
"is_bot": false,
"headline": "fix: capture bridge stderr for better error diagnostics",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-06T17:49:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "964a4f33e16f8d98e209a09b9391416f7f9a0384",
"body": "After spawning the bridge process, poll /status until it responds\nbefore returning from start(). This prevents the browser from\nopening a 'site cannot be reached' page due to the bridge not\nyet listening.\n\n- Added waitForBridgeReady() with configurable timeout/poll interval\n- Defaults: 10s timeout, 200ms poll interval\n- Throws if bridge never becomes ready within timeout\n- Added tests for polling and timeout behavior",
"is_bot": false,
"headline": "fix: wait for bridge to be ready before opening browser",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-06T17:34:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1ed1aa5152f451fbfb289ca047cba348ef7abb0e",
"body": "- Wrap child_process.spawn in a Promise to catch async ENOENT errors\n instead of crashing with uncaught exception\n- Try all candidates in order before giving up:\n google-chrome, google-chrome-stable, chromium, chromium-browser,\n vivaldi-stable, vivaldi, xdg-open\n- xdg-open fallback opens the system default browser (e.g. Vivaldi)\n- Clear error message when no browser is found\n- Add 5 new tests for fallback, ENOENT handling, and platform coverage",
"is_bot": false,
"headline": "fix: handle missing Chrome and support more browsers",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-06T17:23:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c4cd16a8f58b54139912beae850eeef7119f932c",
"body": null,
"is_bot": false,
"headline": "Remove pi.extensions from package.json (not needed for auto-discovery)",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-05T22:29:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3fb166e6404939a2cffefbc110f84b35e1d3a5d3",
"body": "Pi discovers extensions from ~/.pi/agent/extensions/*/index.ts (jiti loads\nTypeScript directly). The entry point was at src/index.ts but Pi expects\nindex.ts at the root of the extension directory.\n\nAlso remove pi.extensions from package.json — that field is for 'pi install'\npackages, not for auto-discovered extensions in the extensions directory.",
"is_bot": false,
"headline": "Add root index.ts for Pi auto-discovery",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-05T22:29:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a56b3344a3f6e911383ea66b9ec8e592a36876c4",
"body": "…nd browser tools\n\n- Add src/index.ts as the main extension entry point\n- Register /pi-web-ui command with start/stop/status/open subcommands\n- Register 20 browser tools (tabs, HTML, console, network, debugger, cookies/storage)\n- Add session_start/session_shutdown lifecycle hooks\n- Add /browser-tool\n[…]\nUiController\n- Update package.json with pi.extensions field for auto-discovery\n- Add @sinclair/typebox dependency for parameter schemas\n- Add tests for extension command handlers and tool registration",
"is_bot": false,
"headline": "Add Pi auto-discovery extension entry point with /pi-web-ui command a…",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-05T22:14:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "965275928b28c9d74c2980099b27550d7dbd9058",
"body": null,
"is_bot": false,
"headline": "Complete side panel UI requests and live browser tooling",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-05T21:47:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5edc69d01c89dc4a961e0e3082b807a2d8b2c758",
"body": null,
"is_bot": false,
"headline": "Wire SDK session lifecycle and confirmation policy",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-05T21:42:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a709cff444a8f5328fef630ac972e39f24079e68",
"body": null,
"is_bot": false,
"headline": "Move tests into submodule test directories",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-05T21:40:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "407b89b8bea89298b67dc32568bbb2f1b74f9ec1",
"body": null,
"is_bot": false,
"headline": "Wire SDK adapter and browser tool request path",
"author_name": "ISR4EL",
"author_login": "isr4el-silv4",
"committed_at": "2026-06-05T21:38:01Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 0,
"commits_last_year": 105,
"latest_release_at": null,
"latest_release_tag": null,
"releases_from_tags": false,
"days_since_last_push": 5,
"active_weeks_last_year": 7,
"days_since_latest_release": null,
"mean_days_between_releases": null
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 42,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "@isr4el-silv4/pi-web-ui",
"exists": true,
"license": "Apache-2.0",
"keywords": [
"pi-package",
"pi-extension",
"pi",
"pi-coding-agent",
"chrome",
"vivaldi",
"edge",
"brave",
"browser",
"chromium",
"ai",
"harness",
"browser-tools"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@isr4el-silv4/pi-web-ui",
"is_deprecated": false,
"latest_version": "1.0.15",
"repository_url": "https://github.com/isr4el-silv4/pi-web-ui",
"versions_count": 16,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 2574,
"first_published_at": "2026-06-17T21:40:18.963000Z",
"latest_published_at": "2026-07-19T19:05:28.541000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
}
]
},
"popularity": {
"forks": 1,
"stars": 12,
"watchers": 0,
"fork_history": {
"days": [
{
"date": "2026-07-16",
"count": 1
}
],
"complete": true,
"collected": 1,
"total_forks": 1
},
"star_history": null,
"open_issues_and_prs": 2
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 41602,
"source_files_sampled": 48,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 2,
"malicious_count": 0,
"assessed_package": "npm:@isr4el-silv4/pi-web-ui@1.0.15",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "@sinclair/typebox",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^0.34.49"
},
{
"name": "ws",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^8.21.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 1,
"open_issues": 2,
"closed_ratio": 0.333,
"closed_issues": 1,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "isr4el-silv4",
"commits": 102,
"avatar_url": "https://avatars.githubusercontent.com/u/51991395?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": false,
"has_tests": true,
"ci_workflows": [],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 0,
"reason": "0 out of 1 merged PRs checked by a CI test -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/26 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": null,
"reason": "no workflows found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 9,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": null,
"reason": "no dependencies found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": null,
"reason": "No tokens found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "f460063655e4d860150f7064cd05c60c2c3b57ae",
"ran_at": "2026-07-25T18:05:24Z",
"aggregate_score": 2.5,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": null,
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-19T18:55:51Z",
"ci_last_conclusion": null,
"oldest_open_issues": [
{
"number": 2,
"created_at": "2026-07-12T22:57:55Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 4,
"created_at": "2026-07-19T20:32:06Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/isr4el-silv4/pi-web-ui",
"host": "github.com",
"name": "pi-web-ui",
"owner": "isr4el-silv4"
},
"metrics": {
"overall": {
"key": "overall",
"band": "at_risk",
"name": "Overall health",
"note": "The weighted overall 38 is calibrated to 33 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 38,
"calibrated": 33,
"calibration": "2026-08-02"
}
}
],
"value": 33,
"inputs": {
"security": 40,
"vitality": 36,
"community": 36,
"governance": 46,
"calibration": "2026-08-02",
"engineering": 30,
"ai_readiness": 46,
"weighted_overall_raw": 38
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "weak",
"name": "Vitality",
"value": 36,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 59,
"inputs": {
"commits_last_year": 105,
"human_commit_share": 1,
"days_since_last_push": 5,
"active_weeks_last_year": 7
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 5 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 5
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "7/52 weeks with commits",
"points": 4.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 7
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "105 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 105
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "critical",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"releases_count": 0
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "no releases published",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases_published",
"params": {}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "no releases",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases",
"params": {}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "no releases",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases",
"params": {}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "weak",
"name": "Community & Adoption",
"value": 36,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 17,
"inputs": {
"forks": 1,
"stars": 12,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "12 stars",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 12
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "1 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 1
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "weak",
"name": "Community health",
"note": null,
"notes": [],
"value": 44,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "license file present, not a recognized license",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "license_custom",
"params": {}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 57,
"inputs": {
"packages": [
"@isr4el-silv4/pi-web-ui"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 2574
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "2,574 downloads/month across npm",
"points": 45.5,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 2574,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "weak",
"name": "Sustainability & Governance",
"value": 46,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 10,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 51,
"inputs": {
"merged_prs": 1,
"open_issues": 2,
"closed_issues": 1,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 0.333,
"closed_unmerged_prs": 0,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "33% of issues closed",
"points": 14,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 33
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "1/1 decided PRs merged",
"points": 30,
"status": "met",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 1,
"decided": 1
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/26 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "weak",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 41,
"inputs": {
"followers": 3,
"owner_type": "User",
"is_verified": null,
"owner_login": "isr4el-silv4",
"public_repos": 6,
"account_age_days": 2593
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "3 followers of isr4el-silv4",
"points": 4.3,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 3,
"login": "isr4el-silv4"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "6 public repos, account ~7 yr old",
"points": 18.2,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 6
}
},
{
"code": "account_age_years",
"params": {
"years": 7
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"@isr4el-silv4/pi-web-ui"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 5
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 5 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 5
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "16 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 16
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "at_risk",
"name": "Engineering Quality",
"value": 30,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "at_risk",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 24,
"inputs": {
"has_ci": false,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "0 out of 1 merged PRs checked by a CI test -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "weak",
"name": "Documentation",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "weak",
"name": "Security",
"value": 40,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Dangerous-Workflow, Packaging, Pinned-Dependencies, Signed-Releases, Token-Permissions. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"dangerous_workflow",
"packaging",
"pinned_dependencies",
"signed_releases",
"token_permissions"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 25,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 13,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 5,
"scorecard_aggregate": 2.5
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "0 out of 1 merged PRs checked by a CI test -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/26 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no workflows found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "No tokens found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "exceptional",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:@isr4el-silv4/pi-web-ui@1.0.15 runtime dependency closure — what installing the published package pulls in — 2 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "npm:@isr4el-silv4/pi-web-ui@1.0.15",
"assessed": 2
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 2,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 2,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "weak",
"name": "AI Readiness",
"value": 46,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 32,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.6,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "60 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 32,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 60,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "weak",
"name": "Verify loop (build / test / typecheck)",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_pinned_dependencies"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 37,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
"tsconfig.json"
],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "exceptional",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 41602,
"source_files_sampled": 48,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/48 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 48,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"metrics_version": "2.1.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-25T18:05:30.939469Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/i/isr4el-silv4/pi-web-ui.svg",
"full_name": "isr4el-silv4/pi-web-ui",
"license_state": "custom",
"license_spdx": null
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.1.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — npm.