jayzeng/pi-memory holds a health index of 66 out of 100, placing it in the Moderate band. It scores highest on Engineering Quality (80/100) and lowest on Security (45/100). It was last updated 1 day ago. A single contributor accounts for most of its recent work.
66
overall / 100
Moderate
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
66
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
Manageable file sizes — 2/6 source files over 60KB
Inputs used
primary_language
TypeScript
largest_source_bytes
74,759
source_files_sampled
6
oversized_source_files
2
Key facts
92GitHub stars
4contributors
74commits, last 12 months
1days since last push
2releases
1bus factor
0open issues
npmpackage ecosystems
Data collection warnings
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
Star and fork history 0 ★ / 16 ⇿
0Stars
16Forks
2Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 0Patch 2
OpenSSF Scorecard 4.5 / 10
4.5aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-26 04:26 UTC
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"llm-memory",
"llm-tools",
"pi",
"pi-extension",
"qmd",
"scratchpad",
"semantic-search"
],
"is_fork": false,
"size_kb": 450,
"has_wiki": true,
"homepage": "https://www.npmjs.com/package/pi-memory",
"languages": {
"Shell": 584,
"JavaScript": 1668,
"TypeScript": 192090
},
"pushed_at": "2026-07-24T05:59:49Z",
"created_at": "2026-02-15T17:57:29Z",
"owner_type": "User",
"updated_at": "2026-07-25T13:31:20Z",
"description": "Persistent memory extension for pi with daily logs, scratchpad, and optional qmd‑powered semantic search.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript"
]
},
"owner": {
"blog": "https://www.jayzeng.com/",
"name": "Jay Zeng",
"type": "User",
"login": "jayzeng",
"company": null,
"location": "Seattle",
"followers": 95,
"avatar_url": "https://avatars.githubusercontent.com/u/141891?v=4",
"created_at": "2009-10-19T22:59:33Z",
"is_verified": null,
"public_repos": 108,
"account_age_days": 6123
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.3.6",
"kind": "patch",
"published_at": "2026-03-23T05:21:35Z"
},
{
"tag": "v0.3.5",
"kind": "patch",
"published_at": "2026-03-23T05:20:21Z"
}
],
"recent_commits": [
{
"oid": "4cff0a445292cf43555d591b001bdb28d6a613a0",
"body": "Signed-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "* update readme.md",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-07-20T04:51:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "71c14f3a3ae7cc59b710e008b6d2e2b3df750cf6",
"body": "Signed-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "* include some stat links",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-07-20T04:48:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9229496cf441140f39ef16c9a26a8714c4a9c88b",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' of https://github.com/jayzeng/pi-memory",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-07-20T04:06:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "562ac1dec3f2a1ebf939c2267866108250a15e7f",
"body": "fix: harden memory deletion boundaries",
"is_bot": false,
"headline": "Merge pull request #21 from jayzeng/fix/memory-forget-safety",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-07-20T04:05:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d08321e9b2c30c65ccde6851c6472f895870db4f",
"body": "Signed-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "CRLF handling and added recovery call",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-07-20T03:59:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad15867a1ef318c2587bff041f2504a7ef7f6222",
"body": null,
"is_bot": false,
"headline": "fix: harden memory deletion boundaries",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-07-20T03:45:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "98049cc9fc595596ce00893ebade543816701fc3",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' of https://github.com/jayzeng/pi-memory",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-07-20T03:43:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "45d25a143534c328474399bdb8822a7e5c46089f",
"body": "…servation\n\nfix: local-time daily logs, line-preserving scratchpad, exit-summary hygiene; feat: memory_forget",
"is_bot": false,
"headline": "Merge pull request #20 from msagen2241/fix/local-dates-scratchpad-pre…",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-07-20T03:43:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5183653f9d4b6f352856e560832ae588beb738cc",
"body": "Stale facts are the memory failure mode retrieval can't fix: a\ncorrected value keeps resurfacing from the old entry and the model\nrepeats it with confidence. Until now the only pruning mechanism was\noverwriting all of MEMORY.md.\n\nmemory_forget removes every entry/paragraph containing a\ncase-insensit\n[…]\ne injected context on the\nnext turn, and schedules a qmd update so they leave search too.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\n\nSigned-off-by: Matt Sagen <matthew.k.sagen@gmail.com>",
"is_bot": false,
"headline": "feat: memory_forget tool — deletion as a first-class operation",
"author_name": "Matt Sagen",
"author_login": "kaedimicus",
"committed_at": "2026-07-08T19:53:04Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ce490476869586243ec2678e91f5935baaef9146",
"body": "Unattended writes are where agent memory rots: an LLM summary of a\nsession containing a single `ls` still earns a permanent daily-log\nblock, which context injection and search then resurface forever.\nGate exit summaries on session substance (>= 4 messages); shorter\nsessions write nothing and skip the LLM call entirely.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\n\nSigned-off-by: Matt Sagen <matthew.k.sagen@gmail.com>",
"is_bot": false,
"headline": "fix: don't auto-summarize trivial sessions into the daily log",
"author_name": "Matt Sagen",
"author_login": "kaedimicus",
"committed_at": "2026-07-08T19:42:15Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "c40a2875170e91e928852f20d151207d701ef251",
"body": "…it summaries\n\nFour bug fixes and two hardenings, all observed in real use:\n\n- Daily logs were keyed to the UTC date (toISOString), so for users west\n of UTC every evening write landed in *tomorrow's* file and the injected\n \"today's log\" section looked at the wrong file. todayStr/yesterdayStr/\n n\n[…]\n test now observes the\nsummary attempt via a getApiKey spy). 143 pass, biome + tsc clean.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\n\nSigned-off-by: Matt Sagen <matthew.k.sagen@gmail.com>",
"is_bot": false,
"headline": "fix: local-time daily logs, line-preserving scratchpad, skip empty ex…",
"author_name": "Matt Sagen",
"author_login": "kaedimicus",
"committed_at": "2026-07-08T19:18:31Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "1befdda1ba55174c8a5b0ae8cd49b32fb0ba8c24",
"body": "Signed-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "0.3.14",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-06-10T21:37:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bcd09f7ae4ad34762956ba7cc8bffb93dc8261e3",
"body": "Signed-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "0.3.13",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-06-10T21:35:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "301658126531e91881ea25c0fd7a49ed6071a1be",
"body": "Make this extension a joy to use",
"is_bot": false,
"headline": "Merge pull request #18 from jayzeng/dx/joy-to-use",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-06-10T21:35:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a4b135fb7acd7db9dd20176ad81cbafff740ad12",
"body": "ensureQmdEmbed() previously dropped requests that arrived while an\nembed was in flight. If a write's qmd update finished after the\nin-flight embed had already enumerated its work, that write's chunks\ncould go unembedded until the next session start.\n\nSigned-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "fix: queue background embed if one is already running",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-06-10T21:29:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b65ca43280f5f881c9e43cef377c2138f82a6644",
"body": "Signed-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "* ensure qmd is invoked",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-06-10T21:22:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "896efbe100311747e2f3351533531bd02d4fec74",
"body": "- probeEmbeddings: clear the 4s probe timeout so short-lived pi -p runs\n exit promptly; document that \"ready\" means no embeddings warning, not\n a populated index\n- publish workflow: require a v* tag ref unconditionally, so manual\n workflow_dispatch runs also get the tag-matches-version check\n- ch\n[…]\npeer-dependency floor bump to >=0.52.0 and note\n the next release should be a minor\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\n\nSigned-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "fix: close review gaps — timer leak, publish guard, changelog omission",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-06-10T06:32:50Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "48ebcb6f61dd85afbad75f3bf73597b706240313",
"body": "Restructure the README so a reader sees what cross-session memory feels\nlike before install plumbing: a two-session transcript and a raw-markdown\npeek. Offer the lower-friction `npm install -g @tobilu/qmd` path alongside\nBun (and update the in-extension install hint to match). Add a\nsymptom->fix Tro\n[…]\nnew memory_status\ntool, and refresh test commands/levels after the unit.ts removal.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\nSigned-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "docs: lead with value, add quickstart + troubleshooting",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-06-07T21:13:56Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "0ce51cae1e21519c56279bbee2d8b637e4b6d2e0",
"body": "Surfaces what was previously internal-only: memory dir, file inventory,\nqmd availability, whether the pi-memory collection exists, whether\nembeddings are ready (bounded probe), and the active env configuration —\nso users can diagnose search problems in one tool call instead of\nreasoning about qmd st\n[…]\nthe AGENTS.md lint reference (Biome, not ESLint) and document\nthe new test scripts.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\nSigned-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "feat: add memory_status doctor tool",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-06-07T21:12:18Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "8a596d7a8f57e3a336681ba8083e5bf4371d0b99",
"body": "package.json was 0.3.12 but the README changelog jumped Unreleased ->\n0.3.6 -> 0.2.0, with six shipped releases missing and an \"Unreleased\"\nblock describing already-released work. Backfill an accurate, dated\nCHANGELOG.md from git history, ship it in the npm tarball, and replace\nthe README's manual `npm publish --access public` instructions with the\nactual tag-driven flow.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\nSigned-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "docs: move changelog to CHANGELOG.md and fix release instructions",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-06-07T21:10:18Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "65a4deb34ed973f098677c1635874ceceb7aab3b",
"body": "The publish workflow ran `npm ci && npm publish` with no verification, so\na broken build or a tag that disagrees with package.json could ship. Add\nlint + build + unit tests before publish, and assert the pushed v* tag\nmatches package.json version. Point the CI unit job at `npm test` so\nlocal, CI, and pre-commit all run the same command.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\nSigned-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "ci: gate npm publish behind lint/build/tests and a tag-version check",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-06-07T19:02:36Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1ff43921b7cc52248bc47583fce33bfe77b57af6",
"body": "npm test ran the e2e suite, which needs `pi` on PATH and an API key — so\nthe pre-commit hook (npm test + lint) failed for any contributor without\na configured key, and \"the test command\" meant different things in CI vs\nlocally.\n\n- npm test now runs the canonical bun unit suite (no key, ~0.5s)\n- npm \n[…]\naise pi peerDependency floors from the\n meaningless >=0.0.1 to the tested >=0.52.0\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\nSigned-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "test: make npm test run units; split out e2e and eval",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-06-07T19:01:53Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "2c06b1354d281fac0f5038e16bb3b97d7f503e02",
"body": "Signed-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "0.3.12",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-05-22T15:11:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "072f5f21e37f38756d432e72f409e8597f93702d",
"body": "Signed-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "bump up dependencies",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-05-22T15:11:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6cc0667e169c22713473e392ca3e6eaccca1a813",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' of https://github.com/jayzeng/pi-memory",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-05-22T15:05:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c83f8c40e5982f584da8998f9bad2e398a01bcfc",
"body": "ci: add Windows job to verify .cmd and HOME fallback fixes",
"is_bot": false,
"headline": "Merge pull request #17 from jayzeng/ci/windows-job",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-05-22T15:05:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8b7099d8b7d9fe8a6391dbf2442573abb3599a22",
"body": "CI diagnostic revealed that npm install -g @tobilu/qmd produces all\nthree shims (qmd, qmd.cmd, qmd.ps1) but cmd-shim writes the literal\n`/bin/sh` from the package's shebang into both qmd.cmd and qmd.ps1, so\nboth shims fail: cmd.exe with \"system cannot find the path specified\"\nand PowerShell with \"'/\n[…]\ne wrapper now\nuses (and keep the diagnostic dump of npm prefix + Get-Command -All).\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>\n\nSigned-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "fix: bypass broken Windows qmd shims via direct node invocation",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-05-22T14:52:19Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "bd65bf97abe5ee4beb503e81d048447be34e967b",
"body": "npm install -g @tobilu/qmd on modern npm + Node 22 produces only qmd.ps1\n(no qmd.cmd), and cmd.exe's default PATHEXT does not include .PS1. The\nprevious wrapper used `shell: true`, which spawns cmd.exe and therefore\ncould not resolve the .ps1 shim. Replace the options wrapper with\nbuildQmdSpawn, whi\n[…]\ns-qmd-smoke\njob for diagnostics, and verify qmd via the same path the wrapper uses.\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>\n\nSigned-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "fix: route qmd through PowerShell on Windows",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-05-22T06:27:30Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a4f1232939cb4bec2a83d099f23eff9082b7438f",
"body": "Signed-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "ci: install qmd with npm on Windows",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-05-22T06:05:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab43471dc3b8436b23d232deda0aa7cc4b0ced48",
"body": "Signed-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "fix: support qmd smoke on Windows",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-05-22T06:00:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1bdad719cec94de3450990b9d85e8fc25dfa8dab",
"body": "actions/checkout on windows-latest converts LF to CRLF, which trips\nbiome's formatter check on every TS file. Pin all text files to LF so\nthe lint job behaves identically across OSes.\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>\n\nSigned-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "ci: enforce LF line endings via .gitattributes",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-05-22T05:49:41Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "b233aa3546d30e7af01413d08ad92ca02fc5de95",
"body": "Matrix-ize lint/build across ubuntu+windows, add a unit job that runs\nthe bun:test suite on both OSes (previously not in CI at all), and add\na focused windows-qmd-smoke job that:\n\n- demonstrates Node's stock execFile cannot launch qmd.cmd on Windows\n (continue-on-error, informational only)\n- assert\n[…]\ntory in the resolved path\n\nGives us a runnable signal for PR #11 before merging it.\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>\n\nSigned-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "ci: add Windows job to verify .cmd and HOME fallback fixes",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-05-22T05:46:33Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "123f582055f09fff0dd7f33ab64585ccf784849d",
"body": "Signed-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "0.3.10",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-05-22T05:37:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b477b1369916db7b33baa659fe5d7c90257c982f",
"body": "Fix/reload qmd cache local",
"is_bot": false,
"headline": "Merge pull request #16 from jayzeng/fix/reload-qmd-cache-local",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-05-22T05:36:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b3835dc2f0a8e4333bd09b13994071c6b15ba6c",
"body": "Cached qmd-not-available / collection-missing states for 5 minutes\ndefeated the lazy retry in memory_search when qmd was installed\nmid-session, and made setupQmdCollection re-run on the next search.\nSplit the TTL so positive results stay cached for 5 minutes while\nnegatives expire after 5 seconds, and seed the collection cache to\ntrue after a successful setupQmdCollection.\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>\n\nSigned-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "fix: short-TTL negative qmd cache and seed cache on setup",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-05-22T05:35:19Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "63e50cd6ca7f26b806247fd6bb80ece753001199",
"body": "Signed-off-by: aserper <aserper@users.noreply.github.com>",
"is_bot": false,
"headline": "fix: speed up lifecycle transitions in pi-memory",
"author_name": "aserper",
"author_login": "aserper",
"committed_at": "2026-05-22T05:30:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7c1ed852e75b0b629ef16b4eb5313724a56ed1fd",
"body": "fix: use 'qmd collection list' for qmd detection",
"is_bot": false,
"headline": "Merge pull request #15 from jayzeng/fix/detect-qmd-collection-list",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-05-22T05:26:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "da68d4395a35d58d673da773926b7b8925c6a677",
"body": "'qmd status' can trigger slow model/device probing (e.g. Vulkan fallback)\nthat exceeds the 5s timeout on some systems, causing detectQmd() to\nreturn false and the install banner to appear even when qmd is installed\nand healthy. Switch to the lighter 'qmd collection list' probe and raise\nthe timeout to 15s for headroom.\n\nFixes #10\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>\n\nSigned-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "fix: use 'qmd collection list' for qmd detection",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-05-22T05:24:47Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "cc7faff7cc14a2a6a52b8f1744d0be6dd90cf5d2",
"body": "feat: KV cache-stable memory snapshot",
"is_bot": false,
"headline": "Merge pull request #14 from jayzeng/feat/kv-cache-stable-memory-snapshot",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-05-22T05:22:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f126b19ad63cd5743378e4fef53164820ba275d2",
"body": "Snapshot the injected memory block at deliberate checkpoints\n(`session_start`, `session_before_compact`, `memory_write(long_term)`,\nday rollover) and emit byte-identical bytes for every turn in between.\nThis keeps the system-prompt prefix stable so local prefix caches\n(llama.cpp, vLLM, MLX) hit on e\n[…]\nfor long-term writes, day rollover, compaction refresh,\nand the `per-turn` opt-out.\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>\n\nSigned-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "feat: KV cache-stable memory snapshot",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-05-22T05:19:20Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "dc144f6a5583499e17cf561105864bf28583764c",
"body": "Signed-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "* fix tests",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-05-05T03:12:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2553d766361c6441361c28aa77f528b1297ddf53",
"body": "Signed-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "address broken unit tests",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-05-05T02:44:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "638363ba26f019299dd1ef6a34f43b2f31aa4e9e",
"body": null,
"is_bot": false,
"headline": "Merge branch 'main' of https://github.com/jayzeng/pi-memory",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-05-05T02:17:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ac4a36da9e564a61af1e0416ab222888b52277fa",
"body": "fix: skip exit summary on /reload to prevent blocking",
"is_bot": false,
"headline": "Merge pull request #8 from tysoncrosbie/fix/skip-exit-summary-on-reload",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-05-05T02:16:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a696047d97e8a417b8cc88f9710e080924b7323c",
"body": "/reload emits session_shutdown with reason \"reload\" before rebuilding\nthe runtime. The session_shutdown handler was ignoring event.reason and\ncalling generateExitSummary() unconditionally — a live LLM API call\nthat blocks /reload for several seconds whenever the session has messages.\n\nAn empty sessi\n[…]\n session continues after reload so no summary is needed.\n\nThe SessionShutdownEvent.reason field (\"quit\" | \"reload\" | \"new\" |\n\"resume\" | \"fork\") is already part of pi's public extension API.\n\nCloses #7",
"is_bot": false,
"headline": "fix: skip exit summary on /reload to prevent blocking",
"author_name": "Tyson Crosbie",
"author_login": null,
"committed_at": "2026-04-22T13:14:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "091ea6905325c7ae0d5d323f70714c6dc30ebdd8",
"body": "Signed-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "0.3.8",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-04-15T05:07:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8507d0d4cec4c64ff6135cd7d5e5e9c75449ead9",
"body": "[codex] fix exit summary shutdown handling",
"is_bot": false,
"headline": "Merge pull request #6 from jayzeng/codex-fix-exit-summary-shutdown",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-04-15T05:06:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "52812adf5f114e10198cfc27cbf689f1034f08e7",
"body": "Signed-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "fix: harden exit summary shutdown",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-04-14T06:52:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8dd2a26d13b8867386bbc81f7c12e96e6e741634",
"body": "…rsal\n\nfix: prevent path traversal in memory_read daily date",
"is_bot": false,
"headline": "Merge pull request #4 from jayzeng/fix/issue-3-memory-read-path-trave…",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-04-06T04:46:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c3e34d07680bdb91508f2764503f973f5dc2f032",
"body": "Signed-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "fix: validate daily date input in memory_read",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-04-06T04:42:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4729d11f1de136e709f3b57817375c0d7326f428",
"body": null,
"is_bot": false,
"headline": "docs: add 0.3.6 changelog entry",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-03-23T05:24:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d3caa42b1578b5dc5c514fc50f3d201cac0c179",
"body": null,
"is_bot": false,
"headline": "0.3.6",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-03-23T05:21:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "037b932ecada3ed8fb14ed60ad577057155f4301",
"body": null,
"is_bot": false,
"headline": "0.3.5",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-03-23T05:20:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9413fb9d4c1d90ecdae5765141a1c8023fa9941e",
"body": "feat: support PI_MEMORY_DIR env var for custom memory directory",
"is_bot": false,
"headline": "Merge pull request #2 from tg1482/feat/pi-memory-dir-env-var",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-03-23T05:14:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "18bc815a7fb2ba013b3b398bb9f608d9580d4985",
"body": "Allows overriding the default ~/.pi/agent/memory path by setting\nPI_MEMORY_DIR in the environment before the module loads.",
"is_bot": false,
"headline": "feat: support PI_MEMORY_DIR env var for custom memory directory",
"author_name": "Tanmay Gupta",
"author_login": "tg1482",
"committed_at": "2026-03-04T18:13:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38ce0b10c43332b83042d601201ca58ef34786a4",
"body": "Signed-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "* bump version",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-02-18T06:58:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "020f6e4d7a9e43f3c36682c70cab31ccb111f117",
"body": "Signed-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "fix: add session-end reason to ExitSummaryReason",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-02-18T06:57:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3a76100c3bbaf10e957c8e399aa4f9675cebeb1e",
"body": "Signed-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "fix: use /quit for exit summaries",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-02-18T06:52:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b9faeadc23d38f6212ceb622f0693fe7089fc8c5",
"body": "Signed-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "feat: add exit summary on shutdown",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-02-18T06:47:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ac76b90ef464b90afad1ce9ad7b6657170ccb18",
"body": "Signed-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "0.3.3",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-02-17T01:03:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7166bbd35af217e30fb6d025a4256ffc12e07e61",
"body": "Signed-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "fix: improve qmd search parsing and tests",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-02-17T01:02:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "24c970651b11a1b4779657dc0ac0dbe6a837faa1",
"body": "Signed-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "0.3.2",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-02-16T06:41:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dab8efd493fdd35345218936894e627a9e74a489",
"body": "Signed-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "* switch over to biome",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-02-16T06:40:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "280e36f4c342bc5a9b29a9c86ba5bcde36c8b0a0",
"body": "Signed-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "chore: rely on publishConfig in workflow",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-02-16T01:47:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4630ca0ca4d305eae931b13cbe8f773d68a756ad",
"body": "Signed-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "0.3.0",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-02-16T01:32:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "30b69116b7290bc227b523fdea731e76a6598bdf",
"body": "Signed-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "chore: override glob and rimraf",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-02-16T01:03:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b2c1457c1b6fae66ac40dbefc5ecf88c30de7c7",
"body": "Signed-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "0.2.2",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-02-16T00:33:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a4c89ce9bb94fc0dbcf85feeaf7474c6381aad67",
"body": "Signed-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "0.2.1",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-02-16T00:32:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a19775dde65898e07a97c948a9362f5ba2c1a69b",
"body": "Signed-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "* getting ready to publish to npm",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-02-16T00:31:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e85b831729859613a753885fb62fc02fdd652214",
"body": "Signed-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "chore: add npm publish workflow",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-02-16T00:25:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6bb85fffa08534221b31c39cbeca8faed2014697",
"body": "Signed-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "feat: add selective memory injection and tests",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-02-16T00:08:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d60a5519c639e8919d085f486fd49911bdc00bf2",
"body": "Signed-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "* added build steps and more test cases",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-02-15T18:24:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "975c2d6123a77f67ce976702d1c98b57675cacd2",
"body": "Signed-off-by: Jay Zeng <jayzeng@users.noreply.github.com>",
"is_bot": false,
"headline": "feat: add initial pi-memory extension and docs",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-02-15T18:11:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8ef97ceb51b63834c0a819f9b321219e8872129a",
"body": null,
"is_bot": false,
"headline": "Initial commit",
"author_name": "Jay Zeng",
"author_login": "jayzeng",
"committed_at": "2026-02-15T17:57:29Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 2,
"commits_last_year": 74,
"latest_release_at": "2026-03-23T05:21:35Z",
"latest_release_tag": "v0.3.6",
"releases_from_tags": true,
"days_since_last_push": 1,
"active_weeks_last_year": 12,
"days_since_latest_release": 124,
"mean_days_between_releases": 0
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 85,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "pi-memory",
"exists": true,
"license": "MIT",
"keywords": [
"pi",
"pi-coding-agent",
"pi-package",
"memory",
"search",
"qmd",
"scratchpad",
"daily-log"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/pi-memory",
"is_deprecated": false,
"latest_version": "0.4.0",
"repository_url": "https://github.com/jayzeng/pi-memory",
"versions_count": 14,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 10633,
"first_published_at": "2026-02-16T00:43:39.947000Z",
"latest_published_at": "2026-07-20T04:11:53.759000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 6
}
]
},
"popularity": {
"forks": 16,
"stars": 92,
"watchers": 0,
"fork_history": {
"days": [
{
"date": "2026-03-04",
"count": 1
},
{
"date": "2026-03-22",
"count": 1
},
{
"date": "2026-04-18",
"count": 1
},
{
"date": "2026-04-22",
"count": 1
},
{
"date": "2026-04-26",
"count": 1
},
{
"date": "2026-04-29",
"count": 1
},
{
"date": "2026-05-05",
"count": 1
},
{
"date": "2026-05-13",
"count": 2
},
{
"date": "2026-05-16",
"count": 1
},
{
"date": "2026-05-31",
"count": 1
},
{
"date": "2026-06-14",
"count": 1
},
{
"date": "2026-06-17",
"count": 1
},
{
"date": "2026-07-07",
"count": 1
},
{
"date": "2026-07-08",
"count": 1
},
{
"date": "2026-07-18",
"count": 1
}
],
"complete": true,
"collected": 16,
"total_forks": 16
},
"star_history": null,
"open_issues_and_prs": 1
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 74759,
"source_files_sampled": 6,
"oversized_source_files": 2,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md"
],
"agent_instruction_max_bytes": 3249
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 1,
"merged_prs": 11,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 6,
"closed_unmerged_prs": 4
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "jayzeng",
"commits": 68,
"avatar_url": "https://avatars.githubusercontent.com/u/141891?v=4"
},
{
"type": "User",
"login": "kaedimicus",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/96086086?v=4"
},
{
"type": "User",
"login": "tg1482",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/31661606?v=4"
},
{
"type": "User",
"login": "aserper",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/10963324?v=4"
}
],
"contributors_sampled": 4,
"top_contributor_share": 0.932
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"publish-npm.yml"
],
"has_docs_dir": false,
"linter_configs": [
"biome.json"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "4 out of 4 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 1/12 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 6,
"reason": "project has 2 contributing companies or organizations -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 5,
"reason": "dependency not pinned by hash detected -- score normalized to 5",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 10,
"reason": "GitHub workflow tokens follow principle of least privilege",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "54 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "4cff0a445292cf43555d591b001bdb28d6a613a0",
"ran_at": "2026-07-26T04:26:59Z",
"aggregate_score": 4.5,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-20T04:54:11Z",
"oldest_open_prs": [
{
"number": 22,
"created_at": "2026-07-24T05:59:59Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-20T04:05:51Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/jayzeng/pi-memory",
"host": "github.com",
"name": "pi-memory",
"owner": "jayzeng"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 66,
"inputs": {
"security": 45,
"vitality": 74,
"community": 66,
"governance": 61,
"engineering": 80
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 74,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 71,
"inputs": {
"commits_last_year": 74,
"human_commit_share": 1,
"days_since_last_push": 1,
"active_weeks_last_year": 12
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 1 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 1
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "12/52 weeks with commits",
"points": 8.3,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 12
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "74 commits in the last year",
"points": 16.8,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 74
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "good",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 78,
"inputs": {
"releases_count": 2,
"latest_release_tag": "v0.3.6",
"releases_from_tags": true,
"days_since_latest_release": 124,
"mean_days_between_releases": 0
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "2 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 2
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 124 days ago",
"points": 27,
"status": "partial",
"details": [
{
"code": "release_recency",
"params": {
"days": 124
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~0 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 0
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 66,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 42,
"inputs": {
"forks": 16,
"stars": 92,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "92 stars",
"points": 31.8,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 92
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "16 forks",
"points": 9.8,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 16
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "excellent",
"name": "Community health",
"note": null,
"notes": [],
"value": 92,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 67,
"inputs": {
"packages": [
"pi-memory"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 10633
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "10,633 downloads/month across npm",
"points": 53.7,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 10633,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 61,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 22,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 4,
"top_contributor_share": 0.932
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 93% of commits",
"points": 1.5,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 93
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "4 contributors",
"points": 5.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 4
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 6,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"merged_prs": 11,
"open_issues": 0,
"closed_issues": 6,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 4
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 46.8,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "11/15 decided PRs merged",
"points": 28,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 11,
"decided": 15
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 1/12 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 62,
"inputs": {
"followers": 95,
"owner_type": "User",
"is_verified": null,
"owner_login": "jayzeng",
"public_repos": 108,
"account_age_days": 6123
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "95 followers of jayzeng",
"points": 14.3,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 95,
"login": "jayzeng"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "108 public repos, account ~16 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 108
}
},
{
"code": "account_age_years",
"params": {
"years": 16
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"pi-memory"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 6
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 6 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 6
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "14 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 14
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 80,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "2 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 2
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "biome.json",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "biome.json"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "4 out of 4 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"topics": [
"llm-memory",
"llm-tools",
"pi",
"pi-extension",
"qmd",
"scratchpad",
"semantic-search"
],
"has_wiki": true,
"homepage": "https://www.npmjs.com/package/pi-memory",
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://www.npmjs.com/package/pi-memory",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "7 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 7
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 45,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 45,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 4.5
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "4 out of 4 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 1/12 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 4 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 5",
"points": 2.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "GitHub workflow tokens follow principle of least privilege",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "54 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 4
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 74,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "good",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 78,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.622,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md"
],
"agent_instruction_max_bytes": 3249
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "AGENTS.md, CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "AGENTS.md, CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "46 of 74 human commits state their intent (structured subject or explanatory body)",
"points": 33.2,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 46,
"sampled": 74
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 69,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"package-lock.json"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"tsconfig.json"
],
"agent_commit_share": 0.216,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "biome.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "biome.json"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "16 of the last 74 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 16,
"sampled": 74
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 5",
"points": 5,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "good",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 74759,
"source_files_sampled": 6,
"oversized_source_files": 2
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "2/6 source files over 60KB",
"points": 36.7,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 6,
"oversized": 2
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-26T04:27:13.065553Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/j/jayzeng/pi-memory.svg",
"full_name": "jayzeng/pi-memory",
"license_state": "standard",
"license_spdx": "MIT"
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with jayzeng/pi-memory. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
