Public record
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-29 22:29 UTC

jixoai / opentray

TypeScript · RustNo license detected★ 0 stars⑂ 0 forkssince May 2026View on GitHub ↗

jixoai/opentray holds a health index of 41 out of 100, placing it in the At risk band. It scores highest on AI Readiness (69/100) and lowest on Community & Adoption (26/100). It was last updated 8 days ago. A single contributor accounts for most of its recent work.

41
overall / 100
At risk

Software health index

Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.

41
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
VitalityCommunity &AdoptionSustainability &GovernanceEngineeringQualitySecurityAI Readiness

Score profile

Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.

Ownership

JIXO-AIOrganization
0 followers13 public repossince Oct 2025

This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.

Package ecosystems

RegistryPackageVersionDownloads / moVersionsLast publish
npmopentray0.18.03,198378 days ago
npm@opentray/ext-badge0.18.02,088198 days ago
npm@opentray/darwin-x640.18.02,330338 days ago
npm@opentray/ext-island0.18.02,303188 days ago
npm@opentray/darwin-arm640.18.02,470338 days ago

Metrics by category

Vitality

Is the project alive — is code being written and are releases shipping?

32At risk · 22% of overall
How it's scored
28.8/36Push recency — last push 8 days ago
4.8/36Commit cadence — 7/52 weeks with commits
18/18Commit volume — 459 commits in the last year
0/10OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully
Inputs used
commits_last_year459
human_commit_share0.93
days_since_last_push8
active_weeks_last_year7
How it's scored
0/27Ships releases — no releases published
0/36Release recency — no releases
0/27Release cadence — no releases
0/10OpenSSF Scorecard: Signed-Releases — no data
Inputs used
releases_count0
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.

Community & Adoption

Does the project have users, downloads, attention, and a welcoming setup for contributors?

26Critical · 18% of overall
How it's scored
0/60Stars — 0 stars
0/25Forks — 0 forks
0/15Watchers — 0 watchers
Inputs used
forks0
stars0
watchers0
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
How it's scored
22.5/22.5README
0/22.5License — no license file detected
0/18CONTRIBUTING guide
0/13.5Code of conduct
0/7.2Issue template
0/6.3PR template
Inputs used
has_readmeyes
has_licenseno
has_contributingno
has_issue_templateno
has_code_of_conductno
has_pull_request_templateno
How it's scored
54.6/80Monthly downloads — 12,389 downloads/month across npm
0/20Registry dependents — not reported by this ecosystem
Inputs used
packagesopentray, @opentray/ext-badge, @opentray/darwin-x64, @opentray/ext-island, @opentray/darwin-arm64
dependents
ecosystemsnpm
total_downloads
monthly_downloads12,389
Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.

Sustainability & Governance

Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?

55Moderate · 24% of overall
How it's scored
9/54Bus factor — 1 contributor(s) cover half of all commits
0/22.5Commit distribution — top contributor authored 100% of commits
1.4/13.5Contributor breadth — 1 contributors
3/10OpenSSF Scorecard: Contributors — project has 1 contributing companies or organizations -- score normalized to 3
Inputs used
bus_factor1
contributors_sampled1
top_contributor_share1
How it's scored
46.8/46.8Issue resolution — 100% of issues closed
38.2/38.3PR acceptance — 2/2 decided PRs merged
0/15OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0
Inputs used
merged_prs2
open_issues0
closed_issues3
issue_closed_ratio1
closed_unmerged_prs0
How it's scored
30/30Ownership backing — organization-owned
0/20Verified domain
0/25Owner reach — 0 followers of jixoai
9.9/25Track record — 13 public repos, account ~0 yr old
Inputs used
followers0
owner_typeOrganization
is_verified
owner_loginjixoai
public_repos13
account_age_days291
How it's scored
25/25Published & resolvable — 5 package(s) on npm
35/35Publish recency — latest publish 8 days ago
20/20Version history — 37 published versions
20/20Not deprecated — active, not deprecated or yanked
Inputs used
packagesopentray, @opentray/ext-badge, @opentray/darwin-x64, @opentray/ext-island, @opentray/darwin-arm64
ecosystemsnpm
any_deprecatedno
min_days_since_publish8

Engineering Quality

Are baseline engineering and documentation practices in place?

52Moderate · 20% of overall
How it's scored
24/24CI workflows — 3 workflow(s)
24/24Tests present
0/16Linter config
0/9.6Pre-commit hooks
0/6.4.editorconfig
0/20OpenSSF Scorecard: CI-Tests — no data
Inputs used
has_ciyes
has_testsyes
has_editorconfigno
has_linter_configno
has_precommit_configno
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.

Documentation

40At risk
How it's scored
30/30README
0/25Documentation directory
0/15Documentation / homepage site
0/10Repository description
0/10Topics
10/10Wiki
Inputs used
topics
has_wikiyes
homepage
has_readmeyes
has_docs_dirno
has_descriptionno

Security

Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?

36At risk · 16% of overall
How it's scored
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — branch protection not enabled on development/release branches
0/2.5CI-Tests — no data
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 0/30 approved changesets -- score normalized to 0
0.8/2.5Contributors — project has 1 contributing companies or organizations -- score normalized to 3
10/10Dangerous-Workflow — no dangerous workflow patterns detected
0/7.5Dependency-Update-Tool — no update tool detected
0/5Fuzzing — project is not fuzzed
0/2.5License — license file not detected
0/7.5Maintained — project was created within the last 90 days. Please review its contents carefully
0/5Packaging — no data
0/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
0/5SAST — no SAST tool detected
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — no data
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
0/7.5Vulnerabilities — 24 existing vulnerabilities detected
Inputs used
sourceopenssf_scorecard
checks_evaluated15
scorecard_versionv5.5.0
checks_inconclusive3
scorecard_aggregate2
Excluded from scoring (no data or not applicable): ci_tests, packaging, signed_releases. Remaining weights renormalized.
How it's scored
35/35Direct dependencies free of known advisories — no direct dependency carries a known advisory
25/25Indirect dependencies free of known advisories — no indirect dependency carries a known advisory
0/40No advisories left outstanding — no advisory carries a publication date
Inputs used
sourceosv
advisories0
affected_packages0
assessed_packages13
unassessed_packages0
affected_by_severitynone
direct_affected_packages0
Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:opentray@0.18.0 runtime dependency closure — what installing the published package pulls in — 13 packages. Reachability is not analyzed.

AI Readiness

How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.

69Moderate · 0% of overall
How it's scored
45/45Agent instructions — AGENTS.md
0/15Machine-readable docs (llms.txt)
40/40Legible commit history — 93 of 93 human commits state their intent (structured subject or explanatory body)
Inputs used
has_llms_txtno
legible_history_share1
agent_instruction_filesAGENTS.md
agent_instruction_max_bytes42,205
How it's scored
12.6/18One-command bootstrap — Cargo.toml, crates/opentray-backend-ksni/Cargo.toml, crates/opentray-backend-tray-icon/Cargo.toml (toolchain convention, no task runner)
22/22Automated tests
0/11Lint / format config
11/11Static type checking — packages/cli/examples/app/tsconfig.json, packages/cli/tsconfig.json, packages/esbuild-plugin/tsconfig.json, packages/ext-badge/tsconfig.json, packages/ext-webview/tsconfig.json, packages/packaging/tsconfig.json, packages/spec/tsconfig.json, packages/tsdown-plugin/tsconfig.json, packages/vite-plugin/tsconfig.json, packages/webpack-plugin/tsconfig.json
10/10Reproducible environment — lockfile
0/10Demonstrated agent practice — no agent-authored commits among the last 100
0/8Automated maintenance — no automated dependency updates observed
0/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
Inputs used
has_nixno
has_testsyes
lockfilesCargo.lock, pnpm-lock.yaml
has_dockerfileno
typed_languageyes
bootstrap_files
has_devcontainerno
has_linter_configno
typecheck_configspackages/cli/examples/app/tsconfig.json, packages/cli/tsconfig.json, packages/esbuild-plugin/tsconfig.json, packages/ext-badge/tsconfig.json, packages/ext-webview/tsconfig.json, packages/packaging/tsconfig.json, packages/spec/tsconfig.json, packages/tsdown-plugin/tsconfig.json, packages/vite-plugin/tsconfig.json, packages/webpack-plugin/tsconfig.json
agent_commit_share0
toolchain_manifestsCargo.toml, crates/opentray-backend-ksni/Cargo.toml, crates/opentray-backend-tray-icon/Cargo.toml, crates/opentray-bin/Cargo.toml, crates/opentray-core/Cargo.toml, crates/opentray-ext-badge/Cargo.toml, crates/opentray-ext-webview/Cargo.toml, crates/opentray-extension-inspector/Cargo.toml, crates/opentray-runtime-node/Cargo.toml, crates/opentray-spec/Cargo.toml, vendor/tray-icon/Cargo.toml
dependency_bot_commit_share0
How it's scored
45/45Type-checkable code — TypeScript (statically typed)
54.3/55Manageable file sizes — 3/232 source files over 60KB
Inputs used
primary_languageTypeScript
largest_source_bytes241,567
source_files_sampled232
oversized_source_files3
How it's scored
0/40API schema (OpenAPI/GraphQL/proto)
0/20MCP server
40/40Runnable examples — examples
Inputs used
example_dirsexamples
has_mcp_signalno
api_schema_files

Key facts

0GitHub stars
1contributors
459commits, last 12 months
8days since last push
0releases
1bus factor
0open issues
crates.io, npmpackage ecosystems

Data collection warnings

  • Could not fetch crates package 'opentray-bin' from its registry
  • Could not fetch crates package 'opentray-core' from its registry
  • Could not fetch crates package 'opentray-spec' from its registry
  • GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

More detail

OpenSSF Scorecard 2.0 / 10
2.0aggregate

Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-29 22:29 UTC

10Binary-Artifactsno binaries found in the repo
0Branch-Protectionbranch protection not enabled on development/release branches
n/aCI-Testsno pull request found
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 0/30 approved changesets -- score normalized to 0
3Contributorsproject has 1 contributing companies or organizations -- score normalized to 3
10Dangerous-Workflowno dangerous workflow patterns detected
0Dependency-Update-Toolno update tool detected
0Fuzzingproject is not fuzzed
0Licenselicense file not detected
0Maintainedproject was created within the last 90 days. Please review its contents carefully
n/aPackagingpackaging workflow not detected
0Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 0
0SASTno SAST tool detected
0Security-Policysecurity policy file not detected
n/aSigned-Releasesno releases found
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
0Vulnerabilities24 existing vulnerabilities detected
Direct dependencies 36
RegistryPackageVersion constraintManifest
crates.ioksnicrates/opentray-backend-ksni/Cargo.toml
crates.ioopentray-corecrates/opentray-backend-ksni/Cargo.toml
crates.ioopentray-speccrates/opentray-backend-ksni/Cargo.toml
crates.ioopentray-corecrates/opentray-backend-tray-icon/Cargo.toml
crates.ioopentray-speccrates/opentray-backend-tray-icon/Cargo.toml
crates.iopng0.17.16crates/opentray-backend-tray-icon/Cargo.toml
crates.iolibloadingcrates/opentray-bin/Cargo.toml
crates.ioopentray-corecrates/opentray-bin/Cargo.toml
crates.ioopentray-speccrates/opentray-bin/Cargo.toml
crates.ioserdecrates/opentray-bin/Cargo.toml
crates.ioserde_jsoncrates/opentray-bin/Cargo.toml
crates.iosha2crates/opentray-bin/Cargo.toml
crates.ioopentray-speccrates/opentray-core/Cargo.toml
crates.ioserde_jsoncrates/opentray-core/Cargo.toml
crates.iothiserrorcrates/opentray-core/Cargo.toml
crates.ioopentray-speccrates/opentray-ext-badge/Cargo.toml
crates.ioserdecrates/opentray-ext-badge/Cargo.toml
crates.ioserde_jsoncrates/opentray-ext-badge/Cargo.toml
crates.ioopentray-speccrates/opentray-ext-webview/Cargo.toml
crates.ioserdecrates/opentray-ext-webview/Cargo.toml
crates.ioserde_jsoncrates/opentray-ext-webview/Cargo.toml
crates.iourl2.5.7crates/opentray-ext-webview/Cargo.toml
crates.iolibloadingcrates/opentray-extension-inspector/Cargo.toml
crates.ioopentray-speccrates/opentray-extension-inspector/Cargo.toml
crates.ioserde_jsoncrates/opentray-extension-inspector/Cargo.toml
crates.ionapi2crates/opentray-runtime-node/Cargo.toml
crates.ionapi-derive2crates/opentray-runtime-node/Cargo.toml
crates.ioopentray-corecrates/opentray-runtime-node/Cargo.toml
crates.ioopentray-speccrates/opentray-runtime-node/Cargo.toml
crates.ioserde_jsoncrates/opentray-runtime-node/Cargo.toml
crates.iosha2crates/opentray-runtime-node/Cargo.toml
crates.ioserdecrates/opentray-spec/Cargo.toml
crates.ioserde_jsoncrates/opentray-spec/Cargo.toml
npm@opentray/packagingworkspace:*packages/cli/package.json
npm@opentray/specworkspace:*packages/cli/package.json
npm@opentray/packagingworkspace:*packages/esbuild-plugin/package.json
All dependencies not collected

The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

Dependency advisories 0

Installing npm:opentray@0.18.0 pulls in 13 packages, direct and transitive: 0 carry known advisories, of which 0 are direct dependencies.

No known advisories affect the assessed dependencies.

An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.

Raw JSON report machine-readable
{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 6295,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "CSS": 5310,
        "HTML": 217085,
        "Rust": 1048336,
        "Shell": 5492,
        "Swift": 15608,
        "Python": 7350,
        "Svelte": 104825,
        "JavaScript": 2374,
        "TypeScript": 1135856
      },
      "pushed_at": "2026-07-21T13:14:20Z",
      "created_at": "2026-05-30T15:31:18Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-21T13:17:16Z",
      "description": null,
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": null,
      "default_branch": "main",
      "license_spdx_raw": null,
      "primary_language": "TypeScript",
      "significant_languages": [
        "TypeScript",
        "Rust"
      ]
    },
    "owner": {
      "blog": "https://jixoai.com",
      "name": "JIXO-AI",
      "type": "Organization",
      "login": "jixoai",
      "company": null,
      "location": null,
      "followers": 0,
      "avatar_url": "https://avatars.githubusercontent.com/u/237385524?v=4",
      "created_at": "2025-10-11T06:42:11Z",
      "is_verified": null,
      "public_repos": 13,
      "account_age_days": 291
    },
    "license": {
      "state": "absent",
      "spdx_id": null,
      "raw_spdx": null,
      "file_present": false,
      "scorecard_found": false,
      "profile_has_license": false
    },
    "activity": {
      "releases": [],
      "recent_commits": [
        {
          "oid": "ed5c6d411b9915563797d894e8203c76a2b345f0",
          "body": null,
          "is_bot": false,
          "headline": "test: isolate Darwin broker launch coverage",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-21T13:14:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "36b348f09e699dbf5d5d914eb206c1c609ab53e1",
          "body": null,
          "is_bot": false,
          "headline": "docs(skill): separate consumer and maintainer guidance",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-21T13:13:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "90d10963f48653cf51499c01487302afee08bc81",
          "body": null,
          "is_bot": true,
          "headline": "chore: version packages",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-21T12:56:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f4af08b357831039611532459b28175ff68982e5",
          "body": null,
          "is_bot": false,
          "headline": "docs: teach application mode lifecycle",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-21T12:54:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0baf9ed439bd3b90365cbb32a59c6736a43b4cc0",
          "body": null,
          "is_bot": false,
          "headline": "fix: recover interrupted broker startup",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-21T06:55:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8e182ddd2e118e6ce5dc31dec49fc3346d5b793b",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): recover interrupted app launches",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-21T06:03:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2f83705486756d500e6c16bb9b131db89a058ce7",
          "body": null,
          "is_bot": false,
          "headline": "fix: allow native broker cold-start readiness",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-21T04:39:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0845a855b60048052e2cb8e689b34f81358153d5",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): define native broker readiness budget",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-21T04:35:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "909311abfae88a27352587377cedcd8846605675",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): close Dock cold launch environment gap",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-21T04:09:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "35ee65184d95849b81db10f9fc036730d668f661",
          "body": null,
          "is_bot": false,
          "headline": "feat: support warm Darwin app reopen",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-20T22:02:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "352fb41b125662df327b4bc9cbfe009f4d21a50c",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): record warm reopen implementation plan",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-20T22:02:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ec63a2f7eba5bbdee07e1fe3dc00a080bde221a7",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): define Darwin warm reopen behavior",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-20T19:51:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b079dac8957e9185fa14435183774ba8195ff8ee",
          "body": null,
          "is_bot": false,
          "headline": "fix: converge Darwin app identities and persist launch diagnostics",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-20T18:30:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3ceabd367d619b0d8dfeea7b9e586e1da4a761ff",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): reopen app launch acceptance",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-20T17:38:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "01737d66a339f4fc971c02ae8479c5f21cba5cf0",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): record add-app-launch-command self-review",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-20T16:57:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f3ddf42428e5b80f5339a343f9872843b48226e3",
          "body": null,
          "is_bot": false,
          "headline": "feat: relaunch consumers from Darwin app bundles",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-20T16:53:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c1c9a66a83e3f94d41b1f2bca274131742bbfc4a",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): prepare add-app-launch-command for apply",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-20T08:22:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8b835dfefb5e1dff30f365337ff3285d62f313d6",
          "body": null,
          "is_bot": false,
          "headline": "fix: build release packages before verification",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-20T05:35:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b7b9f5ce491f3d21ec8bfd07be9e08ee1fd31672",
          "body": null,
          "is_bot": false,
          "headline": "fix: verify packaged runtime closure before publish",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-20T05:25:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "81c16590159072fc6f3acc8045f13a3741a37294",
          "body": null,
          "is_bot": true,
          "headline": "chore: version packages",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-20T05:14:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9d45ae4235e52041d6152681816d83fc638a6bd5",
          "body": null,
          "is_bot": false,
          "headline": "docs(release): queue stable Darwin app bundle",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-20T05:11:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "23cdaf1950cd9f5f0af0bf9ed7c69ef4ad329736",
          "body": null,
          "is_bot": false,
          "headline": "feat: materialize stable Darwin app bundles",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-20T05:10:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e8d699b6484c02d8d05d184383d5593afb5d56f4",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): define stable Darwin app bundles",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-20T05:10:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bf4f0d98a166741e3f5909981658ec05bedaa5f9",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): tighten application icon contract",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-20T05:10:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c6ed951d89dd0f905c01121ccaa2e6088347e49d",
          "body": null,
          "is_bot": false,
          "headline": "feat: launch Darwin broker through app carrier",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-20T05:10:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9a27f68d8e52f47bfdc44b130699c198d18223fc",
          "body": null,
          "is_bot": false,
          "headline": "docs: record application shell laws",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-20T05:10:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2aad58585a756deef4f2154090c2d59d6fda6294",
          "body": null,
          "is_bot": false,
          "headline": "chore: ignore generated local artifacts",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-20T05:10:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "86fecd456b876432fc8464a71ee60943df94fa6a",
          "body": "Record the raw-broker Dock regression, require a broker-bearing caller carrier, and add linked-consumer preparation gates before resuming implementation.",
          "is_bot": false,
          "headline": "docs(spec): reopen Darwin carrier identity",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-20T05:10:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a138fd0f81c7afdc42d862d978283ab7b429137d",
          "body": null,
          "is_bot": true,
          "headline": "chore: version packages",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-19T12:16:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f543322ab328663d8ac94fa1076490aad9acf077",
          "body": null,
          "is_bot": false,
          "headline": "docs(release): queue application shell identity",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-19T12:15:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4a0345eb7cce4a7af5dc31d0c6c58d1ae6cae918",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): close app-mode review gate",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-19T12:03:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "397de55e3193dafea1a67c96c98bf35417e09a2e",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): record app-mode self-review",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-19T12:02:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7221c7cb23963e16f7e37349e9f4f448c2aff798",
          "body": "Add the common appMode contract, Core App identity mutations, and Darwin runtime carrier packaging. Migrate skill-creator-v2 to a retained normal application window without keep-on-top.",
          "is_bot": false,
          "headline": "feat(webview): add application mode and app identity",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-19T12:02:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8f8e3559f243d7a0ebccd0e62c95692837c55b8f",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): define Darwin runtime carrier ownership",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-19T10:48:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a8fc75c1361a313eae6496fef2242c9aa3eb2733",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): record app identity gate evidence",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-19T09:55:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1100fe293de50ad9ab4fd1aa3240e3ddbe8f827c",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): refine app identity contracts",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-19T09:54:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ca1882ef2e39c78b7a539f98d4836c3da9cf587a",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): prepare add-webview-app-mode-and-app-icon for apply",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-19T08:44:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2131a3deb5c6793e428b5c3ea7f781b34603496c",
          "body": null,
          "is_bot": false,
          "headline": "fix(daemon): normalize Windows broker paths",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-19T07:07:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "54ac302019bb0da36aa38e5f0cdd9003c2d1ed47",
          "body": null,
          "is_bot": false,
          "headline": "fix(release): build packed consumer artifacts on Windows",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-19T06:58:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "15c9b24f0803902038f0dbf6cdcaaf3f51da2a90",
          "body": null,
          "is_bot": false,
          "headline": "fix(release): parse packed archives portably",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-19T06:46:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f3e580f0005f9503f054d853528d84499dd322b1",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): sync Lynx extraction status",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-19T05:17:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "53be910b719962f3e6afa2edd6c0b0b1331b4fe8",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): record Lynx extraction review",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-19T05:16:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "47d3afda750c7a8922dbb088545196b6d48a0e05",
          "body": null,
          "is_bot": false,
          "headline": "feat: move Lynx extension to independent repository",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-19T05:15:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ca450d4763735cee71dd430a39f3e8a1389d16c3",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): define Lynx repository boundary",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-19T03:05:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "29532da54b410756c449d8d2cf51a44c93ded4ff",
          "body": null,
          "is_bot": false,
          "headline": "fix(release): inspect extension manifests natively",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-19T02:24:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "59c86a8f392c2868158d3e26831cb3192846efad",
          "body": null,
          "is_bot": true,
          "headline": "chore: version packages",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-19T02:08:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "56f7420020d1000940f93d2b96f98acec1b05c86",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): archive make-native-artifact-resolution-authoritative",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-18T21:50:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "de29720f0a6bcb9df9ae80916d0162dd4c0b8424",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): remove phantom archive deltas",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-18T21:45:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f49441be203eb60e1aa2f8e6e1ef935a2b139224",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): record archive readiness",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-18T21:42:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1cb8f66af9f31cf6473d5e5b59bbba1734fe6cd6",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): preserve archive scenario identity",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-18T21:40:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6bad12f22d002d3513815927ec968eb53132642e",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): record final artifact review",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-18T21:30:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0236b2d3aee78725923622e134084c6de0329f3d",
          "body": null,
          "is_bot": false,
          "headline": "fix(runtime): close final artifact review gaps",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-18T21:25:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "522193e1aa9d6eec3cf0944dc35516808fd6c755",
          "body": null,
          "is_bot": false,
          "headline": "fix(runtime): align native target and rejection contracts",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-18T20:57:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b4fecdf08504792927eedb49f27784f8fc60d769",
          "body": null,
          "is_bot": false,
          "headline": "fix(runtime): classify diagnostic artifact rejections",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-18T20:45:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "30752ce6e2366f8943a5b1be089ffa81cb33a22d",
          "body": null,
          "is_bot": false,
          "headline": "fix(runtime): complete artifact acceptance gate",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-18T20:43:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "95bc07ea50f594603252e9b526b1b4f4901b65e1",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): repair WebView2 change delta",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-18T20:39:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "22667673796bce9d5c67205e56c1bdedef10658b",
          "body": null,
          "is_bot": false,
          "headline": "fix(runtime): resolve artifact review findings",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-18T20:05:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9f26e3f7da04c443ed7ab06b1a2251123e9ac952",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): record artifact identity self-review",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-18T19:18:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1895b1adffef94ff1391b7a0d32226cdf5d4bcc8",
          "body": null,
          "is_bot": false,
          "headline": "feat(runtime): replace stale brokers by artifact identity",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-18T19:09:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fc7270288bda9a37a52a50691933f105ddef8f05",
          "body": null,
          "is_bot": false,
          "headline": "feat(runtime): validate native artifact identity",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-18T18:33:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6ea83e30a7eb1e1c8ba7b2b49a85f2e7d17b7ef8",
          "body": null,
          "is_bot": false,
          "headline": "feat(runtime): resolve exact native extension artifacts",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-18T17:36:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a1c665d9eca6384730e7e0dbc4225a926b46725c",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): define authoritative native artifacts",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-18T17:14:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "78f36889bf4f0765cbed10e614c2045c95d05b42",
          "body": null,
          "is_bot": false,
          "headline": "chore: prepare 0.14.4 release",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-17T16:47:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c939902f65400dcaeacb01a1cc7e7878d6a7ca32",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): record WebView2 release build",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-17T16:47:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "25233c5f4b3105f902ad5423b931360d94c954ab",
          "body": null,
          "is_bot": false,
          "headline": "fix(webview): use stable Windows WebView2 profiles",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-17T16:45:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8ce170e2022e46ffd01ac483d66720bf6a30c687",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): define stable WebView2 profile paths",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-17T16:43:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "da91e059abe441cfad9f20836594a88f993d35d1",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): archive frameless visibility lifecycle",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-17T15:30:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fa68068649f6bb4800827bb2f3b4bc68616e18cf",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): record frameless visibility review",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-17T15:22:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "67b3127a8fad744fd5e08c7a63f65b6aafc73dc3",
          "body": null,
          "is_bot": true,
          "headline": "chore: version packages",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-17T09:25:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "55fe7a52639ce686108dec3cd1536c1302aa5a26",
          "body": null,
          "is_bot": false,
          "headline": "chore: prepare 0.14.3 release",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-17T09:20:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9d1a950c9e38c748a11117c0feecb34db19496e5",
          "body": null,
          "is_bot": false,
          "headline": "feat(webview): add native tray auto-hide",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-17T09:19:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "422a16125ec9a9d457b58ba967c97ce0061bbce6",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): define retained tray window lifecycle",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-17T08:45:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dd19a7767a59a249e7298c2d812c1c30bb260024",
          "body": null,
          "is_bot": true,
          "headline": "chore: version packages",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-17T08:04:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b439f3664b141bac0dac1d40d38ff0bb061fbfa4",
          "body": null,
          "is_bot": false,
          "headline": "chore: prepare 0.14.2 release",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-17T07:54:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2453667c88845616c39f67bc0b328912bc3fa5ed",
          "body": null,
          "is_bot": false,
          "headline": "fix(webview): restore frameless comparator top edge",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-17T07:54:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e585da3c17d7daea8686533035d968c144ce64b4",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): define frameless comparator top projection",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-17T07:53:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5c5dd981e29181ecb5acb6daca46666707d82e8f",
          "body": null,
          "is_bot": true,
          "headline": "chore: version packages",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-17T04:53:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ec235732275f80c046dd17748e8744862470fbb5",
          "body": null,
          "is_bot": false,
          "headline": "chore: prepare 0.14.1 release",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-17T04:45:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8857fafb334f0db5a57df2511c1a652a1e0affdc",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): archive shared Windows host topology",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-17T04:43:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e0b8fa4b73aa93e2aff82086e911bd84d30a29a7",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): record shared host topology review",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-17T04:41:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "89cd076d83b0fbb7e7e4cd996d671bc766e56599",
          "body": null,
          "is_bot": false,
          "headline": "style(examples): expose native webview material",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-17T04:39:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e3e3a30e8652447476f9916d196032f61f821510",
          "body": null,
          "is_bot": false,
          "headline": "fix(webview): share native comparator topology",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-17T03:12:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d9b2d045a286aac19f609d536818d1b94681efde",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): define shared Windows example host topology",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-17T02:58:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "42810d102451b53374a384a669ef03fc504b31fc",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): archive windows host alignment",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-16T20:30:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ad5754f4e091eb9a11443b64063d2bd7cd6a3a5f",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): correct windows host archive delta",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-16T20:27:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2e1746f1d4f6fd52fd28fd573c8f0f4759c0dcd2",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): record windows host alignment review",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-16T20:23:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9c5ce3510e577dd8a309ea16db5f663844999714",
          "body": null,
          "is_bot": false,
          "headline": "fix(webview): restore overlay bridge stability",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-16T20:20:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "db98de2dd8908caf5849257589fdcc746e870f76",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): restore post-WebView AppWindow ordering",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-16T20:09:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b2736fc554dc958b1086dd36078e6fd80f10177f",
          "body": null,
          "is_bot": false,
          "headline": "fix(webview): match native probe frameless shell",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-16T19:50:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fd1afdd48872ff035b8727f1af3844e2cb3f1e3a",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): isolate native probe frameless shell",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-16T19:46:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ec32a07225712ca5b478d800ad40c00c01fa20bc",
          "body": null,
          "is_bot": false,
          "headline": "fix: preserve DPI-equivalent native probe bounds",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-16T19:00:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "25ba334fdfcd21ca555026ce11cad71401716441",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): align probe geometry across DPI modes",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-16T19:00:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2879a5cafce428df2afdc1378beec39acd0a2b53",
          "body": null,
          "is_bot": false,
          "headline": "fix: match native probe geometry and controls",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-16T18:54:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ae0dc95af76a585e71e62dccda29dc43a37a09e0",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): preserve native probe creation geometry",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-16T18:54:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "48d65924a1f87f243cbaa6bef6e6ed8d1bbc5339",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): archive Windows composition recovery investigation",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-16T18:41:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5a74eeb1cff03465cb1ae565d5cf258f14a3f58d",
          "body": null,
          "is_bot": false,
          "headline": "fix: align Windows WebView host with native material probe",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-16T18:41:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "21e51616fd01cb548a4e9d83b2ef6cfb0992ea55",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): refine Windows material cold-start law",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-16T18:40:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5fdee40c23f7ac1c64e8f19db60f5eda8219018e",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): align Windows material probe construction",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-16T18:09:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "60e021f4724c68e9f8961d7ea864a1d7f622f02c",
          "body": null,
          "is_bot": false,
          "headline": "docs(spec): split Windows composition stages",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-16T04:18:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "39fe2f680017485d2646f73b06b6a94eca14fc7b",
          "body": null,
          "is_bot": false,
          "headline": "feat(examples): add frameless diagnostic chrome",
          "author_name": "Gaubee",
          "author_login": "Gaubee",
          "committed_at": "2026-07-16T04:07:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 0,
      "commits_last_year": 459,
      "latest_release_at": null,
      "latest_release_tag": null,
      "releases_from_tags": false,
      "days_since_last_push": 8,
      "active_weeks_last_year": 7,
      "days_since_latest_release": null,
      "mean_days_between_releases": null
    },
    "community": {
      "has_readme": true,
      "has_license": false,
      "has_description": false,
      "has_contributing": false,
      "health_percentage": 25,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "opentray",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/opentray",
          "is_deprecated": false,
          "latest_version": "0.18.0",
          "repository_url": "https://github.com/jixoai/opentray",
          "versions_count": 37,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 3198,
          "first_published_at": "2026-05-30T15:36:12.757000Z",
          "latest_published_at": "2026-07-21T13:24:04.429000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 8
        },
        {
          "name": "@opentray/ext-badge",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@opentray/ext-badge",
          "is_deprecated": false,
          "latest_version": "0.18.0",
          "repository_url": "https://github.com/jixoai/opentray",
          "versions_count": 19,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 2088,
          "first_published_at": "2026-05-30T15:36:15.797000Z",
          "latest_published_at": "2026-07-21T13:24:05.935000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 8
        },
        {
          "name": "@opentray/darwin-x64",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@opentray/darwin-x64",
          "is_deprecated": false,
          "latest_version": "0.18.0",
          "repository_url": "https://github.com/jixoai/opentray",
          "versions_count": 33,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 2330,
          "first_published_at": "2026-05-30T15:26:57.374000Z",
          "latest_published_at": "2026-07-21T13:24:05.569000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 8
        },
        {
          "name": "@opentray/ext-island",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@opentray/ext-island",
          "is_deprecated": false,
          "latest_version": "0.18.0",
          "repository_url": "https://github.com/jixoai/opentray",
          "versions_count": 18,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 2303,
          "first_published_at": "2026-05-30T15:36:20.080000Z",
          "latest_published_at": "2026-07-21T13:24:02.836000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 8
        },
        {
          "name": "@opentray/darwin-arm64",
          "exists": true,
          "license": "MIT",
          "keywords": [],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@opentray/darwin-arm64",
          "is_deprecated": false,
          "latest_version": "0.18.0",
          "repository_url": "https://github.com/jixoai/opentray",
          "versions_count": 33,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 2470,
          "first_published_at": "2026-05-30T15:26:54.078000Z",
          "latest_published_at": "2026-07-21T13:24:05.192000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 8
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 0,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0,
        "collected_at": null
      },
      "open_issues_and_prs": 1
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "packages/cli/examples/app/tsconfig.json",
        "packages/cli/tsconfig.json",
        "packages/esbuild-plugin/tsconfig.json",
        "packages/ext-badge/tsconfig.json",
        "packages/ext-webview/tsconfig.json",
        "packages/packaging/tsconfig.json",
        "packages/spec/tsconfig.json",
        "packages/tsdown-plugin/tsconfig.json",
        "packages/vite-plugin/tsconfig.json",
        "packages/webpack-plugin/tsconfig.json"
      ],
      "toolchain_manifests": [
        "Cargo.toml",
        "crates/opentray-backend-ksni/Cargo.toml",
        "crates/opentray-backend-tray-icon/Cargo.toml",
        "crates/opentray-bin/Cargo.toml",
        "crates/opentray-core/Cargo.toml",
        "crates/opentray-ext-badge/Cargo.toml",
        "crates/opentray-ext-webview/Cargo.toml",
        "crates/opentray-extension-inspector/Cargo.toml",
        "crates/opentray-runtime-node/Cargo.toml",
        "crates/opentray-spec/Cargo.toml",
        "vendor/tray-icon/Cargo.toml"
      ],
      "largest_source_bytes": 241567,
      "source_files_sampled": 232,
      "oversized_source_files": 3,
      "agent_instruction_files": [
        "AGENTS.md"
      ],
      "agent_instruction_max_bytes": 42205
    },
    "dependencies": {
      "manifests": [
        "Cargo.toml",
        "package.json"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 13,
        "malicious_count": 0,
        "assessed_package": "npm:opentray@0.18.0",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "crates",
        "npm"
      ],
      "dependencies": [
        {
          "name": "ksni",
          "manifest": "crates/opentray-backend-ksni/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "opentray-core",
          "manifest": "crates/opentray-backend-ksni/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "opentray-spec",
          "manifest": "crates/opentray-backend-ksni/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "opentray-core",
          "manifest": "crates/opentray-backend-tray-icon/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "opentray-spec",
          "manifest": "crates/opentray-backend-tray-icon/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "png",
          "manifest": "crates/opentray-backend-tray-icon/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "0.17.16"
        },
        {
          "name": "libloading",
          "manifest": "crates/opentray-bin/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "opentray-core",
          "manifest": "crates/opentray-bin/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "opentray-spec",
          "manifest": "crates/opentray-bin/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "serde",
          "manifest": "crates/opentray-bin/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "serde_json",
          "manifest": "crates/opentray-bin/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "sha2",
          "manifest": "crates/opentray-bin/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "opentray-spec",
          "manifest": "crates/opentray-core/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "serde_json",
          "manifest": "crates/opentray-core/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "thiserror",
          "manifest": "crates/opentray-core/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "opentray-spec",
          "manifest": "crates/opentray-ext-badge/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "serde",
          "manifest": "crates/opentray-ext-badge/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "serde_json",
          "manifest": "crates/opentray-ext-badge/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "opentray-spec",
          "manifest": "crates/opentray-ext-webview/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "serde",
          "manifest": "crates/opentray-ext-webview/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "serde_json",
          "manifest": "crates/opentray-ext-webview/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "url",
          "manifest": "crates/opentray-ext-webview/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "2.5.7"
        },
        {
          "name": "libloading",
          "manifest": "crates/opentray-extension-inspector/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "opentray-spec",
          "manifest": "crates/opentray-extension-inspector/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "serde_json",
          "manifest": "crates/opentray-extension-inspector/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "napi",
          "manifest": "crates/opentray-runtime-node/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "2"
        },
        {
          "name": "napi-derive",
          "manifest": "crates/opentray-runtime-node/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": "2"
        },
        {
          "name": "opentray-core",
          "manifest": "crates/opentray-runtime-node/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "opentray-spec",
          "manifest": "crates/opentray-runtime-node/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "serde_json",
          "manifest": "crates/opentray-runtime-node/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "sha2",
          "manifest": "crates/opentray-runtime-node/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "serde",
          "manifest": "crates/opentray-spec/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "serde_json",
          "manifest": "crates/opentray-spec/Cargo.toml",
          "ecosystem": "crates",
          "version_constraint": null
        },
        {
          "name": "@opentray/packaging",
          "manifest": "packages/cli/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@opentray/spec",
          "manifest": "packages/cli/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        },
        {
          "name": "@opentray/packaging",
          "manifest": "packages/esbuild-plugin/package.json",
          "ecosystem": "npm",
          "version_constraint": "workspace:*"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 1,
        "merged_prs": 2,
        "open_issues": 0,
        "closed_ratio": 1,
        "closed_issues": 3,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "Gaubee",
          "commits": 422,
          "avatar_url": "https://avatars.githubusercontent.com/u/2151644?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "preview-native.yml",
        "release.yml",
        "verify-native-artifacts.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "Cargo.lock",
        "pnpm-lock.yaml"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": null,
            "reason": "no pull request found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 3,
            "reason": "project has 1 contributing companies or organizations -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 0,
            "reason": "license file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "no SAST tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "24 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "ed5c6d411b9915563797d894e8203c76a2b345f0",
        "ran_at": "2026-07-29T22:29:08Z",
        "aggregate_score": 2,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-21T13:24:33Z",
      "oldest_open_prs": [
        {
          "number": 1,
          "created_at": "2026-06-03T10:10:45Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-07-07T14:55:11Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/jixoai/opentray",
    "host": "github.com",
    "name": "opentray",
    "owner": "jixoai"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "at_risk",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 41,
      "inputs": {
        "security": 36,
        "vitality": 32,
        "community": 26,
        "governance": 55,
        "engineering": 52
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "at_risk",
        "name": "Vitality",
        "value": 32,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 52,
            "inputs": {
              "commits_last_year": 459,
              "human_commit_share": 0.93,
              "days_since_last_push": 8,
              "active_weeks_last_year": 7
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 8 days ago",
                "points": 28.8,
                "status": "partial",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 8
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "7/52 weeks with commits",
                "points": 4.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 7
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "459 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 459
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "critical",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 1,
            "inputs": {
              "releases_count": 0
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "no releases published",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_releases_published",
                    "params": {}
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "no releases",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_releases",
                    "params": {}
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "no releases",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_releases",
                    "params": {}
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "critical",
        "name": "Community & Adoption",
        "value": 26,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 0,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "critical",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 25,
            "inputs": {
              "has_readme": true,
              "has_license": false,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "no license file detected",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "license_absent",
                    "params": {}
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 68,
            "inputs": {
              "packages": [
                "opentray",
                "@opentray/ext-badge",
                "@opentray/darwin-x64",
                "@opentray/ext-island",
                "@opentray/darwin-arm64"
              ],
              "dependents": null,
              "ecosystems": "npm",
              "total_downloads": null,
              "monthly_downloads": 12389
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "12,389 downloads/month across npm",
                "points": 54.6,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 12389,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 55,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 13,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 1 contributing companies or organizations -- score normalized to 3",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "excellent",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "merged_prs": 2,
              "open_issues": 0,
              "closed_issues": 3,
              "issue_closed_ratio": 1,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "100% of issues closed",
                "points": 46.8,
                "status": "met",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "2/2 decided PRs merged",
                "points": 38.2,
                "status": "met",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 2,
                      "decided": 2
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "at_risk",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "followers": 0,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "jixoai",
              "public_repos": 13,
              "account_age_days": 291
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "0 followers of jixoai",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 0,
                      "login": "jixoai"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "13 public repos, account ~0 yr old",
                "points": 9.9,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 13
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 0
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "opentray",
                "@opentray/ext-badge",
                "@opentray/darwin-x64",
                "@opentray/ext-island",
                "@opentray/darwin-arm64"
              ],
              "ecosystems": "npm",
              "any_deprecated": false,
              "min_days_since_publish": 8
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "5 package(s) on npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 5,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 8 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 8
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "37 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 37
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 52,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_ci_tests"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 60,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "3 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "at_risk",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 36,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "critical",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): CI-Tests, Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "ci_tests",
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 20,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 15,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 3,
              "scorecard_aggregate": 2
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 1 contributing companies or organizations -- score normalized to 3",
                "points": 0.8,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "no SAST tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "24 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:opentray@0.18.0 runtime dependency closure — what installing the published package pulls in — 13 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "npm:opentray@0.18.0",
                  "assessed": 13
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 0,
              "affected_packages": 0,
              "assessed_packages": 13,
              "unassessed_packages": 0,
              "affected_by_severity": "none",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "no indirect dependency carries a known advisory",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "no_indirect_advisories",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 13,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 1
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 69,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [
                "AGENTS.md"
              ],
              "agent_instruction_max_bytes": 42205
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "AGENTS.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "AGENTS.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "93 of 93 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 93,
                      "sampled": 93
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 56,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "Cargo.lock",
                "pnpm-lock.yaml"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [
                "packages/cli/examples/app/tsconfig.json",
                "packages/cli/tsconfig.json",
                "packages/esbuild-plugin/tsconfig.json",
                "packages/ext-badge/tsconfig.json",
                "packages/ext-webview/tsconfig.json",
                "packages/packaging/tsconfig.json",
                "packages/spec/tsconfig.json",
                "packages/tsdown-plugin/tsconfig.json",
                "packages/vite-plugin/tsconfig.json",
                "packages/webpack-plugin/tsconfig.json"
              ],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "Cargo.toml",
                "crates/opentray-backend-ksni/Cargo.toml",
                "crates/opentray-backend-tray-icon/Cargo.toml",
                "crates/opentray-bin/Cargo.toml",
                "crates/opentray-core/Cargo.toml",
                "crates/opentray-ext-badge/Cargo.toml",
                "crates/opentray-ext-webview/Cargo.toml",
                "crates/opentray-extension-inspector/Cargo.toml",
                "crates/opentray-runtime-node/Cargo.toml",
                "crates/opentray-spec/Cargo.toml",
                "vendor/tray-icon/Cargo.toml"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "Cargo.toml, crates/opentray-backend-ksni/Cargo.toml, crates/opentray-backend-tray-icon/Cargo.toml (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "Cargo.toml, crates/opentray-backend-ksni/Cargo.toml, crates/opentray-backend-tray-icon/Cargo.toml"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "packages/cli/examples/app/tsconfig.json, packages/cli/tsconfig.json, packages/esbuild-plugin/tsconfig.json, packages/ext-badge/tsconfig.json, packages/ext-webview/tsconfig.json, packages/packaging/tsconfig.json, packages/spec/tsconfig.json, packages/tsdown-plugin/tsconfig.json, packages/vite-plugin/tsconfig.json, packages/webpack-plugin/tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "packages/cli/examples/app/tsconfig.json, packages/cli/tsconfig.json, packages/esbuild-plugin/tsconfig.json, packages/ext-badge/tsconfig.json, packages/ext-webview/tsconfig.json, packages/packaging/tsconfig.json, packages/spec/tsconfig.json, packages/tsdown-plugin/tsconfig.json, packages/vite-plugin/tsconfig.json, packages/webpack-plugin/tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 99,
            "inputs": {
              "primary_language": "TypeScript",
              "largest_source_bytes": 241567,
              "source_files_sampled": 232,
              "oversized_source_files": 3
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "TypeScript (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "TypeScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "3/232 source files over 60KB",
                "points": 54.3,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 232,
                      "oversized": 3
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Could not fetch crates package 'opentray-bin' from its registry",
    "Could not fetch crates package 'opentray-core' from its registry",
    "Could not fetch crates package 'opentray-spec' from its registry",
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-29T22:29:14.864281Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/j/jixoai/opentray.svg",
  "full_name": "jixoai/opentray",
  "license_state": "absent",
  "license_spdx": null
}

Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.

Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.

How one result sits in the wider record: aggregate statisticsnpm.