Public record
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-23 19:45 UTC

kenryu42 / pi-grok-cli

Use your X Premium or SuperGrok subscription in pi—with automatic vision routing for text-only models.

TypeScriptMIT★ 22 stars⑂ 4 forkssince Jun 2026View on GitHub ↗

kenryu42/pi-grok-cli holds a health index of 59 out of 100, placing it in the Moderate band. It scores highest on Engineering Quality (80/100) and lowest on Security (32/100). It was last updated 5 days ago. A single contributor accounts for most of its recent work.

59
overall / 100
Moderate

Software health index

Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.

59
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
VitalityCommunity &AdoptionSustainability &GovernanceEngineeringQualitySecurityAI Readiness

Score profile

Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.

Ownership

J LiewPersonal account
68 followers145 public repossince Mar 2020

This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.

Package ecosystems

RegistryPackageVersionDownloads / moVersionsLast publishTags
npmpi-grok-cli0.6.02,291185 days agopi-packagepi-extensionxaigrokgrok-clioauthxai-oauthvisionmultimodal

Metrics by category

Vitality

Is the project alive — is code being written and are releases shipping?

75Good · 22% of overall
How it's scored
36/36Push recency — last push 5 days ago
4.8/36Commit cadence — 7/52 weeks with commits
18/18Commit volume — 129 commits in the last year
0/10OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully
Inputs used
commits_last_year129
human_commit_share0.84
days_since_last_push5
active_weeks_last_year7

Release discipline

100Excellent
How it's scored
27/27Ships releases — 18 releases published
36/36Release recency — latest release 5 days ago
27/27Release cadence — a release every ~2 days
0/10OpenSSF Scorecard: Signed-Releases — no data
Inputs used
releases_count18
latest_release_tagv0.6.0
releases_from_tagsno
days_since_latest_release5
mean_days_between_releases2
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.

Community & Adoption

Does the project have users, downloads, attention, and a welcoming setup for contributors?

42At risk · 18% of overall
How it's scored
21.4/60Stars — 22 stars
4/25Forks — 4 forks
0/15Watchers — 1 watchers
Inputs used
forks4
stars22
watchers1
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
How it's scored
22.5/22.5README
22.5/22.5License — recognized license (MIT)
0/18CONTRIBUTING guide
0/13.5Code of conduct
0/7.2Issue template
0/6.3PR template
Inputs used
has_readmeyes
has_licenseyes
has_contributingno
has_issue_templateno
has_code_of_conductno
has_pull_request_templateno
How it's scored
44.8/80Monthly downloads — 2,291 downloads/month across npm
0/20Registry dependents — not reported by this ecosystem
Inputs used
packagespi-grok-cli
dependents
ecosystemsnpm
total_downloads
monthly_downloads2,291
Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.

Sustainability & Governance

Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?

58Moderate · 24% of overall
How it's scored
9/54Bus factor — 1 contributor(s) cover half of all commits
0.8/22.5Commit distribution — top contributor authored 96% of commits
2.7/13.5Contributor breadth — 2 contributors
0/10OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0
Inputs used
bus_factor1
contributors_sampled2
top_contributor_share0.964
How it's scored
46.8/46.8Issue resolution — 100% of issues closed
28.7/38.3PR acceptance — 6/8 decided PRs merged
0/15OpenSSF Scorecard: Code-Review — Found 0/3 approved changesets -- score normalized to 0
Inputs used
merged_prs6
open_issues0
closed_issues2
issue_closed_ratio1
closed_unmerged_prs2
How it's scored
10/30Ownership backing — personal (user) account
0/20Verified domain — not applicable to user accounts
13.2/25Owner reach — 68 followers of kenryu42
25/25Track record — 145 public repos, account ~6 yr old
Inputs used
followers68
owner_typeUser
is_verified
owner_loginkenryu42
public_repos145
account_age_days2,333
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.
How it's scored
25/25Published & resolvable — 1 package(s) on npm
35/35Publish recency — latest publish 5 days ago
20/20Version history — 18 published versions
20/20Not deprecated — active, not deprecated or yanked
Inputs used
packagespi-grok-cli
ecosystemsnpm
any_deprecatedno
min_days_since_publish5

Engineering Quality

Are baseline engineering and documentation practices in place?

80Good · 20% of overall
How it's scored
24/24CI workflows — 3 workflow(s)
24/24Tests present
16/16Linter config — biome.json
0/9.6Pre-commit hooks
0/6.4.editorconfig
20/20OpenSSF Scorecard: CI-Tests — 1 out of 1 merged PRs checked by a CI test -- score normalized to 10
Inputs used
has_ciyes
has_testsyes
has_editorconfigno
has_linter_configyes
has_precommit_configno
How it's scored
30/30README
0/25Documentation directory
15/15Documentation / homepage site — https://pi.dev/packages/pi-grok-cli
10/10Repository description
10/10Topics — 12 topics
10/10Wiki
Inputs used
topicsgrok, grok-build-cli, pi-extension, xai, composer-2p5, grok-build, grok-4-5, grok-cli, oauth, pi-coding-agent, multimodal, vision
has_wikiyes
homepagehttps://pi.dev/packages/pi-grok-cli
has_readmeyes
has_docs_dirno
has_descriptionyes

Security

Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?

32At risk · 16% of overall
How it's scored
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — branch protection not enabled on development/release branches
2.5/2.5CI-Tests — 1 out of 1 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 0/3 approved changesets -- score normalized to 0
0/2.5Contributors — project has 0 contributing companies or organizations -- score normalized to 0
10/10Dangerous-Workflow — no dangerous workflow patterns detected
0/7.5Dependency-Update-Tool — no update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5License — license file detected
0/7.5Maintained — project was created within the last 90 days. Please review its contents carefully
0/5Packaging — no data
0/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
0/5SAST — SAST tool is not run on all commits -- score normalized to 0
5/5Security-Policy — security policy file detected
0/7.5Signed-Releases — no data
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
0/7.5Vulnerabilities — no data
Inputs used
sourceopenssf_scorecard
checks_evaluated15
scorecard_versionv5.5.0
checks_inconclusive3
scorecard_aggregate3.2
Excluded from scoring (no data or not applicable): packaging, signed_releases, vulnerabilities. Remaining weights renormalized.

AI Readiness

How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.

68Moderate · 0% of overall
How it's scored
45/45Agent instructions — AGENTS.md, CLAUDE.md
0/15Machine-readable docs (llms.txt)
40/40Legible commit history — 79 of 84 human commits state their intent (structured subject or explanatory body)
Inputs used
has_llms_txtno
legible_history_share0.94
agent_instruction_filesAGENTS.md, CLAUDE.md
agent_instruction_max_bytes2,190
How it's scored
0/18One-command bootstrap
22/22Automated tests
11/11Lint / format config — biome.json
11/11Static type checking — tsconfig.json
0/10Reproducible environment
0/10Demonstrated agent practice — no agent-authored commits among the last 100
0/8Automated maintenance — no automated dependency updates observed
0/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
Inputs used
has_nixno
has_testsyes
lockfiles
has_dockerfileno
typed_languageyes
bootstrap_files
has_devcontainerno
has_linter_configyes
typecheck_configstsconfig.json
agent_commit_share0
toolchain_manifests
dependency_bot_commit_share0
How it's scored
45/45Type-checkable code — TypeScript (statically typed)
55/55Manageable file sizes — 0/82 source files over 60KB
Inputs used
primary_languageTypeScript
largest_source_bytes38,271
source_files_sampled82
oversized_source_files0

Key facts

22GitHub stars
2contributors
129commits, last 12 months
5days since last push
18releases
1bus factor
0open issues
npmpackage ecosystems

Data collection warnings

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
  • GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
  • deps.dev does not index npm:pi-grok-cli@0.6.0; advisories assessed against the repository dependency graph instead

More detail

Star and fork history 0 ★ / 4 ⇿
0Stars
4Forks
9Releases

When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.

1223344422026-062026-072026-07
Major 0Minor 4Patch 5
OpenSSF Scorecard 3.2 / 10
3.2aggregate

Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-23 19:45 UTC

10Binary-Artifactsno binaries found in the repo
0Branch-Protectionbranch protection not enabled on development/release branches
10CI-Tests1 out of 1 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 0/3 approved changesets -- score normalized to 0
0Contributorsproject has 0 contributing companies or organizations -- score normalized to 0
10Dangerous-Workflowno dangerous workflow patterns detected
0Dependency-Update-Toolno update tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
0Maintainedproject was created within the last 90 days. Please review its contents carefully
n/aPackagingpackaging workflow not detected
0Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 0
0SASTSAST tool is not run on all commits -- score normalized to 0
10Security-Policysecurity policy file detected
n/aSigned-Releasesno releases found
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
n/aVulnerabilitiesinternal error: vulnerabilitiesClient.ListUnfixedVulnerabilities: osvscanner.DoScan: client error: status="400 Bad Request" body={"code":3,"message":"error in query at index 367: rpc error: code = InvalidArgument desc = invalid hash"}
Direct dependencies 2
RegistryPackageVersion constraintManifest
npmignore7.0.5package.json
npmminimatch10.2.5package.json
All dependencies not collected

The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

Raw JSON report machine-readable
{
  "data": {
    "repo": {
      "topics": [
        "grok",
        "grok-build-cli",
        "pi-extension",
        "xai",
        "composer-2p5",
        "grok-build",
        "grok-4-5",
        "grok-cli",
        "oauth",
        "pi-coding-agent",
        "multimodal",
        "vision"
      ],
      "is_fork": false,
      "size_kb": 821,
      "has_wiki": true,
      "homepage": "https://pi.dev/packages/pi-grok-cli",
      "languages": {
        "CSS": 18176,
        "HTML": 2728,
        "Shell": 164,
        "JavaScript": 33996,
        "TypeScript": 623839
      },
      "pushed_at": "2026-07-18T16:13:39Z",
      "created_at": "2026-06-02T04:33:11Z",
      "owner_type": "User",
      "updated_at": "2026-07-21T18:55:36Z",
      "description": "Use your X Premium or SuperGrok subscription in pi—with automatic vision routing for text-only models.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "TypeScript",
      "significant_languages": [
        "TypeScript"
      ]
    },
    "owner": {
      "blog": null,
      "name": "J Liew",
      "type": "User",
      "login": "kenryu42",
      "company": null,
      "location": "Japan",
      "followers": 68,
      "avatar_url": "https://avatars.githubusercontent.com/u/61741059?v=4",
      "created_at": "2020-03-03T12:42:22Z",
      "is_verified": null,
      "public_repos": 145,
      "account_age_days": 2333
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.6.0",
          "kind": "minor",
          "published_at": "2026-07-18T12:04:03Z"
        },
        {
          "tag": "v0.5.0",
          "kind": "minor",
          "published_at": "2026-07-14T10:09:38Z"
        },
        {
          "tag": "v0.4.1",
          "kind": "patch",
          "published_at": "2026-07-12T14:11:16Z"
        },
        {
          "tag": "v0.4.0",
          "kind": "minor",
          "published_at": "2026-07-12T03:09:12Z"
        },
        {
          "tag": "v0.3.4",
          "kind": "patch",
          "published_at": "2026-07-11T01:37:23Z"
        },
        {
          "tag": "v0.3.3",
          "kind": "patch",
          "published_at": "2026-07-10T17:16:10Z"
        },
        {
          "tag": "v0.3.2",
          "kind": "patch",
          "published_at": "2026-07-09T07:28:55Z"
        },
        {
          "tag": "v0.3.1",
          "kind": "patch",
          "published_at": "2026-07-09T00:33:07Z"
        },
        {
          "tag": "v0.3.0",
          "kind": "minor",
          "published_at": "2026-06-30T19:38:56Z"
        },
        {
          "tag": "v0.2.0",
          "kind": "minor",
          "published_at": "2026-06-30T09:56:58Z"
        },
        {
          "tag": "v0.1.7",
          "kind": "patch",
          "published_at": "2026-06-22T01:56:26Z"
        },
        {
          "tag": "v0.1.6",
          "kind": "patch",
          "published_at": "2026-06-05T05:22:31Z"
        },
        {
          "tag": "v0.1.5",
          "kind": "patch",
          "published_at": "2026-06-04T18:43:23Z"
        },
        {
          "tag": "v0.1.4",
          "kind": "patch",
          "published_at": "2026-06-03T08:47:22Z"
        },
        {
          "tag": "v0.1.3",
          "kind": "patch",
          "published_at": "2026-06-03T08:30:26Z"
        },
        {
          "tag": "v0.1.2",
          "kind": "patch",
          "published_at": "2026-06-02T19:12:08Z"
        },
        {
          "tag": "v0.1.1",
          "kind": "patch",
          "published_at": "2026-06-02T05:30:56Z"
        },
        {
          "tag": "v0.1.0",
          "kind": "minor",
          "published_at": "2026-06-02T04:39:55Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "5a2cbd812d8b6237316faf7193cac00c5fea81bf",
          "body": "Why:\n- The README mixed first-run guidance with implementation details and repeated feature explanations.\n\nWhat:\n- Keep onboarding linear and give multi-account management a focused dashboard-first section.\n- Condense rotation, compatibility, configuration, troubleshooting, and security guidance.\n\nValidation:\n- git diff --check\n- bun run check not run (documentation-only change)",
          "is_bot": false,
          "headline": "docs(readme): simplify setup and feature guidance",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-18T16:13:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1933c364d3591c7c11468b4d03b57d7a4083f814",
          "body": null,
          "is_bot": true,
          "headline": "release: v0.6.0",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-18T12:03:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a7ff8bb3789e805ce9ed7bf67cfb5737a21cbf7f",
          "body": "feat: multiple accounts",
          "is_bot": false,
          "headline": "Merge pull request #10 from kenryu42/feat/multiple-accounts",
          "author_name": "J Liew",
          "author_login": "kenryu42",
          "committed_at": "2026-07-18T12:01:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e8426ab58fd0fe664de911efd8000cd5484df0ef",
          "body": "Why:\n- Free-plan accounts can include weekly billing data, which made the dashboard show 100% remaining with a reset date.\n\nWhat:\n- Make the free-plan state override weekly payload values for both quota metadata and percentage.\n- Add a browser-behavior regression covering monthly and weekly free-plan gauges.\n\nValidation:\n- bun run check (38 test files, 500 tests)",
          "is_bot": false,
          "headline": "fix(dashboard): show free quota as unavailable",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-18T11:45:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f75ed4b7d531f7f361bf07977d8da5b6e395bfcd",
          "body": "Why:\n- Migration, refresh, and rotation races could discard legacy or concurrent state, while dashboard tests relied on source-string checks.\n\nWhat:\n- Defer legacy cleanup and revalidate asynchronous account and quota commits.\n- Preserve concurrent rotation changes and align timeout, style, sanitization, and registration behavior.\n- Execute dashboard client behavior in a browser-capable DOM and cover the affected concurrency paths.\n\nValidation:\n- bun run check (38 test files, 499 tests)",
          "is_bot": false,
          "headline": "fix: resolve follow-up review findings",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-18T11:41:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dd1c1b2538cd0d947797f6f9e33d39fdf646edca",
          "body": "Why:\n- Overlapping account, model, quota, replay, and dashboard lifecycle work could restore stale state, emit invalid payloads, or block shutdown.\n\nWhat:\n- Serialize model persistence without re-entrant waits and guard quota writes by account generation.\n- Keep only valid reasoning content discriminators.\n- Bound incomplete dashboard bodies and close active connections during shutdown.\n\nValidation:\n- bun run check (495 tests, typecheck, knip, jscpd, coverage)\n- autoreview --mode local (clean)",
          "is_bot": false,
          "headline": "fix: resolve multiple-account review findings",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-18T10:35:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "54cc8476f2733120f02c5ce85c765cf8daf8751b",
          "body": "Why:\n- The README introduction needed stronger visual identity and a clearer summary of the current account experience.\n\nWhat:\n- Add the branded Pi Grok CLI header image.\n- Reorder feature highlights and describe browser account management and exhaustion rotation.\n- Keep the image repository-only; the npm package inventory remains unchanged.\n\nValidation:\n- bun run check (491 tests, typecheck, knip, jscpd, coverage)\n- git diff --cached --check",
          "is_bot": false,
          "headline": "docs: refresh README presentation",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-18T09:38:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c7b2b595e22d98cf7530acac405ddfc4c552cb80",
          "body": "Why:\n- A documentation audit found inaccurate OAuth recovery guidance, incomplete security boundaries, and advanced configuration missing from the published package.\n\nWhat:\n- Distinguish callback bind failures from manual callback recovery.\n- Document persisted base URLs, OS-permitted tool reach, an\n[…]\nsh CONFIGURATION.md and lock the corrected package inventory.\n\nValidation:\n- bun run check (491 tests, typecheck, knip, jscpd, coverage)\n- npm pack --dry-run --json --ignore-scripts\n- git diff --check",
          "is_bot": false,
          "headline": "fix(docs): align security and configuration guidance",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-18T09:25:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5c3ff286e825c089380805fec162fd0660cd231c",
          "body": "Why:\n- Review found malformed reasoning payloads, cross-session dashboard cookie collisions, stale quota resurrection, invalid two-digit account routes, and inaccurate security wording.\n\nWhat:\n- Normalize reasoning content while preserving valid replay fields.\n- Isolate dashboard cookies and accept \n[…]\nashboard.test.ts tests/provider/accounts.test.ts (65 tests)\n- bun run check (491 tests, typecheck, knip, jscpd, coverage)\n- npm pack --dry-run --json --ignore-scripts\n- autoreview --mode local (clean)",
          "is_bot": false,
          "headline": "fix: harden payload and account state handling",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-18T07:48:43Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "294180c6824f62f4ebf659a8495c0c03ac6cfc1e",
          "body": "Why:\n- A design audit found WCAG AA contrast failures in the offline state,\n  long labels overflowing card bounds and scrolling the page, and no\n  audible feedback for login progress or account actions.\n\nWhat:\n- Constrain card titles with min-width: 0 so long labels ellipsize inside\n  the card; the \n[…]\nalues.\n\nValidation:\n- bun run check (487 tests, typecheck, knip, jscpd, coverage)\n- Live browser verification of overflow, contrast, draw cadence, toast\n  clearing, and the Chromium accessibility tree",
          "is_bot": false,
          "headline": "fix(dashboard): close audit gaps in a11y, layout, and field rendering",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-18T07:01:25Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3944b1633a2d36f76893dbe480bc969ed7943b11",
          "body": "Why:\n- Final polish pass surfaced measured WCAG AA contrast failures, motion-rule\n  violations, and geometry drift from the design system.\n\nWhat:\n- Add --ok-text/--red-text text-on-tint tokens; fix ACTIVE badge (4.04:1),\n  error panel and danger hovers (3.69:1), and login-panel link (4.01:1).\n- Repl\n[…]\ne-size.\n\nValidation:\n- bun run check (lint, typecheck, knip, tests)\n- Browser-verified every account state plus empty, offline, dialog, toast,\n  mobile, and keyboard focus against a mock state server.",
          "is_bot": false,
          "headline": "fix(dashboard): polish account console styling and a11y",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-18T05:52:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5a247a24cf6ed2aa2e02782509929914f32b9be8",
          "body": null,
          "is_bot": false,
          "headline": "fix(dashboard): raise ghost button border contrast in appbar",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-18T03:00:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b59cc42251d2552c738519e77f8551485b0b7e00",
          "body": "Why:\n- \"dashboard\" was vague about where the GUI appears; the command\n  description also omitted the gui subcommand entirely.\n\nWhat:\n- Mention gui in the /grok-cli-accounts command description.\n- Refer to the GUI as the \"browser UI\" in the description and README.\n\nValidation:\n- bun run check",
          "is_bot": false,
          "headline": "docs(accounts): describe gui subcommand as browser UI",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-17T19:15:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "18e3bc43eadd27e8c539b088cc6f63e1a5b4eed8",
          "body": null,
          "is_bot": false,
          "headline": "refactor(accounts): dispatch manage-account menu actions with switch",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-17T18:56:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "116d59c08576bf88a491e7636afe35f4d49c0116",
          "body": "Why:\n- Separate `/grok-cli-vision:on` and `:off` commands were redundant for a boolean setting.\n\nWhat:\n- Replace both with `/grok-cli-vision`, which flips enabled state and notifies ON/OFF\n- Update README and register tests to match the three-command surface\n\nValidation:\n- Not run (doc + command registration change only; tests updated in lockstep)",
          "is_bot": false,
          "headline": "feat(vision): collapse on/off into a single toggle command",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-17T18:36:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "27aecad581d8c6bb78ee0e5afc55fb5e14c0b6aa",
          "body": null,
          "is_bot": false,
          "headline": "chore: update .gitignore",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-17T17:23:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2797eb16f2e23244d21ce65ce58d8d73053dd237",
          "body": "Why:\n- Icon-only refresh button read as page reload, gauges framed quota as\n  consumption instead of remaining balance, and free-plan accounts were\n  shown a weekly row that could never resolve.\n\nWhat:\n- Label the refresh button (\"Refresh quotas\") and pulse gauges plus a\n  per-card \"Refreshing…\" lin\n[…]\n 0% gauges with \"Not available\"\n- Rename account status \"Logged in\" to \"Authenticated\"; label input\n  gets an \"Optional\" placeholder and the add dialog confirms with \"Add\"\n\nValidation:\n- bun run check",
          "is_bot": false,
          "headline": "feat(accounts): clarify dashboard quota and plan presentation",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-17T17:22:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2a633ab092856054b0bdf0c4c0ee344f11bdabc9",
          "body": "Why:\n- Turn the accounts surface into an impressive, informational single-page\n  console where the backdrop itself reports fleet state.\n\nWhat:\n- WebGL2 domain-warped FBM shader field driven by live state: aggregate\n  quota burn sets energy and palette (indigo → teal → amber), errored or\n  offline st\n[…]\nffline retry, cursor spotlight.\n\nValidation:\n- bun run check (biome, typecheck, knip, jscpd, vitest coverage)\n- Playwright: desktop/mobile/dialog/reduced-motion/offline/recovery, zero\n  console errors",
          "is_bot": false,
          "headline": "feat(accounts): rebuild dashboard as a state-driven WebGL experience",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-17T09:34:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "985415489991d2164b15e426ba181f11667903db",
          "body": null,
          "is_bot": false,
          "headline": "chore: update .gitignore",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-17T08:33:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a944b1508e33ebdd4c7ed5d5f762fa3d98e5483d",
          "body": "Why:\n- Proximity hover expressed as scale did not read on the dense, uniform card grid; cards have no room to grow.\n\nWhat:\n- Replace scale/brightness proximity with a 1px spotlight ring masked to the card border band, positioned and faded via --mx/--my/--glow custom properties.\n- The light follows t\n[…]\nefers-reduced-motion; resets when the pointer leaves the grid.\n\nValidation:\n- bun run check\n- Browser-verified against a stubbed /api/state: falloff gradient, pointer-leave reset, reduced-motion no-op",
          "is_bot": false,
          "headline": "feat(accounts): add cursor spotlight border to dashboard cards",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-17T08:22:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1f7554fc47f5a34e53d4b3f8af94e386aa57d290",
          "body": null,
          "is_bot": false,
          "headline": "fix(accounts): rename dashboard title to Pi Grok CLI",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-17T08:22:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d836d6e945b372e664c3d7185ca0706bfeac39da",
          "body": "Why:\n- Dashboard copy mixed technical strings with terse labels, leaving\n  states ambiguous (\"usable\" vs logged in, \"Token instructions\") and\n  server errors opaque (\"Dashboard request validation failed.\").\n\nWhat:\n- Rewrite user-facing dashboard copy: button labels, dialog messages,\n  empty states, \n[…]\ner; fold the 401 reopen hint into the message itself.\n- Rename the environment-account status to \"Logged in (environment)\".\n\nValidation:\n- bun run check (typecheck, knip, biome lint, 484 tests passed)",
          "is_bot": false,
          "headline": "fix(accounts): clarify dashboard copy and error messages",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-17T06:27:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4516d41a667abbc943c53b4c7f4663b408c0a5e0",
          "body": "Why:\n- The dashboard went blank on server disconnect, hid login errors\n  behind a \"no quota\" hint, and the [hidden] utility lost to component\n  display rules.\n\nWhat:\n- Keep the last good state on screen when the server is unreachable,\n  retry polling every 5s, re-render on recovery, and toast the of\n[…]\nidden] selector so it beats component display rules,\n  close the dialog on backdrop click, and label it for assistive tech.\n\nValidation:\n- bun run check (typecheck, knip, biome lint, 484 tests passed)",
          "is_bot": false,
          "headline": "fix(accounts): harden dashboard offline handling and card states",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-17T05:30:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c200f549c0ac4e211e93d9e48849500e43feb44c",
          "body": "Why:\n- Expose the local account dashboard through the accounts command and\n  share one account-mutation path between the TUI and the dashboard\n  server, completing the dashboard work started in cbc9e03.\n\nWhat:\n- Extract an AccountManager in accounts.ts that serializes mutations and\n  owns add, renam\n[…]\ne inset highlights).\n- Document the dashboard in README and SECURITY; ignore local agent\n  tooling artifacts in .gitignore.\n\nValidation:\n- bun run check (typecheck, knip, biome lint, 484 tests passed)",
          "is_bot": false,
          "headline": "feat(accounts): wire dashboard into /grok-cli-accounts gui",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-17T05:04:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cbc9e03c67355ca3b7c1760251831cb45629d712",
          "body": "Why:\n- Give users a local web UI to add, switch, rename, log in/out, and\n  monitor quota across Grok accounts instead of TUI-only flows.\n\nWhat:\n- Loopback-only server gated by a capability cookie, CSRF header, host\n  check, and strict security headers; browser navigations get an HTML\n  error page in\n[…]\nbun run typecheck\n- bun run knip\n- AGENT=1 bun run test (484 passed)\n\nNote: depends on the uncommitted account-manager changes in\nsrc/provider/accounts.ts; this does not build standalone without them.",
          "is_bot": false,
          "headline": "feat(accounts): add local account management dashboard",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-17T03:43:26Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "503789c9e98a6db299413c651e91ebf118816c7e",
          "body": null,
          "is_bot": false,
          "headline": "fix(accounts): preserve active model during removal",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-16T16:35:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "96985019d3d7f965aa0214f83b12ad1fa9bf43da",
          "body": "Why:\n- Avoid retrying recently exhausted accounts across adjacent requests while preserving sticky normal routing.\n\nWhat:\n- Keep exact-402 accounts cooling down for five minutes within the Pi session and clear health on session start or successful relogin.\n- Rank eligible fallbacks by fresh cached tightest-window quota without fetching billing data.\n- Preserve circular slots for stale, missing, invalid, or tied quota candidates.\n\nValidation:\n- bun run check (470 tests)\n- autoreview --mode local",
          "is_bot": false,
          "headline": "feat(accounts): improve exhaustion rotation",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-16T15:17:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a64de967a3a7baef835aae8bb7ab380aa0c2eef2",
          "body": "Why:\n- Keep Grok Build reasoning summaries and replay data without sending unsupported effort controls.\n\nWhat:\n- Distinguish reasoning support from configurable effort support.\n- Preserve and deduplicate encrypted reasoning capture for capable models.\n- Correct the bundled Grok Build context window to 500,000 tokens.\n\nValidation:\n- bun test tests/payload/sanitize.test.ts tests/models/catalog.test.ts\n- bun run check",
          "is_bot": false,
          "headline": "fix: preserve Grok Build reasoning",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-16T08:04:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1d3cfbfab21c7091e384153c97f73d4a1a3cbeb4",
          "body": null,
          "is_bot": false,
          "headline": "fix: isolate Grok credentials and preserve reasoning",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-16T04:24:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "17304501baf9cb533cf05215fb9d233f698e095d",
          "body": "Why:\n- Make multi-account quota state visible and refreshable without changing the active model.\n\nWhat:\n- Group extension config and caches under ~/.pi/grok-cli with verified atomic migration.\n- Add provider-keyed quota caching and in-dialog refresh for authenticated accounts.\n- Reuse the lowest free provider alias while reserving deferred active removals.\n\nValidation:\n- bun run check (467 tests)",
          "is_bot": false,
          "headline": "feat(accounts): add cached quota management",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-15T14:05:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eec75b7d41359542d2cb613c90d3c46587e2f935",
          "body": null,
          "is_bot": false,
          "headline": "feat: support multiple Grok accounts",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-15T11:17:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cd403c02f8c7e5c95dd54d35c30bd29919b8a2c2",
          "body": null,
          "is_bot": true,
          "headline": "release: v0.5.0",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-14T10:09:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ab23c1204026b2c7a2924193ae25ee87d40b88d4",
          "body": null,
          "is_bot": false,
          "headline": "docs: streamline README",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-14T10:02:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "97140336e981409b60ccc3b3ff9813398078fe6d",
          "body": "…rsor tool compatibility documentation",
          "is_bot": false,
          "headline": "docs: remove redundant motivation section and clarify model-scoped Cu…",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-14T09:20:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "332b24c5a1c482b27bbe3dd0faa2f8ecc8117729",
          "body": null,
          "is_bot": false,
          "headline": "fix: color StrReplace diff lines",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-14T08:13:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "85a00fbc2a6c52b174d90408f6d77cfbd3bd9856",
          "body": "State that only the latest published release is supported so releases\ndo not require updating SECURITY.md.",
          "is_bot": false,
          "headline": "docs(security): drop pinned supported version from policy",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-14T07:47:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "233897ec2a6cf0841b64c986ec6d50ac84e2cd58",
          "body": null,
          "is_bot": false,
          "headline": "feat: consolidate Grok CLI configuration",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-14T07:36:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8bf382814237f0acb6ce41ff07b77c573277c593",
          "body": null,
          "is_bot": false,
          "headline": "fix: keep weekly usage block visible when creditUsagePercent is omitted",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-14T07:00:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1d3deac288e53e4e0eac2a6b57e04ab2cd355e50",
          "body": null,
          "is_bot": false,
          "headline": "feat: delegate legacy tool shims to pi native tools",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-14T06:33:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "30e9b1d63e26c27211e44093c15650e5274620d2",
          "body": null,
          "is_bot": true,
          "headline": "release: v0.4.1",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-12T14:10:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "47f8bf1d218bd1b55a797eacca4ca99ed0400b3f",
          "body": null,
          "is_bot": false,
          "headline": "fix: scope Grok conversation headers",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-12T11:23:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a72a4bff6b4fa3b01b52ec50f24d95e3e575ef75",
          "body": null,
          "is_bot": false,
          "headline": "fix: make Imagine version test release-safe",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-12T03:06:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9bc97d63d03d07b050d2471b1d108a41b2288fcb",
          "body": null,
          "is_bot": true,
          "headline": "release: v0.4.0",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-12T02:11:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0f35c4438f0d488ed9bd72af9459ba91fe2c1ef5",
          "body": null,
          "is_bot": false,
          "headline": "feat: toggle Imagine tool scope",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-12T02:07:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "14cbf8a584f92bd490453b31e9337d7f05fc575b",
          "body": null,
          "is_bot": false,
          "headline": "fix: avoid repeating Imagine save paths",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-12T02:07:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9394da067d0236a34b3f59c0b59d48dcab36d690",
          "body": null,
          "is_bot": false,
          "headline": "feat: add Grok Imagine image generation",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-12T00:55:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d4542eaef3a01d726363abcddf50961d7605f814",
          "body": null,
          "is_bot": false,
          "headline": "test: expand coverage for failure paths",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-11T17:20:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b68593b42d757f0aaa7f8c3ec0ef53e566f3e00c",
          "body": null,
          "is_bot": false,
          "headline": "feat: improve Grok Build authentication and integrations",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-11T15:51:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "09178ab02ecec7bc36dc40f8032c2bfdc6c36328",
          "body": null,
          "is_bot": false,
          "headline": "docs: improve README positioning and guidance",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-11T07:42:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aba60629ae5a25fefe93f678466790487862b03f",
          "body": null,
          "is_bot": true,
          "headline": "release: v0.3.4",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-11T01:37:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "49505d31dfd2b7feee1427a882ed84fd7772caa9",
          "body": null,
          "is_bot": false,
          "headline": "refactor: stabilize billing reset formatting",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-11T01:35:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5bdc1aef1ae56ac638af92bcdbbbbc8997b85b94",
          "body": "feat: show billing reset times in the user's timezone",
          "is_bot": false,
          "headline": "Merge pull request #5 from setkyar/feat/local-usage-timezone",
          "author_name": "J Liew",
          "author_login": "kenryu42",
          "committed_at": "2026-07-11T01:30:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "043689a23741769043f7658be618445608469b9b",
          "body": null,
          "is_bot": false,
          "headline": "test: cover local billing reset formatting",
          "author_name": "setkyar",
          "author_login": "setkyar",
          "committed_at": "2026-07-10T19:18:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "de815337ecd61b0c594eb0949319543211ff6742",
          "body": null,
          "is_bot": false,
          "headline": "feat: show usage reset in local timezone",
          "author_name": "setkyar",
          "author_login": "setkyar",
          "committed_at": "2026-07-10T18:58:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "52b46758f6fb73dd824555cb3ea61be01ea1e000",
          "body": null,
          "is_bot": true,
          "headline": "release: v0.3.3",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-10T17:15:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b35d1052cc7c7bb0cf2682ea70274ad48d3fc335",
          "body": null,
          "is_bot": false,
          "headline": "fix: load web search delegate through Pi",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-10T17:13:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "48b0e0b8792ec8f654141bf5a781ad976ef9c7a3",
          "body": null,
          "is_bot": true,
          "headline": "release: v0.3.2",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-09T07:28:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3e26d98829c939fe008652886db18194f97807e7",
          "body": null,
          "is_bot": false,
          "headline": "refactor: update login method labels for clarity in CLI and tests",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-09T07:22:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a1b861689f7ab26cac5935ff2977a96c2dfd4d85",
          "body": "Fetch /v1/billing?format=credits alongside the monthly endpoint and render\na Weekly block (percentage used + reset time) below the existing Monthly\nblock. Weekly is best-effort: if the credits endpoint fails or the account\nis not on weekly billing, only Monthly is shown. Reset times now use\nDST-correct America/Los_Angeles formatting instead of the fixed -8h offset.",
          "is_bot": false,
          "headline": "feat: add weekly usage limit to grok-cli-usage command",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-09T07:17:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7d380e39eda5b1d21271aa175c77ca16c74b9bad",
          "body": null,
          "is_bot": false,
          "headline": "docs: add grok-4.5 to model documentation and capability lists",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-09T02:02:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "03b67fa14dd04b8b4e35be819c48d3959f025d60",
          "body": "…n CI workflow",
          "is_bot": false,
          "headline": "refactor: replace backtick command substitutions with $(...) syntax i…",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-09T00:44:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3304bbf4f444c8c92a74aa2f45e07ecc6ebc9b55",
          "body": null,
          "is_bot": true,
          "headline": "release: v0.3.1",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-09T00:32:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e34956c6f4931f0eafdb9524386d6759296d07a5",
          "body": "npm install -g npm@latest corrupts npm's bundled node_modules on the GH\nrunner, dropping sigstore (required by libnpmpublish provenance), causing\n\"Cannot find module 'sigstore'\". Node 24's bundled npm already supports\nOIDC trusted publishing, so the upgrade is unnecessary.",
          "is_bot": false,
          "headline": "fix(ci): drop npm self-upgrade that broke sigstore provenance publish",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-09T00:25:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "53625e1c569d8fd97459999cd22c6592d6c97509",
          "body": null,
          "is_bot": false,
          "headline": "feat: add support for Grok 4.5 and update client version to 0.2.91",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-07-08T22:23:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2016850cc0d69add5b27ef0abbd7ccc4b052c3a4",
          "body": null,
          "is_bot": true,
          "headline": "release: v0.3.0",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-30T19:38:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ca33ee63cf89fb58e374b54f4f10db90968f1fae",
          "body": "Composer vision",
          "is_bot": false,
          "headline": "Merge pull request #4 from kenryu42/composer-vision",
          "author_name": "J Liew",
          "author_login": "kenryu42",
          "committed_at": "2026-06-30T19:35:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "29699dbb9071af45c3edeb5714164d31f9293f59",
          "body": null,
          "is_bot": false,
          "headline": "Serialize vision cache updates",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-06-30T19:34:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1e41329945c41c66f96157818d439db12cb62359",
          "body": null,
          "is_bot": false,
          "headline": "Preserve text in mixed vision read results",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-06-30T19:28:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "14205b2e02a948397bbc9acc3d5e31ad639fa8af",
          "body": "… workspace path restriction logic",
          "is_bot": false,
          "headline": "refactor: extract Read tool into standalone implementation and remove…",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-06-30T18:40:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "00d999052adb775a0f3dd2215044e627f6cc5ec6",
          "body": "…ith caching and auto-routing support",
          "is_bot": false,
          "headline": "feat: implement vision capability to describe images via grok-build w…",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-06-30T16:39:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0acf94006bd485123595495ea5b4f6e125a898cc",
          "body": "…efresh documentation",
          "is_bot": false,
          "headline": "feat: update model catalog with 4.20 variants, add input types, and r…",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-06-30T13:51:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0dc887493ce2919d7fa4b4320c0569ba43554f52",
          "body": null,
          "is_bot": true,
          "headline": "release: v0.2.0",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-30T09:56:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "51357c330b955d94da5088a7b8ad053702732f4b",
          "body": "Add device code login for SSH/headless setup",
          "is_bot": false,
          "headline": "Merge pull request #3 from setkyar/add-device-code-login",
          "author_name": "J Liew",
          "author_login": "kenryu42",
          "committed_at": "2026-06-30T09:54:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ecbe009b6532cd5e361d0dd675964e95b82ee5b0",
          "body": null,
          "is_bot": false,
          "headline": "Address device login review feedback",
          "author_name": "setkyar",
          "author_login": "setkyar",
          "committed_at": "2026-06-30T08:47:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bc4c4dcef3a3444f8b5c0a7b71c8f1f8cb7d190f",
          "body": null,
          "is_bot": false,
          "headline": "Add xAI device code login",
          "author_name": "setkyar",
          "author_login": "setkyar",
          "committed_at": "2026-06-30T08:38:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d00725e7430a3859066f76b89a0c2753920861fa",
          "body": null,
          "is_bot": true,
          "headline": "release: v0.1.7",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-22T01:56:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "48e4ed342330fd0a4e12506d4175f1bfd18e79ee",
          "body": "Continuation turns after tool calls failed with HTTP 426\n\"version (none)\". pi-ai's built-in openai-responses provider registers\nlazily on first use and overwrites our custom streamSimple in the\nAPI-provider registry, so the gate headers (User-Agent,\nx-grok-client-*) only reached the server on turn 1\n[…]\nference\nimplementation that is known-working against the endpoint:\n- User-Agent: grok-pager/<v> grok-shell/<v> (macos; aarch64)\n- x-grok-client-identifier: grok-pager\n- version bumped 0.2.16 -> 0.2.22",
          "is_bot": false,
          "headline": "fix: send grok client headers on every turn via model.headers",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-06-22T01:52:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "57c0e965bc4a73faebbb90a6c5fae84531ed5a79",
          "body": null,
          "is_bot": true,
          "headline": "release: v0.1.6",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-05T05:22:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f614a2466403fb07f0d595902da2a66ce7232e13",
          "body": "…ions, and improve test type safety",
          "is_bot": false,
          "headline": "refactor: update type checking configuration, streamline UI notificat…",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-06-05T05:12:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "34910d430286407e67b2d8471d870127f486571f",
          "body": "…module references",
          "is_bot": false,
          "headline": "refactor: rename status command to usage and update internal billing …",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-06-05T05:12:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "38ec1b64cca60ba716ae859fe8cc15737bc5822c",
          "body": "…g module dependencies",
          "is_bot": false,
          "headline": "refactor: replace status command with usage command and update billin…",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-06-05T05:12:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "efec09e3453c463b0f11c3ba576984b1ea41def3",
          "body": null,
          "is_bot": true,
          "headline": "release: v0.1.5",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-04T18:43:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "087c201546a8b92edfb1c39e66a923162a0038e3",
          "body": "…billing usage via `/usage` command",
          "is_bot": false,
          "headline": "fix: replace model-specific quota caching with centralized real-time …",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-06-04T18:40:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9e511f506f7107e883d2bd544754933fcd53f230",
          "body": null,
          "is_bot": true,
          "headline": "release: v0.1.4",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-03T08:47:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e57ffb4cdc2282293a784a3d996479ba370eaaab",
          "body": null,
          "is_bot": false,
          "headline": "fix: declare web search runtime dependencies",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-06-03T08:45:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "38d3d538d28790ecd9fc396c4cea2a7a6bcfd6bd",
          "body": null,
          "is_bot": true,
          "headline": "release: v0.1.3",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-03T08:30:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "93da6e6a1142fe0975629c9711604e6aec4df499",
          "body": "feat: add web search tool for grok models",
          "is_bot": false,
          "headline": "Merge pull request #2 from kenryu42/web-search-tool-for-grok",
          "author_name": "J Liew",
          "author_login": "kenryu42",
          "committed_at": "2026-06-03T08:28:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "72419299fc5040388056780a38baedf9890625ba",
          "body": null,
          "is_bot": false,
          "headline": "fix(shell): include termination signal in timeout error details",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-06-03T08:23:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6fb4aa9ae0bc0e6a0d8f3ca0151920e0ef42b420",
          "body": null,
          "is_bot": false,
          "headline": "fix(webSearch): ignore stale delegate loads after session rebind",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-06-03T08:23:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "401a2c5ac56c8219adb9d44a5e9f60e296b8c663",
          "body": null,
          "is_bot": false,
          "headline": "fix(provider): restore suppressed tools after grok provider round-trip",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-06-03T08:23:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dd079604b0ec6aca24b2518b1084c2b9e2dbd14a",
          "body": null,
          "is_bot": false,
          "headline": "fix(webSearch): normalize query params before delegation",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-06-03T08:23:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8ffc70a5e1c3a74ff84fdadd123973c427432ae3",
          "body": null,
          "is_bot": false,
          "headline": "fix: make web search delegate loading resilient",
          "author_name": "J Liew",
          "author_login": "kenryu42",
          "committed_at": "2026-06-03T08:07:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b2eb29ce964347d2235344ae173a51f1b0c863c0",
          "body": "- webSearch.ts: 47% → 100% (renderCall/renderResult branches, tool_call interceptor)\n- sanitize.ts: 91% → 96% (.jpg, file:// protocol, unsupported ext, string output parts)\n- rendering.ts: 91% → 95% (globToRegExp wildcards, grep fallback path include)\n- search.ts: 91% → 93% (sort tiebreaker, grep fallback with path include)\n- shell.ts: added timeout kill test\n- webSearchDelegate.ts: added bind/ensure/getLoadError tests",
          "is_bot": false,
          "headline": "chore: improve test coverage from 80% to 85% (+27 tests)",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-06-03T07:48:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7a4a128139126850fd8cf5ec0e09830f10a22765",
          "body": null,
          "is_bot": false,
          "headline": "docs: describe WebSearch and pi-web-access tool behavior",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-06-03T07:32:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "565cd5b89c9e7c3d89f78d84d6b237a6682dc182",
          "body": "Register WebSearch when pi-web-access is optional-installed, delegate to\nits web_search tool, and reconcile active tools so grok-cli uses WebSearch\ninstead of web_search. Bind the delegate on session_start.",
          "is_bot": false,
          "headline": "feat: add WebSearch shim and suppress web_search for grok-cli",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-06-03T07:32:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e3c7490bfa6d6621a646f214a4ced48b7b35de96",
          "body": null,
          "is_bot": false,
          "headline": "test: cover WebSearch registration, delegate, and grok tool scope",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-06-03T07:32:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dd0ae3b1ca1da6b0a34e4ab52b5bc0818d967532",
          "body": null,
          "is_bot": true,
          "headline": "release: v0.1.2",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-06-02T19:11:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fd11cf76f5713ab705f7d2f5bb0a452450d2ad4f",
          "body": "feat: add cursor native tools",
          "is_bot": false,
          "headline": "Merge pull request #1 from kenryu42/cursor-native-tools",
          "author_name": "J Liew",
          "author_login": "kenryu42",
          "committed_at": "2026-06-02T19:09:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "381868e5c2ef81c461eeca4e34519c562ace7faa",
          "body": null,
          "is_bot": false,
          "headline": "fix: make glob sorting resilient to deleted files",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-06-02T19:05:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eb1f664ea3844ab6334ae898f1782d87b46101c3",
          "body": null,
          "is_bot": false,
          "headline": "Fix portable grep fallback",
          "author_name": "kenryu42",
          "author_login": "kenryu42",
          "committed_at": "2026-06-02T18:54:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 18,
      "commits_last_year": 129,
      "latest_release_at": "2026-07-18T12:04:03Z",
      "latest_release_tag": "v0.6.0",
      "releases_from_tags": false,
      "days_since_last_push": 5,
      "active_weeks_last_year": 7,
      "days_since_latest_release": 5,
      "mean_days_between_releases": 2
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 57,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "pi-grok-cli",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "pi-package",
            "pi-extension",
            "xai",
            "grok",
            "grok-cli",
            "oauth",
            "xai-oauth",
            "vision",
            "multimodal"
          ],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/pi-grok-cli",
          "is_deprecated": false,
          "latest_version": "0.6.0",
          "repository_url": "https://github.com/kenryu42/pi-grok-cli",
          "versions_count": 18,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 2291,
          "first_published_at": "2026-06-02T04:38:16.466000Z",
          "latest_published_at": "2026-07-18T12:04:02.597000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 5
        }
      ]
    },
    "popularity": {
      "forks": 4,
      "stars": 22,
      "watchers": 1,
      "fork_history": {
        "days": [
          {
            "date": "2026-06-30",
            "count": 1
          },
          {
            "date": "2026-07-07",
            "count": 2
          },
          {
            "date": "2026-07-16",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 4,
        "total_forks": 4
      },
      "star_history": null,
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "tsconfig.json"
      ],
      "toolchain_manifests": [],
      "largest_source_bytes": 38271,
      "source_files_sampled": 82,
      "oversized_source_files": 0,
      "agent_instruction_files": [
        "AGENTS.md",
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 2190
    },
    "dependencies": {
      "manifests": [
        "package.json"
      ],
      "advisories": {
        "error": null,
        "scope": null,
        "source": null,
        "findings": [],
        "collected": false,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 0,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm"
      ],
      "dependencies": [
        {
          "name": "ignore",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "7.0.5"
        },
        {
          "name": "minimatch",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "10.2.5"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 6,
        "open_issues": 0,
        "closed_ratio": 1,
        "closed_issues": 2,
        "closed_unmerged_prs": 2
      },
      "bus_factor": 1,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "kenryu42",
          "commits": 108,
          "avatar_url": "https://avatars.githubusercontent.com/u/61741059?v=4"
        },
        {
          "type": "User",
          "login": "setkyar",
          "commits": 4,
          "avatar_url": "https://avatars.githubusercontent.com/u/4435358?v=4"
        }
      ],
      "contributors_sampled": 2,
      "top_contributor_share": 0.964
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "lint-github-action-workflows.yml",
        "publish.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [
        "biome.json"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "1 out of 1 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/3 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 0,
            "reason": "project has 0 contributing companies or organizations -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": null,
            "reason": "internal error: vulnerabilitiesClient.ListUnfixedVulnerabilities: osvscanner.DoScan: client error: status=\"400 Bad Request\" body={\"code\":3,\"message\":\"error in query at index 367: rpc error: code = InvalidArgument desc = invalid hash\"}",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "5a2cbd812d8b6237316faf7193cac00c5fea81bf",
        "ran_at": "2026-07-23T19:45:31Z",
        "aggregate_score": 3.2,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-18T16:13:40Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-07-18T12:01:05Z",
      "ci_last_conclusion": null,
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/kenryu42/pi-grok-cli",
    "host": "github.com",
    "name": "pi-grok-cli",
    "owner": "kenryu42"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 59,
      "inputs": {
        "security": 32,
        "vitality": 75,
        "community": 42,
        "governance": 58,
        "engineering": 80
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 75,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 59,
            "inputs": {
              "commits_last_year": 129,
              "human_commit_share": 0.84,
              "days_since_last_push": 5,
              "active_weeks_last_year": 7
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "7/52 weeks with commits",
                "points": 4.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 7
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "129 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 129
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "releases_count": 18,
              "latest_release_tag": "v0.6.0",
              "releases_from_tags": false,
              "days_since_latest_release": 5,
              "mean_days_between_releases": 2
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "18 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 18
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~2 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 2
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 42,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 25,
            "inputs": {
              "forks": 4,
              "stars": 22,
              "watchers": 1,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "22 stars",
                "points": 21.4,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 22
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "4 forks",
                "points": 4,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "1 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 56,
            "inputs": {
              "packages": [
                "pi-grok-cli"
              ],
              "dependents": null,
              "ecosystems": "npm",
              "total_downloads": null,
              "monthly_downloads": 2291
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "2,291 downloads/month across npm",
                "points": 44.8,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 2291,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 58,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 12,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 2,
              "top_contributor_share": 0.964
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 96% of commits",
                "points": 0.8,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 96
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "2 contributors",
                "points": 2.7,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 76,
            "inputs": {
              "merged_prs": 6,
              "open_issues": 0,
              "closed_issues": 2,
              "issue_closed_ratio": 1,
              "closed_unmerged_prs": 2
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "100% of issues closed",
                "points": 46.8,
                "status": "met",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "6/8 decided PRs merged",
                "points": 28.7,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 6,
                      "decided": 8
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/3 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 60,
            "inputs": {
              "followers": 68,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "kenryu42",
              "public_repos": 145,
              "account_age_days": 2333
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "68 followers of kenryu42",
                "points": 13.2,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 68,
                      "login": "kenryu42"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "145 public repos, account ~6 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 145
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 6
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "pi-grok-cli"
              ],
              "ecosystems": "npm",
              "any_deprecated": false,
              "min_days_since_publish": 5
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 5 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "18 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 18
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 80,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "good",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 84,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "3 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": "biome.json",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "biome.json"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "1 out of 1 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "good",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "topics": [
                "grok",
                "grok-build-cli",
                "pi-extension",
                "xai",
                "composer-2p5",
                "grok-build",
                "grok-4-5",
                "grok-cli",
                "oauth",
                "pi-coding-agent",
                "multimodal",
                "vision"
              ],
              "has_wiki": true,
              "homepage": "https://pi.dev/packages/pi-grok-cli",
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://pi.dev/packages/pi-grok-cli",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "12 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 12
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 32,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases, Vulnerabilities. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging",
                    "signed_releases",
                    "vulnerabilities"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 32,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 15,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 3,
              "scorecard_aggregate": 3.2
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "1 out of 1 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/3 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "internal error: vulnerabilitiesClient.ListUnfixedVulnerabilities: osvscanner.DoScan: client error: status=\"400 Bad Request\" body={\"code\":3,\"message\":\"error in query at index 367: rpc error: code = InvalidArgument desc = invalid hash\"}",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 4
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 68,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.94,
              "agent_instruction_files": [
                "AGENTS.md",
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 2190
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "AGENTS.md, CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "AGENTS.md, CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "79 of 84 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 79,
                      "sampled": 84
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "at_risk",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 44,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [
                "tsconfig.json"
              ],
              "agent_commit_share": 0,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": "biome.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "biome.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "TypeScript",
              "largest_source_bytes": 38271,
              "source_files_sampled": 82,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "TypeScript (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "TypeScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/82 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 82,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
    "deps.dev does not index npm:pi-grok-cli@0.6.0; advisories assessed against the repository dependency graph instead"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-23T19:45:45.911709Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/k/kenryu42/pi-grok-cli.svg",
  "full_name": "kenryu42/pi-grok-cli",
  "license_state": "standard",
  "license_spdx": "MIT"
}

Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.

Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.

How one result sits in the wider record: aggregate statisticsnpm.