marimo-team/codemirror-sql holds a health index of 81 out of 100, placing it in the Excellent band. It scores highest on Vitality (89/100) and lowest on Community & Adoption (56/100). It was last updated today. A single contributor accounts for most of its recent work.
81
overall / 100
Excellent
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.
81
Exceptional93-100The record's top tier (≈ top 5%); essentially all checked criteria met
Excellent80-92Strong across the board; minor gaps
Good65-79Healthy; gaps are limited and manageable
Moderate50-64Acceptable with notable gaps; review recommended
Weak35-49Material weaknesses across several areas
At Risk20-34Significant weaknesses; adoption warrants caution
Critical1-19Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
The weighted overall 69 is calibrated to 81 on the published index scale (record calibration 2026-08-02).
Direct dependencies free of known advisories — no direct dependency carries a known advisory
25/25
Indirect dependencies free of known advisories — no indirect dependency carries a known advisory
0/40
No advisories left outstanding — no advisory carries a publication date
Inputs used
source
osv
advisories
0
affected_packages
0
assessed_packages
3
unassessed_packages
0
affected_by_severity
none
direct_affected_packages
0
Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:@marimo-team/codemirror-sql@0.3.0 runtime dependency closure — what installing the published package pulls in — 3 packages. Reachability is not analyzed.
How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.
Manageable file sizes — 0/53 source files over 60KB
Inputs used
primary_language
TypeScript
largest_source_bytes
40,147
source_files_sampled
53
oversized_source_files
0
Key facts
17GitHub stars
4contributors
137commits, last 12 months
0days since last push
11releases
1bus factor
2open issues
npmpackage ecosystems
Data collection warnings
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
Star and fork history 0 ★ / 3 ⇿
0Stars
3Forks
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
OpenSSF Scorecard 6.0 / 10
6.0aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-08-03 00:07 UTC
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Dependency advisories 0
Installing npm:@marimo-team/codemirror-sql@0.3.0 pulls in 3 packages, direct and transitive: 0 carry known advisories, of which 0 are direct dependencies.
No known advisories affect the assessed dependencies.
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"codemirror",
"codemirror-extension",
"sql"
],
"is_fork": false,
"size_kb": 1548,
"has_wiki": false,
"homepage": "https://marimo-team.github.io/codemirror-sql/",
"languages": {
"Python": 9739,
"TypeScript": 464283
},
"pushed_at": "2026-08-02T18:12:55Z",
"created_at": "2025-07-31T02:26:19Z",
"owner_type": "Organization",
"updated_at": "2026-07-24T14:38:48Z",
"description": "A CodeMirror extension for SQL linting, hover, and completions. With support for DuckDB and BigQuery",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript"
]
},
"owner": {
"blog": "https://marimo.io/",
"name": "marimo",
"type": "Organization",
"login": "marimo-team",
"company": null,
"location": null,
"followers": 622,
"avatar_url": "https://avatars.githubusercontent.com/u/98563464?v=4",
"created_at": "2022-01-27T23:44:55Z",
"is_verified": null,
"public_repos": 51,
"account_age_days": 1648
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2026-07-23T20:41:36Z"
},
{
"tag": "v0.2.8",
"kind": "patch",
"published_at": "2026-06-08T16:05:37Z"
},
{
"tag": "v0.2.7",
"kind": "patch",
"published_at": "2026-06-08T15:20:14Z"
},
{
"tag": "v0.2.4",
"kind": "patch",
"published_at": "2025-10-15T13:37:07Z"
},
{
"tag": "v0.2.3",
"kind": "patch",
"published_at": "2025-09-25T16:00:36Z"
},
{
"tag": "v0.2.1",
"kind": "patch",
"published_at": "2025-08-25T16:14:35Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2025-08-25T15:00:03Z"
},
{
"tag": "v0.1.3",
"kind": "patch",
"published_at": "2025-08-10T22:42:11Z"
},
{
"tag": "v0.1.2",
"kind": "patch",
"published_at": "2025-08-08T16:12:59Z"
},
{
"tag": "v0.1.1",
"kind": "patch",
"published_at": "2025-07-31T19:32:50Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2025-07-31T02:30:34Z"
}
],
"recent_commits": [
{
"oid": "ca192000e6717ed833a550b257139860cb901387",
"body": null,
"is_bot": false,
"headline": "chore: release v0.3.0",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-23T20:40:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "22252fb3910ac3fe00b4a8aa3e7bb5cf2ccc7c8a",
"body": "## Summary\nBroadens unit-test coverage and reduces test boilerplate.\n\nUnit suite (excludes browser-covered `navigation-extension`):\n\n| Metric | Before | After |\n|---|---|---|\n| Statements | 89.1% | **91.6%** |\n| Branches | 81.2% | **85.9%** |\n| Lines | 89.0% | **91.5%** |\n| Tests | 471 | **587** (+1\n[…]\nubic.dev/buttons/review-in-cubic-light.svg\"><img\nalt=\"Review in cubic\"\nsrc=\"https://www.cubic.dev/buttons/review-in-cubic-dark.svg\"></picture></a>\n\n<!-- End of auto-generated description by cubic. -->",
"is_bot": false,
"headline": "test: expand edge-case coverage and DRY up test helpers (#168)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-23T19:09:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "68ecb204a42409569671ea2127abd4c2c943ee10",
"body": "… (#167)\n\n## What\n\nRegistering the SQL completion sources had gotten unwieldy — each of the\nthree schema-aware sources required its own `dialect.language.data.of({\nautocomplete })` call:\n\n```ts\ndialect.language.data.of({ autocomplete: createCteCompletionSource({ parser }) }),\ndialect.language.data.o\n[…]\nubic.dev/buttons/review-in-cubic-light.svg\"><img\nalt=\"Review in cubic\"\nsrc=\"https://www.cubic.dev/buttons/review-in-cubic-dark.svg\"></picture></a>\n\n<!-- End of auto-generated description by cubic. -->",
"is_bot": false,
"headline": "feat: sqlCompletion helper to register all completion sources at once…",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-23T18:39:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "991e53ac8aa19928d1fb57c9faad3432794d8b2a",
"body": "## Summary\n\nTyping a bare identifier prefix now completes columns of the tables\nreferenced in the current statement's `FROM`/`JOIN` clauses — even when\nthe schema defines many tables:\n\n```sql\nSELECT id, name, email\nFROM users\nWHERE active = true\nORDER BY created_at DESC;\n```\n\n`SELECT e` → `email`, `\n[…]\nubic.dev/buttons/review-in-cubic-light.svg\"><img\nalt=\"Review in cubic\"\nsrc=\"https://www.cubic.dev/buttons/review-in-cubic-dark.svg\"></picture></a>\n\n<!-- End of auto-generated description by cubic. -->",
"is_bot": false,
"headline": "feat: unqualified column completion inferred from the FROM clause (#165)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-23T18:32:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2df4518064904a2528511f4bf9d0d9ed69884561",
"body": "…, rename (#166)\n\n## Summary\n\nAdds the classic LSP trio for statement-local SQL identifiers —\ngo-to-definition, document highlights, and rename — and rewrites CTE\ncompletion on top of `QueryContext` (#164). All analyses are purely\nlocal; no schema required.\n\n### CTE completion (`cteCompletionSource`\n[…]\nubic.dev/buttons/review-in-cubic-light.svg\"><img\nalt=\"Review in cubic\"\nsrc=\"https://www.cubic.dev/buttons/review-in-cubic-dark.svg\"></picture></a>\n\n<!-- End of auto-generated description by cubic. -->",
"is_bot": false,
"headline": "feat: AST-based CTE support: completion, go-to-definition, highlights…",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-23T18:29:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2ef198ccd9fddd530f28f76159941ee2c52a6d85",
"body": "## Summary\n\nNothing in the extension previously understood table aliases: in `SELECT\nu.name FROM users u`, hovering `u` or `u.name` found nothing, and there\nwas no alias-qualified column completion. This PR adds a shared,\nstatement-scoped alias/CTE analysis and uses it in hover and a new\ncompletion \n[…]\nubic.dev/buttons/review-in-cubic-light.svg\"><img\nalt=\"Review in cubic\"\nsrc=\"https://www.cubic.dev/buttons/review-in-cubic-dark.svg\"></picture></a>\n\n<!-- End of auto-generated description by cubic. -->",
"is_bot": false,
"headline": "feat: alias resolution for hover and completion (#164)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-23T17:28:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e690b8d370594f104b27d4eafd83f5fda8b37c83",
"body": "…guous columns) (#163)\n\n## Summary\n\nLinting was syntax-only, even though the extension already accepts a\nfull `SQLNamespace` schema (used by hover). This adds\n**`sqlSemanticLinter`**, a schema-aware linter that reports the\nhighest-value SQL diagnostics:\n\n- **Unknown table** — `FROM`/`JOIN` reference\n[…]\nubic.dev/buttons/review-in-cubic-light.svg\"><img\nalt=\"Review in cubic\"\nsrc=\"https://www.cubic.dev/buttons/review-in-cubic-dark.svg\"></picture></a>\n\n<!-- End of auto-generated description by cubic. -->",
"is_bot": false,
"headline": "feat: schema-aware semantic diagnostics (unknown tables/columns, ambi…",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-23T15:42:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "575c72eb5b65c09e762ca6d8be9a4a3e7fc27c07",
"body": "Parse the original statement text (comments included) instead of the\ncomment-stripped version. node-sql-parser handles comments natively and\nreports positions relative to the original text, so stripping comments\nbefore parsing shifted error lines/columns in the document.\n\n\n<!-- This is an auto-gener\n[…]\nubic.dev/buttons/review-in-cubic-light.svg\"><img\nalt=\"Review in cubic\"\nsrc=\"https://www.cubic.dev/buttons/review-in-cubic-dark.svg\"></picture></a>\n\n<!-- End of auto-generated description by cubic. -->",
"is_bot": false,
"headline": "fix: lint diagnostics offset when statements contain comments (#162)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-23T15:16:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "428d0fb6e202d5da377086fbe5769c701ee6624e",
"body": "This PR contains the following updates:\n\n| Package | Change |\n[Age](https://docs.renovatebot.com/merge-confidence/) |\n[Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n| [typescript](https://www.typescriptlang.org/)\n([source](https://redirect.github.com/microsoft/TypeS\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4yNDIuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI0Mi4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency typescript to v7 (#153)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-23T13:50:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8aad5c5e30fd6fb072270b5c8aa2006b544ca00a",
"body": "- sqlLinter now lints each statement via SqlStructureAnalyzer, reporting\nerrors for every broken statement instead of only the first parse\nfailure\n- SqlStatement carries parse errors so the linter reuses the analyzer's\n per-statement parse (no double-parsing; cached by content)\n- Diagnostic spans widen to cover the offending token instead of one\nchar\n- New SqlLinterConfig options: perStatement (default true) and\n structureAnalyzer (share an instance to reuse its cache)",
"is_bot": false,
"headline": "feat: per-statement linting with token-wide error spans (#161)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-23T13:50:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "471028c82b13499a8a3f1835a0d2ea254844d5f5",
"body": "… (#160)\n\nRaise line coverage 73% -> 93% and branch coverage 63% -> 83%.\n\n- Extract computeMarkerStyle from SqlGutterMarker.toDOM so the marker\n color/opacity branches can be unit-tested without an EditorView\n- Add hover-render tests covering the tooltip HTML builders and the\n tooltip create() path (hover.ts 30% -> 97%)\n- Add extractColumnReferences tests for the parser\n- Cover remaining namespace-utils branches (root self/children\n traversal, maxDepth cutoff, self-label matching)",
"is_bot": false,
"headline": "test: improve coverage for hover, gutter, parser, and namespace utils…",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-23T13:35:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b148dd63b617c1aa80f7fd9264e167c55bd31fa",
"body": "…TE completion (#159)\n\n- structure-analyzer: key the statement cache on document content\ninstead of\na lossy 32-bit hash that could collide and return another document's\nstatements\n- namespace-utils: allow tables literally named \"self\"; only treat\nobjects with\n a Completion-shaped self tag and child\n[…]\nxplicit inactiveOpacity of 0\n- cte-completion-source: scan CTE bodies with balanced parentheses so\nCTEs\n after function calls or subqueries are completed; support column lists\n (WITH a(x, y) AS ...)",
"is_bot": false,
"headline": "fix: correctness bugs in analyzer cache, hover, parser, gutter, and C…",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-23T13:20:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "59ab9bb7880b2341d170763829c0d7d0371eb98f",
"body": "This PR contains the following updates:\n\n| Package | Change |\n[Age](https://docs.renovatebot.com/merge-confidence/) |\n[Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n| [playwright](https://playwright.dev)\n([source](https://redirect.github.com/microsoft/playwright)) |\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4yMzEuMSIsInVwZGF0ZWRJblZlciI6IjQzLjI0Mi4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency playwright to v1.61.1 (#150)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-23T13:20:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "06f246f9439c39a23c4da97b115d8a62142d304a",
"body": "This PR contains the following updates:\n\n| Package | Type | Update | Change | OpenSSF |\n|---|---|---|---|---|\n| [actions/checkout](https://redirect.github.com/actions/checkout) |\naction | major | `v6` → `v7` | [![OpenSSF\nScorecard](https://api.securityscorecards.dev/projects/github.com/actions/check\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4yMzEuMSIsInVwZGF0ZWRJblZlciI6IjQzLjI3Mi40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update actions/checkout action to v7 (#151)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-23T13:19:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cc318b4697a3535a9d2e34e5aa173285e4c6a4b2",
"body": "This PR contains the following updates:\n\n| Update | Change |\n|---|---|\n| lockFileMaintenance | All locks refreshed |\n\n🔧 This Pull Request updates lock files to use the latest dependency\nversions.\n\n---\n\n### Configuration\n\n📅 **Schedule**: (UTC)\n\n- Branch creation\n - \"before 5am on the first day of th\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4yNDIuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI0Mi4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): lock file maintenance (#152)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-23T13:19:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "922b3c5521d755a57f3b6fa8f7fbc0a84fcfd0c6",
"body": "This PR contains the following updates:\n\n| Package | Type | Update | Change | OpenSSF |\n|---|---|---|---|---|\n| [actions/setup-node](https://redirect.github.com/actions/setup-node) |\naction | major | `v6` → `v7` | [![OpenSSF\nScorecard](https://api.securityscorecards.dev/projects/github.com/actions/s\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4yNTkuMiIsInVwZGF0ZWRJblZlciI6IjQzLjI3Mi40IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update actions/setup-node action to v7 (#154)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-07-23T13:19:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "da15ca1250b3fc69a8832e36aa3148a2c28d91a3",
"body": "This adds a minimal AGENTS.md as the canonical agent-context doc, with\nCLAUDE.md as a symlink to it so both the AGENTS.md and CLAUDE.md tool\necosystems resolve the same file. The content is deliberately minimal —\na one-line overview plus verified development commands — since these\nfiles load into every agent context, so every line is a recurring token\ncost. Part of the marimo-team engineering-excellence initiative to give\nagents accurate, low-overhead repo context.",
"is_bot": false,
"headline": "docs: add AGENTS.md with CLAUDE.md symlink (#158)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-23T13:19:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1176517e34401831498cb351fabe826d94c8f2f7",
"body": "## What this does\n\nAdds an `autofix.ci` workflow that automatically **pushes** lint fixes\nonto pull requests. When a contributor opens or updates a PR, the\nworkflow runs the repo's mutating fixer (`pnpm run lint`, i.e. `oxlint\n--fix`) and, via the [autofix.ci](https://autofix.ci) GitHub App,\ncommits\n[…]\ne` is exactly `autofix.ci` (required — the service\nidentifies the workflow by name for security) and the\n`autofix-ci/action` step runs last.\n\nPart of the marimo-team engineering-excellence initiative.",
"is_bot": false,
"headline": "ci: add autofix.ci (#157)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-22T17:45:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7481621feb5452b7a788e4ac12122365cf628e61",
"body": "## What changed\n\n- **Lint in CI**: added a plain `pnpm exec oxlint` step to the `test`\njob. The existing `lint` script is `oxlint --fix` (mutating), so CI runs\nthe non-mutating variant. There is no oxlint config file, which is fine\n— oxlint applies its defaults.\n- **Coverage config** (`vite.config.t\n[…]\ned and `coverage/` is\ngitignored.\n\nNo mechanical source fixes were required. Part of the marimo-team\nengineering-excellence initiative to make existing-but-unenforced\nquality gates actually run in CI.",
"is_bot": false,
"headline": "ci: enforce lint and report coverage on PRs (#156)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-22T14:37:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "749da922b383cede131399baa1791d2151a51eaf",
"body": "Sets each workflow's top-level `permissions:` to `{}` (deny-all) and\nmoves the previously top-level grants into the specific jobs that\ninherited them. **Effective permissions are unchanged for every job** —\nthis just makes the grants explicit per job so a newly-added job can't\nsilently inherit broad\n[…]\ntill parse; per-job effective scopes identical). Workflows whose jobs\ninherit the org default are left untouched for a manual per-job pass.\n\n_Flagged by github-maintenance Workflow Permissions Audit._",
"is_bot": false,
"headline": "ci: adopt deny-all top-level workflow permissions (#155)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-07-14T20:52:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bdd67d1eb574d5c2e29966687e2c2c1c557cb888",
"body": null,
"is_bot": false,
"headline": "chore: release v0.2.8",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-06-08T16:04:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3a0447244707ad7f852b693c60a3d2fdec32490d",
"body": "Since v0.2.5 the published npm tarball has been missing\n`src/data/common-keywords.json` and `src/data/duckdb-keywords.json`,\nleaving the `./data/*` exports dead (404 / unresolved module for\nconsumers). PR #128 split the release into separate `build`/`publish`\njobs, but the build job's `upload-artifa\n[…]\nnst the current package and fails if `src/data/*.json` is\ndropped from `files`.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(ci): ship src/data/*.json in published tarball (#148)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2026-06-08T16:04:03Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "faee1f67e1dbc8fe80953c254c1117a84192d705",
"body": null,
"is_bot": false,
"headline": "chore: release v0.2.7",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-06-08T15:18:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e1fffb93ec29ed911afee061a6d976c4d3fe0131",
"body": "The `publish` job has no `checkout` step, so `package.json` (with the\n`packageManager` field) only exists after the artifact download. Running\n`pnpm/action-setup` first left it with no pnpm version to read, causing\n\"No pnpm version is specified\".\n\nFix: reorder so the artifact download runs before pnpm setup.\n\nFixes the failure in [this\nrun](https://github.com/marimo-team/codemirror-sql/actions/runs/27144993776/job/80120275403).",
"is_bot": false,
"headline": "fix(ci): download artifact before pnpm setup in publish job (#147)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-06-08T15:18:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "12a17f148ee2da2a867e55c640c1cee1ac2478b5",
"body": null,
"is_bot": false,
"headline": "chore: release v0.2.6",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-06-08T14:33:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f6c681eabce3338551e3a208098698cb1bf5ea5",
"body": "The `Setup Node.js` step in the `publish` job was over-indented, making\n`release.yml` invalid YAML. This caused the v0.2.5 release runs to fail\nat 0s (\"workflow file issue\") so the publish job never ran — npm latest\nis still 0.2.4.\n\nIntroduced in #128. Fix re-aligns the step to 6 spaces; YAML now parses.",
"is_bot": false,
"headline": "fix(ci): correct YAML indentation in release publish job (#145)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-06-08T14:33:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c76558dac0774e61e99d32bb05d8ad644f9691a",
"body": null,
"is_bot": false,
"headline": "chore: release v0.2.5",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-06-08T14:02:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fde96b159e284b45eb952eae48b64cfc856b9fb6",
"body": "This PR contains the following updates:\n\n| Package | Type | Update | Change | OpenSSF |\n|---|---|---|---|---|\n|\n[@codemirror/lang-sql](https://redirect.github.com/codemirror/lang-sql)\n| devDependencies | pin | [`^6.10.0` →\n`6.10.0`](https://renovatebot.com/diffs/npm/@codemirror%2flang-sql/6.10.0/6.1\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4yMDIuMSIsInVwZGF0ZWRJblZlciI6IjQzLjIwMi4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): pin dependencies (#140)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-05-29T16:13:12Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "56203c88e188acfd3341b1cd37a016edc6cdb039",
"body": "This PR contains the following updates:\n\n| Package | Type | Update | Change | OpenSSF |\n|---|---|---|---|---|\n|\n[@testing-library/dom](https://redirect.github.com/testing-library/dom-testing-library)\n| devDependencies | pin | [`^10.4.1` →\n`10.4.1`](https://renovatebot.com/diffs/npm/@testing-library%\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4yMDIuMSIsInVwZGF0ZWRJblZlciI6IjQzLjIwMi4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): pin dependencies (#141)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-05-29T15:31:12Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2db4db8f0e4fb7633dca41188973dee9777ead30",
"body": "> ℹ️ **Note**\n> \n> This PR body was truncated due to platform limits.\n\nThis PR contains the following updates:\n\n| Package | Type | Update | Change | OpenSSF |\n[Age](https://docs.renovatebot.com/merge-confidence/) |\n[Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|---|-\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4yMDIuMSIsInVwZGF0ZWRJblZlciI6IjQzLjIwMi4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update all non-major dependencies (#137)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-05-29T15:13:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "71d354d1a0643e84cbff54da8501d4e3ac8c218d",
"body": "This PR contains the following updates:\n\n| Package | Type | Update | Change | OpenSSF |\n|---|---|---|---|---|\n|\n[actions/download-artifact](https://redirect.github.com/actions/download-artifact)\n| action | major | `v4` → `v8` | [![OpenSSF\nScorecard](https://api.securityscorecards.dev/projects/github\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4yMDIuMSIsInVwZGF0ZWRJblZlciI6IjQzLjIwMi4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update github artifact actions (major) (#138)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-05-29T15:07:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bd17c8348a68c283f563bc839807f36a7ea2800a",
"body": null,
"is_bot": false,
"headline": "upgrade lockfile (#139)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2026-05-29T15:07:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5cb28c9c2bff0be5888f92a8d7ce24c7149b5fd4",
"body": "This PR contains the following updates:\n\n| Update | Change |\n|---|---|\n| lockFileMaintenance | All locks refreshed |\n\n🔧 This Pull Request updates lock files to use the latest dependency\nversions.\n\n---\n\n### Configuration\n\n📅 **Schedule**: (UTC)\n\n- Branch creation\n - \"before 5am on the first day of th\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4xMTAuMiIsInVwZGF0ZWRJblZlciI6IjQzLjEyMy44IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): lock file maintenance (#122)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-05-29T14:48:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d60176da88539efffdd47cd794eeb325fe8a990b",
"body": "Fixes misconfigured fields in `pnpm-workspace.yaml`.\n\nSee the tracking issue in github-maintenance.\n\n<!-- github-maintenance:hash=20d1dfc3:script=pnpm-workspace-check -->\n\nCo-authored-by: marimo-github-maintenance-bot[bot] <267743655+marimo-github-maintenance-bot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "[github-maintenance] Fix pnpm-workspace.yaml configuration (#124)",
"author_name": "marimo-github-maintenance-bot[bot]",
"author_login": "marimo-github-maintenance-bot[bot]",
"committed_at": "2026-05-29T14:45:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31ef7617233e01a84bdee96b2a715f0e45256928",
"body": null,
"is_bot": false,
"headline": "upgrade pnpm to v11 (#135)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2026-05-29T14:44:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "03ffef8b2f1d4ec2ac219ed0d3496d4fa029c1ca",
"body": null,
"is_bot": false,
"headline": "migrate to oxlint (#133)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2026-05-29T14:40:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2fa853b0f020a8ec826edb2e245e437e4347478a",
"body": "CI was failing from playwright tests",
"is_bot": false,
"headline": "fix playwright config (#134)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2026-05-29T14:40:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc013f2a1906641d7478a63379342751bd548ee3",
"body": null,
"is_bot": false,
"headline": "manual upgrade jsdom (#132)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2026-05-29T14:34:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "558bc028db8022a6819e752daee7cce6f707cffb",
"body": "> ℹ️ **Note**\n> \n> This PR body was truncated due to platform limits.\n\nThis PR contains the following updates:\n\n| Package | Change |\n[Age](https://docs.renovatebot.com/merge-confidence/) |\n[Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n|\n[@vitest/browser-playwright]\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0Mi44NS4xIiwidXBkYXRlZEluVmVyIjoiNDMuMTk0LjAiLCJ0YXJnZXRCcmFuY2giOiJtYWluIiwibGFiZWxzIjpbXX0=-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update vitest monorepo to ^4.1.7 (#105)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-05-29T14:23:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2651296c455a11ccde9fe991992259caf973d935",
"body": "This PR contains the following updates:\n\n| Package | Type | Update | Change | OpenSSF |\n|---|---|---|---|---|\n|\n[actions/upload-pages-artifact](https://redirect.github.com/actions/upload-pages-artifact)\n| action | major | `v4` → `v5` | [![OpenSSF\nScorecard](https://api.securityscorecards.dev/project\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4yMDIuMSIsInVwZGF0ZWRJblZlciI6IjQzLjIwMi4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update actions/upload-pages-artifact action to v5 (#131)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-05-29T14:22:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dcdb606df685b0e4320b93c4052265706e91664c",
"body": "This PR contains the following updates:\n\n| Package | Type | Update | Change | OpenSSF |\n|---|---|---|---|---|\n| [actions/setup-node](https://redirect.github.com/actions/setup-node) |\naction | major | `v4` → `v6` | [![OpenSSF\nScorecard](https://api.securityscorecards.dev/projects/github.com/actions/s\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4yMDIuMSIsInVwZGF0ZWRJblZlciI6IjQzLjIwMi4xIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update actions/setup-node action to v6 (#130)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-05-29T14:21:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9fa4441052050337a21e0d9b25c206779102dece",
"body": "This PR contains the following updates:\n\n| Package | Change |\n[Age](https://docs.renovatebot.com/merge-confidence/) |\n[Confidence](https://docs.renovatebot.com/merge-confidence/) |\n|---|---|---|---|\n| [typescript](https://www.typescriptlang.org/)\n([source](https://redirect.github.com/microsoft/TypeS\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4xMDAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjEyMy44IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency typescript to v6 (#119)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-05-29T14:18:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6a88130dc5531be9807a7f3f55a5110298e88e28",
"body": "This PR contains the following updates:\n\n| Package | Type | Update | Change | OpenSSF |\n|---|---|---|---|---|\n|\n[actions/configure-pages](https://redirect.github.com/actions/configure-pages)\n| action | major | `v5` → `v6` | [![OpenSSF\nScorecard](https://api.securityscorecards.dev/projects/github.com\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4xMDAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjE3My42IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update actions/configure-pages action to v6 (#117)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-05-29T14:17:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a511d34c4e11688d6096f22cb889a6b6fb54d88f",
"body": "This PR contains the following updates:\n\n| Package | Type | Update | Change | OpenSSF |\n|---|---|---|---|---|\n|\n[actions/deploy-pages](https://redirect.github.com/actions/deploy-pages)\n| action | major | `v4` → `v5` | [![OpenSSF\nScorecard](https://api.securityscorecards.dev/projects/github.com/actio\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4xMDAuMCIsInVwZGF0ZWRJblZlciI6IjQzLjE3My42IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update actions/deploy-pages action to v5 (#118)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-05-29T14:16:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7727be799d0a99ba48548970d1b3a0d816021e9f",
"body": "This PR contains the following updates:\n\n| Package | Type | Update | Change | OpenSSF |\n|---|---|---|---|---|\n| [pnpm/action-setup](https://redirect.github.com/pnpm/action-setup) |\naction | major | `v4` → `v6` | [![OpenSSF\nScorecard](https://api.securityscorecards.dev/projects/github.com/pnpm/action\n[…]\neyJjcmVhdGVkSW5WZXIiOiI0My4xMTAuMiIsInVwZGF0ZWRJblZlciI6IjQzLjE3My42IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6W119-->\n\nCo-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update pnpm/action-setup action to v6 (#121)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-05-29T14:16:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "93ab69e90083ced7cb10fe0f94925595e453d177",
"body": "## Summary\n\nAdds a Dremio SQL dialect export with:\n\n- Dremio reserved keywords\n- Dremio SQL data types, including semi-structured types\n- double-quote identifier support\n- case-insensitive identifier completion\n\nThe keyword/type lists are based on Dremio's SQL reference docs.\n\n## Test Plan\n\n- `pnpm test --run src/__tests__/index.test.ts`\n- `pnpm typecheck`\n- `pnpm build`",
"is_bot": false,
"headline": "feat: add Dremio SQL dialect (#129)",
"author_name": "Matt Corley",
"author_login": "corleyma",
"committed_at": "2026-05-29T02:21:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "480fd871b4173ae03a67041d863d4c0f7d33b594",
"body": "…jobs (#128)\n\nSplits the single release job into 4 jobs so the `id-token: write` scope\nis held only by a publish job that runs `npm publish` exclusively (no\ninstall/test/build/exec).\n\n- **build** (no `id-token`): install, typecheck, test, build, validate,\nupload `dist/` + package metadata as artifac\n[…]\n in to only the scopes it needs.\n\nResolves the supply-chain audit `oidc-publish-fused` finding. Motivated\nby the TanStack npm supply-chain compromise (May 2026). Mirrors\nmarimo-team/codemirror-ai#111.",
"is_bot": false,
"headline": "chore(ci): split release.yml into build/publish/release-notes/notify …",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-05-12T17:59:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e24f371ab86186e5e36a49a5fda5bc1e2c3f3ada",
"body": "Splits the single build-and-deploy job into the canonical GitHub Pages\n2-job pattern: build (no `id-token`) → deploy (only `id-token: write`,\nruns deploy-pages only).\n\nResolves the supply-chain audit's OIDC-fused finding on this workflow.",
"is_bot": false,
"headline": "chore(ci): split demo.yml into build + deploy jobs (#127)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-05-12T17:25:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e8fe76dd08178ecb8be698bf55e39a8d22feb6a1",
"body": "node-24 ships with npm 11+ which already supports OIDC trusted\npublishing, so the `npm install -g npm@latest` step is redundant.\nRemoving it also drops one global install in the same job as `id-token:\nwrite`.",
"is_bot": false,
"headline": "chore(ci): remove redundant npm@latest upgrade (#126)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-05-12T16:54:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3388dee917a07a616bf62b407bfe420bd54283f6",
"body": "Adds `\"packageManager\": \"pnpm@10.28.2\"` to `package.json` and drops the\nredundant `version:` arg from `pnpm/action-setup` in CI.\n\nThe action now reads the version from `packageManager`, giving a single\nsource of truth shared between local dev and CI. Matches the convention\nused in `marimo` and `marimo-lsp`.",
"is_bot": false,
"headline": "chore: pin pnpm via packageManager (#123)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2026-05-12T15:13:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "63c269a5edd3f1c2abac46a750dba3eaf4546103",
"body": "Co-authored-by: marimo-github-maintenance-bot[bot] <267743655+marimo-github-maintenance-bot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "[github-maintenance] Pin GitHub Actions to SHA hashes (#120)",
"author_name": "marimo-github-maintenance-bot[bot]",
"author_login": "marimo-github-maintenance-bot[bot]",
"committed_at": "2026-04-06T14:09:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c0409d3de7fd18276e868a35684c50a342ba7dc5",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency vite to v8 (#109)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-04-06T14:09:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b2b131abf380f0542a188522abc151885ae340ce",
"body": "Adds missing `pnpm-workspace.yaml` with required fields.\n\nSee the tracking issue in github-maintenance.\n\n<!-- github-maintenance:hash=3d5358e2:script=pnpm-workspace-check -->\n\nCo-authored-by: marimo-github-maintenance-bot[bot] <267743655+marimo-github-maintenance-bot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "[github-maintenance] Fix pnpm-workspace.yaml configuration (#112)",
"author_name": "marimo-github-maintenance-bot[bot]",
"author_login": "marimo-github-maintenance-bot[bot]",
"committed_at": "2026-03-18T15:10:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cab7e0e695fcf27b5b2585374ba51330290605ad",
"body": "Adds `local>marimo-team/.github:renovate-config` to the `extends` array\nin `renovate.json`.\n\n<!-- github-maintenance:hash=7fdcfb05:script=renovate-config-fix -->\n\nCo-authored-by: marimo-github-maintenance-bot[bot] <267743655+marimo-github-maintenance-bot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "[github-maintenance] Extend org Renovate config preset (#113)",
"author_name": "marimo-github-maintenance-bot[bot]",
"author_login": "marimo-github-maintenance-bot[bot]",
"committed_at": "2026-03-18T15:09:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3a4ed2d605cfae0a63ff5e7e56a91d4e70191a20",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency @biomejs/biome to v2.3.11 (#99)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-01-12T18:24:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d87d0f49ba24f3d6366ab386c4fe1b34a552d4c2",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update vitest monorepo to v4.0.17 (#100)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-01-12T18:23:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f42a111464ff347a0d9ab3c255fe6127b277421",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency node-sql-parser to v5.4.0 (#104)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2026-01-12T18:23:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c5a9b8757a7a33334f8398082568daabadf9053",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update crate-ci/typos action to v1.40.1 (#102)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-12-29T19:23:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2fba51dfbcb1d37fe923b89365c10cfbfa47f7a5",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update crate-ci/typos action to v1.40.0 (#94)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-12-11T00:48:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "651ddae854d29c28757011913d0be822e7189bc1",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update actions/checkout action to v6 (#95)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-12-11T00:48:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ed419f05094c4038007e9e59bf092d9a98169d32",
"body": null,
"is_bot": false,
"headline": "ci: oidc (#96)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2025-12-11T00:48:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ebae5875d2b894052809eabdc2ef4d80088b53ba",
"body": "* update packages and fix renovate bot\n\n* fix test install\n\n* use pnpx but install all\n\n* add playwright as dev dep",
"is_bot": false,
"headline": "update packages, fix renovate bot and playwright test (#93)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2025-12-10T18:24:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1fc7145412572d6ef3278eecd85403d288d1e101",
"body": "…rt (#92)",
"is_bot": false,
"headline": "perf: only render gutter markers for lines that are within the viewpo…",
"author_name": "Knyntsje",
"author_login": "Knyntsje",
"committed_at": "2025-12-01T04:18:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "caa7c664135988b634f55a3e57a1327a5ffeede2",
"body": null,
"is_bot": false,
"headline": "avoid renovate bot pr for lint version, upgrade test pkg (#90)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2025-11-01T17:15:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f8f13fd33f0ce9b59442fc2978f79782cad29736",
"body": "* add test\n\n* move to a folder, and update config\n\n* remove screenshot\n\n* add pnpm install chromium\n\n* use pnpx\n\n* use 6.9.1\n\n* rebase",
"is_bot": false,
"headline": "add browser test with playwright for freeze (#88)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2025-11-01T15:14:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ede6ca8620c143a1b44f02e7ad8d0ad7994cc8f8",
"body": null,
"is_bot": false,
"headline": "fix codemirror/lint for browser freeze (#87)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2025-11-01T13:02:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1b6df099ac920a0071f5b53346b94de1541232ec",
"body": null,
"is_bot": false,
"headline": "update packages and test",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2025-11-01T09:33:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "14cc59aa710bdaa207e7d160ecc3b5681898f412",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency node to v24 (#83)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-11-01T08:30:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4197696e95e0d76d4dbc463e4fcc5c5d0ddca13f",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update crate-ci/typos action to v1.39.0 (#85)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-11-01T08:26:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5d342b6aeec0bd343b3bea665f3746a1907912e3",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency jsdom to v27.0.1 (#78)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-10-24T21:08:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc687c6044daa0348642206ff5a0dbf8fb85b117",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency vite to v7.1.12 (#79)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-10-24T21:08:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4274a9e0aeeb4d3482a8a10084755cd5b2fdbdda",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency @biomejs/biome to v2.3.0 (#80)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-10-24T21:08:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bb9bf06db5624b300380d2ef7338dbb8fe72f7f1",
"body": null,
"is_bot": false,
"headline": "chore: release v0.2.4",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2025-10-15T13:36:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d595b3ab1b36e4b799383b0eebfcbd398d80cf93",
"body": "* move codemirror deps to peer deps\n\n* upgrade packages",
"is_bot": false,
"headline": "move codemirror deps to peer deps (#73)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2025-10-15T13:35:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "55aa3df43c1cd498ac1edaf1676ff069bfa7e558",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update actions/setup-node action to v6 (#75)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-10-15T13:27:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "64f760c58f66816ce66ddedac5909ee30cacc242",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update crate-ci/typos action to v1.38.1 (#69)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-10-12T15:06:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "039ff17a4affc02130fc7b68884bbc5c6c6f9afa",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update github/codeql-action action to v4 (#71)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-10-12T15:06:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "51520f0f2521f0482a7b184f807b5876242ab46d",
"body": null,
"is_bot": false,
"headline": "update all packages (#68)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2025-10-04T07:10:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c286e9250637c1c179dff9134c500113f877d5af",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update crate-ci/typos action to v1.37.2 (#67)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-10-04T07:08:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7a5e74fb885f1e84bbd124dc269ce3a3e18b15d8",
"body": "* support better table list extraction\n\n* add import",
"is_bot": false,
"headline": "support better table list extraction (#61)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2025-10-04T07:07:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "caef1aa7bc6bb0527c9b783efc9dbea1ee07a9ff",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update crate-ci/typos action to v1.37.1 (#62)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-10-03T04:56:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b65b3276aae0bd0981b445dbc44bd215cc88d92",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update crate-ci/typos action to v1.36.3 (#59)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-29T03:08:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c6e651f0621ae9918834be4c72ae1600b9e23db8",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update codemirror (#60)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-29T03:08:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "63fefa8c5558a7b2d89fc154133ece63848c9bc6",
"body": null,
"is_bot": false,
"headline": "chore: release v0.2.3",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2025-09-25T15:59:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "42cc50223cfdb948dc76b2494dce1dc1157c4416",
"body": null,
"is_bot": false,
"headline": "chore: release v0.2.2",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2025-09-25T15:45:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "02b6e87a01cda17f89a13a620554c0d32e9ea026",
"body": null,
"is_bot": false,
"headline": "improvement: add another tooltip override (#58)",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2025-09-25T15:45:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6e398483181c0ebef4facee77ff56c59e826a274",
"body": "* export types, update packages, fix regression\n\n* fix lockfile",
"is_bot": false,
"headline": "export types, update packages, fix regression (#57)",
"author_name": "Shahmir Varqha",
"author_login": "Light2Dark",
"committed_at": "2025-09-25T15:37:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c83be451cde1a99c39037caef4e3fdbf39ce4a3",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency @codemirror/view to v6.38.3 (#54)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-25T02:04:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "675dba8998371faf5df67384b6dbe69fed3928cd",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency vite to v7.1.7 (#55)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-25T02:04:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a2fbd8bebc1ead1ae7085de61f12986a1a46afe",
"body": null,
"is_bot": false,
"headline": "Update README",
"author_name": "Myles Scolnick",
"author_login": "mscolnick",
"committed_at": "2025-09-23T23:38:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "83ef3f25c737960b980324bd0177b3cb7baaab06",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency vite to v7.1.6 (#53)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-21T00:21:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a5116887194e8dc77a48dcd9245632bf12f6d4fb",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency jsdom to v27 (#51)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-17T05:27:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ba80b57c0e9f0a0f484ec5d5aba8ca60d4ce7446",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency @codemirror/lang-sql to v6.10.0 (#52)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-17T05:27:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "62be7df5f64f30f25465d39bb305aa82bbbfa4b7",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency @biomejs/biome to v2.2.4 (#49)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-13T04:50:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7587dc9841b3fe41127469c19eb59ed1479d43de",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency vite to v7.1.5 (#50)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-13T04:50:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "04e2f9240eed72c9655276fff667bfd5d1e16d5f",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "fix(deps): update codemirror (#46)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-05T06:41:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db295f8c89bbacd4d3ed30b90b7ef68282da9b20",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update crate-ci/typos action to v1.36.2 (#44)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-05T06:41:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a44bf52e94e33098c6265a5ae31405b18a4c8e6a",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update dependency vite to v7.1.4 (#45)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-05T06:41:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "49c29f02ab983fe0a640eae2da9477f974885dc7",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "fix(deps): update dependency node-sql-parser to v5.3.12 (#47)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-05T06:40:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cf9321566af3a9f9723e398726e29056fac6cc86",
"body": "Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(deps): update actions/setup-node action to v5 (#48)",
"author_name": "renovate[bot]",
"author_login": "renovate[bot]",
"committed_at": "2025-09-05T06:40:36Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 11,
"commits_last_year": 137,
"latest_release_at": "2026-07-23T20:41:36Z",
"latest_release_tag": "v0.3.0",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 24,
"days_since_latest_release": 10,
"mean_days_between_releases": 39.7
},
"artifacts": {
"collected": true,
"structure": [],
"declarations": [
{
"name": "@marimo-team/codemirror-sql",
"path": "package.json",
"tokens": [
"npm.entry",
"npm.peer_dependencies"
],
"ecosystem": "npm"
}
]
},
"community": {
"has_readme": true,
"has_license": true,
"readme_badges": {
"hosts": [],
"total": 0,
"header": 0,
"collected": true,
"has_inspect_badge": false
},
"has_description": true,
"has_contributing": true,
"health_percentage": 75,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "@marimo-team/codemirror-sql",
"exists": true,
"license": "Apache-2.0",
"keywords": [
"codemirror",
"codemirror-plugin",
"sql"
],
"ecosystem": "npm",
"categories": [],
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@marimo-team/codemirror-sql",
"declared_type": null,
"is_deprecated": false,
"latest_version": "0.3.0",
"repository_url": "https://github.com/marimo-team/codemirror-sql",
"versions_count": 11,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 2,
"monthly_downloads": 11992,
"first_published_at": "2025-07-31T02:30:28.027000Z",
"latest_published_at": "2026-07-23T20:41:22.356000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 10
}
]
},
"popularity": {
"forks": 3,
"stars": 17,
"watchers": 1,
"fork_history": {
"days": [
{
"date": "2025-10-29",
"count": 1
},
{
"date": "2025-11-28",
"count": 1
},
{
"date": "2026-05-26",
"count": 1
}
],
"complete": true,
"collected": 3,
"total_forks": 3
},
"star_history": null,
"open_issues_and_prs": 10
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 40147,
"source_files_sampled": 53,
"oversized_source_files": 0,
"agent_instruction_files": [
".cursorrules",
"AGENTS.md",
"CLAUDE.md"
],
"agent_instruction_max_bytes": 862
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 3,
"malicious_count": 0,
"assessed_package": "npm:@marimo-team/codemirror-sql@0.3.0",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "node-sql-parser",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^5.3.13"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 8,
"merged_prs": 160,
"open_issues": 2,
"closed_ratio": 0.6,
"closed_issues": 3,
"closed_unmerged_prs": 36
},
"bus_factor": 1,
"bot_contributors": 2,
"top_contributors": [
{
"type": "User",
"login": "mscolnick",
"commits": 44,
"avatar_url": "https://avatars.githubusercontent.com/u/2753772?v=4"
},
{
"type": "User",
"login": "Light2Dark",
"commits": 30,
"avatar_url": "https://avatars.githubusercontent.com/u/19585239?v=4"
},
{
"type": "User",
"login": "Knyntsje",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/161234462?v=4"
},
{
"type": "User",
"login": "corleyma",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/2080732?v=4"
}
],
"contributors_sampled": 4,
"top_contributor_share": 0.579
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"autofix.yml",
"demo.yml",
"release.yml",
"test.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"pnpm-lock.yaml"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 3,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 1/22 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 10,
"reason": "all dependencies are pinned",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 9,
"reason": "SAST tool detected but not run on all commits",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 5,
"reason": "5 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "ca192000e6717ed833a550b257139860cb901387",
"ran_at": "2026-08-03T00:07:07Z",
"aggregate_score": 6,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"recent_prs": {
"merged_7d": 2,
"decided_7d": 3,
"merged_30d": 49,
"authors_30d": 2,
"decided_30d": 52,
"sample_size": 60,
"window_days": 30,
"sample_exhausted": false,
"authors_probed_30d": 2,
"newcomer_merged_30d": 0,
"bot_prs_excluded_30d": 5,
"newcomer_authors_30d": 0,
"newcomer_decided_30d": 0
},
"ci_last_run_at": "2026-07-23T20:41:45Z",
"oldest_open_prs": [
{
"number": 136,
"created_at": "2026-05-29T14:51:12Z",
"last_comment_at": "2026-07-22T14:39:57Z",
"last_comment_author": "github-actions"
},
{
"number": 142,
"created_at": "2026-05-29T16:14:31Z",
"last_comment_at": "2026-08-02T13:13:48Z",
"last_comment_author": "renovate"
},
{
"number": 143,
"created_at": "2026-05-29T16:14:51Z",
"last_comment_at": "2026-07-23T13:23:19Z",
"last_comment_author": "github-actions"
},
{
"number": 144,
"created_at": "2026-05-29T17:36:28Z",
"last_comment_at": "2026-05-29T17:36:31Z",
"last_comment_author": "renovate"
},
{
"number": 149,
"created_at": "2026-06-13T16:15:59Z",
"last_comment_at": "2026-07-30T21:04:15Z",
"last_comment_author": "renovate"
},
{
"number": 207,
"created_at": "2026-07-27T22:16:13Z",
"last_comment_at": "2026-07-27T22:16:16Z",
"last_comment_author": "renovate"
},
{
"number": 208,
"created_at": "2026-07-30T09:59:52Z",
"last_comment_at": "2026-07-30T09:59:55Z",
"last_comment_author": "renovate"
},
{
"number": 209,
"created_at": "2026-08-01T01:36:05Z",
"last_comment_at": "2026-08-01T01:36:46Z",
"last_comment_author": "github-actions"
}
],
"last_merged_pr_at": "2026-07-27T11:02:50Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 2,
"created_at": "2025-07-31T02:27:47Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 169,
"created_at": "2026-07-24T09:15:49Z",
"last_comment_at": "2026-07-27T05:28:24Z",
"last_comment_author": "Light2Dark"
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/marimo-team/codemirror-sql",
"host": "github.com",
"name": "codemirror-sql",
"owner": "marimo-team"
},
"metrics": {
"overall": {
"key": "overall",
"band": "excellent",
"name": "Overall health",
"note": "The weighted overall 69 is calibrated to 81 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 69,
"calibrated": 81,
"calibration": "2026-08-02"
}
}
],
"value": 81,
"inputs": {
"security": 68,
"vitality": 89,
"community": 56,
"governance": 60,
"calibration": "2026-08-02",
"engineering": 67,
"ai_readiness": 77,
"weighted_overall_raw": 69
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 89,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "excellent",
"name": "Development activity",
"note": null,
"notes": [],
"value": 81,
"inputs": {
"commits_last_year": 137,
"human_commit_share": 0.48,
"days_since_last_push": 0,
"active_weeks_last_year": 24
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "24/52 weeks with commits",
"points": 16.6,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 24
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "137 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 137
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "exceptional",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 11,
"latest_release_tag": "v0.3.0",
"releases_from_tags": false,
"days_since_latest_release": 10,
"mean_days_between_releases": 39.7
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "11 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 11
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 10 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 10
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~39.7 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 39.7
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 10,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 10 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 10
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 56,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 22,
"inputs": {
"forks": 3,
"stars": 17,
"watchers": 1,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "17 stars",
"points": 19.5,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 17
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "3 forks",
"points": 2.5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 3
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "1 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 1
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "excellent",
"name": "Community health",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": 0,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": true,
"readme_badge_services": [],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "good",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 68,
"inputs": {
"packages": [
"@marimo-team/codemirror-sql"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 11992
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "11,992 downloads/month across npm",
"points": 54.4,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 11992,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 60,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 27,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 4,
"top_contributor_share": 0.579
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 58% of commits",
"points": 9.5,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 58
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "4 contributors",
"points": 5.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 4
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 57,
"inputs": {
"merged_prs": 160,
"open_issues": 2,
"closed_issues": 3,
"prs_merged_7d": 2,
"prs_decided_7d": 3,
"prs_merged_30d": 49,
"prs_decided_30d": 52,
"issue_closed_ratio": 0.6,
"closed_unmerged_prs": 36,
"first_time_authors_30d": 0,
"first_time_prs_merged_30d": 0,
"first_time_prs_decided_30d": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "60% of issues closed",
"points": 25.2,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 60
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "160/196 decided PRs merged",
"points": 24.5,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 160,
"decided": 196
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 1/22 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"followers": 622,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "marimo-team",
"public_repos": 51,
"account_age_days": 1648
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "622 followers of marimo-team",
"points": 20.1,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 622,
"login": "marimo-team"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "51 public repos, account ~4 yr old",
"points": 21.5,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 51
}
},
{
"code": "account_age_years",
"params": {
"years": 4
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"@marimo-team/codemirror-sql"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 10
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 10 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 10
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "11 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 11
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 67,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "4 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 4
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"topics": [
"codemirror",
"codemirror-extension",
"sql"
],
"has_wiki": false,
"homepage": "https://marimo-team.github.io/codemirror-sql/",
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://marimo-team.github.io/codemirror-sql/",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "3 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 3
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "good",
"name": "Security",
"value": 68,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 60,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 6
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "25 out of 25 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 1/22 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "all dependencies are pinned",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool detected but not run on all commits",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "5 existing vulnerabilities detected",
"points": 3.8,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "exceptional",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:@marimo-team/codemirror-sql@0.3.0 runtime dependency closure — what installing the published package pulls in — 3 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "npm:@marimo-team/codemirror-sql@0.3.0",
"assessed": 3
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 3,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 3,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 3
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 77,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.958,
"agent_instruction_files": [
".cursorrules",
"AGENTS.md",
"CLAUDE.md"
],
"agent_instruction_max_bytes": 862
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": ".cursorrules, AGENTS.md, CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".cursorrules, AGENTS.md, CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "46 of 48 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 46,
"sampled": 48
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 63,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"pnpm-lock.yaml"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
"tsconfig.json"
],
"agent_commit_share": 0.01,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0.48
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "1 of the last 100 commits agent-authored or agent-credited",
"points": 2,
"status": "partial",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 1,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "48 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 48,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "all dependencies are pinned",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "exceptional",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 40147,
"source_files_sampled": 53,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/53 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 53,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"labels": [
"library"
],
"scores": {
"library": 17
},
"primary": "library",
"evidence": [
{
"tier": "declared",
"label": "library",
"source": "npm.entry",
"weight": 8
},
{
"tier": "distribution",
"label": "library",
"source": "registry:npm",
"weight": 6
},
{
"tier": "declared",
"label": "library",
"source": "npm.peer_dependencies",
"weight": 3
}
],
"artifacts": [
{
"path": "package.json",
"labels": [
"library"
],
"ecosystem": "npm"
}
],
"confidence": "high",
"host_extension": false,
"runs_as_process": false,
"consumed_by_code": true
},
"metrics_version": "2.3.1"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-08-03T00:07:23.732251Z",
"schema_version": "0.30.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/m/marimo-team/codemirror-sql.svg",
"full_name": "marimo-team/codemirror-sql",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with marimo-team/codemirror-sql. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.3.1, schema v0.30.0 — full methodology · metrics wiki.
