Public record
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-23 13:48 UTC

millionco / openstory

Storybook for Agents

TypeScriptMIT★ 16 stars⑂ 2 forkssince May 2026View on GitHub ↗

millionco/openstory holds a health index of 49 out of 100, placing it in the At risk band. It scores highest on AI Readiness (73/100) and lowest on Security (23/100). It was last updated 5 days ago. A single contributor accounts for most of its recent work.

49
overall / 100
At risk

Software health index

Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.

49
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
VitalityCommunity &AdoptionSustainability &GovernanceEngineeringQualitySecurityAI Readiness

Score profile

Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.

Ownership

405 followers32 public repossince May 2021

This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.

Package ecosystems

RegistryPackageVersionDownloads / moVersionsLast publishTags
npmopenstory0.1.02,891175 days agocomponentscsfreactsolidstoriesstorybookuivite

Metrics by category

Vitality

Is the project alive — is code being written and are releases shipping?

66Moderate · 22% of overall
How it's scored
36/36Push recency — last push 5 days ago
2.8/36Commit cadence — 4/52 weeks with commits
15.5/18Commit volume — 52 commits in the last year
0/10OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully
Inputs used
commits_last_year52
human_commit_share0.981
days_since_last_push5
active_weeks_last_year4
How it's scored
27/27Ships releases — 1 releases published
36/36Release recency — latest release 5 days ago
12.6/27Release cadence — cadence unknown (single release)
0/10OpenSSF Scorecard: Signed-Releases — no data
Inputs used
releases_count1
latest_release_tagopenstory@0.1.0
releases_from_tagsno
days_since_latest_release5
mean_days_between_releases
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.

Community & Adoption

Does the project have users, downloads, attention, and a welcoming setup for contributors?

47At risk · 18% of overall
How it's scored
19.1/60Stars — 16 stars
0/25Forks — 2 forks
0/15Watchers — 0 watchers
Inputs used
forks2
stars16
watchers0
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
How it's scored
22.5/22.5README
22.5/22.5License — recognized license (MIT)
18/18CONTRIBUTING guide
0/13.5Code of conduct
0/7.2Issue template
0/6.3PR template
Inputs used
has_readmeyes
has_licenseyes
has_contributingyes
has_issue_templateno
has_code_of_conductno
has_pull_request_templateno
How it's scored
46.1/80Monthly downloads — 2,891 downloads/month across npm
0/20Registry dependents — not reported by this ecosystem
Inputs used
packagesopenstory
dependents
ecosystemsnpm
total_downloads
monthly_downloads2,891
Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.

Sustainability & Governance

Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?

54Moderate · 24% of overall
How it's scored
9/54Bus factor — 1 contributor(s) cover half of all commits
4.4/22.5Commit distribution — top contributor authored 80% of commits
5.4/13.5Contributor breadth — 4 contributors
3/10OpenSSF Scorecard: Contributors — project has 1 contributing companies or organizations -- score normalized to 3
Inputs used
bus_factor1
contributors_sampled4
top_contributor_share0.804
How it's scored
0/46.8Issue resolution — 0% of issues closed
38.2/38.3PR acceptance — 5/5 decided PRs merged
0/15OpenSSF Scorecard: Code-Review — Found 1/26 approved changesets -- score normalized to 0
Inputs used
merged_prs5
open_issues1
closed_issues0
issue_closed_ratio0
closed_unmerged_prs0
How it's scored
30/30Ownership backing — organization-owned
0/20Verified domain
18.8/25Owner reach — 405 followers of millionco
21.3/25Track record — 32 public repos, account ~5 yr old
Inputs used
followers405
owner_typeOrganization
is_verified
owner_loginmillionco
public_repos32
account_age_days1,879
How it's scored
25/25Published & resolvable — 1 package(s) on npm
35/35Publish recency — latest publish 5 days ago
20/20Version history — 17 published versions
20/20Not deprecated — active, not deprecated or yanked
Inputs used
packagesopenstory
ecosystemsnpm
any_deprecatedno
min_days_since_publish5

Engineering Quality

Are baseline engineering and documentation practices in place?

48At risk · 20% of overall
How it's scored
24/24CI workflows — 5 workflow(s)
24/24Tests present
0/16Linter config
0/9.6Pre-commit hooks
0/6.4.editorconfig
6/20OpenSSF Scorecard: CI-Tests — 1 out of 3 merged PRs checked by a CI test -- score normalized to 3
Inputs used
has_ciyes
has_testsyes
has_editorconfigno
has_linter_configno
has_precommit_configno

Documentation

40At risk
How it's scored
30/30README
0/25Documentation directory
0/15Documentation / homepage site
10/10Repository description
0/10Topics
0/10Wiki
Inputs used
topics
has_wikino
homepage
has_readmeyes
has_docs_dirno
has_descriptionyes

Security

Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?

23Critical · 16% of overall
How it's scored
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — branch protection not enabled on development/release branches
0.8/2.5CI-Tests — 1 out of 3 merged PRs checked by a CI test -- score normalized to 3
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 1/26 approved changesets -- score normalized to 0
0.8/2.5Contributors — project has 1 contributing companies or organizations -- score normalized to 3
10/10Dangerous-Workflow — no dangerous workflow patterns detected
0/7.5Dependency-Update-Tool — no update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5License — license file detected
0/7.5Maintained — project was created within the last 90 days. Please review its contents carefully
0/5Packaging — no data
0/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
0/5SAST — SAST tool is not run on all commits -- score normalized to 0
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — no data
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
0/7.5Vulnerabilities — 18 existing vulnerabilities detected
Inputs used
sourceopenssf_scorecard
checks_evaluated16
scorecard_versionv5.5.0
checks_inconclusive2
scorecard_aggregate2.3
Excluded from scoring (no data or not applicable): packaging, signed_releases. Remaining weights renormalized.

AI Readiness

How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.

73Good · 0% of overall
How it's scored
45/45Agent instructions — AGENTS.md, CLAUDE.md
0/15Machine-readable docs (llms.txt)
40/40Legible commit history — 44 of 51 human commits state their intent (structured subject or explanatory body)
Inputs used
has_llms_txtno
legible_history_share0.863
agent_instruction_filesAGENTS.md, CLAUDE.md
agent_instruction_max_bytes2,340
How it's scored
0/18One-command bootstrap
22/22Automated tests
0/11Lint / format config
11/11Static type checking — apps/website/tsconfig.json, packages/openstory/src/shell/tsconfig.json, packages/openstory/tsconfig.json
10/10Reproducible environment — lockfile
10/10Demonstrated agent practice — 22 of the last 52 commits agent-authored or agent-credited
0/8Automated maintenance — no automated dependency updates observed
0/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
Inputs used
has_nixno
has_testsyes
lockfilespnpm-lock.yaml
has_dockerfileno
typed_languageyes
bootstrap_files
has_devcontainerno
has_linter_configno
typecheck_configsapps/website/tsconfig.json, packages/openstory/src/shell/tsconfig.json, packages/openstory/tsconfig.json
agent_commit_share0.423
toolchain_manifests
dependency_bot_commit_share0
How it's scored
45/45Type-checkable code — TypeScript (statically typed)
55/55Manageable file sizes — 0/135 source files over 60KB
Inputs used
primary_languageTypeScript
largest_source_bytes56,023
source_files_sampled135
oversized_source_files0

Key facts

16GitHub stars
4contributors
52commits, last 12 months
5days since last push
1releases
1bus factor
1open issues
npmpackage ecosystems

Data collection warnings

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
  • GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
  • deps.dev does not index npm:openstory@0.1.0; advisories assessed against the repository dependency graph instead

More detail

Star and fork history 0 ★ / 2 ⇿
0Stars
2Forks

When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.

111222212026-062026-062026-07
OpenSSF Scorecard 2.3 / 10
2.3aggregate

Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-23 13:48 UTC

10Binary-Artifactsno binaries found in the repo
0Branch-Protectionbranch protection not enabled on development/release branches
3CI-Tests1 out of 3 merged PRs checked by a CI test -- score normalized to 3
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 1/26 approved changesets -- score normalized to 0
3Contributorsproject has 1 contributing companies or organizations -- score normalized to 3
10Dangerous-Workflowno dangerous workflow patterns detected
0Dependency-Update-Toolno update tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
0Maintainedproject was created within the last 90 days. Please review its contents carefully
n/aPackagingpackaging workflow not detected
0Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 0
0SASTSAST tool is not run on all commits -- score normalized to 0
0Security-Policysecurity policy file not detected
n/aSigned-Releasesno releases found
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
0Vulnerabilities18 existing vulnerabilities detected
Direct dependencies 6
RegistryPackageVersion constraintManifest
npmnext^15.3.2apps/website/package.json
npmreact^19.1.0apps/website/package.json
npmreact-dom^19.1.0apps/website/package.json
npmcommander^14.0.3packages/openstory/package.json
npmfast-glob^3.3.2packages/openstory/package.json
npmoxc-parser^0.108.0packages/openstory/package.json
All dependencies not collected

The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

Raw JSON report machine-readable
{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 6796,
      "has_wiki": false,
      "homepage": null,
      "languages": {
        "CSS": 3544,
        "HTML": 294,
        "Svelte": 162,
        "JavaScript": 4216,
        "TypeScript": 463160
      },
      "pushed_at": "2026-07-18T05:48:27Z",
      "created_at": "2026-05-20T21:25:47Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-18T05:47:10Z",
      "description": "Storybook for Agents",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "TypeScript",
      "significant_languages": [
        "TypeScript"
      ]
    },
    "owner": {
      "blog": "https://million.dev",
      "name": "Million Software, Inc.",
      "type": "Organization",
      "login": "millionco",
      "company": null,
      "location": "United States of America",
      "followers": 405,
      "avatar_url": "https://avatars.githubusercontent.com/u/85101781?v=4",
      "created_at": "2021-05-31T08:10:52Z",
      "is_verified": null,
      "public_repos": 32,
      "account_age_days": 1879
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "openstory@0.1.0",
          "kind": "other",
          "published_at": "2026-07-18T05:48:28Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "0a0f5a73691ebd22acad58f588a4b228ad50d219",
          "body": "chore: version packages",
          "is_bot": false,
          "headline": "Merge pull request #6 from millionco/changeset-release/main",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-07-18T05:47:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1bb0d1b1ae921e1c74c199358cd42d07fd84c187",
          "body": null,
          "is_bot": true,
          "headline": "chore: version packages",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-18T05:46:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0b605a4defe201d9f25a5a9bcf6460310f55e283",
          "body": null,
          "is_bot": false,
          "headline": "ci: automate package publishing",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-07-18T05:46:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d1298281aa86167643bc098cd149216a94f465e8",
          "body": "feat: add Foldkit framework adapter",
          "is_bot": false,
          "headline": "Merge pull request #4 from binarytide/codex/foldkit-adapter",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-07-18T05:42:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8f74312efb472f359144368c5c406ea08cf4d5c9",
          "body": "fix(openstory): keep centered portal stories stable",
          "is_bot": false,
          "headline": "Merge pull request #5 from millionco/fix/centered-layout-portals",
          "author_name": "Ben MacLaurin",
          "author_login": "ben-million",
          "committed_at": "2026-07-18T04:31:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "abf7e1e8553362a355a39a7aa3c672b874cc3f66",
          "body": null,
          "is_bot": false,
          "headline": "fix(openstory): keep centered portal stories stable",
          "author_name": "ben-million",
          "author_login": "ben-million",
          "committed_at": "2026-07-18T04:25:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9ee81cd15948ac5b110666c1ab62008c3927b2a8",
          "body": "Note: the branch name predates my read of the contributing guide's feat/... branch naming example; apologies for not following that prescribed format from the start.",
          "is_bot": false,
          "headline": "feat: add Foldkit framework adapter",
          "author_name": "John McAndrews",
          "author_login": "binarytide",
          "committed_at": "2026-06-18T01:25:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9937de8e7f69a067ad7ebc1cd1c50c440d52c49b",
          "body": null,
          "is_bot": false,
          "headline": "0.0.15",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-23T00:49:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "375337dce4366774e3d663ab8454ae61b9152543",
          "body": "`openstory dev`/`build` previously set `configFile: false` (since 0.0.12)\nto avoid double-registering the plugin when the user also had it in\ntheir own vite.config.ts. That side-effected projects with non-trivial\ncustom config (react-grab's solid + react exclude regex, define, jsx\noverrides; or anyo\n[…]\n5 stories HTTP 200 zero errors;\n    .react.tsx files compile as React (proving solid({exclude}) honored)\n  - scissors: 5/5 stories HTTP 200 zero errors\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(openstory): honor user's vite.config.ts in dev/build + de-dup plugin",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T10:47:06Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "88e94daad2aa7c5a187f4f668a15aefbd70d6280",
          "body": "Five issues uncovered during deep audit:\n\n1. Plugin config hook defaulted to \"react\" framework when not explicitly\n   set. A vue/solid/svelte project would get react optimizeDeps + dedupe\n   injected. Added `detectFrameworkSyncOrFallback` and use it from the\n   config hook so detection happens for r\n[…]\nupdate-before-mount-resolved race\n     - framework-detection: sync detector + fallback semantics\n\nNet: 243 tests (was 232), 213 lines added, 16 removed.\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(openstory): deep audit — framework default, mount race, dist bloat",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T10:35:27Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "866c461a3c5b835011bf743a0eb6dd72814dbdc1",
          "body": "Previously the optimizeDeps include + react dedupe were only added by\n`openstory dev`'s inline vite config, so projects that run `vite`\ndirectly with `openstory/plugin` hit a cold un-prebundled\n`react-dom/client` (its dynamic import from the react adapter dodged\nvite's import crawler) and got a CJS \n[…]\n` hook. Now any vite\nsetup that uses `openstory/plugin` — `openstory dev`, plain `vite`,\ncustom config — gets the prebundling and dedupe automatically.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(openstory): inject optimizeDeps + dedupe via plugin config hook",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T10:28:31Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "11428e47fc5ba1d9ca895f3068b5d6d8f346a43f",
          "body": "…ite config\n\nThe react adapter dynamically imports `react-dom/client`. Vite's\noptimizer doesn't crawl dynamic imports, so the import hit a cold CJS\nshim whose default export had no `createRoot`. Pre-include\n`react`, `react-dom`, and `react-dom/client` in `optimizeDeps` and\nre-add `resolve.dedupe` for the react framework so symlinked /\nhoisted-twice React installs don't trigger hook-rule violations.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(openstory): prebundle react-dom/client + dedupe react in inline v…",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T10:21:19Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "091a698903f3f469cb062e7e0d9f08807cd37d3a",
          "body": null,
          "is_bot": false,
          "headline": "0.013",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T10:17:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5d58ee0226abf565b2e0f45181f236351ad43b4a",
          "body": "…ctions\n\nThe react adapter invoked `render(args, context)` directly, so any hooks\ncalled inside `render` ran outside a React fiber and threw \"Invalid hook\ncall\". Wrap each story in a stable `StoryRenderHost` function component\nthat calls `render(args, context)` from its body — matches Storybook's\nbehavior and lets `render: () => { const [x] = useState(); return <Demo\nx={x} />; }` work as written.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(openstory/react): support hooks called directly inside render fun…",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T10:15:07Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "6e2a37fd71c6198daad0046c61a7e26d529dfd33",
          "body": "Co-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "docs: sync root README with package README (drop init/setup refs)",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T09:48:48Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5a93e390482c9fa800f9437fe80d56b133575dcc",
          "body": "…te config\n\n`openstory setup` and `openstory init` are gone. So are the scaffolding\nutilities (`render-setup-files`, `install-missing-peer-deps`,\n`detect-project-features`). The README lists the install line per\nframework instead.\n\n`openstory dev` and `openstory build` now synthesize the Vite config\n[…]\ny/plugin` from the user's\n`vite.config.ts` — that was the source of the recurring\n`Missing field 'moduleType'` error.\n\nNet: 940 lines removed, 67 added.\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "refactor(openstory): drop setup/init, run dev/build with in-memory vi…",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T09:47:40Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c6ab5e4ec0fcc5d4bfe5dd14c22a611751ccef52",
          "body": "… find lockfile)\n\nSubpackages in pnpm/yarn/bun workspaces don't carry their own lockfile —\nthe lockfile + `packageManager` field live at the workspace root.\n`detectPackageManager` only looked at the project directory, so an\n`apps/web` package in a pnpm workspace fell through to npm. Running\n`npm ins\n[…]\npackageManager` field, falling back to `npm` only if nothing\nmatches all the way to the filesystem root. Pnpm projects now correctly\nuse `pnpm add -D`.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(openstory): detect monorepo workspace package manager (walk up to…",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T09:14:42Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f9ed9b58ba77568bc6913189a5e9a70871b9732b",
          "body": "… install failures\n\nTwo related fixes for `openstory setup` in real-world monorepos:\n\n1. `detectProjectFeatures` now checks `require.resolve(name)` from the\n   project root in addition to scanning `package.json`. Previously a\n   monorepo project that had `vite` or `@vitejs/plugin-react` installed\n  \n[…]\nely (or accept the transitive dep) without\n   re-running `openstory setup --force`.\n\nBump 0.0.8 → 0.0.9 so the fix can ship via `npx openstory@latest`.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(openstory): setup detects already-resolvable peer deps + survives…",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T09:08:05Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "746825c2e0673285e7be9571bcd108d2c955516d",
          "body": null,
          "is_bot": false,
          "headline": "0.0.9",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T09:05:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b2f21e4cd1657660400c09f2da017f713367757a",
          "body": "… hook (Rolldown / vite 8 compat)\n\nThe plugin's `load` hook for the openstory virtual story entry was\nreturning a bare source string. Rollup-based vite (≤7) accepts that and\ninfers the module type from the resolved id. Rolldown-based vite (8+)\nrequires the load result to be either a string OR an obj\n[…]\ne load hook (the synthesized\nentry is plain ESM with `import` + `boot(...)`, no JSX). Rollup-based\nvite ignores the extra field; Rolldown is now happy.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(openstory): return `moduleType` from the virtual story entry load…",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T08:38:11Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d468558451caead5fd552d43665d13f982b2cd16",
          "body": "Single command replaces the manual sequence of:\n  pnpm add -D vite @vitejs/plugin-react\n  pnpm exec openstory init   # scaffold preview + vite.config\n  # hand-edit vite.config for tsconfig aliases + react dedupe + next/navigation\n  # hand-edit preview for globals.css, polyfills, provider decorators\n\n[…]\n Playwright-based verification step: keeps the dep\nsurface minimal and lets the user / their agent run `openstory dev` and\niterate from console output.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat(openstory): add `openstory setup` for zero-config project bootstrap",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T08:36:27Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "83c273e28baa7600e4055895af52bb8b2791e242",
          "body": "Static `import * as storyModule` in the generated virtual entry could\nthrow at module-evaluation time (e.g. t3-env's server-side-var validator\nfiring on a transitively imported `*.server.ts` file). Such errors\nescaped any try/catch and the iframe rendered empty.\n\nConvert the story-module import (and\n[…]\nc panel the React `StoryErrorBoundary` already shows for\nrender-time crashes, so both classes of failure are visible and don't\nbreak iframe navigation.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(openstory): surface story module-load errors in the iframe",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T08:24:36Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2be5cba4645abbab6394aa1da7106d95d602627b",
          "body": "- Shell page (`/`) sets `document.title = manifest.projectName` once the\n  manifest loads (e.g. \"same-next\", \"paper\") instead of the static\n  \"Openstory\".\n- Per-story iframe HTML (both dev `renderStoryIframeHtml` and\n  `openstory build`'s `renderStoryHtmlForBuild`) now reads the project name\n  from \n[…]\nnifest and renders `<story-id> · <project name>` in `<title>`,\n  with a clean fallback to `<story-id> · Openstory` when no project name\n  is available.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat(openstory): use the consumer's project name as document.title",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T05:53:36Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "fae7fa4b1d3ca34016547080ee8fdbc15d92c574",
          "body": "… story error boundary\n\nPer-story scan across same + scissors caught five systematic crash patterns.\nEach is fixed at the generator or renderer layer.\n\n- Classify generic collection type references properly: `Array<T>`,\n  `ReadonlyArray<T>`, `Iterable<T>`, `ArrayLike<T>`, `Set<T>`, `ReadonlySet<T>`\n\n[…]\nis the single biggest UX improvement when iterating across an\n  auto-generated story set — one broken component can no longer brick\n  the whole iframe.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(openstory): collection types, alias components, ref placeholders,…",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T05:47:43Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "68ada78496265470a9a8c3f9c2a3745163b22103",
          "body": "…date-named props\n\n- Add optional `defaultRender(component)` hook to `OpenstoryRenderer`. Boot's\n  `pickRenderFunction` now uses it whenever neither the story nor the meta\n  defines a `render`. The React adapter implements it as\n  `(args) => createElement(component, args)`.\n\n  Previously the boot re\n[…]\nestamp`, or `time` now default to an ISO 8601 string so `new Date(value)`\n  and `date-fns` helpers don't throw \"Invalid time value\" on default stories.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(openstory): renderer.defaultRender + date placeholder for opaque …",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T05:37:59Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f078513b223e1ebfac063269452cc2c928a7008d",
          "body": "…ts, sync version from package.json\n\n- React adapter wraps `() => Component` (boot's default-render fallback) with\n  `createElement(component, args)` so `export const Default: Story = {}` no\n  longer throws \"Functions are not valid as a React child\".\n- Required `array` props now default to `[]` and \n[…]\nlks up from\n  `import.meta.url`). The CLI `--version` flag and manifest `openstoryVersion`\n  now stay in sync with the published package automatically.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(openstory): render bare components, default required arrays/objec…",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T05:17:11Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e861ba36813ece52b976c9609ccf72c54da17ad4",
          "body": null,
          "is_bot": false,
          "headline": "0.0.7",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T05:07:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "90a36fe5a196c3c586b566b95de3fdf665a2b2bc",
          "body": "…lding\n\nWalks oxc-parsed TSX with full type resolution (cross-file imports,\ntsconfig path aliases with `extends` chains, interface heritage,\nintersections, discriminated unions of object types, `Partial`/`Required`/\n`Readonly`/`Pick`/`Omit`, `React.FC<P>`, `forwardRef<_, P>`, cva\n`VariantProps<typeo\n[…]\nagainst ~500 OSS React repos from\nreact-doctor-evals — 32k+ generated story files, 40k+ stories, 100%\nparse success through openstory's own CSF parser.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat(openstory): add `generate` command for static CSF 3 story scaffo…",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T05:02:11Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "60c1131ba4a41270f68eebe96279937de4139a47",
          "body": "Resolve display title from package.json name (or directory basename) and\nexpose projectName/projectRoot on the manifest for the top bar.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat(openstory): show project name in shell from package.json",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T03:46:04Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "e552af8bf26c329cf0860f066cc8a754bff09ef0",
          "body": null,
          "is_bot": false,
          "headline": "0.0.6",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T02:37:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "282208510f8919d1d2cc7b0448cbac40ea6992b6",
          "body": "…8923\n\nfeat(openstory): synthesize stories from components (`--components` flag, no files on disk)",
          "is_bot": false,
          "headline": "Merge pull request #3 from millionco/cursor/add-auto-stories-command-…",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-22T02:36:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "10597b9970a7f57e3ab6e723f82f48d423f572c4",
          "body": "Each subcommand is now declared with its own options, defaults, and\ndescription, so `openstory --help` and `openstory <cmd> --help` both\nproduce a structured usage block instead of the hand-rolled one.\n\nBehavioral parity with the previous mri-based CLI:\n- dev:     --port, --host, --open, --framework\n[…]\nror (no callers after the switch); 'cli'\n  dropped from the OpenstoryErrorCategory union.\n- mri dependency removed; commander ^14 added.\n\nCo-authored-by: Aiden Bai <aidenybai@users.noreply.github.com>",
          "is_bot": false,
          "headline": "refactor(openstory): swap `mri` for `commander` in the CLI",
          "author_name": "Cursor Agent",
          "author_login": "cursoragent",
          "committed_at": "2026-05-22T02:34:08Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4c06a93a9688a84829b4d3ef265fd5cfef5bb528",
          "body": "…p sweep)\n\nRan deslop-cli against ./packages/openstory with explicit entry points\nfor each `exports` field, the CLI bin, the shell SPA, and the test\nsuite. The orphaned items below were verified by grep before removal.\n\nFiles removed:\n- src/shell/src/components/ui/tooltip.tsx (no importers)\n- src/sh\n[…]\nto defineConfig().\n\nAfter: deslop reports 0 unused files / exports / dependencies and 0\ncircular imports across 114 files / 403 exports.\n\nCo-authored-by: Aiden Bai <aidenybai@users.noreply.github.com>",
          "is_bot": false,
          "headline": "chore(openstory): drop unused files, exports, and dependencies (deslo…",
          "author_name": "Cursor Agent",
          "author_login": "cursoragent",
          "committed_at": "2026-05-22T02:30:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7c9f0398463cadc27556a077a32b2821b1ab03c3",
          "body": "- parallelize parseFile() calls in ComponentStoriesBuilder.build() with\n  Promise.all; sort the file list first to preserve deterministic story\n  ordering.\n- collapse the .map().filter() chain in deriveTitleFromPath() to a single\n  for...of pass.\n- import openstory directly from src/plugin/plugin.js in the integration\n  test instead of through the barrel re-export.\n\nCo-authored-by: Aiden Bai <aidenybai@users.noreply.github.com>",
          "is_bot": false,
          "headline": "chore(openstory): address review-bot nits in component-stories",
          "author_name": "Cursor Agent",
          "author_login": "cursoragent",
          "committed_at": "2026-05-22T02:29:36Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bab2888b6dec384f5338272d65d26f32e2071538",
          "body": "…ng `auto` CLI command\n\nThe on-the-fly story synthesis lives on entirely. Renamed to make it\nsymmetric with the existing `stories` option:\n\n  openstory({ stories: ['**/*.stories.tsx'] })\n  openstory({ components: true })\n  openstory({ components: { include: [...], ignore: [...] } })\n\nCLI flags on de\n[…]\nre removed - users that want\nstories on disk can still hand-write them; the synthesized path covers\nthe rest with zero disk maintenance.\n\nCo-authored-by: Aiden Bai <aidenybai@users.noreply.github.com>",
          "is_bot": false,
          "headline": "refactor(openstory): rename `auto` to `components`; remove file-writi…",
          "author_name": "Cursor Agent",
          "author_login": "cursoragent",
          "committed_at": "2026-05-22T02:29:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "47c6a242273185c4541cd5cec83f83b8e87f8baf",
          "body": "Generates a story for every component in the repo at runtime - no\n`*.stories.*` files are written to disk. The manifest, iframe HTML, and\nvirtual entry modules are all synthesized in memory and re-derive on\nfile change via Vite's HMR pipeline.\n\n- new plugin option: `auto: true | { components, ignore\n[…]\n-written stories win on id collisions.\n\nThe file-writing `openstory auto` command stays available for users who\ndo want stories on disk.\n\nCo-authored-by: Aiden Bai <aidenybai@users.noreply.github.com>",
          "is_bot": false,
          "headline": "feat(openstory): ephemeral auto stories via `--auto` on dev/build",
          "author_name": "Cursor Agent",
          "author_login": "cursoragent",
          "committed_at": "2026-05-22T02:29:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "32eaca76f8016170ff222533e5fedf50d60d0d73",
          "body": "Adds a new CLI command `openstory auto` that scans the repository for\ncomponents (not just existing story files) and generates a CSF 3 stories\nfile (\"book\") for each one. Globs can be passed positionally to scope\nthe search; otherwise framework-aware defaults are used.\n\n- React/Solid: detects Pascal\n[…]\nSupports --framework, --out, --ignore, --force, --dry-run, and --json\nflags. Existing stories files are preserved unless --force is set.\n\nCo-authored-by: Aiden Bai <aidenybai@users.noreply.github.com>",
          "is_bot": false,
          "headline": "feat(openstory): add `auto` command to scaffold stories from components",
          "author_name": "Cursor Agent",
          "author_login": "cursoragent",
          "committed_at": "2026-05-22T02:29:36Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f792ff01fcc441a68d4f0293fd7b83d1deb8b123",
          "body": "feat(shell): make UI responsive on mobile",
          "is_bot": false,
          "headline": "Merge pull request #2 from millionco/cursor/mobile-responsive-shell-7db1",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-21T10:45:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9a718664534d15de257f6dd8af4cbd4eed075409",
          "body": "The Openstory shell layout was unusable on narrow viewports: the 288px\nsidebar pushed the canvas off-screen, the top-bar selects overflowed,\nand the horizontal controls panel was cramped.\n\n- Add useIsMobile hook driven by a 768px MOBILE_BREAKPOINT_PX media query\n- Render the sidebar as an overlay dr\n[…]\noverflowing\n- Stack controls-panel label above the input on narrow widths and bump\n  the panel height on mobile so inputs aren't clipped\n\nCo-authored-by: Aiden Bai <aidenybai@users.noreply.github.com>",
          "is_bot": false,
          "headline": "feat(shell): make UI responsive on mobile",
          "author_name": "Cursor Agent",
          "author_login": "cursoragent",
          "committed_at": "2026-05-21T10:39:59Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "048e990be93cf6fb5a9e4cf3b58a3c63f7eae967",
          "body": "…utput\n\nVite's manifest output is now enabled in `openstory build`. Each\nstory's import graph is walked from the emitted manifest, and every\ntransitively-imported CSS asset (e.g. styles imported by preview.tsx)\ngets a `<link rel=\"stylesheet\">` injected into the per-story HTML.\nBefore this, dist/assets/*.css was emitted but never referenced, so\ndeployed iframes loaded unstyled.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(openstory): link CSS extracted from story dependencies in build o…",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-21T09:00:27Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "1f70c0b2fa4a97c0b93186991a06f8109820bdba",
          "body": "Run vite.build() programmatically with the openstory plugin so each\nstory's `virtual:openstory-story-entry?id=…` import is bundled to a\nreal `dist/__story/<id>/entry.js`. Copy the shell SPA to `dist/` so\n`/` serves the tree UI instead of 404. Stories now load the bundled\nentry via `<script type=\"mod\n[…]\nnorepo subpackages whose `package.json`\nlists more than one supported framework can disambiguate without\nadding the plugin to their own vite.config.ts.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "fix(openstory): make `openstory build` produce a deployable static site",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-21T08:53:09Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b8a5b8a613732248aba80abca91aa980167377e9",
          "body": "Hand-emit the test entry's DTS from scripts/build-test-dts.mjs because\nthe auto-DTS bundler couldn't inline @testing-library/jest-dom/vitest\n(it imports TestingLibraryMatchers from a sibling that doesn't re-export\nit). The hand-rolled DTS re-exports vitest + testing-library symbols and\ntriple-slash \n[…]\ntesting-library/jest-dom so jest-dom matchers\nattach to expect ambiently. Consumers no longer need @ts-expect-error\nwhen importing from openstory/test.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "feat(openstory): ship dist/test.d.ts for openstory/test",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-21T08:41:02Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f5a7b3fb6ea67892a8478087dbb17bb384de1dbf",
          "body": "Rename package, directory, identifiers, constants, error classes,\nvirtual module ids, manifest route, and docs URL from openbook to\nopenstory across the entire monorepo.\n\nCo-authored-by: Cursor <cursoragent@cursor.com>",
          "is_bot": false,
          "headline": "chore: rename openbook to openstory",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-21T08:16:24Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "18ed6d10d5587b1dff6926654d0e3a58b9686bb4",
          "body": "- README pitch is now \"Storybook for Agents\" with a single plain-English\n  follow-up: \"Openbook is a drop-in replacement for Storybook. Your\n  existing stories work as-is.\"\n- Strip em-dashes from all hand-written text: README, CLI help, init\n  output, error messages, comments, changeset, ATTRIBUTION\n[…]\ne punctuation per context.\n- The two remaining em-dashes (CSF sanitization regex + its test input)\n  are intentional; Openbook must strip em-dash to match Storybook's CSF\n  spec sanitization behavior.",
          "is_bot": false,
          "headline": "docs: rewrite README pitch as \"Storybook for Agents\"; remove em-dashes",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-21T08:04:58Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "beb84202d786a64f85d60a7f204cf7fa24af3561",
          "body": "Mirror packages/openbook/README.md to root README.md, matching the\nreact-grab structure: tagline + pitch, Quick Start, How It Works with\nexample, Manual Installation per framework (React/Solid/Vue/Svelte),\nMigrate from Storybook diff, CLI command list, Resources & Contributing\nBack, License.",
          "is_bot": false,
          "headline": "docs: rewrite README in react-grab format",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-21T08:01:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "aafd434c4f6fc37a8cdf7f6b343f3cf30d7a8fce",
          "body": "- Replace `permissions: {}` (which revokes even the checkout token) with\n  the minimum scopes pkg-pr-new needs: contents:read, pull-requests:write,\n  id-token:write.\n- Update repository.url and bugs.url in packages/openbook/package.json to\n  the actual GitHub repo (millionco/openstory). The package npm name stays\n  `openbook` per the rename.",
          "is_bot": false,
          "headline": "fix(ci): grant pkg-pr-new permissions, sync repo URLs to openstory",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-21T07:57:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0828af2d3238bd86414c42a0795e541e8f181fa3",
          "body": "- Rename package, classes (Ode* → Openbook*), constants (ODE_* → OPENBOOK_*),\n  CLI command, npm specifiers (ode/* → openbook/*), and all internal tokens.\n- Move packages/ode → packages/openbook via git mv (rename history preserved).\n- Add openbook/vue and openbook/svelte renderer adapters (Vue 3 cr\n[…]\n removes vite CLI binary). Drop unsupported\n  `excludedFiles` oxlint field. Ignore Next.js auto-generated next-env.d.ts.\n  Suppress 2 false-positive no-unassigned-vars warnings on SolidJS ref pattern.",
          "is_bot": false,
          "headline": "chore: rename ode to openbook, add vue+svelte adapters, fix CI",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-21T07:55:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5bc16bc332e3d04ae157335367837a43c7127a2f",
          "body": null,
          "is_bot": false,
          "headline": "fix",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-21T07:24:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1bf23f6a766af82219ba13d6e917e2ea0f82f9c7",
          "body": "- add custom easing curves to index.css (ease-out, ease-in-out, ease-drawer)\n- buttons get active:scale(0.97) with 150ms ease-out transition for press feedback\n- select/tooltip content scales from radix transform-origin variable, not center\n- drop transition-colors from static badges (no hover, no a\n[…]\nn --accent so selection is visually distinct\n- hover background set to transparent (only true selection highlights)\n\nfixture:\n- inject react-grab init() in preview.tsx so every iframe gets the overlay",
          "is_bot": false,
          "headline": "polish shell ui per emil kowalski principles",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-21T04:01:38Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8a5e70088efdee5f4c0ff811625fbd2b8942138e",
          "body": null,
          "is_bot": false,
          "headline": "init",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-21T00:16:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "43894e715e6bed59263b0446c7706f85c3e79618",
          "body": null,
          "is_bot": false,
          "headline": "chore: gitignore .next build artifacts",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-20T21:35:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5a060200736466b2bf496501cecc07acccef07c2",
          "body": null,
          "is_bot": false,
          "headline": "chore: scaffold ode monorepo",
          "author_name": "Aiden Bai",
          "author_login": "aidenybai",
          "committed_at": "2026-05-20T21:35:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 1,
      "commits_last_year": 52,
      "latest_release_at": "2026-07-18T05:48:28Z",
      "latest_release_tag": "openstory@0.1.0",
      "releases_from_tags": false,
      "days_since_last_push": 5,
      "active_weeks_last_year": 4,
      "days_since_latest_release": 5,
      "mean_days_between_releases": null
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 50,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "openstory",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "components",
            "csf",
            "react",
            "solid",
            "stories",
            "storybook",
            "ui",
            "vite"
          ],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/openstory",
          "is_deprecated": false,
          "latest_version": "0.1.0",
          "repository_url": "https://github.com/millionco/openstory",
          "versions_count": 17,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 2891,
          "first_published_at": "2026-05-21T08:20:28.107000Z",
          "latest_published_at": "2026-07-18T05:48:26.598000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 5
        }
      ]
    },
    "popularity": {
      "forks": 2,
      "stars": 16,
      "watchers": 0,
      "fork_history": {
        "days": [
          {
            "date": "2026-06-17",
            "count": 1
          },
          {
            "date": "2026-07-11",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 2,
        "total_forks": 2
      },
      "star_history": null,
      "open_issues_and_prs": 1
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "apps/website/tsconfig.json",
        "packages/openstory/src/shell/tsconfig.json",
        "packages/openstory/tsconfig.json"
      ],
      "toolchain_manifests": [],
      "largest_source_bytes": 56023,
      "source_files_sampled": 135,
      "oversized_source_files": 0,
      "agent_instruction_files": [
        "AGENTS.md",
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 2340
    },
    "dependencies": {
      "manifests": [
        "package.json"
      ],
      "advisories": {
        "error": null,
        "scope": null,
        "source": null,
        "findings": [],
        "collected": false,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 0,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm"
      ],
      "dependencies": [
        {
          "name": "next",
          "manifest": "apps/website/package.json",
          "ecosystem": "npm",
          "version_constraint": "^15.3.2"
        },
        {
          "name": "react",
          "manifest": "apps/website/package.json",
          "ecosystem": "npm",
          "version_constraint": "^19.1.0"
        },
        {
          "name": "react-dom",
          "manifest": "apps/website/package.json",
          "ecosystem": "npm",
          "version_constraint": "^19.1.0"
        },
        {
          "name": "commander",
          "manifest": "packages/openstory/package.json",
          "ecosystem": "npm",
          "version_constraint": "^14.0.3"
        },
        {
          "name": "fast-glob",
          "manifest": "packages/openstory/package.json",
          "ecosystem": "npm",
          "version_constraint": "^3.3.2"
        },
        {
          "name": "oxc-parser",
          "manifest": "packages/openstory/package.json",
          "ecosystem": "npm",
          "version_constraint": "^0.108.0"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 5,
        "open_issues": 1,
        "closed_ratio": 0,
        "closed_issues": 0,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "aidenybai",
          "commits": 41,
          "avatar_url": "https://avatars.githubusercontent.com/u/38025074?v=4"
        },
        {
          "type": "User",
          "login": "cursoragent",
          "commits": 7,
          "avatar_url": "https://avatars.githubusercontent.com/u/199161495?v=4"
        },
        {
          "type": "User",
          "login": "ben-million",
          "commits": 2,
          "avatar_url": "https://avatars.githubusercontent.com/u/210088851?v=4"
        },
        {
          "type": "User",
          "login": "binarytide",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/899298?v=4"
        }
      ],
      "contributors_sampled": 4,
      "top_contributor_share": 0.804
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "code-quality.yml",
        "integration.yml",
        "publish-any-commit.yml",
        "publish.yml",
        "test-build.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "pnpm-lock.yaml"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 3,
            "reason": "1 out of 3 merged PRs checked by a CI test -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 1/26 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 3,
            "reason": "project has 1 contributing companies or organizations -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "18 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "0a0f5a73691ebd22acad58f588a4b228ad50d219",
        "ran_at": "2026-07-23T13:48:28Z",
        "aggregate_score": 2.3,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-18T05:47:56Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-07-18T05:47:06Z",
      "ci_last_conclusion": "FAILURE",
      "oldest_open_issues": [
        {
          "number": 1,
          "created_at": "2026-05-20T21:35:31Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/millionco/openstory",
    "host": "github.com",
    "name": "openstory",
    "owner": "millionco"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "at_risk",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 49,
      "inputs": {
        "security": 23,
        "vitality": 66,
        "community": 47,
        "governance": 54,
        "engineering": 48
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "moderate",
        "name": "Vitality",
        "value": 66,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 54,
            "inputs": {
              "commits_last_year": 52,
              "human_commit_share": 0.981,
              "days_since_last_push": 5,
              "active_weeks_last_year": 4
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "4/52 weeks with commits",
                "points": 2.8,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 4
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "52 commits in the last year",
                "points": 15.5,
                "status": "partial",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 52
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "good",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 84,
            "inputs": {
              "releases_count": 1,
              "latest_release_tag": "openstory@0.1.0",
              "releases_from_tags": false,
              "days_since_latest_release": 5,
              "mean_days_between_releases": null
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "1 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "cadence unknown (single release)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "release_cadence_unknown",
                    "params": {}
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 47,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 19,
            "inputs": {
              "forks": 2,
              "stars": 16,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "16 stars",
                "points": 19.1,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 16
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "2 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "good",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 70,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 58,
            "inputs": {
              "packages": [
                "openstory"
              ],
              "dependents": null,
              "ecosystems": "npm",
              "total_downloads": null,
              "monthly_downloads": 2891
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "2,891 downloads/month across npm",
                "points": 46.1,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 2891,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 54,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 22,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 4,
              "top_contributor_share": 0.804
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 80% of commits",
                "points": 4.4,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 80
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "4 contributors",
                "points": 5.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 1 contributing companies or organizations -- score normalized to 3",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "at_risk",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 38,
            "inputs": {
              "merged_prs": 5,
              "open_issues": 1,
              "closed_issues": 0,
              "issue_closed_ratio": 0,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "0% of issues closed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 0
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "5/5 decided PRs merged",
                "points": 38.2,
                "status": "met",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 5,
                      "decided": 5
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 1/26 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "good",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 70,
            "inputs": {
              "followers": 405,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "millionco",
              "public_repos": 32,
              "account_age_days": 1879
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "405 followers of millionco",
                "points": 18.8,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 405,
                      "login": "millionco"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "32 public repos, account ~5 yr old",
                "points": 21.3,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 32
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 5
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "openstory"
              ],
              "ecosystems": "npm",
              "any_deprecated": false,
              "min_days_since_publish": 5
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 5 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "17 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 17
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "at_risk",
        "name": "Engineering Quality",
        "value": 48,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 54,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "5 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "1 out of 3 merged PRs checked by a CI test -- score normalized to 3",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "at_risk",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "topics": [],
              "has_wiki": false,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "critical",
        "name": "Security",
        "value": 23,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "critical",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "packaging",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 23,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 2.3
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "1 out of 3 merged PRs checked by a CI test -- score normalized to 3",
                "points": 0.8,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 1/26 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 1 contributing companies or organizations -- score normalized to 3",
                "points": 0.8,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "18 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 4
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 73,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.863,
              "agent_instruction_files": [
                "AGENTS.md",
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 2340
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "AGENTS.md, CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "AGENTS.md, CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "44 of 51 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 44,
                      "sampled": 51
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 53,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "pnpm-lock.yaml"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [
                "apps/website/tsconfig.json",
                "packages/openstory/src/shell/tsconfig.json",
                "packages/openstory/tsconfig.json"
              ],
              "agent_commit_share": 0.423,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "apps/website/tsconfig.json, packages/openstory/src/shell/tsconfig.json, packages/openstory/tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "apps/website/tsconfig.json, packages/openstory/src/shell/tsconfig.json, packages/openstory/tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "22 of the last 52 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 22,
                      "sampled": 52
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "TypeScript",
              "largest_source_bytes": 56023,
              "source_files_sampled": 135,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "TypeScript (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "TypeScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/135 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 135,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
    "deps.dev does not index npm:openstory@0.1.0; advisories assessed against the repository dependency graph instead"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-23T13:48:39.330486Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/m/millionco/openstory.svg",
  "full_name": "millionco/openstory",
  "license_state": "standard",
  "license_spdx": "MIT"
}

Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.

Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.

How one result sits in the wider record: aggregate statisticsnpm.