mizchi/vite-plugin-moonbit holds a health index of 60 out of 100, placing it in the Moderate band. It scores highest on Vitality (76/100) and lowest on Security (40/100). It was last updated 9 days ago. A single contributor accounts for most of its recent work.
60
overall / 100
Moderate
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.
60
Exceptional93-100The record's top tier (≈ top 5%); essentially all checked criteria met
Excellent80-92Strong across the board; minor gaps
Good65-79Healthy; gaps are limited and manageable
Moderate50-64Acceptable with notable gaps; review recommended
Weak35-49Material weaknesses across several areas
At Risk20-34Significant weaknesses; adoption warrants caution
Critical1-19Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
The weighted overall 57 is calibrated to 60 on the published index scale (record calibration 2026-08-02).
How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
Star and fork history 0 ★ / 2 ⇿
0Stars
2Forks
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
OpenSSF Scorecard 4.0 / 10
4.0aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-08-01 09:25 UTC
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 228,
"has_wiki": true,
"homepage": null,
"languages": {
"MoonBit": 4059,
"JavaScript": 21940,
"TypeScript": 77757
},
"pushed_at": "2026-07-22T21:11:38Z",
"created_at": "2025-12-21T13:45:36Z",
"owner_type": "User",
"updated_at": "2026-07-22T21:12:00Z",
"description": "vite plugin for moonbit",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript",
"JavaScript"
]
},
"owner": {
"blog": "https://mizchi.dev",
"name": "Kotaro Chikuba",
"type": "User",
"login": "mizchi",
"company": null,
"location": "Tokyo/Japan",
"followers": 1839,
"avatar_url": "https://avatars.githubusercontent.com/u/73962?v=4",
"created_at": "2009-04-15T07:43:45Z",
"is_verified": null,
"public_repos": 644,
"account_age_days": 6317
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "vite-plugin-moonbit-v0.5.1",
"kind": "other",
"published_at": "2026-07-22T21:11:38Z"
},
{
"tag": "vite-plugin-moonbit-v0.5.0",
"kind": "other",
"published_at": "2026-07-22T21:06:47Z"
},
{
"tag": "vite-plugin-moonbit-v0.4.0",
"kind": "other",
"published_at": "2026-07-22T19:31:21Z"
},
{
"tag": "vite-plugin-moonbit-v0.3.0",
"kind": "other",
"published_at": "2026-05-31T13:09:02Z"
},
{
"tag": "vite-plugin-moonbit-v0.2.1",
"kind": "other",
"published_at": "2026-04-20T04:22:05Z"
},
{
"tag": "vite-plugin-moonbit-v0.2.0",
"kind": "other",
"published_at": "2026-04-18T15:02:25Z"
}
],
"recent_commits": [
{
"oid": "77d0c496c4edcd5aa35c040389d7268268363eb5",
"body": "Co-authored-by: mizchi-release-bot[bot] <277252914+mizchi-release-bot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release vite-plugin-moonbit 0.5.1",
"author_name": "mizchi-release-bot[bot]",
"author_login": "mizchi-release-bot[bot]",
"committed_at": "2026-07-22T21:11:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c8cda7f3dd27c13a08bc654530bc6e031a81ce98",
"body": null,
"is_bot": false,
"headline": "fix: serialize shared example tests",
"author_name": "Kotaro Chikuba",
"author_login": "mizchi",
"committed_at": "2026-07-22T21:10:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "73b6583be3811ffc759437b923c2d95daf7bd86e",
"body": "Co-authored-by: mizchi-release-bot[bot] <277252914+mizchi-release-bot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release vite-plugin-moonbit 0.5.0",
"author_name": "mizchi-release-bot[bot]",
"author_login": "mizchi-release-bot[bot]",
"committed_at": "2026-07-22T21:06:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4b5ef040148a1ee8d1d6d2c7a239d629ecb07af8",
"body": null,
"is_bot": false,
"headline": "feat: bridge npm declaration packages",
"author_name": "Kotaro Chikuba",
"author_login": "mizchi",
"committed_at": "2026-07-22T21:04:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a98b887e1492f17fd03b8d2a8c72c71fd4db2ee7",
"body": "Co-authored-by: mizchi-release-bot[bot] <277252914+mizchi-release-bot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(main): release vite-plugin-moonbit 0.4.0",
"author_name": "mizchi-release-bot[bot]",
"author_login": "mizchi-release-bot[bot]",
"committed_at": "2026-07-22T19:31:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c59273bb52dc880e79d1053849d92a91becf7cc1",
"body": "* feat: finalize TypeScript bridge integrations\n\n* fix: keep bridge examples self-contained\n\n* fix: bundle generated bridge runtime directly\n\n* fix: resolve checked-in TypeScript bridges",
"is_bot": false,
"headline": "feat: finalize TypeScript bridge integrations",
"author_name": "Kotaro Chikuba",
"author_login": "mizchi",
"committed_at": "2026-07-22T19:29:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c5475d108f0aa134382b165f4cff0a79454c9cae",
"body": "…mponents--vite-plugin-moonbit\n\nchore(main): release vite-plugin-moonbit 0.3.0",
"is_bot": false,
"headline": "Merge pull request #17 from mizchi/release-please--branches--main--co…",
"author_name": "Kotaro Chikuba",
"author_login": "mizchi",
"committed_at": "2026-05-31T13:08:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c05f0944d87829e83b4b6615982bfc6b9ca4fb58",
"body": null,
"is_bot": true,
"headline": "chore(main): release vite-plugin-moonbit 0.3.0",
"author_name": "mizchi-release-bot[bot]",
"author_login": "mizchi-release-bot[bot]",
"committed_at": "2026-05-31T13:08:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5cabd9a9e0eda83cdbc2089752f8c7fafee049c",
"body": "moon is introducing a non-JSON `moon.mod` DSL alongside `moon.mod.json`.\nThe plugin already wraps moonbitlang/parser's pkg_parser for moon.work /\nmoon.pkg DSL, but module manifest discovery was still pinned to\nmoon.mod.json.\n\n- Extract manifest discovery from the plugin closure into src/manifest.ts\n\n[…]\neadPkgManifest to the same DSL-first ordering (was JSON-first)\n- Add node:test unit tests and fixtures (pretest builds the parser)\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: support moon.mod DSL manifest format (#16)",
"author_name": "Kotaro Chikuba",
"author_login": "mizchi",
"committed_at": "2026-05-31T13:07:15Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "119b5b625e3a0cc77f756cfd74281e066e00245e",
"body": null,
"is_bot": false,
"headline": "Improve normalized d.ts transparency",
"author_name": "mizchi",
"author_login": "mizchi",
"committed_at": "2026-04-20T13:00:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3fb0bd8c27041f61813902727dd243412c9dab2b",
"body": null,
"is_bot": false,
"headline": "Improve normalized d.ts UX",
"author_name": "mizchi",
"author_login": "mizchi",
"committed_at": "2026-04-20T09:42:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "809f20a44a65febfdfe04d4f35efe1d5dced8c82",
"body": null,
"is_bot": false,
"headline": "Add experimental normalized d.ts support",
"author_name": "mizchi",
"author_login": "mizchi",
"committed_at": "2026-04-20T05:18:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa6491d19d4f96f530861a4f5f7f0f8d02d37c39",
"body": null,
"is_bot": false,
"headline": "Release 0.2.1",
"author_name": "mizchi",
"author_login": "mizchi",
"committed_at": "2026-04-20T04:20:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5202e8dfe763439104d919e35311712df2f822a6",
"body": "Add TypeScript bridge example and auto binding imports",
"is_bot": false,
"headline": "Merge pull request #15 from mizchi/codex/ts-bridge-package",
"author_name": "Kotaro Chikuba",
"author_login": "mizchi",
"committed_at": "2026-04-20T02:56:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0e79aac5c39c87c08c761606ecfbfce28ce682a8",
"body": null,
"is_bot": false,
"headline": "Fix ts bridge example CI",
"author_name": "mizchi",
"author_login": "mizchi",
"committed_at": "2026-04-20T02:54:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ae027ce4fb6e449528cd2a89ae16d8165f6c2042",
"body": null,
"is_bot": false,
"headline": "Mark tsBridge as experimental",
"author_name": "mizchi",
"author_login": "mizchi",
"committed_at": "2026-04-20T02:52:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f7972a0a1589d59a60ec7eff60f38b8c6079c18e",
"body": null,
"is_bot": false,
"headline": "Infer ts bridge defaults and refresh example",
"author_name": "mizchi",
"author_login": "mizchi",
"committed_at": "2026-04-20T02:33:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "df343dcf9165a567ab17025e9550fafa466801a3",
"body": null,
"is_bot": false,
"headline": "Document tsBridge module spec constraints",
"author_name": "mizchi",
"author_login": "mizchi",
"committed_at": "2026-04-19T16:35:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d4361ef979a1a1929ce6c62c8a00775a74183e2",
"body": null,
"is_bot": false,
"headline": "Clarify generated bridge files in TS bridge example",
"author_name": "mizchi",
"author_login": "mizchi",
"committed_at": "2026-04-19T15:29:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ee3cc011b4b16474e6529968d2a6faa6aff6b48",
"body": null,
"is_bot": false,
"headline": "Run TypeScript bridge checks in CI",
"author_name": "mizchi",
"author_login": "mizchi",
"committed_at": "2026-04-19T11:32:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1d905e2509a2ab4122881ab50ad0e49c3f612336",
"body": null,
"is_bot": false,
"headline": "Add TypeScript bridge example and auto binding imports",
"author_name": "mizchi",
"author_login": "mizchi",
"committed_at": "2026-04-19T11:19:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "83e34fc040645e00ef65d330b8bf6eed82b9b234",
"body": "feat: multi-backend support via configurable prefix",
"is_bot": false,
"headline": "Merge pull request #14 from mizchi/claude/multi-backend",
"author_name": "Kotaro Chikuba",
"author_login": "mizchi",
"committed_at": "2026-04-19T09:50:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe50a518920dd242d9564aaa3be30387b13537ed",
"body": "Adds a `prefix` option so the plugin can be instantiated more than\nonce in a single project with distinct import prefixes, enabling\nper-backend mixing:\n\n plugins: [\n moonbit({ target: \"js\" }), // mbt:*\n moonbit({ target: \"wasm-gc\", prefix: \"mbtw:\" }), // mbtw:*\n \n[…]\navy-*.wasm` and runs the exported fibonacci.\n\nCI: add `multi_backend_project` to the examples matrix with an extra\ndual-target moon build step.\n\nhttps://claude.ai/code/session_019zFbq1DvMMWvAnVVQTHUNf",
"is_bot": false,
"headline": "feat: multi-backend support via configurable prefix",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-04-19T09:37:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b7af8aa36d9878ced9bccfa93e2084002429c4bd",
"body": "Adds pull_request: closed trigger so release-please runs automatically\nonce a Release PR is merged, creating the tag and GitHub Release\nwithout requiring a second manual workflow_dispatch. The job-level if\nguard ensures only Release PRs (head.ref starts with release-please--)\ntrigger the tag-creation path; regular feat:/fix: PR merges are ignored.",
"is_bot": false,
"headline": "chore: auto-trigger release-please after Release PR merge",
"author_name": "mizchi",
"author_login": "mizchi",
"committed_at": "2026-04-18T15:49:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af080e502b0f56190fe3a15589d44e09f2744791",
"body": "Replace hustcer/setup-moonbit@v1 with the official curl installer from\ncli.moonbitlang.com, matching the pattern in ci.yaml and avoiding\nan extra third-party action in the supply chain.",
"is_bot": false,
"headline": "fix(ci): use official MoonBit installer instead of third-party action",
"author_name": "mizchi",
"author_login": "mizchi",
"committed_at": "2026-04-18T15:32:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7254a796ea34d5097dce6424b40c12ec5a45c90c",
"body": "The pnpm build step runs a moon_pkg_parser build via moon, so the\npublish workflow needs MoonBit installed before running pnpm build.",
"is_bot": false,
"headline": "fix(ci): install MoonBit in publish workflow",
"author_name": "mizchi",
"author_login": "mizchi",
"committed_at": "2026-04-18T15:13:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4aa3cf85c97ee53c5ab8628a26e98577bad5398c",
"body": null,
"is_bot": true,
"headline": "chore(main): release vite-plugin-moonbit 0.2.0",
"author_name": "mizchi-release-bot[bot]",
"author_login": "mizchi-release-bot[bot]",
"committed_at": "2026-04-18T14:59:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a9b80a324849d2c79838b8bb38c7b460252d983",
"body": "chore: migrate release to release-please + OIDC trusted publishing",
"is_bot": false,
"headline": "Merge pull request #9 from mizchi/chore/release-please",
"author_name": "Kotaro Chikuba",
"author_login": "mizchi",
"committed_at": "2026-04-18T14:16:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f1f4d480c885b620524719890ab528f405df5f99",
"body": "Replace manual npm publish with an automated flow:\n\n- release-please generates Release PRs on demand from Conventional Commits (CHANGELOG auto-generated)\n- release-please.yml is triggered manually via workflow_dispatch (no push-based automation)\n- publish.yml publishes to npm via OIDC Trusted Publishing (no NPM_TOKEN)\n- Authenticates via dedicated GitHub App (app-id 3420845) for Release PR creation",
"is_bot": false,
"headline": "chore: migrate release to release-please + OIDC trusted publishing",
"author_name": "mizchi",
"author_login": "mizchi",
"committed_at": "2026-04-18T14:15:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e1afcaade9162b17b2bc5440e55617ed222a918c",
"body": "feat: moonc diagnostics in Vite error overlay + migrate examples to moon.pkg DSL",
"is_bot": false,
"headline": "Merge pull request #8 from mizchi/claude/error-overlay",
"author_name": "Kotaro Chikuba",
"author_login": "mizchi",
"committed_at": "2026-04-18T10:18:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b9390cc6103c7a055936278344dd00c2c0bcdab5",
"body": "Codex flagged that `data` events on the spawned moon process arrive\nin arbitrary chunks, so naively splitting each chunk on \"\\n\" drops\nany line (including JSON diagnostics from --output-json) that happens\nto straddle two chunks. On noisy builds the overlay would silently\nmiss real compile errors.\n\nK\n[…]\nany trailing partial\nline until more data arrives. Flush the remaining buffer on process\nclose so the last unterminated line is still surfaced.\n\nhttps://claude.ai/code/session_019zFbq1DvMMWvAnVVQTHUNf",
"is_bot": false,
"headline": "fix(overlay): buffer stdout/stderr lines across chunk boundaries",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-04-18T09:00:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3923aea43be73a2aba44e77bb3ddfd53610b5a66",
"body": "Spawn the watch process with --output-json so moon emits line-\ndelimited JSON diagnostics on stdout (alongside the usual human text\nwhich is still mirrored to the terminal). The plugin parses each\ndiagnostic, accumulates them across a build cycle, and commits the\nbatch when moon signals completion:\n\n[…]\nostics parse (warning + error), moon logs\nshow them via [moonbit] prefix, and the error overlay renders the\ncompilation failure in the browser.\n\nhttps://claude.ai/code/session_019zFbq1DvMMWvAnVVQTHUNf",
"is_bot": false,
"headline": "feat: surface moonc diagnostics in Vite's error overlay",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-04-18T08:48:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b82b4917b9fe0afd3d28975e0fb1fd2076fa2163",
"body": "Every package config in the repo (js_project, wasm_project,\nluna_project, monorepo_project, overrides_project, and the\nmoon_pkg_parser tool itself) is now written in moon.pkg DSL form:\n\n import {\n \"mizchi/markdown\",\n }\n\n options(\n link: { \"js\": { \"exports\": [\"parse_markdown\"] } },\n )\n\nAlso\n[…]\nild + vite build) with the\nnew files, including wasm-gc's use-js-builtin-string auto-detection\nwhich exercises the parser against the DSL form.\n\nhttps://claude.ai/code/session_019zFbq1DvMMWvAnVVQTHUNf",
"is_bot": false,
"headline": "examples+tools: convert all moon.pkg.json to moon.pkg DSL",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-04-18T08:48:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a5ec411edc6eead6661d3e57e8c7b2693a088294",
"body": "feat: targeted HMR + parser key normalization",
"is_bot": false,
"headline": "Merge pull request #7 from mizchi/claude/hmr-and-parser",
"author_name": "Kotaro Chikuba",
"author_login": "mizchi",
"committed_at": "2026-04-18T07:37:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "39d1dc26907051d4eca21c575c60c3017648dce5",
"body": "HMR (P1): drop the 50ms debounce-timer flush. fs.watch events now only\naccumulate into pendingChanges; the actual HMR flush happens when moon\nstdout reports build completion. Avoids pushing partially-written\noutputs during long rebuilds and the follow-up fallback reload that\nwould drain empty pendin\n[…]\n\n\nnow yields `{\"is-main\": false}` regardless of iteration order. All 439\nreal-world moon.pkg files still parse; canonical key counts unchanged.\n\nhttps://claude.ai/code/session_019zFbq1DvMMWvAnVVQTHUNf",
"is_bot": false,
"headline": "fix(hmr,parser): address Codex review",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-04-18T06:17:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "69fcecca4b3c1c86f4cab1acb53cc3f068e06753",
"body": "HMR\n---\nPreviously every moon rebuild invalidated every mbt: virtual module and\ntriggered a Vite full-reload. Now the plugin:\n\n- Debounces fs.watch events into a 50ms batch.\n- Reverse-maps each changed `_build/.../x.js` path to its `mbt:<...>` id\n using a deterministic layout: multi-root (nested un\n[…]\nin`,\n`native-stub`, `max-concurrent-tests`, `regex-backend`, `pre-build`).\nAfter: 268 / 69 / 17 / 2 / 0 / 5 respectively, with zero mixed keys.\n\nhttps://claude.ai/code/session_019zFbq1DvMMWvAnVVQTHUNf",
"is_bot": false,
"headline": "feat: targeted HMR + parser key normalization",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-04-18T06:02:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "502de7cd8773e5126ff8a30b70f3e0c2c0473745",
"body": "feat: MoonBit-based DSL parser, source maps, ?worker, auto js-builtin-string",
"is_bot": false,
"headline": "Merge pull request #6 from mizchi/claude/moonbit-dsl-parser",
"author_name": "Kotaro Chikuba",
"author_login": "mizchi",
"committed_at": "2026-04-18T05:47:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91de72709cf34eb33f7ca8b0a347ed89b916488d",
"body": "Stress-tested the parser against 439 real-world moon.pkg files\n(moonbitlang/core + every member of the mooncake dependencies in our\nexamples). All 439 parsed without errors, but the consumer plugin\ncouldn't find the keys it needed because moon.pkg DSL wraps them in\n`options(...)` while moon.pkg.json\n[…]\necks (including\n `use-js-builtin-string` auto-detection) work for DSL as well as JSON\n- No residual `options` wrappers in any of the 439 files\n\nhttps://claude.ai/code/session_019zFbq1DvMMWvAnVVQTHUNf",
"is_bot": false,
"headline": "fix(parser): flatten options(...) to top level for DSL / JSON parity",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-04-18T05:42:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8c61b130b597efe87a9e5052db4a39393341cc94",
"body": "…-string\n\nReplaces the plugin's ad-hoc regex parsing of moon.work with a proper\nMoonBit-native parser built from moonbitlang/parser#pkg_parser. The\nparser lives under tools/moon_pkg_parser/ and is compiled to JS via\n`pnpm build:parser` (runs `moon build --release --target js`) and\nbundled into dist/\n[…]\nrrideHint now reads `moon.pkg` as well as `moon.pkg.json`.\n\nCI: the build job installs moon so `pnpm build` can run build:parser\nbefore tsdown.\n\nhttps://claude.ai/code/session_019zFbq1DvMMWvAnVVQTHUNf",
"is_bot": false,
"headline": "feat: MoonBit-based DSL parser, source maps, ?worker, auto js-builtin…",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-04-18T05:24:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8448e993ea98e2d654c1824807cee5fd7d69628d",
"body": "feat: support moonbit override semantics (virtual / implement / overrides)",
"is_bot": false,
"headline": "Merge pull request #5 from mizchi/claude/moonbit-override-support",
"author_name": "Kotaro Chikuba",
"author_login": "mizchi",
"committed_at": "2026-04-18T04:45:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6e6d04825a12c0f0956dbe7393b624f7be119c42",
"body": "…ides)\n\nMoonBit's moon.pkg.json exposes a trait-like polymorphism:\n\n- `\"virtual\": { \"has-default\": bool }` — interface-only package\n (signatures in pkg.mbti, no impl)\n- `\"implement\": \"user/mod/iface\"` — provides an implementation\n- `\"overrides\": [\"user/mod/impl_x\"]` — main/app picks one at link tim\n[…]\nject: a 4-member workspace with a\nvirtual `spec/iface`, two impls, and `my/app` selecting impl_a via\n`overrides`. Register it in the CI matrix.\n\nhttps://claude.ai/code/session_019zFbq1DvMMWvAnVVQTHUNf",
"is_bot": false,
"headline": "feat: support moonbit override semantics (virtual / implement / overr…",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-04-18T03:22:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8c352e98d30f481d184c8b7a6f03f6192285bee4",
"body": "feat: support moon.work workspaces (monorepo)",
"is_bot": false,
"headline": "Merge pull request #4 from mizchi/claude/moonbit-monorepo-resolver-bD7Gq",
"author_name": "Kotaro Chikuba",
"author_login": "mizchi",
"committed_at": "2026-04-18T02:51:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3e0cf0509575e85019ff404077194827e782b531",
"body": "The previous dep pin (mizchi/luna@0.2.0) had a compile error in its\nown signal.mbt against the current moonc, and the API has since been\nrestructured significantly. Move to 0.19.0 and rewrite the example:\n\n- `mizchi/luna/luna/dom/element` → `mizchi/luna/dom`\n- `mizchi/luna` → `mizchi/luna/js/resourc\n[…]\n..}` string\n interpolation\n\nRename src/lib.mbt → src/app.mbt to reflect the `is-main: true` role,\nand re-enable luna_project in the CI matrix.\n\nhttps://claude.ai/code/session_019zFbq1DvMMWvAnVVQTHUNf",
"is_bot": false,
"headline": "examples: upgrade luna_project to mizchi/luna 0.19",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-04-17T14:59:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b33f83afb16f64bc7dd1eb34d444cbd8fe23393d",
"body": "mizchi/luna@0.2.0 (what luna_project pins) fails to compile with the\ncurrent moonc:\n\n Error: [4033]\n ╭─[ .mooncakes/mizchi/luna/src/luna/signal/signal.mbt:97:16 ]\n 97 │ let active = { val: true }\n ╰─ There is no record definition with the fields: val.\n\nThis is insid\n[…]\nlement` no longer\nexists), so rewriting the example is a separate task. Leave it out of\nCI for now and re-enable after the example is migrated.\n\nhttps://claude.ai/code/session_019zFbq1DvMMWvAnVVQTHUNf",
"is_bot": false,
"headline": "ci: temporarily drop luna_project from matrix",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-04-17T14:46:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5a18cc860bec57689fc507ed3f0be260a1895007",
"body": "The CI workflow builds the plugin at the repo root but the examples\nwere installing vite-plugin-moonbit from npm, so CI was validating\nwhatever was on the registry instead of the PR's code. Switch\njs_project / luna_project / monorepo_project to `link:../..` to\nmatch wasm_project.\n\nAlso fix examples/wasm_project/main.ts which was importing from the\nold `./target/...` path; moon now builds into `./_build/...`.\n\nhttps://claude.ai/code/session_019zFbq1DvMMWvAnVVQTHUNf",
"is_bot": false,
"headline": "ci: link all examples to the local plugin and fix stale paths",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-04-17T14:21:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "90193248bae5a49630a91ddaa52d53d6913f3de2",
"body": "Codex caught that the resolver switched to workspace mode for any\nancestor moon.work, even when the current module wasn't a member.\nNow mirror moon's own logic (find_applicable_workspace_manifest_path):\nwalk ancestors tracking the nearest moon.mod.json; only use a\nmoon.work when that nearest module \n[…]\nns whichever exists.\n\nCI: drop the deprecated `moon install` step (moon >=0.1.20260409\nwarns + fails at workspace roots without moon.mod.json).\n\nhttps://claude.ai/code/session_019zFbq1DvMMWvAnVVQTHUNf",
"is_bot": false,
"headline": "fix: respect workspace membership and single-member layout",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-04-17T14:16:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dd12e1a97c046631d0af5b9e286956f7f725b782",
"body": "Recent moon versions default `moon build` to debug mode, but the plugin\ndefaults `mode: \"release\"`, so the resolver looks at\n`_build/<backend>/release/build/...` and misses the debug artifacts.\nPass `--release` explicitly so the layout matches.\n\nAlso add the new monorepo_project example to the matrix and disable\nfail-fast so one broken example no longer cancels the others.\n\nhttps://claude.ai/code/session_019zFbq1DvMMWvAnVVQTHUNf",
"is_bot": false,
"headline": "ci: add monorepo_project example and pass --release to moon build",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-04-17T14:11:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b36b217fcf407a706e6226e345762c965cf97edf",
"body": "Detect moon.work / moon.work.json by walking upward from `root`, parse\nits `members` list, and read each member's moon.mod.json to build a\nresolver keyed by module name. `mbt:<...>` imports are routed to the\nlongest-prefix-matching member.\n\nOutput paths match moon's multi-root layout in workspace mo\n[…]\nred from the workspace's shared _build/.\n- Legacy single-module path layout preserved (sanity-tested with a\n minimal testuser/legacy project).\n\nhttps://claude.ai/code/session_019zFbq1DvMMWvAnVVQTHUNf",
"is_bot": false,
"headline": "feat: support moon.work workspaces (monorepo)",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-04-17T12:23:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d4461041f7e6c3263fe844e2c8decf1685fb10cc",
"body": "Installed moon v0.1.20260409 locally and ran `moon build --target js`\nagainst the scaffolded workspace. Confirmed:\n\n- `moon work init ./a ./b` produces `moon.work` (TOML-mini-DSL, not\n JSON); `--manifest-path` also accepts `moon.work.json`.\n- Single `_build/` at the workspace root; multi-root artif\n[…]\nple's plugin dep to `file:../..` so the reproduction\nworks inside this repo, and documents the verified layout / failure\nin the example README.\n\nhttps://claude.ai/code/session_019zFbq1DvMMWvAnVVQTHUNf",
"is_bot": false,
"headline": "examples: verify moon.work behavior with real moon toolchain",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-04-17T10:28:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "625450e9b1f1a56a7bd943dbf11913d267dc93a2",
"body": "Adds a two-member workspace (internal/app + internal/shared) wired up\nthrough moon.work. The current resolver does not yet understand\nworkspace mode; the README documents where it breaks and the expected\nmulti-root _build layout so we can iterate on resolver support.\n\nhttps://claude.ai/code/session_019zFbq1DvMMWvAnVVQTHUNf",
"is_bot": false,
"headline": "examples: add monorepo_project scaffolding for moon.work",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-04-17T10:10:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "297c980be48ee47e6e2a58eb3505ba91eddb5c34",
"body": null,
"is_bot": false,
"headline": "0.1.5",
"author_name": "mizchi",
"author_login": "mizchi",
"committed_at": "2026-02-05T15:57:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d4b9050de5e7c7a187aa78218b4288feea3c822",
"body": "feat: support js-string-builtins for wasm-gc target",
"is_bot": false,
"headline": "Merge pull request #3 from fuwasegu/feat/js-string",
"author_name": "Kotaro Chikuba",
"author_login": "mizchi",
"committed_at": "2026-02-05T15:55:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb13492a3a3eb1e3f88f11e1eb682385de41368a",
"body": null,
"is_bot": false,
"headline": "docs",
"author_name": "fuwasegu",
"author_login": "fuwasegu",
"committed_at": "2026-02-05T15:41:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f3ce1c4a45bb879e03fb73d107fbed081b6ac542",
"body": "This commit introduces the `useJsBuiltinString` option.\nSince Vite's default `?init` helper does not support passing compile options (the 3rd argument) to `WebAssembly.instantiateStreaming`, we implemented a custom loader generation using `?url` for the wasm-gc target.\n\nThis enables zero-copy string passing when `use-js-builtin-string: true` is set in moon.pkg.json.",
"is_bot": false,
"headline": "feat: support js-string-builtins for wasm-gc target",
"author_name": "fuwasegu",
"author_login": "fuwasegu",
"committed_at": "2026-02-05T15:35:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ff0ad307ab7583eacee1ed4e67d22d43abb3a77d",
"body": null,
"is_bot": false,
"headline": "chore: ci",
"author_name": "mizchi",
"author_login": "mizchi",
"committed_at": "2026-01-28T05:20:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a71044c1564de71efa6e01889047e755bc3ab42d",
"body": "fix: use Vite root for WASM path resolution in load hook",
"is_bot": false,
"headline": "Merge pull request #1 from fuwasegu/fix/wasm-path-resolution",
"author_name": "Kotaro Chikuba",
"author_login": "mizchi",
"committed_at": "2026-01-28T04:28:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "317981417f160c84fed8db31133a463c32984e64",
"body": " The load hook was using the MoonBit root (options.root) to calculate\n relative paths for WASM imports. This caused issues when the MoonBit\n project is nested inside the Vite project (e.g., resources/moon/).\n\n Changed path.relative(root, resolved) to path.relative(config.root,\n resolved)\n so that the generated import paths are relative to Vite's project\n root.",
"is_bot": false,
"headline": "fix: use Vite root for WASM path resolution in load hook",
"author_name": "fuwasegu",
"author_login": "fuwasegu",
"committed_at": "2026-01-28T03:02:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4114096ba1aa2930929624b4d23ee7c75d6b59e6",
"body": null,
"is_bot": false,
"headline": "chore: v0.1.3",
"author_name": "mizchi",
"author_login": "mizchi",
"committed_at": "2026-01-12T07:42:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0bdabd663895aad8882bb2dbf2587f190fd3800d",
"body": null,
"is_bot": false,
"headline": "fix examples",
"author_name": "mizchi",
"author_login": "mizchi",
"committed_at": "2025-12-30T08:58:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "03583411206943d475029ddc12ebf8d6fba30c45",
"body": null,
"is_bot": false,
"headline": "fix vite default logs",
"author_name": "mizchi",
"author_login": "mizchi",
"committed_at": "2025-12-30T08:53:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c817a40c98f6f940c4c93146ef381f7cf7fbb352",
"body": null,
"is_bot": false,
"headline": "chore: luna 0.2.0",
"author_name": "mizchi",
"author_login": "mizchi",
"committed_at": "2025-12-26T13:31:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5cefd8520e496cb11986355970e473bb4c23721c",
"body": null,
"is_bot": false,
"headline": "update",
"author_name": "mizchi",
"author_login": "mizchi",
"committed_at": "2025-12-25T14:16:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6ac16bc16453cb3242eda72089533c8f325a3272",
"body": null,
"is_bot": false,
"headline": "add luna example",
"author_name": "mizchi",
"author_login": "mizchi",
"committed_at": "2025-12-25T13:46:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "607d5a786c0d88e4c5176a67f8750ded4abae15a",
"body": null,
"is_bot": false,
"headline": "update docs",
"author_name": "mizchi",
"author_login": "mizchi",
"committed_at": "2025-12-21T13:53:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91ca89745a4a52992be53fc6e1b188ea4a68e079",
"body": null,
"is_bot": false,
"headline": "add wasm support",
"author_name": "mizchi",
"author_login": "mizchi",
"committed_at": "2025-12-21T13:44:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7fed25f56236935d18df6f97ff4282506a3a501f",
"body": null,
"is_bot": false,
"headline": "init",
"author_name": "mizchi",
"author_login": "mizchi",
"committed_at": "2025-12-21T13:19:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "15cf94c487e7b19a5fe21cc47c4a49a5ae3d7688",
"body": "Example MoonBit project demonstrating:\n- mbt: import resolution\n- TypeScript type support via tsconfig paths\n- Markdown parsing with mizchi/markdown\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Add examples directory",
"author_name": "mizchi",
"author_login": "mizchi",
"committed_at": "2025-12-21T12:31:16Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "0ee3061e08b6639175a11b077466e20e84fe1391",
"body": "Vite plugin for MoonBit that enables:\n- Import resolution with mbt: prefix\n- Auto-start moon build --watch subprocess\n- HMR on file changes\n- TypeScript type support via generated .d.ts\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Initial commit: vite-plugin-moonbit",
"author_name": "mizchi",
"author_login": "mizchi",
"committed_at": "2025-12-21T10:31:58Z",
"body_truncated": false,
"is_coding_agent": true
}
],
"releases_count": 6,
"commits_last_year": 68,
"latest_release_at": "2026-07-22T21:11:38Z",
"latest_release_tag": "vite-plugin-moonbit-v0.5.1",
"releases_from_tags": false,
"days_since_last_push": 9,
"active_weeks_last_year": 9,
"days_since_latest_release": 9,
"mean_days_between_releases": 19.1
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 42,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "vite-plugin-moonbit",
"exists": true,
"license": "MIT",
"keywords": [
"vite",
"vite-plugin",
"moonbit",
"mbt"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/vite-plugin-moonbit",
"is_deprecated": false,
"latest_version": "0.5.1",
"repository_url": "https://github.com/mizchi/vite-plugin-moonbit",
"versions_count": 11,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 3793,
"first_published_at": "2025-12-21T13:46:35.968000Z",
"latest_published_at": "2026-07-22T21:13:32.458000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 9
}
]
},
"popularity": {
"forks": 2,
"stars": 22,
"watchers": 0,
"fork_history": {
"days": [
{
"date": "2026-01-28",
"count": 1
},
{
"date": "2026-03-26",
"count": 1
}
],
"complete": true,
"collected": 2,
"total_forks": 2
},
"star_history": null,
"open_issues_and_prs": 1
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"examples"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"examples/js_project/tsconfig.json",
"examples/luna_project/tsconfig.json",
"examples/monorepo_project/tsconfig.json",
"examples/multi_backend_project/tsconfig.json",
"examples/overrides_project/tsconfig.json",
"examples/ts_bridge_project/tsconfig.json",
"examples/wasm_project/tsconfig.json",
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 70462,
"source_files_sampled": 23,
"oversized_source_files": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 22,
"open_issues": 1,
"closed_ratio": 0.667,
"closed_issues": 2,
"closed_unmerged_prs": 1
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "mizchi",
"commits": 43,
"avatar_url": "https://avatars.githubusercontent.com/u/73962?v=4"
},
{
"type": "User",
"login": "claude",
"commits": 17,
"avatar_url": "https://avatars.githubusercontent.com/u/81847?v=4"
},
{
"type": "User",
"login": "fuwasegu",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/52437973?v=4"
}
],
"contributors_sampled": 3,
"top_contributor_share": 0.683
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yaml",
"publish.yml",
"release-please.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"pnpm-lock.yaml"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "16 out of 16 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/15 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 6,
"reason": "project has 2 contributing companies or organizations -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 9,
"reason": "9 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 9",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 4,
"reason": "6 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "77d0c496c4edcd5aa35c040389d7268268363eb5",
"ran_at": "2026-08-01T09:25:20Z",
"aggregate_score": 4,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-22T21:13:37Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-22T21:11:28Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 18,
"created_at": "2026-06-28T03:01:16Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/mizchi/vite-plugin-moonbit",
"host": "github.com",
"name": "vite-plugin-moonbit",
"owner": "mizchi"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": "The weighted overall 57 is calibrated to 60 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 57,
"calibrated": 60,
"calibration": "2026-08-02"
}
}
],
"value": 60,
"inputs": {
"security": 40,
"vitality": 76,
"community": 41,
"governance": 62,
"calibration": "2026-08-02",
"engineering": 61,
"ai_readiness": 52,
"weighted_overall_raw": 57
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 76,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"commits_last_year": 68,
"human_commit_share": 0.926,
"days_since_last_push": 9,
"active_weeks_last_year": 9
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 9 days ago",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 9
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "9/52 weeks with commits",
"points": 6.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 9
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "68 commits in the last year",
"points": 16.5,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 68
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "9 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 9",
"points": 9,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "exceptional",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 6,
"latest_release_tag": "vite-plugin-moonbit-v0.5.1",
"releases_from_tags": false,
"days_since_latest_release": 9,
"mean_days_between_releases": 19.1
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "6 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 6
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 9 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 9
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~19.1 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 19.1
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 11,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 11 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 11
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "weak",
"name": "Community & Adoption",
"value": 41,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 21,
"inputs": {
"forks": 2,
"stars": 22,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "22 stars",
"points": 21.4,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 22
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "2 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 2
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 60,
"inputs": {
"packages": [
"vite-plugin-moonbit"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 3793
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "3,793 downloads/month across npm",
"points": 47.7,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 3793,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 62,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 26,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 3,
"top_contributor_share": 0.683
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 68% of commits",
"points": 7.1,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 68
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "3 contributors",
"points": 4.1,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 3
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 6,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 65,
"inputs": {
"merged_prs": 22,
"open_issues": 1,
"closed_issues": 2,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 0.667,
"closed_unmerged_prs": 1,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "67% of issues closed",
"points": 28,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 67
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "22/23 decided PRs merged",
"points": 28.7,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 22,
"decided": 23
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/15 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 73,
"inputs": {
"followers": 1839,
"owner_type": "User",
"is_verified": null,
"owner_login": "mizchi",
"public_repos": 644,
"account_age_days": 6317
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "1,839 followers of mizchi",
"points": 23.5,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 1839,
"login": "mizchi"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "644 public repos, account ~17 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 644
}
},
{
"code": "account_age_years",
"params": {
"years": 17
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"vite-plugin-moonbit"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 9
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 9 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 9
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "11 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 11
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 61,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "3 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 3
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "16 out of 16 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "weak",
"name": "Security",
"value": 40,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "weak",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 40,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 4
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "16 out of 16 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/15 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "9 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 9",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "6 existing vulnerabilities detected",
"points": 3,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 3
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 52,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "weak",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 36,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.683,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "43 of 63 human commits state their intent (structured subject or explanatory body)",
"points": 36.4,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 43,
"sampled": 63
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 52,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"pnpm-lock.yaml"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
"examples/js_project/tsconfig.json",
"examples/luna_project/tsconfig.json",
"examples/monorepo_project/tsconfig.json",
"examples/multi_backend_project/tsconfig.json",
"examples/overrides_project/tsconfig.json",
"examples/ts_bridge_project/tsconfig.json",
"examples/wasm_project/tsconfig.json",
"tsconfig.json"
],
"agent_commit_share": 0.044,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "examples/js_project/tsconfig.json, examples/luna_project/tsconfig.json, examples/monorepo_project/tsconfig.json, examples/multi_backend_project/tsconfig.json, examples/overrides_project/tsconfig.json, examples/ts_bridge_project/tsconfig.json, examples/wasm_project/tsconfig.json, tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples/js_project/tsconfig.json, examples/luna_project/tsconfig.json, examples/monorepo_project/tsconfig.json, examples/multi_backend_project/tsconfig.json, examples/overrides_project/tsconfig.json, examples/ts_bridge_project/tsconfig.json, examples/wasm_project/tsconfig.json, tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "3 of the last 68 commits agent-authored or agent-credited",
"points": 8.8,
"status": "partial",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 3,
"sampled": 68
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "exceptional",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 98,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 70462,
"source_files_sampled": 23,
"oversized_source_files": 1
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "1/23 source files over 60KB",
"points": 52.6,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 23,
"oversized": 1
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "weak",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"examples"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "examples",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "examples"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"labels": [
"library"
],
"scores": {
"plugin": 2,
"library": 6
},
"primary": "library",
"evidence": [
{
"tier": "distribution",
"label": "library",
"source": "registry:npm",
"weight": 6
},
{
"tier": "description",
"label": "plugin",
"source": "description:plugin",
"weight": 2
}
],
"artifacts": [],
"confidence": "medium",
"host_extension": false,
"runs_as_process": false,
"consumed_by_code": true
},
"metrics_version": "2.3.1"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-08-01T09:25:35.180879Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/m/mizchi/vite-plugin-moonbit.svg",
"full_name": "mizchi/vite-plugin-moonbit",
"license_state": "standard",
"license_spdx": "MIT"
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with mizchi/vite-plugin-moonbit. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.3.1, schema v0.27.0 — full methodology · metrics wiki.
