Public recordModerate
Software health reportschema 0.27.0 · metrics 2.5.0 · 2026-07-31 02:19 UTC
mpsuesser / effect-oxlint
Write oxlint custom lint rules with Effect v4
mpsuesser/effect-oxlint holds a health index of 60 out of 100, placing it in the Moderate band. It scores highest on Vitality (72/100) and lowest on Security (45/100). It was last updated 8 days ago. A single contributor accounts for most of its recent work.
60
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.
60
Exceptional93-100The record's top tier (≈ top 5%); essentially all checked criteria met
Excellent80-92Strong across the board; minor gaps
Good65-79Healthy; gaps are limited and manageable
Moderate50-64Acceptable with notable gaps; review recommended
Weak35-49Material weaknesses across several areas
At Risk20-34Significant weaknesses; adoption warrants caution
Critical1-19Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
The weighted overall 57 is calibrated to 60 on the published index scale (record calibration 2026-08-02).
Ownership
Marc SuesserPersonal account
39 followers23 public repossince Nov 2024
This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish | Tags |
|---|---|---|---|---|---|---|
| npm | effect-oxlint | 0.3.3 | 15,542 | 7 | 8 days ago | asteffecteslintlintlinteroxcoxlintpluginrulestypescript |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
72
Development activity
54Moderate
How it's scored
| 28.8/36 | Push recency — last push 8 days ago |
| 4.2/36 | Commit cadence — 6/52 weeks with commits |
| 16/18 | Commit volume — 60 commits in the last year |
| 5/10 | OpenSSF Scorecard: Maintained — 6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5 |
Inputs used
| commits_last_year | 60 |
| human_commit_share | 1 |
| days_since_last_push | 8 |
| active_weeks_last_year | 6 |
Release discipline
100Exceptional
How it's scored
| 27/27 | Ships releases — 7 releases published |
| 36/36 | Release recency — latest release 8 days ago |
| 27/27 | Release cadence — a release every ~18.5 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 7 |
| latest_release_tag | v0.3.3 |
| releases_from_tags | no |
| days_since_latest_release | 8 |
| mean_days_between_releases | 18.5 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
54
Popularity & adoption
25At Risk
How it's scored
| 25/60 | Stars — 36 stars |
| 0/25 | Forks — 1 forks |
| 0/15 | Watchers — 1 watchers |
Inputs used
| forks | 1 |
| stars | 36 |
| watchers | 1 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
77Good
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (MIT) |
| 18/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 6.3/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| readme_badges | — |
| has_contributing | yes |
| has_issue_template | no |
| has_code_of_conduct | no |
| readme_badge_services | — |
| has_pull_request_template | yes |
How it's scored
| 55.9/80 | Monthly downloads — 15,542 downloads/month across npm |
| 0/20 | Registry dependents — not reported by this ecosystem |
Inputs used
| packages | effect-oxlint |
| dependents | — |
| ecosystems | npm |
| total_downloads | — |
| monthly_downloads | 15,542 |
Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
55
Maintainer resilience (bus factor)
12Critical
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 0.4/22.5 | Commit distribution — top contributor authored 98% of commits |
| 2.7/13.5 | Contributor breadth — 2 contributors |
| 0/10 | OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 2 |
| top_contributor_share | 0.983 |
Issue & PR responsiveness
83Excellent
How it's scored
| 42/42 | Issue resolution — 100% of issues closed |
| 30/30 | PR acceptance — 1/1 decided PRs merged |
| 0/13 | Newcomer PR acceptance — no first-time contributor's PR decided in 30d |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 1/29 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 1 |
| open_issues | 0 |
| closed_issues | 1 |
| prs_merged_7d | — |
| prs_decided_7d | — |
| prs_merged_30d | — |
| prs_decided_30d | — |
| issue_closed_ratio | 1 |
| closed_unmerged_prs | 0 |
| first_time_authors_30d | — |
| first_time_prs_merged_30d | — |
| first_time_prs_decided_30d | — |
Excluded from scoring (no data or not applicable): newcomer_pr_acceptance. Remaining weights renormalized.
Ownership & stewardship
44Weak
How it's scored
| 10/30 | Ownership backing — personal (user) account |
| 0/20 | Verified domain — not applicable to user accounts |
| 11.5/25 | Owner reach — 39 followers of mpsuesser |
| 13.4/25 | Track record — 23 public repos, account ~1 yr old |
Inputs used
| followers | 39 |
| owner_type | User |
| is_verified | — |
| owner_login | mpsuesser |
| public_repos | 23 |
| account_age_days | 607 |
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.
Package maintenance
100Exceptional
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on npm |
| 35/35 | Publish recency — latest publish 8 days ago |
| 20/20 | Version history — 7 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | effect-oxlint |
| ecosystems | npm |
| any_deprecated | no |
| min_days_since_publish | 8 |
Engineering Quality
Are baseline engineering and documentation practices in place?
55
Engineering practices
48Weak
How it's scored
| 24/24 | CI workflows — 2 workflow(s) |
| 24/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — 0 out of 1 merged PRs checked by a CI test -- score normalized to 0 |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Documentation
65Good
How it's scored
| 30/30 | README |
| 0/25 | Documentation directory |
| 15/15 | Documentation / homepage site — https://www.npmjs.com/package/effect-oxlint |
| 10/10 | Repository description |
| 10/10 | Topics — 11 topics |
| 0/10 | Wiki |
Inputs used
| topics | ast, effect, eslint, lint-rules, linter, oxc, oxlint, plugin, static-analysis, typescript, lint |
| has_wiki | no |
| homepage | https://www.npmjs.com/package/effect-oxlint |
| has_readme | yes |
| has_docs_dir | no |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
45
Security posture
31At Risk
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — 0 out of 1 merged PRs checked by a CI test -- score normalized to 0 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 1/29 approved changesets -- score normalized to 0 |
| 0/2.5 | Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 3.8/7.5 | Maintained — 6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5 |
| 5/5 | Packaging — packaging workflow detected |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 1.5/7.5 | Vulnerabilities — 8 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 17 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 1 |
| scorecard_aggregate | 3.1 |
Excluded from scoring (no data or not applicable): signed_releases. Remaining weights renormalized.
Dependency advisories
100Exceptional
How it's scored
| 35/35 | Direct dependencies free of known advisories — no direct dependency carries a known advisory |
| 25/25 | Indirect dependencies free of known advisories — no indirect dependency carries a known advisory |
| 0/40 | No advisories left outstanding — no advisory carries a publication date |
Inputs used
| source | osv |
| advisories | 0 |
| affected_packages | 0 |
| assessed_packages | 1 |
| unassessed_packages | 0 |
| affected_by_severity | none |
| direct_affected_packages | 0 |
Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:effect-oxlint@0.3.3 runtime dependency closure — what installing the published package pulls in — 1 packages. Reachability is not analyzed.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.
63
Agent context & guidance
85Excellent
How it's scored
| 45/45 | Agent instructions — AGENTS.md |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 58 of 60 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.967 |
| agent_instruction_files | AGENTS.md |
| agent_instruction_max_bytes | 7,053 |
How it's scored
| 0/18 | One-command bootstrap |
| 22/22 | Automated tests |
| 0/11 | Lint / format config |
| 11/11 | Static type checking — tsconfig.json |
| 0/10 | Reproducible environment |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 60 |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | — |
| has_dockerfile | no |
| typed_language | yes |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | tsconfig.json |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
Code legibility for models
100Exceptional
How it's scored
| 45/45 | Type-checkable code — TypeScript (statically typed) |
| 55/55 | Manageable file sizes — 0/26 source files over 60KB |
Inputs used
| primary_language | TypeScript |
| largest_source_bytes | 27,208 |
| source_files_sampled | 26 |
| oversized_source_files | 0 |
Key facts
36GitHub stars
2contributors
60commits, last 12 months
8days since last push
7releases
1bus factor
0open issues
npmpackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
OpenSSF Scorecard 3.1 / 10
3.1aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 0 | CI-Tests | 0 out of 1 merged PRs checked by a CI test -- score normalized to 0 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 1/29 approved changesets -- score normalized to 0 |
| 0 | Contributors | project has 0 contributing companies or organizations -- score normalized to 0 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 5 | Maintained | 6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5 |
| 10 | Packaging | packaging workflow detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| n/a | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 2 | Vulnerabilities | 8 existing vulnerabilities detected |
Direct dependencies 1
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| npm | @oxlint/plugins | ^1.66.0 | package.json |
All dependencies not collected
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Dependency advisories 0
Installing npm:effect-oxlint@0.3.3 pulls in 1 packages, direct and transitive: 0 carry known advisories, of which 0 are direct dependencies.
No known advisories affect the assessed dependencies.
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"ast",
"effect",
"eslint",
"lint-rules",
"linter",
"oxc",
"oxlint",
"plugin",
"static-analysis",
"typescript",
"lint"
],
"is_fork": false,
"size_kb": 203,
"has_wiki": false,
"homepage": "https://www.npmjs.com/package/effect-oxlint",
"languages": {
"TypeScript": 203461
},
"pushed_at": "2026-07-22T04:46:59Z",
"created_at": "2026-04-01T07:35:41Z",
"owner_type": "User",
"updated_at": "2026-07-27T07:10:55Z",
"description": "Write oxlint custom lint rules with Effect v4",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript"
]
},
"owner": {
"blog": null,
"name": "Marc Suesser",
"type": "User",
"login": "mpsuesser",
"company": null,
"location": "San Francisco, CA",
"followers": 39,
"avatar_url": "https://avatars.githubusercontent.com/u/190225290?v=4",
"created_at": "2024-11-30T21:59:28Z",
"is_verified": null,
"public_repos": 23,
"account_age_days": 607
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.3.3",
"kind": "patch",
"published_at": "2026-07-22T04:46:59Z"
},
{
"tag": "v0.3.2",
"kind": "patch",
"published_at": "2026-06-08T21:52:58Z"
},
{
"tag": "v0.3.1",
"kind": "patch",
"published_at": "2026-05-23T11:01:51Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2026-05-23T10:08:44Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2026-04-24T10:28:07Z"
},
{
"tag": "v0.1.1",
"kind": "patch",
"published_at": "2026-04-13T03:17:55Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2026-04-01T23:23:40Z"
}
],
"recent_commits": [
{
"oid": "37ea33bf5684c00cf4d6d26a8826329dc6fee1e9",
"body": "Update effect and @effect/vitest to 4.0.0-beta.100 while preserving the existing SourceCode callable API.",
"is_bot": false,
"headline": "chore(release): v0.3.3",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-07-22T04:46:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6ad5a2db5489eb7bf2da1b5d541f27bab2b9f516",
"body": "Update effect and @effect/vitest to 4.0.0-beta.78 (peer range ^4.0.0-beta.78). Switch npm publish to OIDC trusted publishing (Node 24 + npm@latest, no NPM_TOKEN).",
"is_bot": false,
"headline": "chore(release): v0.3.2",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-06-08T21:52:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "91fac4e85d4beeaffc0d2458b75d8efffdf52139",
"body": null,
"is_bot": false,
"headline": "ci(jsr): rely on automatic provenance",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-05-23T11:03:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2d02e7c1768a9de275a7665d2b93bbe891b1c0b5",
"body": "Add module docs for public entrypoints, make the RuleContext service base explicit for JSR fast-check, and publish JSR releases with provenance.",
"is_bot": false,
"headline": "fix(jsr): remove slow type diagnostics",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-05-23T11:01:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f5284b1cfb7e6a04fcecd47a1f844179b7abef83",
"body": null,
"is_bot": false,
"headline": "ci(publish): allow manual release dispatch",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-05-23T10:36:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "578f6562413a48e9d68ab63aa36eaf9f0501ca1f",
"body": "Generate recommended and all Oxlint configs from Plugin.define, publish built dist entrypoints, and update the release toolchain for v0.3.0.",
"is_bot": false,
"headline": "feat(plugin): ship generated config presets",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-05-23T09:58:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aa30c910e09b8c2c649926e70a723b5beca51e59",
"body": "README touch-ups for the new API surface:\n- `banCallOfMember` in the convenience-factories example\n- `banCallOfMember` in the Modules table\n- Features bullet for `Testing.*` notes the `effect-oxlint/testing` subpath\n\nBumps package.json and jsr.json to 0.2.0 and adds the `./testing`\nsubpath to jsr.json (already in package.json exports).\n\nCloses the 0.2.0 CHANGELOG section.",
"is_bot": false,
"headline": "chore(release): v0.2.0",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-24T10:27:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c7f02562bd85a24ed5440ad01457510f35622a4",
"body": "Round up the API and tooling changes shipped since beta.47:\nTesting subpath export, dropped flat re-exports, AST generic\nnarrowing + unified calleeIdentifier, kebab-cased generated rule\nnames, new `banCallOfMember` / `memberCalls` spec entry, split\n`SourceCode.getText` into `getText` / `getNodeText`, and the\nnew error-channel docs.",
"is_bot": false,
"headline": "docs(changelog): log Unreleased work from the 0.2.0 cycle",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-24T10:13:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fc535243e7daf4c609e43e6822a8de8775c5de37",
"body": "Visitor handlers run through the FFI bridge in `Rule.define`\n(`Effect.runSync` over oxlint's synchronous plugin API), so their\nerror channel is fixed at `never`. This constraint was implicit \\u2014\nusers could easily write a rule that calls a fallible sub-effect and\nbe surprised when TypeScript dema\n[…]\ncommended `Effect.catch` pattern for fallible\n sub-effects.\n- Cross-reference it from `Rule.define`'s JSDoc.\n- Add a top-level \"Handler Error Channel\" section to `README.md`\n just before `## Types`.",
"is_bot": false,
"headline": "docs: document fixed 'never' error channel for visitor handlers",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-24T10:13:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "93b4d820c508e75ae28edb51b9fdf26ac1198661",
"body": "The previous `getText` overload accepted an `Option<Node>` plus\noptional before/after counts, which required callers to either pass\n`Option.some(node)` explicitly or call with zero args. Worse, the\nno-arg path resolved the `Option` with a `null as never` cast.\n\nSplit the API:\n- `getText()` \\u2014 wh\n[…]\n(no arguments)\n- `getNodeText(node, beforeCount?, afterCount?)` \\u2014 node-specific\n text, optionally with surrounding characters\n\nThis removes the cast and makes intent explicit at every call site.",
"is_bot": false,
"headline": "refactor(source-code): split getText into getText + getNodeText",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-24T10:12:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "22ddb226266f1d978cf136b40d9caa5cf829d8b5",
"body": "Adds a standalone `Rule.banCallOfMember(obj, prop, opts)` factory and\na `memberCalls` entry on `BanMultipleSpec` for the common case of\nbanning `obj.prop(...)` method calls (e.g. `Effect.runSync(\\u2026)`,\n`console.log(\\u2026)`).\n\nThe \"call of member\" pattern previously required spelling out a full\nv\n[…]\n stays declarative.\n\nTests: 6 new cases for `banCallOfMember` (match, property list, non-\nmatching obj, non-matching prop, bare identifier no-op, name shape),\n1 new case for `banMultiple.memberCalls`.",
"is_bot": false,
"headline": "feat(rule): add banCallOfMember factory and memberCalls spec entry",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-24T10:11:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9926f39c9efc376a226fe826bd8ea7612854e0d5",
"body": "Generated rule names from the `ban*` factory family now consistently\nkebab-case their input segments so `banStatement('ThrowStatement')`\nproduces `ban-throw-statement` (not `ban-ThrowStatement`), and\n`banMember('JSON', ['parse', 'stringify'])` produces\n`ban-json-parse-stringify`. The `kebab` transform is idempotent on\nalready-kebab strings, so factories that today accept kebab input\n(e.g. `banCallOf('fetch')`) are unaffected.",
"is_bot": false,
"headline": "refactor(rule): kebab-case generated rule names",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-24T09:54:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b6dfe84190f6746ea08e6496f3d4fc4c0af90a05",
"body": "…fier\n\n`AST.findAncestor` and `AST.hasAncestor` now accept a\n`T extends string` literal and narrow the returned node's\n`type` field to the same literal, mirroring the pattern used\nby `AST.narrow`. A new private `hasAncestorType` predicate keeps\nthe narrowing cast-free.\n\nIntroduce `AST.calleeIdentifi\n[…]\nhe same\n`.callee` shape at runtime. Replaces the private\n`newExprCalleeName` helper duplicated in `Rule.ts`; swaps both\n`banNewExpr` and the `newExprs` branch of `banMultiple` to the\nshared extractor.",
"is_bot": false,
"headline": "refactor(ast, rule): tighter ancestor generics + unified calleeIdenti…",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-24T09:53:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6d25f65d222245734a0c7e5feb1a40def346c2d6",
"body": "`Testing` was a ~1,200-line namespace imported unconditionally from\nthe main barrel, which forced every runtime consumer of\n`effect-oxlint` to ship the mock builders. Expose it instead at\n`effect-oxlint/testing` via an `exports` subpath so production\nbundles stay lean and test code uses the dedicate\n[…]\ns can\nreach all of those fields via `const ctx = yield* RuleContext`\ndirectly; the standalone accessors remain on `src/RuleContext.ts`\nfor internal use and for callers who import from the module path.",
"is_bot": false,
"headline": "refactor(pkg): move Testing to /testing subpath + drop flat re-exports",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-24T09:53:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f5e151518202864d670c8096bf7d17a26b832def",
"body": null,
"is_bot": false,
"headline": "docs(changelog): log Effect beta.57 bump and .references/ gitignore",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-24T08:55:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7145f8949e743b4157007752684772320fa4d259",
"body": "Bumps `effect` and `@effect/vitest` from 4.0.0-beta.47 to\n4.0.0-beta.57 in devDependencies, peerDependencies, overrides,\nand the README install snippets. All 250 tests and `tsgo` pass\nwith no source-code changes required — this range is fully\nbackwards-compatible for the APIs this library uses\n(Context.Service, Effect.fn, Layer.{succeed,effect}, Option,\nRef, Arr, dual).",
"is_bot": false,
"headline": "chore(deps): bump Effect to 4.0.0-beta.57",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-24T08:55:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "280660c141bfcf312e2519dd2c4f196626f98661",
"body": "Developers keep a local clone of the Effect v4 source under\n`.references/effect-v4/` (used by the effect-* skill set for\nAPI lookups during coding). Without the gitignore entry,\n`vp check` and `vp lint` walk into the clone and choke on\nEffect source files that their embedded oxfmt/oxlint parser\nversion can't handle (e.g. beta TypeScript features in\nHttpApiScalar.ts). Ignoring the directory keeps `bun run check`\nscoped to the 25 project files.",
"is_bot": false,
"headline": "chore(gitignore): ignore .references/ local Effect source clones",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-24T08:55:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce28cee15d46ba046368fc94206b6de26c7d9f0a",
"body": "…nges\n\nAdds a header linking to the Keep a Changelog / SemVer conventions\nand populates `[Unreleased]` with the packaging, scripts, and docs\nchanges landed in this branch. Back-versions `0.1.1` and `0.1.0`\nheadings into bracketed-link style for consistency.",
"is_bot": false,
"headline": "docs(changelog): adopt Keep-a-Changelog format and log Unreleased cha…",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-24T08:43:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "214bace97eb8f25d50edb91a3204f3d8713cbe05",
"body": "Matches `package.json` (`packageManager: bun@1.3.12`) and CI\n(`bun-version: '1.3.12'`). Removes drift noted during review.",
"is_bot": false,
"headline": "docs(agents): bump documented Bun version to 1.3.12",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-24T08:43:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bb6f4e3d1f9438661375197ea2162de1fa754d57",
"body": "Documents that `effect-oxlint` ships TypeScript source (no\ncompiled `dist/`) and lists the supported runtime/bundler\nconfigurations. Placed near the bottom so it doesn't crowd the\ntutorial content above.",
"is_bot": false,
"headline": "docs(readme): add Requirements section for TS-source distribution",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-24T08:43:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26f9d38d8630c23087839f3d6c0266be7fc9edcc",
"body": "The `vp` binary ships with a `#!/usr/bin/env node` shebang, and\nNode can't load the TypeScript `vite.config.ts` directly\n(`ERR_UNKNOWN_FILE_EXTENSION`). Running `bunx --bun vp` forces\nthe Bun runtime, which loads `.ts` natively. Fixes `bun run check`\nlocally without touching CI (which installs `vp` via\n`voidzero-dev/setup-vp@v1`).",
"is_bot": false,
"headline": "fix(scripts): invoke vp via Bun so it can load TS vite.config.ts",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-24T08:43:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c06fd015ae5b7541036f3935059f6f5e1ef0fc41",
"body": "Declares `types` at the top level and under the `exports[\".\"]`\ncondition so TypeScript tools that only read one or the other\nconsistently pick up `./src/index.ts`.\n\n`.npmignore` was redundant with the `files` whitelist in\n`package.json`; `npm pack --dry-run` confirms the published\ntarball still contains only `src/`, `README.md`, `LICENSE`,\n`CHANGELOG.md`, and `package.json`.",
"is_bot": false,
"headline": "chore(pkg): add types exports condition and drop redundant .npmignore",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-24T08:43:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a6c732aca2cab073c21522c32e05af9b7348db77",
"body": null,
"is_bot": false,
"headline": "chore(ci): update setup-node to v6",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-13T03:23:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "69fd184f20fe0cadb7a3526b9fe9fc22dbbccc92",
"body": null,
"is_bot": false,
"headline": "chore(release): prepare 0.1.1",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-13T03:17:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7353b5a8ed6ddd6af1b02aa3a1c0c0e0f8c160b1",
"body": "…nment\n\nchore: align release metadata with effect beta.47",
"is_bot": false,
"headline": "Merge pull request #2 from BleedingDev/fix/effect-beta47-release-alig…",
"author_name": "Marc Suesser",
"author_login": "mpsuesser",
"committed_at": "2026-04-13T03:14:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e6c394f13982761316881622091296ffbe8deff6",
"body": null,
"is_bot": false,
"headline": "chore: align release metadata with effect beta.47",
"author_name": "Petr Glaser",
"author_login": "BleedingDev",
"committed_at": "2026-04-12T02:05:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0db9e77bdccf1a58a185cdaee73a56acd0dbf657",
"body": null,
"is_bot": false,
"headline": "chore: update Effect dependencies to beta.46",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-10T23:34:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a59e90ae4fdc52c610c8ffcff565181435bb72e2",
"body": null,
"is_bot": false,
"headline": "fix: exclude markdown from formatter",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-02T02:55:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f50852afe24bb695bd27dfebf5bc8e40c4f081d7",
"body": null,
"is_bot": false,
"headline": "docs: bare install commands, one per code block",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-02T02:50:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6e07f0c9babdd371b67ddc3b807ade4123c78b2f",
"body": null,
"is_bot": false,
"headline": "docs: use table layout for install commands",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-02T02:49:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "118b96df49139257de321ecf7ec0b988b3c5a353",
"body": null,
"is_bot": false,
"headline": "docs: move install labels into code blocks as comments",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-02T02:46:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a15dae28c7c9c039188924aaafcce3b5a0ac13f",
"body": null,
"is_bot": false,
"headline": "docs: use inline code labels for install options",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-02T02:44:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f7104dc581afeb47555640de0bbb1798e677602c",
"body": null,
"is_bot": false,
"headline": "docs: separate install commands into individual code blocks",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-02T02:41:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f948c1ecfc2dcdfe6ccc5b094f8de40384e5b8a5",
"body": null,
"is_bot": false,
"headline": "chore: remove .vscode from repo, document tsgo setup in CONTRIBUTING",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-02T02:37:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "10223e341ed16f0e0b156a1624a526cbdd66a60e",
"body": null,
"is_bot": false,
"headline": "chore: remove opencode config from repo, add to gitignore",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-02T02:33:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7f94e54477deab0a094b090d6428f27aaede88da",
"body": null,
"is_bot": false,
"headline": "docs: add badges, multi-registry install, contributing link to README",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-02T02:15:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "943ff0d40c662acd5e98ca5a4ea9e44be3ce275f",
"body": null,
"is_bot": false,
"headline": "fix(ci): remove build step (ships TS source), add deps install for JSR",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-01T23:14:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f2ed7f10dbb8984d94828a5356eea8b47b8f3e3",
"body": null,
"is_bot": false,
"headline": "fix(ci): add bun setup for test and typecheck steps",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-01T23:11:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a5bd665890a7b2a1d9bc1aa6a9986eade2d35048",
"body": null,
"is_bot": false,
"headline": "fix(ci): use bun run test instead of vp test for @effect/vitest compat",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-01T23:10:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6ef474eebd343149df352f240448d4354d30d8fc",
"body": "…-effect lint rules",
"is_bot": false,
"headline": "prepare: add JSR config, dual npm+JSR publish workflow, remove oxlint…",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-01T23:07:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ca6bb192e595765895aed9a5ed89ad53dbf60d3",
"body": "The vp binary runs under Node.js (#!/usr/bin/env node) which cannot\nload .ts config files. setup-vp installs vp globally with proper\nNode.js support and handles bun detection from packageManager field.",
"is_bot": false,
"headline": "ci: use voidzero-dev/setup-vp@v1 for CI",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-01T20:06:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b2f9c99a70b7bf1782dfcefd72aafe65a860a846",
"body": "The vite override was still pinned to 0.1.14 which cannot load .ts\nconfig files via Node.js in CI.",
"is_bot": false,
"headline": "fix: update vite override to vite-plus-core 0.1.15",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-01T19:53:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6476ed07b873dfb17638d405db2cb1c99a49059e",
"body": "vite-plus 0.1.14 failed in CI with ERR_UNKNOWN_FILE_EXTENSION when\nloading vite.config.ts via Node.js. Resolved in 0.1.15.\nAlso bump actions/checkout to v6 to resolve Node.js 20 deprecation.",
"is_bot": false,
"headline": "fix: update vite-plus to 0.1.15 and actions/checkout to v6",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-01T19:44:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "85661d699196c80eb29b140de4ed48d3d3c15372",
"body": "- Remove PLAN.md, add .npmignore, add .opencode/ to .gitignore\n- Add repository/homepage/bugs/keywords/author/files to package.json\n- Move effect to peerDependencies with ^4.0.0-beta.43 range\n- Replace native JS methods with Effect modules (Arr.reduce, Arr.join,\n Arr.map, Str.trim) across Visitor, \n[…]\nles\n- Add RuleContext.test.ts, expand SourceCode/Rule/Scope/Token tests\n (215 -> 250 tests), fix it->test consistency in Visitor.test.ts\n- Re-initialize CHANGELOG.md and AGENTS.md for initial release",
"is_bot": false,
"headline": "prepare 0.1.0: audit cleanup for initial publish",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-01T18:01:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e2415f29f7ea1e3aa2ba84066714b1c242876358",
"body": "Code quality improvements:\n- SourceCode.getText accepts Option<ESTree.Node> instead of nullable param\n- Diagnostic.extractFixes accepts unknown at boundary, guards internally\n- Testing.messages/messageIds return ReadonlyArray<Option<string>>\n- AST.narrow uses proper type guard instead of cast\n- Rule\n[…]\neer deps)\n- Add proper type declarations in AST matching examples\n\nLint config:\n- Add FFI boundary overrides for modules wrapping oxlint types\n- Disable embedded language formatting for markdown files",
"is_bot": false,
"headline": "fix: resolve all 36 lint warnings and add typed visitor narrowing",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-01T12:23:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0742533850ba2fc9e506ca7d96e8e405c60409c1",
"body": "…improvements\n\n- Rule.banCallOf: ban bare identifier calls (fetch, useState, etc.)\n- Rule.banNewExpr: ban new expressions (new Date, new Error, etc.)\n- Rule.banMultiple: compose call/new/member/import/statement bans\n- Testing.newExpr: accept string callee, auto-wrap in id()\n- Testing.ifStmt: make al\n[…]\nests\n- Testing.messages/messageIds: extract diagnostics without nesting\n- Visitor.tracked: generic type param narrows predicate node type\n- README: document ESTree re-exports, comments param, new APIs",
"is_bot": false,
"headline": "feat: add banCallOf, banNewExpr, banMultiple factories and ergonomic …",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-01T11:49:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ac226fc037e8ec1f29081552f931b83ea6d55201",
"body": "- Visitor.ts: remove redundant `as OxlintVisitor` — R.map return is\n already assignable\n- AST.ts: replace `node as StaticMemberExpression` with proper\n `isStaticMember` type guard that checks both computed and property type\n- Rule.ts: replace `node as MemberExpression/ImportDeclaration` casts in\n banMember/banImport with AST.narrow + Option.flatMap composition",
"is_bot": false,
"headline": "refactor: remove 4 unnecessary type casts",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-01T11:38:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d498231edafab1129cd1c20f3c91aab735a6f2f7",
"body": null,
"is_bot": false,
"headline": "ci: add GitHub issue templates, PR template, and CI/publish workflows",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-01T11:10:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b3db6599466140e242fbe49dac87085a60f26342",
"body": null,
"is_bot": false,
"headline": "docs: add LICENSE, CHANGELOG, and CONTRIBUTING",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-01T11:10:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7f9f2720a63786cc6b348c1be7d7f5b43ae58245",
"body": "New builders for statements (switchStmt, forStmt, forInStmt,\nforOfStmt, whileStmt, doWhileStmt), expressions (yieldExpr,\nunaryExpr), declarations (varDeclarator, exportNamedDecl),\nimport specifiers (importDeclWithSpecifiers, importSpecifier,\nimportNamespaceSpecifier), TypeScript nodes (tsAsExpr, tsU\n[…]\nAliasDecl), and class\nnodes (classDecl, propertyDef, methodDef).\n\nAlso adds optional comments param to program() and comments field\nto MockContextOptions, wired into getAllComments() and ast.comments.",
"is_bot": false,
"headline": "feat: add 22 new Testing builders, MockContext comments support",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-01T11:09:12Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "77a77d35d8c0b9e04728d47e5aa55e7ab00443ca",
"body": "These tests only verified that each builder returned the correct\n`type` field — proving nothing beyond what actual consumer tests\nalready validate. Removes 27 tests.",
"is_bot": false,
"headline": "chore: remove circular builder self-tests from Testing.test.ts",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-01T11:09:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8ea4953ace823bf599ea630cb14be92e34658f7c",
"body": "… module\n\ntest/_builders.ts was a strict subset of src/Testing.ts. Update\nAST.test.ts, Rule.test.ts, and Visitor.test.ts to import builders\nfrom Testing instead of the internal duplicate.",
"is_bot": false,
"headline": "refactor: delete redundant _builders.ts, migrate tests to use Testing…",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-01T11:08:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d257043dc14aabb277babbd27f8f65b8e627d4b5",
"body": "Node's TypeScript strip-only mode does not support namespace\ndeclarations, causing oxlint plugin loading to fail. Flatten the\nBuilders namespace into direct module exports and update all test\ncall sites accordingly.",
"is_bot": false,
"headline": "fix: replace namespace declaration with direct exports in Testing module",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-01T10:44:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "50bf746a2a6dfdb4026000ad9f93175756afcf2f",
"body": "…tive loops with recursion, normalize mock builders\n\n- src/AST.ts: remove redundant cast in narrow(), replace imperative\n while loops in memberPath() and findAncestor() with recursive helpers\n- src/Visitor.ts: remove | undefined from EffectVisitor index signature,\n remove unnecessary R.filter/cast\n[…]\ntest/Testing.test.ts: remove unused Option import, fix expect-in-if,\n remove redundant tryStmt/parent casts\n- vite.config.ts: remove node:path import, add src/Testing.ts to\n test-file lint overrides",
"is_bot": false,
"headline": "fix: address lint warnings — remove unnecessary casts, replace impera…",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-01T10:38:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b6f7f7e8b8ba1c5e56694269e6a71ee544d50b16",
"body": null,
"is_bot": false,
"headline": "docs: add AGENTS.md and README.md for public release",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-01T09:47:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0eb37290c8c55a964e39879b5efbea89b49c0030",
"body": "Replace @effect/language-service patch with @effect/tsgo + @typescript/native-preview.\nAdd VS Code settings for tsgo integration.\nRemove unnecessary pipe() wrapper in Visitor.merge.\ntsgo --noEmit now reports zero diagnostics.",
"is_bot": false,
"headline": "chore: migrate to @effect/tsgo, fix unnecessaryPipe diagnostic",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-01T09:37:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "47ed3b921f109e83b75a5be4bdd767ed936c3bd5",
"body": "…, testing infrastructure\n\nPhase 2: AST.narrow (dual), AST.memberPath, Visitor.filter, Visitor.accumulate\nPhase 3: SourceCode, Scope, Token, Comment modules with Option-wrapped queries\nPhase 4: Testing module with 30+ builders, mock context, runners, assertions\nUpdated barrel exports with new modules and expanded type re-exports\n\n216 tests passing (was 94), 0 type errors, 82 expected warnings",
"is_bot": false,
"headline": "feat: complete Phases 2-4 — convenience combinators, full API surface…",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-01T09:32:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb74845975fc0c76494774b6438f35840c36afb5",
"body": null,
"is_bot": false,
"headline": "Add --fix to check script, run full test suite in pre-commit",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-01T07:45:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bb956ff1b2f1003f9e749ebb97c5eb5c65e31b14",
"body": null,
"is_bot": false,
"headline": "Add pre-commit hook via vite-plus staged config",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-01T07:37:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "36bb514eb352adca988416e5cc77739176850ef5",
"body": "Effect-first oxlint plugin SDK — all source modules and Phase 1 test\nsuite. Modules: RuleContext (ServiceMap.Service), AST (Option-returning\nmatchers), Visitor (on/onExit/merge/tracked combinators), Diagnostic\n(builders + fix helpers), Rule (define + banMember/banImport/banStatement),\nPlugin (define\n[…]\nrastructure: mock AST node builders, mock oxlint Context factory,\nrunRule/runRuleMulti helpers, mockRuleContextLayer for it.effect tests.\nUses @effect/vitest with real vitest (not vite-plus override).",
"is_bot": false,
"headline": "feat: Phase 1 core infrastructure with tests (94 passing)",
"author_name": "Felicia Fancybottom",
"author_login": "mpsuesser",
"committed_at": "2026-04-01T07:35:04Z",
"body_truncated": true,
"is_coding_agent": false
}
],
"releases_count": 7,
"commits_last_year": 60,
"latest_release_at": "2026-07-22T04:46:59Z",
"latest_release_tag": "v0.3.3",
"releases_from_tags": false,
"days_since_last_push": 8,
"active_weeks_last_year": 6,
"days_since_latest_release": 8,
"mean_days_between_releases": 18.5
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 71,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "effect-oxlint",
"exists": true,
"license": "MIT",
"keywords": [
"ast",
"effect",
"eslint",
"lint",
"linter",
"oxc",
"oxlint",
"plugin",
"rules",
"typescript"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/effect-oxlint",
"is_deprecated": false,
"latest_version": "0.3.3",
"repository_url": "https://github.com/mpsuesser/effect-oxlint",
"versions_count": 7,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 15542,
"first_published_at": "2026-04-01T23:23:58.062000Z",
"latest_published_at": "2026-07-22T04:47:28.651000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 8
}
]
},
"popularity": {
"forks": 1,
"stars": 36,
"watchers": 1,
"fork_history": {
"days": [
{
"date": "2026-04-12",
"count": 1
}
],
"complete": true,
"collected": 1,
"total_forks": 1
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 27208,
"source_files_sampled": 26,
"oversized_source_files": 0,
"agent_instruction_files": [
"AGENTS.md"
],
"agent_instruction_max_bytes": 7053
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 1,
"malicious_count": 0,
"assessed_package": "npm:effect-oxlint@0.3.3",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "@oxlint/plugins",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.66.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 1,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 1,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "mpsuesser",
"commits": 59,
"avatar_url": "https://avatars.githubusercontent.com/u/190225290?v=4"
},
{
"type": "User",
"login": "BleedingDev",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/12586960?v=4"
}
],
"contributors_sampled": 2,
"top_contributor_share": 0.983
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"publish.yml"
],
"has_docs_dir": false,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 0,
"reason": "0 out of 1 merged PRs checked by a CI test -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 1/29 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 5,
"reason": "6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 2,
"reason": "8 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "37ea33bf5684c00cf4d6d26a8826329dc6fee1e9",
"ran_at": "2026-07-31T02:19:00Z",
"aggregate_score": 3.1,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-22T04:47:31Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-04-13T03:14:01Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/mpsuesser/effect-oxlint",
"host": "github.com",
"name": "effect-oxlint",
"owner": "mpsuesser"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": "The weighted overall 57 is calibrated to 60 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 57,
"calibrated": 60,
"calibration": "2026-08-02"
}
}
],
"value": 60,
"inputs": {
"security": 45,
"vitality": 72,
"community": 54,
"governance": 55,
"calibration": "2026-08-02",
"engineering": 55,
"ai_readiness": 63,
"weighted_overall_raw": 57
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 72,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 54,
"inputs": {
"commits_last_year": 60,
"human_commit_share": 1,
"days_since_last_push": 8,
"active_weeks_last_year": 6
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 8 days ago",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 8
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "6/52 weeks with commits",
"points": 4.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 6
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "60 commits in the last year",
"points": 16,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 60
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5",
"points": 5,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "exceptional",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 7,
"latest_release_tag": "v0.3.3",
"releases_from_tags": false,
"days_since_latest_release": 8,
"mean_days_between_releases": 18.5
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "7 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 7
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 8 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 8
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~18.5 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 18.5
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 54,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 25,
"inputs": {
"forks": 1,
"stars": 36,
"watchers": 1,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "36 stars",
"points": 25,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 36
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "1 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 1
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "1 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 1
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 77,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [],
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "good",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 70,
"inputs": {
"packages": [
"effect-oxlint"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 15542
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "15,542 downloads/month across npm",
"points": 55.9,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 15542,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 55,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 12,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 2,
"top_contributor_share": 0.983
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 98% of commits",
"points": 0.4,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 98
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "2 contributors",
"points": 2.7,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 2
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "excellent",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 83,
"inputs": {
"merged_prs": 1,
"open_issues": 0,
"closed_issues": 1,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 0,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 42,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "1/1 decided PRs merged",
"points": 30,
"status": "met",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 1,
"decided": 1
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 1/29 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "weak",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 44,
"inputs": {
"followers": 39,
"owner_type": "User",
"is_verified": null,
"owner_login": "mpsuesser",
"public_repos": 23,
"account_age_days": 607
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "39 followers of mpsuesser",
"points": 11.5,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 39,
"login": "mpsuesser"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "23 public repos, account ~1 yr old",
"points": 13.4,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 23
}
},
{
"code": "account_age_years",
"params": {
"years": 1
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"effect-oxlint"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 8
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 8 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 8
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "7 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 7
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 55,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "weak",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 48,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "2 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 2
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "0 out of 1 merged PRs checked by a CI test -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"topics": [
"ast",
"effect",
"eslint",
"lint-rules",
"linter",
"oxc",
"oxlint",
"plugin",
"static-analysis",
"typescript",
"lint"
],
"has_wiki": false,
"homepage": "https://www.npmjs.com/package/effect-oxlint",
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://www.npmjs.com/package/effect-oxlint",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "11 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 11
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "weak",
"name": "Security",
"value": 45,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 31,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 3.1
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "0 out of 1 merged PRs checked by a CI test -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 1/29 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "6 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 5",
"points": 3.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "8 existing vulnerabilities detected",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "exceptional",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:effect-oxlint@0.3.3 runtime dependency closure — what installing the published package pulls in — 1 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "npm:effect-oxlint@0.3.3",
"assessed": 1
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 1,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 1,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 3
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 63,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.967,
"agent_instruction_files": [
"AGENTS.md"
],
"agent_instruction_max_bytes": 7053
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "AGENTS.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "AGENTS.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "58 of 60 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 58,
"sampled": 60
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "at_risk",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 33,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
"tsconfig.json"
],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 60",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 60
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "exceptional",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 27208,
"source_files_sampled": 26,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/26 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 26,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"top": [
"library"
],
"labels": [
"library"
],
"scores": {
"plugin": 2,
"library": 6
},
"primary": "library",
"evidence": [
{
"tier": "distribution",
"label": "library",
"source": "registry:npm",
"weight": 6
},
{
"tier": "tags",
"label": "plugin",
"source": "tag:plugin",
"weight": 2
}
],
"artifacts": [],
"confidence": "medium",
"host_extension": false,
"runs_as_process": false,
"consumed_by_code": true
},
"metrics_version": "2.5.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-31T02:19:06.946496Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/m/mpsuesser/effect-oxlint.svg",
"full_name": "mpsuesser/effect-oxlint",
"license_state": "standard",
"license_spdx": "MIT"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.5.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — npm.