naftiko / polychro

Full resolved dependency set from the GitHub dependency graph: 44 direct and 123 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.

Installing maven:io.polychro:polychro-api@1.0.0-beta2 pulls in 8 packages, direct and transitive: 2 carry known advisories, of which 1 are direct dependencies.

An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.

{
  "data": {
    "repo": {
      "topics": [
        "ai",
        "linter",
        "spec-driven-development",
        "code"
      ],
      "is_fork": false,
      "size_kb": 1104,
      "has_wiki": false,
      "homepage": "https://polychro.io",
      "languages": {
        "Go": 12290,
        "Java": 1324440,
        "Ruby": 20,
        "Shell": 5044,
        "Python": 27604,
        "JavaScript": 10671,
        "TypeScript": 10994
      },
      "pushed_at": "2026-07-24T09:31:06Z",
      "created_at": "2026-05-01T15:40:11Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-24T08:50:56Z",
      "description": "Spec-Driven Linting for Agents",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": null,
      "default_branch": "main",
      "license_spdx_raw": "NOASSERTION",
      "primary_language": "Java",
      "significant_languages": [
        "Java"
      ]
    },
    "owner": {
      "blog": "https://naftiko.io",
      "name": "Naftiko",
      "type": "Organization",
      "login": "naftiko",
      "company": null,
      "location": "United States of America",
      "followers": 88,
      "avatar_url": "https://avatars.githubusercontent.com/u/191936632?v=4",
      "created_at": "2024-12-17T03:04:15Z",
      "is_verified": null,
      "public_repos": 46,
      "account_age_days": 584
    },
    "license": {
      "state": "custom",
      "spdx_id": null,
      "raw_spdx": "NOASSERTION",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v1.0.0-beta2",
          "kind": "prerelease",
          "published_at": "2026-07-15T11:37:24Z"
        },
        {
          "tag": "v1.0.0-beta1",
          "kind": "prerelease",
          "published_at": "2026-06-29T14:42:50Z"
        },
        {
          "tag": "v1.0.0-alpha4",
          "kind": "prerelease",
          "published_at": "2026-06-15T09:57:11Z"
        },
        {
          "tag": "v1.0.0-alpha3",
          "kind": "prerelease",
          "published_at": "2026-05-28T11:27:32Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "d7714271cf1eeeb98651d19fb09ed037872a9f19",
          "body": "Bumps [vitest](https://github.com/vitest-dev/vitest/tree/HEAD/packages/vitest) from 3.2.4 to 3.2.6.\n- [Release notes](https://github.com/vitest-dev/vitest/releases)\n- [Changelog](https://github.com/vitest-dev/vitest/blob/main/docs/releases.md)\n- [Commits](https://github.com/vitest-dev/vitest/commits/v3.2.6/packages/vitest)\n\n---\nupdated-dependencies:\n- dependency-name: vitest\n  dependency-version: 3.2.6\n  dependency-type: direct:development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
          "is_bot": true,
          "headline": "chore(deps-dev): bump vitest in /modules/polychro-node",
          "author_name": "dependabot[bot]",
          "author_login": "dependabot[bot]",
          "committed_at": "2026-07-24T08:50:46Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8b77c85587cb2c231095edc3a910773e896b2ce9",
          "body": "…lychro",
          "is_bot": false,
          "headline": "chore: move Maven modules under a modules/ subfolder in Ikanos and Po…",
          "author_name": "neyea",
          "author_login": "neyeahmed",
          "committed_at": "2026-07-16T13:22:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "107513f232c5c8eb67dd8e66404289d976fce1df",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump beta3 version",
          "author_name": "Jeremie Tarnaud",
          "author_login": "jeremnaf",
          "committed_at": "2026-07-15T16:33:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3ee159da35d3c44af92f55ffa44de5d956523556",
          "body": null,
          "is_bot": false,
          "headline": "chore: remove -snapshot for release",
          "author_name": "Jeremie Tarnaud",
          "author_login": "jeremnaf",
          "committed_at": "2026-07-15T11:24:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8ea6d51c24e7f17b3b1328c81e16bda8b08efbc0",
          "body": null,
          "is_bot": false,
          "headline": "feat: including node go and python in unit testing",
          "author_name": "Farah Trigui",
          "author_login": "farah-t-trigui",
          "committed_at": "2026-07-13T12:42:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bbc62d5ee2f0d72ebdd460b220d60ffd98e67c9c",
          "body": null,
          "is_bot": false,
          "headline": "feat: dependabot for polychro",
          "author_name": "Farah Trigui",
          "author_login": "farah-t-trigui",
          "committed_at": "2026-07-13T12:28:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c541713069772806627fe638143e9332b190cd65",
          "body": "…lueprints#6)",
          "is_bot": false,
          "headline": "chore: rename internal blueprint vocab to design doc (issue naftiko/b…",
          "author_name": "Thomas Eskénazi",
          "author_login": "eskenazit",
          "committed_at": "2026-07-09T15:48:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3cc3a29de18aea17841300d9b43ef53cf53dff6a",
          "body": "The golden repo was renamed on GitHub (naftiko/golden-repo-naftiko). Update the functional references in AGENTS.md and the agents-shared skill-discovery instructions.\n\nRefs naftiko/golden-repo-naftiko#44",
          "is_bot": false,
          "headline": "feat: rename naftiko-golden-repo references to golden-repo-naftiko",
          "author_name": "Thomas Eskenazi",
          "author_login": "eskenazit",
          "committed_at": "2026-07-09T15:48:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f82186efc8dde4d4dfc99223eb2a3f35ca31c416",
          "body": null,
          "is_bot": false,
          "headline": "fix: using badges branch",
          "author_name": "Farah Trigui",
          "author_login": "farah-t-trigui",
          "committed_at": "2026-07-09T13:29:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7e7607d5e59847b0e9d1725b668808b6c1c8e919",
          "body": "Add an agent-inner-loop positioning sentence to the lead paragraph, drop\nthe leading horizontal logo so the value proposition leads, and widen the\narchitecture image (700 to 800 px). Repoint every documentation link from\n1.0.0-alpha4 to 1.0.0-beta1 and change \"upcoming alphas\" to \"upcoming\nreleases\" in the Roadmap bullet.\n\nRefs #73",
          "is_bot": false,
          "headline": "feat: sharpen README positioning and bump doc links to 1.0.0-beta1",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-07-03T08:28:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a0ca7d948b65f8af42ded41ee0bee36149b1ab9d",
          "body": "Cross-repo naming update for naftiko/code-standards#32 (naming axis of golden-repo epic #17). Updates the golden-repo slug/URL in AGENTS.md and the agents-shared discovery shim, and drops the redundant 'code-standards' qualifier in tuto_writer (a transversal skill is by nature served from the golden repo).",
          "is_bot": false,
          "headline": "feat: repoint code-standards references to naftiko-golden-repo",
          "author_name": "Thomas Eskenazi",
          "author_login": "eskenazit",
          "committed_at": "2026-07-02T14:10:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e5025523e39917c783cf26d325e1ff27693e35ce",
          "body": null,
          "is_bot": true,
          "headline": "chore: update badges for feat/removing-gist-logic [skip ci]",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-02T14:06:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c0b3b4aec1c40d7b069fc252494e2c13ac34e4c6",
          "body": null,
          "is_bot": false,
          "headline": "feat: removing gist from quality gates",
          "author_name": "Farah Trigui",
          "author_login": "farah-t-trigui",
          "committed_at": "2026-07-02T14:06:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fa45b3f84e62ee4306a5fd14cbf4b419b541a9d3",
          "body": "Address review comments on PR #70:\n- Update fromString(String,String,String) javadoc: markdown/html now return\n  a structured enriched tree when a DocumentEnricher is on the classpath,\n  falling back to TextNode otherwise (comment #2).\n- Cache DocumentEnricher instances in a static ENRICHERS map (bu\n[…]\nia ServiceLoader, keyed by format) instead of calling\n  ServiceLoader.load() on every fromString invocation (comment #3).\n  Mirrors the JSON_MAPPER/YAML_MAPPER/XML_MAPPER pattern already in the class.",
          "is_bot": false,
          "headline": "fix: update fromString javadoc and cache ServiceLoader enrichers (#38)",
          "author_name": "Thomas Eskenazi",
          "author_login": "eskenazit",
          "committed_at": "2026-07-02T11:55:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f7ccaf4d2cd5a82a31664138f57d72bc00210673",
          "body": "loadDocumentShouldPreserveMarkdownAsText and loadDocumentShouldPreserveHtmlAsText\nasserted the pre-DocumentEnricher fallback behavior (raw TextNode root). Since\npolychro-cli has polychro-markdown/polychro-html as compile dependencies, their\nDocumentEnrichers are always registered via ServiceLoader, \n[…]\nly native-image smoke-test run).\n\nReplace both tests with assertions on the actual projected shape\n($.document.blocks for markdown, $.document.nodes for html), matching the\nbehavior introduced by #38.",
          "is_bot": false,
          "headline": "fix(test): update LintCommandTest for enricher-projected markdown/html",
          "author_name": "Thomas Eskénazi",
          "author_login": "eskenazit",
          "committed_at": "2026-07-02T11:55:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f1bc9cfcdbed624fdda6ef3907d6c3a0623a5e20",
          "body": "Add reflect-config.json entries for MarkdownDocumentEnricher and\nHtmlDocumentEnricher, and a resource-config.json pattern for the\nDocumentEnricher services file, so ServiceLoader can find them in\nthe native binary.\n\nWithout this registration, GraalVM native-image silently drops the\nServiceLoader pro\n[…]\n fires against the projected\nstructure, closing the gap left by the existing exception-only\nchecks. Verified locally in JVM mode: both rulesets produce exit\ncode 2 and the expected diagnostic message.",
          "is_bot": false,
          "headline": "fix: register DocumentEnricher SPI in GraalVM native-image config",
          "author_name": "Thomas Eskénazi",
          "author_login": "eskenazit",
          "committed_at": "2026-07-02T11:55:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e77c8b4c3fd5da9799dc34110a684ff57474bd6d",
          "body": "…rks (#38)\n\nWire the DocumentEnricher SPI in the markdown and html modules so ruleset diagnostics can traverse projected structure instead of a raw TextNode:\n\n- MarkdownDocumentEnricher / HtmlDocumentEnricher parse+project via the existing facades and preserve raw under the raw.content metadata key,\n[…]\n enriched documents (falling back to a textual root otherwise).\n\n- RulesetValidatorFactory advertises markdown and html; javadoc updated to describe enricher-based projection and graceful degradation.",
          "is_bot": false,
          "headline": "feat: register markdown/html DocumentEnrichers so ruleset JSONPath wo…",
          "author_name": "Thomas Eskénazi",
          "author_login": "eskenazit",
          "committed_at": "2026-07-02T11:55:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f3a1583da0aff5f511c81c3925f984b39868f8f5",
          "body": "…t (#38)",
          "is_bot": false,
          "headline": "feat: introduce DocumentEnricher SPI for markdown/html ruleset suppor…",
          "author_name": "Thomas Eskénazi",
          "author_login": "eskenazit",
          "committed_at": "2026-07-02T11:55:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e55e8cf639e1876725c11edcabff85bf546df0bf",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump beta2 snapshot version",
          "author_name": "Jeremie Tarnaud",
          "author_login": "jeremnaf",
          "committed_at": "2026-06-30T08:00:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "74e58ce3ace942056a3371a36518b5ad1d1e48a3",
          "body": null,
          "is_bot": false,
          "headline": "chore: release beta1",
          "author_name": "Jeremie Tarnaud",
          "author_login": "jeremnaf",
          "committed_at": "2026-06-29T14:31:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "53fdb70039b5285560a8a4b39ccd69214e160525",
          "body": null,
          "is_bot": false,
          "headline": "fix(tutorial): address PR #66 review comments (2), (3), (4)",
          "author_name": "Thomas Eskenazi",
          "author_login": "eskenazit",
          "committed_at": "2026-06-29T12:06:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a43a956291dcebdfe10450be0b34bd96936cd64a",
          "body": "Run the 7 Track 1 lint examples against a freshly built polychro 1.0.0-beta1 CLI and replace the UNVERIFIED hypotheses in EXPECTED-OUTPUT.md with the real per-step output. Document two known limitations found during verification: a non-string-key false positive on quoted HTTP status codes (LIMITATIONS #5) and Step 4's .polychro.yml schema config not being consumed (LIMITATIONS #6). Documented only, nothing fixed. Refs naftiko/polychro#49.",
          "is_bot": false,
          "headline": "feat(tutorial): verify Track 1 examples against beta1 CLI",
          "author_name": "Thomas Eskénazi",
          "author_login": "eskenazit",
          "committed_at": "2026-06-29T12:06:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dc15ce7dafda7f9182ca23d4dccdaa266c66595b",
          "body": "Realign the runnable Track 1 example files (step-1..7, schema) from the old /users domain onto the Modern Maritime Registry API contract (GET /ships, /ships/{imo_number}, /crew), per the shipyard tutorial drydock. Read-only: each step's defect now rides a GET operation. Add LIMITATIONS.md documenting that all diagnostics are UNVERIFIED (stale alpha3 local CLI vs beta1 repo), the missing CI harness, and the deferred Step 5 casing rule. Refs #49.",
          "is_bot": false,
          "headline": "feat: realign Track 1 YAML examples to the maritime domain",
          "author_name": "Thomas Eskénazi",
          "author_login": "eskenazit",
          "committed_at": "2026-06-29T12:06:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4bafc1d3bc61e2536b6980e6a0e19e8338aa5978",
          "body": "…WIP, /users domain, to be realigned to maritime)\n\nRefs #49. WIP checkpoint for handoff: example files are still on the\nplaceholder /users domain and will be realigned onto the shared maritime\nShipyard contract (GET /ships, /ships/{imo_number}, /crew). EXPECTED-OUTPUT.md\nis an unverified engine-fidelity hypothesis pending the JVM gate (stage 2).",
          "is_bot": false,
          "headline": "feat: scaffold Track 1 YAML tutorial examples and tuto_writer agent (…",
          "author_name": "Thomas Eskenazi",
          "author_login": "eskenazit",
          "committed_at": "2026-06-29T12:06:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5a1debc859f13dacb3e46e337b44b75086cf21c1",
          "body": "Convert the relative documentation links in README.md to absolute URLs\nunder https://shipyard.naftiko.io/polychro/1.0.0-alpha4/ so they resolve\ncorrectly when the README is rendered on GitHub.\n\n- Persona section: MCP Server, GitHub Action, Rulesets guides\n- Getting Started callout\n- Features link below the feature table\n- Continue reading list: Getting Started, Features, Architecture, Tutorial, Comparison, Roadmap",
          "is_bot": false,
          "headline": "docs: point README links to shipyard.naftiko.io alpha4",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-06-26T14:54:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bf2b4c0dba0b7bb16565392ad8eaeaf6f367102f",
          "body": "- Replace the long persona deep-dives with a concise \"What that means for you\" section\n- De-bold the intro and lead with the open source AI linter framing\n- Trim the feature table and point to Features for the full list\n- Condense the \"What it is not\" section\n- Convert absolute shipyard.naftiko.io links to relative docs paths\n- Add a \"Continue reading\" section linking the core docs pages",
          "is_bot": false,
          "headline": "docs: tighten README and convert links to relative docs paths",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-06-26T14:00:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dd71a5df9063007246dda47c3b7acc0dbe6522a9",
          "body": null,
          "is_bot": false,
          "headline": "docs: restructure README around reader personas",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-06-26T14:00:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d1ba985c97160e9becbe2aaab61447ee88cdf701",
          "body": null,
          "is_bot": false,
          "headline": "feat: adding notification to slack when nightlies fail",
          "author_name": "Farah Trigui",
          "author_login": "farah-t-trigui",
          "committed_at": "2026-06-23T14:39:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "193642689da249eca760595ca79fc604ae5538f3",
          "body": null,
          "is_bot": false,
          "headline": "fix: nightly quality gate",
          "author_name": "Farah Trigui",
          "author_login": "farah-t-trigui",
          "committed_at": "2026-06-22T15:00:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e55d967662da70becba5b1c7bcfc37b834425c20",
          "body": "polychro-cli pulled GraalPy (org.graalvm.polyglot:python:24.1.1) transitively via polychro-capability -> io.ikanos:ikanos-engine. GraalPy is unused (Polychro only runs the JS polyglot language) but its python-language (~88 MB) + python-resources (~62 MB) plus the Truffle/LLVM/BouncyCastle closure in\n[…]\nsion); the whole python closure derives from this root, JS is unaffected. Also revert the earlier, incorrect macos-15 runner pin back to macos-latest: the macOS version was never the cause.\n\nFixes #58",
          "is_bot": false,
          "headline": "fix(cli): exclude unused transitive GraalPy to fix macOS native build",
          "author_name": "Jeremie Tarnaud",
          "author_login": "jeremnaf",
          "committed_at": "2026-06-19T13:16:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "31fbe62eacda5432a5acf9fc83b144f218d97f61",
          "body": "Add GraalPyExclusionTest, which fails at `mvn test` time (on every platform) if GraalPy (com.oracle.graal.python.PythonLanguage) returns to the polychro-cli classpath, and asserts GraalJS stays available. This guards against the macOS native-image OOM regression instead of waiting ~1h26 for the native build to fail.\n\nRefs #58",
          "is_bot": false,
          "headline": "test(cli): guard GraalPy off the native-image classpath",
          "author_name": "Jeremie Tarnaud",
          "author_login": "jeremnaf",
          "committed_at": "2026-06-19T13:16:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "16b25dea12d25d90aec1f6c47effe8cb05a662e5",
          "body": null,
          "is_bot": false,
          "headline": "fix: temporary force macos 15 (instead of latest -> 16)",
          "author_name": "Jeremie Tarnaud",
          "author_login": "jeremnaf",
          "committed_at": "2026-06-19T07:09:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d95eeb06b64f3715494fe5e9730f6b0d60e62ab1",
          "body": "Reword the org.apache.groovy:groovy exclusion comment (PR #54 review) to make explicit that it only removes the transitively-pulled Apache Groovy jar (which uses invokedynamic features GraalVM SVM has removed) and does not preclude future support for the GraalVM polyglot Groovy language plugin, which would be added as a direct dependency to polychro-ruleset-polyglot alongside js-community.",
          "is_bot": false,
          "headline": "docs: clarify Groovy exclusion comment scope in native build",
          "author_name": "Jeremie Tarnaud",
          "author_login": "jeremnaf",
          "committed_at": "2026-06-18T12:37:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1812ba48bcc037503f08aaa993cb9412044f5113",
          "body": "The native polychro-cli binary built successfully but failed at runtime with\n\"No language and polyglot implementation was found on the module-path\", so\nJavaScript ruleset functions never executed.\n\nRoot cause: the native profile shaded all dependencies into a single uber jar\nand fed it to native-ima\n[…]\n arm64 with Oracle GraalVM 21.0.11: the native binary\nnow executes JS ruleset functions and emits identical JSON diagnostics to the\nJVM jar. polychro-cli JVM tests remain green (71 tests, 0 failures).",
          "is_bot": false,
          "headline": "fix: build native CLI without uber jar so GraalJS language loads",
          "author_name": "Jeremie Tarnaud",
          "author_login": "jeremnaf",
          "committed_at": "2026-06-18T12:37:57Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e83d949d09a82dad1bdb906194b73f63670b97a7",
          "body": null,
          "is_bot": false,
          "headline": "fix: manage js functions with Js doc",
          "author_name": "Jeremie Tarnaud",
          "author_login": "jeremnaf",
          "committed_at": "2026-06-17T16:11:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9829e2377211ad8fb2b2bad945ac101adc40c73c",
          "body": "…Closes #44",
          "is_bot": false,
          "headline": "fix: resolve functionsDir relative to ruleset file, not process CWD. …",
          "author_name": "Jeremie Tarnaud",
          "author_login": "jeremnaf",
          "committed_at": "2026-06-17T12:13:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "22dcf43d04c5a32c19657fd88c7a0c7f2aaf5df3",
          "body": null,
          "is_bot": false,
          "headline": "fix: add graal vm js language",
          "author_name": "Jeremie Tarnaud",
          "author_login": "jeremnaf",
          "committed_at": "2026-06-17T09:29:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "611fedbed7b0b3350868bc3a57e0927ab97fe022",
          "body": "- Suppress the intentional deprecation warning in FunctionRegistryTest\n  where the test deliberately exercises the deprecated\n  FunctionProvider.functions() default to verify backward-compat behavior.\n- README: drop stray blank line between badges and bump architecture\n  diagram width to 800px for consistency.\n\nNo source/runtime behavior change; clean `mvn test-compile` on\npolychro-ruleset confirms zero deprecation warnings.",
          "is_bot": false,
          "headline": "fix: resolve VS Code problems in polychro",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-06-16T14:56:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "adce114bb2f90341aff945ebe40375b3a975b56c",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump beta1",
          "author_name": "Thomas Eskenazi",
          "author_login": "eskenazit",
          "committed_at": "2026-06-15T13:51:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e27db001c863b13707e3bbb3deb9ee5d8b1d5619",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump beta1",
          "author_name": "Thomas Eskenazi",
          "author_login": "eskenazit",
          "committed_at": "2026-06-15T13:51:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "999685ec2cf06bb05699364a7dbe5b07177afe93",
          "body": null,
          "is_bot": false,
          "headline": "chore: release alpha4",
          "author_name": "Thomas Eskenazi",
          "author_login": "eskenazit",
          "committed_at": "2026-06-15T09:46:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5d660e3b02557f9ee9dd77e709e1eb0076f9e716",
          "body": "…nges (#32)\n\nWire polyglot (JS) ruleset functions into production validation and resolve a\nsource range per violation. The SPI carries a Violation record (message + path),\nFunctionRegistry resolves functions per ruleset, and PolyglotRuleFunction\nextracts the JsonPath of each violation so the diagnostic carries an\niso-Spectral range. Includes golden and path-extraction tests.\n\nRefs #32",
          "is_bot": false,
          "headline": "feat: execute polyglot ruleset functions with per-violation source ra…",
          "author_name": "Thomas Eskenazi",
          "author_login": "eskenazit",
          "committed_at": "2026-06-15T07:21:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2ecec54114cde1a035314f17262cc280d42e1439",
          "body": null,
          "is_bot": false,
          "headline": "chore: ignore polychro-coverage/target aggregate output",
          "author_name": "Thomas Eskenazi",
          "author_login": "eskenazit",
          "committed_at": "2026-06-15T07:21:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0698e0f87c3f06c443ca663f9a30fb91f333aa56",
          "body": "…agnostics (#32)\n\nCompute 0-based, end-exclusive source ranges (iso-Spectral) for built-in\nruleset diagnostics on YAML capabilities. JacksonSourceMap spans each scalar's\nfull token (plain, quoted, escaped, block, array-nested), and the range is\npropagated through RulesetValidator to every Diagnostic. Non-YAML formats keep\nSourceMap.NONE pending #34-#37.\n\nRefs #32",
          "is_bot": false,
          "headline": "feat: compute iso-Spectral source ranges for built-in YAML ruleset di…",
          "author_name": "Thomas Eskenazi",
          "author_login": "eskenazit",
          "committed_at": "2026-06-15T07:21:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ca62fd61834668ccbc2735d53cbbda531f00bd3e",
          "body": "AGENTS.md: replace PR Review Skill section with pointer to the\nagents-shared capability (drop hardcoded framework path + TODO);\nclarify issue-first wording to 'ensure a tracking issue exists'.\n\n.gitignore: add .agents/skills/ so synced copies are never committed.\n\n.github/instructions/: add agents-shared discovery shim so VS Code\nagents auto-fetch the pr-review skill from the local Skill Server.\n\nRefs naftiko/shipyard#23",
          "is_bot": false,
          "headline": "chore: repoint pr-review skill to agents-shared capability",
          "author_name": "Thomas Eskénazi",
          "author_login": "eskenazit",
          "committed_at": "2026-06-14T21:18:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "228f21f83f524c174e4fe343d1f8e576b61e326c",
          "body": "…(closes #3)",
          "is_bot": false,
          "headline": "fix: remove stale talend-restlet repository from polychro-capability …",
          "author_name": "Thomas Eskenazi",
          "author_login": "eskenazit",
          "committed_at": "2026-06-08T15:28:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "80cb454847b210cafbab7d8be524f6709eb386b3",
          "body": null,
          "is_bot": false,
          "headline": "fix: add line in readme for readability",
          "author_name": "Farah Trigui",
          "author_login": "farah-t-trigui",
          "committed_at": "2026-06-04T07:30:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4b2fc26ec1ce10a5355469b2da992b958956245c",
          "body": null,
          "is_bot": false,
          "headline": "feat: smoke tests for cli",
          "author_name": "Farah Trigui",
          "author_login": "farah-t-trigui",
          "committed_at": "2026-06-03T13:55:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "075945f29500754d82accf2f0761a7aef5581fe6",
          "body": null,
          "is_bot": false,
          "headline": "feat: implementing nightly tests",
          "author_name": "Farah Trigui",
          "author_login": "farah-t-trigui",
          "committed_at": "2026-06-03T12:03:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "472bf066385cb613e06a537f0bd6ec55bbaaacbf",
          "body": null,
          "is_bot": false,
          "headline": "docs: link to the dedicated Polychro Comparison page",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-06-01T08:42:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "edf32e5e8c6f42d652de64e2c14cc252275fdb8f",
          "body": "Replace the GitHub Wiki references with the Naftiko Shipyard across the\ncontributor-facing docs, ahead of the upcoming removal of the Wiki, and\nalign project facts with the rewritten README.\n\n- README: full rewrite mirroring the Ikanos README structure (What\n  Polychro is / is not, How Polychro comp\n[…]\n  polychro-format-common to the module map\n- CONTRIBUTING.md: refresh the AI-agent repository context (description,\n  module list), add a Shipyard documentation reference, expand the\n  key-files table",
          "is_bot": false,
          "headline": "docs: point documentation links to the Shipyard",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-06-01T08:42:55Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8d87adcbd1167f689ee3646e0cf2d73e3baa704e",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump version number",
          "author_name": "Thomas Eskenazi",
          "author_login": "eskenazit",
          "committed_at": "2026-06-01T08:31:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b3ead4fb2b983fe013284f15897eb3bf1ab74804",
          "body": null,
          "is_bot": false,
          "headline": "chore: test mvn publish",
          "author_name": "Farah Trigui",
          "author_login": "farah-t-trigui",
          "committed_at": "2026-05-28T13:53:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "47724c395843dd07bb26a0f3c6f82b608406a580",
          "body": "- jsv-messages ResourceBundle: add pattern to resource-config.json so\n  com.networknt I18nSupport initializes correctly in the native binary\n- networknt validators: register all 43 com.networknt.schema.*Validator\n  classes in reflect-config.json; JsonMetaSchema uses reflection to\n  instantiate them \n[…]\n  catch accidental removals at JVM build time\n\nSmoke-tested on GraalVM CE 21 native binary: --version, lint --schema\n(JSON Schema keyword validation), lint --ruleset all pass without errors.\n\nRefs #20",
          "is_bot": false,
          "headline": "fix(cli): fix native binary for published CLI (PR #21 findings)",
          "author_name": "Thomas Eskenazi",
          "author_login": "eskenazit",
          "committed_at": "2026-05-28T10:13:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "655345a05238c0f841b6b75b6cc19aabec46f6e4",
          "body": "The #20 fix introduced two new code paths that were not covered by\nexisting tests, causing the JaCoCo 1.00 line/branch gate to fail on\nPR #21:\n\n- `polychro-json-structure`: `JsonStructureValidatorFactory.resolveMode()`\n  had a dead `if (schemaNode == null) return SCHEMA;` branch left over\n  from bef\n[…]\nt, and the two accessors) and two new\n  `LinterBuilderTest` cases for the wrap path and the null-supported-\n  formats defensive branch.\n\nFull reactor `mvn verify` now passes 1.00/1.00 on every module.",
          "is_bot": false,
          "headline": "test(core,json-structure): close JaCoCo coverage gaps from #20 fix",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-05-28T10:13:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "0402ecf32839988e3bcc9b88562b633d219a0105",
          "body": "`polychro lint <file>` silently printed \"No issues found.\" regardless of\nthe document because the CLI distribution only shipped the core + SPI\njars. None of the `ValidatorFactory` SPI implementations were on the\nruntime classpath, so `ServiceLoader.load(ValidatorFactory.class)`\nreturned an empty str\n[…]\n skip\"\n  - polychro-json-structure / polychro-ruleset: 1 test each updated to\n    expect IAE on no-config\n\nFull reactor `mvn install -Djacoco.skip=true` → BUILD SUCCESS,\nall modules green.\n\nCloses #20",
          "is_bot": false,
          "headline": "fix(cli): make `polychro lint` actually run validators (#20)",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-05-28T10:13:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f6356f72563d0b16a7dc24f91439d9092825156a",
          "body": "…flection",
          "is_bot": false,
          "headline": "fix: register Jayway JsonPath and Jackson node classes for GraalVM re…",
          "author_name": "Thomas Eskénazi",
          "author_login": "eskenazit",
          "committed_at": "2026-05-28T10:13:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b60063471ef3d86267874a52b4c196e304aa9980",
          "body": null,
          "is_bot": false,
          "headline": "test: add governance ruleset integration tests as non-regression",
          "author_name": "Thomas Eskénazi",
          "author_login": "eskenazit",
          "committed_at": "2026-05-28T10:13:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "41bf79d6805fae796dc0e5f8c695a961a68b9c0f",
          "body": "…tive binary",
          "is_bot": false,
          "headline": "fix: add resource-config.json so ServiceLoader finds validators in na…",
          "author_name": "Thomas Eskénazi",
          "author_login": "eskenazit",
          "committed_at": "2026-05-28T10:13:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "66a3fdeda84ff72c209f26399424782f87a5391d",
          "body": null,
          "is_bot": false,
          "headline": "fix: update hardcoded CLI version to 1.0.0-alpha3",
          "author_name": "Thomas Eskénazi",
          "author_login": "eskenazit",
          "committed_at": "2026-05-28T10:13:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "97d701246fbeab999f24c0b17de73a9c18cce70a",
          "body": "…onFiles",
          "is_bot": false,
          "headline": "fix: pass reflect-config.json explicitly via -H:ReflectionConfigurati…",
          "author_name": "Thomas Eskénazi",
          "author_login": "eskenazit",
          "committed_at": "2026-05-28T10:13:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "41b48dd550012b3feaf5bdd88f47514e83d77efd",
          "body": null,
          "is_bot": false,
          "headline": "fix: add reflect-config.json for picocli GraalVM native binary",
          "author_name": "Thomas Eskénazi",
          "author_login": "eskenazit",
          "committed_at": "2026-05-28T10:13:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4885a1e48d4a0d8cfce7993172421e0d6687e67c",
          "body": null,
          "is_bot": false,
          "headline": "fix: initialize picocli at build time for GraalVM native binary",
          "author_name": "Thomas Eskénazi",
          "author_login": "eskenazit",
          "committed_at": "2026-05-28T10:13:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ed31677bb6aee6251d00a89dcc6021e6317bca09",
          "body": null,
          "is_bot": false,
          "headline": "feat: publish cli",
          "author_name": "Jeremie Tarnaud",
          "author_login": "jeremnaf",
          "committed_at": "2026-05-28T10:13:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2aa084abbf679e683e3d7f66accd436d31f7353b",
          "body": null,
          "is_bot": false,
          "headline": "chore: dummy workflow",
          "author_name": "Farah Trigui",
          "author_login": "farah-t-trigui",
          "committed_at": "2026-05-27T15:35:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f739c377514c2d796802c2c0df4c3d9fed739aab",
          "body": null,
          "is_bot": false,
          "headline": "feat: add new dummy action to prepare cli publish",
          "author_name": "Jeremie Tarnaud",
          "author_login": "jeremnaf",
          "committed_at": "2026-05-27T14:59:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2bffe2ae1b756c4e4ef613b93ab20a8b662256c2",
          "body": null,
          "is_bot": false,
          "headline": "chore: releasing 1.0.0-alpha3 version",
          "author_name": "Thomas Eskenazi",
          "author_login": "eskenazit",
          "committed_at": "2026-05-26T14:11:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2bb5297f6c4e991da885919cc1ae539077f1da3c",
          "body": "…ansition\n\nThe wiki content under polychro-docs/ is being migrated to the Shipyard\ndocs site. Drop the polychro-docs Maven module and all wiki pages from\nthis repository.\n\n- Remove polychro-docs/wiki/ (18 pages: Home, Releases, Roadmap, FAQ,\n  Architecture, Getting-Started, Tutorial, What-is-Polychr\n[…]\nuide-‐-* pages for\n  Checkov, Configuration, GitHub-Action, HTML, MCP-Server, Markdown,\n  and Rulesets)\n- Remove polychro-docs/pom.xml\n- Drop the polychro-docs module reference from the parent pom.xml",
          "is_bot": false,
          "headline": "chore(docs): remove polychro-docs wiki in preparation for shipyard tr…",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-05-26T08:12:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bb40ebb9b2b5b7c7ba1bfec4c3ba9b7c6d615635",
          "body": "The previous fix commit c82026e was dropped when the branch was rebased\nto 5286f26. This commit re-applies the same four fixes:\n\n- README.md: qualify SDK method names per language (Go PascalCase,\n  Python snake_case)\n- Architecture.md: restore mention of built-in and custom functions in\n  the Rulese\n[…]\n unsafe backtick template with the\n  env-var + process.env.SUMMARY pattern\n- Releases.md: restore the **Rulesets:** sub-section listing\n  polychro:governance, polychro:ai-safety, and polychro:security",
          "is_bot": false,
          "headline": "fix: re-apply PR #12 review fixes lost in rebase",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-05-22T13:04:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "21f5e21f2dd43e9854ced3b514448a29c9329d3d",
          "body": "…ub Action\n\nThis is a documentation-only pass. No source code is touched. It closes the\ngap between Polychro's actual feature surface and the wiki by adding four\ndedicated guides and refreshing every page that enumerates supported\nformats or distribution channels.\n\nNew wiki pages\n--------------\n\n* G\n[…]\n structural integrity of every modified\n  file (FAQ 19 headings, Guide-Rulesets 17, Guide-Configuration 12,\n  Architecture 8 H2 sections, Releases 4 ** blocks).\n* No code changes — wiki / README only.",
          "is_bot": false,
          "headline": "docs: expand wiki coverage for HTML, Markdown, XML, Checkov, and GitH…",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-05-22T13:04:42Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "851fa9666529539b1aecbcfa3dd71a9d71e16a5f",
          "body": null,
          "is_bot": false,
          "headline": "chore: adopt CI-friendly revision property and align version with Ikanos",
          "author_name": "Thomas Eskénazi",
          "author_login": "eskenazit",
          "committed_at": "2026-05-22T09:33:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fd0fc23139a830c65113c5448c6975dc6b0d6fef",
          "body": "CI failed on polychro-format-common with line/branch coverage 0.99\n(expected 1.00) because the new `tag == \"a\"` filter introduced an\nuncovered skip branch in HtmlReferenceAdapter.references(). Add a\ntest that builds an HTML projection containing both <link> head\nelements and <a> anchor elements, plus an entry with a missing tag\nfield, and asserts only the <a> entries are forwarded to the\nLinkResolver. This restores 100% line and branch coverage and\ndocuments intent for future maintainers.",
          "is_bot": false,
          "headline": "test(html-ref-adapter): cover <link> skip branch to satisfy jacoco gate",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-05-21T15:45:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ebee6affe7f353cb9716f427b1069a8326a56d0d",
          "body": "- MarkdownProjector#appendBlock now accepts blocksPath as a parameter\n  and threads it through from appendBlocks. The BlockQuote branch\n  recurses with the caller's blocksPath instead of recomputing it\n  via path.substring(0, path.lastIndexOf('[')), which is correct in\n  the top-level case but yield\n[…]\nites in\n  collectProjectedBlockLinks / collectProjectedItemLinks.\n\nTests: polychro-markdown 247/247, polychro-format-common 65/65.\n\nRefs: review threads #3281494499, #3281494507, #3281494514 on PR #7.",
          "is_bot": false,
          "headline": "fix: address PR #7 review continuation (round 6)",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-05-21T15:45:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1a44c658ef11ed831200bf575d232e48397a71d6",
          "body": "…ion + drop FencedCodeBlock null branch\n\nMarkdownReferenceAdapter\n- `references()` now walks `$.document.blocks[*].links[*]` and recursively\n  `$.document.blocks[*].items[*].blocks[*].links[*]`, mirroring\n  `MarkdownValidator.collectProjectedBlockLinks`. The previous implementation\n  read from `$.do\n[…]\ns nested in a paragraph block); update the source-map key in the\n  range-resolution test accordingly.\n- Drop the synthetic `checkCodeBlockLanguageShouldHandleNullInfo` test that\n  bypassed the parser.",
          "is_bot": false,
          "headline": "fix: address PR #7 review (round 5) — MarkdownReferenceAdapter recurs…",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-05-21T15:45:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2b77068dab5871ebd613e6b9e9d1a684533f37ad",
          "body": "- Remove markdown/html from RulesetValidatorFactory.supportedFormats()\n  until projection layers are introduced (PR #7, #8)\n- Add .xhtml extension mapping to \"html\" in detectFormatFromSourcePath\n- Extract parseStructured() to eliminate dead IOException catch on\n  markdown/html branches (TextNode.valueOf cannot throw IOException)\n- Update RulesetValidatorFactoryTest assertion and add .xhtml test",
          "is_bot": false,
          "headline": "fix: address PR #6 review comments (round 3)",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-05-21T15:45:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "41389c8ba21e62319cf52d3a60f8d22de7c95d59",
          "body": "1. Project BlockQuote content by recursing into children and flattening\nthem into the enclosing blocks array, restoring heading/link/anchor\ncoverage that was silently lost when the refactor stopped using\nAbstractVisitor for collection.\n\n2. Remove dead anchorCounts HashMap in checkInternalLinks -- po\n[…]\nlLinks.\n\n4. Add Javadoc note on the defensive null branch for\nFencedCodeBlock.getInfo() explaining that commonmark-java currently\nreturns empty string but the API does not formally guarantee non-null.",
          "is_bot": false,
          "headline": "fix: address review findings on markdown projection refactor",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-05-21T15:45:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "a7128c8a61cf62e0f65f94333ac3628a06c94291",
          "body": "Drop misleading indexed paths from HtmlStructureChecker,\nHtmlSecurityChecker, HtmlAccessibilityChecker, and\nHtmlAssetLinkChecker where the counter did not match the\nprojector's actual array positions:\n\n- checkDuplicateIds: index only counted id-bearing elements,\n  not matching the recursive nodes[] \n[…]\nnostics already carry a SourceRange for precise\nlocation; the path field now uses \"$.document.nodes\" as a\nstable, non-misleading reference.\n\n73 tests, 0 failures, 100% line + branch coverage gate met.",
          "is_bot": false,
          "headline": "fix(html): align checker diagnostic paths with projection structure",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-05-21T15:45:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "bcd3eb92f2ab371edd36dc9c059abed8c4bf760b",
          "body": "…rruptedExceptionDuringWait",
          "is_bot": false,
          "headline": "fix(checkov): clear interrupt flag before join in runShouldHandleInte…",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-05-21T15:45:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f1111477e2145952e1ed056f1a8ed306328b3aeb",
          "body": "- remove duplicate /polychro-html/target and /polychro-format-common/target entries in .gitignore\n\n- add import java.util.Locale to HtmlAssetLinkChecker; use simple Locale.ROOT",
          "is_bot": false,
          "headline": "fix(html): address eskenazit review comments (round 4)",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-05-21T15:45:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2ae6e3c78e4ab095b03ebb09808f515189b3b168",
          "body": null,
          "is_bot": false,
          "headline": "test(html): cover null-html branch in checkRequiredDocumentParts",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-05-21T15:45:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "72739a0cdf101f1e33c08c19fa44b7c16da9309a",
          "body": null,
          "is_bot": false,
          "headline": "fix(core): remove unused assertNull import in SchemaModelValidatorTest",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-05-21T15:45:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "148c491564cf7ca93bcca1fa558769bc919e620e",
          "body": "- HtmlStructureChecker: add null-guard in checkRequiredDocumentParts() before\n  dereferencing selectFirst(\"html\"); emits html-missing-lang and html-missing-title\n  diagnostics when the element is absent (fixes [HIGH] NPE from review round 2+3)\n- HtmlStructureChecker: add import java.util.List; remov\n[…]\nselect.Elements with Elements (fixes [LOW] consistency)\n- HtmlCoverageEdgeCasesTest: replace assertTrue(x == null) with assertNull(x)\n  for clearer JUnit 5 failure messages (fixes [LOW] JUnit 5 idiom)",
          "is_bot": false,
          "headline": "fix(html): address eskenazit review comments",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-05-21T15:45:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "58c79b386d262531f8371b80afa44a4f03e4933e",
          "body": "- AnchorCollector: add LinkedHashSet import, remove inline-qualified type\n- TestDocuments: add unsupported() helper to avoid duplicating ObjectMapper\n- AnchorCollectorTest: use TestDocuments.unsupported() instead of inline ObjectMapper\n- CrossFormatBrokenReferenceTest: use TestDocuments.unsupported() instead of inline ObjectMapper\n- ReferenceAdapterTypesTest: assertEquals(9) instead of assertTrue(>= 9) for precise guard",
          "is_bot": false,
          "headline": "fix: address code review comments from eskenazit",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-05-21T15:45:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "193e3c3d2e5ac0ffc133e4f884e835e299748fce",
          "body": "(1) Reorder reactor modules so polychro-format-common is declared\n    before polychro-html, matching the future dependency direction\n    (polychro-html will depend on polychro-format-common).\n\n(2) Document the scope of HtmlReferenceAdapter.references() in the\n    class Javadoc: the cross-format adap\n[…]\nection so downstream consumers (polychro-html, polychro-markdown)\n    can declare it without inlining ${project.version}.\n\nFull reactor mvn verify -> BUILD SUCCESS, 17 modules, all coverage\ngates met.",
          "is_bot": false,
          "headline": "fix: address PR #9 review comments",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-05-21T15:45:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5f2617ee94112d2f55432087af0f30727b4dfbd4",
          "body": "Introduces the `polychro-format-common` module providing cross-format\nutilities and rules shared by `polychro-markdown` and `polychro-html`,\naligned with the F4 blueprint contract.\n\nDeliverables\n- Adapter SPI:\n  - `DocumentReferenceAdapter` — format-agnostic adapter exposing\n    anchors and referenc\n[…]\nl-module`) and closes\nout the F1 → F2 → F3 → F4 sequenced refactor plan.\n\nAlso adds `polychro-html/target` and `polychro-format-common/target`\nto `.gitignore` so build artifacts are no longer tracked.",
          "is_bot": false,
          "headline": "feat: add polychro-format-common module (Phase F4)",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-05-21T15:45:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3c3f0caa902fb6c6bea880d58867186d16ae9afe",
          "body": "Two of the changes in the previous commit removed coverage from fallback\nbranches:\n\n1. Enabling JSoup position tracking in fragment mode (HIGH-severity fix)\n   means every Element now reports `range.isTracked() == true`, leaving\n   the `(1,1,1,1)` fallback in `rangeFor` / `precisionFor` unhit:\n     \n[…]\n\n  tracking (so every Range reports `isTracked() == false`), then runs\n  the projector plus all four checkers directly to hit every fallback.\n\nJaCoCo: lines + branches back to 100% on `polychro-html`.",
          "is_bot": false,
          "headline": "fix(html): restore 100% coverage gate after PR review fixes",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-05-21T15:45:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8132e6b8c3abeaf91d57a062955f1cc16aae0ef2",
          "body": "- HtmlParserFacade: enable JSoup position tracking for fragment mode by\n  wrapping the fragment in a full document and passing the tracking\n  parser to `Jsoup.parse`. Previously the parser was assigned via\n  `document.parser(parser)` *after* `parseBodyFragment` had run, so\n  position tracking had no\n[…]\ne path (no parent) so `resolveBasePath()` takes\n  the `parent == null` branch and falls back to `Path.of(\".\")`, and\n  reference a uniquely-named missing asset so no filesystem I/O is\n  required. (LOW)",
          "is_bot": false,
          "headline": "fix: address PR #8 review comments",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-05-21T15:45:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3297c81731a1c6f53ba02af8314fbea439fa8ee1",
          "body": "The polychro-html/target folder was inadvertently committed to this branch. Add\nit to .gitignore alongside other module target entries and remove the\npreviously tracked build artifacts from the index.",
          "is_bot": false,
          "headline": "chore: untrack polychro-html/target build output",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-05-21T15:45:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dbfbec9f08a76b1630336600c3c7afb80ccffca5",
          "body": "Introduces the `polychro-html` module providing parser-first HTML\nvalidation aligned with the F3 blueprint and Ikanos `convertHtmlToJson`\nparity.\n\nDeliverables\n- `HtmlParserFacade` — JSoup wrapper with position tracking, supporting\n  `document` and `fragment` parse modes.\n- `HtmlProjector` — canonic\n[…]\n coverage** for the module.\n- Full reactor `mvn verify` succeeds.\n\nStacking\nThis PR is stacked on PR #7 (`feat/markdown-projection-refactor`) and\nfollows the F1 → F2 → F3 → F4 sequenced refactor plan.",
          "is_bot": false,
          "headline": "feat: add polychro-html module (Phase F3)",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-05-21T15:45:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c0e21182e1bf08100f6351020a255232daf61114",
          "body": null,
          "is_bot": false,
          "headline": "fix: use simple JsonNodeFactory name in edge case tests",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-05-21T15:45:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "356adb3e77eaa96a28d498cd94452faa36aa5c90",
          "body": null,
          "is_bot": false,
          "headline": "fix: address remaining markdown review comments",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-05-21T15:45:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8234b2c240decf9bb543453e0a46fc13c2ac2c99",
          "body": "- Replace deprecated CommonMark API usage in MarkdownProjector:\n  BulletList.getBulletMarker() -> getMarker(),\n  OrderedList.getDelimiter() -> getMarkerDelimiter(),\n  OrderedList.getStartNumber() -> getMarkerStartNumber().\n- Drop unused frontmatterParser field in MarkdownValidator; the\n  constructor\n[…]\n  be wired up.\n- Suppress unused-variable warnings on the four heading-iteration\n  tests in MarkdownFormatTest. The project is on -source 21 so we\n  cannot use the Java 22 unnamed-variable syntax yet.",
          "is_bot": false,
          "headline": "chore: clean up post-rebase warnings",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-05-21T15:45:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "08a3bedc8eae6796e39506c143eb50a25d2fdb52",
          "body": "- Use document.blocks (not document.headings) in InstructionsFormatTest\n  projectedDoc helper so the test exercises MarkdownFormat.headings()\n  on the real projected shape.\n- Normalize indentation of parserFacade and projector fields in\n  MarkdownValidator to 4 spaces.\n- Normalize indentation of val\n[…]\nrash.\n- Add trailing newline to MarkdownParseResult, MarkdownParserFacade,\n  MarkdownProjector, MarkdownSourceMapBuilder, MarkdownFormatTest,\n  MarkdownProjectorTest, and MarkdownSourceMapBuilderTest.",
          "is_bot": false,
          "headline": "fix: address PR #7 review comments",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-05-21T15:45:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "177ad6e03fbf2f8485dd0676a7c9b2e33ad686c2",
          "body": null,
          "is_bot": false,
          "headline": "feat: drop legacy projection fallbacks for full F2 alignment",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-05-21T15:45:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3ce69329aefccbf3101adff7adc59a83f943aa4b",
          "body": null,
          "is_bot": false,
          "headline": "feat: validate nested markdown blocks recursively",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-05-21T15:45:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5e68994bc567c355053787e7a5b4739201095736",
          "body": null,
          "is_bot": false,
          "headline": "feat: project nested markdown item blocks",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-05-21T15:45:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3c3eb51bec119d28ee61cc00d1f4e60d354542dd",
          "body": null,
          "is_bot": false,
          "headline": "feat: consume block lists and trim legacy indexes",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-05-21T15:45:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4b79ca732e8b9d0b0b926f81507e569b4f151f12",
          "body": null,
          "is_bot": false,
          "headline": "feat: project list item links in blocks",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-05-21T15:45:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e36b6c351fbfb8a767094b211122fc43c7276d13",
          "body": null,
          "is_bot": false,
          "headline": "Project paragraph links in blocks",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-05-21T15:45:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "05059782544b4f1a4ec3e11a6ef7e46dc7904ea9",
          "body": null,
          "is_bot": false,
          "headline": "Consume markdown blocks in validation",
          "author_name": "Jerome Louvel",
          "author_login": "jlouvel",
          "committed_at": "2026-05-21T15:45:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 4,
      "commits_last_year": 184,
      "latest_release_at": "2026-07-15T11:37:24Z",
      "latest_release_tag": "v1.0.0-beta2",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 13,
      "days_since_latest_release": 9,
      "mean_days_between_releases": 16
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 62,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": true
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/naftiko/polychro",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/naftiko/polychro",
          "is_deprecated": false,
          "latest_version": "v1.0.0-beta2",
          "repository_url": "https://github.com/naftiko/polychro",
          "versions_count": 4,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-15T11:24:30Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 9
        },
        {
          "name": "io.polychro:polychro-api",
          "exists": true,
          "license": "Apache License, Version 2.0",
          "keywords": [],
          "ecosystem": "maven",
          "matches_repo": null,
          "registry_url": "https://central.sonatype.com/artifact/io.polychro/polychro-api",
          "is_deprecated": false,
          "latest_version": "1.0.0-beta2",
          "repository_url": null,
          "versions_count": 4,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-15T11:35:19Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 9
        },
        {
          "name": "io.polychro:polychro-cli",
          "exists": true,
          "license": "Apache License, Version 2.0",
          "keywords": [],
          "ecosystem": "maven",
          "matches_repo": null,
          "registry_url": "https://central.sonatype.com/artifact/io.polychro/polychro-cli",
          "is_deprecated": false,
          "latest_version": "1.0.0-beta2",
          "repository_url": null,
          "versions_count": 4,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-15T11:35:22Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 9
        },
        {
          "name": "io.polychro:polychro-core",
          "exists": true,
          "license": "Apache License, Version 2.0",
          "keywords": [],
          "ecosystem": "maven",
          "matches_repo": null,
          "registry_url": "https://central.sonatype.com/artifact/io.polychro/polychro-core",
          "is_deprecated": false,
          "latest_version": "1.0.0-beta2",
          "repository_url": null,
          "versions_count": 4,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-15T11:35:24Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 9
        },
        {
          "name": "io.polychro:polychro-html",
          "exists": true,
          "license": "Apache License, Version 2.0",
          "keywords": [],
          "ecosystem": "maven",
          "matches_repo": null,
          "registry_url": "https://central.sonatype.com/artifact/io.polychro/polychro-html",
          "is_deprecated": false,
          "latest_version": "1.0.0-beta2",
          "repository_url": null,
          "versions_count": 4,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-15T11:35:21Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 9
        },
        {
          "name": "io.polychro:polychro-checkov",
          "exists": true,
          "license": "Apache License, Version 2.0",
          "keywords": [],
          "ecosystem": "maven",
          "matches_repo": null,
          "registry_url": "https://central.sonatype.com/artifact/io.polychro/polychro-checkov",
          "is_deprecated": false,
          "latest_version": "1.0.0-beta2",
          "repository_url": null,
          "versions_count": 4,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-15T11:35:17Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 9
        },
        {
          "name": "io.polychro:polychro-ruleset",
          "exists": true,
          "license": "Apache License, Version 2.0",
          "keywords": [],
          "ecosystem": "maven",
          "matches_repo": null,
          "registry_url": "https://central.sonatype.com/artifact/io.polychro/polychro-ruleset",
          "is_deprecated": false,
          "latest_version": "1.0.0-beta2",
          "repository_url": null,
          "versions_count": 4,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-15T11:35:26Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 9
        },
        {
          "name": "io.polychro:polychro-markdown",
          "exists": true,
          "license": "Apache License, Version 2.0",
          "keywords": [],
          "ecosystem": "maven",
          "matches_repo": null,
          "registry_url": "https://central.sonatype.com/artifact/io.polychro/polychro-markdown",
          "is_deprecated": false,
          "latest_version": "1.0.0-beta2",
          "repository_url": null,
          "versions_count": 4,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-15T11:35:24Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 9
        }
      ]
    },
    "popularity": {
      "forks": 1,
      "stars": 3,
      "watchers": 0,
      "fork_history": {
        "days": [
          {
            "date": "2026-07-07",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 1,
        "total_forks": 1
      },
      "star_history": null,
      "open_issues_and_prs": 30
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": true,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "modules/polychro-node/tsconfig.json"
      ],
      "toolchain_manifests": [
        "modules/polychro-api/pom.xml",
        "modules/polychro-capability/pom.xml",
        "modules/polychro-checkov/pom.xml",
        "modules/polychro-cli/pom.xml",
        "modules/polychro-core/pom.xml",
        "modules/polychro-coverage/pom.xml",
        "modules/polychro-format-common/pom.xml",
        "modules/polychro-github-action/pom.xml",
        "modules/polychro-go/go.mod",
        "modules/polychro-html/pom.xml",
        "modules/polychro-json-schema/pom.xml",
        "modules/polychro-json-structure/pom.xml",
        "modules/polychro-markdown/pom.xml",
        "modules/polychro-ruleset-polyglot/pom.xml",
        "modules/polychro-ruleset/pom.xml",
        "modules/polychro-rulesets/pom.xml",
        "modules/polychro-wellformedness/pom.xml",
        "pom.xml"
      ],
      "largest_source_bytes": 21719,
      "source_files_sampled": 320,
      "oversized_source_files": 0,
      "agent_instruction_files": [
        ".github/copilot-instructions.md",
        ".github/instructions/agents-shared.instructions.md",
        "AGENTS.md"
      ],
      "agent_instruction_max_bytes": 11623
    },
    "dependencies": {
      "manifests": [
        "pom.xml"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [
          {
            "name": "com.fasterxml.jackson.core:jackson-databind",
            "direct": true,
            "version": "2.20.2",
            "severity": "high",
            "ecosystem": "maven",
            "cvss_score": 8.1,
            "advisory_ids": [
              "GHSA-3pjw-73gf-8qr5",
              "GHSA-5jmj-h7xm-6q6v",
              "GHSA-hgj6-7826-r7m5",
              "GHSA-j3rv-43j4-c7qm",
              "GHSA-rmj7-2vxq-3g9f"
            ],
            "fixed_version": "3.1.4",
            "advisory_count": 5,
            "oldest_advisory_days": 31
          },
          {
            "name": "com.fasterxml.jackson.core:jackson-core",
            "direct": false,
            "version": "2.20.2",
            "severity": "high",
            "ecosystem": "maven",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-72hv-8253-57qq",
              "GHSA-r7wm-3cxj-wff9"
            ],
            "fixed_version": "3.2.1",
            "advisory_count": 2,
            "oldest_advisory_days": 146
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "high": 2
        },
        "advisory_count": 7,
        "affected_count": 2,
        "assessed_count": 8,
        "malicious_count": 0,
        "assessed_package": "maven:io.polychro:polychro-api@1.0.0-beta2",
        "unassessed_count": 0,
        "direct_affected_count": 1
      },
      "ecosystems": [
        "maven"
      ],
      "dependencies": [
        {
          "name": "io.polychro:polychro-format-common",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "com.fasterxml.jackson.core:jackson-databind",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${jackson.version}"
        },
        {
          "name": "com.fasterxml.jackson.dataformat:jackson-dataformat-yaml",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${jackson.version}"
        },
        {
          "name": "com.fasterxml.jackson.dataformat:jackson-dataformat-xml",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${jackson.version}"
        },
        {
          "name": "com.networknt:json-schema-validator",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${json-schema-validator.version}"
        },
        {
          "name": "com.jayway.jsonpath:json-path",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${json-path.version}"
        },
        {
          "name": "org.json-structure:json-structure",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${json-structure.version}"
        },
        {
          "name": "org.slf4j:slf4j-api",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${slf4j.version}"
        },
        {
          "name": "org.jsoup:jsoup",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${jsoup.version}"
        },
        {
          "name": "org.graalvm.polyglot:polyglot",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${graalvm.polyglot.version}"
        },
        {
          "name": "org.graalvm.polyglot:js",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${graalvm.polyglot.version}"
        },
        {
          "name": "org.graalvm.js:js-community",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${graalvm.polyglot.version}"
        },
        {
          "name": "info.picocli:picocli",
          "manifest": "pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${picocli.version}"
        },
        {
          "name": "com.fasterxml.jackson.core:jackson-databind",
          "manifest": "modules/polychro-api/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "com.fasterxml.jackson.dataformat:jackson-dataformat-yaml",
          "manifest": "modules/polychro-api/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "com.fasterxml.jackson.dataformat:jackson-dataformat-xml",
          "manifest": "modules/polychro-api/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "io.polychro:polychro-core",
          "manifest": "modules/polychro-capability/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.polychro:polychro-api",
          "manifest": "modules/polychro-capability/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.ikanos:ikanos-engine",
          "manifest": "modules/polychro-capability/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "1.0.0-beta3-SNAPSHOT"
        },
        {
          "name": "io.ikanos:ikanos-spec",
          "manifest": "modules/polychro-capability/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "1.0.0-beta3-SNAPSHOT"
        },
        {
          "name": "org.graalvm.polyglot:polyglot",
          "manifest": "modules/polychro-capability/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${graalvm.polyglot.version}"
        },
        {
          "name": "com.fasterxml.jackson.core:jackson-databind",
          "manifest": "modules/polychro-capability/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.slf4j:slf4j-api",
          "manifest": "modules/polychro-capability/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.restlet:org.restlet",
          "manifest": "modules/polychro-capability/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "2.7.0-m2"
        },
        {
          "name": "io.modelcontextprotocol.sdk:mcp-core",
          "manifest": "modules/polychro-capability/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "1.0.0"
        },
        {
          "name": "io.polychro:polychro-api",
          "manifest": "modules/polychro-checkov/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.polychro:polychro-core",
          "manifest": "modules/polychro-cli/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.polychro:polychro-api",
          "manifest": "modules/polychro-cli/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.polychro:polychro-capability",
          "manifest": "modules/polychro-cli/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.polychro:polychro-wellformedness",
          "manifest": "modules/polychro-cli/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.polychro:polychro-ruleset",
          "manifest": "modules/polychro-cli/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.polychro:polychro-ruleset-polyglot",
          "manifest": "modules/polychro-cli/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.polychro:polychro-rulesets",
          "manifest": "modules/polychro-cli/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.polychro:polychro-json-schema",
          "manifest": "modules/polychro-cli/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.polychro:polychro-json-structure",
          "manifest": "modules/polychro-cli/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.polychro:polychro-markdown",
          "manifest": "modules/polychro-cli/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.polychro:polychro-html",
          "manifest": "modules/polychro-cli/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.polychro:polychro-checkov",
          "manifest": "modules/polychro-cli/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "info.picocli:picocli",
          "manifest": "modules/polychro-cli/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "io.polychro:polychro-api",
          "manifest": "modules/polychro-core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "com.fasterxml.jackson.core:jackson-databind",
          "manifest": "modules/polychro-core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "com.fasterxml.jackson.dataformat:jackson-dataformat-yaml",
          "manifest": "modules/polychro-core/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "io.polychro:polychro-api",
          "manifest": "modules/polychro-coverage/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.polychro:polychro-capability",
          "manifest": "modules/polychro-coverage/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.polychro:polychro-checkov",
          "manifest": "modules/polychro-coverage/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.polychro:polychro-cli",
          "manifest": "modules/polychro-coverage/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.polychro:polychro-core",
          "manifest": "modules/polychro-coverage/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.polychro:polychro-format-common",
          "manifest": "modules/polychro-coverage/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.polychro:polychro-github-action",
          "manifest": "modules/polychro-coverage/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.polychro:polychro-html",
          "manifest": "modules/polychro-coverage/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.polychro:polychro-json-schema",
          "manifest": "modules/polychro-coverage/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.polychro:polychro-json-structure",
          "manifest": "modules/polychro-coverage/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.polychro:polychro-markdown",
          "manifest": "modules/polychro-coverage/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.polychro:polychro-ruleset",
          "manifest": "modules/polychro-coverage/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.polychro:polychro-rulesets",
          "manifest": "modules/polychro-coverage/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.polychro:polychro-ruleset-polyglot",
          "manifest": "modules/polychro-coverage/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.polychro:polychro-wellformedness",
          "manifest": "modules/polychro-coverage/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.polychro:polychro-api",
          "manifest": "modules/polychro-format-common/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.polychro:polychro-core",
          "manifest": "modules/polychro-github-action/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.polychro:polychro-api",
          "manifest": "modules/polychro-html/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "org.jsoup:jsoup",
          "manifest": "modules/polychro-html/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "io.polychro:polychro-api",
          "manifest": "modules/polychro-json-schema/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "com.networknt:json-schema-validator",
          "manifest": "modules/polychro-json-schema/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "io.polychro:polychro-api",
          "manifest": "modules/polychro-json-structure/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "org.json-structure:json-structure",
          "manifest": "modules/polychro-json-structure/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "io.polychro:polychro-api",
          "manifest": "modules/polychro-markdown/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "org.commonmark:commonmark",
          "manifest": "modules/polychro-markdown/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "0.24.0"
        },
        {
          "name": "com.fasterxml.jackson.dataformat:jackson-dataformat-yaml",
          "manifest": "modules/polychro-markdown/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "io.polychro:polychro-ruleset",
          "manifest": "modules/polychro-ruleset-polyglot/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "org.graalvm.polyglot:polyglot",
          "manifest": "modules/polychro-ruleset-polyglot/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.graalvm.polyglot:js",
          "manifest": "modules/polychro-ruleset-polyglot/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.graalvm.js:js-community",
          "manifest": "modules/polychro-ruleset-polyglot/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "com.fasterxml.jackson.core:jackson-databind",
          "manifest": "modules/polychro-ruleset-polyglot/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.slf4j:slf4j-api",
          "manifest": "modules/polychro-ruleset-polyglot/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "io.polychro:polychro-api",
          "manifest": "modules/polychro-ruleset/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "com.jayway.jsonpath:json-path",
          "manifest": "modules/polychro-ruleset/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "com.networknt:json-schema-validator",
          "manifest": "modules/polychro-ruleset/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "org.slf4j:slf4j-api",
          "manifest": "modules/polychro-ruleset/pom.xml",
          "ecosystem": "maven",
          "version_constraint": null
        },
        {
          "name": "io.polychro:polychro-api",
          "manifest": "modules/polychro-rulesets/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.polychro:polychro-ruleset",
          "manifest": "modules/polychro-rulesets/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        },
        {
          "name": "io.polychro:polychro-api",
          "manifest": "modules/polychro-wellformedness/pom.xml",
          "ecosystem": "maven",
          "version_constraint": "${project.version}"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "com.fasterxml.jackson.core:jackson-databind",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "com.fasterxml.jackson.core:jackson-databind",
            "direct": true,
            "version": "2.20.2",
            "ecosystem": "maven"
          },
          {
            "name": "com.fasterxml.jackson.dataformat:jackson-dataformat-xml",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "com.fasterxml.jackson.dataformat:jackson-dataformat-xml",
            "direct": true,
            "version": "2.20.2",
            "ecosystem": "maven"
          },
          {
            "name": "com.fasterxml.jackson.dataformat:jackson-dataformat-yaml",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "com.fasterxml.jackson.dataformat:jackson-dataformat-yaml",
            "direct": true,
            "version": "2.20.2",
            "ecosystem": "maven"
          },
          {
            "name": "com.jayway.jsonpath:json-path",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "com.jayway.jsonpath:json-path",
            "direct": true,
            "version": "2.9.0",
            "ecosystem": "maven"
          },
          {
            "name": "com.networknt:json-schema-validator",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "com.networknt:json-schema-validator",
            "direct": true,
            "version": "1.0.87",
            "ecosystem": "maven"
          },
          {
            "name": "info.picocli:picocli",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "info.picocli:picocli",
            "direct": true,
            "version": "4.7.6",
            "ecosystem": "maven"
          },
          {
            "name": "io.ikanos:ikanos-engine",
            "direct": true,
            "version": "1.0.0-beta3-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "io.ikanos:ikanos-spec",
            "direct": true,
            "version": "1.0.0-beta3-SNAPSHOT",
            "ecosystem": "maven"
          },
          {
            "name": "io.modelcontextprotocol.sdk:mcp-core",
            "direct": true,
            "version": "1.0.0",
            "ecosystem": "maven"
          },
          {
            "name": "io.polychro:polychro-api",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "io.polychro:polychro-capability",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "io.polychro:polychro-checkov",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "io.polychro:polychro-cli",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "io.polychro:polychro-core",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "io.polychro:polychro-format-common",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "io.polychro:polychro-github-action",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "io.polychro:polychro-html",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "io.polychro:polychro-json-schema",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "io.polychro:polychro-json-structure",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "io.polychro:polychro-markdown",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "io.polychro:polychro-ruleset",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "io.polychro:polychro-ruleset-polyglot",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "io.polychro:polychro-rulesets",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "io.polychro:polychro-wellformedness",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.commonmark:commonmark",
            "direct": true,
            "version": "0.24.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.graalvm.js:js-community",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.graalvm.js:js-community",
            "direct": true,
            "version": "24.2.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.graalvm.polyglot:js",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.graalvm.polyglot:js",
            "direct": true,
            "version": "24.2.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.graalvm.polyglot:polyglot",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.graalvm.polyglot:polyglot",
            "direct": true,
            "version": "24.2.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.json-structure:json-structure",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.json-structure:json-structure",
            "direct": true,
            "version": "0.5.5",
            "ecosystem": "maven"
          },
          {
            "name": "org.jsoup:jsoup",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.jsoup:jsoup",
            "direct": true,
            "version": "1.18.3",
            "ecosystem": "maven"
          },
          {
            "name": "org.restlet:org.restlet",
            "direct": true,
            "version": "2.7.0-m2",
            "ecosystem": "maven"
          },
          {
            "name": "org.slf4j:slf4j-api",
            "direct": true,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.slf4j:slf4j-api",
            "direct": true,
            "version": "2.0.17",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-compiler-plugin",
            "direct": false,
            "version": "3.14.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-gpg-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-gpg-plugin",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-jar-plugin",
            "direct": false,
            "version": "3.4.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-javadoc-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-javadoc-plugin",
            "direct": false,
            "version": "3.6.3",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-source-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-source-plugin",
            "direct": false,
            "version": "3.3.1",
            "ecosystem": "maven"
          },
          {
            "name": "org.apache.maven.plugins:maven-surefire-plugin",
            "direct": false,
            "version": "3.5.3",
            "ecosystem": "maven"
          },
          {
            "name": "org.codehaus.mojo:flatten-maven-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.codehaus.mojo:flatten-maven-plugin",
            "direct": false,
            "version": "1.6.0",
            "ecosystem": "maven"
          },
          {
            "name": "org.graalvm.buildtools:native-maven-plugin",
            "direct": false,
            "version": "0.10.3",
            "ecosystem": "maven"
          },
          {
            "name": "org.jacoco:jacoco-maven-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.jacoco:jacoco-maven-plugin",
            "direct": false,
            "version": "0.8.13",
            "ecosystem": "maven"
          },
          {
            "name": "org.junit.jupiter:junit-jupiter",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.junit.jupiter:junit-jupiter",
            "direct": false,
            "version": "5.12.2",
            "ecosystem": "maven"
          },
          {
            "name": "org.slf4j:slf4j-nop",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.sonatype.central:central-publishing-maven-plugin",
            "direct": false,
            "version": null,
            "ecosystem": "maven"
          },
          {
            "name": "org.sonatype.central:central-publishing-maven-plugin",
            "direct": false,
            "version": "0.10.0",
            "ecosystem": "maven"
          },
          {
            "name": "@esbuild/aix-ppc64",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-arm",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-arm64",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-x64",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/darwin-arm64",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/darwin-x64",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/freebsd-arm64",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/freebsd-x64",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-arm",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-arm64",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-ia32",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-loong64",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-mips64el",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-ppc64",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-riscv64",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-s390x",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-x64",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/netbsd-arm64",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/netbsd-x64",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openbsd-arm64",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openbsd-x64",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openharmony-arm64",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/sunos-x64",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-arm64",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-ia32",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-x64",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/sourcemap-codec",
            "direct": false,
            "version": "1.5.5",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-android-arm-eabi",
            "direct": false,
            "version": "4.60.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-android-arm64",
            "direct": false,
            "version": "4.60.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-darwin-arm64",
            "direct": false,
            "version": "4.60.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-darwin-x64",
            "direct": false,
            "version": "4.60.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-freebsd-arm64",
            "direct": false,
            "version": "4.60.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-freebsd-x64",
            "direct": false,
            "version": "4.60.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-arm-gnueabihf",
            "direct": false,
            "version": "4.60.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-arm-musleabihf",
            "direct": false,
            "version": "4.60.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-arm64-gnu",
            "direct": false,
            "version": "4.60.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-arm64-musl",
            "direct": false,
            "version": "4.60.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-loong64-gnu",
            "direct": false,
            "version": "4.60.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-loong64-musl",
            "direct": false,
            "version": "4.60.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-ppc64-gnu",
            "direct": false,
            "version": "4.60.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-ppc64-musl",
            "direct": false,
            "version": "4.60.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-riscv64-gnu",
            "direct": false,
            "version": "4.60.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-riscv64-musl",
            "direct": false,
            "version": "4.60.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-s390x-gnu",
            "direct": false,
            "version": "4.60.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-x64-gnu",
            "direct": false,
            "version": "4.60.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-linux-x64-musl",
            "direct": false,
            "version": "4.60.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-openbsd-x64",
            "direct": false,
            "version": "4.60.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-openharmony-arm64",
            "direct": false,
            "version": "4.60.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-win32-arm64-msvc",
            "direct": false,
            "version": "4.60.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-win32-ia32-msvc",
            "direct": false,
            "version": "4.60.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-win32-x64-gnu",
            "direct": false,
            "version": "4.60.2",
            "ecosystem": "npm"
          },
          {
            "name": "@rollup/rollup-win32-x64-msvc",
            "direct": false,
            "version": "4.60.2",
            "ecosystem": "npm"
          },
          {
            "name": "@types/chai",
            "direct": false,
            "version": "5.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "@types/deep-eql",
            "direct": false,
            "version": "4.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@types/estree",
            "direct": false,
            "version": "1.0.8",
            "ecosystem": "npm"
          },
          {
            "name": "@types/node",
            "direct": false,
            "version": "22.19.17",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/expect",
            "direct": false,
            "version": "3.2.6",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/mocker",
            "direct": false,
            "version": "3.2.6",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/pretty-format",
            "direct": false,
            "version": "3.2.6",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/pretty-format",
            "direct": false,
            "version": "3.2.7",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/runner",
            "direct": false,
            "version": "3.2.6",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/snapshot",
            "direct": false,
            "version": "3.2.6",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/spy",
            "direct": false,
            "version": "3.2.6",
            "ecosystem": "npm"
          },
          {
            "name": "@vitest/utils",
            "direct": false,
            "version": "3.2.6",
            "ecosystem": "npm"
          },
          {
            "name": "assertion-error",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "cac",
            "direct": false,
            "version": "6.7.14",
            "ecosystem": "npm"
          },
          {
            "name": "chai",
            "direct": false,
            "version": "5.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "check-error",
            "direct": false,
            "version": "2.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "debug",
            "direct": false,
            "version": "4.4.3",
            "ecosystem": "npm"
          },
          {
            "name": "deep-eql",
            "direct": false,
            "version": "5.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "es-module-lexer",
            "direct": false,
            "version": "1.7.0",
            "ecosystem": "npm"
          },
          {
            "name": "esbuild",
            "direct": false,
            "version": "0.27.7",
            "ecosystem": "npm"
          },
          {
            "name": "estree-walker",
            "direct": false,
            "version": "3.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "expect-type",
            "direct": false,
            "version": "1.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "fdir",
            "direct": false,
            "version": "6.5.0",
            "ecosystem": "npm"
          },
          {
            "name": "fsevents",
            "direct": false,
            "version": "2.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "js-tokens",
            "direct": false,
            "version": "9.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "loupe",
            "direct": false,
            "version": "3.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "magic-string",
            "direct": false,
            "version": "0.30.21",
            "ecosystem": "npm"
          },
          {
            "name": "ms",
            "direct": false,
            "version": "2.1.3",
            "ecosystem": "npm"
          },
          {
            "name": "nanoid",
            "direct": false,
            "version": "3.3.12",
            "ecosystem": "npm"
          },
          {
            "name": "pathe",
            "direct": false,
            "version": "2.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "pathval",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "picocolors",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "picomatch",
            "direct": false,
            "version": "4.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "postcss",
            "direct": false,
            "version": "8.5.13",
            "ecosystem": "npm"
          },
          {
            "name": "rollup",
            "direct": false,
            "version": "4.60.2",
            "ecosystem": "npm"
          },
          {
            "name": "siginfo",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "source-map-js",
            "direct": false,
            "version": "1.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "stackback",
            "direct": false,
            "version": "0.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "std-env",
            "direct": false,
            "version": "3.10.0",
            "ecosystem": "npm"
          },
          {
            "name": "strip-literal",
            "direct": false,
            "version": "3.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "tinybench",
            "direct": false,
            "version": "2.9.0",
            "ecosystem": "npm"
          },
          {
            "name": "tinyexec",
            "direct": false,
            "version": "0.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "tinyglobby",
            "direct": false,
            "version": "0.2.16",
            "ecosystem": "npm"
          },
          {
            "name": "tinypool",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "tinyrainbow",
            "direct": false,
            "version": "2.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "tinyspy",
            "direct": false,
            "version": "4.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "typescript",
            "direct": false,
            "version": "5.9.3",
            "ecosystem": "npm"
          },
          {
            "name": "undici-types",
            "direct": false,
            "version": "6.21.0",
            "ecosystem": "npm"
          },
          {
            "name": "vite",
            "direct": false,
            "version": "7.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "vite-node",
            "direct": false,
            "version": "3.2.4",
            "ecosystem": "npm"
          },
          {
            "name": "vitest",
            "direct": false,
            "version": "3.2.6",
            "ecosystem": "npm"
          },
          {
            "name": "why-is-node-running",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "npm"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 167,
        "direct_count": 44,
        "indirect_count": 123
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 6,
        "merged_prs": 51,
        "open_issues": 24,
        "closed_ratio": 0.442,
        "closed_issues": 19,
        "closed_unmerged_prs": 4
      },
      "bus_factor": 1,
      "bot_contributors": 2,
      "top_contributors": [
        {
          "type": "User",
          "login": "jlouvel",
          "commits": 102,
          "avatar_url": "https://avatars.githubusercontent.com/u/374450?v=4"
        },
        {
          "type": "User",
          "login": "eskenazit",
          "commits": 54,
          "avatar_url": "https://avatars.githubusercontent.com/u/235480681?v=4"
        },
        {
          "type": "User",
          "login": "jeremnaf",
          "commits": 14,
          "avatar_url": "https://avatars.githubusercontent.com/u/253040578?v=4"
        },
        {
          "type": "User",
          "login": "farah-t-trigui",
          "commits": 11,
          "avatar_url": "https://avatars.githubusercontent.com/u/264504830?v=4"
        },
        {
          "type": "User",
          "login": "neyeahmed",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/300420631?v=4"
        }
      ],
      "contributors_sampled": 5,
      "top_contributor_share": 0.56
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "nightly-orchestrator.yml",
        "nightly-quality-gate.yml",
        "publish-cli-bin.yml",
        "publish-maven.yml",
        "quality-gate.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "package-lock.json"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 9,
            "reason": "19 out of 20 merged PRs checked by a CI test -- score normalized to 9",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 10,
            "reason": "all changesets reviewed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 3,
            "reason": "project has 1 contributing companies or organizations -- score normalized to 3",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 9,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "12 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "d7714271cf1eeeb98651d19fb09ed037872a9f19",
        "ran_at": "2026-07-25T00:29:41Z",
        "aggregate_score": 4.4,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-24T08:53:27Z",
      "oldest_open_prs": [
        {
          "number": 87,
          "created_at": "2026-07-13T12:29:35Z",
          "last_comment_at": "2026-07-13T12:29:36Z",
          "last_comment_author": "dependabot"
        },
        {
          "number": 91,
          "created_at": "2026-07-13T12:45:16Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 99,
          "created_at": "2026-07-22T10:19:40Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 100,
          "created_at": "2026-07-23T10:44:12Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 101,
          "created_at": "2026-07-23T10:44:19Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 104,
          "created_at": "2026-07-23T10:44:51Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ],
      "last_merged_pr_at": "2026-07-24T08:50:47Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 23,
          "created_at": "2026-05-28T10:00:10Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 25,
          "created_at": "2026-05-28T12:28:27Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 34,
          "created_at": "2026-06-08T14:41:15Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 35,
          "created_at": "2026-06-08T14:41:25Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 36,
          "created_at": "2026-06-08T14:41:31Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 37,
          "created_at": "2026-06-08T14:41:40Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 38,
          "created_at": "2026-06-08T14:42:11Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 41,
          "created_at": "2026-06-09T12:44:50Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 55,
          "created_at": "2026-06-18T10:22:25Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 56,
          "created_at": "2026-06-18T12:14:56Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 69,
          "created_at": "2026-06-30T12:49:33Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 73,
          "created_at": "2026-07-02T16:26:52Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 76,
          "created_at": "2026-07-07T07:50:54Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 78,
          "created_at": "2026-07-07T12:23:01Z",
          "last_comment_at": "2026-07-07T15:06:04Z",
          "last_comment_author": "eskenazit"
        },
        {
          "number": 79,
          "created_at": "2026-07-07T12:23:06Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 81,
          "created_at": "2026-07-13T11:32:00Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 82,
          "created_at": "2026-07-13T11:32:01Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 83,
          "created_at": "2026-07-13T11:32:03Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 84,
          "created_at": "2026-07-13T11:32:04Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 85,
          "created_at": "2026-07-13T11:32:05Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/naftiko/polychro",
    "host": "github.com",
    "name": "polychro",
    "owner": "naftiko"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 58,
      "inputs": {
        "security": 46,
        "vitality": 74,
        "community": 36,
        "governance": 60,
        "engineering": 66
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 74,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 63,
            "inputs": {
              "commits_last_year": 184,
              "human_commit_share": 0.98,
              "days_since_last_push": 0,
              "active_weeks_last_year": 13
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "13/52 weeks with commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 13
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "184 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 184
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "releases_count": 4,
              "latest_release_tag": "v1.0.0-beta2",
              "releases_from_tags": false,
              "days_since_latest_release": 9,
              "mean_days_between_releases": 16
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "4 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 9 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 9
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~16 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 16
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 36,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 5,
            "inputs": {
              "forks": 1,
              "stars": 3,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "3 stars",
                "points": 4.9,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "1 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "good",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 71,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file present, not a recognized license",
                "points": 16.9,
                "status": "partial",
                "details": [
                  {
                    "code": "license_custom",
                    "params": {}
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 6.3,
                "status": "met",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 60,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 29,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 5,
              "top_contributor_share": 0.56
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 56% of commits",
                "points": 9.9,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 56
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "5 contributors",
                "points": 6.8,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 1 contributing companies or organizations -- score normalized to 3",
                "points": 3,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 71,
            "inputs": {
              "merged_prs": 51,
              "open_issues": 24,
              "closed_issues": 19,
              "issue_closed_ratio": 0.442,
              "closed_unmerged_prs": 4
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "44% of issues closed",
                "points": 20.7,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 44
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "51/55 decided PRs merged",
                "points": 35.5,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 51,
                      "decided": 55
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "all changesets reviewed",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 59,
            "inputs": {
              "followers": 88,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "naftiko",
              "public_repos": 46,
              "account_age_days": 584
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "88 followers of naftiko",
                "points": 14,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 88,
                      "login": "naftiko"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "46 public repos, account ~1 yr old",
                "points": 15.4,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 46
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 1
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 92,
            "inputs": {
              "packages": [
                "github.com/naftiko/polychro",
                "io.polychro:polychro-api",
                "io.polychro:polychro-cli",
                "io.polychro:polychro-core",
                "io.polychro:polychro-html",
                "io.polychro:polychro-checkov",
                "io.polychro:polychro-ruleset",
                "io.polychro:polychro-markdown"
              ],
              "ecosystems": "go, maven",
              "any_deprecated": false,
              "min_days_since_publish": 9
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "8 package(s) on go, maven",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 8,
                      "ecosystems": "go, maven"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 9 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 9
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "4 published versions",
                "points": 12,
                "status": "partial",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 66,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 66,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "5 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "19 out of 20 merged PRs checked by a CI test -- score normalized to 9",
                "points": 18,
                "status": "partial",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 65,
            "inputs": {
              "topics": [
                "ai",
                "linter",
                "spec-driven-development",
                "code"
              ],
              "has_wiki": false,
              "homepage": "https://polychro.io",
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://polychro.io",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "4 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "at_risk",
        "name": "Security",
        "value": 46,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 44,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 4.4
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "19 out of 20 merged PRs checked by a CI test -- score normalized to 9",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "all changesets reviewed",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 1 contributing companies or organizations -- score normalized to 3",
                "points": 0.8,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "12 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "moderate",
            "name": "Dependency advisories",
            "note": "Matched the maven:io.polychro:polychro-api@1.0.0-beta2 runtime dependency closure — what installing the published package pulls in — 8 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "maven:io.polychro:polychro-api@1.0.0-beta2",
                  "assessed": 8
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 56,
            "inputs": {
              "source": "osv",
              "advisories": 7,
              "affected_packages": 2,
              "assessed_packages": 8,
              "unassessed_packages": 0,
              "affected_by_severity": "high 2",
              "direct_affected_packages": 1
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "1 affected: com.fasterxml.jackson.core:jackson-databind 2.20.2 (high 8.1)",
                "points": 12.3,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 1,
                      "packages": "com.fasterxml.jackson.core:jackson-databind 2.20.2 (high 8.1)"
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "1 affected: com.fasterxml.jackson.core:jackson-core 2.20.2 (high 7.5)",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_affected",
                    "params": {
                      "count": 1,
                      "packages": "com.fasterxml.jackson.core:jackson-core 2.20.2 (high 7.5)"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "1 advisory-carrying package(s) unaddressed past 90 days; oldest published 146 days ago",
                "points": 33.7,
                "status": "partial",
                "details": [
                  {
                    "code": "advisories_stale",
                    "params": {
                      "days": 90,
                      "count": 1,
                      "oldest": 146
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 8,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 2
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 75,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.98,
              "agent_instruction_files": [
                ".github/copilot-instructions.md",
                ".github/instructions/agents-shared.instructions.md",
                "AGENTS.md"
              ],
              "agent_instruction_max_bytes": 11623
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": ".github/copilot-instructions.md, .github/instructions/agents-shared.instructions.md, AGENTS.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".github/copilot-instructions.md, .github/instructions/agents-shared.instructions.md, AGENTS.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "96 of 98 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 96,
                      "sampled": 98
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 64,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "package-lock.json"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [
                "modules/polychro-node/tsconfig.json"
              ],
              "agent_commit_share": 0,
              "toolchain_manifests": [
                "modules/polychro-api/pom.xml",
                "modules/polychro-capability/pom.xml",
                "modules/polychro-checkov/pom.xml",
                "modules/polychro-cli/pom.xml",
                "modules/polychro-core/pom.xml",
                "modules/polychro-coverage/pom.xml",
                "modules/polychro-format-common/pom.xml",
                "modules/polychro-github-action/pom.xml",
                "modules/polychro-go/go.mod",
                "modules/polychro-html/pom.xml",
                "modules/polychro-json-schema/pom.xml",
                "modules/polychro-json-structure/pom.xml",
                "modules/polychro-markdown/pom.xml",
                "modules/polychro-ruleset-polyglot/pom.xml",
                "modules/polychro-ruleset/pom.xml",
                "modules/polychro-rulesets/pom.xml",
                "modules/polychro-wellformedness/pom.xml",
                "pom.xml"
              ],
              "dependency_bot_commit_share": 0.01
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "modules/polychro-api/pom.xml, modules/polychro-capability/pom.xml, modules/polychro-checkov/pom.xml (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "modules/polychro-api/pom.xml, modules/polychro-capability/pom.xml, modules/polychro-checkov/pom.xml"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "modules/polychro-node/tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "modules/polychro-node/tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "no agent-authored commits among the last 100",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_authored_commits",
                    "params": {
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "1 of the last 100 commits are automated dependency updates",
                "points": 8,
                "status": "met",
                "details": [
                  {
                    "code": "dependency_bot_commits",
                    "params": {
                      "count": 1,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Java",
              "largest_source_bytes": 21719,
              "source_files_sampled": 320,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Java (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Java"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/320 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 320,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "moderate",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 60,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": true,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-25T00:30:01.455615Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/n/naftiko/polychro.svg",
  "full_name": "naftiko/polychro",
  "license_state": "custom",
  "license_spdx": null
}