open-cli-collective/cpm holds a health index of 58 out of 100, placing it in the Moderate band. It scores highest on AI Readiness (86/100) and lowest on Community & Adoption (33/100). It was last updated 4 days ago. A single contributor accounts for most of its recent work.
58
overall / 100
Moderate
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
58
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
Manageable file sizes — 1/17 source files over 60KB
Inputs used
primary_language
Go
largest_source_bytes
98,178
source_files_sampled
17
oversized_source_files
1
Key facts
2GitHub stars
2contributors
92commits, last 12 months
4days since last push
16releases
1bus factor
0open issues
Gopackage ecosystems
Data collection warnings
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
Star and fork history 2 ★ / 0 ⇿
2Stars
14Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 1Patch 13
OpenSSF Scorecard 4.1 / 10
4.1aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-22 07:23 UTC
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 250,
"has_wiki": false,
"homepage": null,
"languages": {
"Go": 259955,
"Makefile": 213,
"PowerShell": 701
},
"pushed_at": "2026-07-17T13:26:28Z",
"created_at": "2026-01-23T01:40:28Z",
"owner_type": "Organization",
"updated_at": "2026-07-17T13:27:18Z",
"description": "Claude plugin manager that helps you view & install Claude plugins on a per-project basis, with a better UX than Claude Code.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": null,
"name": null,
"type": "Organization",
"login": "open-cli-collective",
"company": null,
"location": null,
"followers": 15,
"avatar_url": "https://avatars.githubusercontent.com/u/255329478?v=4",
"created_at": "2026-01-16T10:39:27Z",
"is_verified": null,
"public_repos": 22,
"account_age_days": 186
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.3.3",
"kind": "patch",
"published_at": "2026-07-17T13:28:07Z"
},
{
"tag": "v0.3.2",
"kind": "patch",
"published_at": "2026-03-17T02:10:13Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2026-03-07T14:01:06Z"
},
{
"tag": "v0.2.19",
"kind": "patch",
"published_at": "2026-02-27T18:54:23Z"
},
{
"tag": "v0.2.15",
"kind": "patch",
"published_at": "2026-02-15T01:34:26Z"
},
{
"tag": "v0.2.14",
"kind": "patch",
"published_at": "2026-02-09T13:27:42Z"
},
{
"tag": "v0.2.13",
"kind": "patch",
"published_at": "2026-02-09T04:08:49Z"
},
{
"tag": "v0.2.12",
"kind": "patch",
"published_at": "2026-02-09T04:03:46Z"
},
{
"tag": "v0.2.11",
"kind": "patch",
"published_at": "2026-02-09T03:57:26Z"
},
{
"tag": "v0.2.10",
"kind": "patch",
"published_at": "2026-02-09T02:31:01Z"
},
{
"tag": "v0.2.9",
"kind": "patch",
"published_at": "2026-02-09T02:30:34Z"
},
{
"tag": "v0.2.8",
"kind": "patch",
"published_at": "2026-02-09T02:10:48Z"
},
{
"tag": "v0.2.7",
"kind": "patch",
"published_at": "2026-02-09T02:04:17Z"
},
{
"tag": "v0.2.5",
"kind": "patch",
"published_at": "2026-02-08T18:37:03Z"
},
{
"tag": "v0.2.4",
"kind": "patch",
"published_at": "2026-01-29T21:12:07Z"
},
{
"tag": "v0.2.1",
"kind": "patch",
"published_at": "2026-01-24T17:11:31Z"
}
],
"recent_commits": [
{
"oid": "d8703505f23ab81bb3d17f5bb4ee2adb87395415",
"body": "## What\n\nAdds the canonical `.codereview/agents/` baseline (the same 8-agent set\ncarried by the rest of the CLI family — `automation, documentation, go,\nmacos, policies, rust, structure, tauri`), copied from `cli-common`.\n\n## Why\n\n`cr` sources trusted review guidance from `.codereview/agents/` on th\n[…]\nwould fail\nclosed the same way. It therefore needs a bootstrap merge (owner/admin)\n— after it lands, every subsequent `cpm` PR gets a real review. Reviewer\nintentionally not requested for that reason.",
"is_bot": false,
"headline": "chore(codereview): add repo review guidance baseline (#41)",
"author_name": "piekstra",
"author_login": "piekstra",
"committed_at": "2026-07-17T13:26:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ffb0f55821effd564469e03c86362c72204e8ef2",
"body": "Closes #39\n\n## Summary\n\n**Root cause:** The \"select scope\" dialog (Shift-S) only acted on the\nfocused/cursor plugin, ignoring the rest of a multi-selection.\n`openScopeDialogForSelected` called `getSelectedPlugin()` (singular),\nand `scopeDialogState` carried a single `pluginID`. When the dialog was\nc\n[…]\nso the\ndocumented `mise run ...` tasks were executed via their underlying\ncommands (`go test -race`, `golangci-lint run`, `gofumpt` via `go run`,\n`go build`), which is exactly what those tasks invoke.",
"is_bot": false,
"headline": "fix(tui): apply scope dialog to all selected plugins (#40)",
"author_name": "piekstra",
"author_login": "piekstra",
"committed_at": "2026-07-17T13:26:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1247d45b2843616c58c8bff78e6dd46d602e0d84",
"body": "…ion (#38)\n\n## Summary\n- The claude CLI (Node.js) truncates stdout at 64KB when writing to an\nOS pipe\n- With enough installed plugins, `claude plugin list --json --available`\nexceeds this limit, causing `unexpected end of JSON input` on startup\n- Fix: write CLI stdout to a temp file instead of a pipe buffer, which\nhas no size limit\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(claude): use temp file for plugin list to avoid 64KB pipe truncat…",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-03-17T02:08:37Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "4f6e464e0c45fc8f4e8db07c52736fa3d1bb1f67",
"body": "## Summary\n\n- Replace `sort.Slice`/`sort.Strings` with\n`slices.SortFunc`/`slices.Sort` (type-safe generics)\n- Replace hand-rolled `copyMap` helper with `maps.Clone`\n- Use `slices.Sorted(maps.Keys(...))` for key collection instead of\nmanual loops\n- Use `min`/`max` builtins instead of manual if-clampi\n[…]\n `HasSuffix` + `TrimSuffix` pair\n\nNet result: -41 lines, no behavioral changes.\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: modernize Go code with stdlib improvements (#37)",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-03-07T14:30:20Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "35c38e2a2edd46a96398e4ac6016e8096aded575",
"body": "…stall (#36)\n\n## Summary\n\n- Automatically reconcile `extraKnownMarketplaces` in project/local\nsettings files after plugin install/uninstall operations, so team\nmembers who clone the repo get prompted to install missing marketplaces\n- Add polymorphic `MarketplaceSource` types (7 concrete source types\n[…]\netplace source data from\n`~/.claude/plugins/known_marketplaces.json`\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(claude): auto-sync extraKnownMarketplaces on plugin install/unin…",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-03-07T13:59:31Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "950a6c186b52e1e40711255e0d8d772e437989fd",
"body": "## Summary\n\n- Add GoReleaser snapshot `version_template` for PR builds (produces\nversions like `0.2.5-pr.42+abc1234`)\n- Rewrite `pr-artifacts.yml` with consolidated lint → test → GoReleaser\nsnapshot pipeline, per-platform artifact uploads (linux/amd64,\nlinux/arm64, macOS universal, windows/amd64, ch\n[…]\ni.yml` to push-only since PR CI is now handled by\n`pr-artifacts.yml`\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: replace PR artifacts with GoReleaser snapshot builds (#35)",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-02-27T21:15:05Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6adc813d312eadef2e3fa8ecedf21e3efb8a6297",
"body": "## Summary\n\n- The CLI returns all installed plugins globally but hides them from the\n`available` array if they're installed anywhere — so plugins installed\nin other projects became invisible\n- `processAvailablePlugin` unconditionally merged installed data from\nall projects, making available plugins \n[…]\n or only available** → shown without install\nstate (available for installation)\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(tui): show all plugins with correct per-project install state (#34)",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-02-27T18:52:50Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "5587597cf956d3e4ae5460c2c3752b5316cf91ac",
"body": "… (#33)\n\n## Summary\n\n- Add GoReleaser `universal_binaries` section with `replace: true` to\ncombine darwin/amd64 and darwin/arm64 into a single Mach-O universal\nbinary\n- One macOS download works on both Intel and Apple Silicon\n- Archive named `cpm_<version>_darwin_universal.tar.gz` instead of\nseparat\n[…]\nk auto-generates a single `on_macos` block instead of\nsplit `on_intel`/`on_arm`\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "build: produce universal macOS binary instead of separate arch builds…",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-02-15T14:08:16Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ae0cd1fcf33b6755795a9ab60c24391394c8bd8f",
"body": "## Summary\n\n- Upgrade golangci-lint from 1.64.5 to 2.9.0 and gofumpt from 0.7.0 to\n0.9.2\n- Migrate `.golangci.yml` to v2 config format (formatters section,\n`linters.exclusions.rules`, `gosimple` merged into `staticcheck`)\n- Replace all `os.ReadFile` calls with `os.OpenRoot` + `fs.FS` to\neliminate go\n[…]\n usage\n- Add 14 new tests using `fstest.MapFS` for in-memory filesystem testing\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: upgrade linters to v2, use os.OpenRoot for safe file access (#32)",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-02-15T13:45:46Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "8b7de19a6df860553f020ea26e62027dafa6f757",
"body": null,
"is_bot": false,
"headline": "chore: bump claude code to 2.1.42",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-02-15T13:18:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ed219dd966c8f4d07d1c99554a07d7dd8ec8b01",
"body": "## Summary\n\n- Fix `InstallPlugin`/`UninstallPlugin` to use correct CLI commands\n(`install`/`uninstall` instead of `enable`/`disable`)\n- Add `GetAllEnabledPlugins()` to read all three settings files (user,\nproject, local) for authoritative multi-scope detection\n- Migrate `PluginState` and `Operation`\n[…]\ns `enable` and `uninstall` vs\n`disable` based on settings file state\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\n---------\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: plugin scope management with multi-scope support (#31)",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-02-15T01:32:51Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f66fd024440ba5f7124eb4fddf875d8ca2cd38cc",
"body": "## [#2]\n\nAdd the ability to see and apply plugin updates from the TUI.\n\n### Changes\n\n- **Track update availability**: Added `AvailableVersion` and\n`HasUpdate` fields to `PluginState` to detect when newer versions are\navailable\n- **'U' key binding**: Press `U` (shift+u) to mark an installed plugin\nwi\n[…]\nstage the update\n4. Press Enter to apply, or Esc to cancel\n\nCloses #2\n\n---------\n\nCo-authored-by: Bojan Rajkovic <brajkovic@coderinserepeat.com>\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(tui): show and apply plugin updates with U key (#27)",
"author_name": "piekstra",
"author_login": "piekstra",
"committed_at": "2026-02-09T13:26:01Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "aceef60ee1a13e8a79ccb30629c7f516fad792c8",
"body": "## Summary\n- Add bulk selection mode for batch install/uninstall operations\n- Space toggles selection on current plugin\n- `a` selects all plugins, `A` (shift+a) deselects all\n- Selection shown with `[x]`/`[ ]` checkbox beside each plugin\n- Help bar shows count when plugins are selected\n- `l`/`p`/`u` operations apply to all selected plugins\n\nCloses #3",
"is_bot": false,
"headline": "feat(tui): add bulk selection for batch operations (#24)",
"author_name": "piekstra",
"author_login": "piekstra",
"committed_at": "2026-02-09T04:07:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "454082b49e4d213d327b0150337ab552caa16744",
"body": "## Summary\n- Add config viewer mode to inspect plugin configuration files\n- Press `c` to open viewer for selected plugin\n- Displays plugin.json manifest, hooks.json, .mcp.json, and MCP server\nconfigs\n- Scrollable view with keyboard (↑↓/PgUp/PgDn) and mouse wheel support\n- Press `c` or Esc to close viewer and return to main view\n\nCloses #8",
"is_bot": false,
"headline": "feat(tui): add plugin config viewer (#25)",
"author_name": "piekstra",
"author_login": "piekstra",
"committed_at": "2026-02-09T04:02:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "00ab04decaa833f6eb3bfcaf11667ff08cefb52a",
"body": "## [12]\n\nAdd document viewer mode for viewing README.md and CHANGELOG.md files\nfrom installed plugins.\n\nAlso resolves #5 (README viewer) since both features share the same\nimplementation.\n\n## Summary\n\n- Add `?` key binding to view plugin README\n- Add `C` key binding to view plugin CHANGELOG\n- Scroll\n[…]\nEADME\n- [ ] Verify README renders with markdown formatting\n- [ ] Press `C` to view CHANGELOG (if plugin has one)\n- [ ] Test scrolling with various key bindings\n- [ ] Press `Esc` or `q` to close viewer",
"is_bot": false,
"headline": "feat(tui): add README and CHANGELOG viewers (#23)",
"author_name": "piekstra",
"author_login": "piekstra",
"committed_at": "2026-02-09T03:55:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "09083d97769b158bcb4d102632e2a2082c708a2d",
"body": "## Summary\n\n- Replace substring matching with fuzzy matching using `sahilm/fuzzy`\nlibrary\n- Results sorted by match score (best matches first)\n- Matches against plugin name, description, and ID combined\n\n## Changes\n\n**update.go**:\n- Add `pluginSearchData` type implementing `fuzzy.Source` interface\n-\n[…]\n1.1` dependency\n\n## Example\n\nQuery: `clpm` \nMatches: `claude-plugin-manager` (high score due to matching c-l-p-m\npattern)\n\nQuery: `cfg` \nMatches plugins with \"config\" in name/description\n\nCloses #10",
"is_bot": false,
"headline": "feat(tui): add fuzzy search for plugin filter (#19)",
"author_name": "piekstra",
"author_login": "piekstra",
"committed_at": "2026-02-09T02:29:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2ace8f731e73e69a80d257882d9503d4b3ca3da7",
"body": "## [11]\n\nDisplay plugin statistics from the marketplace in the details pane.\n\n## Summary\n\n- Show install count in details pane (formatted with K/M suffixes for\nlarge numbers)\n- Show last updated date for installed plugins (formatted as\nhuman-readable dates)\n- Data comes from existing CLI output\n\n## \n[…]\nwith install count data\n- [ ] Verify install count displays correctly\n- [ ] Select an installed plugin and verify last updated date shows\n- [ ] Verify formatting looks correct for various count values",
"is_bot": false,
"headline": "feat(tui): show plugin stats in details pane (#22)",
"author_name": "piekstra",
"author_login": "piekstra",
"committed_at": "2026-02-09T02:29:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "053f7cb3f7420224217025031b0e7ed58ffd6e7d",
"body": "## Summary\n- Add sorting options accessible via `s` key\n- Four sort modes: Name A-Z, Name Z-A, Scope, Marketplace\n- Help bar shows current sort mode\n- Selection preserved when changing sort modes\n- Plugins grouped appropriately for each sort mode\n\nCloses #4",
"is_bot": false,
"headline": "feat(tui): add sorting options for plugin list (#26)",
"author_name": "piekstra",
"author_login": "piekstra",
"committed_at": "2026-02-09T02:09:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13b01dd119a10d93ff0d061ae18ebc4f804520e6",
"body": "## [#6]\n\nAdds ability to move installed plugins between scopes (user, project,\nlocal) without manual uninstall/reinstall.\n\n### Changes\n\n- **New operation type**: Added `OpMigrate` to represent moving a plugin\nfrom one scope to another\n- **Automatic migration detection**: When pressing `l` or `p` on \n[…]\n scope like `[USER]`)\n2. Press `l` to move to local scope or `p` to move to project scope\n3. Plugin now shows transition indicator `[USER → LOCAL]`\n4. Press Enter to apply, or Esc to cancel\n\nCloses #6",
"is_bot": false,
"headline": "feat(tui): add scope migration for installed plugins (#28)",
"author_name": "piekstra",
"author_login": "piekstra",
"committed_at": "2026-02-09T02:03:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "94be243409e0bdfe48ec3beb7b69b15b5f1d081b",
"body": "## [#14]\n\nExtract mode-specific state from the flat `Model` struct into dedicated\nsub-types for better organization and clarity.\n\n### Changes\n\n**New sub-model types:**\n- `MainState`: Holds state for the main two-pane view (pendingOps,\nshowConfirm, showQuitConfirm, mouseEnabled)\n- `FilterState`: Hold\n[…]\ns` → `m.main.pendingOps`\n- `m.filterActive` → `m.filter.active`\n- `m.operations` → `m.progress.operations`\n- etc.\n\nCloses #14\n\n---------\n\nCo-authored-by: Bojan Rajkovic <brajkovic@coderinserepeat.com>",
"is_bot": false,
"headline": "refactor(tui): extract mode-specific state into sub-models (#29)",
"author_name": "piekstra",
"author_login": "piekstra",
"committed_at": "2026-02-08T18:53:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "33ba2a9f0a91d9b4f0a4562f46c0dd4bc5482f74",
"body": "…(#30)\n\n## Summary\n- Fixes a panic (`index out of range [0] with length 0`) when executing\nplugin operations (e.g., installing to project scope)\n- `operationErrors` was set to `nil` in `startExecution()` instead of\nbeing allocated, so recording an error result crashed\n- Changed to `make([]string, len(m.operations))` to properly size the\nslice\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(tui): allocate operationErrors slice before executing operations …",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-02-08T18:35:55Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "18cbecf24be7f1445469d49ad74465f44198dc5c",
"body": "## Summary\n\n- Add `Theme` type with auto-detection using\n`lipgloss.HasDarkBackground()`\n- Add `--theme` / `-t` flag for manual override (`auto`, `light`,\n`dark`)\n- Create light theme color palette optimized for light terminal\nbackgrounds\n\n## Changes\n\n**styles.go**:\n- Add `Theme` enum: `ThemeAuto`, `\n[…]\n488 |\n| User scope | #E71D36 | #BE123C |\n\n## Testing\n\n```bash\ncpm --theme light # Force light theme\ncpm --theme dark # Force dark theme\ncpm # Auto-detect (default)\n```\n\nCloses #17",
"is_bot": false,
"headline": "feat(tui): add light theme support (#18)",
"author_name": "piekstra",
"author_login": "piekstra",
"committed_at": "2026-01-29T21:10:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5d3e1813c1e4cd8ef60ac76491b894ccdf972c53",
"body": "## Summary\n\n- Update `homepage` URL from `claude-plugin-manager` to `cpm`\n- Update `release.github.name` from `claude-plugin-manager` to `cpm`\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: update goreleaser config for renamed repository (#16)",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-27T03:16:12Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "79fa1f329bd9f5ec1937fa6a3cd566eec83eea7f",
"body": "…h (#15)\n\n## Summary\n\n- Fix plugin detection to use project settings files\n(`.claude/settings.json`, `.claude/settings.local.json`) as the source\nof truth for which plugins are enabled\n- The CLI's `projectPath` field was unreliable - it shows where a plugin\nwas originally installed, not where it's c\n[…]\nenable`/`disable`\ncommands (semantically correct for project-scoped operations)\n\n🤖 Generated with [Claude Code](https://claude.com/claude-code)\n\nCo-authored-by: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: detect project plugins from settings files instead of projectPat…",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-27T03:11:20Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b12c994ba7b5b98042ae0861d815d653291ad80d",
"body": "Replace GITHUB_RUN_NUMBER with a count of commits since version.txt was\nlast modified. This makes version numbers more meaningful and predictable:\n- v0.2.0 immediately after bumping version.txt to 0.2\n- v0.2.3 after 3 commits since the version bump\n- Versions are deterministic and don't depend on CI run history\n\nThe patch number now directly reflects how many changes have been made\nsince the last minor/major version bump.",
"is_bot": false,
"headline": "ci: use commit count since version.txt change instead of run number",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-24T17:20:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "67d686ffca596b3a6c41c5bc8e57a6cbb633cc23",
"body": "## Summary\n\nAdds ability to toggle plugins between enabled and disabled states using\nthe 'e' key, completing the full plugin lifecycle management in the TUI.\n\n- Press 'e' on an installed plugin to queue enable/disable operation\n- Visual indicators show pending enable/disable state\n- Operations execu\n[…]\n/tui/CLAUDE.md` with Operation types, guarantees, and\ngotchas\n- Architecture diagrams reflect new types and relationships\n\nCloses #1\n\n---------\n\nCo-authored-by: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add plugin enable/disable toggle with 'e' key (#13)",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-24T17:10:22Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f9d5ddde589bc9a28c28f92049a2d12b2706d0f9",
"body": null,
"is_bot": false,
"headline": "build(deps): install claude code through mise too",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-24T15:17:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "915296a82b99aaac7ce6f9b10501408f6a722982",
"body": "Remove implementation plan files from tracking and add\ndocs/implementation-plans/ to .gitignore to prevent future tracking.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: remove implementation plans and ignore them",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-24T15:16:50Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "c08fb5b1b93b8d8352d39f198baed09697da6068",
"body": "Replace release-please with simpler auto-release pattern:\n- Add version.txt for base version (0.1)\n- Add auto-release.yml: triggers on feat/fix commits to main\n- Add release.yml: runs GoReleaser on tag push\n- Update .goreleaser.yml: add homebrew_casks, Branch ldflags\n- Update pr-artifacts.yml: add B\n[…]\nfix commit to main.\nVersion format: v{base}.{run_number} (e.g., v0.1.42)\n\nRequires TAP_GITHUB_TOKEN secret for tag pushes to trigger workflows.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: switch to auto-release workflow pattern",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-23T02:32:57Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d33c20e5d6fc708a0c972af0b348048d4ae42367",
"body": "Simplify matchesKey function by using slices.Contains instead of\nmanual loop iteration.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor(tui): use slices.Contains for key matching",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-23T02:16:42Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2495dc702af32550ffe60d5805af5bcb09f97086",
"body": "- Create docs/architecture.md with package overview, type definitions,\n data flow, and UI state diagrams using Mermaid\n- Update CLAUDE.md with link to architecture doc and maintenance instructions\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: add architecture documentation with Mermaid diagrams",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-23T02:16:12Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "b17ca9698364e1eed24206cea636ff80608e89ec",
"body": null,
"is_bot": false,
"headline": "chore(claude): add gopls lsp for claude to use",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-23T02:10:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b6bff79fc808ca8fb286492d717c4cec7661d81",
"body": "Cache ~/go/pkg/mod and ~/.cache/go-build to speed up\nsubsequent CI runs. Cache key is based on go.sum hash.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: add Go module caching",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-23T02:00:33Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "e1b76a5159ab2be7b9f13ff0659d662fedd6ff87",
"body": "- Update CI workflow to use mise-action for consistent tooling\n- Add Branch field to version package for build metadata\n- Include branch in ldflags during build\n- Update tests to verify branch is included in version string\n\nThe \"verify binary\" step now shows meaningful version info:\ncpm dev (branch: main, commit: abc1234, built: 2026-01-23T01:58:01Z)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: use mise for CI and add branch to version info",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-23T01:58:20Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ed143ed9cfe0cffceb62c157e9fcb8e01a935ed1",
"body": "- Reorder struct fields for optimal memory alignment (fieldalignment)\n- Refactor renderDetails into smaller helper functions (gocyclo)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: resolve golangci-lint issues",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-23T01:54:26Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "abe1e9e69bce270871aef2c3103d9c6c70429a07",
"body": "golangci-lint v1.64.5 does not support the `version` property.\nThis was causing CI failures.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: remove invalid version field from golangci-lint config",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-23T01:49:50Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "e4e91ef2b0619f903d64805d6d07455dd6453872",
"body": "Update CLAUDE.md files to document contracts that were implemented during\nthe feature branch but not yet reflected in documentation:\n\n- internal/claude/CLAUDE.md: Add manifest reading and component scanning\n exports (ReadPluginManifest, ScanPluginComponents, ResolveMarketplaceSourcePath,\n PluginMa\n[…]\nnComponents)\n- internal/tui/CLAUDE.md: Update NewModel signature to include workingDir\n parameter and document project-scoped plugin filtering\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: update project context for brajkovic/cpm-plugin-manager",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-23T01:43:17Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d75a7accd0029f9840e98976fd276e45e2834750",
"body": "- Add 'm' key binding to toggle mouse capture on/off\n- When mouse is off, terminal text selection works normally for copy/paste\n- Help bar shows current mouse state (on/off)\n- Mouse is enabled by default\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(tui): add mouse toggle with 'm' key",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-23T01:40:02Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "0b8870b98505de3a8db2a2fca37ece3a284c5ab0",
"body": "- Detect URL-based plugins that are hosted externally (GitHub, etc.)\n- Add IsExternal and ExternalURL fields to PluginState\n- Show \"External plugin (hosted on GitHub)\" message with URL\n- Explain that component details are available after installation\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(tui): show external plugin indicator for URL-based plugins",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-23T01:39:53Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "e4fd564c54664892e52a7ee03dc26efbb3d0b3e4",
"body": "- Add ResolveMarketplaceSourcePath to find plugin source in marketplace cache\n- Scan marketplace plugins for skills, agents, commands, hooks, MCPs\n- Read author info from marketplace plugin manifest\n\nPlugins are available on disk at ~/.claude/plugins/marketplaces/<marketplace>/\neven before installation, so we can scan them for component information.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(tui): show components and author for uninstalled plugins",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-23T01:35:19Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1d19eb259486a04985129b2512b14b90bba600d0",
"body": "- Add distinct styling for component categories (Skills, Agents, etc.)\n- Render each component item on its own line with bullet points\n- Use indented layout for better readability\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "style(tui): improve component list visual hierarchy",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-23T01:31:10Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "79eba0dd673f26218f95e29dc56bcf707394c277",
"body": "- Read plugin manifest from .claude-plugin/plugin.json for installed plugins\n- Scan plugin directories for components (skills, agents, commands, hooks, MCPs)\n- Display author name and email (handles both string and object formats)\n- Show \"Includes:\" section listing what each plugin provides\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(tui): show plugin descriptions, components, and author info",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-23T01:30:07Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "63ac3ceda341c4b4286086632a56310a9d14b683",
"body": "The renderList loop was double-counting listOffset when checking\nselection. The loop variable i already included listOffset since it\nstarted at m.listOffset, but getActualIndex was adding it again.\n\nSimplified the selection check:\n- Non-filtered mode: directly compare i == m.selectedIdx\n- Filtered mode: use m.filteredIdx[i] to get original index\n\nThis fixes the \"can't select bottom 5 entries\" bug.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(tui): fix selection highlighting for bottom items",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-23T01:22:44Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "de57116f41e6d15f9d8497dcf39a33938aa456b8",
"body": "Two fixes:\n\n1. Use prefix matching for project path (strings.HasPrefix) instead of\n exact match. This handles git worktrees where the working directory\n is inside the project path (e.g., .worktrees/feature-branch).\n\n2. Mark plugins as seen after adding them from the installed list to\n prevent duplicates when the CLI returns the same user-scoped plugin\n multiple times.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(tui): handle worktrees and prevent duplicate plugins",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-23T01:20:50Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "95ea156d912c09bc439e63761afab0fa90b86181",
"body": "Plugins installed in multiple projects were showing multiple times\nbecause the installed list includes all installs across all projects.\n\nNow filter installed plugins to only show:\n- User-scoped plugins (always visible, apply everywhere)\n- Project/local-scoped plugins that match the current working \n[…]\nirectory\n\nThis also fixes the \"can't select bottom items\" bug which was caused by\nthe list being longer than expected due to duplicate entries.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(tui): filter installed plugins by current working directory",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-23T01:18:42Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4051af3495a9b7f84b0cf3cfde399f5dd6587c05",
"body": "Root cause: mergePlugins only iterated through list.Available, so\ninstalled plugins that weren't in the --available output from Claude CLI\nwere never shown. Many ed3d-plugins were missing because they were\ninstalled but not in the available list.\n\nTrack which installed plugins were seen via the available list, then add\nany remaining installed plugins separately using PluginStateFromInstalled.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(tui): show installed plugins not in available list",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-23T01:15:56Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "239ccf0d3a2b742f52d028de4777132e26c16857",
"body": "Root cause: GroupHeader style had MarginTop(1) which added extra visual\nlines that threw off the click-to-index mapping. Each group header took\n2 visual lines but the click handler assumed 1 line per item.\n\nRemove MarginTop(1) from GroupHeader style so visual lines match logical\nindices. Group headers remain visually distinct via Bold and color.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(tui): fix mouse click off-by-one error",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-23T01:15:47Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "9939fe40edde6ea31d9c11dbb70f807b7a970e3d",
"body": "1. Fix mouse click off-by-one error - remove duplicate listOffset addition\n2. Fall back to ID (without marketplace) when plugin name is missing\n3. Sort plugins case-insensitively to handle \"Notion\" vs \"notion\"\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(tui): address bugs from manual testing",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-23T01:01:56Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "8ed7ab3e405341ce35525037b9eced7da95a3ed7",
"body": "Match go.mod and GitHub Actions workflows.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: align Go version in mise.toml to 1.24",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-23T00:56:29Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "9fb639005c1b2c2f2a8ff91d2e512b5181c3ded9",
"body": "Add context documentation for internal/claude and internal/tui domains\ndocumenting contracts, dependencies, invariants, and key decisions.\nUpdate root CLAUDE.md with freshness date and references to domain files.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: add domain CLAUDE.md files and freshness date",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-23T00:53:01Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f10bbf92322054b10ec95b6dcf0ea25fe3963db7",
"body": "- Remove reference to non-existent docs/screenshot.png from README.md (line 8)\n- Create CONTRIBUTING.md file to resolve missing reference in README.md (line 96)\n\nFixes:\n- README.md no longer contains broken image reference\n- CONTRIBUTING.md now exists with contribution guidelines\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: address code review feedback for Phase 8",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-23T00:49:28Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "caa5cae6acc5b8dd00955877988399177de7f481",
"body": "README includes:\n- Installation instructions (Homebrew, Chocolatey, WinGet, Go install)\n- Key bindings reference\n- Usage instructions\n- Building from source\n\nLICENSE: MIT License with copyright 2026 open-cli-collective\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: add README and MIT LICENSE",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-23T00:46:17Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "6381d68c78add88c7608fd2154145890022ffd4d",
"body": "- cpm.nuspec: Chocolatey package manifest with metadata\n- chocolateyinstall.ps1: Downloads and installs Windows binary\n- chocolateyuninstall.ps1: Removes Windows binary on uninstall\n- cpm.yaml: WinGet manifest for Windows package manager\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: add Chocolatey and WinGet package configurations",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-23T00:46:10Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ca82bd50d703bd36cfbcedb1022ecdb0c94f9f9b",
"body": "- ci.yml: Lint, test, and build on push/PR to main\n- pr-artifacts.yml: Build multi-platform binaries (linux, darwin, windows) on PR\n- release-please.yml: Automated release PRs and GoReleaser integration\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: add GitHub Actions workflows for CI, PR artifacts, and release",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-23T00:46:04Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "af5b4e3e4919e66c68ea7743cd91e2f71424d872",
"body": "Add comprehensive test coverage for all Phase 7 features:\n\n## Filter Mode Tests\n- updateFilter: test Esc clears filter, Enter selects first match, backspace removes characters, runes append\n- applyFilter: test case-insensitive matching on name/description/ID, skips group headers\n- getVisiblePlugins:\n[…]\n- 2 instead of width/3)\n- Add Up/Down navigation within filter mode for better UX\n- Update help text to document Esc: clear for pending changes\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "test(tui): add comprehensive tests for Phase 7 features",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-23T00:41:31Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "1ace482bad4bfe1c42aa0caf9cb0d3c92a8817cc",
"body": null,
"is_bot": false,
"headline": "refactor(tui): reduce cyclomatic complexity and improve mouse handler",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-23T00:36:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ffe050f4f51bb96bdbbb9477901e128d606981a",
"body": null,
"is_bot": false,
"headline": "feat(tui): enable mouse cell motion support",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-23T00:34:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2ce0d916e5d39ffc3109ea345be70c07f96f172a",
"body": null,
"is_bot": false,
"headline": "feat(tui): add filter mode, refresh handler, and mouse support",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-23T00:34:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "09eb799186ad7704053e18422f7d7b266cee3391",
"body": null,
"is_bot": false,
"headline": "feat(tui): add filter input view and help text updates",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-23T00:34:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d537c1c631cc26f7f2fe574733585083c5eeccbc",
"body": null,
"is_bot": false,
"headline": "feat(tui): add filter state fields and quit confirmation state",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-23T00:33:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ea25898381182bc931b7005ca85c522d6f29ab1",
"body": "Critical: Add comprehensive unit tests for execution flow\n- TestUpdateConfirmationEnterStartsExecution: Verify Enter starts execution\n- TestUpdateConfirmationEscapeCancel: Verify Escape cancels without executing\n- TestStartExecutionBuildsOperations: Verify operations build correctly\n- TestExecuteOpe\n[…]\nccessful and failed operations, not just errors\n- Updated all references in model.go and update.go\n\nAll tests pass, lint clean, no regressions.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(tui): address Phase 6 code review feedback",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-23T00:30:36Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f2863356c57ef153e5604ce0f319ec84e8e4315f",
"body": "…modals\n\nImplements the complete execution flow for applying pending plugin changes:\n\n- Added Operation struct and operationDoneMsg message type\n- Added execution state fields to Model (operations, currentOpIdx, operationErrors, showConfirm)\n- Added confirmation modal view that lists pending operati\n[…]\nrors are collected and displayed in summary\n- Plugin list refreshes after execution completion\n\nAll tests pass, linting passes, build succeeds.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(tui): add execution flow with confirmation, progress, and error …",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-23T00:22:42Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "e1d3045406680ee5263ab6713f8fa9d2b85bab5d",
"body": null,
"is_bot": false,
"headline": "test(tui): add tests for selection behavior",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-23T00:05:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f54f6f93e3a45970377ef716922277ee16825ecd",
"body": null,
"is_bot": false,
"headline": "feat(tui): add selection key handlers for l/p/Tab/u/Esc",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-23T00:05:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5917337a9af6ab00637e369a4524c05333a42d3c",
"body": null,
"is_bot": false,
"headline": "fix: address linting issues",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-23T00:01:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b68510d1fd9b60d354f8e9389c3913625003d7ad",
"body": null,
"is_bot": false,
"headline": "feat(tui): integrate styles, keys, view into model",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-23T00:00:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "708167223618618bee496b81c860840e378d31e9",
"body": null,
"is_bot": false,
"headline": "feat(tui): add two-pane view rendering",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-23T00:00:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "818e9e2012f0aa1a4e278aa9567b8d070a02e356",
"body": null,
"is_bot": false,
"headline": "feat(tui): add key binding definitions",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-22T23:59:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "efe96020841c6291b9b1bf2c8f29875bcbafd8b4",
"body": null,
"is_bot": false,
"headline": "feat(tui): add lip gloss styles for two-pane layout",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-22T23:58:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "26279ceaae042be4b81ea8484982952bb6a7415a",
"body": null,
"is_bot": false,
"headline": "fix(tui): resolve lint issues - unused fields and parameters",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-22T23:55:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b6337615dab3d5e94874311d9b8d52a797ae3671",
"body": null,
"is_bot": false,
"headline": "feat(main): add entry point with version/help flags and claude check",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-22T23:53:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6ff9a82c426535dfb52be5e4ea2df2a84c87ba0f",
"body": null,
"is_bot": false,
"headline": "feat(tui): add core model with plugin loading",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-22T23:52:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e817f0393b7fb09a3381049cfe0fc25728bd5a20",
"body": null,
"is_bot": false,
"headline": "chore: add bubble tea dependencies",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-22T23:51:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6b3fd3b393fe313c011b91de7510c4c56017ca23",
"body": null,
"is_bot": false,
"headline": "feat(version): add version package with build-time injection",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-22T23:50:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b967308079d81907c8e2dea28817798465535634",
"body": "…essions",
"is_bot": false,
"headline": "fix(claude): resolve linting issues - field alignment and gosec suppr…",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-22T23:47:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2512c5ebe1ac1a90bf1d92f1ddd9a177c90e9ea5",
"body": null,
"is_bot": false,
"headline": "feat(claude): add client interface and implementation",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-22T23:47:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "efcd424c5261c958107ab8e381fb8dedf8bfa4c8",
"body": null,
"is_bot": false,
"headline": "feat(claude): add type definitions for plugin data structures",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-22T23:47:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "335bc8665deb4dcbdbb4f9f00883f9510a9efefb",
"body": "The .golangci.yml file was missing the version declaration specified in the\nimplementation plan. Added version: \"2\" as the first line to match the\nspecification.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(config): add version: \\\"2\\\" to golangci.yml",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-22T23:44:44Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "4d86d13ec0e5482527c4bf20f3cdcbe26822da82",
"body": null,
"is_bot": false,
"headline": "docs: add CLAUDE.md project guidance",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-22T23:41:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "063f3538f88bec0baa52b7d3bed5d834c68e6448",
"body": null,
"is_bot": false,
"headline": "chore: add placeholder main.go",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-22T23:41:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f2fdca47e4acac3aa26bee6bdb593008c1746928",
"body": null,
"is_bot": false,
"headline": "chore: add Makefile as thin wrapper for mise tasks",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-22T23:40:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "54d9f15e65244f5214458793e5ea226307daf39f",
"body": null,
"is_bot": false,
"headline": "chore: add renovate configuration for dependency updates",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-22T23:40:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "190e20aa02d32be0dc05011f25f679dc37ade29b",
"body": null,
"is_bot": false,
"headline": "chore: add goreleaser configuration for releases",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-22T23:40:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6e6e9b235d3ffb2f5be02c633cccac4e057e2ef1",
"body": null,
"is_bot": false,
"headline": "chore: add golangci-lint configuration",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-22T23:39:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fbc91ab8a67908421822ec59ed65d1012414fde1",
"body": null,
"is_bot": false,
"headline": "chore: add lefthook configuration for git hooks",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-22T23:39:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8159cba078ec318893a2d1ab450854a67b56b51e",
"body": null,
"is_bot": false,
"headline": "chore: add mise configuration for tool management",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-22T23:39:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "117c1ab76d3c902431c6a38375749f625d0c259b",
"body": null,
"is_bot": false,
"headline": "chore: create project directory structure",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-22T23:39:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "329073f772e54929ecbba30614762d844eca50fc",
"body": null,
"is_bot": false,
"headline": "chore: initialize go module",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-22T23:38:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2c11eec5883a55503072025b195d43bf56861b2",
"body": "Fixes identified during code review validation:\n\nImportant Issues:\n- Phase 2: Add Source field to AvailablePlugin struct (CLI JSON includes it)\n- Phase 6: Clear filter state in updateProgress to prevent stale filter\n\nMinor Issues:\n- Phase 1: Add .gitkeep cleanup verification step\n- Phase 3: Sort mar\n[…]\n()\n- Phase 6/7: Update itoa() calls to strconv.Itoa()\n- Phase 7: Make mouse click offset calculation more robust by accounting\n for filter bar\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: apply validation fixes to implementation plans",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-22T11:56:01Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "66396d7102893c5ea8bdb470d98e1e69abe01451",
"body": null,
"is_bot": false,
"headline": "chore: add .gitignore with worktree exclusion",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-22T03:33:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad2834a14e8b0cc208ba9a30b75a76f42e767061",
"body": "Corrected the scope terminology:\n- user: ~/.claude/settings.json (global)\n- project: .claude/settings.json (shared)\n- local: .claude/settings.local.json (not shared)\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: fix scope definitions in glossary",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-22T03:06:56Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "30564d0c69c1e308313e42e98b33eff560574c77",
"body": "Completed brainstorming session. Design includes:\n- Flat model TUI architecture with Bubble Tea\n- Two-pane layout (plugin list + details)\n- Shell out to claude CLI for operations\n- Mise-based tooling with lefthook pre-commit hooks\n- release-please + GoReleaser CI/CD pipeline\n- 8 implementation phases\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: add cpm plugin manager design plan",
"author_name": "Bojan Rajkovic",
"author_login": "bojanrajkovic",
"committed_at": "2026-01-22T03:05:01Z",
"body_truncated": false,
"is_coding_agent": true
}
],
"releases_count": 16,
"commits_last_year": 92,
"latest_release_at": "2026-07-17T13:28:07Z",
"latest_release_tag": "v0.3.3",
"releases_from_tags": false,
"days_since_last_push": 4,
"active_weeks_last_year": 8,
"days_since_latest_release": 4,
"mean_days_between_releases": 17.6
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 50,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/open-cli-collective/cpm",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/open-cli-collective/cpm",
"is_deprecated": false,
"latest_version": "v0.3.3",
"repository_url": "https://github.com/open-cli-collective/cpm",
"versions_count": 17,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-17T13:26:17Z",
"latest_version_yanked": null,
"days_since_latest_publish": 4
}
]
},
"popularity": {
"forks": 0,
"stars": 2,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [
{
"date": "2026-01-24",
"count": 1
},
{
"date": "2026-03-08",
"count": 1
}
],
"complete": true,
"collected": 2,
"total_stars": 2
},
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile",
"mise.toml"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 98178,
"source_files_sampled": 17,
"oversized_source_files": 1,
"agent_instruction_files": [
"CLAUDE.md",
"internal/claude/CLAUDE.md",
"internal/tui/CLAUDE.md"
],
"agent_instruction_max_bytes": 4040
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "github.com/charmbracelet/bubbletea",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.3.10"
},
{
"name": "github.com/charmbracelet/glamour",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.10.0"
},
{
"name": "github.com/charmbracelet/lipgloss",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.1-0.20250404203927-76690c660834"
},
{
"name": "github.com/sahilm/fuzzy",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.1.1"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 24,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 15,
"closed_unmerged_prs": 2
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "bojanrajkovic",
"commits": 80,
"avatar_url": "https://avatars.githubusercontent.com/u/110747?v=4"
},
{
"type": "User",
"login": "piekstra",
"commits": 12,
"avatar_url": "https://avatars.githubusercontent.com/u/10527279?v=4"
}
],
"contributors_sampled": 2,
"top_contributor_share": 0.87
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"auto-release.yml",
"ci.yml",
"pr-artifacts.yml",
"release.yml"
],
"has_docs_dir": true,
"linter_configs": [
".golangci.yml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "24 out of 24 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 3,
"reason": "Found 11/30 approved changesets -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 6,
"reason": "project has 2 contributing companies or organizations -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 1,
"reason": "2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "15 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "d8703505f23ab81bb3d17f5bb4ee2adb87395415",
"ran_at": "2026-07-22T07:23:49Z",
"aggregate_score": 4.1,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-17T13:28:17Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-17T13:26:23Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/open-cli-collective/cpm",
"host": "github.com",
"name": "cpm",
"owner": "open-cli-collective"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 58,
"inputs": {
"security": 41,
"vitality": 72,
"community": 33,
"governance": 61,
"engineering": 76
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 72,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 60,
"inputs": {
"commits_last_year": 92,
"human_commit_share": 1,
"days_since_last_push": 4,
"active_weeks_last_year": 8
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 4 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 4
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "8/52 weeks with commits",
"points": 5.5,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 8
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "92 commits in the last year",
"points": 17.7,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 92
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1",
"points": 1,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 16,
"latest_release_tag": "v0.3.3",
"releases_from_tags": false,
"days_since_latest_release": 4,
"mean_days_between_releases": 17.6
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "16 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 16
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 4 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 4
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~17.6 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 17.6
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 4,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 4 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 4
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 33,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 2,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "below_threshold"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "2 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 2
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 70,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 61,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 21,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 2,
"top_contributor_share": 0.87
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 87% of commits",
"points": 2.9,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 87
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "2 contributors",
"points": 2.7,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 2
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 6,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "excellent",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 87,
"inputs": {
"merged_prs": 24,
"open_issues": 0,
"closed_issues": 15,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 2
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 46.8,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "24/26 decided PRs merged",
"points": 35.3,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 24,
"decided": 26
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 11/30 approved changesets -- score normalized to 3",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"followers": 15,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "open-cli-collective",
"public_repos": 22,
"account_age_days": 186
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "15 followers of open-cli-collective",
"points": 8.7,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 15,
"login": "open-cli-collective"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "22 public repos, account ~0 yr old",
"points": 10.9,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 22
}
},
{
"code": "account_age_years",
"params": {
"years": 0
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/open-cli-collective/cpm"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 4
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 4 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 4
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "17 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 17
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 76,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "4 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 4
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".golangci.yml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "24 out of 24 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 41,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 41,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 4.1
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "24 out of 24 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 11/30 approved changesets -- score normalized to 3",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "2 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 1",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "15 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 1
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "excellent",
"name": "AI Readiness",
"value": 86,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [
"CLAUDE.md",
"internal/claude/CLAUDE.md",
"internal/tui/CLAUDE.md"
],
"agent_instruction_max_bytes": 4040
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "CLAUDE.md, internal/claude/CLAUDE.md, internal/tui/CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "CLAUDE.md, internal/claude/CLAUDE.md, internal/tui/CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "92 of 92 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 92,
"sampled": 92
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [
"Makefile",
"mise.toml"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0.5,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile, mise.toml",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile, mise.toml"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".golangci.yml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "46 of the last 92 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 46,
"sampled": 92
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 97,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 98178,
"source_files_sampled": 17,
"oversized_source_files": 1
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "1/17 source files over 60KB",
"points": 51.8,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 17,
"oversized": 1
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-22T07:24:05.665903Z",
"schema_version": "0.26.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/o/open-cli-collective/cpm.svg",
"full_name": "open-cli-collective/cpm",
"license_state": "standard",
"license_spdx": "MIT"
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with open-cli-collective/cpm. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.26.0 — full methodology · metrics wiki.
