Symphony turns project work into isolated, autonomous implementation runs, allowing teams to manage work instead of supervising coding agents.
ElixirApache-2.0★ 26,183 stars⑂ 2,647 forkssince Feb 2026View on GitHub ↗
openai/symphony holds a health index of 63 out of 100, placing it in the Moderate band. It scores highest on Community & Adoption (78/100) and lowest on Security (34/100). It was last updated 1 day ago. A single contributor accounts for most of its recent work.
63
overall / 100
Moderate
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
63
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
Type-checkable code — Elixir without a type-check config
53/55
Manageable file sizes — 3/82 source files over 60KB
Inputs used
primary_language
Elixir
largest_source_bytes
77,007
source_files_sampled
82
oversized_source_files
3
Key facts
26,183GitHub stars
9contributors
41commits, last 12 months
1days since last push
1releases
1bus factor
0open issues
Hexpackage ecosystems
Data collection warnings
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
Could not fetch hex package 'symphony_elixir' from its registry
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
Star and fork history 0 ★ / 2,647 ⇿
0Stars
2,647Forks
1Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Only the most recent history is shown — this repository exceeds the collection window, so the earliest history is not captured.
Major 0Minor 0Patch 1
OpenSSF Scorecard 3.4 / 10
3.4aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-23 21:51 UTC
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 30463,
"has_wiki": false,
"homepage": "https://openai.com/index/open-source-codex-orchestration-symphony/",
"languages": {
"CSS": 8252,
"Shell": 657,
"Elixir": 911302,
"Python": 19585,
"Makefile": 650,
"Dockerfile": 600
},
"pushed_at": "2026-07-22T00:52:06Z",
"created_at": "2026-02-26T21:54:00Z",
"owner_type": "Organization",
"updated_at": "2026-07-23T20:56:31Z",
"description": "Symphony turns project work into isolated, autonomous implementation runs, allowing teams to manage work instead of supervising coding agents.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Elixir",
"significant_languages": [
"Elixir"
]
},
"owner": {
"blog": "https://openai.com/",
"name": "OpenAI",
"type": "Organization",
"login": "openai",
"company": null,
"location": null,
"followers": 127163,
"avatar_url": "https://avatars.githubusercontent.com/u/14957082?v=4",
"created_at": "2015-10-03T19:34:05Z",
"is_verified": null,
"public_repos": 265,
"account_age_days": 3946
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.0.1",
"kind": "patch",
"published_at": "2026-07-18T00:13:44Z"
}
],
"recent_commits": [
{
"oid": "1f3219bb1ea5f69a1305dc594e79b0db57c113c5",
"body": "#### Context\n\nJira blockers only gated literal Todo states, so Open or Backlog issues could dispatch through active blockers.\n\n#### TL;DR\n\n*Gate Jira new-category issues on active blockers.*\n\n#### Summary\n\n- Read Jira `statusCategory.key` while normalizing issues.\n- Gate `new` category issues on inw\n[…]\neduler policy was unnecessary; Jira already exposes the native category signal.\n\n#### Test Plan\n\n- [x] `make -C elixir all`\n- [x] `mise exec -- mix test test/symphony_elixir/jira_adapter_test.exs:166`",
"is_bot": false,
"headline": "Gate Jira new-category issues on blockers",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-07-20T22:15:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3c372fa1f32a4d573a7bb9fa0cc101e16add63c3",
"body": "#### Context\n\nDocs called turn timeout a total cap, while runtime uses silence. Generic tool-input prompts also received fabricated answers, and approval-looking option labels alone are not enough to identify MCP approval prompts.\n\n#### TL;DR\n\n*Document idle timeouts and block generic tool input.*\n\n\n[…]\nixir all`\n- [x] `mise exec -- mix test test/symphony_elixir/app_server_test.exs:619 test/symphony_elixir/app_server_test.exs:788`\n- [x] `mise exec -- mix test test/symphony_elixir/app_server_test.exs`",
"is_bot": false,
"headline": "Block generic tool input and document idle timeouts",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-07-20T22:14:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cbd2158d5cd76a1b738c79130b9d9bffbd4b4317",
"body": "#### Context\n\nFailed new-workspace bootstrap was skipped on retry, and relative local roots followed launcher cwd instead of the selected workflow file.\n\n#### TL;DR\n\n*Retry failed bootstrap cleanly and anchor local roots to WORKFLOW.md.*\n\n#### Summary\n\n- Remove newly created partial workspaces when \n[…]\nlan\n\n- [x] `make -C elixir all`\n- [x] `mise exec -- mix test test/symphony_elixir/workspace_and_config_test.exs:60`\n- [x] `mise exec -- mix test test/symphony_elixir/workspace_and_config_test.exs:244`",
"is_bot": false,
"headline": "Retry failed workspace setup and anchor local roots",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-07-20T22:14:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0517275cf8a4a01a3f843419d4512c41efb8a27b",
"body": "#### Context\n\nA retry performs a fresh by-id lookup, then dispatch revalidates before starting work. If that second read missed or went stale, the popped retry could stay claimed forever; bypassing it instead could dispatch stale work.\n\n#### TL;DR\n\n*Keep dispatch-time freshness and let retries relea\n[…]\nEX_HOME=/private/tmp/symphony-hex mise exec -- make -C elixir all`\n- [x] `mise exec -- mix test test/symphony_elixir/core_test.exs:875`\n- [x] `mise exec -- mix test test/symphony_elixir/core_test.exs`",
"is_bot": false,
"headline": "Keep retry dispatch fresh without leaking claims",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-07-20T22:10:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7cf29df6101706b4348f9194074dc991d51f4fb5",
"body": "#### Context\n\nTerminal reconciliation could race a live worker and could recompute cleanup from reloaded config, deleting the wrong workspace. Recorded-path cleanup also still needs the local symlink-escape guard before hooks run.\n\n#### TL;DR\n\n*Stop workers first and clean the validated workspace re\n[…]\nx test test/symphony_elixir/core_test.exs:541`\n- [x] `mise exec -- mix test test/symphony_elixir/core_test.exs:618`\n- [x] `mise exec -- mix test test/symphony_elixir/workspace_and_config_test.exs:176`",
"is_bot": false,
"headline": "Make terminal workspace cleanup safe",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-07-20T22:09:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "633eae740f807de18007f5a9a25e2e0d206afdf4",
"body": "#### Context\n\nJira inward Blocks links were normalized as dispatchable, so Symphony\ncould\nstart Todo work before its blocker reached a terminal state.\n\n#### TL;DR\n\n*Jira Todo issues now wait for inward Blocks dependencies.*\n\n#### Summary\n\n- Request issuelinks in Jira candidate polling and ID refresh\n[…]\nocker, proved workspace creation, and\n deleted the disposable issues.\n- [x] SYMPHONY_RUN_JIRA_LIVE_E2E=1 mix test\ntest/symphony_elixir/jira_live_e2e_test.exs\n\nCo-authored-by: Codex <codex@openai.com>",
"is_bot": false,
"headline": "feat(jira): honor blocking issue links (#108)",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-07-20T19:51:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "678e4ca8b55962dc894dc2e911dd84b143a7f263",
"body": "#### Context\n\nSymphony's generic tracker seam needs a GitLab Issues implementation without adding generic mutation APIs.\n\n#### TL;DR\n\n*Add GitLab Issues reads and a host-authenticated raw GitLab API tool.*\n\n#### Summary\n\n- Add project-scoped GitLab issue reads, IID normalization, and dispatchability\n[…]\nHONY_RUN_GITLAB_LIVE_E2E=1 mix test test/symphony_elixir/gitlab_live_e2e_test.exs`\n- [x] `SYMPHONY_RUN_LIVE_E2E=1 SYMPHONY_LIVE_LINEAR_TEAM_KEY=FST mix test test/symphony_elixir/live_e2e_test.exs:123`",
"is_bot": false,
"headline": "Add GitLab Issues tracker adapter",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-07-20T18:15:12Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c68ba657359fc8eac53500188ff1a6d42c0fbc44",
"body": "#### Context\n\nSymphony's generic tracker seam needs an Asana implementation without adding generic mutation APIs.\n\n#### TL;DR\n\n*Add Asana task reads and a host-authenticated raw Asana API tool.*\n\n#### Summary\n\n- Add project-scoped Asana task reads, section-state mapping, and dispatchability.\n- Add r\n[…]\nMPHONY_RUN_ASANA_LIVE_E2E=1 mix test test/symphony_elixir/asana_live_e2e_test.exs`\n- [x] `SYMPHONY_RUN_LIVE_E2E=1 SYMPHONY_LIVE_LINEAR_TEAM_KEY=FST mix test test/symphony_elixir/live_e2e_test.exs:123`",
"is_bot": false,
"headline": "Add Asana tracker adapter",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-07-20T18:09:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e5740501abec0480476047df9f70ab0395fb7166",
"body": "#### Context\n\nSymphony's generic tracker seam needs a Jira Cloud implementation without adding generic mutation APIs.\n\n#### TL;DR\n\n*Add Jira Cloud reads and a host-authenticated raw Jira REST tool.*\n\n#### Summary\n\n- Add project-scoped Jira reads, ADF normalization, and status dispatchability.\n- Add \n[…]\nSYMPHONY_RUN_JIRA_LIVE_E2E=1 mix test test/symphony_elixir/jira_live_e2e_test.exs`\n- [x] `SYMPHONY_RUN_LIVE_E2E=1 SYMPHONY_LIVE_LINEAR_TEAM_KEY=FST mix test test/symphony_elixir/live_e2e_test.exs:123`",
"is_bot": false,
"headline": "Add Jira Cloud tracker adapter",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-07-20T18:05:12Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "044f204f161038f8a12823bbf42f85f089fc77df",
"body": "#### Context\n\nSymphony's generic tracker seam needs a real non-Linear stress test without adding generic mutation APIs.\n\n#### TL;DR\n\n*Add GitHub Issues reads and a host-authenticated raw GitHub tool.*\n\n#### Summary\n\n- Add project-scoped GitHub issue reads, normalization, and dispatchability.\n- Add r\n[…]\nHONY_RUN_GITHUB_LIVE_E2E=1 mix test test/symphony_elixir/github_live_e2e_test.exs`\n- [x] `SYMPHONY_RUN_LIVE_E2E=1 SYMPHONY_LIVE_LINEAR_TEAM_KEY=FST mix test test/symphony_elixir/live_e2e_test.exs:123`",
"is_bot": false,
"headline": "Add GitHub Issues tracker adapter",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-07-20T18:00:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7af5a7648c9fbffa08825fe0c0b18be00100aff3",
"body": "#### Context\n\nSymphony's scheduler was coupled to Linear types, reads, and mutations,\nmaking a second ticketing system require core orchestration changes.\n\n#### TL;DR\n\n*Introduce a generic tracker boundary while keeping Linear as the first\nadapter.*\n\n#### Summary\n\n- Normalize scheduler inputs throug\n[…]\nScript 6/6, Python 6/6, and Go passed.\n- [x] Live Linear smoke: local daemon processed FST-5 to Done, wrote one\ncomment, and cleaned its workspace.\n\n---------\n\nCo-authored-by: Codex <codex@openai.com>",
"is_bot": false,
"headline": "Add generic tracker interface with Linear adapter (#102)",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-07-18T05:01:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2121e5ae3562fb973a3e543dd60c81380219fb94",
"body": "#### Context\n\nThe v0.0.1 tag run built and smoke-tested every artifact, but release creation failed because the job had no Git checkout.\n\n#### TL;DR\n\n*Check out Git before verifying release tags.*\n\n#### Summary\n\n- Add checkout to the Burrito release job before running `gh release create --verify-tag\n[…]\nakes instead of fixing the missing Git context.\n\n#### Test Plan\n\n- [x] `yq eval .github/workflows/burrito-release.yml`\n- [x] `actionlint .github/workflows/burrito-release.yml`\n- [x] `git diff --check`",
"is_bot": false,
"headline": "Fix Burrito release tag verification",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-07-18T00:22:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "91a624958c1cedf2c48840f211d9d017f8a7942e",
"body": "#### Context\n\nUsing Symphony currently requires installing and configuring an Elixir runtime. Downloadable executables make first use much simpler.\n\n#### TL;DR\n\n*Add self-contained Burrito executables for macOS and Linux.*\n\n#### Summary\n\n- Add Burrito targets for macOS and Linux on arm64 and x86_64.\n[…]\nest --cover`\n- [x] `mise exec -- mix lint`\n- [x] `mise exec -- mix dialyzer --format short`\n- [x] `actionlint .github/workflows/burrito-release.yml`\n- [x] Run the packaged macOS arm64 CLI on this Mac.",
"is_bot": false,
"headline": "Add Burrito release packaging for Symphony",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-07-18T00:08:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "45a53b8588a9650c2f424cb31a6495af1bc86727",
"body": "#### Context\n\nAgent guidance did not clearly state that simplicity is a project\nconstraint or that adversarial review should challenge complexity.\n\n#### TL;DR\n\n*Make agent guidance prefer simple designs and adversarial verification.*\n\n#### Summary\n\n- Add one-owner/invariant and lifecycle review guid\n[…]\natives\n\n- A detailed Symphony-specific checklist was rejected because it would\n overfit one incident instead of providing durable guidance.\n\n#### Test Plan\n\n- [x] `cd elixir && mise exec -- make all`",
"is_bot": false,
"headline": "Clarify agent simplicity guidance",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-07-17T22:34:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d476215c23f33ff27d222ea2d2c44e631de4a922",
"body": "#### Context\n\nSymphony could start scheduling with semantically invalid workflow\nsettings, while blank required values also passed validation.\n\n#### TL;DR\n\n*Validate workflow settings before they become effective or start scheduling.*\n\n#### Summary\n\n- Make WorkflowStore cache only semantically valid\n[…]\ned because startup still\n appeared healthy with invalid settings.\n\n#### Test Plan\n\n- [x] `cd elixir && mise exec -- make all`\n- [x] `cd elixir && mise exec -- mix test --seed 567691 --max-failures 1`",
"is_bot": false,
"headline": "Validate workflow before scheduling",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-07-17T22:14:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "476b2b04e0da4ea4d9ada82fc091886734999d89",
"body": "#### Context\n\nOrchestrator restarts reset in-memory claims, but sibling TaskSupervisor workers could survive and be redispatched concurrently.\n\n#### TL;DR\n\n*Supervise agent workers and the orchestrator as one restart unit.*\n\n#### Summary\n\n- Add an AgentRuntimeSupervisor with TaskSupervisor and Orche\n[…]\n/core_test.exs:228`\n- [x] `mise exec -- mix test --cover --seed 155984 --max-cases 8`\n- [x] `mise exec -- mix test test/symphony_elixir/core_test.exs test/symphony_elixir/orchestrator_status_test.exs`",
"is_bot": false,
"headline": "Couple workers to orchestrator runtime",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-07-17T21:31:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cdb466a57fec4f7b525996f08ffb314d4cb813ca",
"body": "#### Context\n\nA YAML-valid, typed-invalid reload replaced cached config and prompt, then made `Config.settings!` raise.\n\n#### TL;DR\n\n*Keep the last good typed workflow when a reload cannot be parsed.*\n\n#### Summary\n\n- Cache parsed settings with each workflow store state.\n- Reject typed-invalid reloa\n[…]\ngic; invalid typed state no longer reaches `settings!`.\n\n#### Test Plan\n\n- [x] `mix test test/symphony_elixir/extensions_test.exs:104`\n- [x] `mix test --cover --seed 659305`\n- [x] `make -C elixir all`",
"is_bot": false,
"headline": "Preserve last good config on typed-invalid reloads",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-07-17T20:06:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "504101ec464fffbfb4349b2b480b4558a656dd57",
"body": "#### Context\n\nLive E2E could fail on cold Codex startup, remote `~/` workspace expansion, or Docker nested sandboxing.\n\n#### TL;DR\n\n*Make local and SSH live smoke tests reliable with test-only Codex isolation.*\n\n#### Summary\n\n- Fix remote `~/` workspace expansion so SSH workers use the intended home\n[…]\nst-only.\n- Did not make Docker privileged; the container remains the isolation boundary.\n\n#### Test Plan\n\n- [x] `make -C elixir all`\n- [x] `cd elixir && CODEX_HOME=<temporary auth-only home> make e2e`",
"is_bot": false,
"headline": "Fix live E2E worker isolation and SSH paths",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-07-17T19:41:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4cbe3a9699a73b862466c0b157ceca0c1985d6d7",
"body": "#### Context\n\nSymphony Observability currently uses the browser's generic fallback\nicon, which makes its control-plane tabs hard to identify.\n\n#### TL;DR\n\n*Add a custom, cache-busted favicon to the Symphony Observability\ndashboard.*\n\n#### Summary\n\n- Add a generated 128x128 transparent PNG mark for S\n[…]\nset route is easier to\ncache, test, and replace.\n\n#### Test Plan\n\n- [x] `make -C elixir all`\n- [x] `mix test test/symphony_elixir/extensions_test.exs`\n- [x] Browser preview at `http://127.0.0.1:4022/`",
"is_bot": false,
"headline": "[web] Add Symphony favicon (#90)",
"author_name": "Sharmila",
"author_login": "sharmila-oai",
"committed_at": "2026-06-09T23:25:34Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b4ccf7b55327821ca6d9b1b8b9e4ab5ac7f30e15",
"body": "#### Context\n\nDashboard rows show tracker issue identifiers as plain text, so\noperators must navigate to active issues manually.\n\n#### TL;DR\n\n*Link dashboard issue identifiers to their tracker-provided URLs.*\n\n#### Summary\n\n- Preserve tracker issue URLs across running, blocked, and retry\nsnapshots\n-\n[…]\nt Plan\n\n- [x] `make -C elixir all`\n- [x] Browser preview with synthetic `tracker.example` issue URLs\n- [x] Browser computed style confirms a `1px` underline\n- [x] Invalid URL scheme remains plain text",
"is_bot": false,
"headline": "[web] Link dashboard issues to tracker (#89)",
"author_name": "Sharmila",
"author_login": "sharmila-oai",
"committed_at": "2026-06-05T22:56:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "54b456b347bba0212a290430eec886def341342d",
"body": "#### Context\n\nProjects need an explicit opt-in signal so active issues are not\ndispatched only because they belong to a polled project.\n\n#### TL;DR\n\n*Allow workflows to require Linear labels before an issue is dispatched\nor continued.*\n\n#### Summary\n\n- Add normalized `tracker.required_labels` config\n[…]\niltering would hide removed labels from reconciliation,\npreventing clean agent shutdown.\n\n#### Test Plan\n\n- [x] `make -C elixir all`\n- [x] `mix test test/symphony_elixir/workspace_and_config_test.exs`",
"is_bot": false,
"headline": "[linear] Require opt-in labels for dispatch (#88)",
"author_name": "Sharmila",
"author_login": "sharmila-oai",
"committed_at": "2026-06-04T19:43:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0d85c27c9abe94ce23f63a2c7ad0b687ab8d44d5",
"body": "#### Context\n\nBrix oaipkg installs in Symphony-launched FSS runs need DNS/network\naccess, but the workflow turn sandbox did not enable it.\n\n#### TL;DR\n\n*Allow Symphony workflow turns to use network/DNS for package installs.*\n\n#### Summary\n\n- Add `networkAccess: true` to the workflow turn sandbox pol\n[…]\nbin/env mix specs.check`\n- [x] `/usr/bin/env mix test\ntest/symphony_elixir/workspace_and_config_test.exs`\n- [x] `/usr/bin/env make all MIX=\"/usr/bin/env mix\"`\n\nCo-authored-by: Codex <codex@openai.com>",
"is_bot": false,
"headline": "Allow network access for package-installing workflow turns (#65)",
"author_name": "Andrew Codispoti",
"author_login": "andrew749",
"committed_at": "2026-06-01T16:15:55Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fecbc92a1590dd46c4bcb9df31c76f4824e8caf1",
"body": "#### Context\n\nRevert PR #84 after it was merged so Symphony main returns to the\nprevious workflow and implementation.\n\n#### TL;DR\n\n*Reverts the Codex thread link and Linear comment resume changes from PR\n#84.*\n\n#### Summary\n\n- Revert the squash merge commit from PR #84.\n- Remove the added Linear com\n[…]\nt the request was to revert the merged\nchange.\n\n#### Test Plan\n\n- [x] `git diff --check HEAD~1..HEAD`\n- [x] `rg -n \"lin_api_|ZtX3ZP\" .`\n- [x] `mix pr_body.check --file /tmp/symphony_revert_pr_body.md`",
"is_bot": false,
"headline": "[codex] Revert Codex thread link and Linear comment resume changes (#85)",
"author_name": "yansenzhou-oai",
"author_login": "yansenzhou-oai",
"committed_at": "2026-06-01T02:48:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "68a18a7d4d07e8c9ebf06df95014417b303ee840",
"body": "#### Context\n\nNeed Symphony to keep a first-class Codex thread loop for Linear issues,\nincluding human follow-up comments and terminal cleanup.\n\n#### TL;DR\n\n*Adds Codex thread links, thread archiving, and Linear comment resume\nsupport.*\n\n#### Summary\n\n- Add Codex app-server proxy support with thread\n[…]\ny.\n- Leave thread handling as plain dashboard text, but `codex://` links\nmake app handoff direct.\n\n#### Test Plan\n\n- [x] `make -C elixir all`\n- [x] `git diff --check`\n- [x] `rg -n \"lin_api_|ZtX3ZP\" .`",
"is_bot": false,
"headline": "[codex] Add Codex thread links and Linear comment resumes (#84)",
"author_name": "yansenzhou-oai",
"author_login": "yansenzhou-oai",
"committed_at": "2026-06-01T02:42:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c5261d12101b02e0045ca84701eed0c4be367387",
"body": "#### Context\n\nAdds the requested SD-6 smoke-test note so the Symphony board review workflow can validate a minimal docs-only change.\n\n#### TL;DR\n\n*Add a short board review smoke-test markdown note.*\n\n#### Summary\n\n- Added docs/symphony-smoke-board-review.md with a short heading and note.\n- Kept the \n[…]\nub Actions `make-all` rerun\n- [x] `mix pr_body.check --file <(gh pr view 79 --repo openai/symphony --json body -q .body)`\n- [x] `git status --short` shows only `?? docs/symphony-smoke-board-review.md`",
"is_bot": false,
"headline": "docs: add board review smoke test note",
"author_name": "poon-oai",
"author_login": "poon-oai",
"committed_at": "2026-05-29T20:26:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f577cb5a1e971f04ebcfcdd06e72e722ab4b2ebe",
"body": "#### Context\n\nSmoke-test ticket SD-4 asks for an isolated doc proving Symphony picked up and handled the issue.\n\n#### TL;DR\n\n*Adds the SD-4 Symphony smoke-test note.*\n\n#### Summary\n\n- Adds `docs/symphony-smoke-test-one.md`.\n- Keeps the change docs-only and limited to the smoke-test note.\n- Mentions \n[…]\nHub Actions `make-all`\n- [x] `test -f docs/symphony-smoke-test-one.md && rg \"SD-4|Symphony\" docs/symphony-smoke-test-one.md && git diff --check`\n- [x] `mix pr_body.check --file <process-substitution>`",
"is_bot": false,
"headline": "docs: add SD-4 Symphony smoke-test note",
"author_name": "poon-oai",
"author_login": "poon-oai",
"committed_at": "2026-05-29T07:53:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2c1851830477434100fdb8980fcc1fce1a8af81d",
"body": null,
"is_bot": false,
"headline": "Update README.md",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-05-20T22:28:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3365695e85307ac50872418332cf3d2802cdda19",
"body": "#### Context\n\nCodex app-server sessions can request operator input or MCP elicitation.\nThese should pause visibly instead of retrying until exhausted.\n\n#### TL;DR\n\n*Show input-blocked Symphony sessions in state, API, and dashboard.*\n\n#### Summary\n\n- Treat Codex input-required and MCP elicitation eve\n[…]\nec -- mix test test/symphony_elixir/app_server_test.exs\ntest/symphony_elixir/extensions_test.exs\ntest/symphony_elixir/orchestrator_status_test.exs`\n\n---------\n\nCo-authored-by: Codex <codex@openai.com>",
"is_bot": false,
"headline": "Surface input-blocked Symphony sessions (#66)",
"author_name": "Danial Mirza",
"author_login": "danial-openai",
"committed_at": "2026-05-20T06:05:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bbef62364db25970cf0e732fc61011ab753d2604",
"body": "#### Context\n\nRestrict the PR description lint workflow so forked PR checks run with\nthe least token access needed.\n\n#### TL;DR\n\n*Set read-only workflow permissions and stop checkout from storing\ncredentials.*\n\n#### Summary\n\n- Add explicit contents read permission to the PR description lint\nworkflow\n[…]\nve defaults unchanged, but explicit permissions make the token\nscope easier to review.\n\n#### Test Plan\n\n- [ ] `make -C elixir all`\n- [x] Parsed `.github/workflows/pr-description-lint.yml` with PyYAML.",
"is_bot": false,
"headline": "[codex] Harden PR description lint workflow (#71)",
"author_name": "Drew Hintz",
"author_login": "hintz-openai",
"committed_at": "2026-05-14T03:03:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "58cf97da06d556c019ccea20c67f4f77da124bf3",
"body": "Summary:\n- Update the default Symphony Codex command to select gpt-5.5 via\n --config model instead of the root --model flag.\n- Refresh README and tests so examples and argv assertions match the\n app-server-compatible command shape.\n\nRationale:\n- Codex app-server ignores the root --model flag, so t\n[…]\n\n\nTests:\n- mise exec -- mix format --check-formatted\n- mise exec -- mix test\n- mise exec -- mix lint\n- Isolated app-server smoke test with the updated command\n\nCo-authored-by: Codex <codex@openai.com>",
"is_bot": false,
"headline": "fix(elixir): configure Codex app-server model via config",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-04-27T22:08:58Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "eaa457d96acd59c6081c3d9c86948451dbcd25bf",
"body": "#### Context\n\nSPEC.md had ambiguous conformance language and implementation details\nthat made the service contract harder to port.\n\n#### TL;DR\n\n*Clarify SPEC.md and normalize RFC-style requirement wording.*\n\n#### Summary\n\n- Add normative language and tighten config, workspace, reload, restart,\nand u\n[…]\nollow-up\nspec changes.\n\n#### Test Plan\n\n- [x] `make -C elixir all`\n- [x] `git diff --check HEAD~1..HEAD`\n- [x] RFC keyword scan outside code fences\n\n---------\n\nCo-authored-by: Codex <codex@openai.com>",
"is_bot": false,
"headline": "Clarify Symphony service specification (#61)",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-04-27T18:02:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9e89dd9ff0a3eddb8813c77f633ca4534d6e14b2",
"body": "## Summary\nPin floating external GitHub Actions workflow refs to immutable SHAs.\n\n## Why\nSee the rationale doc:\nhttps://docs.google.com/document/d/1qOURCNx2zszQ0uWx7Fj5ERu4jpiYjxLVWBWgKa2wTsA/edit?tab=t.0\n\n## Validation\n- `rg -n --pcre2\n\"uses:\\s*(?!\\./)(?!docker://)[^#\\n]+@(?![0-9a-f]{40}(?:\\s+#.*)?$)\\S+\"\n.github/workflows`\n- `git diff --check`\n- `git diff --stat -- .github/workflows`",
"is_bot": false,
"headline": "[codex] Pin GitHub Actions workflow references (#57)",
"author_name": "Drew Hintz",
"author_login": "hintz-openai",
"committed_at": "2026-03-27T18:39:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a164593aacb3db4d6808adc5a87173d906726406",
"body": "#### Context\n\nSSH failover currently happens inside `AgentRunner`, which can bypass\nper-host caps and rerun a ticket on a second host after the first host\nalready started setup.\n\n#### TL;DR\n\n*Keep each worker run on one SSH host and let the orchestrator own\nretries.*\n\n#### Summary\n\n- Remove `AgentRu\n[…]\n\n\n- [x] `make -C elixir all`\n- [x] `cd elixir && mise exec -- mix test\ntest/symphony_elixir/core_test.exs:1167\ntest/symphony_elixir/core_test.exs:1237\ntest/symphony_elixir/core_test.exs:1337 --seed 0`",
"is_bot": false,
"headline": "fix(elixir): keep ssh retries in orchestrator (#54)",
"author_name": "mstrautmann-oai",
"author_login": "mstrautmann-oai",
"committed_at": "2026-03-19T19:34:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1f86bac53a84eb0e9f10d6546e3f19a5724a5b09",
"body": "#### Context\n\nThe Codex app-server merges stderr into stdout (`stderr_to_stdout`).\nNon-JSON diagnostic lines written by Codex during healthy turns were\nincorrectly emitted as `:malformed` protocol events in the Symphony UI.\n\n<img width=\"2496\" height=\"446\" alt=\"Screenshot 2026-03-12 at 4 27 20 PM\"\nsr\n[…]\nnv(:symphony_elixir, :workflow_file_path,\nSystem.fetch_env!(\"SYMPHONY_TEST_WORKFLOW\")); Mix.Task.run(\"test\",\n[\"test/symphony_elixir/app_server_test.exs\"])'`\n\nCo-authored-by: Codex <noreply@openai.com>",
"is_bot": false,
"headline": "fix(elixir): fix malformed JSON event form codex message (#50)",
"author_name": "Kevin Wang",
"author_login": "kevinw-openai",
"committed_at": "2026-03-16T17:09:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ff65c7c729c03d4daa550bd30290fc5291f60c67",
"body": "#### Context\n\nSymphony needs to run tickets on SSH workers, keep the live E2E reliable, and preserve correct remote path semantics.\n\n#### TL;DR\n\n*Add SSH workers, Docker-backed SSH live E2E coverage, per-host caps, and correct worker-side `~` resolution.*\n\n#### Summary\n\n- Add SSH worker execution, r\n[…]\n elixir all`\n- [x] `cd elixir && env -u SYMPHONY_LIVE_SSH_WORKER_HOSTS LINEAR_API_KEY=\"$(tr -d '\\r\\n' < ~/.linear_api_key)\" SYMPHONY_RUN_LIVE_E2E=1 mix test test/symphony_elixir/live_e2e_test.exs:128`",
"is_bot": false,
"headline": "Add SSH worker support to Symphony Elixir",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-03-11T21:47:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b1863e83ac9197fefa110e7102ac03f000fd29f4",
"body": "#### Context\n\nAdd a real end-to-end path for Symphony Elixir that exercises Linear and\nCodex together, and make it easy to invoke explicitly from one Make target.\n\n#### TL;DR\n\n*Add a real live Linear/Codex E2E test plus a `make e2e` entrypoint.*\n\n#### Summary\n\n- Add an opt-in live Elixir test that c\n[…]\n`make -C elixir all`\n- [x] `env -u LINEAR_API_KEY make -C elixir e2e`\n- [x] `LINEAR_API_KEY=$(tr -d '\\r\\n' < ~/.linear_api_key) SYMPHONY_RUN_LIVE_E2E=1 mix test test/symphony_elixir/live_e2e_test.exs`",
"is_bot": false,
"headline": "Add a real live Linear/Codex E2E target",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-03-10T20:45:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c9ec3f15b9b38631a7dbb987d1c48e8a2aff7eba",
"body": "#### Context\n\nSymphony Elixir had a few correctness gaps around retry scheduling, refresh coalescing,\nworkspace path handling, Codex turn policy forwarding, and running-issue refreshes.\n\n#### TL;DR\n\n*Stabilize Symphony Elixir orchestration, workspace safety, and Codex policy passthrough.*\n\n#### Summ\n[…]\ns and can stop\n healthy workers during reconciliation.\n\n#### Test Plan\n\n- [x] `make -C elixir all`\n- [x] Targeted regression coverage for AppServer turn policy passthrough and Linear by-id pagination",
"is_bot": false,
"headline": "Stabilize Symphony Elixir orchestration and policy handling",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-03-10T19:53:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8afebb3919b35f8d3470c243eaff178190c10f04",
"body": "#### Context\n\nThe schema and tests now treat tracker state lists as YAML lists and only lowercase\nstate-limit keys, but `SPEC.md` still documented older and stricter behavior.\n\n#### TL;DR\n\n*Align `SPEC.md` with the current workflow config and state normalization behavior.*\n\n#### Summary\n\n- document \n[…]\nrings in the schema\n- keep trim-based normalization in the spec and change the implementation\n\n#### Test Plan\n\n- [x] `make -C elixir all`\n- [x] Docs-only diff reviewed against current schema and tests",
"is_bot": false,
"headline": "Align workflow config spec with schema behavior",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-03-10T18:20:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e65f5eea2961409984d992e240f090032ebd6501",
"body": "#### Context\n\nThe config layer had grown around NimbleOptions and a large getter surface. This branch moves parsing to an Ecto schema and simplifies callers to read typed nested settings directly.\n\n#### TL;DR\n\n*Replace the bespoke config access layer with an Ecto-backed schema and typed settings acc\n[…]\nleft `make -C elixir all` red on coverage and dialyzer\n\n#### Test Plan\n\n- [x] `make -C elixir all`\n- [x] `cd elixir && mix test test/symphony_elixir/workspace_and_config_test.exs --warnings-as-errors`",
"is_bot": false,
"headline": "Refactor config access around an Ecto schema",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-03-10T15:41:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b0e0ff0082236a73c12a48483d0c6036fdd31fe1",
"body": "#### Context\n\nReplace the custom Elixir observability TCP server with Phoenix while\nkeeping the shipped escript and existing operational API calls working\nthe same way they did before.\n\n#### TL;DR\n\n*Move the Elixir observability dashboard and API onto Phoenix without\nbreaking the escript or curl wor\n[…]\nphoenix.js`\n- [x] `curl -si -X POST -d '' http://127.0.0.1:40123/api/v1/refresh`\n- [x] `curl -si -X POST -d '' http://127.0.0.1:40123/api/v1/state`\n\n---------\n\nCo-authored-by: Codex <codex@openai.com>",
"is_bot": false,
"headline": "Move Elixir observability dashboard to Phoenix (#29)",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-03-05T01:24:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fa75ec68c23fbf773c43197da618f88684d8d3f6",
"body": null,
"is_bot": false,
"headline": ":musical_score:",
"author_name": "Alex Kotliarskyi",
"author_login": "frantic-openai",
"committed_at": "2026-03-04T17:29:11Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 1,
"commits_last_year": 41,
"latest_release_at": "2026-07-18T00:13:44Z",
"latest_release_tag": "v0.0.1",
"releases_from_tags": false,
"days_since_last_push": 1,
"active_weeks_last_year": 10,
"days_since_latest_release": 5,
"mean_days_between_releases": null
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 50,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"ecosystem": {
"packages": []
},
"popularity": {
"forks": 2647,
"stars": 26183,
"watchers": 170,
"fork_history": {
"days": [
{
"date": "2026-04-30",
"count": 9
},
{
"date": "2026-05-01",
"count": 61
},
{
"date": "2026-05-02",
"count": 43
},
{
"date": "2026-05-03",
"count": 43
},
{
"date": "2026-05-04",
"count": 32
},
{
"date": "2026-05-05",
"count": 72
},
{
"date": "2026-05-06",
"count": 69
},
{
"date": "2026-05-07",
"count": 49
},
{
"date": "2026-05-08",
"count": 34
},
{
"date": "2026-05-09",
"count": 32
},
{
"date": "2026-05-10",
"count": 29
},
{
"date": "2026-05-11",
"count": 28
},
{
"date": "2026-05-12",
"count": 29
},
{
"date": "2026-05-13",
"count": 26
},
{
"date": "2026-05-14",
"count": 22
},
{
"date": "2026-05-15",
"count": 19
},
{
"date": "2026-05-16",
"count": 7
},
{
"date": "2026-05-17",
"count": 16
},
{
"date": "2026-05-18",
"count": 17
},
{
"date": "2026-05-19",
"count": 26
},
{
"date": "2026-05-20",
"count": 16
},
{
"date": "2026-05-21",
"count": 8
},
{
"date": "2026-05-22",
"count": 8
},
{
"date": "2026-05-23",
"count": 4
},
{
"date": "2026-05-24",
"count": 12
},
{
"date": "2026-05-25",
"count": 9
},
{
"date": "2026-05-26",
"count": 11
},
{
"date": "2026-05-27",
"count": 7
},
{
"date": "2026-05-28",
"count": 10
},
{
"date": "2026-05-29",
"count": 11
},
{
"date": "2026-05-30",
"count": 6
},
{
"date": "2026-05-31",
"count": 8
},
{
"date": "2026-06-01",
"count": 11
},
{
"date": "2026-06-02",
"count": 4
},
{
"date": "2026-06-03",
"count": 7
},
{
"date": "2026-06-04",
"count": 11
},
{
"date": "2026-06-05",
"count": 6
},
{
"date": "2026-06-06",
"count": 7
},
{
"date": "2026-06-07",
"count": 2
},
{
"date": "2026-06-08",
"count": 7
},
{
"date": "2026-06-09",
"count": 8
},
{
"date": "2026-06-10",
"count": 6
},
{
"date": "2026-06-11",
"count": 5
},
{
"date": "2026-06-12",
"count": 9
},
{
"date": "2026-06-13",
"count": 4
},
{
"date": "2026-06-14",
"count": 4
},
{
"date": "2026-06-15",
"count": 4
},
{
"date": "2026-06-16",
"count": 8
},
{
"date": "2026-06-17",
"count": 2
},
{
"date": "2026-06-18",
"count": 5
},
{
"date": "2026-06-19",
"count": 1
},
{
"date": "2026-06-20",
"count": 2
},
{
"date": "2026-06-21",
"count": 6
},
{
"date": "2026-06-22",
"count": 6
},
{
"date": "2026-06-23",
"count": 5
},
{
"date": "2026-06-24",
"count": 2
},
{
"date": "2026-06-26",
"count": 2
},
{
"date": "2026-06-27",
"count": 3
},
{
"date": "2026-06-28",
"count": 5
},
{
"date": "2026-06-29",
"count": 3
},
{
"date": "2026-06-30",
"count": 2
},
{
"date": "2026-07-01",
"count": 3
},
{
"date": "2026-07-02",
"count": 3
},
{
"date": "2026-07-03",
"count": 3
},
{
"date": "2026-07-05",
"count": 3
},
{
"date": "2026-07-06",
"count": 1
},
{
"date": "2026-07-07",
"count": 3
},
{
"date": "2026-07-08",
"count": 6
},
{
"date": "2026-07-09",
"count": 2
},
{
"date": "2026-07-10",
"count": 4
},
{
"date": "2026-07-11",
"count": 5
},
{
"date": "2026-07-13",
"count": 4
},
{
"date": "2026-07-14",
"count": 2
},
{
"date": "2026-07-15",
"count": 2
},
{
"date": "2026-07-16",
"count": 3
},
{
"date": "2026-07-17",
"count": 3
},
{
"date": "2026-07-18",
"count": 4
},
{
"date": "2026-07-19",
"count": 5
},
{
"date": "2026-07-20",
"count": 7
},
{
"date": "2026-07-21",
"count": 4
},
{
"date": "2026-07-22",
"count": 3
},
{
"date": "2026-07-23",
"count": 10
}
],
"complete": false,
"collected": 1000,
"total_forks": 2647
},
"star_history": null,
"open_issues_and_prs": 9
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": false,
"bootstrap_files": [
"elixir/Makefile",
"elixir/mise.toml"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"elixir/mix.exs"
],
"largest_source_bytes": 77007,
"source_files_sampled": 82,
"oversized_source_files": 3,
"agent_instruction_files": [
"elixir/AGENTS.md"
],
"agent_instruction_max_bytes": 3118
},
"dependencies": {
"manifests": [
"elixir/mix.exs"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"hex"
],
"dependencies": [
{
"name": "bandit",
"manifest": "elixir/mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 1.8"
},
{
"name": "phoenix",
"manifest": "elixir/mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 1.8.0"
},
{
"name": "phoenix_html",
"manifest": "elixir/mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 4.2"
},
{
"name": "phoenix_live_view",
"manifest": "elixir/mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 1.1.0"
},
{
"name": "req",
"manifest": "elixir/mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 0.5"
},
{
"name": "jason",
"manifest": "elixir/mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 1.4"
},
{
"name": "yaml_elixir",
"manifest": "elixir/mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 2.12"
},
{
"name": "solid",
"manifest": "elixir/mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 1.2"
},
{
"name": "ecto",
"manifest": "elixir/mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 3.13"
},
{
"name": "burrito",
"manifest": "elixir/mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 1.5"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 9,
"merged_prs": 58,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 7
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "frantic-openai",
"commits": 28,
"avatar_url": "https://avatars.githubusercontent.com/u/189043716?v=4"
},
{
"type": "User",
"login": "sharmila-oai",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/257629015?v=4"
},
{
"type": "User",
"login": "hintz-openai",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/201815723?v=4"
},
{
"type": "User",
"login": "poon-oai",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/274337507?v=4"
},
{
"type": "User",
"login": "yansenzhou-oai",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/247462522?v=4"
},
{
"type": "User",
"login": "andrew749",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/2242730?v=4"
},
{
"type": "User",
"login": "danial-openai",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/178343703?v=4"
},
{
"type": "User",
"login": "kevinw-openai",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/15899713?v=4"
},
{
"type": "User",
"login": "mstrautmann-oai",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/247462730?v=4"
}
],
"contributors_sampled": 9,
"top_contributor_share": 0.683
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"burrito-release.yml",
"make-all.yml",
"pr-description-lint.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"mix.lock"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "28 out of 28 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 2/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 6,
"reason": "dependency not pinned by hash detected -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "26 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "1f3219bb1ea5f69a1305dc594e79b0db57c113c5",
"ran_at": "2026-07-23T21:51:47Z",
"aggregate_score": 3.4,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-20T22:16:03Z",
"oldest_open_prs": [
{
"number": 58,
"created_at": "2026-04-14T00:26:39Z",
"last_comment_at": "2026-05-19T23:34:24Z",
"last_comment_author": "REFaster"
},
{
"number": 60,
"created_at": "2026-04-21T04:33:59Z",
"last_comment_at": "2026-05-20T17:11:22Z",
"last_comment_author": "REFaster"
},
{
"number": 76,
"created_at": "2026-05-29T06:36:32Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 77,
"created_at": "2026-05-29T07:57:21Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 78,
"created_at": "2026-05-29T07:58:04Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 81,
"created_at": "2026-05-29T17:27:26Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 82,
"created_at": "2026-05-29T17:58:18Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 83,
"created_at": "2026-05-29T18:16:01Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 115,
"created_at": "2026-07-22T00:47:28Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-20T22:15:12Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/openai/symphony",
"host": "github.com",
"name": "symphony",
"owner": "openai"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 63,
"inputs": {
"security": 34,
"vitality": 71,
"community": 78,
"governance": 57,
"engineering": 73
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 71,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"commits_last_year": 41,
"human_commit_share": 1,
"days_since_last_push": 1,
"active_weeks_last_year": 10
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 1 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 1
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "10/52 weeks with commits",
"points": 6.9,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 10
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "41 commits in the last year",
"points": 14.6,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 41
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "good",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"releases_count": 1,
"latest_release_tag": "v0.0.1",
"releases_from_tags": false,
"days_since_latest_release": 5,
"mean_days_between_releases": null
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "1 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 1
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 5 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 5
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "cadence unknown (single release)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "release_cadence_unknown",
"params": {}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "good",
"name": "Community & Adoption",
"value": 78,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "excellent",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 97,
"inputs": {
"forks": 2647,
"stars": 26183,
"watchers": 170,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "26,183 stars",
"points": 60,
"status": "met",
"details": [
{
"code": "stars",
"params": {
"count": 26183
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "2,647 forks",
"points": 25,
"status": "met",
"details": [
{
"code": "forks",
"params": {
"count": 2647
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "170 watchers",
"points": 12.4,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 170
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 57,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 57,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 31,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 9,
"top_contributor_share": 0.683
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 68% of commits",
"points": 7.1,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 68
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "9 contributors",
"points": 12.2,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 9
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 64,
"inputs": {
"merged_prs": 58,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 7
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "58/65 decided PRs merged",
"points": 34.1,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 58,
"decided": 65
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 2/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"followers": 127163,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "openai",
"public_repos": 265,
"account_age_days": 3946
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "127,163 followers of openai",
"points": 25,
"status": "met",
"details": [
{
"code": "owner_followers",
"params": {
"count": 127163,
"login": "openai"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "265 public repos, account ~10 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 265
}
},
{
"code": "account_age_years",
"params": {
"years": 10
}
}
],
"max_points": 25
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 73,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "3 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 3
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "28 out of 28 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": "https://openai.com/index/open-source-codex-orchestration-symphony/",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://openai.com/index/open-source-codex-orchestration-symphony/",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 34,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 34,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 3.4
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "28 out of 28 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 2/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 6",
"points": 3,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "26 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 4
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 66,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.951,
"agent_instruction_files": [
"elixir/AGENTS.md"
],
"agent_instruction_max_bytes": 3118
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "elixir/AGENTS.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "elixir/AGENTS.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "39 of 41 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 39,
"sampled": 41
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"mix.lock"
],
"has_dockerfile": true,
"typed_language": false,
"bootstrap_files": [
"elixir/Makefile",
"elixir/mise.toml"
],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"elixir/mix.exs"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "elixir/Makefile, elixir/mise.toml",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "elixir/Makefile, elixir/mise.toml"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 41",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 41
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 6",
"points": 6,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 53,
"inputs": {
"primary_language": "Elixir",
"largest_source_bytes": 77007,
"source_files_sampled": 82,
"oversized_source_files": 3
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Elixir without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "Elixir"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "3/82 source files over 60KB",
"points": 53,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 82,
"oversized": 3
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"Could not fetch hex package 'symphony_elixir' from its registry",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-23T21:52:07.865229Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/o/openai/symphony.svg",
"full_name": "openai/symphony",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with openai/symphony. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
