Public recordModerate
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-27 00:30 UTC
rchemist / rcm-listgrid
rchemist/rcm-listgrid holds a health index of 55 out of 100, placing it in the Moderate band. It scores highest on Engineering Quality (74/100) and lowest on Community & Adoption (32/100). It was last updated 13 days ago. A single contributor accounts for most of its recent work.
55
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
55
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
RchemistOrganization
1 follower13 public repossince Jul 2019
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish | Tags |
|---|---|---|---|---|---|---|
| npm | @rchemist/listgrid | 0.3.26 | 2,050 | 48 | 15 days ago | reactlistgridcrudentityformtabledesign-systemcss-primitivesdata-attrframework-free |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
67
Development activity
62Moderate
How it's scored
| 28.8/36 | Push recency — last push 13 days ago |
| 6.2/36 | Commit cadence — 9/52 weeks with commits |
| 17.3/18 | Commit volume — 83 commits in the last year |
| 10/10 | OpenSSF Scorecard: Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
Inputs used
| commits_last_year | 83 |
| human_commit_share | 1 |
| days_since_last_push | 13 |
| active_weeks_last_year | 9 |
Release discipline
74Good
How it's scored
| 27/27 | Ships releases — 1 releases published |
| 27/36 | Release recency — latest release 96 days ago |
| 12.6/27 | Release cadence — cadence unknown (single release) |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 1 |
| latest_release_tag | v0.2.6 |
| releases_from_tags | no |
| days_since_latest_release | 96 |
| mean_days_between_releases | — |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
32
Popularity & adoption
1Critical
How it's scored
| 0/60 | Stars — 1 stars |
| 0/25 | Forks — 0 forks |
| 0/15 | Watchers — 0 watchers |
Inputs used
| forks | 0 |
| stars | 1 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
50Moderate
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (Apache-2.0) |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Ecosystem adoption (downloads)
55Moderate
How it's scored
| 44.2/80 | Monthly downloads — 2,050 downloads/month across npm |
| 0/20 | Registry dependents — not reported by this ecosystem |
Inputs used
| packages | @rchemist/listgrid |
| dependents | — |
| ecosystems | npm |
| total_downloads | — |
| monthly_downloads | 2,050 |
Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
55
Maintainer resilience (bus factor)
10Critical
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 0/22.5 | Commit distribution — top contributor authored 100% of commits |
| 1.4/13.5 | Contributor breadth — 1 contributors |
| 0/10 | OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
How it's scored
| 46.8/46.8 | Issue resolution — 100% of issues closed |
| 0/38.3 | PR acceptance — no decided pull requests or no data |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 0 |
| open_issues | 0 |
| closed_issues | 10 |
| issue_closed_ratio | 1 |
| closed_unmerged_prs | 0 |
Excluded from scoring (no data or not applicable): PR acceptance. Remaining weights renormalized.
Ownership & stewardship
52Moderate
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 2.2/25 | Owner reach — 1 followers of rchemist |
| 20.3/25 | Track record — 13 public repos, account ~7 yr old |
Inputs used
| followers | 1 |
| owner_type | Organization |
| is_verified | — |
| owner_login | rchemist |
| public_repos | 13 |
| account_age_days | 2,568 |
Package maintenance
100Excellent
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on npm |
| 35/35 | Publish recency — latest publish 15 days ago |
| 20/20 | Version history — 48 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | @rchemist/listgrid |
| ecosystems | npm |
| any_deprecated | no |
| min_days_since_publish | 15 |
Engineering Quality
Are baseline engineering and documentation practices in place?
74
Engineering practices
80Good
How it's scored
| 24/24 | CI workflows — 2 workflow(s) |
| 24/24 | Tests present |
| 16/16 | Linter config — eslint.config.mjs |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — no data |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | yes |
| has_precommit_config | no |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.
Documentation
65Moderate
How it's scored
| 30/30 | README |
| 25/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 0/10 | Repository description |
| 0/10 | Topics |
| 10/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | yes |
| homepage | — |
| has_readme | yes |
| has_docs_dir | yes |
| has_description | no |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
43
Security posture
36At risk
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — no data |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 0/2.5 | Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 5/5 | Packaging — packaging workflow detected |
| 1.5/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 3 |
| 0/5 | SAST — no SAST tool detected |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 42 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 3.6 |
Excluded from scoring (no data or not applicable): ci_tests, signed_releases. Remaining weights renormalized.
Dependency advisories
73Good
How it's scored
| 14/35 | Direct dependencies free of known advisories — 1 affected: uuid 9.0.1 (high 7.5) |
| 25/25 | Indirect dependencies free of known advisories — no indirect dependency carries a known advisory |
| 33.7/40 | No advisories left outstanding — 1 advisory-carrying package(s) unaddressed past 90 days; oldest published 95 days ago |
Inputs used
| source | osv |
| advisories | 1 |
| affected_packages | 1 |
| assessed_packages | 6 |
| unassessed_packages | 0 |
| affected_by_severity | high 1 |
| direct_affected_packages | 1 |
Matched the npm:@rchemist/listgrid@0.3.26 runtime dependency closure — what installing the published package pulls in — 6 packages. Reachability is not analyzed.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
63
Agent context & guidance
40At risk
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 82 of 83 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.988 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Verify loop (build / test / typecheck)
67Moderate
How it's scored
| 0/18 | One-command bootstrap |
| 22/22 | Automated tests |
| 11/11 | Lint / format config — eslint.config.mjs |
| 11/11 | Static type checking — tsconfig.json |
| 10/10 | Reproducible environment — lockfile |
| 10/10 | Demonstrated agent practice — 48 of the last 83 commits agent-authored or agent-credited |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 3/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 3 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | package-lock.json |
| has_dockerfile | no |
| typed_language | yes |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | yes |
| typecheck_configs | tsconfig.json |
| agent_commit_share | 0.578 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
Code legibility for models
100Excellent
How it's scored
| 45/45 | Type-checkable code — TypeScript (statically typed) |
| 55/55 | Manageable file sizes — 0/365 source files over 60KB |
Inputs used
| primary_language | TypeScript |
| largest_source_bytes | 37,743 |
| source_files_sampled | 365 |
| oversized_source_files | 0 |
Key facts
1GitHub stars
1contributors
83commits, last 12 months
13days since last push
1releases
1bus factor
0open issues
npmpackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
OpenSSF Scorecard 3.6 / 10
3.6aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| n/a | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 0 | Contributors | project has 0 contributing companies or organizations -- score normalized to 0 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 10 | Packaging | packaging workflow detected |
| 3 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 3 |
| 0 | SAST | no SAST tool detected |
| 0 | Security-Policy | security policy file not detected |
| n/a | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 42 existing vulnerabilities detected |
Direct dependencies 5
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| npm | clsx | ^2.1.1 | package.json |
| npm | crypto-js | ^4.2.0 | package.json |
| npm | tailwind-merge | ^2.5.4 | package.json |
| npm | uuid | ^9.0.0 | package.json |
| npm | zustand | ^4.4.0 | package.json |
All dependencies not collected
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Dependency advisories 1
Installing npm:@rchemist/listgrid@0.3.26 pulls in 6 packages, direct and transitive: 1 carry known advisories, of which 1 are direct dependencies.
| Package | Version | Relation | Severity | Advisories | Fixed in |
|---|---|---|---|---|---|
| uuid | 9.0.1 | direct | high | 1 | 13.0.1 |
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 4882,
"has_wiki": true,
"homepage": null,
"languages": {
"CSS": 167086,
"JavaScript": 15416,
"TypeScript": 2022359
},
"pushed_at": "2026-07-13T14:12:57Z",
"created_at": "2026-04-17T11:47:51Z",
"owner_type": "Organization",
"updated_at": "2026-07-11T04:40:31Z",
"description": null,
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript"
]
},
"owner": {
"blog": "https://rchemist.io",
"name": "Rchemist",
"type": "Organization",
"login": "rchemist",
"company": null,
"location": "Korea, South",
"followers": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/52901210?v=4",
"created_at": "2019-07-15T02:43:24Z",
"is_verified": null,
"public_repos": 13,
"account_age_days": 2568
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.2.6",
"kind": "patch",
"published_at": "2026-04-21T09:21:55Z"
}
],
"recent_commits": [
{
"oid": "853660ba5bd18b8043ca921f2241f9931228ec61",
"body": "P0 코드/릴리스준비 완료(962 tests green, 14 commits, p0-hotfixes). P0-10은\npublish/브랜치전환만 사용자 승인 대기. fan-out deviation 5건 §Needs Review 기재.\n0.3->0.4 마이그레이션 how-to를 리빙 문서로 착수(P7 승격) — 사용자 요청 반영.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(progress): P0-1~P0-9 완료 반영 + Needs Review + 마이그레이션 리빙문서 추적",
"author_name": "Kunner",
"author_login": "kunner",
"committed_at": "2026-07-10T08:21:17Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "898296ad8ba12473b62caba507b85f789c8157f8",
"body": "Document the 9 silver-bug fixes + 3 security defaults (with Breaking section)\nand bump to 0.3.26. Release-docs gate confirms CHANGELOG top == package.json.\nPublish is intentionally NOT performed here (needs user approval).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(release): 0.3.26 — CHANGELOG + version bump",
"author_name": "Kunner",
"author_login": "kunner",
"committed_at": "2026-07-10T08:15:28Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "52ff7d2e28147f7dfe8df4733f1562ff80aa30ce",
"body": "Living migration how-to for existing 0.3 users. Section 1 documents the\nimmediate 0.3.26 hardening breaking changes (cryptKey required, HTML sanitizer\nopt-in, asset-url fallback removed) with actionable code; Section 2 is the\nskeleton for the phased 0.4 re-foundation migration, filled in as P1-P7 land.\nGraduates to docs/MIGRATION.md + codemod at GA (roadmap P7).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: seed 0.3->0.4 migration guide (living doc)",
"author_name": "Kunner",
"author_login": "kunner",
"committed_at": "2026-07-10T08:15:20Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "5cb4b9bb2185afc07b0fd1d87d6bf3c223568453",
"body": "…freeze\n\nTurn @typescript-eslint/no-explicit-any from off to error so new/modified\nsource cannot introduce `any`. The 135 files (737 occurrences) that already\nuse `any` are grandfathered via a single override block listing them, so only\nNEW influx is blocked. The v0.4 re-foundation whittles this list down.\n\nChosen over 135 inline eslint-disable comments (same effect, one-file diff,\nexplicit frozen set). Completes PROGRESS P0-8.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(lint): enforce no-explicit-any (error) with grandfathered file …",
"author_name": "Kunner",
"author_login": "kunner",
"committed_at": "2026-07-10T08:11:58Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d91c945a52553a8fbe333dd10ca0fc037cfe76d2",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "style: apply prettier to P0 fix files",
"author_name": "Kunner",
"author_login": "kunner",
"committed_at": "2026-07-10T08:11:58Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "fe585233663270d02faee30234e18e5ff7efe64d",
"body": "…SearchForm v1\n\n- ASSET_SERVER_URL falls back to '' (not http://127.0.0.1:8320) and warns once\n when unconfigured, so a missing NEXT_PUBLIC_ASSET_SERVER surfaces instead of\n silently pointing at localhost.\n- AdvancedSearchForm (v1, 0 internal usages) marked @deprecated in favor of\n AdvancedSearchFormV2.\n\nPROGRESS P0-9.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(misc): drop 127.0.0.1 asset-server fallback; deprecate Advanced…",
"author_name": "Kunner",
"author_login": "kunner",
"committed_at": "2026-07-10T08:08:37Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ab823158d0f957825a74344230481a06062e3577",
"body": "…dRenderer\n\nhandleFieldChange and the default viewParams.onChange were verbatim-duplicated\nasync IIFEs with no .catch — when validate() or getManyToOneLink() threw, the\nrejection went unhandled and the field silently lost its value and error.\nExtract the shared logic into applyFieldChange() and wrap both call sites in\ntry/catch that surfaces the failure via setErrors().\n\nPROGRESS P0-3.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(form): surface onChange errors instead of swallowing them in Fiel…",
"author_name": "Kunner",
"author_login": "kunner",
"committed_at": "2026-07-10T08:08:37Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "04d120b148daac3f4374d5448f3a70f77131a95a",
"body": "…pt key\n\nADR-0006 P0 hardening:\n- configureHtmlSanitizer((html)=>string): the 3 raw-HTML sinks (HtmlField,\n ShowNotifications, ViewHelpIcon) render escaped TEXT + warn once until a host\n configures a sanitizer, instead of injecting raw HTML.\n- MenuPermissionChecker: warn once when unregistered (st\n[…]\nshared fallback key — encrypt/decrypt now THROW when\n cryptKey is unset (BREAKING for hosts that never set one; see CHANGELOG).\n\nPROGRESS P0-7.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(security): secure-by-default HTML sanitizer, menu-perm warn, cry…",
"author_name": "Kunner",
"author_login": "kunner",
"committed_at": "2026-07-10T08:04:02Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "848ed1d5dbcbdba842c78edd1d1c43b29c8e5791",
"body": "EntityForm.clone() copied manageEntityForm by reference, so mutating the clone\n(or original) leaked across both. Shallow-copy it: { ...this.manageEntityForm }.\n\nPROGRESS P0-6.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(config): clone EntityForm.manageEntityForm by value to stop aliasing",
"author_name": "Kunner",
"author_login": "kunner",
"committed_at": "2026-07-10T08:04:02Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d6cdbfaf0168ca345ae6b293b851ca18608aa3e4",
"body": "useLoadingStore was a plain function returning a mutable object, so state\nchanges never triggered re-renders. Back it with a zustand store (already a\ndependency); configureLoading now sets the store's state, preserving the\nhost-swap contract. All callers use it as a hook inside components.\n\nPROGRESS P0-5.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(loading): make useLoadingStore reactive via a zustand store",
"author_name": "Kunner",
"author_login": "kunner",
"committed_at": "2026-07-10T08:04:01Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "6d2320cd64d49618d5009b882de59cfc8ae853ec",
"body": "…ed value\n\nuseQuickSearchBar overwrote a list's configured defaultPageSize with the\nglobal localStorage page size at mount. Thread options.defaultPageSize through\nViewListGrid -> QuickSearchBar -> the hook and prefer it: explicit\ndefaultPageSize > global stored > library default.\n\nPROGRESS P0-4.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(list): respect explicit per-list defaultPageSize over global stor…",
"author_name": "Kunner",
"author_login": "kunner",
"committed_at": "2026-07-10T08:04:01Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "80329dd757e850a7c92d1a20356105e091f9bb6a",
"body": "…eeps time\n\nDatetimeField registered its field type as 'date', so Excel export/import fed\n'date' into transfer/Type.ts and dropped the time component (the datetime\nbranch was dead code). Register as 'datetime'; filter sizing already handles\nboth types (verified, no regression).\n\nPROGRESS P0-2.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(fields): register DatetimeField as 'datetime' so Excel transfer k…",
"author_name": "Kunner",
"author_login": "kunner",
"committed_at": "2026-07-10T08:04:01Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "0f01861861931da0d16002fee6a1bf0e704a3d6c",
"body": "…tion\n\ngetValueAsNumber/getValueAsBoolean evaluated the value as\n`(value?.current ?? getRenderType()==='update') ? fetched : default` — the\n=== bound before ?? so 'current' was never used directly and falsy current\n(0, false) was silently replaced by fetched/default, defeating MinMaxNumber\nvalidatio\n[…]\nhesize the ternary to mirror the correct getValueAsString:\n`value?.current ?? (getRenderType()==='update' ? fetched : default)`.\n\nPROGRESS P0-1.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(validation): correct operator precedence disabling min/max valida…",
"author_name": "Kunner",
"author_login": "kunner",
"committed_at": "2026-07-10T08:04:01Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a786ff356d93019e17263b93552b1cb419c669b7",
"body": "…, add release-docs gate\n\n- package.json: engines.node >=20\n- .nvmrc: 22 (LTS)\n- ci.yml: matrix Node 20/22, trigger on main + v0.4\n- publish.yml: run scripts/check-release-docs.mjs before publish\n- scripts/check-release-docs.mjs: assert CHANGELOG top version == package.json version\n\nPart of PROGRESS P0-8 (env fixation + release gate). eslint no-explicit-any\nfreeze follows in a separate commit after the P0 code fixes land.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(release): pin Node engines, add CI 20/22 matrix + v0.4 triggers…",
"author_name": "Kunner",
"author_login": "kunner",
"committed_at": "2026-07-10T07:55:11Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "214c85d5784579f5592f56a014ece7e6421134c2",
"body": "Node 20+ exposes an experimental global localStorage/sessionStorage that is\ninert without --localstorage-file (Node 26 warns and the global shadows\njsdom's implementation), causing 27 Web Storage tests to fail with\n\"Cannot read properties of undefined (reading 'clear')\". Install a\ndeterministic in-m\n[…]\nobalThis and window in the test setup\nso storage behaves consistently across Node/jsdom versions.\n\nRefs: PROGRESS P0-8 (jsdom localStorage 27건).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "test: polyfill Web Storage to fix inert localStorage global on Node 20+",
"author_name": "Kunner",
"author_login": "kunner",
"committed_at": "2026-07-10T07:45:32Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "62d51632d3e706bd38eca0608a1066f1c028c21f",
"body": "…실행 가능 수준)\n\n- documents/PROGRESS.md: /progress로 재개 가능한 활성 슬롯 — P0 핫픽스 10태스크(파일:라인\n 좌표·수정 방향·회귀 테스트·수용 기준 내장), P1 워크스페이스/alpha 파이프, P2 특성화\n 오라클(신구 공용 하네스), P3 계약 골격+감사표+파일럿 이식, P4~P7 개요+자기 전개 규칙.\n 모델 배분([O]/[S]/[H]) 태스크별 명시, fable 불필요 — 판단 막히면 Open Questions 에스컬레이션\n- prd/sample-site-spec.md: 내장 샘플\n[…]\ns/프리미티브 교체/커스텀 필드/자체 wrapper/어댑터 교체) = GA 게이트\n- 헌장 C7에 4단 확장 계층(토큰→슬롯→프리미티브→wrapper) 명문화, ADR-0008 워크스페이스에\n apps/sample 추가, 로드맵 P1/P5 및 PRD 정합화\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(progress): 0.4 재기초 실행 PROGRESS 설계 + apps/sample 명세 (opus/sonnet …",
"author_name": "Kunner",
"author_login": "kunner",
"committed_at": "2026-07-10T07:38:02Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "85f1518038be04e99c2012be5e7ec3c6b8290d3c",
"body": "사용자 결정(2026-07-10) 반영:\n- ADR-0008: 제자리 순차 재설계 대신 재기초(re-foundation)+장기 이식 — v0.4 브랜치\n 워크스페이스에 4계층 골격 신축, 필드/검증/CSS 로직은 특성화 테스트 오라클 아래 이식.\n 2차 시스템 효과 방지 장치 6개(헌장 울타리·이식 우선·오라클·동시처리 고정목록·\n alpha 상시배포·abort 기준) 명문화\n- 버전·브랜치: main=0.3.x 유지보수, v0.4=재기초 라인(0.4.0-alpha.N dist-tag next),\n GA 시 main→rele\n[…]\n증·연쇄, 주입식 통합, 어댑터,\n 리스트 표준 세트. 0.4.0 GA 게이트의 대조표\n- 로드맵 P1~P7 재편(스캐폴드→오라클→계약 골격→코어 이식→렌더러 이식→어댑터→GA),\n PRD §3·§4 정합화, documents/README 권위 목록 갱신\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(design): ADR-0008 재기초 전략 확정 + 개념 헌장 + 로드맵 전면 개정",
"author_name": "Kunner",
"author_login": "kunner",
"committed_at": "2026-07-10T07:00:29Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "60cdb0c4c08bd6e3721d9fcf858e7ac48f0ecddd",
"body": "사용자 논의(2026-07-10) 반영: '범용 대항마 기각'은 장기 목표의 축소가 아니라\n진입 수순의 교체다. 니치 3개 = beachhead, 범용 확장 트리거 3종(비RCM 채택 2건 /\nquick-start 30분 실측 / 커뮤니티 기여 1건) 충족 시 포지셔닝 확대 재논의를 명문화.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(prd): 피벗의 의미 명확화 — 목표 하향이 아닌 교두보 전략 + 범용 확장 트리거",
"author_name": "Kunner",
"author_login": "kunner",
"committed_at": "2026-07-10T06:42:39Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1aed2115fa59609a252f2d45c72b5e9fffd329ad",
"body": "- documents/README.md: 문서 체계 인덱스·권위 순서·AI 세션 규칙(stale 재발 방지)\n- PRD: 포지셔닝 피벗, v1 스코프(C1~C4), 릴리스 전략(0.4=breaking 창구), 성공 지표\n- ADR-0001 패키징(tsup dual+로드 스모크) / 0002 폼 상태 인스턴스 store / 0003 schema-render 분리(순환 213 해소) / 0004 API 표면 재단(580→~200) / 0005 백엔드 어댑터 계약 / 0006 보안 기준선(XSS·fail-open) / 0007 품질 게이트(특성화 테스트·래칫)\n- 로드맵: P0~P7 실행 순서·수용 기준·모델 배분 힌트 — 하위 티어 세션이 ADR만 읽고 착수 가능하도록 작성\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(design): v1 제품화 설계 문서 — PRD + ADR-0001~0007 + 로드맵 (3/3)",
"author_name": "Kunner",
"author_login": "kunner",
"committed_at": "2026-07-10T06:18:12Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "16a3083e896522f5289e342180b66761a694af56",
"body": "- 종합 보고서: 판정 PIVOT(조건부 GO) — 범용 어드민 정면승부 기각, RCM 수직통합+한국형+딥서브컬렉션 니치 재정의. 선결 조건 C1~C4\n- 42-에이전트 워크플로우 산출물(맵10·비평6·문서감사·시장조사) 원문 보존 — 각 파일에 원자료 경고 배너\n- 검증 로그: high/critical 18건 반증 시도 결과와 심각도 정정(예: clone aliasing critical→low) — 원자료 인용 시 우선 적용\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(analysis): 제로베이스 분석 보고서 + 원자료 18건 + 적대적 검증 로그 (2/3)",
"author_name": "Kunner",
"author_login": "kunner",
"committed_at": "2026-07-10T06:18:12Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "62801caf5e7ec7de5e00fbb4eecd869e3817f43d",
"body": "- archive: 완료된 PROGRESS(2026-05-29)·REFACTOR_HOST_COUPLING(실행 완료)·docs/ROADMAP(v0.2.0 시점 정지) → documents/archive/\n- docs/api(596파일·5.1MB, v0.2.0 이후 stale) git 추적 제거 + .gitignore — npm run docs 로컬 생성 정책으로 전환\n- README: v0.2.0 표기→v0.3.x 현행, 884+→930 테스트, 깨진 링크 정리\n- CHANGELOG: 누락된 0.3.23~0.3.25 소급 작성\n- \n[…]\n\n- MIGRATION: v0.2.x→v0.3.x 섹션 신설(0.3.1 백엔드 정합/0.3.21 peer·서브패스/0.3.22 envelope)\n- issues/7·8·9 fix-plan Status 헤더 OPEN→CLOSED 정정 (실제 이슈 상태와 일치)\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: stale 문서 아카이브 + 전면 현행화 (제로베이스 분석 후속 1/3)",
"author_name": "Kunner",
"author_login": "kunner",
"committed_at": "2026-07-10T06:17:53Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "48ab8636eb3f86aba4f9c032b270865746a7a7b1",
"body": "0.3.24 의 filtersKey 재적용은 필터/정렬/페이지만 리셋하고 checkedItems(행 선택)는\n남겨, 새 결과셋에 잔존 선택행이 있으면 체크박스는 켜졌는데 host 선택상태는 빈 desync\n가 났다. remount 였다면 선택도 초기화됐을 것 → setCheckedItems([]) 추가로 동형 보장.\n\nvitest 929 passed · type-check ✅ · lint(신규 0).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(list): #10 — filtersKey 재적용 시 행 선택도 해제 (remount 동형 완성) — 0.3.25",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-06-20T05:00:48Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f83babeecae5fa0565045f577cafeca410f37756",
"body": "…용 — 0.3.24\n\nhost 가 자체 FilterBar/URL 로 필터 상태를 소유하고 `options.filters` 로 주입할 때,\n지금까지는 변경 반영을 위해 `<ViewListGridWrapper key={…}>` 로 컴포넌트를 remount\n해야 했다(상태 teardown + cold re-init + react-query 캐시구독 브리지 유발).\n\nopt-in `options.filtersKey` 추가: host 가 필터 상태 파생값(JSON/hash)을 넘기면, 값이\n바뀔 때 엔진이 기존 필터/정렬을 비우고(clea\n[…]\n추가.\n\ntype-check ✅ · lint ✅(신규 0) · vitest 929 passed(회귀 0).\nfirst consumer = project-manager 이슈 페이지(list/board 단일 config 수렴, #36).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(list): #10 — options.filtersKey 로 host-owned 필터 상태 remount 없이 재적…",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-06-20T04:44:04Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "83aa57b912704b868dc6850d16dbf9a169fc3ef2",
"body": "onDrag(idList) reorders rows inside one list via up/down handles; it is NOT a\nmulti-column kanban DnD (moving a card between status columns to transition it).\nA consumer (project-manager #36) assumed onDrag could absorb a kanban board —\nit can't. Document that kanban boards stay host-owned (dnd-kit/HTML5) and only\nshare listgrid data via the headless useListGridLogic.\n\n- JSDoc on ViewListGridOptionProps.onDrag\n- EXTENSIONS.md TL;DR catalog row + 'When not to extend' bullet",
"is_bot": false,
"headline": "docs: clarify onDrag is within-list reorder, not kanban cross-column DnD",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-06-20T03:25:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a43104e55581b4066225ab12c4768765ac424978",
"body": "…— 0.3.23\n\n`.rcm-textarea[readonly]` 가 `--rcm-color-text-disabled`(gray-400)을 disabled\n배경 위에 써 2.3:1 대비로 WCAG 2 AA(4.5:1) 실패. `.rcm-input[readonly]` 가 이미\n적용한 동일 원칙(본문 색 유지 + disabled 배경)으로 readonly 를 disabled 와 분리.\nreadonly 값은 사용자가 읽는 데이터이므로 가독성 필수.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(a11y): readonly textarea uses body text color (WCAG AA contrast) …",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-06-19T08:52:58Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "943f771227f4384cb1106c8348d0cb2dff35e03a",
"body": "… — 0.3.22\n\n- #8 formatPrice nullish 가드 + renderListItemInstance `!= null` 정정 (0 보존)\n- #9 initialize 단건 fetch 1-depth 통일(response.data) + setFetchedValues nullish 방어선\n- CHANGELOG 0.3.22 + 컨슈머 우회 제거 안내, fix-plan 구현 결과 주입\n\nRelated to #8, #9\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(render,form): nullable NumberField 셀 + EntityForm 단건 fetch 크래시 수정…",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-06-17T10:48:44Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "6d453454848d67a221e624201c2812799aee0a78",
"body": "버전을 0.4.0 → 0.3.21로 정정. 프로젝트 컨벤션상 0.3.x 라인을 유지한다.\nCHANGELOG/문서의 버전 표기도 0.3.21로 일괄 정정(변경 내용 동일).\n\n이슈 #7.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(release): 0.3.21로 정정 (0.3.x 라인 유지)",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-06-16T08:57:59Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "140bb26103af8dfcc4c9156f97f3bc7b1bf0ab52",
"body": "전체 품질 게이트(type-check/lint/format/test:coverage 923 passed/build) green,\nbarrel module-graph 게이트(263 모듈, optional/heavy peer 도달 0) 확인.\nPROGRESS 종결(completed) + fix-plan ## 구현 결과 섹션 추가.\n\n이슈 #7 Phase 4 (#4.3) — 구현 완료.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(issue): #7 최종 acceptance 통과 + fix-plan 구현 결과 주입",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-06-16T08:51:41Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "c6ec8eb700360794e3c2bf193181414b47c0f22f",
"body": "package.json 0.3.20→0.4.0. CHANGELOG [0.4.0]에 BREAKING(peer 필수화,\nleaf/전송 subpath 이전, qrcode v3 고정) + import 매핑표 + Migration 가이드.\nREADME peer 섹션을 '필수 vs opt-in subpath' 표 + 전송 등록 예시로 갱신.\n\n이슈 #7 Phase 4 (#4.1, #4.2).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(release): 0.4.0 — peer 재분류/subpath/전송주입 문서화 + 버전 bump",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-06-16T08:47:57Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "e2d72d8e5b46b2d151a22d7b2faf3c6c9fadafcb",
"body": "…ransfer\n\nxlsx/file-saver 기반 export/import 표면(DataExporter/DataImporter/Processor/\nSample/DynamicDataImporter/ExcelProvider)을 /excel subpath로 묶고,\nhost가 1줄(registerExcelDataTransfer())로 전송 기능을 코어 리스트에 주입하도록 함.\nDataTransferModal prettier 포맷 정리 포함.\n\n이슈 #7 Phase 3 (#3.3) — Phase 3 완료.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(excel): @rchemist/listgrid/excel opt-in 엔트리 + registerExcelDataT…",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-06-16T08:45:59Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "025c423499c3190700e892169f73e77aaf9760af",
"body": "리스트 헤더 내장 전송 모달이 DataExporter/DataImporter를 static import하던 것을\ngetDataTransfer() 주입 조회로 변경(미등록 시 graceful no-render).\nmain barrel에서 xlsx/file-saver를 끌어오는 carrier export 제거\n(DataExporter/DataImporter/DataExportProcessor/DataImportSample/DynamicDataImporter/\nProvider/ExcelProvider) 후 configureDataTran\n[…]\neld, Type)는 barrel 유지로 breaking 최소화.\n\ngate: barrel 그래프(263 모듈, 동적 import 포함)에서 모든 optional/heavy peer 도달 0.\n\n이슈 #7 Phase 3 (#3.2).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor(transfer): DataTransferModal을 주입 레지스트리로 전환 + barrel carrier 제거",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-06-16T08:41:42Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a6239bc77419e38c5f52754f28a7622d8ff0c471",
"body": "configureDataTransfer/getDataTransfer 주입 seam 신설(기존 configureApiClient/\nUIProvider DI 패턴). 코어 리스트가 host 주입 전송 컴포넌트를 렌더하도록 하여\nxlsx/file-saver를 barrel 그래프에서 분리하기 위한 토대.\n\n이슈 #7 Phase 3 (#3.1).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(transfer): 데이터 전송 주입 레지스트리 추가",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-06-16T08:35:25Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "325876072ae061d1f1b24cb6621a6667afa8d8d3",
"body": "QR / 주소(kakao·daum) / API-spec(sweetalert2) / xref-price(sweetalert2)를\nmain barrel에서 제거하고 @rchemist/listgrid/{qr,address,api-spec,xref-price}\nsubpath로 격리. ApplyFullAddressFields도 AddressMapField를 정적 인스턴스화하므로\n/address로 이동(barrel 유일 참조처). barrel 그래프에서 qrcode.react/\nreact-kakao-maps-sdk/react-daum-postcode/sweetalert2 도달 0건 확인(.gate-trace.cjs).\n\n이슈 #7 Phase 2.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor(exports): leaf optional 컴포넌트를 subpath opt-in으로 분리",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-06-16T08:31:54Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d36ce34d535bd6548c6f272fec13a65c8aac6fc0",
"body": "코어 도달 peer(@iconify/react·react-select·react-sortablejs)를 optional:false로,\nreact-sortablejs의 peer인 sortablejs(^1.15.0)를 필수 peer로 추가.\nqrcode.react는 default export 호환 v3로 range 축소(^3.0.0).\nsideEffects 명시로 tree-shaking 방어선 추가.\n\n이슈 #7 Phase 1.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(deps): optional peer 3분류 재선언 — 코어 peer 필수화 + qrcode v3 고정",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-06-16T08:25:07Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "68fb1cf594095cd5a9f7ba99ca7ba8684aca0a05",
"body": "barrel이 optional peer를 static import해 consumer 빌드 강제 실패하는 문제의\n하이브리드 수정 계획(peer 3분류 + subpath + 전송 주입) 및 진행 추적 문서.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(issue): #7 분석 fix-plan 및 PROGRESS 작성",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-06-16T08:23:40Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "8a8295723541d7e641810a5f4a6683595f8ab3eb",
"body": "…태 h1 타이틀 수정 — 0.3.20\n\nDataExporter가 DataExportProcessor에 maxCount/countPerPage를 전달하지 않아\n항상 기본값(100×100=10000)이 limit UI에 표시되던 문제 수정.\n!exportable 상태에서 h1이 \"파일 생성 완료\"를 표시하던 문제도 수정.",
"is_bot": false,
"headline": "feat(export): ExportTransferConfig에 maxCount/countPerPage 추가, limit 상…",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-06-04T06:55:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "685b074383f2014922a8b2b535de6515243acbb3",
"body": "validate() passed `this.getCurrentValue()` (async) without awaiting, so the\nvalue reached validateWithLimit as a Promise. `Array.isArray(value)` was always\nfalse → any field with `limit.min` defined (TagField defaults to {min:0}) always\nreturned a \"최소 N개\" failure regardless of the real value. Entity\n[…]\ncted — the bug stayed latent until TagField detail save.\n\nNow the resolved array is used for the limit check. +3 regression tests.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(form): await getCurrentValue in OptionalField.validate — 0.3.19",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-06-02T20:22:53Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "8a28a288b2cdb005241341862a7eb3d3628bdc15",
"body": null,
"is_bot": false,
"headline": "style: Prettier format DataExportService.ts — CI fix",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-06-02T06:25:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8e56ee7728918a8bb431826a4964bc50822fd996",
"body": "createFieldMap이 name+label 두 키를 등록하여 DataExportService가 모든 키를\n순회할 때 컬럼이 2배 생성되는 문제(#1532) 수정.\nDataImporter의 createFieldMap(lookup용)은 영향 없음.\n\n— 0.3.18",
"is_bot": false,
"headline": "fix(export): DataExportService fieldMap을 name-only Map으로 교체 — 중복 컬럼 수정",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-06-02T06:23:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e444a10ff5ec9baea79adb55ba4f37e8cc8deeb",
"body": "Adds a \"조건\" label before the operator SelectBox in NumberFilter\nso users can understand the dropdown purpose at a glance.\nAlso adjusts layout to align vertically with value inputs.",
"is_bot": false,
"headline": "fix(filter): add condition label to NumberFilter select box — 0.3.17",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-06-01T04:33:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2c824a0d5bc72d7a17aa8c82f76eb74005e5f1e",
"body": "CI format:check has been failing on main since 2026-05-30.\n\nCo-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "style: fix Prettier formatting in DataImporter and headless",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-05-31T16:08:37Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f7d5daa66803e1818ddcf7ce7d6ee7cd4322b357",
"body": "Two serious WCAG 2 AA violations surfaced by project-manager Sprint 31f W.3\nissue detail page (first Wave 6 form-view consumer):\n\n1. `.rcm-input[readonly]` used disabled text color (#9ca3af) on disabled\n background (#f3f4f6) — 2.3:1 contrast vs required 4.5:1. Readonly inputs\n convey *informatio\n[…]\n.2.x backport candidates: fix #1 (CSS only,\nadditive) — backport OK; fix #2 (state/event flow change) — 0.3.x only per\nLTS policy.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(a11y): readonly input contrast + tab nested-interactive — 0.3.16",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-05-31T15:16:52Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "05e208ded5ba40666b0b9d651cce4989808b8313",
"body": "… studies\n\nWhen listgrid 's defaults don't fit a host requirement, the right move is to\nuse the extension catalog (FormField subclass / saveValue / displayFunc /\nisDirty / withClientPreUpdate / withClientPostUpdate / EntityFormButton /\nautosave key scoping), not to fork the page or build a sibling c\n[…]\nbefore sidelining a listgrid feature\n\nREADME.md gets a §\"Extending listgrid for host requirements\" section\nlinking to the new doc.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: add EXTENSIONS.md — host integration extension catalog + 2 case…",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-05-31T14:13:37Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ba4771083988b4a3c1d3165364c612c4bfe10f68",
"body": "project-manager 가 dist patch (patches/@rchemist__listgrid@0.3.13.patch) 로\n유지하던 a11y 보강 5종을 upstream 으로 흡수. consumer 가 patchedDependencies\nentry 를 삭제하고 깨끗하게 ^0.3.15 bump 가능.\n\n추가 (모두 additive — 기존 동작 무변경):\n- QuickSearchInput: 검색 + 검색어 지우기 button 에 type=\"button\" + aria-label\n- SortField: type=\"button\" \n[…]\nstream_before_downstream]] 정합).\n- 모두 visual-zero / behavioral-zero — 0.2.x backport candidate\n ([[feedback_listgrid_02_stability]] additive a11y 정합).\n\nTest: 47 files / 920 tests / 1 todo PASS (회규 0).",
"is_bot": false,
"headline": "fix(a11y): upstream project-manager local patch a11y additions (0.3.15)",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-05-30T19:32:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5278a475b120a95126231a4e3035f6e0d44b04fd",
"body": "EntireChecker.checkAllItems 가 setCheckedItems(...) 직후 onSelectionChange 에\n*이전* checkedItems 를 전달 → React state queue 만 됐고 closure 변수는 still\nold. host 가 빈 배열 받음 → master checkbox + selectionOptions.onSelectionChange\nhost-side gate 패턴 silent break.\n\n비교 ViewRows.tsx:344-348 (single-row click) 는 newChec\n[…]\noral (onSelectionChange callback 의 args) 이지만 *정합 회복*\n 방향 — 기존 host 코드가 빈 배열을 받아 silent break 였던 게 옳은 동작이\n 됨. 단 다른 0.2.x consumer 가 우연히 빈 배열을 가정으로 동작 중이면 break.\n- 0.3.x 만 우선 publish, 0.2.x 는 별도 검토 후.",
"is_bot": false,
"headline": "fix(list): EntireChecker onSelectionChange stale closure (0.3.14)",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-05-30T18:33:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d2f666ec86421a48ef0a5cd0acadab7d80ba0e7d",
"body": "…econciliation)\n\n- handleFieldChange 의 `entityForm.merge(cloned); setEntityForm(entityForm)`\n → `setEntityForm(cloned)` 로 단순화. 기존 패턴은 같은 reference 를\n setState 로 보내 React 19 (+ React 18) 가 reconciliation 스킵 →\n controlled input 의 value 가 EntityForm 갱신 후에도 update 안 되어\n 사용자 타이핑 / Playwright fill 등이 \n[…]\nantics) 이라 0.2.x 는 의도적 backport 제외 — 0.2.x = LTS 다수 production\n사이트 의존 (https://github.com/rchemist/rcm-listgrid 의 release/0.2 정책).\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(form): EntityForm change → setEntityForm with new ref (React 19 r…",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-05-30T14:08:39Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "917634f7aed24a13483554d31bf9e6ff1cf27bc8",
"body": "- HeaderTitle: <div> 에 role=\"heading\" aria-level={1} 추가 (semantic\n heading 부여). 시각/스타일/DOM 구조 100% 동일, Playwright getByRole\n ('heading') + screen reader 호환.\n- FieldRenderer: input view 에 aria-label={label} 을 React.cloneElement\n 로 주입 (label 이 string 이고 !hideLabel + valid element 일 때만).\n 시각 변경 0, \n[…]\nn reader 호환. view.props\n 의 기존 aria-label 우선 (consumer override 보존).\n\nBump to 0.3.12. consumer 측 동선/시각 영향 없음 — additive ARIA only.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(a11y): heading role + form input aria-label — zero visual impact",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-05-30T07:53:03Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3d5930f7c97f71243ce5a37364f2011b5b25c403",
"body": "…진행률 노드 렌더 지원",
"is_bot": false,
"headline": "feat(import): DataImporter renderAsyncResult seam — 비동기 processId 응답 …",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-05-29T08:47:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "66a8d4c1dbc9efb5963830d49e1bc91402caa946",
"body": "- onFileUpload 의 행 파싱을 buildSheetData 헬퍼로 통합, 매핑 셀이 모두 blank 인 행 제외 (#1478)\n- 기존 cells.forEach(async) 의 값 resolve 전 push 어긋남도 await Promise.all 로 정상화\n- submitting 상태 추가: 업로드/취소 버튼 disable + 스피너 + 진행 중 모달 닫기 가드 (#1479)",
"is_bot": false,
"headline": "fix(import): DataImporter 빈 행 미리보기 제외 + 업로드 진행 상태 표시 — gjcu #1478/#1479",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-05-29T08:35:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a780d029424761215061086337507689c617b126",
"body": "#1 SearchForm wire serialization, #6 ApiClient envelope, #5 prerender\nSuspense, #2 headlessUIComponents (/headless subpath).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: release v0.3.9",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-05-29T06:14:47Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2af25705092bb6e8c6716174917e8bf7a3ba8b7b",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(progress): complete — 4 fixes landed on both v0.3.x and v0.2.x",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-05-29T06:12:29Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ebf1e9423b8dbe64a1433e9733cf3618dc36d75e",
"body": "…(#2)\n\nUIProvider requires the full 49-primitive surface, so every consumer hand-wrote\n~47 stubs per app. Ship a proven zero-styling baseline (adapted from the\nsample MinimalUIProvider) so a working grid/form is one line away:\n\n import { headlessUIComponents } from '@rchemist/listgrid/headless';\n \n[…]\ngn system. Explicit-over-implicit, mirroring the headless-UI ecosystem.\n\n+5 tests; full suite 919 green; type-check + build clean.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(ui): export headlessUIComponents baseline via /headless subpath …",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-05-29T06:08:26Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4f936dd3727c746d31e627dddcc9730f93937463",
"body": "…render (#5)\n\nnuqs `useQueryStates` calls React `useSearchParams`, which forces a Suspense\nboundary during Next.js 15 static prerender (`next build`). Consumers who\nimported `<ViewListGrid>` directly had to wrap every page in their own\n`<Suspense>` or the build failed.\n\nSplit into inner/outer: the e\n[…]\n\nno Suspense boilerplate. ViewListGridWrapper's existing Suspense still nests\nharmlessly.\n\nFull suite 914 green; type-check clean.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(ViewListGrid): wrap in internal Suspense boundary for Next.js pre…",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-05-29T06:00:19Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b60fe73376ba23e5c9821c2656e59d82e0978a1a",
"body": "…ayload fallback (#6)\n\nHost adapters must return a ResponseData whose `.data` holds the backend\npayload, but this was only implied — and the README quick-start showed the\nbroken `fetch().then(r => r.json())` raw-return pattern, which makes\n`response.data` absent and the grid silently render \"데이터가 없습\n[…]\nad of under .data) still\n renders. Zero behavior change when correctly wrapped.\n\n+1 test; full suite 914 green; type-check clean.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(ApiClient): document ResponseData envelope contract + defensive p…",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-05-29T05:57:33Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "72dc631d320063decd534ab2c5fc7c55974cda8c",
"body": "…(#1)\n\nSearchForm held `sorts`/`filters` as Maps with no toJSON, so host\n`JSON.stringify(searchForm)` produced `{}` → backend rejected with\n\"Cannot deserialize ArrayList from Object\" (400).\n\nMirror the rcm-backend-framework SearchRequest contract:\n- add toJSON(): sorts Map → [{field, direction}] (So\n[…]\n so multi-sort\n order (first = primary) survives withSort's prepend semantics.\n\n+7 tests; full suite 912 green; type-check clean.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(SearchForm): serialize sorts/filters Maps to backend wire format …",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-05-29T05:16:03Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "691b8c5a94e5d2463445a5dac51d2ea07a4ee1eb",
"body": "…der Excel\n\n- createFieldMap: add label as secondary key (name remains primary)\n- DataImporter: use matchedFields[] instead of fields[arrayIndex] to fix\n column order mismatch when Excel columns differ from field definition order\n- DataImporter: header key always uses field.getName() so DataImportP\n[…]\nge\n\nEnables uploading raw Korean-header Excel files (e.g. 학번/구분/접수일)\nwithout requiring bracket format ([fieldName]). Backward compatible —\nexisting bracket-format and name-matching behavior unchanged.",
"is_bot": false,
"headline": "fix(DataImporter): support label-based column matching for Korean hea…",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-05-27T08:33:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d4ad18b6aca4cf029752592cd74852182be73950",
"body": "…m modal\n\n- 외부 절대 URL 분기에서 사용하던 `.rcm-image-field-external-img` 가 CSS 룰 없이\n 자연 크기로 풀리던 회귀를 차단. 학생/사용자 프로필 등 asset 서버가 절대 URL 을\n 반환하는 환경에서 폼 화면이 거대한 이미지에 덮이는 문제 해결.\n- 폼 뷰에 항상 통일된 썸네일을 노출하는 `ImageFieldFormPreview` 추가. 기본 8rem\n 정사각형, 클릭 시 `.rcm-image-field-zoom-*` 인앱 모달로 90vw/90vh contain\n 확대 — 배경 클릭 / ESC 로 닫힘.\n- `ImageField#withPreviewSize(size)` 빌더 추가 (number=px, string=CSS 길이값).\n 도메인별 더 작은 / 큰 미리보기를 선언부에서 직접 제어 가능.\n- 리스트 셀 (`renderListItemInstance`) 의 외부 URL 분기는 기존 동작 유지.\n\nv0.3.7",
"is_bot": false,
"headline": "feat(image-field): add form preview thumbnail + withPreviewSize + zoo…",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-05-20T09:41:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "49f780d0f10e134a869822ae56eff8e64c351c02",
"body": "v0.2.19 introduced trim+lowercase normalization. The backend\nOptionService.normalizeAlias has since been re-aligned with the\nproject convention (EnumType / option value keys are all uppercase)\nin gjcu-academic-backend #1416, so the frontend cache key is\nflipped to trim+uppercase to stay in lockstep.\n[…]\na findByAliasIgnoreCase, so this is a cache-key\nconsistency change only.\n\nRelease v0.2.20 (legacy-0.2). v0.3.6 backport to follow.\n\n(cherry picked from commit 3f2305928fcd9a9cd0d5296d098c1bda2df1659b)",
"is_bot": false,
"headline": "fix(custom-option): normalize alias cache key to uppercase (#1416)",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-05-19T06:53:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "11dbe25f6b390c985ffc2a1466a6397e31bf08e7",
"body": "CustomOptionField alias 캐시 키 정규화 (trim + lowercase) — 백엔드\nOptionService.normalizeAlias 와 동일 규칙.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: release v0.3.5",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-05-16T22:53:52Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "16bab86d1f4b03f7817d32a62b63ec3d2c5c2895",
"body": "Match the backend OptionService.normalizeAlias behavior so any\ncase/whitespace variant of an alias hits the same cache slot and the\nsame backend entity. URL still carries the trimmed, case-preserved\nalias.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(custom-option): normalize alias cache key (trim + lowercase)",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-05-16T22:53:35Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "4bb6c859545361ef42b4d3645656e06254de7490",
"body": "… win\n\nThe base reset rule `.rcm-table th, .rcm-table td { text-align: left }` is\nspecificity (0,1,1) and overrides `.text-center` / `.text-right` utility\n(0,1,0) emitted by ViewColumn / HeaderField. Result: getListFieldAlignType()\nreturns 'center' for select / boolean / date / number / etc. and Vie\n[…]\nemoving the default `text-align: left` lets the utility win. Browsers\nalready left-align th/td by default, so cells without an explicit alignment\nclass are unchanged.\n\nRefs: gjcu-academic-backend#1324",
"is_bot": false,
"headline": "fix(list): drop .rcm-table cell default text-align so utility classes…",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-05-15T02:18:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "473c94dcff3c235a076b8eb5233690801f6a9a2c",
"body": "값이 외부 절대 URL(`http(s)://`) 인 경우 `ImageField` / `FileField` 가 host\n`FileUploadInput` 을 거치지 않고 곧바로 `<img>` 또는 다운로드 링크로 표시하도록\n변경. 폼 입력 모드와 리스트 셀 양쪽 모두 적용.\n\n기존에는 `getAccessableAssetUrl` 이 입력을 `removeAssetServerPrefix` 에 먼저\n태우면서 스킴 콜론을 URL-encode 해버려 `https://api.example/static-resource/\nhttps%3A//cdn.ex\n[…]\n 들어와도 외부 URL 을 추출, 분기 처리.\n- `isExternalUrl(url)` 헬퍼 신규 공개 (`misc` → barrel 재노출).\n- misc 테스트: 외부 URL passthrough · 동적 엔드포인트(no extension, query) ·\n 자체 asset 서버 매칭 · `isExternalUrl` 단위 케이스를 추가.\n\nv0.3.3",
"is_bot": false,
"headline": "fix(image/file-field): pass external http(s) URLs through untouched",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-05-14T12:03:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "232e76266d553d45391c2180b7a11aaec984a041",
"body": null,
"is_bot": false,
"headline": "0.3.2",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-05-08T19:34:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "375e9e1d1081b41b80434d99f01edfa1cfa1d812",
"body": "Wide-screen ListGrid columns stretch to full width, leaving short\ncontent (codes, numbers, badges, dates) lonely on the cell's left\nedge with excessive trailing whitespace. Inverting the default\nalignment so only 'text' type stays left and everything else\ncenters fixes the row-level eye-tracking iss\n[…]\nil/\n phone/password/textarea/html/markdown/tag/custom/checkbox/hidden)\n- Explicit withListConfig({ align }) still wins\n- ViewColumn / HeaderField rendering unchanged\n\nRefs: gjcu-academic-backend#1324",
"is_bot": false,
"headline": "fix(list): center-align non-text cells by default",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-05-08T19:34:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e246c4583a1b98718b70e4fd8673f09ac576524f",
"body": "main is now 0.3.x; without this the next v0.2.16 tag would overwrite\nthe latest dist-tag and downgrade users on `npm i @rchemist/listgrid`.\nv0.2.* tags publish under legacy-0.2; everything else stays on latest.",
"is_bot": false,
"headline": "ci(publish): route v0.2.x tags to npm dist-tag legacy-0.2",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-05-07T09:30:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0cabf74e4b12ebcee15d2bcaec73de3400535ac9",
"body": "BREAKING — endpoint 매트릭스 변경:\n- 검색 / 목록 : POST {url} → POST {url}/search\n- Create : POST {url}/add → POST {url}\n- Bulk delete : POST {url}/delete → DELETE {url} + body BulkDeleteRequest\n\n응답 wire format 호환 흡수 (한 라이브러리 코드로 dual):\n- 결과 list : data.list || data\n[…]\normat:check : PASS\n- npm run test:coverage : statements 17.23 / branches 15.05 / functions 17.93 /\n lines 17.02 (threshold 16/14/17/16 모두 통과)\n- npm run build : dist 생성 OK",
"is_bot": false,
"headline": "feat!: rcm-framework 0.1.0 endpoint 정합 — v0.3.1 (Decision #31)",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-05-05T05:16:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "72d8ce3a1caf2e8defe64df203cb3debe579afd5",
"body": "Move field-based cell formatting (cell.t/cell.z) to after the\nsheet_to_json -> aoa_to_sheet round-trip so '@' (text) numFmt is not\nwiped from the final worksheet. Fixes lectureCode-style codes losing\ntheir leading zeros when users paste into the downloaded sample.",
"is_bot": false,
"headline": "fix: preserve cell text format on Excel sample download",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-05-01T02:23:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e865b70530991516216852ce17d8b85b0814557b",
"body": "…t is not blocked\n\nInlineMap UI accumulates user input in pendingRef.current.value and only flips\nthis.value.current at getSaveValue time. FormField.isBlank, however, only looks\nat this.value.current. As a result, a required InlineMapField with user-entered\nkeys was rejected at validation with \"필수 값\n[…]\niness; otherwise fall back to FormField.isBlank.\n\nTests: src/listgrid/components/fields/__tests__/InlineMapField.test.ts\nReported in gjcu-academic-backend issue #1289 (PreInquiryType.attributes save).",
"is_bot": false,
"headline": "fix: InlineMapField required-validation reads pendingRef so user inpu…",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-04-29T17:57:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f8bf579814d8937102a50cd1fd4c6647fc0bd5ee",
"body": "…rrors\n\nCustom buttons created via EntityFormButton.withOnClick that overwrite the\n'save' action could not surface field-level errors in ViewEntityForm. The\nreturned EntityForm instance held the field errors, but getEntityFormButtons\ndid not pass setEntityForm into the button props, and the framewor\n[…]\nreturns a form with form.errors, call\n setEntityForm(form) and clear the top string banner when getErrorMap()\n is non-empty (avoids double-rendering the same message).\n\nchore: bump version to 0.2.13",
"is_bot": false,
"headline": "fix: custom save-overwrite button should propagate entityForm field e…",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-04-27T09:02:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cad02797388aca6c61bd179b9525a89aa3c9181d",
"body": null,
"is_bot": false,
"headline": "fix: smsSenderList 경로에서 /api/v1 제거",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-04-24T04:59:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "16f71618669e6f67237906116f3bdfb8fc03da93",
"body": null,
"is_bot": false,
"headline": "style: prettier fixes (index.ts, PostCodeSelector.tsx, UIProvider.tsx)",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-04-24T03:03:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fd69255f658e5f89765d75c63192eca7901afdb8",
"body": "Remove GJCU-specific hardcoding from library runtime code:\n- Role literals (ROLE_SUPER_ADMIN / ROLE_ADMIN / ROLE_STAFF) in 4 sites\n are replaced with host-injected permission predicates\n (RuntimeConfig.permissions.canSendSms, canOpenInNewWindow) and\n per-field overrides (PhoneNumberField.withSmsP\n[…]\nssion predicates\ndefault to () => true; hosts wanting admin-gating must inject predicates\nat bootstrap. See docs/REFACTOR_HOST_COUPLING.md for design rationale.\n\nNo public API removed. 884 tests pass.",
"is_bot": false,
"headline": "chore: release v0.2.12 — host coupling detox",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-04-24T03:01:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6d6290314dadddbb076c7ea16c100ea2eaf05159",
"body": null,
"is_bot": false,
"headline": "chore: release v0.2.11",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-04-23T05:58:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f794e3c5a5f5fff6e5155d8846297c478f72667e",
"body": "…록 표시 + 저장 실패\n\n두 뷰의 \"불러오기\" 모달은 내부에 ManyToOneField('mapping', ...) 서브폼을 띄우고\nform.getSubmitFormData() 결과에서 선택한 대상을 꺼내 쓰는 구조인데, EntityForm의\nprocessManyToOneField 헬퍼는 모든 AbstractManyToOneField 값을 `${fieldName}Id` 키로\n저장한다. 따라서 data['mappingId']에 저장되지만 두 뷰는 data['mapping']을 읽어\n항상 undefined를 받고, mappingVal\n[…]\n / XrefPriorityMappingView는 모달에서\nManyToOneField 서브폼이 아니라 ListGrid를 직접 띄우고 onSelect: (item) => onChange(item.id)로\nid를 바로 받는 다른 아키텍처라 영향 없음.\n\n수정: data['mapping'] → data['mappingId'] (2개 파일 각 1줄 + 의도 주석)",
"is_bot": false,
"headline": "fix: XrefPreferMappingView / XrefAvailableDateMappingView 불러오기 후 전체 목…",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-04-23T05:58:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "499edbe3862948e902b072ee3ca6a19d89a27f3c",
"body": null,
"is_bot": false,
"headline": "chore: release v0.2.10",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-04-23T05:03:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8fc4c606451d62d95bbd81493cb9582260b24661",
"body": "- 모달 본문을 PostCodeSelectorForm 으로 분리 + React.memo(() => true) 로\n 외부 재렌더 격리. address2 로컬 state 가 타이핑마다 유실되던 문제 해결\n- useState lazy initializer 로 initialAddress 를 최초 1회만 복사,\n 이후 prop 변화 무시 (controlled input 고정)\n- open 토글 시 sessionKey 증가로 세션별 신규 Form 인스턴스 보장\n- onSubmit 은 ref 패턴으로 안정화, '주소 입력' 버튼 클릭 시에만 상위 전파\n- const classes = {} 로 인해 적용되지 않던 모달 내부 CSS 복구.\n rcm-postcode-form/row/input-row/submit-row/error 규칙을 components.css 에 추가\n → '주소 검색' 버튼 줄바꿈, 행 좌측 치우침, 하단 버튼 좌측 정렬 해소",
"is_bot": false,
"headline": "fix: PostCodeSelector 모달 UI 깨짐 + address2 포커스 유실 근본 수정",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-04-23T05:03:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8bdb9b13e796ee377a6bed92ef523aa9e06a1b63",
"body": null,
"is_bot": false,
"headline": "chore: release v0.2.9",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-04-22T11:15:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f42307a8a6cc4d66f6e3761b49a3b59cf777ea7",
"body": "Node 22 번들 npm 10.x 의 in-place upgrade 는 'promise-retry' 모듈\n링크 깨짐으로 실패한다. Node 24 는 npm 11.x 를 번들로 제공하므로\n별도 upgrade 단계 없이 Trusted Publishing(>=11.5.1) 요구사항을 충족.\n\n0.2.7/0.2.8 은 위 CI 문제로 게시되지 못했고 0.2.9 로 재릴리스.",
"is_bot": false,
"headline": "ci: use Node 24 for bundled npm 11.x, release 0.2.9",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-04-22T11:15:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e63731cdff824119ac276c29f907f835dfa4e593",
"body": null,
"is_bot": false,
"headline": "chore: release v0.2.8",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-04-22T11:13:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c1add4232a2152dc19f75eaf97fd074a244782f8",
"body": "- Node 22 번들 npm 10.x 는 OIDC 토큰을 registry 로 전달하지 않아\n Trusted Publishing 이 동작하지 않음. publish.yml 에 npm@latest\n 글로벌 업그레이드 단계를 추가하여 11.5.1+ 보장\n- CHANGELOG 에 [0.2.8] 섹션 추가 — 0.2.7 은 위 CI 문제로 레지스트리\n 게시 실패, 동일 수정을 포함하여 0.2.8 로 재릴리스",
"is_bot": false,
"headline": "ci: upgrade npm for Trusted Publishing, release 0.2.8",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-04-22T11:13:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6d9cf6161fdb15950a130fcae9d8ccb454b076b7",
"body": null,
"is_bot": false,
"headline": "chore: release v0.2.7",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-04-22T11:00:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6afa609faacf7b669484dcb5be4e38cb0442ca27",
"body": "- PostCodeSelector 의 useEffect 의존성을 [props] → [open] 로 변경하여\n 부모 재렌더로 인한 내부 state 재초기화를 방지 (상세주소 입력 유실 해결)\n- .rcm-card-m2o-search-input 셀렉터에 .rcm-input 을 추가하여 특이도를\n (0,2,0) 으로 맞추고 번들 순서로 .rcm-input[data-size='sm'] 의 padding\n 리셋을 override → 검색 아이콘이 placeholder 를 가리던 문제 해결\n- CHANGELOG 에 [0.2.7] 섹션 추가\n- prepublishOnly 스크립트 포함 (배포 전 clean/type-check/test/build)",
"is_bot": false,
"headline": "fix: PostCodeSelector 포커스 유실 및 CardManyToOneView 검색 아이콘 위치 문제",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-04-22T10:49:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95e7cacd3fddce6be16014d126dab22285b6ff9b",
"body": "@rchemist/listgrid — Framework-free React CRUD UI engine.\n\nPrimitive-based design system with data-attr theming, and a full\nlist/form renderer for entity-oriented HTTP backends.\n\n- List view: paginated table + search + filters + sort + column picker\n- Form view: field renderer + validation + revision + inline sub-collections\n- Provider contracts decouple routing / URL state / auth / HTTP / UI kit\n- CSS custom-property theming + container-query responsive layouts\n- Apache-2.0 licensed",
"is_bot": false,
"headline": "Initial commit",
"author_name": "kunner",
"author_login": "kunner",
"committed_at": "2026-04-21T09:17:20Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 1,
"commits_last_year": 83,
"latest_release_at": "2026-04-21T09:21:55Z",
"latest_release_tag": "v0.2.6",
"releases_from_tags": false,
"days_since_last_push": 13,
"active_weeks_last_year": 9,
"days_since_latest_release": 96,
"mean_days_between_releases": null
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": false,
"has_contributing": false,
"health_percentage": 25,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "@rchemist/listgrid",
"exists": true,
"license": "Apache-2.0",
"keywords": [
"react",
"listgrid",
"crud",
"entity",
"form",
"table",
"design-system",
"css-primitives",
"data-attr",
"framework-free"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@rchemist/listgrid",
"is_deprecated": false,
"latest_version": "0.3.26",
"repository_url": "https://github.com/rchemist/rcm-listgrid",
"versions_count": 48,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 2050,
"first_published_at": "2026-04-21T09:19:22.676000Z",
"latest_published_at": "2026-07-11T04:41:47.496000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 15
}
]
},
"popularity": {
"forks": 0,
"stars": 1,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 37743,
"source_files_sampled": 365,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [
{
"name": "uuid",
"direct": true,
"version": "9.0.1",
"severity": "high",
"ecosystem": "npm",
"cvss_score": 7.5,
"advisory_ids": [
"GHSA-w5hq-g745-h8pq"
],
"fixed_version": "13.0.1",
"advisory_count": 1,
"oldest_advisory_days": 95
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"high": 1
},
"advisory_count": 1,
"affected_count": 1,
"assessed_count": 6,
"malicious_count": 0,
"assessed_package": "npm:@rchemist/listgrid@0.3.26",
"unassessed_count": 0,
"direct_affected_count": 1
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "clsx",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^2.1.1"
},
{
"name": "crypto-js",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.2.0"
},
{
"name": "tailwind-merge",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^2.5.4"
},
{
"name": "uuid",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^9.0.0"
},
{
"name": "zustand",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.4.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 0,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 10,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "kunner",
"commits": 83,
"avatar_url": "https://avatars.githubusercontent.com/u/4423295?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"publish.yml"
],
"has_docs_dir": true,
"linter_configs": [
"eslint.config.mjs"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 3,
"reason": "dependency not pinned by hash detected -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "42 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "853660ba5bd18b8043ca921f2241f9931228ec61",
"ran_at": "2026-07-27T00:29:59Z",
"aggregate_score": 3.6,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-11T04:41:51Z",
"oldest_open_prs": [],
"last_merged_pr_at": null,
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/rchemist/rcm-listgrid",
"host": "github.com",
"name": "rcm-listgrid",
"owner": "rchemist"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"security": 43,
"vitality": 67,
"community": 32,
"governance": 55,
"engineering": 74
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 67,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 62,
"inputs": {
"commits_last_year": 83,
"human_commit_share": 1,
"days_since_last_push": 13,
"active_weeks_last_year": 9
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 13 days ago",
"points": 28.8,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 13
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "9/52 weeks with commits",
"points": 6.2,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 9
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "83 commits in the last year",
"points": 17.3,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 83
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "good",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 74,
"inputs": {
"releases_count": 1,
"latest_release_tag": "v0.2.6",
"releases_from_tags": false,
"days_since_latest_release": 96,
"mean_days_between_releases": null
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "1 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 1
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 96 days ago",
"points": 27,
"status": "partial",
"details": [
{
"code": "release_recency",
"params": {
"days": 96
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "cadence unknown (single release)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "release_cadence_unknown",
"params": {}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 32,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 1,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "1 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 1
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 55,
"inputs": {
"packages": [
"@rchemist/listgrid"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 2050
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "2,050 downloads/month across npm",
"points": 44.2,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 2050,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 55,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 10,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 76,
"inputs": {
"merged_prs": 0,
"open_issues": 0,
"closed_issues": 10,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 46.8,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "no decided pull requests or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_decided_prs_or_data",
"params": {}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 52,
"inputs": {
"followers": 1,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "rchemist",
"public_repos": 13,
"account_age_days": 2568
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "1 followers of rchemist",
"points": 2.2,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 1,
"login": "rchemist"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "13 public repos, account ~7 yr old",
"points": 20.3,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 13
}
},
{
"code": "account_age_years",
"params": {
"years": 7
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"@rchemist/listgrid"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 15
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 15 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 15
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "48 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 48
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 74,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 80,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "2 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 2
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "eslint.config.mjs",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.mjs"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 43,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 36,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 3.6
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 3",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "42 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "good",
"name": "Dependency advisories",
"note": "Matched the npm:@rchemist/listgrid@0.3.26 runtime dependency closure — what installing the published package pulls in — 6 packages. Reachability is not analyzed.",
"notes": [
{
"code": "advisories_scope_published",
"params": {
"package": "npm:@rchemist/listgrid@0.3.26",
"assessed": 6
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 73,
"inputs": {
"source": "osv",
"advisories": 1,
"affected_packages": 1,
"assessed_packages": 6,
"unassessed_packages": 0,
"affected_by_severity": "high 1",
"direct_affected_packages": 1
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "1 affected: uuid 9.0.1 (high 7.5)",
"points": 14,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 1,
"packages": "uuid 9.0.1 (high 7.5)"
}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "1 advisory-carrying package(s) unaddressed past 90 days; oldest published 95 days ago",
"points": 33.7,
"status": "partial",
"details": [
{
"code": "advisories_stale",
"params": {
"days": 90,
"count": 1,
"oldest": 95
}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 6,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 2
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 63,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.988,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "82 of 83 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 82,
"sampled": 83
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 67,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"package-lock.json"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"tsconfig.json"
],
"agent_commit_share": 0.578,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "eslint.config.mjs",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.mjs"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "48 of the last 83 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 48,
"sampled": 83
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 37743,
"source_files_sampled": 365,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/365 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 365,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-27T00:30:05.479725Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/r/rchemist/rcm-listgrid.svg",
"full_name": "rchemist/rcm-listgrid",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — npm.