realproject7/quadwork holds a health index of 78 out of 100, placing it in the Good band. It scores highest on Vitality (86/100) and lowest on Community & Adoption (44/100). It was last updated 4 days ago. A single contributor accounts for most of its recent work.
78
overall / 100
Good
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.
78
Exceptional93-100The record's top tier (≈ top 5%); essentially all checked criteria met
Excellent80-92Strong across the board; minor gaps
Good65-79Healthy; gaps are limited and manageable
Moderate50-64Acceptable with notable gaps; review recommended
Weak35-49Material weaknesses across several areas
At Risk20-34Significant weaknesses; adoption warrants caution
Critical1-19Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
The weighted overall 67 is calibrated to 78 on the published index scale (record calibration 2026-08-02).
Direct dependencies free of known advisories — no direct dependency carries a known advisory
25/25
Indirect dependencies free of known advisories — no indirect dependency carries a known advisory
0/40
No advisories left outstanding — no advisory carries a publication date
Inputs used
source
osv
advisories
0
affected_packages
0
assessed_packages
110
unassessed_packages
0
affected_by_severity
none
direct_affected_packages
0
Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:quadwork@2.7.1 runtime dependency closure — what installing the published package pulls in — 110 packages. Reachability is not analyzed.
How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
Star and fork history 0 ★ / 9 ⇿
0Stars
9Forks
49Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 1Minor 15Patch 33
OpenSSF Scorecard 4.4 / 10
4.4aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-08-05 08:52 UTC
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Dependency advisories 0
Installing npm:quadwork@2.7.1 pulls in 110 packages, direct and transitive: 0 carry known advisories, of which 0 are direct dependencies.
No known advisories affect the assessed dependencies.
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"icon": {
"bytes": 74427,
"width": 1024,
"height": 1024,
"rejected": [],
"collected": true,
"media_type": "image/png",
"source_url": "https://raw.githubusercontent.com/realproject7/quadwork/main/public/icon.png",
"source_type": "readme",
"content_hash": "365f99e12e2a81079d2ea306c91cfbbc41df4e4e78c3866f5f82f51ed8756584",
"candidates_considered": 1
},
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 5349,
"has_wiki": true,
"homepage": null,
"languages": {
"CSS": 3056,
"JavaScript": 1046373,
"TypeScript": 526302
},
"pushed_at": "2026-08-01T04:15:12Z",
"created_at": "2026-03-31T13:20:19Z",
"owner_type": "User",
"updated_at": "2026-08-01T04:15:24Z",
"description": "4-agent coding team dashboard — terminals, agent chat, GitHub board, Telegram bridge, and shared memory in one local web view.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "JavaScript",
"significant_languages": [
"JavaScript",
"TypeScript"
]
},
"owner": {
"blog": "https://mint.club/",
"name": "Project7",
"type": "User",
"login": "realproject7",
"company": "HUNT",
"location": "Seoul, Korea",
"followers": 30,
"avatar_url": "https://avatars.githubusercontent.com/u/15100667?v=4",
"created_at": "2015-10-13T05:45:27Z",
"is_verified": null,
"public_repos": 29,
"account_age_days": 3949
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v2.7.1",
"kind": "patch",
"published_at": "2026-07-25T01:47:28Z"
},
{
"tag": "v2.7.0",
"kind": "minor",
"published_at": "2026-07-13T03:05:14Z"
},
{
"tag": "v2.6.0",
"kind": "minor",
"published_at": "2026-07-07T03:52:31Z"
},
{
"tag": "v2.5.1",
"kind": "patch",
"published_at": "2026-07-06T23:50:52Z"
},
{
"tag": "v2.5.0",
"kind": "minor",
"published_at": "2026-07-06T12:09:30Z"
},
{
"tag": "v2.4.0",
"kind": "minor",
"published_at": "2026-07-04T03:10:10Z"
},
{
"tag": "v2.3.9",
"kind": "patch",
"published_at": "2026-06-11T07:40:47Z"
},
{
"tag": "v2.3.8",
"kind": "patch",
"published_at": "2026-06-07T21:18:36Z"
},
{
"tag": "v2.3.7",
"kind": "patch",
"published_at": "2026-06-04T07:18:50Z"
},
{
"tag": "v2.3.6",
"kind": "patch",
"published_at": "2026-06-02T08:54:47Z"
},
{
"tag": "v2.3.5",
"kind": "patch",
"published_at": "2026-06-02T01:53:56Z"
},
{
"tag": "v2.3.4",
"kind": "patch",
"published_at": "2026-06-02T01:47:10Z"
},
{
"tag": "v2.3.3",
"kind": "patch",
"published_at": "2026-06-01T21:15:51Z"
},
{
"tag": "v2.3.2",
"kind": "patch",
"published_at": "2026-06-01T11:15:52Z"
},
{
"tag": "v2.3.1",
"kind": "patch",
"published_at": "2026-06-01T07:44:18Z"
},
{
"tag": "v2.3.0",
"kind": "minor",
"published_at": "2026-06-01T05:18:22Z"
},
{
"tag": "v2.2.1",
"kind": "patch",
"published_at": "2026-05-30T13:03:40Z"
},
{
"tag": "v2.2.0",
"kind": "minor",
"published_at": "2026-05-30T11:32:08Z"
},
{
"tag": "v2.1.0",
"kind": "minor",
"published_at": "2026-05-29T12:31:57Z"
},
{
"tag": "v2.0.1",
"kind": "patch",
"published_at": "2026-05-22T00:57:11Z"
},
{
"tag": "v2.0.0",
"kind": "major",
"published_at": "2026-05-21T04:20:51Z"
},
{
"tag": "v1.19.3",
"kind": "patch",
"published_at": "2026-05-19T01:04:19Z"
},
{
"tag": "v1.19.2",
"kind": "patch",
"published_at": "2026-05-15T13:40:41Z"
},
{
"tag": "v1.19.1",
"kind": "patch",
"published_at": "2026-05-15T13:08:13Z"
},
{
"tag": "v1.19.0",
"kind": "minor",
"published_at": "2026-05-06T05:19:00Z"
},
{
"tag": "v1.18.4",
"kind": "patch",
"published_at": "2026-05-06T04:25:46Z"
},
{
"tag": "v1.18.3",
"kind": "patch",
"published_at": "2026-05-06T03:52:54Z"
},
{
"tag": "v1.18.2",
"kind": "patch",
"published_at": "2026-05-06T02:34:41Z"
},
{
"tag": "v1.18.1",
"kind": "patch",
"published_at": "2026-05-04T14:07:27Z"
},
{
"tag": "v1.18.0",
"kind": "minor",
"published_at": "2026-05-04T07:34:40Z"
},
{
"tag": "v1.17.3",
"kind": "patch",
"published_at": "2026-05-04T04:17:46Z"
},
{
"tag": "v1.17.2",
"kind": "patch",
"published_at": "2026-05-04T03:43:43Z"
},
{
"tag": "v1.17.1",
"kind": "patch",
"published_at": "2026-05-04T03:20:30Z"
},
{
"tag": "v1.17.0",
"kind": "minor",
"published_at": "2026-04-30T22:49:51Z"
},
{
"tag": "v1.16.1",
"kind": "patch",
"published_at": "2026-04-30T05:00:42Z"
},
{
"tag": "v1.16.0",
"kind": "minor",
"published_at": "2026-04-30T02:41:46Z"
},
{
"tag": "v1.15.1",
"kind": "patch",
"published_at": "2026-04-29T04:43:26Z"
},
{
"tag": "v1.15.0",
"kind": "minor",
"published_at": "2026-04-29T03:04:09Z"
},
{
"tag": "v1.14.6",
"kind": "patch",
"published_at": "2026-04-28T13:00:07Z"
},
{
"tag": "v1.14.5",
"kind": "patch",
"published_at": "2026-04-28T11:08:54Z"
},
{
"tag": "v1.14.4",
"kind": "patch",
"published_at": "2026-04-28T10:53:12Z"
},
{
"tag": "v1.14.3",
"kind": "patch",
"published_at": "2026-04-28T07:40:26Z"
},
{
"tag": "v1.14.2",
"kind": "patch",
"published_at": "2026-04-28T04:43:42Z"
},
{
"tag": "v1.14.1",
"kind": "patch",
"published_at": "2026-04-28T02:00:06Z"
},
{
"tag": "v1.14.0",
"kind": "minor",
"published_at": "2026-04-28T01:56:17Z"
},
{
"tag": "v1.13.1",
"kind": "patch",
"published_at": "2026-04-27T08:20:45Z"
},
{
"tag": "v1.13.0",
"kind": "minor",
"published_at": "2026-04-27T06:27:17Z"
},
{
"tag": "v1.12.1",
"kind": "patch",
"published_at": "2026-04-27T05:13:44Z"
},
{
"tag": "v1.12.0",
"kind": "minor",
"published_at": "2026-04-21T11:39:22Z"
},
{
"tag": "v1.11.1",
"kind": "patch",
"published_at": "2026-04-20T11:37:03Z"
},
{
"tag": "v1.11.0",
"kind": "minor",
"published_at": "2026-04-20T03:21:21Z"
},
{
"tag": "v1.10.1",
"kind": "patch",
"published_at": "2026-04-19T11:37:34Z"
},
{
"tag": "v1.10.0",
"kind": "minor",
"published_at": "2026-04-19T03:02:04Z"
},
{
"tag": "v1.9.0",
"kind": "minor",
"published_at": "2026-04-16T23:15:20Z"
},
{
"tag": "v1.8.5",
"kind": "patch",
"published_at": "2026-04-13T08:32:52Z"
},
{
"tag": "v1.8.4",
"kind": "patch",
"published_at": "2026-04-13T06:17:12Z"
},
{
"tag": "v1.8.3",
"kind": "patch",
"published_at": "2026-04-12T12:41:16Z"
},
{
"tag": "v1.8.2",
"kind": "patch",
"published_at": "2026-04-12T12:25:39Z"
},
{
"tag": "v1.8.1",
"kind": "patch",
"published_at": "2026-04-12T12:01:55Z"
},
{
"tag": "v1.8.0",
"kind": "minor",
"published_at": "2026-04-12T08:04:26Z"
},
{
"tag": "v1.7.0",
"kind": "minor",
"published_at": "2026-04-11T17:41:41Z"
},
{
"tag": "v1.6.3",
"kind": "patch",
"published_at": "2026-04-11T13:10:46Z"
},
{
"tag": "v1.6.2",
"kind": "patch",
"published_at": "2026-04-11T11:43:33Z"
},
{
"tag": "v1.6.1",
"kind": "patch",
"published_at": "2026-04-11T05:15:15Z"
},
{
"tag": "v1.6.0",
"kind": "minor",
"published_at": "2026-04-11T02:19:02Z"
},
{
"tag": "v1.5.5",
"kind": "patch",
"published_at": "2026-04-10T12:18:25Z"
},
{
"tag": "v1.5.4",
"kind": "patch",
"published_at": "2026-04-10T10:37:00Z"
},
{
"tag": "v1.5.3",
"kind": "patch",
"published_at": "2026-04-09T18:04:06Z"
},
{
"tag": "v1.5.2",
"kind": "patch",
"published_at": "2026-04-09T16:53:47Z"
},
{
"tag": "v1.5.1",
"kind": "patch",
"published_at": "2026-04-09T14:37:29Z"
},
{
"tag": "v1.5.0",
"kind": "minor",
"published_at": "2026-04-09T11:12:50Z"
},
{
"tag": "v1.4.0",
"kind": "minor",
"published_at": "2026-04-09T09:25:08Z"
},
{
"tag": "v1.3.0",
"kind": "minor",
"published_at": "2026-04-09T09:25:06Z"
},
{
"tag": "v1.2.5",
"kind": "patch",
"published_at": "2026-04-09T09:25:05Z"
},
{
"tag": "v1.2.4",
"kind": "patch",
"published_at": "2026-04-09T09:25:03Z"
},
{
"tag": "v1.2.3",
"kind": "patch",
"published_at": "2026-04-09T09:25:02Z"
},
{
"tag": "v1.2.2",
"kind": "patch",
"published_at": "2026-04-09T09:25:01Z"
},
{
"tag": "v1.2.1",
"kind": "patch",
"published_at": "2026-04-09T09:24:59Z"
},
{
"tag": "v1.2.0",
"kind": "minor",
"published_at": "2026-04-09T09:24:58Z"
},
{
"tag": "v1.1.0",
"kind": "minor",
"published_at": "2026-04-09T09:24:57Z"
},
{
"tag": "v1.0.17",
"kind": "patch",
"published_at": "2026-04-09T09:24:55Z"
},
{
"tag": "v1.0.16",
"kind": "patch",
"published_at": "2026-04-09T09:24:54Z"
},
{
"tag": "v1.0.15",
"kind": "patch",
"published_at": "2026-04-09T09:24:52Z"
},
{
"tag": "v1.0.14",
"kind": "patch",
"published_at": "2026-04-09T09:24:51Z"
},
{
"tag": "v1.0.13",
"kind": "patch",
"published_at": "2026-04-09T09:24:50Z"
},
{
"tag": "v1.0.12",
"kind": "patch",
"published_at": "2026-04-09T09:24:49Z"
},
{
"tag": "v1.0.11",
"kind": "patch",
"published_at": "2026-04-09T09:24:47Z"
},
{
"tag": "v1.0.10",
"kind": "patch",
"published_at": "2026-04-09T09:24:46Z"
},
{
"tag": "v1.0.9",
"kind": "patch",
"published_at": "2026-04-09T09:24:45Z"
},
{
"tag": "v1.0.8",
"kind": "patch",
"published_at": "2026-04-09T09:24:44Z"
},
{
"tag": "v1.0.7",
"kind": "patch",
"published_at": "2026-04-09T09:24:43Z"
},
{
"tag": "v1.0.6",
"kind": "patch",
"published_at": "2026-04-09T09:24:42Z"
},
{
"tag": "v1.0.5",
"kind": "patch",
"published_at": "2026-04-09T09:24:40Z"
},
{
"tag": "v1.0.4",
"kind": "patch",
"published_at": "2026-04-09T09:24:39Z"
},
{
"tag": "v1.0.3",
"kind": "patch",
"published_at": "2026-04-09T09:24:38Z"
},
{
"tag": "v1.0.2",
"kind": "patch",
"published_at": "2026-04-09T09:24:30Z"
},
{
"tag": "v1.0.1",
"kind": "patch",
"published_at": "2026-04-09T09:24:12Z"
}
],
"recent_commits": [
{
"oid": "44d820ce0c135b274ab0aa6abb720af3190746ca",
"body": "[#1023] Add Grok (xAI Grok Build CLI) as a fourth agent backend",
"is_bot": false,
"headline": "Merge pull request #1024 from realproject7/task/1023-grok-backend",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-08-01T04:15:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b03aa60a6b2e94c8531c61e88d9b52379f72d27b",
"body": "… mirror test\n\nThree PO/@re1 items in one push.\n\n1. macOS fixture defect. os.tmpdir() is a symlink on macOS\n (/var/folders -> /private/var/folders); git canonicalizes the paths it\n reports, so the common-dir equality never matched and the suite was\n red for every Mac operator while staying gre\n[…]\neting\n that class of test. The grok-only/gemini-only ACs move to post-merge\n local-Mac verification by the PO, as the amended ticket records.\n\nCo-Authored-By: Claude Opus 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1023] Fix macOS fixture path, cite grok queueing evidence, drop the…",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-08-01T04:05:38Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f2877fb702a5b0f3d26a674e9cc1a4d03162bbb7",
"body": "@re1 on PR #1024:\n\n- pty-dispatcher.js still justified the cap re-arm's residual injection\n with \"safe because the cap is Claude-only\", which stopped being true\n the moment grok became eligible. The rationale now states what it\n actually rests on — a cap-eligible TUI queuing input received mid-tu\n[…]\nettingsPage.tsx alone is\n reverted.\n\nNo behavior change from the previous head: the inlined expression is the\nextracted helper's logic verbatim.\n\nCo-Authored-By: Claude Opus 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1023] Correct the cap re-arm rationale and inline the backend fallback",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-08-01T04:00:19Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "65add1fca0ce296fdcf3fa9118afedff163e3fc3",
"body": "Extends the existing claude/codex/gemini seams to grok, plus the one\ngenuinely new mechanism grok requires: a project-scoped TOML MCP config\nand folder trust, since grok has no --mcp-config-style flag.\n\n- injectMode: grok -> \"project_toml\"\n- PERMISSION_FLAGS: grok -> --always-approve\n- buildAgentArg\n[…]\native \".git\". The write is append-if-absent because\nthe common-dir exclude is shared and arg-build runs on every spawn and\nrespawn.\n\nCloses #1023\n\nCo-Authored-By: Claude Opus 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1023] Add Grok (xAI Grok Build CLI) as a fourth agent backend",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-08-01T03:50:24Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "59198955480c2224e1980e1645690d34a8ec0db3",
"body": "[#1021] 2.7.1",
"is_bot": false,
"headline": "Merge pull request #1022 from realproject7/task/1021-release-v2-7-1",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-25T01:39:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7ea62768e97dde18916e559a6dcad628e18d8712",
"body": "Patch bump 2.7.0 -> 2.7.1 from main 31708d5. npm `latest` is 2.7.0, so a\npublish without this release-source bump would fail as a duplicate.\n\nVersion strings only, edited by path rather than global replacement:\npackage.json.version, package-lock.json.version, and\npackage-lock.json.packages[\"\"].versi\n[…]\nint, PR #1020), #1018 (claude-opus-5 pinned model,\nPR #1019), #1003-#1009 (governed-batch + installation/operator docs\nrefresh, PRs #1011-#1017).\n\nCo-Authored-By: Claude Opus 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1021] 2.7.1",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-25T01:35:19Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "31708d52232fa7058e8648ea0710da4490bead42",
"body": "…-wake\n\n[#1010] Bound Claude deferred-wake delivery under continuous TUI repaint",
"is_bot": false,
"headline": "Merge pull request #1020 from realproject7/task/1010-claude-file-chat…",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-25T01:03:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "01c2c12a1f5367cce4c957c376067052322b7e97",
"body": "re2 on PR #1020: test 18b asserted the \"a stale callback cannot affect a\nsubsequent cycle\" contract but could not discriminate it — by the time\nthe cap drain returns, cleanupDrainListener has already cleared both\nhandles, so no stale timer ever exists. Replacing the guard with\n`() => true` left the \n[…]\nrming per post is\ndeliberately not done since a chatty agent could then extend deferral\nindefinitely — recreating the starvation this cap bounds.\n\nCo-Authored-By: Claude Opus 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1010] Pin the stale-cycle guard with a discriminating test",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-25T00:49:31Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a9dadab88e688222ee2d903a4dab02a4afd0892e",
"body": "The Claude Code TUI repaints its status line ~5x/sec while idle, so the\ndeferred-wake drain's idle timer — reset on every onData — never saw the\n5s gap and a queued wake was starved indefinitely. Claude agents in\nfile-chat mode were therefore never woken, while codex agents (whose TUI\ngoes quiet bet\n[…]\nCap timings are\noverridable so the regressions run at millisecond scale. Verified the\ncore case fails with the cap disabled (11 assertions fail).\n\nCo-Authored-By: Claude Opus 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1010] Bound Claude deferred-wake delivery under continuous TUI repaint",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-25T00:34:04Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7c4830ee1e2ee41e78afe20b1abc5812692c7aeb",
"body": "[#1018] Add Claude Opus 5 as a pinned selectable model",
"is_bot": false,
"headline": "Merge pull request #1019 from realproject7/task/1018-claude-opus-5",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-25T00:21:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ef8715c2b22793ff6af28965e62c6a97ed4618f8",
"body": "Append `claude-opus-5` to MODEL_OPTIONS.claude immediately after\nclaude-fable-5 and before the 4.x pins (newest pin first, never first),\nso modelsForBackend(\"claude\")[0] stays \"opus\" — the #931 default/heal\ntarget. Pure data addition: buildAgentArgs already forwards any concrete\nClaude slug as `--mo\n[…]\nuard, since that surface is React-only), and\na launch case asserting `--model claude-opus-5` alongside the permission\nand --mcp-config arguments.\n\nCo-Authored-By: Claude Opus 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1018] Add Claude Opus 5 as a pinned selectable model",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-25T00:14:18Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "caf94e2b4d687ab02be00a35a62706f28a791256",
"body": "…resh\n\n[#1009] docs(operator-mcp): Make the Operator MCP guide backend-neutral and remote-safe",
"is_bot": false,
"headline": "Merge pull request #1017 from realproject7/task/1009-operator-mcp-ref…",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-18T00:08:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "64ce6b8f2ea297d36ee254a9e8fe6724b270cf82",
"body": "…ard support\n\nAddress @re1: the \"MCP client must run on the same machine\" note (line 7)\ncontradicted the SSH local-forward path documented under Remote / VPS. Restate\nit as a shared-loopback requirement that explicitly allows either same-host\noperation or the documented SSH tunnel.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1009] docs(operator-mcp): Reconcile same-machine note with SSH-forw…",
"author_name": "project7",
"author_login": null,
"committed_at": "2026-07-18T00:06:24Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "24fcb8ba12d63e63d8f1a2e438478a98f73085ac",
"body": "…al and remote-safe\n\n- Backend-neutral: retitle \"from a Claude agent\" → \"from an MCP client\"; the\n operator server is a generic stdio MCP server usable by any MCP-capable\n client. Add a generic registration framing (every client launches the same\n `quadwork-mcp-operator --port <port>` bin) and a \n[…]\nsurface. Docs-only; no backend/runtime code, packages, tests,\nlegacy migration implementation, other docs, or other repos touched.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1009] docs(operator-mcp): Make the Operator MCP guide backend-neutr…",
"author_name": "project7",
"author_login": null,
"committed_at": "2026-07-18T00:03:06Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "11b4e0a2a96ff84331a923c9da47c9284111b9b8",
"body": "…refresh\n\n[#1008] docs(troubleshooting): Refresh current runtime recovery guidance",
"is_bot": false,
"headline": "Merge pull request #1016 from realproject7/task/1008-troubleshooting-…",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-17T23:58:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "761e06ac5f4642e0c2aa07323073003c9510dd89",
"body": "…lar agents\n\nAddress @re1: the onData trust listener at server/index.js:1182 is Butler-only\n(butlerSession.term). The four agents (head/dev/re1/re2) are pre-trusted at\nproject creation by running `claude -p` in each Claude-backed worktree\n(server/routes.js:3924-3940, #599; #975 made it async, did no\n[…]\nuadWork runs at creation), then restart the agent — instead of the\nincorrect \"a per-agent listener auto-answers on restart\" claim.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1008] docs(troubleshooting): Correct trust-prompt recovery for regu…",
"author_name": "project7",
"author_login": null,
"committed_at": "2026-07-17T23:54:24Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f9556489d8f3a1d4231ba7453a74f1bf094662ac",
"body": "Tie the stale entries to current behavior; no runtime changes.\n\n- Trust prompt: drop the manual `claude -p \"echo ok\"` pre-trust and the\n \"QuadWork v1.14.5+ pre-trusts during project creation\" wording (both removed\n by #975). Describe the current behavior — an onData listener auto-confirms the\n Cl\n[…]\nresent or added. Docs-only; no runtime code,\ntests, package versions, legacy migration implementation, or other documents\ntouched.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1008] docs(troubleshooting): Refresh current runtime recovery guidance",
"author_name": "project7",
"author_login": null,
"committed_at": "2026-07-17T23:50:22Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d65d35646496f0268960c546571cb9ae53293947",
"body": "[#1007] docs(install-vps): Modernize VPS installation and remove legacy chat migration prose",
"is_bot": false,
"headline": "Merge pull request #1015 from realproject7/task/1007-install-vps-refresh",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-17T23:46:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c388f47310b3ed2f35bb120802f03d3c39ebd6d0",
"body": "…at migration prose\n\n- Remove the obsolete \"Migrating from Older Versions (AgentChattr cleanup)\"\n section from the public install guide (pm2 agentchattr-* cleanup, config\n key removal) — no longer relevant to a current install.\n- Add a Remote Access section that keeps control local-forward based:\n\n[…]\nbin/quadwork.js:864). Docs-only; no runtime\ncode, package versions, tests, legacy cleanup implementation, or quadwork-web\ntouched.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1007] docs(install-vps): Modernize VPS install and remove legacy ch…",
"author_name": "project7",
"author_login": null,
"committed_at": "2026-07-17T23:44:05Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "fbc870d3c499e4bcf2cedeef80b4b8893904571c",
"body": "…refresh\n\n[#1006] docs(install-windows): Bring the WSL2 guide to current setup parity",
"is_bot": false,
"headline": "Merge pull request #1014 from realproject7/task/1006-install-windows-…",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-17T23:38:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a4a35ee2526cd7362214ef06534009b0860a574e",
"body": "…parity\n\nMake docs/install-windows.md independently usable instead of deferring to the\nMac guide, and align every command with the current code / the corrected\ninstall-mac.md (#1005).\n\n- Inline the full flow inside WSL2: install agent CLIs (Claude Code / Codex /\n Gemini CLI), authenticate, install \n[…]\nuide\" pointers.\n\nDocs-only; no runtime code, tests, package versions, legacy migration\nimplementation, or other documents touched.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1006] docs(install-windows): Bring the WSL2 guide to current setup …",
"author_name": "project7",
"author_login": null,
"committed_at": "2026-07-17T23:35:44Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b1b70b6071f69d388add36e416a3f1b07e3ccb82",
"body": "[#1005] docs(install-mac): Update macOS installation for the current QuadWork release",
"is_bot": false,
"headline": "Merge pull request #1013 from realproject7/task/1005-install-mac-refresh",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-17T23:33:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a44dc5b8287f8d8bf1f01d2aa52b01931300991",
"body": "Reconcile docs/install-mac.md with the current CLI, SetupWizard, README, and\npackage metadata (v2.7.0), removing stale v1.14.5-era wording.\n\n- Verify step: `quadwork --version` is not a subcommand (falls through to the\n usage help); use `npm list -g quadwork`, and bump the example version from\n 1.\n[…]\nhat auto-answers the prompt\n (server/index.js:1182).\n\nDocs-only; no runtime code, package versions, tests, or other docs touched.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1005] docs(install-mac): Update macOS guide for the current release",
"author_name": "project7",
"author_login": null,
"committed_at": "2026-07-17T23:27:52Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "5f16c0a5afa613ca4f41c38b27a18e37bd4c8b48",
"body": "…tr-claims\n\n[#1004] docs: Remove stale AgentChattr claims from repository guidance and README credits",
"is_bot": false,
"headline": "Merge pull request #1012 from realproject7/task/1004-remove-agentchat…",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-17T23:22:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cc5d3eaafcdb9a53ba52aaf50edad44a82c5ecba",
"body": "…README credits\n\nRemove references portraying AgentChattr / agentchattr-telegram as current\nQuadWork dependencies and describe the verified current arrangement.\n\n- README.md: drop the AgentChattr External Tools credit (no credit implies a\n current dependency).\n- CLAUDE.md: replace \"AgentChattr chat\n[…]\ntion\nimplementation, or quadwork-web touched. AGENTS.md already contains no\nAgentChattr text (rg over the three files finds none).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1004] docs: Remove stale AgentChattr claims from repo guidance and …",
"author_name": "project7",
"author_login": null,
"committed_at": "2026-07-17T23:19:26Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ce8f30b32732a0496e21b9ef87d20be5f93f9096",
"body": "…batch\n\n[#1003] docs(readme): Reframe QuadWork around governed batch delivery",
"is_bot": false,
"headline": "Merge pull request #1011 from realproject7/task/1003-readme-governed-…",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-17T23:15:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bfadf2bb694e0399f9a0d443230d2ec597bbc23c",
"body": "Rewrite the README narrative around governed, one-ticket-at-a-time batch\ndelivery. Name all four roles accurately (@head, @dev, @re1, @re2) and\ndescribe the Issue → Branch → PR → Review × 2 → Merge pipeline they run.\n\nRemove unsupported claims (production-grade, ship 24/7, high code quality\nwithout \n[…]\nackend mentions with the actually-supported\nCodex, Claude, and Gemini CLIs. External Tools credits, commands, and\nlinks unchanged.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1003] docs(readme): Reframe QuadWork around governed batch delivery",
"author_name": "project7",
"author_login": null,
"committed_at": "2026-07-17T23:05:11Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "853716246a18f628d592b42da063ca141323c1c1",
"body": "[#1001] 2.7.0",
"is_bot": false,
"headline": "Merge pull request #1002 from realproject7/task/1001-release-v2-7-0",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-13T03:03:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad0e163d0e28dac11458d223372793993871e2fc",
"body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#1001] 2.7.0",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-13T03:00:25Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f280d579d5af01e854334e7e9cbfc6adaf1ecb4f",
"body": "[#999] Add GPT-5.6 Sol/Terra/Luna to codex model dropdown",
"is_bot": false,
"headline": "Merge pull request #1000 from realproject7/task/999-gpt56-models",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-13T02:46:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c29d5ade690e9a75454c8dbd021be676c15ede4c",
"body": "Append gpt-5.6-sol/terra/luna to MODEL_OPTIONS.codex after the existing\nconcrete rows so modelsForBackend(\"codex\")[0] stays \"gpt-5.4\" (#931\ndefault/heal target). Pure data addition; effectiveModel/sanitizeModel\nalready handle any concrete slug. Adds a test asserting optionsForBackend(\n\"codex\") includes the 3 new slugs.\n\nCloses #999\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#999] Add GPT-5.6 Sol/Terra/Luna to codex model dropdown",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-13T02:42:53Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "21eac479c0a12fc796858b31eaacf12536b5d615",
"body": "[#997] 2.6.0",
"is_bot": false,
"headline": "Merge pull request #998 from realproject7/task/997-release-v2-6-0",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-07T03:52:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7bd527d11500fd2a2744735681299252cb754289",
"body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#997] 2.6.0",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-07T03:49:01Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "dd06e2c748ad8a29ada3110dacaabddf2bdbb906",
"body": "[#961] Clarify Operator MCP VPS loopback and SSH forwarding troubleshooting",
"is_bot": false,
"headline": "Merge pull request #996 from realproject7/task/961-operator-mcp-docs",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-07T01:23:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "39d0723c581fe30660f45ba70b90187126ab16f4",
"body": "…ooting\n\nDocs-only. The VPS path in operator-mcp.md was technically correct but easy to\nmisread while troubleshooting. Adds a focused \"Remote / VPS troubleshooting\"\nsubsection under the existing Registration section (references it, no\nduplication):\n- restates the loopback rule (client always hits 12\n[…]\n examples carry a trailing `sleep` (keep stdin open so\nthe MCP server can flush responses before the pipe closes).\n\nNo code or behavior change.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#961] Clarify Operator MCP VPS loopback and SSH forwarding troublesh…",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-07T01:18:29Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ac199ce0cffc9851545e07e4716f188e56f1a868",
"body": "[#992] Auto-respawn agents on server restart when a batch is active",
"is_bot": false,
"headline": "Merge pull request #995 from realproject7/task/992-restart-respawn",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-07T01:16:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "38c78780503237b14674500fb1376d018d75cc35",
"body": "#972's clean shutdown kills agent PTYs on pm2/local restart, but nothing\nrespawned them — a project mid-batch silently stalled (no dev progress, no\nreviews) until an operator manually restarted head/dev/re1/re2. This bit every\nv2.5.x upgrade.\n\nrespawnActiveBatchAgents(cfg) runs once in the startup c\n[…]\nartRespawn.test.js: active→4 restored, idle→none, unknown/throw→\nnone, opt-out→none, idempotent-skip, failing-spawn logged, malformed projects.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#992] Auto-respawn agents on server restart when a batch is active",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-07T01:10:07Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "49d50e57c8f14f31c6acca81f15a971800b13a8d",
"body": "[#957] Lifecycle-aware cleanup of agent backend temp dirs",
"is_bot": false,
"headline": "Merge pull request #994 from realproject7/task/957-temp-cleanup",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-07T01:02:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "995d94ec98bbd0dea1d2c364fe80493f625ca53f",
"body": "Claude Code keeps temp under /tmp/claude-{uid} and never bounds it. On Linux\nhosts where /tmp has a per-user quota, that dir grows until the quota is\nexhausted, after which every Claude bash call fails silently (exit 1, no\noutput). QuadWork owns the agent lifecycle, so it cleans at known-safe moment\n[…]\n1 post-mortem) + install-vps.md note.\n\nReimplemented fresh against current main (old PR #960 bitrotted after\n#968/#972/#975 reworked index.js).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#957] Lifecycle-aware cleanup of agent backend temp dirs",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-07T00:56:51Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "cb9963ea43672b4db479d84d176e68eb81a44f43",
"body": "[#966] Reseed worktree CLAUDE.md alongside AGENTS.md",
"is_bot": false,
"headline": "Merge pull request #993 from realproject7/task/966-reseed-claude-md",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-07T00:49:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "24160df828049189221b95bce8537434fc84227d",
"body": "Auto-reseed refreshed worktree AGENTS.md on template upgrade but never\nCLAUDE.md, so the two instruction files drifted. _performReseedWrites now\nalso refreshes CLAUDE.md via the same reseedAgentsMd merge (fresh template\nwins per-H2, operator-added H2 sections preserved).\n\nGuard: only a provably Quad\n[…]\nroject's own hand-authored\nCLAUDE.md, or a missing one, is left byte-identical and recorded in skipped.\nAGENTS.md reseed behavior is unchanged.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#966] Reseed worktree CLAUDE.md alongside AGENTS.md",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-07T00:44:25Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "1d1b020ae5214e21ea3b20cb8bdfd7b33b97d8ff",
"body": "[#990] 2.5.1",
"is_bot": false,
"headline": "Merge pull request #991 from realproject7/task/990-release-v2-5-1",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-06T23:50:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af59d36034b758ff816ad7b13397fa2a25ac7072",
"body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#990] 2.5.1",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-06T23:47:22Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "7bf9fc14e9ecae8af7c1af15564c32ef5d8a197f",
"body": "[#988] Reverse-proxy dashboard token allowlist (v2.5.1 hotfix)",
"is_bot": false,
"headline": "Merge pull request #989 from realproject7/task/988-proxy-token-allowlist",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-06T23:46:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "777d9857a1a0a4c8be6ddc0d3c8167f6a2234d2d",
"body": "REQUEST CHANGES: isAllowedWsOrigin's #968 same-host fallback\n(u.host === req.headers.host) fired even for a LOOPBACK socket carrying a\nnon-loopback, non-allowlisted Host+Origin — so a forged/foreign matched pair\n(untrusted on-box proxy, DNS-rebinding page) with a valid token slipped\nthrough, violati\n[…]\ner.\n\nAdds the requested regression test: matched foreign Host+Origin + valid token\n→ WS 403 (not opened). Full suite still 61 passed, 0 failed.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#988] Close WS same-host fallback for forged foreign Host+Origin (re1)",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-06T23:42:52Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ccffe682e3c4a2b7cd0b8adec4a1c83ea84c397c",
"body": "The #968 loopback-only gate on /api/session-token 403s a dashboard served\nthrough an on-box authenticated reverse proxy (nginx forwards a public\nHost/Origin), so the terminal WS never gets a token and closes 1006.\n\nAdd opt-in config.trusted_dashboard_hosts: when the socket is loopback AND\nthe forwar\n[…]\nrusted) → 403. wsPtyAuth.test.js\n(no-allowlist case) still passes. docs/troubleshooting.md documents the\nauthenticated-nginx + allowlist setup.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#988] Reverse-proxy dashboard token allowlist (v2.5.1 hotfix)",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-06T23:36:23Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ddb3e434fe16c5e7979a5a71e431c548c5995054",
"body": "[#986] 2.5.0",
"is_bot": false,
"headline": "Merge pull request #987 from realproject7/task/986-release-v2-5-0",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-06T12:09:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8bb55d0d57a9540e2affa484b291f9621351889e",
"body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#986] 2.5.0",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-06T12:05:22Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f6533e992d8926b72dd358ed95493a9a20f828f5",
"body": "[#975] De-block the event loop",
"is_bot": false,
"headline": "Merge pull request #985 from realproject7/task/975-deblock-event-loop",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-06T12:00:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d1b61dfb40863b899d2080178faf61eed3bab56",
"body": "QuadWork is single-process, so any synchronous block on the main thread\nfreezes every agent's WS/HTTP/timers. Removes the 3 confirmed stalls,\nbehavior-preservingly (only the blocking removed).\n\n1. file-chat.js appendMessage — the retry loop slept via\n Atomics.wait(...,100), a synchronous 100ms blo\n[…]\nfailed. Server boots + shuts down cleanly on this branch.\n\nNote (not implemented here, per ticket): JSONL rotation is a separate\nfuture ticket.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#975] De-block the event loop (EPIC #967 Phase 3)",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-06T11:54:33Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ce7fc0cc5e419e3b2c3471f6794ea7bf1f81b2e2",
"body": "[#974] Setup hardening",
"is_bot": false,
"headline": "Merge pull request #984 from realproject7/task/974-setup-hardening",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-06T11:41:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3f7b3cc7feffd91d030a27204e72c67872e3dae4",
"body": "Fixes 5 confirmed setup/start defects + 2 folded lows. Changes confined\nto setup/start paths (bin/quadwork.js, server setup route, server listen);\nno steady-state runtime or agent-spawn behavior changes.\n\n1. Stale-branch brick — if a `worktree-<agent>` branch survives after its\n dir was deleted, s\n[…]\ndetached). Full\nsuite 60 passed / 0 failed. EADDRINUSE + stale-branch reuse also verified\nend-to-end against a live server and a real git repo.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#974] Setup hardening (EPIC #967 Phase 3)",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-06T11:33:32Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d7cf39f654645759041c919206f1a9a005f14ac2",
"body": "[#973] Frontend correctness bundle",
"is_bot": false,
"headline": "Merge pull request #983 from realproject7/task/973-frontend-correctness",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-06T11:20:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "000b5d4bc5cbde115b6ba7302fee8cd7b6833fdf",
"body": "Fixes 7 confirmed frontend-only bugs + 3 folded lows across the\ndashboard components. No server changes.\n\nChatPanel:\n- 403 auth banner was dead code (authRetryRef read, never incremented);\n now counts failures and clears the tally on a clean poll / project switch.\n- project-switch poll race: an in-\n[…]\nager:\n- bootstrap WebSocket was never closed (leak); closes it after use and polls\n /api/sessions for liveness instead of a fixed spawn sleep.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#973] Frontend correctness bundle (EPIC #967 Phase 3)",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-06T11:08:17Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a33f427d658fa7b6c0a4f9c7595f675880864fb2",
"body": "[#971] Atomic config writes + field-scoped flag endpoint",
"is_bot": false,
"headline": "Merge pull request #982 from realproject7/task/971-atomic-config",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-06T10:54:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c52f246a26ceccb10c6c7ba7bb4756308105d782",
"body": "…view)\n\n@re1 (re-review): the section-merge PATCH intentionally never drops projects, so\na Settings \"Remove\" (which filtered the project from local state and relied on\nsave) no longer persisted — the project stayed on disk.\n\n- routes.js: new DELETE /api/projects/:id — removes the project atomically \n[…]\nwaway port): Settings \"Remove\" → Confirm\nfires DELETE /api/projects/:id; the project is gone from disk, others intact.\nSuite 59/0/2, tsc clean.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#971] Add DELETE /api/projects/:id so Settings \"Remove\" persists (re…",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-06T05:06:28Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6b3aa60731044ac54be5f7ecfa8c5b90aeae3ffb",
"body": "@re1: SettingsPage.save was the last frontend caller PUTting the whole config,\nwhich the #971 AC forbids. Add a section-merge PATCH /api/config backed by\nupdateConfig and move the Settings save to it.\n\n- routes.js: new PATCH /api/config — merges the provided sections into the\n freshest on-disk conf\n[…]\nowser (throwaway port): a Settings save fires\nPATCH /api/config (no PUT); operator_name persists, idle flag preserved. Suite\n59/0/2, tsc clean.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#971] Migrate SettingsPage.save off whole-config PUT (review)",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-06T04:59:51Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "53274b7d9df2db1339ba701fd47646656a409037",
"body": "EPIC #967 Phase 2 — make config the single serialization point, killing the\nwhole-config read-modify-write races.\n\nconfig.js:\n- writeConfig is now ATOMIC (write a `${pid}.tmp` file, then renameSync onto\n config.json — the migrate-ac.js pattern). The old in-place writeFileSync\n could truncate confi\n[…]\n /api/projects/:id/flags (no whole-config PUT); the flag persists, unrelated\nfields + raw operator_name are unchanged. Never touched port 8400.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#971] Atomic config writes + field-scoped flag endpoint",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-06T04:49:47Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3b2d415d5adadf52dd3b38d6184c655031746c53",
"body": "[#972] Clean shutdown() + fix quadwork stop PID handling",
"is_bot": false,
"headline": "Merge pull request #981 from realproject7/task/972-shutdown-cleanup",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-06T04:32:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82fcc90c93e24678c06851652881aa0ae3ce6f07",
"body": "EPIC #967 Phase 2. Two lifecycle defects, isolated to the shutdown/stop paths.\n\nshutdown() (server/index.js) only stopped butler + file-chat, so Ctrl+C:\n- orphaned the detached+unref caffeinate (no -t) → the Mac never slept again,\n- left agent PTYs (and CLI children holding worktree locks) alive,\n- \n[…]\nd-to-end (throwaway\nport): server.pid written, stop → clean shutdown, no orphan, pid removed.\nSuite 57/0/2, tsc clean; never touched port 8400.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#972] Clean shutdown() + fix `quadwork stop` PID handling",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-06T03:49:55Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d741026761257483f4f875ed81fb33e2ef2b3f1a",
"body": "[#968] Auth the terminal WS + PTY-write endpoints (Origin + session token)",
"is_bot": false,
"headline": "Merge pull request #980 from realproject7/task/968-ws-pty-auth",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-06T03:32:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c55c0661b54f89eee25c36af4267b85a5c14b139",
"body": "Review (@re1): the token endpoint gated on req.ip alone, so a DNS-rebound\npage (attacker domain → 127.0.0.1) or a same-host reverse proxy keeps the\nsocket on loopback while the browser's Host/Origin is a REMOTE name, and\ncould pull the session token to a non-local origin — then authenticate\n/ws/term\n[…]\nas documented.\n\nLocal dashboard on 127.0.0.1/localhost is unaffected (re-verified: attach +\ntype on a throwaway port). Suite 55/0/2, tsc clean.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#968] Harden /api/session-token against DNS rebinding / reverse proxy",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-06T03:26:02Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3d11b6676c4d703ed6e10bc6c6123b92d895c21b",
"body": "…oken)\n\nEPIC #967 Phase 1 — close the top security hole: the terminal WebSocket\nand PTY-write endpoints had no auth or Origin check, so any web page the\noperator visited could open ws://127.0.0.1:8400/ws/terminal and inject\nkeystrokes into an agent PTY (remote shell over tailnet).\n\nBackend (server/i\n[…]\nand asserts foreign-origin/no-token WS rejected, valid token accepted,\nREST token gate, /api/config redaction + PUT preservation. Suite 55/0/2.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#968] Auth the terminal WS + PTY-write endpoints (Origin + session t…",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-06T03:18:34Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "48f78922f2464c3813918be706ce23b7c80e7a2b",
"body": "…ards\n\n[#970] Guard activity/log, bridge sender, reviewer-token path",
"is_bot": false,
"headline": "Merge pull request #979 from realproject7/task/970-routes-security-gu…",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-06T02:48:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4bb9e94b73fee28f462c2a8b4d0544a29c482ef7",
"body": "EPIC #967 Phase 1 security — three isolated local-attack-surface gaps in\nserver/routes.js, each with a test.\n\n1. POST /api/activity/log: `project` had only a non-empty-string check but\n flows into path.join(CONFIG_DIR, project, \"activity.jsonl\") → mkdir +\n appendFileSync, i.e. an arbitrary-path \n[…]\nt.js fixtures moved to\nin-root worktree paths to match the now-restricted behavior (intent preserved).\nSuite: 54 passed / 0 failed / 2 skipped.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#970] Guard activity/log, bridge sender, reviewer-token path",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-05T03:14:14Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "97b9d9fd106a96a0bbd20872818266f65354576e",
"body": "[#969] Fix QueueManager markdown XSS via react-markdown",
"is_bot": false,
"headline": "Merge pull request #978 from realproject7/task/969-queuemanager-xss",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-05T02:59:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3a74bdbbcd3284cfde21e09f4ccd84660d0e085c",
"body": "Add a react-markdown `components.a` override so preview links keep the\nprior `target=\"_blank\" rel=\"noopener noreferrer\"` behavior — clicking a\nlink no longer navigates the SPA away from (and discards) the queue\neditor. react-markdown still sanitizes the href, so this is styling/UX\nparity only, no security change.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#969] Preserve preview links' new-tab behavior",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-05T02:54:06Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "4793c6858d7fd5d2b98dba34ec143f6a394b6ace",
"body": "EPIC #967 Phase 1 (security). QueueManager's preview built HTML with a\nhand-rolled renderMarkdown and injected it via dangerouslySetInnerHTML.\nGitHub issue titles flow into that markdown (generateTemplate line ~50),\nso a title like `[x](javascript:alert(1))` or an attribute-breakout\n(`\" onmouseover=\n[…]\nl for normal\n markdown. Runs in the plain-node suite via react-dom/server.\n\nNo new dependency. tsc + eslint clean; suite 53 passed / 0 failed.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#969] Fix QueueManager markdown XSS via react-markdown",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-05T02:49:21Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f6aead0bf2b440ee3e22b6236cd2f6ea3e4509f2",
"body": "[#976] Add CI test-gate, release gate, and pack-smoke asset coverage",
"is_bot": false,
"headline": "Merge pull request #977 from realproject7/task/976-ci-test-gate",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-05T02:42:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95c8016ff5925c8bafe2d1e14e0f1aea7256efb7",
"body": "Phase 0 of EPIC #967: PRs and pushes to main had no CI, so the\npack-smoke crash-loop guard (#937/#939) only ran on manual `npm test`,\nand the release scripts published with no test step.\n\n- .github/workflows/ci.yml: run the server discovery suite on PRs and\n push-to-main (Node 24.x, matching the VP\n[…]\nI\" claim to reference the new\n workflow now that CI actually exists.\n\nNo runtime code changes. Existing suite (52 runnable, 2 skipped) passes.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#976] Add CI test-gate, release gate, and pack-smoke asset coverage",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-05T02:33:26Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a344307b677175ac1eb4138e4ea43228bf06f7e5",
"body": "[#964] 2.4.0",
"is_bot": false,
"headline": "Merge pull request #965 from realproject7/task/964-release-v2-4-0",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-04T03:09:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "341198502a4d6047d908aeb03a8c737d8fa1fe7e",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#964] 2.4.0",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-04T03:06:44Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "354b90f5531cf1376ed16379eb0bc1d2aca0139e",
"body": "[#962] Agent guidelines v7 — EPIC alignment, design fidelity, kill-list review, evidence-bound reporting",
"is_bot": false,
"headline": "Merge pull request #963 from realproject7/task/962-agent-guidelines-v7",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-07-04T03:05:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d23c62e81568dd64a514c361e6b7ecb968fe821b",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#962] Allow reviewer memory-card writes as sole no-write exception",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-04T03:01:58Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "df60faac0473677be11a81c234d9e2fda7be0400",
"body": "…st review, evidence-bound reporting\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#962] Agent guidelines v7 — EPIC alignment, design fidelity, kill-li…",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-07-03T04:55:59Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "8638a531dcbbe4d7b2794c1ccc95280284e8b2ba",
"body": null,
"is_bot": false,
"headline": "2.3.9",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-11T07:40:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0fbd4d609c7fb63608b7b2a8fd51b1f816fb5106",
"body": "[#958] Add Fable 5 (claude-fable-5) to the agent model catalog",
"is_bot": false,
"headline": "Merge pull request #959 from realproject7/task/958-fable5-model-catalog",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-06-11T07:40:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1657297c1d1cb74b6456c1902227b3b8edbdf245",
"body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#958] Add Fable 5 (claude-fable-5) to the claude model catalog",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-11T07:29:09Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a91b908366fbc6cf5538a37355b4c8964d470924",
"body": null,
"is_bot": false,
"headline": "2.3.8",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-07T21:18:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "37d9576e42be62708d72a57d10779770597752a2",
"body": "…stdio\n\n[#948] Document operator MCP stdio JSON-RPC",
"is_bot": false,
"headline": "Merge pull request #956 from realproject7/task/948-docs-operator-mcp-…",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-06-07T13:02:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cc26b5e8c549fd253ef040097c5ee307679fb9d9",
"body": null,
"is_bot": false,
"headline": "[#948] Document operator MCP stdio JSON-RPC",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-07T13:00:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "69ce351b43251401e6f32527eaa5ce6850180312",
"body": "…token\n\n[#949] Add reviewer account settings",
"is_bot": false,
"headline": "Merge pull request #955 from realproject7/task/949-settings-reviewer-…",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-06-07T12:57:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "811595271a9dddf2afa07f08e35119d16c9ef789",
"body": null,
"is_bot": false,
"headline": "[#949] Preserve reviewer user on config saves",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-07T12:56:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "19b66c2a7ed44d21c37913d29deb7e0b654a95c7",
"body": null,
"is_bot": false,
"headline": "[#949] Use neutral reviewer token fixture",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-07T12:54:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "01aae55a93000a397becce5737692d76730cd67f",
"body": null,
"is_bot": false,
"headline": "[#949] Add reviewer account settings",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-07T12:51:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "468abd838cb05b50b4123d158341635fd1b8010f",
"body": "…-clone\n\n[#947] Refresh setup clones before worktrees",
"is_bot": false,
"headline": "Merge pull request #954 from realproject7/task/947-setup-wizard-empty…",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-06-07T12:45:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "400640bc0f055b009241448bbfac0a7348579a7d",
"body": null,
"is_bot": false,
"headline": "[#947] Refresh setup clones before worktrees",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-07T12:42:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3337c4b0aae504b99e69b57fc896f3a6009e92c2",
"body": "…ive-close-link\n\n[#951] Link batch progress via native close events",
"is_bot": false,
"headline": "Merge pull request #953 from realproject7/task/951-batch-progress-nat…",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-06-07T12:36:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "28a2c7fd6ed78ff7a3ed3a388b4a2394531fa8ce",
"body": null,
"is_bot": false,
"headline": "[#951] Link batch progress via native close events",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-07T12:34:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ae49f67398c85d5d9b053126233f102069577a73",
"body": "…minal-cache\n\n[#950] Cache terminal batch progress rows",
"is_bot": false,
"headline": "Merge pull request #952 from realproject7/task/950-batch-progress-ter…",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-06-07T12:29:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2d08bad7329b069b2092dece79516da8017e085",
"body": null,
"is_bot": false,
"headline": "[#950] Let fresh progress override terminal cache",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-07T12:27:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1e87723c0f26259a7a0c1c7225f416d62296c8d0",
"body": null,
"is_bot": false,
"headline": "[#950] Cache terminal batch progress rows",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-07T12:23:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc13d536048db2439ad807264556c153e7c372c7",
"body": "…ED for batch tracking\n\nA PR titled without [#<issue>] (even with \"Closes #N\" in the body) isn't linked by\nQuadWork's title-based tracker, so the closed item flaps queued(retrying)<->closed and\nburns GitHub API re-checking it (live repro: plotlink-ows #488 / PR #491). Reinforces the\nexisting convention pending the proper #951 fix (use GitHub's native close-link).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#951] dev seed: stress that the [#<issue>] PR title prefix is REQUIR…",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-07T12:04:20Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "7b7531fbfb092f1e0a5ed443dabfb3957fd0503b",
"body": null,
"is_bot": false,
"headline": "2.3.7",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-04T07:18:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "40c835616c443b2da4901d14bdf74fea27b612b4",
"body": "…pshot\n\n[#943] Read persisted GITHUB.md for code-batch progress on cold cache; cap + soft-fail fallback",
"is_bot": false,
"headline": "Merge pull request #946 from realproject7/task/943-batch-progress-sna…",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-06-04T07:13:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6fb40fedf00da5826d65844c88a5553eac333077",
"body": "…; cap + soft-fail fallback\n\nCode-batch progress read the in-memory _graphqlCache, which is empty after a\nrestart until the next board refresh. Every item then fell through to the #828\nper-item live fallback (gh issues/N + Search) which (a) fired ALL items\nconcurrently with no cap and (b) rendered a\n[…]\nrency-capped (observed max ≤ GH_MAX_CONCURRENT) and\nsoft-fails every transient error to \"queued (retrying)\", never \"fetch failed\".\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#943] Read persisted GITHUB.md for code-batch progress on cold cache…",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-04T07:09:17Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "18268188e0791101b41ffe85984597591f6882f0",
"body": "[#944] Persist pinned_projects & sidebar_groups via field-scoped endpoints",
"is_bot": false,
"headline": "Merge pull request #945 from realproject7/task/944-persist-pins",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-06-04T06:55:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "610586462fd12b574a2b7f0eb4229144a401c438",
"body": "…oints\n\nPins/groups reset on server restart because all persistence went through the\nwhole-config GET→mutate→PUT path. Any writer holding a stale snapshot (and a\nrestart fires several at once: settings, idle, bridge/queue/trigger widgets)\nsilently dropped pins/groups on its next full PUT.\n\nFix:\n- Ad\n[…]\noups; malformed payloads\n→ 400 leaving config unchanged; pins/groups survive the startup config rewrite\nand a version-bump reseed.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "[#944] Persist pinned_projects & sidebar_groups via field-scoped endp…",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-04T06:50:30Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "befeb2338b126e94c128d9c2823e859ee93f1fb6",
"body": null,
"is_bot": false,
"headline": "2.3.6",
"author_name": "Cho Young-Hwi",
"author_login": "realproject7",
"committed_at": "2026-06-02T08:54:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "30ee89691eef1e5579082fcfede07ebace5318ae",
"body": "[#939] Add pack-smoke CI guard against runtime requires missing from the tarball",
"is_bot": false,
"headline": "Merge pull request #942 from realproject7/task/939-pack-smoke",
"author_name": "Project7",
"author_login": "realproject7",
"committed_at": "2026-06-02T08:48:30Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 97,
"commits_last_year": 1404,
"latest_release_at": "2026-07-25T01:47:28Z",
"latest_release_tag": "v2.7.1",
"releases_from_tags": false,
"days_since_last_push": 4,
"active_weeks_last_year": 17,
"days_since_latest_release": 11,
"mean_days_between_releases": 5.9
},
"artifacts": {
"collected": true,
"structure": [],
"declarations": [
{
"name": "quadwork",
"path": "package.json",
"tokens": [
"npm.bin"
],
"ecosystem": "npm"
}
]
},
"community": {
"has_readme": true,
"has_license": true,
"readme_badges": {
"hosts": [
"shields.io"
],
"total": 6,
"header": 0,
"collected": true,
"has_inspect_badge": false
},
"has_description": true,
"has_contributing": false,
"health_percentage": 42,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "quadwork",
"exists": true,
"license": "MIT",
"keywords": [
"ai",
"agents",
"multi-agent",
"coding",
"dashboard",
"terminal",
"claude",
"codex",
"quadwork"
],
"ecosystem": "npm",
"categories": [],
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/quadwork",
"declared_type": null,
"is_deprecated": false,
"latest_version": "2.7.1",
"repository_url": "https://github.com/realproject7/quadwork",
"versions_count": 101,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 2426,
"first_published_at": "2026-04-01T13:17:10.574000Z",
"latest_published_at": "2026-07-25T01:54:02.442000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 11
}
]
},
"popularity": {
"forks": 9,
"stars": 29,
"watchers": 0,
"fork_history": {
"days": [
{
"date": "2026-04-21",
"count": 4
},
{
"date": "2026-04-24",
"count": 3
},
{
"date": "2026-04-30",
"count": 1
},
{
"date": "2026-07-30",
"count": 1
}
],
"complete": true,
"collected": 9,
"total_forks": 9
},
"star_history": null,
"open_issues_and_prs": 3
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": true,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 243846,
"source_files_sampled": 148,
"oversized_source_files": 3,
"agent_instruction_files": [
"CLAUDE.md",
"templates/CLAUDE.md"
],
"agent_instruction_max_bytes": 3586
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 110,
"malicious_count": 0,
"assessed_package": "npm:quadwork@2.7.1",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "discord.js",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^14.18.0"
},
{
"name": "express",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^5.2.1"
},
{
"name": "multer",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^2.1.1"
},
{
"name": "node-pty",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.2.0-beta.12"
},
{
"name": "ws",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^8.20.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 478,
"open_issues": 3,
"closed_ratio": 0.995,
"closed_issues": 543,
"closed_unmerged_prs": 3
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "realproject7",
"commits": 1302,
"avatar_url": "https://avatars.githubusercontent.com/u/15100667?v=4"
},
{
"type": "User",
"login": "gracefully91",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/133555466?v=4"
},
{
"type": "User",
"login": "ggomaeng",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/18402191?v=4"
}
],
"contributors_sampled": 3,
"top_contributor_share": 0.998
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml"
],
"has_docs_dir": true,
"linter_configs": [
"eslint.config.mjs"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "13 out of 13 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 10,
"reason": "all changesets reviewed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 6,
"reason": "project has 2 contributing companies or organizations -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 3,
"reason": "dependency not pinned by hash detected -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "34 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "44d820ce0c135b274ab0aa6abb720af3190746ca",
"ran_at": "2026-08-05T08:52:11Z",
"aggregate_score": 4.4,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"recent_prs": {
"merged_7d": 1,
"decided_7d": 1,
"merged_30d": 25,
"authors_30d": 1,
"decided_30d": 26,
"sample_size": 60,
"window_days": 30,
"sample_exhausted": false,
"authors_probed_30d": 1,
"newcomer_merged_30d": 0,
"bot_prs_excluded_30d": 0,
"newcomer_authors_30d": 0,
"newcomer_decided_30d": 0
},
"ci_last_run_at": "2026-08-01T04:16:40Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-08-01T04:15:13Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 1025,
"created_at": "2026-08-01T04:10:16Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1026,
"created_at": "2026-08-01T04:33:45Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 1027,
"created_at": "2026-08-01T04:34:05Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/realproject7/quadwork",
"host": "github.com",
"name": "quadwork",
"owner": "realproject7"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": "The weighted overall 67 is calibrated to 78 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 67,
"calibrated": 78,
"calibration": "2026-08-02"
}
}
],
"value": 78,
"inputs": {
"security": 55,
"vitality": 86,
"community": 44,
"governance": 64,
"calibration": "2026-08-02",
"engineering": 80,
"ai_readiness": 67,
"weighted_overall_raw": 67
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 86,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 76,
"inputs": {
"commits_last_year": 1404,
"human_commit_share": 1,
"days_since_last_push": 4,
"active_weeks_last_year": 17
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 4 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 4
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "17/52 weeks with commits",
"points": 11.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 17
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "1404 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 1404
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "exceptional",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 97,
"latest_release_tag": "v2.7.1",
"releases_from_tags": false,
"days_since_latest_release": 11,
"mean_days_between_releases": 5.9
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "97 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 97
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 11 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 11
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~5.9 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 5.9
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "weak",
"name": "Community & Adoption",
"value": 44,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 31,
"inputs": {
"forks": 9,
"stars": 29,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "29 stars",
"points": 23.5,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 29
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "9 forks",
"points": 7.5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 9
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": 6,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [
"shields.io"
],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 56,
"inputs": {
"packages": [
"quadwork"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 2426
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "2,426 downloads/month across npm",
"points": 45.1,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 2426,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 64,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 19,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 3,
"top_contributor_share": 0.998
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "3 contributors",
"points": 4.1,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 3
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 6,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "exceptional",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"merged_prs": 478,
"open_issues": 3,
"closed_issues": 543,
"prs_merged_7d": 1,
"prs_decided_7d": 1,
"prs_merged_30d": 25,
"prs_decided_30d": 26,
"issue_closed_ratio": 0.995,
"closed_unmerged_prs": 3,
"first_time_authors_30d": 0,
"first_time_prs_merged_30d": 0,
"first_time_prs_decided_30d": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 41.8,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "478/481 decided PRs merged",
"points": 29.8,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 478,
"decided": 481
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "all changesets reviewed",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 54,
"inputs": {
"followers": 30,
"owner_type": "User",
"is_verified": null,
"owner_login": "realproject7",
"public_repos": 29,
"account_age_days": 3949
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "30 followers of realproject7",
"points": 10.7,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 30,
"login": "realproject7"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "29 public repos, account ~10 yr old",
"points": 22.8,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 29
}
},
{
"code": "account_age_years",
"params": {
"years": 10
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"quadwork"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 11
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 11 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 11
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "101 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 101
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 80,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "excellent",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "eslint.config.mjs",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.mjs"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "13 out of 13 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 55,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "weak",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 44,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 4.4
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "13 out of 13 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "all changesets reviewed",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 30 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 3",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "34 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "exceptional",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:quadwork@2.7.1 runtime dependency closure — what installing the published package pulls in — 110 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "npm:quadwork@2.7.1",
"assessed": 110
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 110,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "exceptional",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 110,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 4
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 67,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.96,
"agent_instruction_files": [
"CLAUDE.md",
"templates/CLAUDE.md"
],
"agent_instruction_max_bytes": 3586
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "CLAUDE.md, templates/CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "CLAUDE.md, templates/CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "96 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 96,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 67,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"package-lock.json"
],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"tsconfig.json"
],
"agent_commit_share": 0.47,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "eslint.config.mjs",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.mjs"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "47 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 47,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 81,
"inputs": {
"primary_language": "JavaScript",
"largest_source_bytes": 243846,
"source_files_sampled": 148,
"oversized_source_files": 3
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "JavaScript with type-check config (tsconfig.json)",
"points": 27,
"status": "partial",
"details": [
{
"code": "typecheck_config_language",
"params": {
"files": "tsconfig.json",
"language": "JavaScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "3/148 source files over 60KB",
"points": 53.9,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 148,
"oversized": 3
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"example_dirs": [],
"has_mcp_signal": true,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 20,
"status": "met",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"top": [
"library",
"application"
],
"labels": [
"cli",
"library",
"network-service",
"web-ui",
"chat-bot"
],
"scores": {
"cli": 10,
"web-ui": 4,
"library": 6,
"chat-bot": 4,
"mcp-server": 3,
"network-service": 4
},
"primary": "cli",
"evidence": [
{
"tier": "declared",
"label": "cli",
"source": "npm.bin",
"weight": 10
},
{
"tier": "distribution",
"label": "library",
"source": "registry:npm",
"weight": 6
},
{
"tier": "dependencies",
"label": "chat-bot",
"source": "dep:discord.js",
"weight": 4
},
{
"tier": "dependencies",
"label": "network-service",
"source": "dep:express",
"weight": 4
},
{
"tier": "structure",
"label": "mcp-server",
"source": "mcp_signal",
"weight": 3
},
{
"tier": "description",
"label": "web-ui",
"source": "description:web-ui",
"weight": 2
},
{
"tier": "tags",
"label": "web-ui",
"source": "tag:dashboard",
"weight": 2
}
],
"artifacts": [
{
"path": "package.json",
"labels": [
"cli"
],
"ecosystem": "npm"
}
],
"confidence": "high",
"host_extension": false,
"runs_as_process": true,
"consumed_by_code": true
},
"metrics_version": "2.5.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-08-05T08:52:27.142415Z",
"schema_version": "0.31.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/r/realproject7/quadwork.svg",
"full_name": "realproject7/quadwork",
"license_state": "standard",
"license_spdx": "MIT"
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with realproject7/quadwork. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.5.0, schema v0.31.0 — full methodology · metrics wiki.
