Public recordModerate
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-30 06:21 UTC
rjrodger / aontu
Unifier
rjrodger/aontu holds a health index of 62 out of 100, placing it in the Moderate band. It scores highest on Vitality (89/100) and lowest on Community & Adoption (38/100). It was last updated today. A single contributor accounts for most of its recent work.
62
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
62
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
Richard RodgerPersonal account
557 followers179 public repossince Oct 2009
This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish | Tags |
|---|---|---|---|---|---|---|
| Go | github.com/rjrodger/aontu/go | v0.1.6 | - | 6 | 0 days ago | — |
| npm | aontu | 0.48.2 | 2,298 | 70 | 8 days ago | unify |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
89
Development activity
81Good
How it's scored
| 36/36 | Push recency — last push 0 days ago |
| 16.6/36 | Commit cadence — 24/52 weeks with commits |
| 18/18 | Commit volume — 179 commits in the last year |
| 10/10 | OpenSSF Scorecard: Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
Inputs used
| commits_last_year | 179 |
| human_commit_share | 1 |
| days_since_last_push | 0 |
| active_weeks_last_year | 24 |
Release discipline
100Excellent
How it's scored
| 27/27 | Ships releases — 7 releases published |
| 36/36 | Release recency — latest release 0 days ago |
| 27/27 | Release cadence — a release every ~14.9 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 7 |
| latest_release_tag | go/v0.1.6 |
| releases_from_tags | no |
| days_since_latest_release | 0 |
| mean_days_between_releases | 14.9 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
38
Popularity & adoption
16Critical
How it's scored
| 15.5/60 | Stars — 10 stars |
| 0/25 | Forks — 0 forks |
| 0/15 | Watchers — 1 watchers |
Inputs used
| forks | 0 |
| stars | 10 |
| watchers | 1 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
50Moderate
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (MIT) |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Ecosystem adoption (downloads)
56Moderate
How it's scored
| 44.8/80 | Monthly downloads — 2,298 downloads/month across go, npm |
| 0/20 | Registry dependents — not reported by this ecosystem |
Inputs used
| packages | github.com/rjrodger/aontu/go, aontu |
| dependents | — |
| ecosystems | go, npm |
| total_downloads | — |
| monthly_downloads | 2,298 |
Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
53
Maintainer resilience (bus factor)
22Critical
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 3.8/22.5 | Commit distribution — top contributor authored 83% of commits |
| 2.7/13.5 | Contributor breadth — 2 contributors |
| 6/10 | OpenSSF Scorecard: Contributors — project has 2 contributing companies or organizations -- score normalized to 6 |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 2 |
| top_contributor_share | 0.831 |
Issue & PR responsiveness
38At risk
How it's scored
| 0/46.8 | Issue resolution — 0% of issues closed |
| 38.2/38.3 | PR acceptance — 12/12 decided PRs merged |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/19 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 12 |
| open_issues | 5 |
| closed_issues | 0 |
| issue_closed_ratio | 0 |
| closed_unmerged_prs | 0 |
Ownership & stewardship
68Moderate
How it's scored
| 10/30 | Ownership backing — personal (user) account |
| 0/20 | Verified domain — not applicable to user accounts |
| 19.7/25 | Owner reach — 557 followers of rjrodger |
| 25/25 | Track record — 179 public repos, account ~16 yr old |
Inputs used
| followers | 557 |
| owner_type | User |
| is_verified | — |
| owner_login | rjrodger |
| public_repos | 179 |
| account_age_days | 6,134 |
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.
Package maintenance
100Excellent
How it's scored
| 25/25 | Published & resolvable — 2 package(s) on go, npm |
| 35/35 | Publish recency — latest publish 0 days ago |
| 20/20 | Version history — 70 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | github.com/rjrodger/aontu/go, aontu |
| ecosystems | go, npm |
| any_deprecated | no |
| min_days_since_publish | 0 |
Engineering Quality
Are baseline engineering and documentation practices in place?
71
Engineering practices
68Moderate
How it's scored
| 24/24 | CI workflows — 1 workflow(s) |
| 24/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 20/20 | OpenSSF Scorecard: CI-Tests — 6 out of 6 merged PRs checked by a CI test -- score normalized to 10 |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Documentation
75Good
How it's scored
| 30/30 | README |
| 25/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 10/10 | Repository description |
| 0/10 | Topics |
| 10/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | yes |
| homepage | — |
| has_readme | yes |
| has_docs_dir | yes |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
54
Security posture
42At risk
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 2.5/2.5 | CI-Tests — 6 out of 6 merged PRs checked by a CI test -- score normalized to 10 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/19 approved changesets -- score normalized to 0 |
| 1.5/2.5 | Contributors — project has 2 contributing companies or organizations -- score normalized to 6 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — no data |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 16 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 2 |
| scorecard_aggregate | 4.2 |
Excluded from scoring (no data or not applicable): packaging, signed_releases. Remaining weights renormalized.
Dependency advisories
100Excellent
How it's scored
| 35/35 | Direct dependencies free of known advisories — no direct dependency carries a known advisory |
| 25/25 | Indirect dependencies free of known advisories — no indirect dependency carries a known advisory |
| 0/40 | No advisories left outstanding — no advisory carries a publication date |
Inputs used
| source | osv |
| advisories | 0 |
| affected_packages | 0 |
| assessed_packages | 6 |
| unassessed_packages | 0 |
| affected_by_severity | none |
| direct_affected_packages | 0 |
Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:aontu@0.48.2 runtime dependency closure — what installing the published package pulls in — 6 packages. Reachability is not analyzed.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
81
Agent context & guidance
85Excellent
How it's scored
| 45/45 | Agent instructions — AGENTS.md, CLAUDE.md |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 80 of 100 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.8 |
| agent_instruction_files | AGENTS.md, CLAUDE.md |
| agent_instruction_max_bytes | 14,507 |
How it's scored
| 18/18 | One-command bootstrap — Makefile |
| 22/22 | Automated tests |
| 0/11 | Lint / format config |
| 11/11 | Static type checking — editors/vscode/tsconfig.json, ts/src/tsconfig.json, ts/test/tsconfig.json |
| 10/10 | Reproducible environment — lockfile |
| 10/10 | Demonstrated agent practice — 40 of the last 100 commits agent-authored or agent-credited |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | go.sum |
| has_dockerfile | no |
| typed_language | yes |
| bootstrap_files | Makefile |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | editors/vscode/tsconfig.json, ts/src/tsconfig.json, ts/test/tsconfig.json |
| agent_commit_share | 0.4 |
| toolchain_manifests | go/go.mod |
| dependency_bot_commit_share | 0 |
Code legibility for models
100Excellent
How it's scored
| 45/45 | Type-checkable code — TypeScript (statically typed) |
| 55/55 | Manageable file sizes — 0/126 source files over 60KB |
Inputs used
| primary_language | TypeScript |
| largest_source_bytes | 38,391 |
| source_files_sampled | 126 |
| oversized_source_files | 0 |
Key facts
10GitHub stars
2contributors
179commits, last 12 months
0days since last push
7releases
1bus factor
5open issues
Go, npmpackage ecosystems
Data collection warnings
- Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
More detail
OpenSSF Scorecard 4.2 / 10
4.2aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 10 | CI-Tests | 6 out of 6 merged PRs checked by a CI test -- score normalized to 10 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/19 approved changesets -- score normalized to 0 |
| 6 | Contributors | project has 2 contributing companies or organizations -- score normalized to 6 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| n/a | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| n/a | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
Direct dependencies 10
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| Go | github.com/tabnas/expr/go | v0.4.0 | go/go.mod |
| Go | github.com/tabnas/jsonic/go | v0.4.0 | go/go.mod |
| Go | github.com/tabnas/multisource/go | v0.4.1 | go/go.mod |
| Go | github.com/tabnas/path/go | v0.2.1 | go/go.mod |
| npm | @tabnas/debug | 0.2.5 | ts/package.json |
| npm | @tabnas/directive | 0.2.1 | ts/package.json |
| npm | @tabnas/expr | 0.2.3 | ts/package.json |
| npm | @tabnas/jsonic | 0.3.1 | ts/package.json |
| npm | @tabnas/multisource | 0.3.2 | ts/package.json |
| npm | @tabnas/path | 0.2.1 | ts/package.json |
All dependencies 21
Full resolved dependency set from the GitHub dependency graph: 10 direct and 11 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
| Registry | Package | Version | Relation |
|---|---|---|---|
| Go | github.com/tabnas/expr/go | v0.4.0 | direct |
| Go | github.com/tabnas/jsonic/go | v0.4.0 | direct |
| Go | github.com/tabnas/multisource/go | v0.4.1 | direct |
| Go | github.com/tabnas/path/go | v0.2.1 | direct |
| npm | @tabnas/debug | 0.2.0 | direct |
| npm | @tabnas/directive | 0.2.0 | direct |
| npm | @tabnas/expr | 0.2.0 | direct |
| npm | @tabnas/jsonic | 0.2.0 | direct |
| npm | @tabnas/multisource | 0.2.0 | direct |
| npm | @tabnas/path | 0.2.0 | direct |
| Go | github.com/tabnas/directive/go | v0.4.0 | indirect |
| Go | github.com/tabnas/json/go | v0.4.0 | indirect |
| Go | github.com/tabnas/parser/go | v0.4.0 | indirect |
| npm | @types/node | 26.1.0 | indirect |
| npm | @types/node | ^22 | indirect |
| npm | @types/vscode | ^1.75.0 | indirect |
| npm | @vscode/vsce | ^3.2.0 | indirect |
| npm | memfs | 4.59.0 | indirect |
| npm | typescript | 6.0.3 | indirect |
| npm | typescript | ^5 | indirect |
| npm | vscode-languageclient | ^9.0.1 | indirect |
Dependency advisories 0
Installing npm:aontu@0.48.2 pulls in 6 packages, direct and transitive: 0 carry known advisories, of which 0 are direct dependencies.
No known advisories affect the assessed dependencies.
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 3517,
"has_wiki": true,
"homepage": null,
"languages": {
"Go": 181028,
"Lua": 346,
"Makefile": 1297,
"Emacs Lisp": 3573,
"JavaScript": 26476,
"TypeScript": 394284,
"Vim Script": 1838
},
"pushed_at": "2026-07-29T16:21:21Z",
"created_at": "2020-11-09T10:20:18Z",
"owner_type": "User",
"updated_at": "2026-07-29T16:21:26Z",
"description": "Unifier",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript",
"Go"
]
},
"owner": {
"blog": "http://richardrodger.com",
"name": "Richard Rodger",
"type": "User",
"login": "rjrodger",
"company": null,
"location": "Ireland",
"followers": 557,
"avatar_url": "https://avatars.githubusercontent.com/u/138608?v=4",
"created_at": "2009-10-12T10:52:33Z",
"is_verified": null,
"public_repos": 179,
"account_age_days": 6134
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "go/v0.1.6",
"kind": "other",
"published_at": "2026-07-29T09:16:56Z"
},
{
"tag": "go/v0.1.5",
"kind": "other",
"published_at": "2026-07-21T16:25:58Z"
},
{
"tag": "ts/v0.48.2",
"kind": "other",
"published_at": "2026-07-21T16:25:54Z"
},
{
"tag": "go/v0.1.4",
"kind": "other",
"published_at": "2026-06-22T22:33:56Z"
},
{
"tag": "go/v0.1.3",
"kind": "other",
"published_at": "2026-06-09T14:51:32Z"
},
{
"tag": "go/v0.1.2",
"kind": "other",
"published_at": "2026-06-08T17:52:30Z"
},
{
"tag": "go/v0.1.1",
"kind": "other",
"published_at": "2026-04-30T17:35:05Z"
}
],
"recent_commits": [
{
"oid": "b79fbf2b2e2777169d0db3d8aaeca2fb5dd6e27c",
"body": "… root-spread-over-var fixes (#17)\n\n* Restrict comments to # in TS parser, matching Go and the language spec\n\nThe TS parser inherited jsonic's default comment markers, so it silently\naccepted // and /* */ comments that the Go port (and\ndocs/reference-language.md) reject. Disable the slash and multi \n[…]\nnd vet clean.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01MCAc3ZwuhnhiLg9GabaE8v\n\n---------\n\nCo-authored-by: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "Full TS/Go parity: hash-only comments, ghost-canon sharing semantics,…",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-07-29T16:21:21Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "5aa6e585e943ea064e532dd2d000b0a436c7111c",
"body": null,
"is_bot": false,
"headline": "go: v0.1.6",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-07-29T09:16:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aa0cfeb83daa460efaf27dd73aea9fa7d11ee6c9",
"body": "…r itself (#16)\n\n* fix(go): opt out of jsonic OrderedMap (Map.Plain) — aontu tracks order itself\n\naontu builds its own Val AST with its own key-order tracking (trackOrder),\nso it needs plain map[string]any object nodes, not the new insertion-ordered\nOrderedMap default in the tabnas parser.\n\nCo-Autho\n[…]\nu keeps its own key-order tracking via Map.Plain.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(go): opt out of jsonic OrderedMap (Map.Plain) — aontu tracks orde…",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-07-29T09:16:50Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d075d559ab1062b13b5667a6fe4738e959404dd0",
"body": null,
"is_bot": false,
"headline": "Add Aon2 language design notes",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-07-23T11:35:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "275b90dfdc95859254b14f2136e28047ea904114",
"body": null,
"is_bot": false,
"headline": "go: v0.1.5",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-07-21T16:25:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bafca9d589f25bd28789482977feaa3e966fd4d7",
"body": null,
"is_bot": false,
"headline": "ts: v0.48.2",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-07-21T16:25:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce600c90d8baab49c345ffd02017b4cbf4664a4f",
"body": null,
"is_bot": false,
"headline": "v0.48.1",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-07-07T11:10:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a374614be3b6c69bafe1b7410a44adf43533318b",
"body": null,
"is_bot": false,
"headline": "buildinfo",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-07-07T11:06:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "62316ad8379361e79af85a66c387a67967451907",
"body": "Explicit patch-bump helper for the release flow: updates package.json +\npackage-lock.json only (--no-git-tag-version keeps git actions in\nrepo-tag/repo-release, preserving the tag/publish separation). Typical\nrelease: npm run repo-bump && npm run repo-release-dry && npm run\nrepo-release. Deliberatel\n[…]\ns a judgment call, and the dry runs already\nflag a stale version loudly.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01PqhgNQwtXCCAbvWySUW2eo",
"is_bot": false,
"headline": "admin: add repo-bump (npm version patch, no git side effects)",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-07-02T22:27:55Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "400ff2ec5da0f3021a20d1f7faa87b144688f10d",
"body": "…ses both\n\nrepo-publish / repo-publish-quick are now registry-only (npm publish, no\ngit side effects); repo-tag remains the standalone git action (commit,\npush, tag vX.Y.Z, push --tags). repo-release runs them together with the\nregistry publish FIRST and the tag LAST — same tag-last rationale as the\n[…]\n release blockers (version\nalready on the registry, tag already exists).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01PqhgNQwtXCCAbvWySUW2eo",
"is_bot": false,
"headline": "admin: separate registry publish from git tagging; repo-release compo…",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-07-02T22:05:40Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6f26d8d4e7fc8b4fd6e462fcf1bc6669bb13c686",
"body": "…-dry-run)\n\nrepo-publish-dry / repo-publish-quick-dry mirror the real publish chain\n(build + test) but rehearse the release steps: repo-tag-dry reports the\nwould-be vX.Y.Z tag, warns when it already exists (i.e. the version needs\nbumping before a real publish), and shows what `git commit -a` would\ns\n[…]\n shippable files\nwithout uploading. No git or registry state is touched.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01PqhgNQwtXCCAbvWySUW2eo",
"is_bot": false,
"headline": "admin: add repo-publish dry-run scripts (rehearse tag + npm publish -…",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-07-02T21:57:45Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ee8eac08703ff4bea963f3d0cb5b1cfc62ca87a1",
"body": "…r pass\n\nTwo fixpoint-engine fixes for large generated-SDK models (the cloudsmith/\ngitlab/github specs), present since the 0.45 line:\n\n1. MapVal.unify re-applied `&:` spread templates (apidef/sdkgen entity\nschemas with name: key()) to every key on every pass and every conjunct-\nfold step, while key(\n[…]\n0\ncycle errors -> 10.0s / 0 errors; github end-to-end validate run 121s.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01PqhgNQwtXCCAbvWySUW2eo",
"is_bot": false,
"headline": "perf: apply spread constraints once per child; TOP self-unify once pe…",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-07-02T19:48:50Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "faf80c6786f9d775e0eaea8b75ecf3e0d64a3781",
"body": "…d conjunct growth)\n\nf1bb1063 changed MapVal spread combination from `unite` to a deferred\nConjunctVal. Its identical-canon collapse is correct and necessary: re-unifying\nan identical spread resolves key()/path() at the shared intermediate path and\nproduces spurious values (spread-nested-key-2..4, s\n[…]\n, the two-map-unify path). TS 490 tests + all Go packages\npass; the apidef entity model now generates across all 7 sdkgen targets.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: unite distinct spread constraints instead of deferring (unbounde…",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-07-02T12:05:10Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6baff423c4d667e669a2873c5c78751272422781",
"body": "…contents\n\nBagVal.gen generated an optional map child (e.g. apidef's `id?: { field: string }`)\nusing the shared context, so its unresolvable bare-type inner values pushed a\nmapval_no_gen error into ctx.err and made generate() throw — even though the\noptional key was correctly omitted from output. Ge\n[…]\nl_no_gen on @voxgig/apidef's optional entity id during voxgig-model\ngeneration (previously required pinning @voxgig/model to 8.x).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: omit (not throw) optional map/scalar children with unresolvable …",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-07-01T17:16:49Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "6333bd13b39e156f0461be4d6f860ff71e841304",
"body": "…l-sort-avn4uc\n\ntest+docs: colon-chain nested @import fixed by multisource go/v0.3.1",
"is_bot": false,
"headline": "Merge pull request #15 from rjrodger/claude/unified-model-alphabetica…",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-06-22T22:30:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dad987ea906d41d9b6e5b3cbf0ee65147a0a0fec",
"body": "Main's bump of @tabnas/multisource/go to v0.3.1 fixes the colon-chain\nnested @\"file\" import defect (struct: minor: @\"file\" now loads in Go\ninstead of resolving to {}), matching the canonical TypeScript behaviour.\n\n- Add shared-spec regression file.tsv:load-colon-chain (a:b:@\"…/foo.aon\"\n -> {\"a\":{\"b\n[…]\n\" entry with a \"now fixed\" note.\n\nFull suite: 487 TS pass, all Go pass.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01CZ7Jic1ZzyDwo1yuPyPhAt",
"is_bot": false,
"headline": "test+docs: colon-chain nested @import fixed by multisource go/v0.3.1",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-22T22:27:21Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7245b3c98a90505da03b7a350ed5e741dc903d6d",
"body": "Picks up the colon-chain nested @\"file\" import fix (multisource go/v0.3.1).\ngo build/vet clean; all Go tests pass.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(go): bump tabnas/multisource to v0.3.1",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-06-22T22:22:02Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "c63b7f0690bf0a195a5547a2c62dfc543053582a",
"body": "…l-sort-avn4uc\n\nfeat: emit unified-model map keys alphabetically (TS+Go parity)",
"is_bot": false,
"headline": "Merge pull request #14 from rjrodger/claude/unified-model-alphabetica…",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-06-22T20:34:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6ae8d6eeaeaaeb3dcc93288ddc3e02a263e3ba82",
"body": "Document the upstream @tabnas/jsonic/go colon-chain parsing defect where\na nested-path key whose value is a bare @\"file\" import (e.g.\n`struct: minor: @\"file\"`) resolves to {} in Go but loads correctly in TS.\nIncludes reproduction, root-cause analysis (colon-chain flattening vs.\nnesting), what was ru\n[…]\n\nreport's secondary consideration (alphabetical key order) is resolved.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01CZ7Jic1ZzyDwo1yuPyPhAt",
"is_bot": false,
"headline": "docs: design note for colon-chain nested @import defect (Go port)",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-22T20:33:07Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "d0ac6820cc71be350453bc84a3d5c116b1d203f1",
"body": "Map keys are now emitted in alphabetical order in both the canonical\nform and generated JSON, in both implementations, so the unified-model\noutput is independent of insertion/unification order and identical\nacross the TypeScript and Go ports.\n\n- ts: MapVal.canon and BagVal.gen (maps only) sort keys;\n[…]\nrow and the affected TS-native canon\n expectations to the sorted form.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01CZ7Jic1ZzyDwo1yuPyPhAt",
"is_bot": false,
"headline": "feat: emit unified-model map keys alphabetically (TS+Go parity)",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-22T20:21:41Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c74b91f166cbdd25fbbf26f80d49e436ccb57668",
"body": "docs(changelog): finalize Go 0.1.4 release",
"is_bot": false,
"headline": "Merge pull request #13 from rjrodger/claude/code-review-ts-go-ky5vlz",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-06-22T15:12:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a315e2c7a48d19d9d0f47b3b56af21332cfe32b0",
"body": "Records the Go 0.1.4 release date (last published tag: go/v0.1.3) and\ndocuments the spread/type()/key() parity work shipping in it, which was\nnot yet in the changelog. TypeScript stays unreleased at 0.47.0.\n\nThe version const (go/aontu.go) is already at 0.1.4; no code change.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_019DQVKs5R9f4GFJDL1L2VG5",
"is_bot": false,
"headline": "docs(changelog): finalize Go 0.1.4 release (date + spread/type() entry)",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-22T14:52:02Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "529f8eca01f51e4d2a3f396ad650c4a91883bee7",
"body": "Claude/code review ts go ky5vlz",
"is_bot": false,
"headline": "Merge pull request #12 from rjrodger/claude/code-review-ts-go-ky5vlz",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-06-22T13:43:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "02663b5d756991a38e9b4e2f3888ccc240a58aac",
"body": "Per the chosen \"apply\" semantics for the residual type()-containing-key()\ncase: a type() used as a spread now applies as its inner template,\nemitting the constrained values at each destination, rather than marking\nthe destination as a type. So `&:type({k:key(),x:number})` behaves like\nthe non-type s\n[…]\nsuite green: 486 TS tests + all Go packages; go vet clean.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_019DQVKs5R9f4GFJDL1L2VG5",
"is_bot": false,
"headline": "type() spreads: apply as inner template (emit values) — TS+Go parity",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-22T13:11:30Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a82c57ee17fecd22a62f341fbf1b54f5bbc31362",
"body": "From automated review of the spread fixes:\n\n- [P2] Go: clear type marks on an applied spread RECURSIVELY, not just on\n direct children. A nested type template (`type({m:{x:number}})`) left\n the deep `x:number` type-marked, so Go silently dropped it instead of\n erroring; Go now errors like TS. HID\n[…]\nsuite green: 483 TS tests + all Go packages; go vet clean.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_019DQVKs5R9f4GFJDL1L2VG5",
"is_bot": false,
"headline": "Address PR review (spread mark/snapshot edge cases)",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-22T10:12:00Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "8a1edcd8a34f2b949f4ab7aa658de9fed67f8264",
"body": "Note the one remaining minor TS/Go divergence: consecutive *bare* spreads\n(`&:k:a &:p:2`) parse differently on Go (the first bare spread's\nimplicit-map value absorbs the following `&:`), while the braced form\n(`&:{k:a} &:{p:2}`) and single bare spreads work identically. An\n@tabnas-Go implicit-map/sp\n[…]\nry quirk; affected rows are excluded\nfrom the shared spec.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_019DQVKs5R9f4GFJDL1L2VG5",
"is_bot": false,
"headline": "docs: record the bare-multi-spread Go parse divergence (AGENTS.md)",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-22T09:17:21Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "0240191c2fc80f1f1a5b3aa8f71bad73529b9340",
"body": "A spread of a type()/hide() constraint (`a:{&:$.sys,...}` where\nsys=type({x:number})) propagated the type mark to the destination,\nmaking the child gen-invisible (`{a:{}}` instead of `{a:{b:{x:1}}}`).\n\nspreadCloneFor now resolves the per-key spread clone at the destination\nfirst (so a ref/path-depen\n[…]\nsuite green: 483 TS tests + all Go packages; go vet clean.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_019DQVKs5R9f4GFJDL1L2VG5",
"is_bot": false,
"headline": "Go: clear type()/hide() marks on applied spreads (resolve-then-clear)",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-22T09:13:22Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f1bb1063ae74f6c4e71a1aba0388a01106090dce",
"body": "A spread is a constraint applied per destination key, but both\nimplementations merged two spread constraints with `unite` in place\n(MapVal). For nested spreads (`a:{&:{m:{&:{k:key()}}},...}`) that\nresolved the inner key()/path() at the *template's own* intermediate\npath, producing spurious values at\n[…]\nsuite green: 482 TS tests + all Go packages; go vet clean.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_019DQVKs5R9f4GFJDL1L2VG5",
"is_bot": false,
"headline": "TS+Go: fix key() through nested spreads — close the gap, full parity",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-22T00:54:27Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "e1ce7e2c888655c3486835f3ac7f479f80763b1b",
"body": "A ref spread (`a:{&:$.q, ...}`) re-resolved its RefVal against the\nmutating fixpoint tree every pass. Once the target's own key()/path()\nfunctions had resolved (e.g. q.k -> \"q\"), the spread captured those\nsource-derived literals and merged them into the destination, which then\nconflicted with the co\n[…]\ner gap.\n\nFull suite green: 478 TS tests + all Go packages.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_019DQVKs5R9f4GFJDL1L2VG5",
"is_bot": false,
"headline": "TS: fix key() leaking through ref spreads (&:$ref) — Go parity",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-22T00:19:19Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a4b60f8ba0877bded78ee9ff5ce7601e4d2ef192",
"body": "Port perf0's granular spread test cases (spread-*.tsv) into the shared\ntest/spec/ format. 78 gen-mode rows across 23 files, each verified to\npass on BOTH the TypeScript and Go implementations, substantially\nwidening shared spread coverage (nested spreads, ref-copy, pref/type/\nhide/move/upper/lower/c\n[…]\nthat pass on TS but error on Go (additional Go-only gaps).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_019DQVKs5R9f4GFJDL1L2VG5",
"is_bot": false,
"headline": "test: salvage perf0 spread spec corpus into the shared suite",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-21T23:21:58Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ff2af2fa727907d6c3ce12a419f983f90962cef0",
"body": "Claude/code review ts go ky5vlz",
"is_bot": false,
"headline": "Merge pull request #11 from rjrodger/claude/code-review-ts-go-ky5vlz",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-06-21T22:38:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "36c370d20fb50e47350d552543f9d8edc5d48a7e",
"body": "The Go port records key order, &: spreads and optional keys under\nsentinel map entries namespaced by the reserved prefix \"\\x00aontu_\". A\nsource key carrying that prefix would collide with this internal state\nand silently corrupt the map (or trip a type assertion). trackOrder now\nrejects such a key; \n[…]\nn path.\n\nFull suite green: 395 TS tests + all Go packages.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_019DQVKs5R9f4GFJDL1L2VG5",
"is_bot": false,
"headline": "Go: reject reserved sentinel-prefix map keys (item 8)",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-21T22:24:22Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3fbaa635a49ff2201a8d61d4bd47c7f59914bced",
"body": "Item 6 (deep structures):\n- TS: raise walk()'s default depth limit from 32 to a high bound so\n $ref/function mark-clearing no longer silently truncates (and drops\n marks) on structures nested deeper than 32 -> wrong gen output; still\n bounds accidentally-cyclic walks (walk has no cycle detection)\n[…]\ne (Go).\n\nFull suite green: 395 TS tests + all Go packages.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_019DQVKs5R9f4GFJDL1L2VG5",
"is_bot": false,
"headline": "Harden deep-structure handling + document single-use trees (items 5,6)",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-21T22:19:58Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a8b26e5297413953372c87e583aa2c75d0182600",
"body": "The trial loop sets ctx._trialMode=true and swaps ctx.err for a throwaway\narray, restoring both afterward. Move the restore into a finally block so\na throw inside a trial cannot leak _trialMode=true — which would otherwise\ncollapse every subsequent real error in that ctx to the shared TRIAL_NIL\nsentinel.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_019DQVKs5R9f4GFJDL1L2VG5",
"is_bot": false,
"headline": "DisjunctVal: restore trial-mode state in finally (exception-safe)",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-21T22:01:50Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "9a05a04f069cd5683fd51fade103992513273b2c",
"body": "… + harden\n\nCorrectness fixes (TS canonical; Go kept in parity):\n- Disjunct default folding indexed the unfiltered member list, skipping\n preference (*) members that were not leading alternatives\n (`1 | *{x:1} | *{y:2}` -> `{x:1}` instead of `{x:1,y:2}`). Fixed in\n both ts/src/val/DisjunctVal.ts \n[…]\nrnals).\n\nFull suite green: 395 TS tests + all Go packages.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_019DQVKs5R9f4GFJDL1L2VG5",
"is_bot": false,
"headline": "Fix fragility-audit findings (disjunct prefs, unknown_var, NumberVal)…",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-21T21:50:12Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "9c6bbb04c24491a17c254f03367ad8670440ee63",
"body": "Update docs and AGENTS.md to point at the @tabnas parser packages\n(@tabnas/jsonic + expr/path/multisource/directive/debug; Go\ngithub.com/tabnas/...) instead of the retired jsonic / @jsonic /\njsonicjs names, following the parser migration. Syntax-origin mentions\nin the tutorial / language reference n\n[…]\nric option descriptions say \"parser\" rather than \"jsonic\".\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_019DQVKs5R9f4GFJDL1L2VG5",
"is_bot": false,
"headline": "docs: reference the @tabnas parser stack",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-21T18:23:46Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "218463f922c89b16a942540cf0be97d6de8cecaa",
"body": "Replace github.com/jsonicjs/* with github.com/tabnas/* (jsonic, expr,\nmultisource, path, directive). Behaviour unchanged; full suite green.\n\nAdaptations for the tabnas Go API:\n- RuleSpec moved from exported slice fields (Open/Close/AC) to methods;\n use PrependOpen/PrependClose/AddAC instead.\n- Map \n[…]\nug indirectly). Doc comments updated to reference @tabnas.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_019DQVKs5R9f4GFJDL1L2VG5",
"is_bot": false,
"headline": "Go: migrate parser from jsonicjs to tabnas Go modules",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-21T18:17:17Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "548575846f337adb849d78becf0ef1db9c2148d9",
"body": "Replace jsonic / @jsonic/* with @tabnas/jsonic, @tabnas/expr,\n@tabnas/multisource, @tabnas/path, @tabnas/directive, @tabnas/debug.\nBehaviour unchanged; full suite (393 tests) passes.\n\nThree @tabnas integration points adapted:\n- Parser/jsonic split: reconcile plugin Plugin types via an `asPlugin`\n c\n[…]\n rebuilt. Go port still on jsonicjs (separate, unchanged).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_019DQVKs5R9f4GFJDL1L2VG5",
"is_bot": false,
"headline": "TS: migrate parser from @jsonic to @tabnas packages",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-21T18:08:59Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3c73f14d2b4bdf8d8c021c726f24f6b8b8c2f17f",
"body": "Bump the package engines floor to Node 24 (CI already runs node 24.x).\nThe @tabnas parser packages (a planned migration target) require Node 24,\nand this aligns the supported runtime ahead of that work.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_019DQVKs5R9f4GFJDL1L2VG5",
"is_bot": false,
"headline": "Require Node.js >= 24",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-21T17:33:52Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "c930aa75b918d5d36e26bc28be3a3f1596b2dd1d",
"body": "Ship editors/vscode/LICENSE (matching the repo MIT license) and an\nicon.png (128x128, two overlapping circles symbolising unification),\nreferenced via the manifest `icon` field, so `vsce package` produces a\nclean .vsix without missing-LICENSE/icon warnings. README updated.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_019DQVKs5R9f4GFJDL1L2VG5",
"is_bot": false,
"headline": "vscode: add MIT LICENSE and a 128x128 icon",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-21T17:03:48Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "e820aa39c1f1b7a8166e2031250016e61e30c690",
"body": "Add `package` (vsce package -> .vsix) and `publish` (vsce publish) npm\nscripts plus @vscode/vsce as a devDependency to editors/vscode. The\nexisting vscode:prepublish hook compiles TS first, so the produced .vsix\ncontains out/extension.js. Document building/installing the .vsix and\nMarketplace publishing in the VS Code README.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_019DQVKs5R9f4GFJDL1L2VG5",
"is_bot": false,
"headline": "vscode: add vsce package/publish scripts and packaging docs",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-21T16:37:36Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "7bff018f6a03b579d3711132e3d8313d18b0872d",
"body": "editors/ holds thin LSP-client plugins that launch aontu-lsp on .aon /\n.aontu files; all language intelligence stays in the server library.\n\n- VS Code (editors/vscode): vscode-languageclient extension + language\n configuration; configurable server command/args (binary, node\n dist/lsp-server.js, or\n[…]\ns/README.md index, AGENTS.md\nlayout + LSP note, CHANGELOG.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_019DQVKs5R9f4GFJDL1L2VG5",
"is_bot": false,
"headline": "Add editor plugins (VS Code, Emacs, Vim/Neovim); document BYO-server",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-21T16:10:03Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "07b56d6a6373853ee47af8d450d06e1718e480a5",
"body": "Hover (textDocument/hover): resolves the value under the cursor from the\nunified tree and returns its canon + kind as markdown. Backed by a new\ncore API (*aontu.Aontu).Spans / aontu.ValueSpan (Go) that lists\npositioned non-container values; computeHover (TS) walks the unified tree\ndirectly. Hover ta\n[…]\nests; all Go\npackages). docs/lsp.md and CHANGELOG updated.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_019DQVKs5R9f4GFJDL1L2VG5",
"is_bot": false,
"headline": "LSP: add hover and completion (both impls)",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-21T16:05:28Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "22f944888b01a7b44ff1794f536a75e8f726a531",
"body": "Source files now use `.aon` (preferred) or `.aontu`. `.jsonic` is retired\nas a recognised Aontu extension:\n\n- Resolver config (both impls): implicit-extension search is now\n [\".aon\", \".aontu\"] (Go source.go ImplicitExt; TS lang.ts multisource\n implictExt, overriding the upstream ['jsonic','jsc','j\n[…]\noes not; full suite green (385 TS tests, all Go packages).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_019DQVKs5R9f4GFJDL1L2VG5",
"is_bot": false,
"headline": "Prefer .aon extension; allow .aontu; retire .jsonic",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-21T15:56:37Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "12b93c39ac7289973cd5d04e2891fe9b1c4d31d9",
"body": "Both implementations now ship an `aontu-lsp` Language Server that reports\nunification diagnostics over stdio, structured as three layers so the LSP\nlogic is a library separate from serving it:\n\n1. Analysis (pure): computeDiagnostics(src) (ts/src/lsp.ts) and\n lsp.Diagnostics(src) (go/lsp/lsp.go), b\n[…]\nd from docs/index.md; noted in AGENTS.md and\nCHANGELOG.md.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_019DQVKs5R9f4GFJDL1L2VG5",
"is_bot": false,
"headline": "Add LSP server (TS + Go) with reusable, transport-free library",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-21T15:39:29Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "1c096def22969bd85503e0c5561ced0552d7783f",
"body": "Go: error on unknown function calls instead of silently grouping",
"is_bot": false,
"headline": "Merge pull request #10 from rjrodger/claude/code-review-ts-go-ky5vlz",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-06-21T15:21:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "583d237dbebfbddaf263d6f42893af0ea3dca1cb",
"body": "Converge both implementations on the CUE-faithful number model (Go was\nalready correct; this changes the canonical TS). Maintainer-approved\nbreaking change.\n\nTypeScript:\n- integer and number are distinct kinds: two concrete literals of\n different kind no longer cross-unify. `1 & 1.0` now errors\n (\n[…]\nlosed determinism,\n jsonString escaping, CLI robustness).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_019DQVKs5R9f4GFJDL1L2VG5",
"is_bot": false,
"headline": "Number-model parity: distinct int/float, normalize -0 (breaking)",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-21T15:21:03Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "5b4bd90302eb542dd82b5e783319b5cd79a789fd",
"body": "Document the verified, deliberate divergences so they are not mistakenly\nadded to the shared spec or \"fixed\" without a maintainer decision:\nnumber model (1 & 1.0, -0, %g formatting), error message text (only the\nasserted err-substring is contractual), and parse-level canon (only\nunify-level canon is\n[…]\nthese as known\ndivergences rather than treat them as bugs.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_019DQVKs5R9f4GFJDL1L2VG5",
"is_bot": false,
"headline": "docs: record known TS/Go divergences in AGENTS.md",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-21T14:52:20Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "9fe8746e7d248953adb9ccdf876991fb50c8f436",
"body": "Follow-up to the unknown-function fix, addressing the remaining items\nfrom the TS/Go code review.\n\nCode:\n- Go MapVal.Unify: add the closed-AND-closed deterministic driver\n tie-break (fewer keys, then lexicographic key order) so unifying two\n closed maps is independent of operand order, matching\n \n[…]\nhe canonical impl\nitself flags its behaviour as unsettled.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_019DQVKs5R9f4GFJDL1L2VG5",
"is_bot": false,
"headline": "Complete remaining review recommendations",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-21T14:22:21Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f836e3445ab86f1f0101d2e7508608e6bda11b6e",
"body": "The Go parser's func-paren handler treated `name(args)` as a function\ncall only when `name` was in funcSet; an unrecognised name fell through\nto the `(expr)` grouping fallback and silently returned the last\nargument (e.g. `x:foo(1)` produced `{\"x\":1}`). The canonical TypeScript\nimplementation yields\n[…]\n\n(func.tsv) so both implementations enforce the behaviour.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_019DQVKs5R9f4GFJDL1L2VG5",
"is_bot": false,
"headline": "Go: error on unknown function calls instead of silently grouping",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-21T13:45:24Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "62b3dfed6a385fb6f40246bff2575b5b90772684",
"body": null,
"is_bot": false,
"headline": "go: v0.1.3",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-06-09T14:51:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e0dc4a9b09b8e4a53a419d12f45cb646963037ac",
"body": null,
"is_bot": false,
"headline": "v0.46.0",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-06-09T14:50:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4e5dcf690f9ae39d3ff62494c0635d3c7f59e977",
"body": "The __FIXTURES__ absolute path is spliced into Aontu source as a quoted\n@\"...\" load target. On Windows the path carried backslashes, which the\njsonic string parser interpreted as escapes (\\t -> tab, \\a -> a, ...),\ncorrupting the load path. Emit the fixtures dir with forward slashes in\nboth the TS and Go runners.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Normalize fixtures path to forward slashes for Windows spec loads",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-06-09T14:45:35Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "3e02ba7f0a2c999cb588dcc76046886579e45117",
"body": "Windows CI checked out test/spec/*.tsv as CRLF, leaving a stray \\r on\neach line's last field and breaking the data-driven suite. Strip any\ntrailing \\r when splitting lines in both the TS and Go spec runners,\nand add .gitattributes to keep the TSVs and fixtures as LF.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "Tolerate CRLF checkouts in shared spec TSV parsers",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-06-09T14:36:06Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2736667ad241f285b64a4c432c20edfc272b0390",
"body": null,
"is_bot": false,
"headline": "Update build.yml",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-06-09T14:24:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "316acded999badeed7a383d04ee059b8ee296e67",
"body": "Claude/pensive dijkstra gvgxbq",
"is_bot": false,
"headline": "Merge pull request #9 from rjrodger/claude/pensive-dijkstra-gvgxbq",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-06-09T14:22:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "96b3bfdc173165c1d688a6be1ed89133e8f9f86b",
"body": "The nested relative @\"file\" load gap is now fixed upstream:\n- TS @jsonic/multisource 2.8.0 -> 2.9.1\n- Go multisource/go v0.1.5 -> v0.1.6\n\nv0.1.6 rebases a loaded file's relative loads against that file's own\ndirectory using the jsonic context meta (childMeta/metaSourcePath) —\nthe immutable,\n[…]\nted\nregression tests (source_test.go, cmd/aontu) and the shared-spec\nload-rel-chain row now validate the real upstream fix. make test green:\nTS 361/361, Go all. dist unchanged (runtime-only dep bump).",
"is_bot": false,
"headline": "Adopt fixed multisource releases; drop Go nested-load workaround",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-09T14:16:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e89a6c3255c0a9184acd592e529b59166faaf5a5",
"body": "A relative @\"./x\" inside a *loaded* file previously resolved against the\noriginal entry's base, not the loaded file's own directory — so a chain\nof files (a -> b -> c) where each loads the next relatively only worked\none level deep. The canonical TypeScript implementation already resolves\neach loade\n[…]\n). Adds a shared-spec row load-rel-chain\n(test/spec/files/nest_{parent,child,grand}.jsonic) that passes in both,\nplus a Go cross-directory unit test. make test green: TS 361/361, Go all.\nDocs updated.",
"is_bot": false,
"headline": "Resolve nested relative @\"file\" loads per loaded-file directory (Go)",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-09T10:18:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "85b5c4d318c84c7fab6ddd5a972812867398a838",
"body": "The Go multisource base path is baked into the jsonic parser when the\nplugin is applied (captured in a closure, not read per parse), and the\nsingleton parser used base \"\". So `aontu /tmp/app/main.aontu` containing\n@\"./child.aontu\" resolved the relative load from the process cwd and\nsilently produced\n[…]\n\" paths are unaffected. Tests: source_test.go (library,\nrelative + absolute) and cmd/aontu relative-load test; shared spec and\nfull suites still pass. Docs updated (reference-api, reference-language).",
"is_bot": false,
"headline": "Resolve relative @\"file\" loads from the entry file's directory in Go",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-09T10:03:16Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ac54f54f2e0766390111affab7aa380b262e4227",
"body": "Add comprehensive documentation and CLI for both implementations",
"is_bot": false,
"headline": "Merge pull request #8 from rjrodger/claude/pensive-dijkstra-gvgxbq",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-06-09T09:50:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bbcb2507d9d7d25826ac93a0d869c8d9773524d2",
"body": "Add a small public constructor facade (go/construct.go) so external\ncallers can build Val values for UnifyVars/GenerateVars without\nreaching into the package:\n\n NewString, NewInteger, NewNumber, NewBoolean, NewNull,\n NewScalarKind, NewMap, NewList (all return Val)\n\nThese wrap the existing interna\n[…]\naller path). Docs updated (reference-api, how-to, explanation,\ntest-coverage); the prior \"variable construction is internal\" limitation\nis removed. Go library coverage 77.5% -> 78.5%; gofmt/vet clean.",
"is_bot": false,
"headline": "Export Go value constructors for building $name variables",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-09T09:37:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2a277c09a232b857e56a1d34995981de7bf32e91",
"body": "Documentation under docs/ covering the Aontu language and both\nimplementations, organised by reader need:\n\n- index.md — documentation map and overview\n- tutorial.md — hands-on, step-by-step introduction\n- how-to.md — task-focused recipes (incl. the CLI)\n- reference-language.md\n[…]\neasured coverage: TypeScript 94.3% lines / 88.2% branch / 89.6% funcs;\nGo library 77.5% statements (CLI package 44.4% — the uncovered lines are\nthe process/TTY glue; render/repl logic is unit-tested).",
"is_bot": false,
"headline": "Add full language/implementation documentation and coverage tooling",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-08T22:46:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8fe71e012d8f3220663e7edbc008d7a272bfef21",
"body": "Both implementations now ship an `aontu` command that evaluates a source\nfile (or stdin) and prints the result as JSON, or the canonical form with\n--canon. With no file on an interactive terminal it starts a REPL\n(:help/:canon/:json/:quit commands); with piped input it reads stdin.\n\n- TypeScript: sr\n[…]\nlogic unit-tested in\n cmd/aontu/main_test.go.\n\nErrors go to stderr with a non-zero exit (1 eval error, 2 bad option).\nAlso adds a `test-cov` npm script. TS 360/360 and Go (library + CLI)\nsuites pass.",
"is_bot": false,
"headline": "Add aontu command-line tool with REPL for TypeScript and Go",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-08T22:46:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0f3e44e69e520d976f07666719e4a9a179a50fd1",
"body": "TypeScript (ts/package.json):\n- @jsonic/directive 2.1.0 -> 2.2.0\n- @jsonic/expr 2.1.0 -> 2.3.2\n- @jsonic/multisource 2.6.0 -> 2.8.0\n- @jsonic/path 2.0.0 -> 2.1.0\n- jsonic 2.27.0 -> 2.28.0\n- @types/node 25.6.0 -> 25.9.2\n- memfs 4.57.2 -> 4.57.6\n\nGo (go/go.mod):\n- github.com/jsonicjs/multisource/go v0.1.4 -> v0.1.5\n\nRebuilt committed ts/dist and ts/dist-test (emit unchanged). Both\nsuites pass: TS 350/350, Go all tests; make test green.",
"is_bot": false,
"headline": "Update all dependencies to latest and rebuild",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-08T22:20:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "756879ba0393b880efef05aae765a17094c4c92e",
"body": null,
"is_bot": false,
"headline": "go: v0.1.2",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-06-08T17:52:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "363cd2fe1bd050cbe0cbe40fc84e6ad1d98cf3ae",
"body": null,
"is_bot": false,
"headline": "v0.45.1",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-06-08T17:51:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a285bdb9bd28ede21ef3ed18e5fa10494a185460",
"body": null,
"is_bot": false,
"headline": "v0.45.0",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-06-08T17:50:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60e94c881e8ce9c5695813093eea81228f17ccf2",
"body": null,
"is_bot": false,
"headline": "v0.42.0",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-06-08T17:49:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b41c63c9d8a28e8a766a91daf3f75ca1a752fb8f",
"body": "Claude/serene brown 5tv o4",
"is_bot": false,
"headline": "Merge pull request #7 from rjrodger/claude/serene-brown-5tvO4",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-06-08T17:41:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9ec61ea5fcc38b5af7f3d50e44d9f7521772cdc4",
"body": "Resolve $name variables from a context vars map (mirrors VarVal.unify in\nts/src/val/VarVal.ts): the dollar-prefix evaluates to a VarVal whose name\nis a StringVal (canon $\"name\"), and unify looks it up in ctx.vars,\nreturning the bound Val (or an unknown-variable error). Add\nAontu.UnifyVars/GenerateVa\n[…]\nint/str/bool/obj, constraint, multi, resolved canon, unknown).\n\nConfirmed both implementations use the same jsonicjs plugins (TS\n@jsonic/*, Go github.com/jsonicjs/*/go). 183 shared rows green in both.",
"is_bot": false,
"headline": "feat(go): $name variables + shared $var test harness",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-08T17:38:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0d4345c484d39806db0218b4abfcb49e20f52b60",
"body": "Wire the official multisource Go plugin (github.com/jsonicjs/multisource)\nonto the parser, registered last so the @ directive layers over the\naontu grammar (matching ts/src/lang.ts's AontuJsonic-then-MultiSource\norder). A disk file resolver mirrors @jsonic/multisource's file resolver\n(full path then\n[…]\nURES__ with the absolute fixtures dir so the same files resolve\nfrom either cwd. 175 shared rows green in both implementations.\n\nThe Go port now has full parity with the canonical TypeScript language.",
"is_bot": false,
"headline": "feat(go): @\"file\" source resolution via multisource — full parity",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-08T17:28:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9d93b7a18237bafb4fdb8ee8fd9ee29a66662ed0",
"body": "The Go port now covers the whole aontu language (all Val types,\noperators, all twelve built-in functions, marks, map/list spreads,\noptional keys, close/open, references). The only remaining\nTypeScript-only piece is file/source resolution (@\"file\").",
"is_bot": false,
"headline": "docs: update coverage — full language semantics ported",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-08T17:14:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1baa4a008738f6c7a9db572de84e5ae77a214ffe",
"body": "path(x.a)/path($.a.b): resolve the argument as a reference. move($.m):\nmove the referenced value to the new location and hide it at the source.\nSince a per-pass in-place mark does not survive the map rebuild, the\nsource path is recorded on the context (ctx.hide via the ref hideFound\nflag) and skippe\n[…]\nneration (Generate now reuses the unify\ncontext). Marks on maps/lists also now propagate through unification.\n\n5 new func.tsv rows (path-ref/abs, move basic/top/closed). 167 shared\nrows green in both.",
"is_bot": false,
"headline": "feat(go): path() and move() functions",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-08T17:09:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "71d34be8aaea3273eee7d3a9c7b69b2a0aa2d5e5",
"body": "Extend the spread mechanism to lists: the elem rule detects &: spread\nelements (jsonic appends them as a normal element, so a marker replaces\nit and asVal extracts it as ListVal.spread), and the spread is applied\nper element during ListVal.unify, with canon/clone/paths carrying it.\n3 new spread.tsv rows; 162 shared rows green.",
"is_bot": false,
"headline": "feat(go): list spreads ([&:...])",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-08T17:02:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "22b5a69f9254eb7b1fcaf670432cda9f263c8692",
"body": "Parse optional keys via a 'key ? :' pair alt (registering the ? token),\nstoring the value and recording the key as optional on MapVal. Optional\nkeys are additive through unification and dropped from generation when\nthey do not resolve to a concrete value (mirrors BagVal.gen). Update the\ncoverage notes: the Go port now covers nearly the whole language\n(remaining: move/path funcs, list spreads, file resolution).\n\nNew test/spec/optional.tsv (7 rows). 159 shared rows green in both.",
"is_bot": false,
"headline": "feat(go): optional keys (a?:1)",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-08T16:48:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "85899da12372abf25acf87b8e8463567408227ea",
"body": "Add map spread templates: parser rules detect the &: spread syntax\n(pair/val/map open alts plus a val close alt that backtracks &: to the\nenclosing map, mirroring ts/src/lang.ts), the spread value is stored on\nMapVal and applied to every key (own and peer) via a per-key clone\nduring unification (Map\n[…]\ns literal, kind, map-constraint, $KEY, reference, pref(default),\nfunction, implicit (a:&:{x:1}), top-level and multi-source spreads.\n\nNew test/spec/spread.tsv (13 rows). 152 shared rows green in both.",
"is_bot": false,
"headline": "feat(go): port spreads (&:)",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-08T16:44:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "61c9eb9d8ec7d2fd772dd0e95a431b6e5a5f579d",
"body": "Add the closed flag to maps and lists with deterministic enforcement\n(the closed side drives unification; extra keys/elements error), the\nclose()/open() functions, and clone/marks preservation. Add a hints\ntable (ts/src/hints.ts) appended to error messages so closed (and other)\nerrors carry an explanation.\n\nNew test/spec/close.tsv (9 rows incl. closed-structure errors). 139\nshared rows green in both.",
"is_bot": false,
"headline": "feat(go): close()/open() and error hints",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-08T16:38:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f829e8e37a07a17bb4db0e2f416f92eba71d86a0",
"body": "Add type/hide marks (ts/src marks): type() and hide() walk-mark their\nargument, marked map/list children are excluded from generation, copy()\nclears marks, and marks propagate through conjunction. clone returns a\nfresh TOP so hide(top) cannot leak onto the shared singleton.\n\nAlso fix a latent parser\n[…]\n(map-value expressions were already evaluated during parse).\n\nNew test/spec/marks.tsv (15 rows: type/hide unify+canon, copy clears\nmarks, top-level conjunct/plus/func/disjunct). 130 shared rows green.",
"is_bot": false,
"headline": "feat(go): type/hide marks + fix top-level expressions",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-08T16:34:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "375af30d792a9f39bb10bd59610f5050427a2655",
"body": "…uper)\n\nAdd FuncVal with the FuncBaseVal resolve pattern (ts/src/val/FuncBaseVal.ts):\noperands resolved to done, then resolve() computes the result, deferring\notherwise. Wire the preval-active func paren op (name(args) call vs\n(expr) grouping), and the funcs: upper/lower (string case, numeric\nceil/f\n[…]\n in PrefVal), super(). PrefVal now\nresolves its peg so *upper(foo) works; ctx.cc tracks the fixpoint pass\nfor key()'s late resolution.\n\nNew test/spec/func.tsv (23 rows). 115 shared rows green in both.",
"is_bot": false,
"headline": "feat(go): port value-producing functions (upper/lower/copy/key/pref/s…",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-08T16:25:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1beec4288b316513f76b5ab04d416f40b7cc77cb",
"body": "Add PlusOpVal (ts/src/val/PlusOpVal.ts + OpBaseVal.ts): string\nconcatenation, numeric addition and boolean-or, with operands resolved\nto done before operating and deferral across fixpoint passes otherwise.\nOverride the default addition precedence to match aontu's plus, map the\nexpr addition-infix op to PlusOpVal, and handle plain-paren grouping.\n\nNew test/spec/plus.tsv (9 rows: int/num/str add, grouping, +prefix,\ndeep). 92 shared rows green in both implementations.",
"is_bot": false,
"headline": "feat(go): port the + operator and parenthesised grouping",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-08T16:18:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f9b8662a5863714e9b21310abac3fd3ebf1add9c",
"body": "Extend RefVal.find to resolve VarVal path parts (mirrors the modes\nhandling in ts/src/val/RefVal.ts): $KEY resolves to the enclosing key,\n$SELF/$PARENT adjust the relative base. Relative refs (.x.a) already\nresolved via the non-absolute base computation. Add 5 spec rows\n(relative, .$KEY at depth and with siblings); 83 shared rows green.",
"is_bot": false,
"headline": "feat(go): relative references and $KEY/$SELF/$PARENT",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-08T16:15:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "286c3074eb9da12c511eb8a958b50c4f2ed52e9d",
"body": "Mirror ts/src/val/RefVal.ts: add path tracking to every Val (set at\nparse via setPaths, the path plugin is wired), refresh ctx.root each\nfixpoint pass, and resolve absolute/relative path references against the\nevolving tree. RefVal.find walks the root by path (map keys + list\nindices), clones the ta\n[…]\npec test/spec/ref.tsv (12 rows: basic, fan-out, nested-path,\nref-to-map, cross-references, ref chains, ref & map merge, list index,\nno-path error) passes in both implementations. 78 shared rows green.",
"is_bot": false,
"headline": "feat(go): port references ($.a.b) — RefVal/VarVal + path resolution",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-08T16:12:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c7e6c1ab1575f68849a079147e2a0c00fabd2805",
"body": "Replace the hand-written recursive-descent parser with one built on the\nofficial Go ports of jsonic and its expr/path plugins\n(github.com/jsonicjs/jsonic|expr|path) — the same stack the canonical\nTypeScript parser (ts/src/lang.ts) uses. This brings the surface syntax\ninto parity: references, the + o\n[…]\nes; duplicate keys\nmerge into a conjunct via the jsonic map-merge option.\n\nAll 66 shared spec rows still pass in both implementations. Go module\nnow requires go 1.24 (jsonic deps); CI bumped to match.",
"is_bot": false,
"headline": "feat(go): build parser on the jsonic Go ports",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-08T15:57:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4760dacdeff4594dd31998cc9f47a35d5dd177e4",
"body": "Add Go port of Aontu with shared conformance test suite",
"is_bot": false,
"headline": "Merge pull request #6 from rjrodger/claude/serene-brown-5tvO4",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-06-08T15:03:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "84dc1d7c15bc09f71e14eb7f58832956e84cb72c",
"body": "Move the intended dual-language workflow into ci/.github/workflows/\nbuild.yml (a complete .github tree) so it can be copied over the repo's\n.github later. Pushing to .github/workflows/ directly is blocked without\nthe GitHub 'workflow' OAuth scope. Update the AGENTS.md CI note to point\nat ci/.github; drop the redundant docs/ci-build.yml.",
"is_bot": false,
"headline": "ci: provide full .github tree under ci/ for manual copy",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-08T15:02:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f8838ec7fad5f13f5335ddad34d0470f6a9dfc0c",
"body": "Wire up the dual TS/Go layout (structure inspired by voxgig/util):\n\n- Makefile fans out to per-language targets (build-ts/build-go,\n test-ts/test-go) with aggregate build/test/clean.\n- AGENTS.md documents the repo layout, build/test commands, the shared\n test/spec mechanism and TS/Go parity; CLAUD\n[…]\nflows/ directly because updating workflows requires the\n GitHub 'workflow' OAuth scope; copy it over .github/workflows/build.yml\n to enable it.\n- README and .gitignore updated for the new structure.",
"is_bot": false,
"headline": "build: add Makefile, docs, and dual-language CI reference",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-08T14:35:41Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "03acdb305072126095ee48a2d3060564a4026fdf",
"body": "Add a Go port of the core unifier under go/ (module\ngithub.com/rjrodger/aontu/go, package aontu), mirroring the canonical\nTypeScript semantics for the core lattice: scalars, scalar kinds (type\nconstraints), maps (incl. implicit nesting and duplicate-key merge),\nlists, conjunction (&), disjunction (|\n[…]\nner\n(go/spec_test.go) load the same files; all 66 shared cases pass in both.\n\nReferences ($.a.b), spreads (&:) and built-in functions remain\nTypeScript-only and are not yet covered by the shared spec.",
"is_bot": false,
"headline": "feat: add Go port and shared TSV conformance suite",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-08T14:32:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f46a69f75934ba9e618a123dc94768fff6635ced",
"body": "Restructure the repo for a dual TS/Go layout (following the\nvoxgig/util convention): the canonical TypeScript implementation\nnow lives under ts/ (ts/src, ts/test, committed ts/dist and\nts/dist-test, ts/package.json). The per-subfolder tsconfigs already\nuse relative ../dist paths, so the build and all 166 tests pass\nunchanged from the new location.",
"is_bot": false,
"headline": "refactor: move TypeScript implementation into ts/ folder",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-06-08T14:10:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e3b1887a39695f753676630ef62f5e90e5e62008",
"body": null,
"is_bot": false,
"headline": "v0.41.0",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-04-22T14:59:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "37482fd64ae16f1442839b38926054578b940f15",
"body": null,
"is_bot": false,
"headline": "perf",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-04-22T14:57:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5fe906bd7c33d083754b9e38b1340f7b4536d46",
"body": null,
"is_bot": false,
"headline": "v0.40.0",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-04-21T21:46:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2a5fd92081acfc58a8782a462d8fa7287a2ca357",
"body": null,
"is_bot": false,
"headline": "deps",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-04-21T21:45:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e77e02c34745552c78e04a75784a9b8152008d7b",
"body": null,
"is_bot": false,
"headline": "tests",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-04-21T16:01:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "45cfdfa593bffe53dde30fdc3d207078a3c8fbdf",
"body": null,
"is_bot": false,
"headline": "v0.39.0",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-03-25T17:49:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8978004d8f7e78b9cacf8727106d224a259bfcb0",
"body": null,
"is_bot": false,
"headline": "v0.38.0",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-03-19T18:48:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "66994e67bdea83550c4fbf0a3d1f0c62da94514d",
"body": null,
"is_bot": false,
"headline": "perf02",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-03-19T18:06:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "23997e4cda23deb93c35d767b526c48ba174cb24",
"body": null,
"is_bot": false,
"headline": "perf01",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-03-19T17:12:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7731ad51910eed1dbdba91892a3d13b56b0e03c1",
"body": null,
"is_bot": false,
"headline": "v0.37.1",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-03-19T14:12:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "89bcbe0efd17bf5d8783d2b2cb33172c1eb86140",
"body": null,
"is_bot": false,
"headline": "github-action",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-03-19T14:08:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d8423bf009dc7e9d6773f7579854693f0fa4d0a",
"body": null,
"is_bot": false,
"headline": "fix-pref",
"author_name": "Richard Rodger",
"author_login": "rjrodger",
"committed_at": "2026-03-19T14:03:31Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 7,
"commits_last_year": 179,
"latest_release_at": "2026-07-29T09:16:56Z",
"latest_release_tag": "go/v0.1.6",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 24,
"days_since_latest_release": 0,
"mean_days_between_releases": 14.9
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 42,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/rjrodger/aontu/go",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/rjrodger/aontu/go",
"is_deprecated": false,
"latest_version": "v0.1.6",
"repository_url": "https://github.com/rjrodger/aontu",
"versions_count": 6,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-29T09:16:53Z",
"latest_version_yanked": null,
"days_since_latest_publish": 0
},
{
"name": "aontu",
"exists": true,
"license": "MIT",
"keywords": [
"unify"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/aontu",
"is_deprecated": false,
"latest_version": "0.48.2",
"repository_url": "https://github.com/rjrodger/aontu",
"versions_count": 70,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 2298,
"first_published_at": "2020-11-09T18:31:53.206000Z",
"latest_published_at": "2026-07-21T16:25:50.062000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 8
}
]
},
"popularity": {
"forks": 0,
"stars": 10,
"watchers": 1,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": null,
"open_issues_and_prs": 5
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"editors/vscode/tsconfig.json",
"ts/src/tsconfig.json",
"ts/test/tsconfig.json"
],
"toolchain_manifests": [
"go/go.mod"
],
"largest_source_bytes": 38391,
"source_files_sampled": 126,
"oversized_source_files": 0,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md"
],
"agent_instruction_max_bytes": 14507
},
"dependencies": {
"manifests": [
"go/go.mod",
"ts/package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 6,
"malicious_count": 0,
"assessed_package": "npm:aontu@0.48.2",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go",
"npm"
],
"dependencies": [
{
"name": "github.com/tabnas/expr/go",
"manifest": "go/go.mod",
"ecosystem": "go",
"version_constraint": "v0.4.0"
},
{
"name": "github.com/tabnas/jsonic/go",
"manifest": "go/go.mod",
"ecosystem": "go",
"version_constraint": "v0.4.0"
},
{
"name": "github.com/tabnas/multisource/go",
"manifest": "go/go.mod",
"ecosystem": "go",
"version_constraint": "v0.4.1"
},
{
"name": "github.com/tabnas/path/go",
"manifest": "go/go.mod",
"ecosystem": "go",
"version_constraint": "v0.2.1"
},
{
"name": "@tabnas/debug",
"manifest": "ts/package.json",
"ecosystem": "npm",
"version_constraint": "0.2.5"
},
{
"name": "@tabnas/directive",
"manifest": "ts/package.json",
"ecosystem": "npm",
"version_constraint": "0.2.1"
},
{
"name": "@tabnas/expr",
"manifest": "ts/package.json",
"ecosystem": "npm",
"version_constraint": "0.2.3"
},
{
"name": "@tabnas/jsonic",
"manifest": "ts/package.json",
"ecosystem": "npm",
"version_constraint": "0.3.1"
},
{
"name": "@tabnas/multisource",
"manifest": "ts/package.json",
"ecosystem": "npm",
"version_constraint": "0.3.2"
},
{
"name": "@tabnas/path",
"manifest": "ts/package.json",
"ecosystem": "npm",
"version_constraint": "0.2.1"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "github.com/tabnas/expr/go",
"direct": true,
"version": "v0.4.0",
"ecosystem": "go"
},
{
"name": "github.com/tabnas/jsonic/go",
"direct": true,
"version": "v0.4.0",
"ecosystem": "go"
},
{
"name": "github.com/tabnas/multisource/go",
"direct": true,
"version": "v0.4.1",
"ecosystem": "go"
},
{
"name": "github.com/tabnas/path/go",
"direct": true,
"version": "v0.2.1",
"ecosystem": "go"
},
{
"name": "@tabnas/debug",
"direct": true,
"version": "0.2.0",
"ecosystem": "npm"
},
{
"name": "@tabnas/directive",
"direct": true,
"version": "0.2.0",
"ecosystem": "npm"
},
{
"name": "@tabnas/expr",
"direct": true,
"version": "0.2.0",
"ecosystem": "npm"
},
{
"name": "@tabnas/jsonic",
"direct": true,
"version": "0.2.0",
"ecosystem": "npm"
},
{
"name": "@tabnas/multisource",
"direct": true,
"version": "0.2.0",
"ecosystem": "npm"
},
{
"name": "@tabnas/path",
"direct": true,
"version": "0.2.0",
"ecosystem": "npm"
},
{
"name": "github.com/tabnas/directive/go",
"direct": false,
"version": "v0.4.0",
"ecosystem": "go"
},
{
"name": "github.com/tabnas/json/go",
"direct": false,
"version": "v0.4.0",
"ecosystem": "go"
},
{
"name": "github.com/tabnas/parser/go",
"direct": false,
"version": "v0.4.0",
"ecosystem": "go"
},
{
"name": "@types/node",
"direct": false,
"version": "26.1.0",
"ecosystem": "npm"
},
{
"name": "@types/node",
"direct": false,
"version": "^22",
"ecosystem": "npm"
},
{
"name": "@types/vscode",
"direct": false,
"version": "^1.75.0",
"ecosystem": "npm"
},
{
"name": "@vscode/vsce",
"direct": false,
"version": "^3.2.0",
"ecosystem": "npm"
},
{
"name": "memfs",
"direct": false,
"version": "4.59.0",
"ecosystem": "npm"
},
{
"name": "typescript",
"direct": false,
"version": "6.0.3",
"ecosystem": "npm"
},
{
"name": "typescript",
"direct": false,
"version": "^5",
"ecosystem": "npm"
},
{
"name": "vscode-languageclient",
"direct": false,
"version": "^9.0.1",
"ecosystem": "npm"
}
],
"collected": true,
"truncated": false,
"total_count": 21,
"direct_count": 10,
"indirect_count": 11
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 12,
"open_issues": 5,
"closed_ratio": 0,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "rjrodger",
"commits": 266,
"avatar_url": "https://avatars.githubusercontent.com/u/138608?v=4"
},
{
"type": "User",
"login": "claude",
"commits": 54,
"avatar_url": "https://avatars.githubusercontent.com/u/81847?v=4"
}
],
"contributors_sampled": 2,
"top_contributor_share": 0.831
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"build.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "6 out of 6 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/19 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 6,
"reason": "project has 2 contributing companies or organizations -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "b79fbf2b2e2777169d0db3d8aaeca2fb5dd6e27c",
"ran_at": "2026-07-30T06:21:25Z",
"aggregate_score": 4.2,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-29T16:22:14Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-29T16:21:21Z",
"ci_last_conclusion": "FAILURE",
"oldest_open_issues": [
{
"number": 1,
"created_at": "2023-10-31T13:45:23Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 2,
"created_at": "2024-02-16T14:19:13Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 3,
"created_at": "2024-02-16T14:21:30Z",
"last_comment_at": "2024-02-16T14:22:46Z",
"last_comment_author": "rjrodger"
},
{
"number": 4,
"created_at": "2024-08-26T13:13:23Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 5,
"created_at": "2024-12-16T15:01:45Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/rjrodger/aontu",
"host": "github.com",
"name": "aontu",
"owner": "rjrodger"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 62,
"inputs": {
"security": 54,
"vitality": 89,
"community": 38,
"governance": 53,
"engineering": 71
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "excellent",
"name": "Vitality",
"value": 89,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 81,
"inputs": {
"commits_last_year": 179,
"human_commit_share": 1,
"days_since_last_push": 0,
"active_weeks_last_year": 24
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "24/52 weeks with commits",
"points": 16.6,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 24
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "179 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 179
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 7,
"latest_release_tag": "go/v0.1.6",
"releases_from_tags": false,
"days_since_latest_release": 0,
"mean_days_between_releases": 14.9
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "7 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 7
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~14.9 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 14.9
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 0,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 0 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 0
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 38,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 16,
"inputs": {
"forks": 0,
"stars": 10,
"watchers": 1,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "10 stars",
"points": 15.5,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 10
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "1 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 1
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 56,
"inputs": {
"packages": [
"github.com/rjrodger/aontu/go",
"aontu"
],
"dependents": null,
"ecosystems": "go, npm",
"total_downloads": null,
"monthly_downloads": 2298
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "2,298 downloads/month across go, npm",
"points": 44.8,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 2298,
"ecosystems": "go, npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 53,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 22,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 2,
"top_contributor_share": 0.831
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 83% of commits",
"points": 3.8,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 83
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "2 contributors",
"points": 2.7,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 2
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 6,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "at_risk",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 38,
"inputs": {
"merged_prs": 12,
"open_issues": 5,
"closed_issues": 0,
"issue_closed_ratio": 0,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "0% of issues closed",
"points": 0,
"status": "missed",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 0
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "12/12 decided PRs merged",
"points": 38.2,
"status": "met",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 12,
"decided": 12
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/19 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 68,
"inputs": {
"followers": 557,
"owner_type": "User",
"is_verified": null,
"owner_login": "rjrodger",
"public_repos": 179,
"account_age_days": 6134
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "557 followers of rjrodger",
"points": 19.7,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 557,
"login": "rjrodger"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "179 public repos, account ~16 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 179
}
},
{
"code": "account_age_years",
"params": {
"years": 16
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/rjrodger/aontu/go",
"aontu"
],
"ecosystems": "go, npm",
"any_deprecated": false,
"min_days_since_publish": 0
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "2 package(s) on go, npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 2,
"ecosystems": "go, npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 0 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 0
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "70 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 70
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 71,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "6 out of 6 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 54,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 42,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 4.2
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "6 out of 6 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/19 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 2 contributing companies or organizations -- score normalized to 6",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:aontu@0.48.2 runtime dependency closure — what installing the published package pulls in — 6 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "npm:aontu@0.48.2",
"assessed": 6
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 6,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 6,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 2
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 81,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.8,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md"
],
"agent_instruction_max_bytes": 14507
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "AGENTS.md, CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "AGENTS.md, CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "80 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 80,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "good",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 71,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
"editors/vscode/tsconfig.json",
"ts/src/tsconfig.json",
"ts/test/tsconfig.json"
],
"agent_commit_share": 0.4,
"toolchain_manifests": [
"go/go.mod"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "editors/vscode/tsconfig.json, ts/src/tsconfig.json, ts/test/tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "editors/vscode/tsconfig.json, ts/src/tsconfig.json, ts/test/tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "40 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 40,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 38391,
"source_files_sampled": 126,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/126 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 126,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-30T06:21:36.885605Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/r/rjrodger/aontu.svg",
"full_name": "rjrodger/aontu",
"license_state": "standard",
"license_spdx": "MIT"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — Go, npm.