Public record
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-24 07:44 UTC

sachitrafa / YourMemory

Agentic AI memory with Ebbinghaus forgetting curve decay. +16pp better recall than Mem0 on LoCoMo.

Python · HTML · JavaScriptCustom license★ 260 stars⑂ 21 forkssince Mar 2026View on GitHub ↗

sachitrafa/YourMemory holds a health index of 65 out of 100, placing it in the Moderate band. It scores highest on Vitality (86/100) and lowest on Community & Adoption (47/100). It was last updated 5 days ago. A single contributor accounts for most of its recent work.

65
overall / 100
Moderate

Software health index

Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.

65
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
VitalityCommunity &AdoptionSustainability &GovernanceEngineeringQualitySecurityAI Readiness

Score profile

Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.

Ownership

Sachit.MishraPersonal account
7 followers8 public repossince Jun 2019

This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.

Package ecosystems

RegistryPackageVersionDownloads / moVersionsLast publishTags
PyPIyourmemory1.4.86-990 days agomcpclaudememoryebbinghausaisqlitepostgresql

Metrics by category

Vitality

Is the project alive — is code being written and are releases shipping?

86Excellent · 22% of overall
How it's scored
36/36Push recency — last push 5 days ago
12.5/36Commit cadence — 18/52 weeks with commits
18/18Commit volume — 308 commits in the last year
10/10OpenSSF Scorecard: Maintained — 30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
Inputs used
commits_last_year308
human_commit_share1
days_since_last_push5
active_weeks_last_year18

Release discipline

100Excellent
How it's scored
27/27Ships releases — 4 releases published
36/36Release recency — latest release 59 days ago
27/27Release cadence — a release every ~18.9 days
0/10OpenSSF Scorecard: Signed-Releases — no data
Inputs used
releases_count4
latest_release_tagv1.4.26
releases_from_tagsno
days_since_latest_release59
mean_days_between_releases18.9
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.

Community & Adoption

Does the project have users, downloads, attention, and a welcoming setup for contributors?

47At risk · 18% of overall
How it's scored
39.1/60Stars — 260 stars
10.8/25Forks — 21 forks
0/15Watchers — 1 watchers
Inputs used
forks21
stars260
watchers1
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
How it's scored
22.5/22.5README
16.9/22.5License — license file present, not a recognized license
0/18CONTRIBUTING guide
0/13.5Code of conduct
0/7.2Issue template
0/6.3PR template
Inputs used
has_readmeyes
has_licenseyes
has_contributingno
has_issue_templateno
has_code_of_conductno
has_pull_request_templateno

Sustainability & Governance

Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?

49At risk · 24% of overall
How it's scored
9/54Bus factor — 1 contributor(s) cover half of all commits
0.1/22.5Commit distribution — top contributor authored 100% of commits
2.7/13.5Contributor breadth — 2 contributors
0/10OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0
Inputs used
bus_factor1
contributors_sampled2
top_contributor_share0.997
How it's scored
35.1/46.8Issue resolution — 75% of issues closed
20.4/38.3PR acceptance — 8/15 decided PRs merged
0/15OpenSSF Scorecard: Code-Review — Found 0/28 approved changesets -- score normalized to 0
Inputs used
merged_prs8
open_issues1
closed_issues3
issue_closed_ratio0.75
closed_unmerged_prs7
How it's scored
10/30Ownership backing — personal (user) account
0/20Verified domain — not applicable to user accounts
6.5/25Owner reach — 7 followers of sachitrafa
18.9/25Track record — 8 public repos, account ~7 yr old
Inputs used
followers7
owner_typeUser
is_verified
owner_loginsachitrafa
public_repos8
account_age_days2,606
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.
How it's scored
25/25Published & resolvable — 1 package(s) on pypi
35/35Publish recency — latest publish 0 days ago
20/20Version history — 99 published versions
20/20Not deprecated — active, not deprecated or yanked
Inputs used
packagesyourmemory
ecosystemspypi
any_deprecatedno
min_days_since_publish0

Engineering Quality

Are baseline engineering and documentation practices in place?

81Good · 20% of overall
How it's scored
24/24CI workflows — 3 workflow(s)
24/24Tests present
0/16Linter config
0/9.6Pre-commit hooks
0/6.4.editorconfig
20/20OpenSSF Scorecard: CI-Tests — 1 out of 1 merged PRs checked by a CI test -- score normalized to 10
Inputs used
has_ciyes
has_testsyes
has_editorconfigno
has_linter_configno
has_precommit_configno

Documentation

100Excellent
How it's scored
30/30README
25/25Documentation directory
15/15Documentation / homepage site — https://yourmemoryai.xyz/
10/10Repository description
10/10Topics — 13 topics
10/10Wiki
Inputs used
topicsai-agents, claude, ebbinghaus, llm-memory, mcp, memory, model-context-protocol, pgvector, agent-memory, devtools, mcp-server, persistent-memory, rag
has_wikiyes
homepagehttps://yourmemoryai.xyz/
has_readmeyes
has_docs_diryes
has_descriptionyes

Security

Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?

58Moderate · 16% of overall
How it's scored
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — branch protection not enabled on development/release branches
2.5/2.5CI-Tests — 1 out of 1 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 0/28 approved changesets -- score normalized to 0
0/2.5Contributors — project has 0 contributing companies or organizations -- score normalized to 0
10/10Dangerous-Workflow — no dangerous workflow patterns detected
7.5/7.5Dependency-Update-Tool — update tool detected
0/5Fuzzing — project is not fuzzed
2.2/2.5License — license file detected
7.5/7.5Maintained — 30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
5/5Packaging — packaging workflow detected
0/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
0/5SAST — SAST tool is not run on all commits -- score normalized to 0
5/5Security-Policy — security policy file detected
0/7.5Signed-Releases — no data
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
0/7.5Vulnerabilities — 13 existing vulnerabilities detected
Inputs used
sourceopenssf_scorecard
checks_evaluated17
scorecard_versionv5.5.0
checks_inconclusive1
scorecard_aggregate4.8
Excluded from scoring (no data or not applicable): signed_releases. Remaining weights renormalized.
How it's scored
35/35Direct dependencies free of known advisories — no direct dependency carries a known advisory
0/25Indirect dependencies free of known advisories — transitive set not separable from development and test dependencies in this scope
0/40No advisories left outstanding — no advisory carries a publication date
Inputs used
sourceosv
advisories13
affected_packages4
assessed_packages106
unassessed_packages16
affected_by_severityhigh 3, moderate 1
direct_affected_packages0
Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 106 resolved dependencies against OSV. 16 could not be assessed — no resolved version, an unsupported ecosystem, or beyond the reported package list. This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.

AI Readiness

How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.

68Moderate · 0% of overall
How it's scored
45/45Agent instructions — CLAUDE.md
15/15Machine-readable docs (llms.txt) — llms.txt present
40/40Legible commit history — 100 of 100 human commits state their intent (structured subject or explanatory body)
Inputs used
has_llms_txtyes
legible_history_share1
agent_instruction_filesCLAUDE.md
agent_instruction_max_bytes724
How it's scored
0/18One-command bootstrap
22/22Automated tests
0/11Lint / format config
11/11Static type checking — cloudflare-worker/tsconfig.json
10/10Reproducible environment — Dockerfile, lockfile
10/10Demonstrated agent practice — 48 of the last 100 commits agent-authored or agent-credited
5/8Automated maintenance — dependency automation configured, none observed in the sampled commits
0/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
Inputs used
has_nixno
has_testsyes
lockfilespackage-lock.json
has_dockerfileyes
typed_languageno
bootstrap_files
has_devcontainerno
has_linter_configno
typecheck_configscloudflare-worker/tsconfig.json
agent_commit_share0.48
toolchain_manifests
dependency_bot_commit_share0
How it's scored
27/45Type-checkable code — Python with type-check config (cloudflare-worker/tsconfig.json)
54.3/55Manageable file sizes — 1/82 source files over 60KB
Inputs used
primary_languagePython
largest_source_bytes78,963
source_files_sampled82
oversized_source_files1
How it's scored
0/40API schema (OpenAPI/GraphQL/proto)
20/20MCP server
0/40Runnable examples
Inputs used
example_dirs
has_mcp_signalyes
api_schema_files

Key facts

260GitHub stars
2contributors
308commits, last 12 months
5days since last push
4releases
1bus factor
1open issues
npm, PyPIpackage ecosystems

Data collection warnings

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
  • deps.dev does not index pypi:yourmemory@1.4.86; advisories assessed against the repository dependency graph instead

More detail

Star and fork history 0 ★ / 21 ⇿
0Stars
21Forks
4Releases

When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.

048121620242152026-032026-052026-07
Major 0Minor 1Patch 3
OpenSSF Scorecard 4.8 / 10
4.8aggregate

Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-24 07:44 UTC

10Binary-Artifactsno binaries found in the repo
0Branch-Protectionbranch protection not enabled on development/release branches
10CI-Tests1 out of 1 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 0/28 approved changesets -- score normalized to 0
0Contributorsproject has 0 contributing companies or organizations -- score normalized to 0
10Dangerous-Workflowno dangerous workflow patterns detected
10Dependency-Update-Toolupdate tool detected
0Fuzzingproject is not fuzzed
9Licenselicense file detected
10Maintained30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10
10Packagingpackaging workflow detected
0Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 0
0SASTSAST tool is not run on all commits -- score normalized to 0
10Security-Policysecurity policy file detected
n/aSigned-Releasesno releases found
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
0Vulnerabilities13 existing vulnerabilities detected
Direct dependencies 12
RegistryPackageVersion constraintManifest
PyPIpython-dotenvpyproject.toml
PyPImcppyproject.toml
PyPIsentence-transformerspyproject.toml
PyPInumpypyproject.toml
PyPIpython-dateutilpyproject.toml
PyPIduckdb>=0.10.0pyproject.toml
PyPIapschedulerpyproject.toml
PyPIspacy>=3.8.13,<4.0pyproject.toml
PyPInetworkx>=3.0pyproject.toml
PyPIfastapipyproject.toml
PyPIuvicornpyproject.toml
PyPIhttpxpyproject.toml
All dependencies 122

Full resolved dependency set from the GitHub dependency graph: 12 direct and 110 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.

RegistryPackageVersionRelation
PyPIapschedulerdirect
PyPIduckdbdirect
PyPIfastapidirect
PyPIhttpxdirect
PyPImcpdirect
PyPInetworkxdirect
PyPInumpydirect
PyPIpython-dateutildirect
PyPIpython-dotenvdirect
PyPIsentence-transformersdirect
PyPIspacydirect
PyPIuvicorndirect
npm@cloudflare/kv-asset-handler0.3.4indirect
npm@cloudflare/unenv-preset2.0.2indirect
npm@cloudflare/workerd-darwin-641.20250718.0indirect
npm@cloudflare/workerd-darwin-arm641.20250718.0indirect
npm@cloudflare/workerd-linux-641.20250718.0indirect
npm@cloudflare/workerd-linux-arm641.20250718.0indirect
npm@cloudflare/workerd-windows-641.20250718.0indirect
npm@cloudflare/workers-types4.20260611.1indirect
npm@cspotcode/source-map-support0.8.1indirect
npm@emnapi/runtime1.11.0indirect
npm@esbuild-plugins/node-globals-polyfill0.2.3indirect
npm@esbuild-plugins/node-modules-polyfill0.2.2indirect
npm@esbuild/android-arm0.17.19indirect
npm@esbuild/android-arm640.17.19indirect
npm@esbuild/android-x640.17.19indirect
npm@esbuild/darwin-arm640.17.19indirect
npm@esbuild/darwin-x640.17.19indirect
npm@esbuild/freebsd-arm640.17.19indirect
npm@esbuild/freebsd-x640.17.19indirect
npm@esbuild/linux-arm0.17.19indirect
npm@esbuild/linux-arm640.17.19indirect
npm@esbuild/linux-ia320.17.19indirect
npm@esbuild/linux-loong640.17.19indirect
npm@esbuild/linux-mips64el0.17.19indirect
npm@esbuild/linux-ppc640.17.19indirect
npm@esbuild/linux-riscv640.17.19indirect
npm@esbuild/linux-s390x0.17.19indirect
npm@esbuild/linux-x640.17.19indirect
npm@esbuild/netbsd-x640.17.19indirect
npm@esbuild/openbsd-x640.17.19indirect
npm@esbuild/sunos-x640.17.19indirect
npm@esbuild/win32-arm640.17.19indirect
npm@esbuild/win32-ia320.17.19indirect
npm@esbuild/win32-x640.17.19indirect
npm@fastify/busboy2.1.1indirect
npm@img/sharp-darwin-arm640.33.5indirect
npm@img/sharp-darwin-x640.33.5indirect
npm@img/sharp-libvips-darwin-arm641.0.4indirect
npm@img/sharp-libvips-darwin-x641.0.4indirect
npm@img/sharp-libvips-linux-arm1.0.5indirect
npm@img/sharp-libvips-linux-arm641.0.4indirect
npm@img/sharp-libvips-linux-s390x1.0.4indirect
npm@img/sharp-libvips-linux-x641.0.4indirect
npm@img/sharp-libvips-linuxmusl-arm641.0.4indirect
npm@img/sharp-libvips-linuxmusl-x641.0.4indirect
npm@img/sharp-linux-arm0.33.5indirect
npm@img/sharp-linux-arm640.33.5indirect
npm@img/sharp-linux-s390x0.33.5indirect
npm@img/sharp-linux-x640.33.5indirect
npm@img/sharp-linuxmusl-arm640.33.5indirect
npm@img/sharp-linuxmusl-x640.33.5indirect
npm@img/sharp-wasm320.33.5indirect
npm@img/sharp-win32-ia320.33.5indirect
npm@img/sharp-win32-x640.33.5indirect
npm@jridgewell/resolve-uri3.1.2indirect
npm@jridgewell/sourcemap-codec1.5.5indirect
npm@jridgewell/trace-mapping0.3.9indirect
npmacorn8.14.0indirect
npmacorn-walk8.3.2indirect
npmas-table1.0.55indirect
npmblake3-wasm2.1.5indirect
npmcolor4.2.3indirect
npmcolor-convert2.0.1indirect
npmcolor-name1.1.4indirect
npmcolor-string1.9.1indirect
npmcookie0.7.2indirect
npmdata-uri-to-buffer2.0.2indirect
npmdefu6.1.7indirect
npmdetect-libc2.1.2indirect
npmesbuild0.17.19indirect
npmescape-string-regexp4.0.0indirect
npmestree-walker0.6.1indirect
npmexit-hook2.2.1indirect
npmexsolve1.0.8indirect
npmfsevents2.3.3indirect
npmget-source2.0.12indirect
npmglob-to-regexp0.4.1indirect
npmis-arrayish0.3.4indirect
npmmagic-string0.25.9indirect
npmmime3.0.0indirect
npmminiflare3.20250718.3indirect
npmmustache4.2.0indirect
npmohash2.0.11indirect
npmpath-to-regexp6.3.0indirect
npmpathe2.0.3indirect
npmprintable-characters1.0.42indirect
npmrollup-plugin-inject3.0.2indirect
npmrollup-plugin-node-polyfills0.2.1indirect
npmrollup-pluginutils2.8.2indirect
npmsemver7.8.4indirect
npmsharp0.33.5indirect
npmsimple-swizzle0.2.4indirect
npmsource-map0.6.1indirect
npmsourcemap-codec1.4.8indirect
npmstacktracey2.2.0indirect
npmstoppable1.1.0indirect
npmtslib2.8.1indirect
npmtypescript5.9.3indirect
npmufo1.6.4indirect
npmundici5.29.0indirect
npmunenv2.0.0-rc.14indirect
npmworkerd1.20250718.0indirect
npmwrangler3.114.17indirect
npmws8.18.0indirect
npmyouch3.3.4indirect
npmzod3.22.3indirect
PyPIneo4jindirect
PyPIpgvectorindirect
PyPIpsycopg2-binaryindirect
PyPIsetuptoolsindirect
Dependency advisories 4

This repository publishes no package the index resolves, so its own dependency graph was assessed — 106 packages, which also include development and test pins that never ship: 4 carry known advisories, of which 0 are direct. 16 could not be assessed — no resolved version, an unsupported ecosystem, or beyond the reported package list.

PackageVersionRelationSeverityAdvisoriesFixed in
sharp0.33.5indirecthigh10.35.0
undici5.29.0indirecthigh98.5.0
ws8.18.0indirecthigh28.21.0
esbuild0.17.19indirectmoderate10.25.0

An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.

Raw JSON report machine-readable
{
  "data": {
    "repo": {
      "topics": [
        "ai-agents",
        "claude",
        "ebbinghaus",
        "llm-memory",
        "mcp",
        "memory",
        "model-context-protocol",
        "pgvector",
        "agent-memory",
        "devtools",
        "mcp-server",
        "persistent-memory",
        "rag"
      ],
      "is_fork": false,
      "size_kb": 63016,
      "has_wiki": true,
      "homepage": "https://yourmemoryai.xyz/",
      "languages": {
        "HTML": 168988,
        "Shell": 8415,
        "Python": 740061,
        "Dockerfile": 604,
        "JavaScript": 115814,
        "TypeScript": 29106
      },
      "pushed_at": "2026-07-18T23:53:07Z",
      "created_at": "2026-03-02T10:20:11Z",
      "owner_type": "User",
      "updated_at": "2026-07-22T15:06:00Z",
      "description": "Agentic AI memory with Ebbinghaus forgetting curve decay. +16pp better recall than Mem0 on LoCoMo.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": null,
      "default_branch": "main",
      "license_spdx_raw": "NOASSERTION",
      "primary_language": "Python",
      "significant_languages": [
        "Python",
        "HTML",
        "JavaScript"
      ]
    },
    "owner": {
      "blog": null,
      "name": "Sachit.Mishra",
      "type": "User",
      "login": "sachitrafa",
      "company": null,
      "location": null,
      "followers": 7,
      "avatar_url": "https://avatars.githubusercontent.com/u/51364546?v=4",
      "created_at": "2019-06-04T10:06:09Z",
      "is_verified": null,
      "public_repos": 8,
      "account_age_days": 2606
    },
    "license": {
      "state": "custom",
      "spdx_id": null,
      "raw_spdx": "NOASSERTION",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v1.4.26",
          "kind": "patch",
          "published_at": "2026-05-25T18:31:16Z"
        },
        {
          "tag": "v1.3.0",
          "kind": "minor",
          "published_at": "2026-04-10T04:27:51Z"
        },
        {
          "tag": "v1.2.1",
          "kind": "patch",
          "published_at": "2026-03-31T17:42:00Z"
        },
        {
          "tag": "v1.0.3",
          "kind": "patch",
          "published_at": "2026-03-30T04:27:49Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "0bda3e0331e67b357832735f6beec3d3f7fb022e",
          "body": "Fix/stop hook tool turn parsing",
          "is_bot": false,
          "headline": "Merge pull request #27 from sachitrafa/fix/stop-hook-tool-turn-parsing",
          "author_name": "Sachit.Mishra",
          "author_login": "sachitrafa",
          "committed_at": "2026-07-14T18:23:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "605eab3810b3d2203d51bc65a1cde9b70c64ac21",
          "body": "Turns the advisory access checks into real enforcement. New require_caller()\ndependency resolves a trusted identity from the ym_ API key\n(Authorization: Bearer / X-YourMemory-Key); effective_user() locks userId/\nmemberId to that identity so a caller can't act as anyone else.\n\nTwo postures via YOURME\n[…]\n blocks\ncross-user reads, id spoofing, and unauthorized pool writes (8/8). Existing\npool suite still 10/10; live server in off mode unaffected.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(auth): enforce per-user + pool access control via ym_ API keys",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-07-14T14:09:18Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "04c23c7ffe5c52d987c42e48a16f7d91e39b25ce",
          "body": "extract_all_exchanges paired each user prompt with messages[i+1] — the\nassistant's short preamble (\"I'll fetch that repository...\") — and threw\naway the real answer that follows the tool calls. Tool results are type\n\"user\" with no text block, so they filter out and the preamble wins the\npairing. Eve\n[…]\nIt\nnever creates hooks a user lacks and never touches settings.json.\n\nTests: tests/test_store_hook.py (parser), tests/test_hook_sync.py (sync).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(hooks): Stop hook dropped the answer on every tool-using turn",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-07-14T08:23:07Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3c8497eb75b413898137ef44ae480573ff83c013",
          "body": "… isolation\n\nAdd tests/test_pools.py guarding the bug where GET /pools/{id}/memories 500'd:\ncalling the list_memories route as a plain function left un-passed params as\nFastAPI Query() sentinels, which are truthy and got bound into SQL. Verified the\ntest actually catches it — reintroducing the bug f\n[…]\nUCTION\ndatabase. Now _duckdb_path() honours YOURMEMORY_DB, and the tests blank\nDATABASE_URL first so they fall back to a throwaway DuckDB file.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test(pools): regression test for the Query-sentinel 500 + fix test DB…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-07-14T06:41:10Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f4bbe19aa47190592abf8185c0241cb770c0436a",
          "body": "…nto SQL\n\nlist_memories is a FastAPI route, but pools.py and memory_mcp.py called it as a\nplain Python function. Un-passed params kept their Query(...) sentinel defaults,\nwhich are truthy — so `if category:` / `if agent_id:` fired and a Query object\nwas bound into SQL (\"can't adapt type 'Query'\"), 5\n[…]\nt=False (the generic read/list event would record the pool namespace\nas the actor rather than the member; access is already gated by _require).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(pools): 500 on GET /pools/{id}/memories — Query sentinels bound i…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-07-13T15:56:16Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0ea008e70d7e9ee02db521ab31ce15c73b4ee7c5",
          "body": "The build downloaded the embedding model with SentenceTransformer's default\ndevice, which selects MPS (Metal) on Apple-Silicon runners and OOMs while just\nloading the model. Force device=\"cpu\" for the download/save (no GPU needed), and\nset PYTORCH_ENABLE_MPS_FALLBACK at runtime so end-users on Apple Silicon degrade\nto CPU instead of crashing.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(dist): force CPU for model bundling — MPS OOM on Apple-Silicon CI",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-07-09T11:07:29Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a083a8c6513f1f2afd09a564b31704fa2e9833b8",
          "body": "Package each binary as .tar.gz (macOS/Linux, preserves exec bit) or .zip\n(Windows) before attaching to the release — smaller downloads and stays under\nGitHub's 2 GiB per-asset limit. Update README asset names + extract step.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci(dist): compress binaries before release (tar.gz / zip)",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-07-08T04:46:31Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "89347ddcb64e750ecc54eefdaea331e051ddfe05",
          "body": "…wnloads\n\nMake the standalone binary completely self-contained: in addition to Python and\nall deps, bundle both ML models so there is no first-run download.\n- yourmemory.spec: download + ship the embedding model (multi-qa-mpnet-base-dot-v1)\n  and collect_all the spaCy en_core_web_sm model.\n- binary_\n[…]\n- build-binary.sh + CI: install the spaCy model before building.\nTrade-off: ~2 GB binary. Docs updated to say \"fully self-contained & offline\".\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(dist): bundle ML models into the binary — fully offline, zero do…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-07-04T11:11:29Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e8435e2da6bff1b6a73b0f9cfd2827d0d24a22b6",
          "body": "Add a no-Python-required binary distribution:\n- binary_entry.py: single dispatcher (register / setup / ask / path / server)\n- yourmemory.spec: PyInstaller spec bundling torch, sentence-transformers,\n  spaCy, DuckDB, FastAPI/uvicorn, MCP + hook templates and SQL schemas\n- build-binary.sh: one-command\n[…]\ninux, and\n  Windows binaries on tag push and attaches them to the GitHub Release\n- README: \"Install from a binary — no Python required\" section\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(dist): standalone binary install (PyInstaller + multi-platform CI)",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-07-03T11:16:44Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "7648fbf55f409ec811c73897dedd27974ec3f3e1",
          "body": "Replace the detailed full-architecture flowchart with a high-level overview\n(client ↔ YourMemory ↔ memory/audit) and collapse the multi-round retrieval\npipeline into a simple 4-step overview. Less internal detail, clearer at a glance.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: simplify architecture + retrieval diagrams to overviews",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-07-03T05:01:38Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "76f4375f060f9b385cf6daa27e035421f6803159",
          "body": "Add the features shipped since the last README: consolidation (N->1),\ntamper-evident hash-chained audit trail, role-based team memory pools, and\nDSAR/compliance (export, right-to-forget, import, archive). Rework the intro\n(\"goldfish\" hook), add a features-at-a-glance table, and add 7 mermaid diagram\n[…]\n\npools, architecture, LoCoMo benchmark bar chart). Refresh quick-start (optional\nOllama), depersonalize examples, and update section structure.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: overhaul README — new features, engaging copy, mermaid diagrams",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-07-03T04:07:15Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "34f38124b2cbde3e66d57dfc3da046bd614a1c3d",
          "body": "…ctions\n\nRemove the \"Under the hood / Three layers. One engine.\" (#engine) section and\nthe \"The forgetting curve\" (#decay) interactive section, plus their nav links\n(desktop + mobile) and an orphaned comment. The decay-canvas JS is now unused\nbut safely guarded (if (!canvas) return), so nothing errors. Verified: no dead\n#engine/#decay anchors, 0 JS errors.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "content(site): remove Engine (\"Three layers\") and forgetting-curve se…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-07-02T19:04:38Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "43ce38d2447f3e720ea49f7a1059d1fcb3429c1c",
          "body": "Published 1.4.82 shipped before the audit fix landed and PyPI versions are\nimmutable, so bump to 1.4.83 (contains the read/list audit gating + calmer\nOllama onboarding).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: bump to 1.4.83 to ship the audit-trail fix",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-07-02T14:20:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "3490bcd32bc84f26c2e2fa4133dc4f1786c450f6",
          "body": "Every GET /memories logged a read/list audit row, and the dashboard re-fetches\nthe memories list on each load/refresh — so the audit filled with identical\nread·list entries on every refresh.\n\nAdd an `audit` query flag to the list endpoint (default true, so external API\nlist access is still audited) \n[…]\ns audit=false for its\nown render/refresh fetches. Verified: audit=false adds 0 rows across repeated\nloads; default still audits API list calls.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(audit): stop dashboard refresh from spamming the audit trail",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-07-02T14:00:46Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "cd0c20f37451ad980dfc8b9a0fe6418cf0b336eb",
          "body": "Change nav link color from dim #44566e to #ffffff so the header items read\nclearly on the dark theme (hover stays cyan). Keep the benchmark tab\nactive/inactive distinction (active white, inactive muted slate).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "style(site): white nav links",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-07-02T12:38:34Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ed9f282b919289ffcd4211c3ffb9c3c1cd36a5d3",
          "body": "The shared/private pill badges sat only ~30px off center while node circles +\nglow span ~38px, so every badge overlapped its node. Reposition badges to point\noutward from the hub (top nodes above, bottom nodes below the name) with proper\nclearance, and expand the SVG viewBox (0 -30 820 360) to make room for the\ntop/bottom-center badges.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(site): team-sharing graph — badges no longer overlap node circles",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-07-02T12:23:50Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "6cd6446ce206bc70d8363bee78acc7331afad800",
          "body": "Change heading color from off-white #e6edf6 to pure #ffffff across all\nheadlines/section headers for crisper contrast on the dark theme.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "style(site): pure white headers",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-07-02T12:16:48Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "1a6a9ab729f8474fd88a0b20f4dad9227fe75c82",
          "body": "- Off-white code blocks (rgba(234,242,251,0.95)) survived the dark conversion\n  and clashed with cyan text (unreadable). Convert to subtle dark panels so the\n  cyan monospace reads cleanly — fixes pip-install blocks, audit prompt,\n  memory examples, and the final CTA block.\n- Tone the hero \"brain\" n\n[…]\n a subtle constellation:\n  ~1/3 the nodes, softer glow, fainter links and dimmer cores. Calm background\n  graphic rather than a busy animation.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(site): dark code blocks + subtle hero graphic",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-07-02T12:10:06Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3e2625595142def73ebc7b3fab4161b86ef1a481",
          "body": "Widen card internal padding (26-36px -> 32-44px) and open up the feature-grid\ngaps (18/22px -> 24/30px) for the calmer, more spacious Obsidian-style rhythm.\nAdditive spacing only; theme/colors unchanged.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "style(site): airier feature cards + grids (Obsidian polish, cont.)",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-07-02T11:58:58Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "55ed2227ef0e8c9e3090ad3c02afa19da8896697",
          "body": "Open up vertical whitespace between sections for a calmer, more premium feel\ninspired by obsidian.md — widen the shared section padding from\nclamp(60,8vw,110) to clamp(92,11vw,168) (and the two larger variants\nproportionally), plus a touch more air under the hero subhead. Colors/theme\nunchanged (dark navy + cyan/teal).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "style(site): Obsidian-style airier section rhythm (keep cyan theme)",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-07-02T11:36:47Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "fd088f6e4ff964b3d838668d6c2783348ccfd488",
          "body": "Two contrast regressions from the light->dark conversion:\n- Body/label text (#8294a8) was too dim on navy -> brightened to #cdd9e8.\n- Card backgrounds got mapped to low-opacity navy fills (rgba(12,20,36,0.04-0.12))\n  that read identical to the page bg, so cards blended in / disappeared.\n  Flipped th\n[…]\ntints (rgba(255,255,255,0.045-0.06)) so cards\n  lift off the dark background like the interactive demo. Nav/modal overlays\n  (0.28+) kept dark.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(site): dark-theme contrast — brighten text, make cards visible",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-07-02T11:13:49Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "19ac288bad7329818ee1e913f0ce837503b6216f",
          "body": "Convert the marketing site from light to the dark scheme used across the\ninteractive demo and PH gallery: navy background (#070b13/#0a2540), off-white\nheadlines (#e6edf6), muted slate body (#8294a8), cyan #19cdff + teal #5eead4\naccents and gradients, and cyan/teal glowing node network. Inverts card\n\n[…]\n fixes a hero-overlay gradient that\nwas fading to white, and brightens the MCP pill text. Semantic data-viz\ncolors (amber/red/green) preserved.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "style(site): dark navy + cyan/teal theme to match interactive demo",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-07-02T10:57:48Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6a0c2c21b07646d605f020ee75de85db1a6a6a00",
          "body": "Per direction: drop cyan entirely, use navy blue (#1e3a8a) over white with\ndeep navy (#0a192f) for headlines/dark base. Remaps all former cyan accents\n(buttons, wordmark, links, gradients, glows) to navy, and repoints the hero\nnode-network canvas colors (CYAN/MINT constants) from blue-cyan/teal to navy\nshades. Semantic data-viz colors (amber/red/green) preserved.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "style(site): switch theme to navy blue + white (no cyan)",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-07-02T10:36:28Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ff8329ac7d3287c5f803aeb841471c558d0faa89",
          "body": "Theme: align the whole site to the logo's exact palette — bright cyan\n#00d4ff and deep cyan #0393b6 over navy #0a192f. Collapses the scattered\nblue/teal accents (#19cdff, #0a87cc, #0d8fd6, #0fb5a8, #0a2540) into the two\nlogo cyans; brand gradients now run bright→deep cyan instead of cyan→teal.\nSeman\n[…]\nserved for chart readability.\n\nAlso genericized leaked local home paths (/Users/<name>/...) in benchmark\nresult JSONs and precisionmembench.py.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "style(site): unify palette to logo colors; scrub local home paths",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-07-02T10:24:18Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ed64ca259e2e420f39dbba4963497172dde29b49",
          "body": "People on launch day read the \"Ollama not reachable\" setup warning as a fatal\nerror, but YourMemory works fine without it: the STORE/SKIP relevance filter\nfails open and extraction falls back to built-in heuristics. Ollama is a\nquality enhancement, not a requirement.\n\n- memory_mcp.py: rewrite _check\n[…]\n extract backend as an alternative.\n- index.html: add a \"Do I need Ollama or any other service?\" FAQ entry.\n- pyproject.toml: 1.4.81 -> 1.4.82.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(setup): reframe optional Ollama step + add FAQ; bump to 1.4.82",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-07-01T11:22:12Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "aec41cdf0c5a1f334d596cf03e492d69a97cfa4b",
          "body": "…gnup\n\nThe redesigned marketing site replaced the working email→OTP→token flow with\nplaceholder handlers: sendCode() only advanced the UI (never called the\nbackend / sent an email) and verifyCode() fabricated a random ym_ token\nclient-side instead of verifying. Result: no emails sent, and users got \n[…]\nsurfaces\nthose errors in the UI (invalid/disposable email, wrong code). Backend +\nResend were verified healthy end-to-end (live OTP delivered).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(site): restore real email OTP flow — redesign shipped a mocked si…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-07-01T09:02:15Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "11bf7d832b2ef5f3fff44575d06000d182284bb4",
          "body": "…demo\n\nRemoves the manual Run/Next button and the step-through code; the demo now\nruns solely via the Auto-play button (or ?autoplay=1). Simpler, hands-free,\nideal for clean screen recording.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(marketing): make Auto-play the only trigger for interactive …",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-07-01T07:00:54Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "bbb3755e1edb5bb9da039db67d936d6fe0a8d23f",
          "body": "Adds an \"Auto-play ▶\" button and ?autoplay=1 URL param that run all 6\nsteps automatically with readable pauses — no clicking needed. Lets you\nscreen-record the demo with the cursor parked off-screen (clean capture,\nanimations preserved) and lets first-comment visitors watch it play itself.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(marketing): add hands-free auto-play to interactive demo",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-07-01T06:53:29Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "bb6f75937dc1a7d9017638905ea435fe8f87956f",
          "body": "…ate→audit)\n\nSelf-contained single-page interactive demo for the Product Hunt launch.\nWalks visitors through the YourMemory story in 6 guided steps with live\nanimations: store facts, recall after a context reset, accumulate related\nmemories, consolidate them into one summary, show the hash-chained audit\ntrail, and a CTA. On-brand (navy/cyan/teal, Space Grotesk + JetBrains Mono),\nno build step or dependencies beyond Google Fonts.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(marketing): interactive Product Hunt demo (store→recall→consolid…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-07-01T04:03:30Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d868dba41deb682aa5c26585ac31764a07062a7d",
          "body": "Exported from the Claude Design \"YourMemory PH Gallery\" project: Hook, Consolidation\n(444→16), Context recovery, Audit trail, Shared pools, and Get started — all on the\nconverging-node brand motif. Plus the dc.html source.",
          "is_bot": false,
          "headline": "marketing: Product Hunt gallery — 6 slides (1270x760)",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-30T11:24:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7a503e69102b927b755a971fbad7da4180093542",
          "body": "The Memories / Audit / Pools segmented control was cramped. Increased inter-button\ngap, button padding, and the control's corner radius/padding; added flex gap between\neach icon and label; gave the whole header more bottom margin and wrap support.",
          "is_bot": false,
          "headline": "fix(ui): proper spacing in dashboard header view switcher (v1.4.81)",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-29T10:42:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b2c72477feabfa1bb7b34d188f7754df2e9542d5",
          "body": "- index.html: add favicon / shortcut-icon / apple-touch-icon links pointing to the\n  512x512 assets/logo.png, so the YourMemory logo shows in the browser tab.\n- marketing/hero/: LinkedIn hero graphics (rereads \"158 times\" variant) exported from\n  the Claude Design project — landscape 1200x627 + square 1080x1080, plus the\n  dc.html source and runtime.",
          "is_bot": false,
          "headline": "site: add logo favicon (browser tab icon) + LinkedIn hero assets",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-29T10:20:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "70898c4bae6e67d7cc2f4f712de1856c26f5192d",
          "body": "The one thing claude-mem did that we didn't: re-orient the agent after a context\ncompaction instead of making it re-read files to rebuild state.\n\n- new yourmemory_session_start.py: on SessionStart (startup/resume/clear/compact) it\n  fetches the user's recent memories and injects them as additionalCo\n[…]\nk (both in one group). Pairs with the per-prompt recall hook.\n\nThis attacks compaction-driven re-reads (the bulk of in-session file re-reads) by handing\nthe agent its prior working context on restart.",
          "is_bot": false,
          "headline": "feat(hooks): post-compaction context injection on SessionStart (v1.4.80)",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-29T08:54:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6336ad6a4d46a3a26d020171b2c938179b3341e8",
          "body": "…s recall (v1.4.79)\n\n- pool_members is the user↔pool attachment schema (role: reader/contributor/admin)\n- /retrieve gains autoPools: a user's recall auto-unions every pool they're attached to\n  (read access), no explicit pools[] list needed — works transparently through hooks\n- readable_pools() reso\n[…]\n/detach users with roles, view\n  members; deep-linkable via /ui?view=pools\n\nVerified: dashboard CRUD flow, role gating, and autoPools recall blending personal +\nattached-pool memories (source-tagged).",
          "is_bot": false,
          "headline": "feat(pools): attach pools to users + dashboard management + auto-pool…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-29T05:15:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7e34421aeb870a1b2c5d4ec5f8270e02be88d13a",
          "body": "A pool is a shared namespace many agents contribute to and everyone with access can\nquery — the institutional-memory layer on top of personal memories. Pool memories are\nstored under a namespaced user_id ('pool:<id>'), reusing embedding, dedup, recall,\ndecay, compaction, and audit for free.\n\n- migra\n[…]\n  union recall merges personal + pool\n\nNOTE: in local mode the caller identity is client-supplied and access checks are\nadvisory; the pool model + membership is the substrate hosted RBAC will enforce.",
          "is_bot": false,
          "headline": "feat(pools): shared memory pools — team / institutional memory (v1.4.78)",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-29T04:37:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8df33d46411bcbfb26199f724a932f706a4da792",
          "body": "A full-scan compaction on a large store can take minutes; the endpoint used to block.\nNow it returns immediately ({\"status\":\"started\"}) and runs in a FastAPI background task,\nwith a per-user guard against duplicate concurrent runs. Pass ?wait=true to run\nsynchronously and get the stats back (small stores / scripts). Observe progress via\n/users/{id}/archive or /audit (operation=compact).",
          "is_bot": false,
          "headline": "feat(compaction): make manual POST /compact async/non-blocking (v1.4.77)",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-29T04:03:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dc8ced4ae5c16338f4229e4f1d262b48859d8b68",
          "body": "…ches N (v1.4.76)\n\nReplace the daily compaction sweep with an event-driven trigger: after /auto-store\nwrites a fact, maybe_compact_around() does one targeted similarity lookup, and if that\nfact's neighborhood now has >= N (YOURMEMORY_COMPACT_MIN, default 5) closely-related\nmemories, it compresses ju\n[…]\ny)\n- manual POST /compact (full scan) still available; audit detail tags trigger=\"count\"\n\nKeeps the store continuously lean instead of once-a-day, and only does LLM work when a\ncluster actually forms.",
          "is_bot": false,
          "headline": "feat(compaction): event-driven — compress a cluster the moment it rea…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-29T03:36:48Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5d4d4c53b3ec8ed046ba0a19225049165791e621",
          "body": "…e originals (v1.4.75)\n\nA memory store that only grows bloats and loses signal. Compaction clusters a user's\nmemories by embedding similarity, LLM-summarizes any cluster >= N into one consolidated\nmemory (preserving all distinct facts), and moves the originals to a memory_archive\ntable — so the live\n[…]\nual) + GET /users/{id}/archive (view originals)\n- opt-in daily job via YOURMEMORY_COMPACTION=1 (app + MCP schedulers); each run audited\n- tunables: YOURMEMORY_COMPACT_MIN (5), _SIM (0.62), _MAX (2000)",
          "is_bot": false,
          "headline": "feat(compaction): auto-summarize clusters of related memories, archiv…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-28T18:57:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "163b1a3e212663d70098cfe02ee406933f843edf",
          "body": "…imiting (v1.4.74)\n\n- GET  /users/{id}/export   — full JSON of a user's memories (DSAR access / backup)\n- DELETE /users/{id}/memories — purge all memories, graph nodes, and buffer (right-to-forget)\n- POST /users/{id}/import   — bulk restore/seed from an export (idempotent, re-embeds)\n  All three are\n[…]\nmanagement gaps (bulk import/export, backup, DSAR export + deletion)\nand the API abuse-prevention gap; makes the Data Retention Policy's right-to-forget\ncontrol fully implemented, not just documented.",
          "is_bot": false,
          "headline": "feat(dsar): export / right-to-forget purge / bulk import + API rate l…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-28T18:31:21Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "69508c103d266e876c2d5644efe073dfe8d15311",
          "body": "Adds docs/policies/ — Information Security, Access Control, Incident Response,\nVulnerability Management, Vendor Management (+ subprocessor register), Data Retention &\nDeletion (right-to-forget), Change Management, Business Continuity/DR, and a Risk\nAssessment policy + register. Each is tailored to Y\n[…]\ndit CI workflow (CC7.1 dependency scanning).\n\nDirectly addresses the High-priority organizational gaps from the SOC 2 readiness\nassessment (policies, IR, vendor mgmt, data retention, vuln management).",
          "is_bot": false,
          "headline": "docs: add SOC 2 information-security policy set + dependency scanning",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-28T11:07:20Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "cd590bdffbe22b93d9ad9ded730d067b4290e032",
          "body": "Control-by-control TSC readiness assessment derived from the codebase — technical\ncontrols (authorization, injection defense, hashed keys, tamper-evident audit trail\nwith 90-day retention) vs open organizational gaps (entity, policies, access\ngovernance, monitoring/IR). Includes gap remediation plan and free third-party\nreadiness-tool pointers. Internal self-assessment, not a SOC 2 attestation.",
          "is_bot": false,
          "headline": "docs: add SOC 2 readiness self-assessment report (v1.4.73)",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-28T05:49:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "08e397af8e07b6e7f2f4c0f36586007e8418aaf9",
          "body": "Replace index.html with the \"YourMemory Site\" design imported from the\nclaude.ai/design project, on its matched dc-runtime (support.js). Restored the\nSEO/OpenGraph/Twitter/smithery-verification meta the design export had dropped.\nVerified rendering via headless Chrome (no unresolved bindings, title + meta intact).",
          "is_bot": false,
          "headline": "feat(site): implement redesigned marketing site from Claude Design",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-28T05:36:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ebc893124c279d92eac75e23994d278965b66128",
          "body": "…1.4.73)\n\nRecall noise:\n- graph-expanded (linked) memories were injected unconditionally via `or via_graph`,\n  dragging low-relevance co-occurrence neighbours into every prompt. Now a linked\n  memory must clear MIN_GRAPH_SCORE (0.30) and only the top 3 ride along; direct hits\n  still gate on the 0.5\n[…]\n\n- paginate the memories grid (18/page) and audit table (25/page) with Prev/Next so a\n  page never renders the whole dataset at once.\n- fix cramped button spacing (view toggle, audit controls, pager).",
          "is_bot": false,
          "headline": "fix(recall+ui): drop useless injected memories; paginate dashboard (v…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-27T07:51:43Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1e4c2f9924710497c4bd6d5e53ac3e30e4ca09ec",
          "body": "… fact (v1.4.72)\n\nThe hook write path (/auto-store) previously stored whatever the extractor emitted —\nonly mechanical length/prefix filters, no semantic gate — so 7B meta leaks like\n\"The user asked about X\" got persisted. Now each fact passes is_question() + the\nmandatory should_store_llm() judge before insert. Judge prompt strengthened to skip\nmeta-observations about the conversation itself. Runs in the fire-and-forget worker\n(no turn latency); fails open only if Ollama is unreachable.",
          "is_bot": false,
          "headline": "feat(auto-store): mandatory LLM relevance judge gates every extracted…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-26T12:13:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "719e303587331a695ea854a8625d607585a6ae1a",
          "body": "The in-browser deep calculator (paste textarea + sessions/model controls +\nCalculate-savings results) didn't work, so drop it and keep the working Quick\nAudit copy-a-prompt card. Updated the section intro accordingly.",
          "is_bot": false,
          "headline": "fix(site): remove broken \"paste your conversation history\" calculator",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-26T12:03:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9f09456c8553534c6d28d8e4f7e0479956412481",
          "body": "…s to memories (v1.4.71)\n\n- /auto-store now logs one clickable 'store' event per stored memory (target_id = id)\n  instead of a single id-less batch event — the main hook write path was unlinkable\n- retrieve/list reads record the returned memory ids in detail.ids\n- Audit UI renders a single target as a link, or detail.ids as clickable chips, so\n  every read/write/delete row can open the memory(ies) it refers to",
          "is_bot": false,
          "headline": "feat(audit): attach memory ids to write/read events so the trail link…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-26T09:33:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9dff195f08f23f9eb7d878b2aa15f67a55969c82",
          "body": "/ui?view=audit deep-links straight to the Audit tab (optionally with &user=…);\ntoggling views updates the URL via history.replaceState so it's shareable and\nbookmarkable, preserving the active user.",
          "is_bot": false,
          "headline": "feat(ui): wire memory/audit view into the URL (v1.4.70)",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-26T08:51:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "496474662d5195e62d4c36b145f1e42c196cd33b",
          "body": "…(v1.4.69)\n\nEach audit row's target id is now a link; clicking it fetches /memory/get and shows\nthe memory's content, category, importance, agent, and linked memories in a modal.\nDeleted/non-owned ids resolve to a clear \"no longer exists\" message.",
          "is_bot": false,
          "headline": "feat(ui): clickable memory ids in audit trail open the memory inline …",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-26T08:28:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bfc745ba6c769f8afda31bf80f556181a7c29ef0",
          "body": "Audit trail (SOC 2):\n- append-only, hash-chained audit_log table (duckdb/postgres/sqlite) — tamper-evident\n- src/services/audit.py: log_event / verify_chain / prune_expired (90-day retention floor)\n- log every read/write/delete on the HTTP API (memories CRUD, retrieve, auto-store)\n  and the MCP tool\n[…]\nged (still qwen2.5:7b).\n\nUpgrade path:\n- yourmemory-setup now strips legacy YourMemory hooks (e.g. bash recall .sh) and\n  reinstalls the current platform-agnostic set, preserving non-YourMemory hooks.",
          "is_bot": false,
          "headline": "feat: audit trail + fire-and-forget store hook + setup upgrade (v1.4.68)",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-26T07:03:05Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8ac033f93739825e2448c97cbaec2063980c4004",
          "body": "… (v1.4.67)\n\nA session that dies without a clean SessionEnd (hard reload, crash, kill,\nterminal close) used to leave a marker that pinned the owned server up forever.\nEach marker now records its transcript_path; a sweep on every start/stop reaps\nmarkers whose transcript has shown no activity within STALE_TTL (default 6h,\noverride via YOURMEMORY_SESSION_TTL). Live sessions are never reaped; legacy\nbare-epoch markers remain backward-compatible.",
          "is_bot": false,
          "headline": "feat(hooks): reap stale session markers via transcript-mtime liveness…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-24T09:05:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "827841356c01ed8eacb8e752ec2710a2956fe1f9",
          "body": "…ll in setup (v1.4.66)\n\n- add yourmemory_server.py: starts the 3033 HTTP server on SessionStart and\n  stops it on SessionEnd, reference-counted across concurrent sessions and\n  ownership-guarded so an MCP-started server is never killed\n- pure stdlib, works on Windows/macOS/Linux (no bash/jq/launchd/systemd)\n- yourmemory-setup now installs the Python recall hook (not bash) plus the\n  SessionStart/SessionEnd server hooks; MCP config left untouched",
          "is_bot": false,
          "headline": "feat(hooks): session-scoped server lifecycle + platform-agnostic reca…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-24T08:24:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6874bf722f8dd9a1d38e5e988b94edc166b710eb",
          "body": "- PUT/DELETE /memories: enforce user_id ownership (IDOR)\n- PUT /memories: re-raise HTTPException so 403 isn't swallowed\n- graph_viz: filter graph data by user_id; escHtml + safeCat allowlist (XSS)\n- MCP update_memory: caller ownership check (IDOR)\n- verify-token: POST with token in body instead of U\n[…]\ny (log leakage)\n- worker /emails: HTML-escape email/instance_id/created_at (stored XSS)\n- worker /verify-otp: cap OTP guesses at 5 then burn code (brute-force)\n- add SECURITY.md SOC 2 posture document",
          "is_bot": false,
          "headline": "security: IDOR + XSS + OTP brute-force fixes (v1.4.65)",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-24T06:43:43Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "62f2a8e14b5c8b291cfc84d432e800a7771e548e",
          "body": "…k exposure (v1.4.62)\n\n- XSS (ui.py): replace inline onclick with data-tab-id + addEventListener\n- IDOR (memories.py): add userId ownership check to DELETE and PUT WHERE clauses\n- Auth bypass (memory_mcp.py): move _token_verified=True inside try block after valid check\n- SSE binding (memory_mcp.py): default host to 127.0.0.1, override via YOURMEMORY_HOST",
          "is_bot": false,
          "headline": "fix(security): patch 5 SOC2 findings — XSS, IDOR, auth bypass, networ…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-24T05:24:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cf6cc78198df25de47e4d4a5c6822fce596ea9b8",
          "body": "…al ternary in style attrs",
          "is_bot": false,
          "headline": "fix(site): pre-compute button styles in renderVals — dc.html can't ev…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-23T16:44:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e6491051507dbdbac9799f155dcf816c57f23c52",
          "body": null,
          "is_bot": false,
          "headline": "feat(site): add prominent copy button to quick audit card",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-23T16:37:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f7a5dacbb01024e949458185d7ffc2d2abe67c00",
          "body": "…mpt + button validation\n\n- Audit prompt rewritten to work on any AI (no YourMemory knowledge needed)\n- Calculate button grays out with \"Paste a conversation first\" when textarea empty\n- Deep calculator wrapped in card with local/private badge\n- Quick audit card updated: mentions Claude, ChatGPT, Gemini, Cursor, Copilot\n- Cleaner visual hierarchy: quick audit → divider → deep calculator",
          "is_bot": false,
          "headline": "feat(site): redesign savings calculator — platform-agnostic audit pro…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-23T16:31:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a3958958991c782f9e142df8858c937302c142f0",
          "body": "…1.4.61)\n\nReplaces yourmemory_recall.sh with yourmemory_recall.py — pure Python,\nstdlib only, works on Windows/macOS/Linux without any system dependencies.\nSame logic: resolves user_id, queries /retrieve, filters by score/graph,\ninjects additionalContext for UserPromptSubmit.",
          "is_bot": false,
          "headline": "feat(hooks): platform-agnostic Python recall hook, no bash/jq/curl (v…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-23T05:38:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "54afbf904dcddf6447bb9b378a42b867f42ca95f",
          "body": "…tive (v1.4.60)\n\nAdds Anthropic API as extraction backend for /auto-store and /observe.\nSet YOURMEMORY_EXTRACT_BACKEND=anthropic + ANTHROPIC_API_KEY to use\nClaude instead of a local Ollama model. Ollama remains the default.\nOptional YOURMEMORY_EXTRACT_MODEL overrides the model (default: claude-haiku-4-5-20251001).\nRemoves rules-based backend added in v1.4.59.",
          "is_bot": false,
          "headline": "feat(extract): YOURMEMORY_EXTRACT_BACKEND=anthropic as Ollama alterna…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-22T19:21:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2f1f01853982cb4fbdcdafaaceb3b52fb7f7eac2",
          "body": "…lls (v1.4.59)\n\nAdds spaCy NER + regex extraction backend for /auto-store and /observe.\nOllama remains the default. Set YOURMEMORY_EXTRACT_BACKEND=rules to run\nfully offline with no local LLM — uses sentence splitting, NER entity\ndetection, and failure/strategy/assumption pattern matching.",
          "is_bot": false,
          "headline": "feat(extract): YOURMEMORY_EXTRACT_BACKEND=rules for Ollama-free insta…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-22T18:38:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "540e1440bf16a7c846085a793fabcfa29a89e07c",
          "body": "…nstalls (v1.4.58)\n\nSet env var to switch from sentence-transformers (768-dim) to spaCy\nen_core_web_md (300-dim) — no HuggingFace dependency, no new packages.\nDefault behaviour unchanged. Switching backends requires a fresh DB.",
          "is_bot": false,
          "headline": "feat(embed): YOURMEMORY_EMBED_BACKEND=spacy for HuggingFace-blocked i…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-22T13:09:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7fa5e055b0be38bf0de347a4d2e96cbf3300f990",
          "body": "…ty-state guard",
          "is_bot": false,
          "headline": "fix(calc): step 1 standalone audit, step 2 independent deep dive, emp…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-22T09:43:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "49e64c6623b5bceb760b1bb71813eea36188785d",
          "body": "…t gate on calculate",
          "is_bot": false,
          "headline": "fix(calc): use explicit boolean comparisons in sc-if and remove silen…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-22T08:42:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d3dab89054105464ae0434bc337a76b87ed3e92a",
          "body": "…cit click",
          "is_bot": false,
          "headline": "feat(calc): add Calculate savings button — results gated behind expli…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-22T07:56:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ea7e434155da8cd0a6b926c4d6aea25ca01d7fda",
          "body": "…sion, step 2 paste response",
          "is_bot": false,
          "headline": "feat(calc): add copyable audit prompt — step 1 copy/paste into AI ses…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-22T05:55:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "70e035ae316f5dd90e900779577f5902ab2436d2",
          "body": "…ct counts as-you-type",
          "is_bot": false,
          "headline": "feat(calc): client-side tokenizer via gpt-tokenizer — no API key, exa…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-22T05:32:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "920144bede1516cad8cdfd742f31a32739c0f242",
          "body": "…mate backend + UI analyze button",
          "is_bot": false,
          "headline": "feat(calc): exact token count via Claude tokenizer — POST /token-esti…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-21T18:44:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9c96a66b5391f51f0750b3f2294e33e0b6db93b3",
          "body": null,
          "is_bot": false,
          "headline": "feat(site): token savings calculator — paste history, see exact savings",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-21T11:45:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c029ff28da20a9e15e6937488a321f019e1ffc05",
          "body": "…s() lag",
          "is_bot": false,
          "headline": "perf(site): cache static arrays in _initData() to eliminate renderVal…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-20T05:14:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5390c272647c89cba11df3cb2ac9e33cb30849b1",
          "body": "…n with !important",
          "is_bot": false,
          "headline": "fix(site): contain enterprise SVG on mobile — override overflow:hidde…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-20T04:59:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cf4ad8cd66a949ea4b139b6724f8ab056013553d",
          "body": "- Pull fresh YourMemory Site Dark.dc.html with burger menu, media\n  queries, and data-nav/data-r responsive attributes\n- Re-apply SEO meta, Smithery verification, OG/Twitter cards, favicons\n- Re-apply real registration backend (send-otp / verify-otp)\n- Re-apply inline error display and copy-token button\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(site): sync updated design bundle (mobile nav + responsive CSS)",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-20T04:56:10Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c05942b98d1e220681e21e3b759de6fb23307f6c",
          "body": "Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(site): restore assets/logo.png in design bundle",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-20T04:48:01Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b91f2588646d52ee0e4c21e6e7e602c4e374108d",
          "body": "- Replace index.html with new dark design from Claude Design\n- Add support.js + assets/ bundle for the dc.html runtime\n- Wire real registration backend (yourmemory-backend.yourmemoryai.workers.dev)\n- Add SEO meta tags, Smithery verification, OG/Twitter cards, favicons\n- Add inline error display for \n[…]\nt to surface\n  write-lock conflicts instead of hanging indefinitely (v1.4.57)\n- Add Troubleshooting section to README for Claude Desktop hang\n\nCo-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(site): new dark design + DuckDB write-lock timeout fix (v1.4.57)",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-20T04:44:53Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "7113850049ce41434ee4f1ddf5b4245fe52ea0f0",
          "body": "…icts (v1.4.57)",
          "is_bot": false,
          "headline": "fix(db): add 8s timeout on DuckDB connect to surface write-lock confl…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-19T19:21:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "86583f32dd6a1dcfc04c96c06299b98285f57d2a",
          "body": "The low-friction, client-native way to give interactive Claude Code the same work-detail\ncapture the proxy does — without routing all traffic through a proxy (invasive, critical-\npath, a compliance non-starter for enterprises).\n\n- yourmemory_observe.py: PostToolUse hook that distills substantial too\n[…]\nil-open like the other hooks — if YourMemory is down, Claude Code is\nunaffected. Verified: a Read tool result yields 9 recallable observations.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(hooks): PostToolUse capture adapter for Claude Code (v1.4.56)",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-18T18:52:09Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ec6922e9df490f6c36736ca9f73975e786c7b7b9",
          "body": "…ll (v1.4.55)\n\nWhen /observe captures multiple facts from the SAME source (one file / tool output), it\nnow links them into a connected region in the graph via co-occurrence edges\n(link_memories, weight 0.55, clique capped at 8, bidirectional). upsert_edge's max()\npolicy lets co-occurrence upgrade we\n[…]\necay subsystem (24h cadence, Ebbinghaus strength, 0.05 threshold,\n0.92 consolidation). This is structurally richer than flat vector/FTS search.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(graph): structural co-occurrence edges for connected-region reca…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-18T18:09:49Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c6bf83600eb3f2b8ccf2cc6d8d0b834dc271af44",
          "body": "….4.54)\n\nCloses the \"memory lacked the work-detail\" half of the recall gap, at the API boundary\nso it works for any client (not just Claude Code hooks):\n\n- /observe: knowledge-tuned extraction for WORK OUTPUT (file contents, command output,\n  documents). /auto-store's conversational prompt filtered \n[…]\n.53.\n\nDeferred: message-list trimming (context eviction) — needs careful tool_use/tool_result\npairing to avoid 400s; tracked for the next pass.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(proxy): client-agnostic capture from tool outputs + /observe (v1…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-18T12:40:44Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "aeb418e1e681587fd8311228ef5ea1717c5955b1",
          "body": "…et (v1.4.53)\n\nCloses the recall-richness gap that forced the model to re-read source files instead of\nanswering from memory:\n\n- Additive graph expansion (expand_k): direct hits are ENRICHED with the connected graph\n  region (1–2 hops) instead of competing for the same top_k slots — so recall surfac\n[…]\nmory disable wrote the wrong settings key (autoMemory -> autoMemoryEnabled);\n  the flag was a no-op. Now correct, and cleans up the legacy key.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(recall): graph-expanded recall + progressive-disclosure search/g…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-18T11:51:12Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "39574267788289ad60025e3e3d3fa4f17e9f6c91",
          "body": "…ncher (v1.4.52)\n\nAdds a rolling verbatim conversation buffer (conversation_buffer table + /buffer-store\nand /buffer endpoints) so a flushed context window can be reconstructed losslessly —\ndistinct from the qwen-distilled `memories`.\n\nAdds `yourmemory-run`: an opt-in headless launcher that runs a f\n[…]\nre each flush. Inner session uses a void namespace so the installed\nhooks no-op (no double recall/store). Interactive Claude Code is untouched.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(memory): verbatim conversation buffer + headless lean-window lau…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-18T11:49:09Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2f85344f87da647f106d5521fb7a1cf0fa2c5e4e",
          "body": "yourmemory-setup can now turn off Claude Code's native auto-memory (the growing\nMEMORY.md that re-injects full context every turn) so YourMemory's selective recall\nreplaces it. Opt-in only: --replace-native-memory / YOURMEMORY_REPLACE_NATIVE_MEMORY=1\nfor scripted installs, else an interactive [y/N] defaulting to No. Sets autoMemory:false\nidempotently and prints the revert; deliberately leaves the user's own CLAUDE.md intact.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(setup): opt-in to disable Claude Code native auto-memory (v1.4.51)",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-16T12:34:13Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "43d7f36c151011f7fed74880803026b6a0933d06",
          "body": "…ay categories\n\nReplace the sales-specific auto-store prompt with a general, topic-agnostic one\nthat captures identity, preferences, goals, relationships, work, events, knowledge,\nproblems and strategies as atomic, self-contained facts with names/dates preserved.\n\nExtraction now returns a category (\n[…]\ngy) per item so the\nEbbinghaus decay rates apply meaningfully end-to-end; falls back to the spaCy\nheuristic when the model omits or garbles it.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(extract): domain-agnostic extraction prompt + model-assigned 4-w…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-16T12:34:13Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "3e3731e2dc1459b585dd3e3b1a6c26865a75ec86",
          "body": "…c repo hygiene)\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: gitignore internal/demo collateral + third-party clones (publi…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-15T05:35:09Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "0e64754118d56ac9ac19bd7e9e0a9087beaecca8",
          "body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: update CLAUDE.md for hook-based memory flow; ignore wrangler files",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-15T05:28:52Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "71703f793a73521d0ada8ecffd2755209f4b2b50",
          "body": "… OG image\n\nAll meta + structured-data URLs (canonical, og:url, og:image, twitter:image) pointed at the wrong domain yourmemory.ai; corrected to yourmemoryai.xyz. Added a real 1200x630 og-image.png so link/social previews render.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(site): correct canonical/OG domain to yourmemoryai.xyz + add real…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-15T05:26:01Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "bead3b7728e69f0fc4fc64ebadd2080b5316928b",
          "body": "… not a globe\n\nReplaces the data: URI favicon (which Google can't use for search results) with /favicon.svg, /favicon.png, /favicon-512.png, and apple-touch-icon.png.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(site): real crawlable favicon (PNG+SVG) so Google shows the icon,…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-15T05:16:12Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b5d4a061e33cf338da88d65ff1187f6af3289753",
          "body": "… on mobile\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(site): drop em-dash in activation copy; stack email/Send-code row…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-15T04:55:29Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "8698078c2855a20eb8e53daa8a0c51634e6c216a",
          "body": "…end (v1.4.50)\n\n- setup() now pulls qwen2.5:7b automatically via Ollama if missing (was print-only).\n\n- setup() prompts for backend: DuckDB (default, zero-config) or Postgres (DATABASE_URL passed to the server via the MCP config env; falls back to DuckDB if PG init fails).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: yourmemory-setup auto-pulls extraction model + prompts for back…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-15T04:25:17Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "8e0f3add62a2178f3227f70f2cd90dd731f6b647",
          "body": "- yourmemory-setup now installs the recall (UserPromptSubmit) and store (Stop) hooks into ~/.claude/hooks and registers them in settings.json (idempotent), so memory works automatically without the agent calling MCP tools. Hooks ship as package data in src/hook_templates/.\n\n- setup() checks the local Ollama for the qwen2.5:7b extraction model and prints pull instructions if missing; README documents the requirement.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: ship recall/store hooks + qwen onboarding in setup (v1.4.49)",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-15T03:34:51Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "cd6ce341e016e894afc6237a6ce971fbee8482cc",
          "body": "… writes, graph indexing (v1.4.49)\n\n- /auto-store: schema-constrained JSON extraction that preserves entities/numbers; Postgres write path (was DuckDB-only, silently dropped writes on PG); graph indexing on the hook path.\n\n- retrieve: Postgres BM25/FTS fix; optional batched LLM relevance gate (off b\n[…]\nvoid cold-load timeouts.\n\nValidated on a 3-session sales benchmark (Postgres, judge off): wins 2-1 on quality, -36% cost vs no-memory baseline.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: pilot-quality memory pipeline — structured extraction, Postgres…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-15T02:38:37Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f744d06843e110f1ab5285fc3ab1443371129b10",
          "body": "…ion fix)\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: release 1.4.48 (1.4.47 was already on PyPI without the activat…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-14T19:30:05Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a51809ca3f32dbdfed430e72e10b7cb7b52b25c5",
          "body": "Cloudflare bot protection returned 403 to the default Python-urllib User-Agent, which the client mislabelled as 'Activation server is down'. Set an explicit User-Agent on the register, activation-gate, and telemetry requests.\n\nAlso gates MCP store_memory via should_store_llm and defaults the graph-viz handlers' userId to DEFAULT_USER.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: set User-Agent on backend calls so activation works (v1.4.47)",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-14T19:21:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b14904d7b078955fbe6f1aa102566c9d89fec359",
          "body": null,
          "is_bot": false,
          "headline": "feat: add API proxy for guaranteed memory injection (v1.4.46)",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-12T02:44:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fd483a5605d9550b59af1606e1f55161245d39cf",
          "body": null,
          "is_bot": false,
          "headline": "fix: remove debug test-email endpoint, improve email error handling",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-11T10:32:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5ae9ed96eeb77cb7c3f0962db9928e31b36f8a03",
          "body": "…tracking",
          "is_bot": false,
          "headline": "chore: add .gitignore to cloudflare-worker, remove node_modules from …",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-11T02:54:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "252d0717ead38ad5254abe40ceb57ceb05551612",
          "body": "- Replace Val Town endpoint with Cloudflare Worker + D1 database\n- Switch email sending from nodemailer/Gmail SMTP to Resend API\n- Update all endpoint URLs in memory_mcp.py and index.html\n- Add token verification on first MCP tool call (cached per session)\n- Update activation instructions to OTP flow",
          "is_bot": false,
          "headline": "feat: migrate backend from Val Town to Cloudflare Workers (v1.4.45)",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-11T02:54:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "738e8b634b99c0fffb3e1123b87308f2549f89ef",
          "body": null,
          "is_bot": false,
          "headline": "docs: remove val.run mention from telemetry",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-10T11:23:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2522e41b38ecafda6a6596aeaa204b6836325cd9",
          "body": null,
          "is_bot": false,
          "headline": "docs: clean up activation wording",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-10T11:22:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a44442c4acee4b223ce665a78a700ba1858d15e5",
          "body": null,
          "is_bot": false,
          "headline": "docs: update activation flow to email OTP",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-10T11:21:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "06dda2d4298e6cba1c734cf6d52f8c65edccd70e",
          "body": null,
          "is_bot": false,
          "headline": "feat: replace Google OAuth with email OTP sign-in flow",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-10T08:49:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7244a3ea35eb7041ee5e20375a9528d9c976c808",
          "body": "…y endpoint",
          "is_bot": false,
          "headline": "fix: remove silent rule injection from first run, fix README telemetr…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-10T08:04:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "22bd1fbfd4a23b8ec8c953ec34b5cf8ed4ba6722",
          "body": "…ment setup behaviors",
          "is_bot": false,
          "headline": "fix: soften tool schema, remove _save_email, enforce token gate, docu…",
          "author_name": "sachitmisra1",
          "author_login": "sachitrafa",
          "committed_at": "2026-06-10T07:17:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 4,
      "commits_last_year": 308,
      "latest_release_at": "2026-05-25T18:31:16Z",
      "latest_release_tag": "v1.4.26",
      "releases_from_tags": false,
      "days_since_last_push": 5,
      "active_weeks_last_year": 18,
      "days_since_latest_release": 59,
      "mean_days_between_releases": 18.9
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 57,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "yourmemory",
          "exists": true,
          "license": "CC-BY-NC-4.0",
          "keywords": [
            "mcp",
            "claude",
            "memory",
            "ebbinghaus",
            "ai",
            "sqlite",
            "postgresql",
            "Operating System :: OS Independent",
            "Programming Language :: Python :: 3",
            "Programming Language :: Python :: 3.11",
            "Programming Language :: Python :: 3.12",
            "Topic :: Scientific/Engineering :: Artificial Intelligence"
          ],
          "ecosystem": "pypi",
          "matches_repo": true,
          "registry_url": "https://pypi.org/project/yourmemory/",
          "is_deprecated": false,
          "latest_version": "1.4.86",
          "repository_url": "https://github.com/sachitrafa/YourMemory",
          "versions_count": 99,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": "2026-03-27T07:55:25.570544Z",
          "latest_published_at": "2026-07-24T07:43:31.831880Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 0
        }
      ]
    },
    "popularity": {
      "forks": 21,
      "stars": 260,
      "watchers": 1,
      "fork_history": {
        "days": [
          {
            "date": "2026-03-30",
            "count": 2
          },
          {
            "date": "2026-04-15",
            "count": 1
          },
          {
            "date": "2026-04-21",
            "count": 4
          },
          {
            "date": "2026-04-22",
            "count": 1
          },
          {
            "date": "2026-04-27",
            "count": 5
          },
          {
            "date": "2026-04-29",
            "count": 2
          },
          {
            "date": "2026-05-07",
            "count": 2
          },
          {
            "date": "2026-06-03",
            "count": 1
          },
          {
            "date": "2026-06-16",
            "count": 1
          },
          {
            "date": "2026-07-07",
            "count": 1
          },
          {
            "date": "2026-07-13",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 21,
        "total_forks": 21
      },
      "star_history": null,
      "open_issues_and_prs": 10
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": true,
      "has_dockerfile": true,
      "has_mcp_signal": true,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "cloudflare-worker/tsconfig.json"
      ],
      "toolchain_manifests": [],
      "largest_source_bytes": 78963,
      "source_files_sampled": 82,
      "oversized_source_files": 1,
      "agent_instruction_files": [
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 724
    },
    "dependencies": {
      "manifests": [
        "cloudflare-worker/package.json",
        "pyproject.toml",
        "requirements.txt"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "sharp",
            "direct": false,
            "version": "0.33.5",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.3,
            "advisory_ids": [
              "GHSA-f88m-g3jw-g9cj"
            ],
            "fixed_version": "0.35.0",
            "advisory_count": 1,
            "oldest_advisory_days": 2
          },
          {
            "name": "undici",
            "direct": false,
            "version": "5.29.0",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-2mjp-6q6p-2qxm",
              "GHSA-35p6-xmwp-9g52",
              "GHSA-4992-7rv2-5pvq",
              "GHSA-g8m3-5g58-fq7m",
              "GHSA-g9mf-h72j-4rw9",
              "GHSA-p88m-4jfj-68fv",
              "GHSA-v9p9-hfj2-hcw8",
              "GHSA-vrm6-8vpv-qv8q",
              "GHSA-vxpw-j846-p89q"
            ],
            "fixed_version": "8.5.0",
            "advisory_count": 9,
            "oldest_advisory_days": 190
          },
          {
            "name": "ws",
            "direct": false,
            "version": "8.18.0",
            "severity": "high",
            "ecosystem": "npm",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-58qx-3vcg-4xpx",
              "GHSA-96hv-2xvq-fx4p"
            ],
            "fixed_version": "8.21.0",
            "advisory_count": 2,
            "oldest_advisory_days": 66
          },
          {
            "name": "esbuild",
            "direct": false,
            "version": "0.17.19",
            "severity": "moderate",
            "ecosystem": "npm",
            "cvss_score": 5.3,
            "advisory_ids": [
              "GHSA-67mh-4wv8-2f99"
            ],
            "fixed_version": "0.25.0",
            "advisory_count": 1,
            "oldest_advisory_days": 528
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "high": 3,
          "moderate": 1
        },
        "advisory_count": 13,
        "affected_count": 4,
        "assessed_count": 106,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 16,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm",
        "pypi"
      ],
      "dependencies": [
        {
          "name": "python-dotenv",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": null
        },
        {
          "name": "mcp",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": null
        },
        {
          "name": "sentence-transformers",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": null
        },
        {
          "name": "numpy",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": null
        },
        {
          "name": "python-dateutil",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": null
        },
        {
          "name": "duckdb",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=0.10.0"
        },
        {
          "name": "apscheduler",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": null
        },
        {
          "name": "spacy",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=3.8.13,<4.0"
        },
        {
          "name": "networkx",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=3.0"
        },
        {
          "name": "fastapi",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": null
        },
        {
          "name": "uvicorn",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": null
        },
        {
          "name": "httpx",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": null
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "apscheduler",
            "direct": true,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "duckdb",
            "direct": true,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "fastapi",
            "direct": true,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "httpx",
            "direct": true,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "mcp",
            "direct": true,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "networkx",
            "direct": true,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "numpy",
            "direct": true,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "python-dateutil",
            "direct": true,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "python-dotenv",
            "direct": true,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "sentence-transformers",
            "direct": true,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "spacy",
            "direct": true,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "uvicorn",
            "direct": true,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "@cloudflare/kv-asset-handler",
            "direct": false,
            "version": "0.3.4",
            "ecosystem": "npm"
          },
          {
            "name": "@cloudflare/unenv-preset",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "@cloudflare/workerd-darwin-64",
            "direct": false,
            "version": "1.20250718.0",
            "ecosystem": "npm"
          },
          {
            "name": "@cloudflare/workerd-darwin-arm64",
            "direct": false,
            "version": "1.20250718.0",
            "ecosystem": "npm"
          },
          {
            "name": "@cloudflare/workerd-linux-64",
            "direct": false,
            "version": "1.20250718.0",
            "ecosystem": "npm"
          },
          {
            "name": "@cloudflare/workerd-linux-arm64",
            "direct": false,
            "version": "1.20250718.0",
            "ecosystem": "npm"
          },
          {
            "name": "@cloudflare/workerd-windows-64",
            "direct": false,
            "version": "1.20250718.0",
            "ecosystem": "npm"
          },
          {
            "name": "@cloudflare/workers-types",
            "direct": false,
            "version": "4.20260611.1",
            "ecosystem": "npm"
          },
          {
            "name": "@cspotcode/source-map-support",
            "direct": false,
            "version": "0.8.1",
            "ecosystem": "npm"
          },
          {
            "name": "@emnapi/runtime",
            "direct": false,
            "version": "1.11.0",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild-plugins/node-globals-polyfill",
            "direct": false,
            "version": "0.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild-plugins/node-modules-polyfill",
            "direct": false,
            "version": "0.2.2",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-arm",
            "direct": false,
            "version": "0.17.19",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-arm64",
            "direct": false,
            "version": "0.17.19",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/android-x64",
            "direct": false,
            "version": "0.17.19",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/darwin-arm64",
            "direct": false,
            "version": "0.17.19",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/darwin-x64",
            "direct": false,
            "version": "0.17.19",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/freebsd-arm64",
            "direct": false,
            "version": "0.17.19",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/freebsd-x64",
            "direct": false,
            "version": "0.17.19",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-arm",
            "direct": false,
            "version": "0.17.19",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-arm64",
            "direct": false,
            "version": "0.17.19",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-ia32",
            "direct": false,
            "version": "0.17.19",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-loong64",
            "direct": false,
            "version": "0.17.19",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-mips64el",
            "direct": false,
            "version": "0.17.19",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-ppc64",
            "direct": false,
            "version": "0.17.19",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-riscv64",
            "direct": false,
            "version": "0.17.19",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-s390x",
            "direct": false,
            "version": "0.17.19",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/linux-x64",
            "direct": false,
            "version": "0.17.19",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/netbsd-x64",
            "direct": false,
            "version": "0.17.19",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/openbsd-x64",
            "direct": false,
            "version": "0.17.19",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/sunos-x64",
            "direct": false,
            "version": "0.17.19",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-arm64",
            "direct": false,
            "version": "0.17.19",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-ia32",
            "direct": false,
            "version": "0.17.19",
            "ecosystem": "npm"
          },
          {
            "name": "@esbuild/win32-x64",
            "direct": false,
            "version": "0.17.19",
            "ecosystem": "npm"
          },
          {
            "name": "@fastify/busboy",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-darwin-arm64",
            "direct": false,
            "version": "0.33.5",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-darwin-x64",
            "direct": false,
            "version": "0.33.5",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-libvips-darwin-arm64",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-libvips-darwin-x64",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-libvips-linux-arm",
            "direct": false,
            "version": "1.0.5",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-libvips-linux-arm64",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-libvips-linux-s390x",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-libvips-linux-x64",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-libvips-linuxmusl-arm64",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-libvips-linuxmusl-x64",
            "direct": false,
            "version": "1.0.4",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-linux-arm",
            "direct": false,
            "version": "0.33.5",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-linux-arm64",
            "direct": false,
            "version": "0.33.5",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-linux-s390x",
            "direct": false,
            "version": "0.33.5",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-linux-x64",
            "direct": false,
            "version": "0.33.5",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-linuxmusl-arm64",
            "direct": false,
            "version": "0.33.5",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-linuxmusl-x64",
            "direct": false,
            "version": "0.33.5",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-wasm32",
            "direct": false,
            "version": "0.33.5",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-win32-ia32",
            "direct": false,
            "version": "0.33.5",
            "ecosystem": "npm"
          },
          {
            "name": "@img/sharp-win32-x64",
            "direct": false,
            "version": "0.33.5",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/resolve-uri",
            "direct": false,
            "version": "3.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/sourcemap-codec",
            "direct": false,
            "version": "1.5.5",
            "ecosystem": "npm"
          },
          {
            "name": "@jridgewell/trace-mapping",
            "direct": false,
            "version": "0.3.9",
            "ecosystem": "npm"
          },
          {
            "name": "acorn",
            "direct": false,
            "version": "8.14.0",
            "ecosystem": "npm"
          },
          {
            "name": "acorn-walk",
            "direct": false,
            "version": "8.3.2",
            "ecosystem": "npm"
          },
          {
            "name": "as-table",
            "direct": false,
            "version": "1.0.55",
            "ecosystem": "npm"
          },
          {
            "name": "blake3-wasm",
            "direct": false,
            "version": "2.1.5",
            "ecosystem": "npm"
          },
          {
            "name": "color",
            "direct": false,
            "version": "4.2.3",
            "ecosystem": "npm"
          },
          {
            "name": "color-convert",
            "direct": false,
            "version": "2.0.1",
            "ecosystem": "npm"
          },
          {
            "name": "color-name",
            "direct": false,
            "version": "1.1.4",
            "ecosystem": "npm"
          },
          {
            "name": "color-string",
            "direct": false,
            "version": "1.9.1",
            "ecosystem": "npm"
          },
          {
            "name": "cookie",
            "direct": false,
            "version": "0.7.2",
            "ecosystem": "npm"
          },
          {
            "name": "data-uri-to-buffer",
            "direct": false,
            "version": "2.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "defu",
            "direct": false,
            "version": "6.1.7",
            "ecosystem": "npm"
          },
          {
            "name": "detect-libc",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "npm"
          },
          {
            "name": "esbuild",
            "direct": false,
            "version": "0.17.19",
            "ecosystem": "npm"
          },
          {
            "name": "escape-string-regexp",
            "direct": false,
            "version": "4.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "estree-walker",
            "direct": false,
            "version": "0.6.1",
            "ecosystem": "npm"
          },
          {
            "name": "exit-hook",
            "direct": false,
            "version": "2.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "exsolve",
            "direct": false,
            "version": "1.0.8",
            "ecosystem": "npm"
          },
          {
            "name": "fsevents",
            "direct": false,
            "version": "2.3.3",
            "ecosystem": "npm"
          },
          {
            "name": "get-source",
            "direct": false,
            "version": "2.0.12",
            "ecosystem": "npm"
          },
          {
            "name": "glob-to-regexp",
            "direct": false,
            "version": "0.4.1",
            "ecosystem": "npm"
          },
          {
            "name": "is-arrayish",
            "direct": false,
            "version": "0.3.4",
            "ecosystem": "npm"
          },
          {
            "name": "magic-string",
            "direct": false,
            "version": "0.25.9",
            "ecosystem": "npm"
          },
          {
            "name": "mime",
            "direct": false,
            "version": "3.0.0",
            "ecosystem": "npm"
          },
          {
            "name": "miniflare",
            "direct": false,
            "version": "3.20250718.3",
            "ecosystem": "npm"
          },
          {
            "name": "mustache",
            "direct": false,
            "version": "4.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "ohash",
            "direct": false,
            "version": "2.0.11",
            "ecosystem": "npm"
          },
          {
            "name": "path-to-regexp",
            "direct": false,
            "version": "6.3.0",
            "ecosystem": "npm"
          },
          {
            "name": "pathe",
            "direct": false,
            "version": "2.0.3",
            "ecosystem": "npm"
          },
          {
            "name": "printable-characters",
            "direct": false,
            "version": "1.0.42",
            "ecosystem": "npm"
          },
          {
            "name": "rollup-plugin-inject",
            "direct": false,
            "version": "3.0.2",
            "ecosystem": "npm"
          },
          {
            "name": "rollup-plugin-node-polyfills",
            "direct": false,
            "version": "0.2.1",
            "ecosystem": "npm"
          },
          {
            "name": "rollup-pluginutils",
            "direct": false,
            "version": "2.8.2",
            "ecosystem": "npm"
          },
          {
            "name": "semver",
            "direct": false,
            "version": "7.8.4",
            "ecosystem": "npm"
          },
          {
            "name": "sharp",
            "direct": false,
            "version": "0.33.5",
            "ecosystem": "npm"
          },
          {
            "name": "simple-swizzle",
            "direct": false,
            "version": "0.2.4",
            "ecosystem": "npm"
          },
          {
            "name": "source-map",
            "direct": false,
            "version": "0.6.1",
            "ecosystem": "npm"
          },
          {
            "name": "sourcemap-codec",
            "direct": false,
            "version": "1.4.8",
            "ecosystem": "npm"
          },
          {
            "name": "stacktracey",
            "direct": false,
            "version": "2.2.0",
            "ecosystem": "npm"
          },
          {
            "name": "stoppable",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "npm"
          },
          {
            "name": "tslib",
            "direct": false,
            "version": "2.8.1",
            "ecosystem": "npm"
          },
          {
            "name": "typescript",
            "direct": false,
            "version": "5.9.3",
            "ecosystem": "npm"
          },
          {
            "name": "ufo",
            "direct": false,
            "version": "1.6.4",
            "ecosystem": "npm"
          },
          {
            "name": "undici",
            "direct": false,
            "version": "5.29.0",
            "ecosystem": "npm"
          },
          {
            "name": "unenv",
            "direct": false,
            "version": "2.0.0-rc.14",
            "ecosystem": "npm"
          },
          {
            "name": "workerd",
            "direct": false,
            "version": "1.20250718.0",
            "ecosystem": "npm"
          },
          {
            "name": "wrangler",
            "direct": false,
            "version": "3.114.17",
            "ecosystem": "npm"
          },
          {
            "name": "ws",
            "direct": false,
            "version": "8.18.0",
            "ecosystem": "npm"
          },
          {
            "name": "youch",
            "direct": false,
            "version": "3.3.4",
            "ecosystem": "npm"
          },
          {
            "name": "zod",
            "direct": false,
            "version": "3.22.3",
            "ecosystem": "npm"
          },
          {
            "name": "neo4j",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "pgvector",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "psycopg2-binary",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "setuptools",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 122,
        "direct_count": 12,
        "indirect_count": 110
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 9,
        "merged_prs": 8,
        "open_issues": 1,
        "closed_ratio": 0.75,
        "closed_issues": 3,
        "closed_unmerged_prs": 7
      },
      "bus_factor": 1,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "sachitrafa",
          "commits": 300,
          "avatar_url": "https://avatars.githubusercontent.com/u/51364546?v=4"
        },
        {
          "type": "User",
          "login": "abshek",
          "commits": 1,
          "avatar_url": "https://avatars.githubusercontent.com/u/13021881?v=4"
        }
      ],
      "contributors_sampled": 2,
      "top_contributor_share": 0.997
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "build-binary.yml",
        "docker-publish.yml",
        "security-scan.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "package-lock.json"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "1 out of 1 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/28 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 0,
            "reason": "project has 0 contributing companies or organizations -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 10,
            "reason": "update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 9,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "13 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "0bda3e0331e67b357832735f6beec3d3f7fb022e",
        "ran_at": "2026-07-24T07:44:21Z",
        "aggregate_score": 4.8,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": true
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-20T09:38:18Z",
      "oldest_open_prs": [
        {
          "number": 11,
          "created_at": "2026-04-29T06:23:49Z",
          "last_comment_at": "2026-04-29T06:23:53Z",
          "last_comment_author": "vercel"
        },
        {
          "number": 14,
          "created_at": "2026-06-28T11:07:53Z",
          "last_comment_at": "2026-06-28T11:07:56Z",
          "last_comment_author": "vercel"
        },
        {
          "number": 15,
          "created_at": "2026-06-28T11:07:55Z",
          "last_comment_at": "2026-06-28T11:07:57Z",
          "last_comment_author": "vercel"
        },
        {
          "number": 16,
          "created_at": "2026-06-28T11:07:58Z",
          "last_comment_at": "2026-06-28T11:08:03Z",
          "last_comment_author": "vercel"
        },
        {
          "number": 17,
          "created_at": "2026-06-28T11:07:59Z",
          "last_comment_at": "2026-06-28T11:08:01Z",
          "last_comment_author": "vercel"
        },
        {
          "number": 21,
          "created_at": "2026-07-04T23:52:28Z",
          "last_comment_at": "2026-07-04T23:52:31Z",
          "last_comment_author": "vercel"
        },
        {
          "number": 24,
          "created_at": "2026-07-11T23:52:45Z",
          "last_comment_at": "2026-07-11T23:52:49Z",
          "last_comment_author": "vercel"
        },
        {
          "number": 28,
          "created_at": "2026-07-18T23:52:58Z",
          "last_comment_at": "2026-07-18T23:53:01Z",
          "last_comment_author": "vercel"
        },
        {
          "number": 29,
          "created_at": "2026-07-18T23:53:04Z",
          "last_comment_at": "2026-07-18T23:53:06Z",
          "last_comment_author": "vercel"
        }
      ],
      "last_merged_pr_at": "2026-07-14T18:23:35Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 4,
          "created_at": "2026-04-27T01:08:17Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/sachitrafa/YourMemory",
    "host": "github.com",
    "name": "YourMemory",
    "owner": "sachitrafa"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 65,
      "inputs": {
        "security": 58,
        "vitality": 86,
        "community": 47,
        "governance": 49,
        "engineering": 81
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "excellent",
        "name": "Vitality",
        "value": 86,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 76,
            "inputs": {
              "commits_last_year": 308,
              "human_commit_share": 1,
              "days_since_last_push": 5,
              "active_weeks_last_year": 18
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "18/52 weeks with commits",
                "points": 12.5,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 18
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "308 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 308
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "releases_count": 4,
              "latest_release_tag": "v1.4.26",
              "releases_from_tags": false,
              "days_since_latest_release": 59,
              "mean_days_between_releases": 18.9
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "4 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 59 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 59
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~18.9 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 18.9
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 47,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "moderate",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "forks": 21,
              "stars": 260,
              "watchers": 1,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "260 stars",
                "points": 39.1,
                "status": "partial",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 260
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "21 forks",
                "points": 10.8,
                "status": "partial",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 21
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "1 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "at_risk",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 44,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file present, not a recognized license",
                "points": 16.9,
                "status": "partial",
                "details": [
                  {
                    "code": "license_custom",
                    "params": {}
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "at_risk",
        "name": "Sustainability & Governance",
        "value": 49,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 12,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 2,
              "top_contributor_share": 0.997
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0.1,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "2 contributors",
                "points": 2.7,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "moderate",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 56,
            "inputs": {
              "merged_prs": 8,
              "open_issues": 1,
              "closed_issues": 3,
              "issue_closed_ratio": 0.75,
              "closed_unmerged_prs": 7
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "75% of issues closed",
                "points": 35.1,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 75
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "8/15 decided PRs merged",
                "points": 20.4,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 8,
                      "decided": 15
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/28 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "at_risk",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 44,
            "inputs": {
              "followers": 7,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "sachitrafa",
              "public_repos": 8,
              "account_age_days": 2606
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "7 followers of sachitrafa",
                "points": 6.5,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 7,
                      "login": "sachitrafa"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "8 public repos, account ~7 yr old",
                "points": 18.9,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 8
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 7
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "yourmemory"
              ],
              "ecosystems": "pypi",
              "any_deprecated": false,
              "min_days_since_publish": 0
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on pypi",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "pypi"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 0 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "99 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 99
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 81,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "3 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "1 out of 1 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "excellent",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "topics": [
                "ai-agents",
                "claude",
                "ebbinghaus",
                "llm-memory",
                "mcp",
                "memory",
                "model-context-protocol",
                "pgvector",
                "agent-memory",
                "devtools",
                "mcp-server",
                "persistent-memory",
                "rag"
              ],
              "has_wiki": true,
              "homepage": "https://yourmemoryai.xyz/",
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": "https://yourmemoryai.xyz/",
                "points": 15,
                "status": "met",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": "13 topics",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "topics_count",
                    "params": {
                      "count": 13
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 58,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 48,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 4.8
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "1 out of 1 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/28 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "update tool detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 1 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "13 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 106 resolved dependencies against OSV; 16 could not be assessed (no resolved version, an unsupported ecosystem, or beyond the reported package list). This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 106
                }
              },
              {
                "code": "advisories_unassessed",
                "params": {
                  "count": 16
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 13,
              "affected_packages": 4,
              "assessed_packages": 106,
              "unassessed_packages": 16,
              "affected_by_severity": "high 3, moderate 1",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 106,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 1
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 68,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "has_llms_txt": true,
              "legible_history_share": 1,
              "agent_instruction_files": [
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 724
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": "llms.txt present",
                "points": 15,
                "status": "met",
                "details": [
                  {
                    "code": "llms_txt_present",
                    "params": {}
                  }
                ],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "100 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 100,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 58,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "package-lock.json"
              ],
              "has_dockerfile": true,
              "typed_language": false,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [
                "cloudflare-worker/tsconfig.json"
              ],
              "agent_commit_share": 0.48,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "cloudflare-worker/tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "cloudflare-worker/tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile, lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile, lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "48 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 48,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "dependency automation configured, none observed in the sampled commits",
                "points": 5,
                "status": "partial",
                "details": [
                  {
                    "code": "dependency_bot_config_only",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "good",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 81,
            "inputs": {
              "primary_language": "Python",
              "largest_source_bytes": 78963,
              "source_files_sampled": 82,
              "oversized_source_files": 1
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Python with type-check config (cloudflare-worker/tsconfig.json)",
                "points": 27,
                "status": "partial",
                "details": [
                  {
                    "code": "typecheck_config_language",
                    "params": {
                      "files": "cloudflare-worker/tsconfig.json",
                      "language": "Python"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "1/82 source files over 60KB",
                "points": 54.3,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 82,
                      "oversized": 1
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "critical",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 20,
            "inputs": {
              "example_dirs": [],
              "has_mcp_signal": true,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "deps.dev does not index pypi:yourmemory@1.4.86; advisories assessed against the repository dependency graph instead"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-24T07:44:38.825751Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/sachitrafa/YourMemory.svg",
  "full_name": "sachitrafa/YourMemory",
  "license_state": "custom",
  "license_spdx": null
}

Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.

Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.

How one result sits in the wider record: aggregate statisticsPyPI.