Public recordModerate
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-24 14:38 UTC
scalemule / sdk
ScaleMule core TypeScript SDK
scalemule/sdk holds a health index of 52 out of 100, placing it in the Moderate band. It scores highest on Vitality (74/100) and lowest on Community & Adoption (32/100). It was last updated 5 days ago. A single contributor accounts for most of its recent work.
52
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
52
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
ScalemuleOrganization
0 followers11 public repossince Mar 2026
This repository is backed by an organization — shared, accountable stewardship that can outlive any single maintainer.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish | Tags |
|---|---|---|---|---|---|---|
| npm | @scalemule/sdk | 0.0.62 | 2,074 | 57 | 5 days ago | scalemulebackend-as-a-servicebaasapisdktypescriptjavascriptclientresthttp |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
74
Development activity
72Good
How it's scored
| 36/36 | Push recency — last push 5 days ago |
| 8.3/36 | Commit cadence — 12/52 weeks with commits |
| 18/18 | Commit volume — 103 commits in the last year |
| 10/10 | OpenSSF Scorecard: Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
Inputs used
| commits_last_year | 103 |
| human_commit_share | 1 |
| days_since_last_push | 5 |
| active_weeks_last_year | 12 |
Release discipline
78Good
How it's scored
| 16.2/27 | Ships releases — 2 version tags (no GitHub releases) |
| 27/36 | Release recency — latest release 125 days ago |
| 27/27 | Release cadence — a release every ~0.9 days |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 2 |
| latest_release_tag | v0.0.20 |
| releases_from_tags | yes |
| days_since_latest_release | 125 |
| mean_days_between_releases | 0.9 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
32
Popularity & adoption
1Critical
How it's scored
| 0/60 | Stars — 0 stars |
| 0/25 | Forks — 0 forks |
| 0/15 | Watchers — 0 watchers |
Inputs used
| forks | 0 |
| stars | 0 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
50Moderate
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (MIT) |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Ecosystem adoption (downloads)
55Moderate
How it's scored
| 44.2/80 | Monthly downloads — 2,074 downloads/month across npm |
| 0/20 | Registry dependents — not reported by this ecosystem |
Inputs used
| packages | @scalemule/sdk |
| dependents | — |
| ecosystems | npm |
| total_downloads | — |
| monthly_downloads | 2,074 |
Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
46
Maintainer resilience (bus factor)
14Critical
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 2.2/22.5 | Commit distribution — top contributor authored 90% of commits |
| 2.7/13.5 | Contributor breadth — 2 contributors |
| 0/10 | OpenSSF Scorecard: Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 2 |
| top_contributor_share | 0.902 |
Issue & PR responsiveness
48At risk
How it's scored
| 0/46.8 | Issue resolution — 0% of issues closed |
| 37.6/38.3 | PR acceptance — 58/59 decided PRs merged |
| 10.5/15 | OpenSSF Scorecard: Code-Review — Found 22/30 approved changesets -- score normalized to 7 |
Inputs used
| merged_prs | 58 |
| open_issues | 1 |
| closed_issues | 0 |
| issue_closed_ratio | 0 |
| closed_unmerged_prs | 1 |
Ownership & stewardship
39At risk
How it's scored
| 30/30 | Ownership backing — organization-owned |
| 0/20 | Verified domain |
| 0/25 | Owner reach — 0 followers of scalemule |
| 8.6/25 | Track record — 11 public repos, account ~0 yr old |
Inputs used
| followers | 0 |
| owner_type | Organization |
| is_verified | — |
| owner_login | scalemule |
| public_repos | 11 |
| account_age_days | 142 |
Package maintenance
100Excellent
How it's scored
| 25/25 | Published & resolvable — 1 package(s) on npm |
| 35/35 | Publish recency — latest publish 5 days ago |
| 20/20 | Version history — 57 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | @scalemule/sdk |
| ecosystems | npm |
| any_deprecated | no |
| min_days_since_publish | 5 |
Engineering Quality
Are baseline engineering and documentation practices in place?
50
Engineering practices
50Moderate
How it's scored
| 0/24 | CI workflows |
| 24/24 | Tests present |
| 16/16 | Linter config — .eslintrc.json |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 10/20 | OpenSSF Scorecard: CI-Tests — 16 out of 30 merged PRs checked by a CI test -- score normalized to 5 |
Inputs used
| has_ci | no |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | yes |
| has_precommit_config | no |
Documentation
50Moderate
How it's scored
| 30/30 | README |
| 0/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 10/10 | Repository description |
| 0/10 | Topics |
| 10/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | yes |
| homepage | — |
| has_readme | yes |
| has_docs_dir | no |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
56
Security posture
45At risk
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 1.2/2.5 | CI-Tests — 16 out of 30 merged PRs checked by a CI test -- score normalized to 5 |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 5.2/7.5 | Code-Review — Found 22/30 approved changesets -- score normalized to 7 |
| 0/2.5 | Contributors — project has 0 contributing companies or organizations -- score normalized to 0 |
| 0/10 | Dangerous-Workflow — no data |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — no data |
| 0/5 | Pinned-Dependencies — no data |
| 0/5 | SAST — SAST tool is not run on all commits -- score normalized to 0 |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — no data |
| 7.5/7.5 | Vulnerabilities — 0 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 13 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 5 |
| scorecard_aggregate | 4.5 |
Excluded from scoring (no data or not applicable): dangerous_workflow, packaging, pinned_dependencies, signed_releases, token_permissions. Remaining weights renormalized.
Dependency advisories
100Excellent
How it's scored
| 35/35 | Direct dependencies free of known advisories — no direct dependency carries a known advisory |
| 25/25 | Indirect dependencies free of known advisories — no indirect dependency carries a known advisory |
| 0/40 | No advisories left outstanding — no advisory carries a publication date |
Inputs used
| source | osv |
| advisories | 0 |
| affected_packages | 0 |
| assessed_packages | 2 |
| unassessed_packages | 0 |
| affected_by_severity | none |
| direct_affected_packages | 0 |
Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:@scalemule/sdk@0.0.62 runtime dependency closure — what installing the published package pulls in — 2 packages. Reachability is not analyzed.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
60
Agent context & guidance
40At risk
How it's scored
| 0/45 | Agent instructions — no CLAUDE.md / AGENTS.md / editor rules |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 98 of 100 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.98 |
| agent_instruction_files | — |
| agent_instruction_max_bytes | — |
Verify loop (build / test / typecheck)
60Moderate
How it's scored
| 0/18 | One-command bootstrap |
| 22/22 | Automated tests |
| 11/11 | Lint / format config — .eslintrc.json |
| 11/11 | Static type checking — tsconfig.json |
| 0/10 | Reproducible environment |
| 10/10 | Demonstrated agent practice — 76 of the last 100 commits agent-authored or agent-credited |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — no data |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | — |
| has_dockerfile | no |
| typed_language | yes |
| bootstrap_files | — |
| has_devcontainer | no |
| has_linter_config | yes |
| typecheck_configs | tsconfig.json |
| agent_commit_share | 0.76 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.
Code legibility for models
99Excellent
How it's scored
| 45/45 | Type-checkable code — TypeScript (statically typed) |
| 53.6/55 | Manageable file sizes — 2/79 source files over 60KB |
Inputs used
| primary_language | TypeScript |
| largest_source_bytes | 127,792 |
| source_files_sampled | 79 |
| oversized_source_files | 2 |
Key facts
0GitHub stars
2contributors
103commits, last 12 months
5days since last push
2releases
1bus factor
1open issues
npmpackage ecosystems
Data collection warnings
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
OpenSSF Scorecard 4.5 / 10
4.5aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| 5 | CI-Tests | 16 out of 30 merged PRs checked by a CI test -- score normalized to 5 |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 7 | Code-Review | Found 22/30 approved changesets -- score normalized to 7 |
| 0 | Contributors | project has 0 contributing companies or organizations -- score normalized to 0 |
| n/a | Dangerous-Workflow | no workflows found |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| n/a | Packaging | packaging workflow not detected |
| n/a | Pinned-Dependencies | no dependencies found |
| 0 | SAST | SAST tool is not run on all commits -- score normalized to 0 |
| 0 | Security-Policy | security policy file not detected |
| n/a | Signed-Releases | no releases found |
| n/a | Token-Permissions | No tokens found |
| 10 | Vulnerabilities | 0 existing vulnerabilities detected |
Direct dependencies 2
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| npm | @scalemule/ui | >=0.0.1 | package.json |
| npm | semver | ^7.7.4 | package.json |
All dependencies not collected
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Dependency advisories 0
Installing npm:@scalemule/sdk@0.0.62 pulls in 2 packages, direct and transitive: 0 carry known advisories, of which 0 are direct dependencies.
No known advisories affect the assessed dependencies.
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 529,
"has_wiki": true,
"homepage": null,
"languages": {
"TypeScript": 760785
},
"pushed_at": "2026-07-19T02:21:28Z",
"created_at": "2026-03-04T05:33:28Z",
"owner_type": "Organization",
"updated_at": "2026-07-19T02:21:31Z",
"description": "ScaleMule core TypeScript SDK",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript"
]
},
"owner": {
"blog": "scalemule.com",
"name": "Scalemule",
"type": "Organization",
"login": "scalemule",
"company": null,
"location": null,
"followers": 0,
"avatar_url": "https://avatars.githubusercontent.com/u/265390815?v=4",
"created_at": "2026-03-03T22:35:24Z",
"is_verified": null,
"public_repos": 11,
"account_age_days": 142
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.0.20",
"kind": "patch",
"published_at": "2026-03-20T20:58:56Z"
},
{
"tag": "v0.0.19",
"kind": "patch",
"published_at": "2026-03-19T22:19:09Z"
}
],
"recent_commits": [
{
"oid": "14a031b4700cc62a2671a46d5cf40e8824a4f302",
"body": "Claude-Session: https://claude.ai/code/session_01M9XM1rHd6RrLrRyD5wt3oQ\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: prettier formatting for content-type guard (#60)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-07-19T02:21:27Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "7dcd6eca47952ebabded3bbbf336767a4b933a0e",
"body": "…odies (#59)\n\nPR #39's request-loop rewrite dropped the block that set Content-Type for\nJSON bodies (and string-body passthrough with it). fetch() then labeled\nevery SDK JSON POST text/plain;charset=UTF-8, which the platform's strict\nJSON extractors reject with 400 SM-VAL-TYP-802 'Failed to deserial\n[…]\n-07-19).\n\nRestores both behaviors and pins them with regression tests.\n\n\nClaude-Session: https://claude.ai/code/session_01M9XM1rHd6RrLrRyD5wt3oQ\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: restore Content-Type: application/json default on JSON request b…",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-07-19T02:19:34Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4b7e4431533e23527fd99d584efc6213bcfe374d",
"body": "Version bump + lint fix + rebuilt dist for the published 0.0.61 (LeadsService).\n\n\nClaude-Session: https://claude.ai/code/session_01HTxgLigqrU8Q6aTUpmKoqe\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(release): @scalemule/sdk 0.0.61 (leads service, published) (#58)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-07-18T16:15:32Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "6c37a7459f33be4ad7e96e82c377273cd59ecd21",
"body": "Adds client.leads.create() -> POST /v1/leads (contact-us / custom-plan sales\nenquiries; callable by an app-credentialed anonymous visitor). Enterprise-form\nextras (company/job title/employees/country/message) + plan context fold into\nthe lead's metadata. Also exports VoteState (was defined in social\n[…]\never re-exported — the stale committed dist masked it). Rebuilt dist.\n\n\nClaude-Session: https://claude.ai/code/session_01HTxgLigqrU8Q6aTUpmKoqe\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(leads): LeadsService for sales lead capture (#57)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-07-18T06:52:32Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a45c33cad55069835a25a4406023c6ec55935c87",
"body": null,
"is_bot": false,
"headline": "fix: publish SDK without split ESM chunks (#56)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-06-28T13:57:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b335032fad9a6630060704f40583a7db721f65d6",
"body": null,
"is_bot": false,
"headline": "feat: add social policy SDK service (#55)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-06-28T13:43:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c69bd928a1db9c450d1c6112909fb0e3132f492d",
"body": null,
"is_bot": false,
"headline": "fix: add @types/semver for dts publish (#54)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-05-13T18:49:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b08e2be7b22a1d067609e246504388b6e8c7281",
"body": "* fix(anonymous-id): single source of truth + legacy-key migration\n\nVisitors had two anonymous IDs in their browser — `@scalemule/sdk` wrote\n`scalemule_anonymous_id` and `@scalemule/nextjs` wrote `sm_anonymous_id`.\nThe platform contract is the `x-anonymous-id` HTTP header, so a visitor's\nauth call a\n[…]\ntually be published.\n 0.0.57 is already on npm.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(anonymous-id): single source of truth + legacy-key migration (#53)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-05-13T18:46:12Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4833f4464c5bbe9ade43023fac5cbf52264afcbc",
"body": null,
"is_bot": false,
"headline": "fix: format sdk manifest services for release (#52)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-05-07T20:23:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "77fec3d65cd74da28ed75af9fbdd126aff84c2e0",
"body": null,
"is_bot": false,
"headline": "chore: bump sdk to 0.0.57 (#51)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-05-07T20:19:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b9f99b7237c969dd6ca5c1217bf063807b90076d",
"body": null,
"is_bot": false,
"headline": "feat: consume persisted photo manifests (#50)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-05-07T19:43:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "761f5cd2b8ebe69226be0c44670f3e4be736130c",
"body": null,
"is_bot": false,
"headline": "feat(media): add reusable media facade (#49)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-05-07T17:22:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f321f1d2226d80b8ac31e569ffa0063fd225d0f8",
"body": "Bumps to 0.0.55 (one above latest published 0.0.54). Surface\nof the release: the visibility-rollout API in this branch\n(merged via #47) — Visibility type, UploadOptions.visibility,\nFileInfo.cdn_url, storage.uploadAnonymous,\nphoto.getPublicTransformUrl, FileStatus.urls.cdn_url, and the\nuploadAnonymou\n[…]\nody\n - test files: trailing whitespace + line-break normalization\n\nPublished to npm registry with tag `latest` and public access.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: release 0.0.55 + prettier auto-fix (#48)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-05-07T14:19:58Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4cc9e1613b480d1c8959727d4f3335c22cfa3d71",
"body": "…+ public transform URL (#47)\n\n* feat(storage,photo): tri-state visibility + anonymous_visible upload + public transform URL\n\nPR 5 of the visibility rollout. Adds the SDK surface for the\n`Visibility::AnonymousVisible` tier so customer apps can:\n 1. upload world-readable media (`storage.uploadAnonym\n[…]\n- npm run build clean\n - npm test — 331/331 pass\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(storage,photo): tri-state visibility + anonymous_visible upload …",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-05-07T05:34:23Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c9f2283696aafe05c6f2b5c68de47061630976dd",
"body": "Adds vote(), getVote(), recordView(), getViews() to SocialService.\nPairs with scalemule-social PR #11 which adds the backing routes.\n\nVoting is up/down with a score aggregate, contrasted with the existing\nunipolar like(). Views track total + per-(viewer,day) unique.\n\ntarget_type is application-defined ([a-z0-9_]{1,64}). Convention:\nprefix by app (weekmob_post, gistyo_gist) so multiple apps in one\nsm_application_id space can't collide.",
"is_bot": false,
"headline": "feat(social): add bipolar voting + view counters (#45)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-05-03T08:12:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "48f4c00366c5ac30b020eeb6946a66854dda583a",
"body": "…rror code (0.0.51) (#44)\n\nUpload-to-s3.ts was treating every non-2xx (incl. 403 SignatureDoesNotMatch)\nas transient and burning the retry budget on permanent failures. For multipart\nparts the same bug delayed URL refresh by ~4s per part. AbortSignal handlers\nalso resolved the promise without callin\n[…]\nnst production failure data for YouSnaps app — addresses the\n'failed/s3_put/upload_failed' and 'expired/multipart_failed' buckets.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(storage): fail-fast on S3 4xx, abort XHR on signal, surface AWS e…",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-05-02T23:46:43Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "c279ff42ac86f6147552d67e140cfcc497f65bfc",
"body": null,
"is_bot": false,
"headline": "feat: add speech profiles to the tts sdk (#43)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-04-29T22:54:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2a112009bdefb9fba5d9dae803d5854756f0d3fe",
"body": null,
"is_bot": false,
"headline": "fix: satisfy sdk tts lint rules",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-04-29T19:48:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cf9a19e6d5c6b91eeb548133052927420bd40a97",
"body": null,
"is_bot": false,
"headline": "chore: release 0.0.49 (#41)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-04-29T19:45:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "284cd213c3df7114b73fda34c22d596d58813860",
"body": null,
"is_bot": false,
"headline": "feat: add tts service (#40)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-04-29T19:43:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0a3344346bc5a273b25545e9ddef413dbc42463c",
"body": "* feat: add 401 auto-refresh interceptor with coalesced refresh promise\n\nOn 401 responses, automatically refresh the session token and retry the\nrequest once. Uses a coalesced promise to prevent concurrent refresh\ncalls. Adds onRefreshStart/onRefreshEnd/onAutoRefreshFailed callbacks.\n\nCo-Authored-By\n[…]\n 401 auto-refresh\n\n* fix: add missing onAutoRefreshFailed property to ScaleMuleClient\n\n* fix: clean up auto-refresh failure handling\n\n---------\n\nCo-authored-by: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add 401 auto-refresh interceptor (#39)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-04-29T05:14:58Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "670201aeb90e9375ee3cd557dbe13e96c5855c8e",
"body": "…ileInfo.id (0.0.47) (#37)\n\nServer `/signed-url/complete` returns `UploadCompleteResponse` (`file_id`,\n`filename`, `size_bytes`, `content_type`, `url`, …); the client cast it\nas `FileInfo` (which expects `id`). Every direct (small-file) upload's\n`result.data.id` was therefore `undefined`. Multipart \n[…]\nes the real file_id, chat POST returns 200 with\nproper sender + timestamp, and the message persists with its attachment\non reload.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(storage): normalize uploadDirect /signed-url/complete file_id → F…",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-04-26T23:17:31Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "dd19172bcb552208f7e3cbbc760247898f10b8ea",
"body": "…nvoices (#36)\n\nPhase 6 retirement: the two soft-deprecated aliases on BillingService\nnow throw at runtime instead of forwarding. Any caller still using them\ngets an immediate, actionable error instead of silent legacy traffic.\n\n- createSubscription → use subscribe()\n- getInvoices → use listInvoices()\n\nBumps @scalemule/sdk to 0.0.46.\n\nRefs: Phase 6 of the billing-v2 rollout plan.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(billing/A8): @deprecated → @removed for createSubscription, getI…",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-04-26T20:38:59Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2a0e387bfb59957ad9a75394e57e5af0a95cc3fa",
"body": null,
"is_bot": false,
"headline": "style: prettier fix on storage.getPolicy signature (#35)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-04-26T20:14:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "18be1854d73f4f6e4c395ae3566f083181e45ce5",
"body": "* feat: storage.getPolicy() for SDK boot-time policy fetch (0.0.45)\n\nAdds GET /v1/storage/policy → { media_policy } to the StorageService\nsurface. Lightweight EndUserOnly endpoint that any API-keyed client\ncan call; used by @scalemule/nextjs's provider on boot to pick up the\nplatform-default policy \n[…]\nrantined / error files (companion scalemule-storage fix).\n- Added unit tests for getPolicy and getFileStatus path/verb.\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: storage.getPolicy() for SDK boot-time policy fetch (0.0.45) (#34)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-04-26T20:11:57Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "39d9d60a9694ff201a8899044e578d0e63f2c490",
"body": "* docs: lead README with media uploads (0.0.44)\n\nThe base SDK README now leads with the typed-service uploadViaStorage\nhelpers (photo, video, audio) and storage.getFileStatus, since they are\nthe recommended path for image / video / audio. The plain Storage section\nis reframed as the path for non-med\n[…]\n + registers\n metadata; waveform/transcode lands when the audio service ships its\n post-processing worker (Phase 3B).\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: lead README with media uploads (0.0.44) (#33)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-04-26T19:42:28Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "aaa452a03fd99323c16c1e3f7ce331436fb9ceec",
"body": "Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: prettier fix-ups in audio service (#32)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-04-26T17:52:50Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "3bcc7a86c2d7cb225a25313ef76069187bc921dd",
"body": "Adds the missing audio analog of photo.uploadViaStorage and\nvideo.uploadViaStorage. Customer apps that want a typed audio path\ncan now do:\n\n const r = await sm.audio.uploadViaStorage(file)\n // r.data.audio_id, r.data.file_id, r.data.original_view_url\n\nSame presigned-direct-to-S3 path as storage.up\n[…]\nization, waveform peaks, and progressive transcoded URLs\nare future work; bytes are immediately playable via the storage view\nURL.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: AudioService + audio.uploadViaStorage (0.0.43) (#31)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-04-26T17:51:53Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "2b182904d0d89dd705c45223a27d8f8a61f71d2e",
"body": "Adds a prepublishOnly guard that fails npm publish if the version moves outside 0.0.x or 0.1.x. SDKs are version-locked to patch bumps until a human signs off on a minor/major bump.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: add patch-only SDK version guard (#30)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-04-26T17:15:08Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "07be5fab96cd1809695fc9b1759dff0343f940dc",
"body": "Wrappers over GET/PUT /v1/storage/settings. Returns the StorageSettings\nstruct (content_policy, media_policy, retention, max_file_size).\n\nUnblocks the upcoming useMediaPolicy() hook in @scalemule/nextjs that\nwill read the per-app default into useMedia()'s defaults — until then,\ncallers can call client.storage.getSettings() directly.\n\nBumps to 0.0.42.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(storage): getSettings + updateSettings (Phase 4 / S6 polish) (#29)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-04-26T16:28:11Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f2edc662f53b563405312a9249cb65147be2fbc0",
"body": "0.0.40 added storage.getFileStatus() and the FileStatus interface but\nforgot to re-export the type from the SDK's index.ts. Consumers (e.g.\n@scalemule/nextjs's upcoming useFileStatus hook) couldn't import it.\n\nBumps to 0.0.41.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: export FileStatus type from package root (#28)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-04-26T15:46:56Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "df11c0c4210595edb8b092a935d1e763548f65d8",
"body": "Single-call status read for any uploaded file. Returns scan + reserved\noptimize/transcode slots + constructed gateway URL paths for the\nphoto transform (image MIME) and HLS playlist (video MIME).\n\nDirect wrapper over GET /v1/storage/files/{id}/status (Phase 3 / P4\nlanded in scalemule-storage#17). Th\n[…]\n status endpoints. Until then,\ncallers attempt the constructed URLs directly (404 means pipeline\nstill running).\n\nBumps to 0.0.40.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(storage): getFileStatus() — Phase 3 / S3 prerequisite (#27)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-04-26T15:44:20Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f96a526b31f2911985237392b137b001ca120332",
"body": "…(#26)\n\nMirrors the S5a / photo.uploadViaStorage pattern for video. Composes\nstorage.uploadPrivate() with video.register() so customer apps can\nupload to storage (browser→S3 direct, no body-size traps) and get\nHLS transcoding on top, in a single SDK call.\n\nReturns:\n {\n file_id, \n[…]\nting\ncall sites unchanged.\n\nBumps to 0.0.39. CHANGELOG entry details.\n\nPhase 2 / item S5b of the realtime-chat media pipeline ADR.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(video): uploadViaStorage() + register() helpers (Phase 2 / S5b) …",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-04-26T14:38:45Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "dd0e19c17cd55748ede1e192a2f3a563cb7249bd",
"body": "Followup to #24 — prepublishOnly's lint step caught trailing-comma /\nline-break formatting on the new uploadPrivate / uploadViaStorage\ncode. eslint --fix cleaned up automatically. Tests pass.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: prettier formatting fixes for 0.0.38 (#25)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-04-26T13:28:03Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "fd3209ee8efab0d8ba4382ba19e9bf841804e8dc",
"body": "Releases the shared private-upload primitive (storage.uploadPrivate)\nand photo.uploadViaStorage() helper from PR #23, plus the accumulated\nUnreleased changes.\n\nCHANGELOG entries detail the new public surface. dist/ regenerated\nwith the new types.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: bump to 0.0.38 (#24)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-04-26T13:26:45Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1d5955170e202aa2b3aed6054dacacd3698bdfff",
"body": "* feat(storage): add uploadPrivate() — fail-closed private-attachment helper\n\nWraps upload() with two non-overridable defaults:\n- is_public: false\n- skipCompression: true (preserve original bytes)\n\nPlus a defense-in-depth check that fail-closes if the service returns\nis_public=true for any reason.\n\n\n[…]\nitem S5a of the realtime-chat media pipeline ADR.\n\nCo-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: shared private-upload primitive + photo.uploadViaStorage() (#23)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-04-26T13:23:41Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b7c12fde722e3fb3bc8f560e07ecec5dd9f25439",
"body": "Adds the SDK surface for chat message pins, backed by scalemule-chat's\nnew /v1/chat/messages/{id}/pin and /v1/chat/conversations/{id}/pins\nendpoints (message_pins table, native realtime broadcast, replaces the\ncache-backed implementation customer apps were using).\n\n- ChatService.pinMessage(messageId\n[…]\nng (compressed signatures, dropped trailing commas) — no\nbehaviour change. They had to land for prepublishOnly to pass the lint\ngate when cutting 0.0.37.\n\nCo-authored-by: Plamen <plamen@scalemule.com>",
"is_bot": false,
"headline": "feat(chat): pinMessage / unpinMessage / getPinnedMessages (#22)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-04-26T01:22:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a32a8daf38894dc6536dda1506d6df735e5c6ebd",
"body": "Adds account-scoped billing methods alongside the existing user-scoped\nones per ADR-2026-04-25 (account-scoped billing v2, scalemule-repos #236).\nThe customer/payment-method/invoice record set belongs to an app_account\n(typically a customer_org), not to a single user.\n\nChanges:\n- Customer / Invoice \n[…]\nacy createCustomer + addPaymentMethod marked @deprecated.\n\nType-check clean (pre-existing semver error unrelated). 322 tests pass.\n\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(billing): account-scoped methods (v2) (#21)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-04-25T19:45:41Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "412c9b0de53ea36f59cd6db2c2aa2aa04e59029d",
"body": "Main's source has getAvatarThumbnailUrl (PR #19), but package.json still\nreads 0.0.34 and dist/ was not rebuilt. Npm already serves 0.0.36 from a\nlocal build that was never pushed back. This commits the rebuilt dist and\nversion bump so the repo matches what's published.\n\nCo-authored-by: Valentin Cekov <vcekovmy@mergeyard.com>\nCo-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: reconcile dist + package.json with npm 0.0.36 (#20)",
"author_name": "vcekovmy",
"author_login": "vcekovmy",
"committed_at": "2026-04-16T22:16:28Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d38892c7c5c4cf4d37a0c9d0fe6e5e25a8cb3a3d",
"body": "Convenience wrapper for getOptimalUrl(photoId, 36) — returns a URL\nthat hits the pre-generated 36px bicubic avatar thumbnail cache.\n\nCo-authored-by: Valentin Cekov <vcekovmy@mergeyard.com>\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add getAvatarThumbnailUrl helper (#19)",
"author_name": "vcekovmy",
"author_login": "vcekovmy",
"committed_at": "2026-04-14T21:07:06Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "29281ff7caf54421dd188e3b35df44854911ea7a",
"body": "Co-authored-by: Valentin Cekov <vcekovmy@mergeyard.com>\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: update photo breakpoints test for 36px variant (#18)",
"author_name": "vcekovmy",
"author_login": "vcekovmy",
"committed_at": "2026-04-14T20:28:06Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d3ce40a788734958122f7147f6d7f11205cdefc5",
"body": "getOptimalUrl(photoId, 36) now gets an instant cache hit on the\npre-generated 36px square variant instead of snapping to 150px.\n\nCo-authored-by: Valentin Cekov <vcekovmy@mergeyard.com>\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add 36px to PHOTO_BREAKPOINTS for avatar micro-thumbnail (#17)",
"author_name": "vcekovmy",
"author_login": "vcekovmy",
"committed_at": "2026-04-14T20:26:36Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "534719f08b2615412d115bb58682ab46b418f431",
"body": "Co-authored-by: Valentin Cekov <vcekovmy@mergeyard.com>",
"is_bot": false,
"headline": "chore: bump to 0.0.34 for thread support release (#16)",
"author_name": "vcekovmy",
"author_login": "vcekovmy",
"committed_at": "2026-04-13T23:25:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6931adf097a52a8262ec8aaa24d61e7f72b02f9d",
"body": "Add thread fields to ChatMessage type, extend sendMessage params\nwith thread_id and is_thread_broadcast, add getThreadReplies() method.\n\nCo-authored-by: Valentin Cekov <vcekovmy@mergeyard.com>\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add thread support to main SDK chat service (#15)",
"author_name": "vcekovmy",
"author_login": "vcekovmy",
"committed_at": "2026-04-13T23:10:44Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "bfe74c5f2d145590e872ee3efeef769857050365",
"body": null,
"is_bot": false,
"headline": "feat: update SDK for money billing (#14)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-04-11T05:26:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "122778d2e65a9e104b99caf6044957d0d68edb84",
"body": "Post-publish cleanup. These are the prettier fixes applied by\n`npm run lint:fix` during the `prepublishOnly` flow for 0.0.33.\nThe published npm tarball was built from these reformatted sources,\nso this commit brings git main back into sync with what was shipped.\n\nAlso re-includes the dist rebuilt af\n[…]\nis whitespace-insensitive —\nbut regenerated so `npm run build` on a fresh checkout produces the\nsame bytes.)\n\nNo behavior changes.\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: prettier format fixes to match 0.0.33 published on npm (#13)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-04-11T04:25:41Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "2b6c7ca0957db26943026695b86240da6dae61d9",
"body": "Adds AuthService.searchUsers() and AuthService.getUser() so customer\napps can search and read users within their own application via the\nstandard customer auth path (API key + user session) — no platform\nadmin credentials.\n\nThe underlying endpoints (GET /v1/auth/users and GET /v1/auth/users/{id})\nal\n[…]\n same kind of issue affected tsc before\nI reinstalled it). No CI configured on this repo, so tests should be\nre-run after publish.\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add customer-scoped user directory methods to AuthService (#12)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-04-11T04:15:04Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ead3d89f14246a9eea5adaebc0ac6971db89c017",
"body": "Rebuild dist/ to include ConferenceService added in #10, which was\ncommitted to source without a corresponding dist rebuild. Bump\nversion to 0.0.32 for the npm release.\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: bump to 0.0.32 and rebuild dist for ConferenceService (#11)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-04-11T02:35:23Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d24cc7dfbe95c14fbbe29b01f39cc2083df8a855",
"body": "Adds conference service module with call lifecycle, participant management,\nrecording controls, settings, and WebRTC stats submission methods.\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add ConferenceService for audio/video conferencing (#10)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-04-10T02:23:16Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "0054bf5cc7d469006623ddd4af8b5031fe6a0f06",
"body": "Co-authored-by: Valentin Cekov <vcekovmy@mergeyard.com>\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "0.0.31 (#9)",
"author_name": "vcekovmy",
"author_login": "vcekovmy",
"committed_at": "2026-04-08T06:42:38Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d4572e44c36f2b9bf2d663bd3f55f5530cc38e86",
"body": "…(#8)\n\nThe gateway requires a short-lived ticket for WebSocket upgrades.\nFetch a ticket via POST /v1/realtime/ws/ticket before connecting,\nthen pass it as a query parameter. Falls back to direct connection\nif ticket exchange fails.\n\nCo-authored-by: Valentin Cekov <vcekovmy@mergeyard.com>\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: use ticket-based auth for WebSocket connections through gateway …",
"author_name": "vcekovmy",
"author_login": "vcekovmy",
"committed_at": "2026-04-08T05:59:27Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "9409691a277a010c952b69c8bfba4a4a78a12959",
"body": "Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: fix prettier formatting in creator-maker (#7)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-04-08T00:18:09Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2f64ab92fbd7da73636bb3b1078f6a255a9c83f0",
"body": "Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: fix prettier formatting for 0.0.29 release (#6)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-04-08T00:17:21Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "3b1790bd2e7d02fb80bfbebfc3835b31c3b08450",
"body": "… (#5)\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: fix TS strict errors in maskEmail/applyPrivacy, bump to 0.0.29…",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-04-08T00:15:22Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "9a8ed5b77f339d193f3ad8790dbf6df991d0f3e7",
"body": "Adds write-time email masking and PII stripping for the account switcher\nso apps can control how much identifying info is stored for inactive accounts.\n\n- AccountSwitcherPrivacy type: 'full' | 'masked' | 'minimal'\n- KnownAccountDisplay: privacy-transformed output type\n- maskEmail/stableColorIndex/ap\n[…]\n full-PII data\n- Eviction: caps at 10 accounts, drops oldest by lastActiveAt\n- Auto-records known accounts on login/register/OAuth\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add configurable privacy for account switcher (#4)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-04-08T00:09:04Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a6e6f33f47bdcc5008616db39469ff6cd5a7c33a",
"body": "Adds sm.creatorMaker with methods for AI content generation:\ngenerate, getJob, pollJob, listJobs, cancelJob, retryJob,\ngenerateVariations, listPresets, getUsage, projects, outputs.\n\nFor rich features (React hooks, waitForJob), use @scalemule/creator-maker.\n\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add CreatorMakerService to core SDK (#3)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-04-07T08:16:27Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "54a6eed125afa76dfa0fb882034deb2759b79319",
"body": "Co-authored-by: Valentin Cekov <vcekovmy@mergeyard.com>\nCo-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "0.0.28 (#2)",
"author_name": "vcekovmy",
"author_login": "vcekovmy",
"committed_at": "2026-04-07T05:00:41Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "b18cd65b51b3d1762958180f9c0ce21bda6a53a6",
"body": "fix: bundle @scalemule/ui into SDK dist for Next.js compat",
"is_bot": false,
"headline": "Merge pull request #1 from scalemule/fix/val-bundle-ui-phone-utils",
"author_name": "vcekovmy",
"author_login": "vcekovmy",
"committed_at": "2026-04-06T23:04:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "694f8bebf75b3ce039a673f10007d35bc24d6ebb",
"body": "…tion\n\nNext.js webpack doesn't resolve package.json `exports` subpaths for\ntransitive dependencies, causing \"Can't resolve '@scalemule/ui/phone'\"\nerrors. Bundle the phone utilities directly into the SDK dist instead of\nleaving them as an external import.\n\n- Add tsup.config.ts with noExternal: [\"@scalemule/ui\"]\n- Move @scalemule/ui from peerDependencies to dependencies\n- Simplify build script to use tsup config file\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: bundle @scalemule/ui into SDK dist to fix Next.js subpath resolu…",
"author_name": "Valentin Cekov",
"author_login": null,
"committed_at": "2026-04-06T23:02:42Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "9e33d077663c51f04ff12c3f39f0ef5d6f3d7b11",
"body": "- Task interface: added pipeline_id, pipeline_version, current_phase,\n phase_entered_at\n- createTask: added optional pipeline_id parameter\n- startTask: new method for agent claimed→in_progress transition\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: workflow fields + startTask + pipeline_id in createTask",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-28T18:21:04Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d5539f3a3f34e36c811f7f9ab64e87e4a66862fc",
"body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: rebuild dist",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-26T04:19:01Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "17056a3db40159ab8b0b32d0f60f58a57cec4c67",
"body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: lint — remove trailing commas per prettier config",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-26T04:14:47Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f98b25dde9c40b9bba8fd97766a94411b42a0087",
"body": "ConnectionStatus and other realtime types were exported twice in index.ts.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: remove duplicate type export causing DTS build failure",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-26T04:11:07Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f5599b1846cf265bf761128c6aeb5c6b1fb1b84a",
"body": null,
"is_bot": false,
"headline": "0.0.27",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-26T04:09:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d3b1bddd36213b57fbbabdd1bf2e590d51d71d8f",
"body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: rebuild dist after notification system changes",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-26T04:08:09Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "6e4832db9362c4ed78336558890d4c8e57a77283",
"body": "Add applicationId to ScaleMuleConfig, expose getApplicationId() on client.\nFix realtime authenticate() to send app_id. New NotificationsService with\nlist, unreadCount, markRead, markAllRead, dismiss. Export ConnectionStatus\nand other realtime types.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add applicationId config + NotificationsService",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-26T03:30:39Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "abac53b26f55f64a7d8cb512babf357b0b693ba3",
"body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: bump to 0.0.26 — context capture fields + UA detection",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-25T14:21:28Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "b96233bedecd102762f959b4db83df4176cabe4d",
"body": "…h registration\n\n- Add 4 fields to RegisterPushTokenData\n- WebPushManager.subscribe() auto-detects: timezone (Intl API), language,\n browser + OS + device type (UA parsing)\n- Add registrationSource to WebPushManagerOptions\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: capture timezone, language, browser, registration source at pus…",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-25T14:11:25Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a495fbe092b38d4617fdc8228a6820e878d94135",
"body": null,
"is_bot": false,
"headline": "chore: bump version to 0.0.25",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-25T11:51:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6eabf22e120d3107a921f1fd9d6eb2a922a833d4",
"body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: format reorderTasks method for prettier",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-25T11:46:53Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "5fadef714b64bbe02a93fe93e2ab4aa43d9a4f00",
"body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add sort_order to Task interface and reorderTasks method",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-25T11:40:57Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f71d010c711124be56826a3ba786e13225066ec3",
"body": "…ards\n\n- Add referrals.ts service module wrapping /v1/referrals backend\n- Export ReferralsService class + types from package root\n- Register referrals on ScaleMule class\n- Update @scalemule/ui peerDep to >=0.0.1\n- Bump version to 0.0.24\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add ReferralsService — share links, campaigns, attribution, rew…",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-25T05:36:05Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "8c8a0f3e5df40b68044885ee108791ea05599f77",
"body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: resolve prettier lint errors in push notification code",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-25T00:21:07Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f5a5e74a6715a50190748177d911708bb52a1ee8",
"body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: bump version to 0.0.23",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-25T00:16:17Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "31ba377c57fa64bca8c41e98b668fd8142cfefd9",
"body": "…ication API\n\n- Add PushSettings, PushTopic, PushPreferences, WebPushSubscriptionData types\n- Expand registerPushToken with subscription, device_id, metadata fields\n- Add by-id token methods: unregisterPushTokenById, associatePushTokenUserById, disassociatePushTokenUser\n- Add getMyPushSettings, list\n[…]\nAdd WebPushManager class with PushApiFetcher interface for injectable HTTP transport\n- Add WEB_PUSH_SERVICE_WORKER template string\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: web push notification support — WebPushManager, expanded commun…",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-24T23:50:28Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "8537e30dde7d8c8c96084f7b97c1f0ad9977b80a",
"body": "When a single PUT upload stalls (no progress for the timeout), it was\ntreated as a permanent failure with no retry. Multipart uploads already\nretried on stall. This makes behavior consistent — stalls now fall\nthrough to the retry loop (capped at 3 attempts).\n\nFixes video uploads failing on slow mobile connections.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: retry single uploads on stall instead of terminal failure",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-24T01:16:44Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "cde9cc97e81aa8f182ec710e7149d63c3d80fe83",
"body": "Files 1-8MB on 2G/3G networks now use multipart upload, gaining\nper-part retry, IndexedDB resume support, and explicit abort handling.\nAddresses stuck uploads on slow connections.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: lower slow-network multipart threshold from 4MB to 1MB",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-21T01:49:30Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a1ef47abf69d1b821a59348fb563b2f911aacc26",
"body": null,
"is_bot": false,
"headline": "chore: release 0.0.20",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-20T20:58:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "35da8c74b9dd36a2574d5387914885151ddae975",
"body": "When the server returns 202 (scan didn't finish within its 5s timeout),\nthe SDK retries POST /register twice with 1s gaps. Worst case is ~17s\ntotal. If still pending, returns a typed error instead of a non-PhotoInfo\nobject.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: handle 202 pending_scan responses in photo.register()",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-20T20:40:03Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "65fb75ca69f7e71e9b258b17a247543061309b50",
"body": null,
"is_bot": false,
"headline": "0.0.19",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-19T22:21:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "da38e66c3abb2aa85635b8b4aca48290b53738bd",
"body": null,
"is_bot": false,
"headline": "feat: add stallTimeoutMs to S3MultipartOptions for stall detection",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-19T22:19:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "79fd934f7d6e5760c47c10eff0983ebe43cbf44e",
"body": null,
"is_bot": false,
"headline": "chore: release 0.0.18",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-16T19:35:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dce8e050886a8fc9c72f01d0d08c7fdf33b74423",
"body": "Add uploadSingleToS3 and uploadMultipartToS3 as standalone exports\nso any client app can use multipart chunked uploads with retry,\nstall detection, and progress tracking — without reimplementing\nS3 upload logic.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: export reusable S3 upload utilities for client apps",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-16T19:32:34Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "664dc90fc1c2f71bf6ff1719802dd86c7b37ff64",
"body": null,
"is_bot": false,
"headline": "feat: report presigned upload failures",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-16T19:27:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe0be9e889bd23afb6db8b80b1c61291e457d7c5",
"body": "…luator with segment indexes (0.0.16)\n\nAdds FlagClient with Map-based O(1) lookups, local evaluation engine (1:1 port of Rust evaluator),\nSSE streaming with polling fallback, telemetry aggregation, and flags service API wrapper.\nDeprecation warning for keyless useFeatureFlags hooks ships in downstream SDK packages.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add feature flags — local evaluation client, server export, eva…",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-16T16:35:51Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "39574e55c95a50801166a9f650c5903a9a7c62b8",
"body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "style: fix prettier lint in data.ts",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-16T04:52:22Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "4043134e280c094982dc5ac8e3dd0e6b821c5b1e",
"body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: bump version to 0.0.13",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-16T04:40:39Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "dccbc6766b172df7336eaf69cda6cdf1f4d4d985",
"body": "The data service expects { operator: 'in', values: [...] } but callers\ncommonly pass { value: [...] } matching other operators. Auto-convert\nvalue→values for 'in' filters to prevent 400 Bad Request errors.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: normalize 'in' filter value→values in data.query()",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-16T04:40:20Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "e85131e0cfcc04e7d13bbe66d5b0aa3a23e9ec6a",
"body": "Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: bump version to 0.0.12 for npm publish",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-16T02:30:46Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "98ac3354761127d7f18d8ecb576001ed68476ed5",
"body": "The analytics service's EnhancedEventRequest requires event_name but\nthe SDK was sending event, causing 400 deserialization errors. Also\nadds test coverage asserting the correct wire format for both methods.\n\nCo-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: send event_name instead of event in analytics track/trackBatch",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-16T02:25:42Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2100d70b42c55adbd05059c720940d231fa343ec",
"body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "style: fix prettier formatting in teams getter and workspaces.create",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-11T20:50:31Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "bc460dbdd05a10a69c7aa04c06c84a8fafddfe8a",
"body": "TeamsService was a separate instance; test expected sm.teams === sm.workspaces.\nNow teams is a getter returning the workspaces instance directly.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: make teams a getter alias for workspaces (fixes toBe test)",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-11T20:48:51Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d0900f5b7bbe869292f90c41212113f27b5eabdf",
"body": "Auto-inject x-sm-workspace-id header on all request(), upload(), and\nuploadWithXHR() calls. Persist workspace ID in storage, restore on\ninitialize(), clear on clearSession(). Bump to 0.0.10.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add setWorkspaceContext() for workspace-scoped requests",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-11T20:37:21Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "df2b5f22640055f9747d0a118e275dda47a24ba8",
"body": "Adds distinct service classes for workspaces (with SSO) and teams\n(without SSO). Adds container_invitation_id to ProjectGrant.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: separate WorkspacesService and TeamsService, v0.0.9",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-11T14:46:05Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "4aeb8c303d5ba4fd4e7494f0f971dd292e969ba5",
"body": "- client.ts: add RawApiResponse interface for parsed HTTP responses\n- realtime.ts: type WS message as Record<string, unknown> with casts\n- Bump to 0.0.6\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: resolve lint warnings — replace any with typed interfaces",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-10T20:42:28Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "71e2a90141cc6aa715920554e787c98e9aad320d",
"body": "…mail field name\n\n- createGrant now accepts optional invite_url for platform-side email\n- New resendGrantInvitation(id, { invite_url }) method\n- Fix sendEmail: body → html_body to match communication API\n- Bump to 0.0.5\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add invite_url to createGrant, resendGrantInvitation, fix sendE…",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-10T20:37:09Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "b5d7bbef718a3085cef93e4b1407c7da045dc9ce",
"body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: bump version to 0.0.4, clean up grant types",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-10T17:15:06Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "db0dfd42969fec6dae5d1b7fa54a96bde6c7fa93",
"body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: lint formatting in listGrants",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-10T06:37:35Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "fd9ae0412411da5a8043501174710fead884dc11",
"body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: bump version to 0.0.3",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-10T06:36:53Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "b119aca26073a5bbac7f97d94f81d92dee76c55c",
"body": "- Add createGrant, listGrants, getGrant, getGrantInfo, updateGrant, revokeGrant, redeemGrant\n- Add ProjectGrant, GrantInfo, RedeemResult types\n- Fix acceptInvitation return type (TeamInvitation, not TeamMember)\n- Make TeamInvitation.token optional (only on create response)\n- Add hydrate param to listMembers\n- Apply lint:fix semicolons across all service files\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add project grant methods, fix teams types, lint formatting",
"author_name": "Plamen",
"author_login": "plamenbase",
"committed_at": "2026-03-10T06:28:45Z",
"body_truncated": false,
"is_coding_agent": true
}
],
"releases_count": 2,
"commits_last_year": 103,
"latest_release_at": "2026-03-20T20:58:56Z",
"latest_release_tag": "v0.0.20",
"releases_from_tags": true,
"days_since_last_push": 5,
"active_weeks_last_year": 12,
"days_since_latest_release": 125,
"mean_days_between_releases": 0.9
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 50,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "@scalemule/sdk",
"exists": true,
"license": "MIT",
"keywords": [
"scalemule",
"backend-as-a-service",
"baas",
"api",
"sdk",
"typescript",
"javascript",
"client",
"rest",
"http"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/@scalemule/sdk",
"is_deprecated": false,
"latest_version": "0.0.62",
"repository_url": "https://github.com/scalemule/sdk",
"versions_count": 57,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 2074,
"first_published_at": "2026-03-04T06:06:55.306000Z",
"latest_published_at": "2026-07-19T02:21:48.946000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
}
]
},
"popularity": {
"forks": 0,
"stars": 0,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0,
"collected_at": null
},
"open_issues_and_prs": 1
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 127792,
"source_files_sampled": 79,
"oversized_source_files": 2,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 2,
"malicious_count": 0,
"assessed_package": "npm:@scalemule/sdk@0.0.62",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "@scalemule/ui",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": ">=0.0.1"
},
{
"name": "semver",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^7.7.4"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 58,
"open_issues": 1,
"closed_ratio": 0,
"closed_issues": 0,
"closed_unmerged_prs": 1
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "plamenbase",
"commits": 92,
"avatar_url": "https://avatars.githubusercontent.com/u/265189924?v=4"
},
{
"type": "User",
"login": "vcekovmy",
"commits": 10,
"avatar_url": "https://avatars.githubusercontent.com/u/272055214?v=4"
}
],
"contributors_sampled": 2,
"top_contributor_share": 0.902
},
"quality_signals": {
"has_ci": false,
"has_tests": true,
"ci_workflows": [],
"has_docs_dir": false,
"linter_configs": [
".eslintrc.json"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 5,
"reason": "16 out of 30 merged PRs checked by a CI test -- score normalized to 5",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 7,
"reason": "Found 22/30 approved changesets -- score normalized to 7",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": null,
"reason": "no workflows found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": null,
"reason": "no dependencies found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": null,
"reason": "No tokens found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "14a031b4700cc62a2671a46d5cf40e8824a4f302",
"ran_at": "2026-07-24T14:37:48Z",
"aggregate_score": 4.5,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": null,
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-19T02:21:27Z",
"ci_last_conclusion": null,
"oldest_open_issues": [
{
"number": 46,
"created_at": "2026-05-06T20:37:40Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/scalemule/sdk",
"host": "github.com",
"name": "sdk",
"owner": "scalemule"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 52,
"inputs": {
"security": 56,
"vitality": 74,
"community": 32,
"governance": 46,
"engineering": 50
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 74,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"commits_last_year": 103,
"human_commit_share": 1,
"days_since_last_push": 5,
"active_weeks_last_year": 12
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 5 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 5
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "12/52 weeks with commits",
"points": 8.3,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 12
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "103 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 103
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "good",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 78,
"inputs": {
"releases_count": 2,
"latest_release_tag": "v0.0.20",
"releases_from_tags": true,
"days_since_latest_release": 125,
"mean_days_between_releases": 0.9
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "2 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 2
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 125 days ago",
"points": 27,
"status": "partial",
"details": [
{
"code": "release_recency",
"params": {
"days": 125
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~0.9 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 0.9
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 32,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 0,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 55,
"inputs": {
"packages": [
"@scalemule/sdk"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 2074
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "2,074 downloads/month across npm",
"points": 44.2,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 2074,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 46,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 14,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 2,
"top_contributor_share": 0.902
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 90% of commits",
"points": 2.2,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 90
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "2 contributors",
"points": 2.7,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 2
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "at_risk",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 48,
"inputs": {
"merged_prs": 58,
"open_issues": 1,
"closed_issues": 0,
"issue_closed_ratio": 0,
"closed_unmerged_prs": 1
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "0% of issues closed",
"points": 0,
"status": "missed",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 0
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "58/59 decided PRs merged",
"points": 37.6,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 58,
"decided": 59
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 22/30 approved changesets -- score normalized to 7",
"points": 10.5,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 39,
"inputs": {
"followers": 0,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "scalemule",
"public_repos": 11,
"account_age_days": 142
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "0 followers of scalemule",
"points": 0,
"status": "missed",
"details": [
{
"code": "owner_followers",
"params": {
"count": 0,
"login": "scalemule"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "11 public repos, account ~0 yr old",
"points": 8.6,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 11
}
},
{
"code": "account_age_years",
"params": {
"years": 0
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"@scalemule/sdk"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 5
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 5 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 5
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "57 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 57
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 50,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_ci": false,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".eslintrc.json",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".eslintrc.json"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "16 out of 30 merged PRs checked by a CI test -- score normalized to 5",
"points": 10,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 56,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Dangerous-Workflow, Packaging, Pinned-Dependencies, Signed-Releases, Token-Permissions. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"dangerous_workflow",
"packaging",
"pinned_dependencies",
"signed_releases",
"token_permissions"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 45,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 13,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 5,
"scorecard_aggregate": 4.5
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "16 out of 30 merged PRs checked by a CI test -- score normalized to 5",
"points": 1.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 22/30 approved changesets -- score normalized to 7",
"points": 5.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no workflows found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "No tokens found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:@scalemule/sdk@0.0.62 runtime dependency closure — what installing the published package pulls in — 2 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "npm:@scalemule/sdk@0.0.62",
"assessed": 2
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 2,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 2,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 60,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.98,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "98 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 98,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_pinned_dependencies"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 60,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"tsconfig.json"
],
"agent_commit_share": 0.76,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".eslintrc.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".eslintrc.json"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "76 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 76,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 99,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 127792,
"source_files_sampled": 79,
"oversized_source_files": 2
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "2/79 source files over 60KB",
"points": 53.6,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 79,
"oversized": 2
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-24T14:38:04.859754Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/scalemule/sdk.svg",
"full_name": "scalemule/sdk",
"license_state": "standard",
"license_spdx": "MIT"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — npm.