stein155/retouch holds a health index of 60 out of 100, placing it in the Moderate band. It scores highest on AI Readiness (85/100) and lowest on Community & Adoption (24/100). It was last updated 1 day ago. A single contributor accounts for most of its recent work.
60
overall / 100
Moderate
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.
60
Exceptional93-100The record's top tier (≈ top 5%); essentially all checked criteria met
Excellent80-92Strong across the board; minor gaps
Good65-79Healthy; gaps are limited and manageable
Moderate50-64Acceptable with notable gaps; review recommended
Weak35-49Material weaknesses across several areas
At Risk20-34Significant weaknesses; adoption warrants caution
Critical1-19Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
The weighted overall 57 is calibrated to 60 on the published index scale (record calibration 2026-08-02).
How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.
Manageable file sizes — 0/155 source files over 60KB
Inputs used
primary_language
Go
largest_source_bytes
44,973
source_files_sampled
155
oversized_source_files
0
Key facts
2GitHub stars
3contributors
336commits, last 12 months
1days since last push
40releases
1bus factor
0open issues
Go, npmpackage ecosystems
Data collection warnings
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
Star and fork history 0 ★ / 2 ⇿
0Stars
2Forks
26Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 0Patch 26
OpenSSF Scorecard 4.6 / 10
4.6aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-08-05 09:25 UTC
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Raw JSON report machine-readable
{
"data": {
"icon": {
"bytes": 12771,
"width": 256,
"height": 256,
"rejected": [
{
"url": "https://raw.githubusercontent.com/stein155/retouch/main/docs/readme-header.png",
"reason": "not square enough (1600x520)",
"source_type": "readme"
},
{
"url": "https://raw.githubusercontent.com/stein155/retouch/main/screenshots/home.png",
"reason": "not square enough (824x1830)",
"source_type": "readme"
},
{
"url": "https://raw.githubusercontent.com/stein155/retouch/main/screenshots/search.png",
"reason": "not square enough (824x1830)",
"source_type": "readme"
},
{
"url": "https://raw.githubusercontent.com/stein155/retouch/main/screenshots/settings.png",
"reason": "not square enough (824x1830)",
"source_type": "readme"
},
{
"url": "https://raw.githubusercontent.com/stein155/retouch/main/screenshots/home-dark.png",
"reason": "not square enough (824x1830)",
"source_type": "readme"
}
],
"collected": true,
"media_type": "image/jpeg",
"source_url": "https://avatars.githubusercontent.com/u/25324301?v=4&s=256",
"source_type": "avatar",
"content_hash": "12798608713e1bebfbbb5ec6bf0185a582680f8f042994713d18ee5ae0bb9f95",
"candidates_considered": 6
},
"repo": {
"topics": [
"bose",
"golang",
"internet-radio",
"multiroom",
"radio",
"react",
"self-hosted",
"soundtouch",
"tunein"
],
"is_fork": false,
"size_kb": 4499,
"has_wiki": false,
"homepage": null,
"languages": {
"Go": 561826,
"HTML": 10529,
"Shell": 65125,
"JavaScript": 1238,
"TypeScript": 304764
},
"pushed_at": "2026-08-03T18:56:05Z",
"created_at": "2026-06-15T05:27:08Z",
"owner_type": "User",
"updated_at": "2026-07-26T15:19:01Z",
"description": "🎵 ReTouch keeps Bose SoundTouch speakers working by hosting the required Bose API directly on the speaker itself.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Go",
"significant_languages": [
"Go",
"TypeScript"
]
},
"owner": {
"blog": null,
"name": "Stein Milder",
"type": "User",
"login": "stein155",
"company": null,
"location": "Zevenaar, Netherlands",
"followers": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/25324301?v=4",
"created_at": "2017-01-24T14:05:52Z",
"is_verified": null,
"public_repos": 5,
"account_age_days": 3479
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.2.38",
"kind": "patch",
"published_at": "2026-07-25T11:01:20Z"
},
{
"tag": "v0.2.37",
"kind": "patch",
"published_at": "2026-07-25T09:56:39Z"
},
{
"tag": "v0.2.36",
"kind": "patch",
"published_at": "2026-07-25T04:04:15Z"
},
{
"tag": "v0.2.35",
"kind": "patch",
"published_at": "2026-07-16T15:30:01Z"
},
{
"tag": "v0.2.34",
"kind": "patch",
"published_at": "2026-07-04T20:08:37Z"
},
{
"tag": "v0.2.33",
"kind": "patch",
"published_at": "2026-07-04T11:06:56Z"
},
{
"tag": "v0.2.32",
"kind": "patch",
"published_at": "2026-07-03T12:35:27Z"
},
{
"tag": "v0.2.31",
"kind": "patch",
"published_at": "2026-07-03T05:40:01Z"
},
{
"tag": "v0.2.30",
"kind": "patch",
"published_at": "2026-07-02T16:10:33Z"
},
{
"tag": "v0.2.29",
"kind": "patch",
"published_at": "2026-07-02T11:04:01Z"
},
{
"tag": "v0.2.28",
"kind": "patch",
"published_at": "2026-07-02T06:10:04Z"
},
{
"tag": "v0.2.27",
"kind": "patch",
"published_at": "2026-07-02T05:31:30Z"
},
{
"tag": "v0.2.26",
"kind": "patch",
"published_at": "2026-07-01T05:29:54Z"
},
{
"tag": "v0.2.25",
"kind": "patch",
"published_at": "2026-06-28T15:52:29Z"
},
{
"tag": "v0.2.24",
"kind": "patch",
"published_at": "2026-06-28T08:26:14Z"
},
{
"tag": "v0.2.23",
"kind": "patch",
"published_at": "2026-06-27T07:19:24Z"
},
{
"tag": "v0.2.22",
"kind": "patch",
"published_at": "2026-06-25T21:11:41Z"
},
{
"tag": "v0.2.21",
"kind": "patch",
"published_at": "2026-06-21T17:19:36Z"
},
{
"tag": "v0.2.20",
"kind": "patch",
"published_at": "2026-06-20T20:02:14Z"
},
{
"tag": "v0.2.19",
"kind": "patch",
"published_at": "2026-06-20T19:39:10Z"
},
{
"tag": "v0.2.18",
"kind": "patch",
"published_at": "2026-06-20T19:23:57Z"
},
{
"tag": "v0.2.17",
"kind": "patch",
"published_at": "2026-06-20T18:23:53Z"
},
{
"tag": "v0.2.16",
"kind": "patch",
"published_at": "2026-06-20T18:03:56Z"
},
{
"tag": "v0.2.15",
"kind": "patch",
"published_at": "2026-06-20T16:43:58Z"
},
{
"tag": "v0.2.14",
"kind": "patch",
"published_at": "2026-06-20T16:32:16Z"
},
{
"tag": "v0.2.13",
"kind": "patch",
"published_at": "2026-06-20T15:36:12Z"
},
{
"tag": "v0.2.12",
"kind": "patch",
"published_at": "2026-06-20T09:00:56Z"
},
{
"tag": "v0.2.11",
"kind": "patch",
"published_at": "2026-06-20T08:43:55Z"
},
{
"tag": "v0.2.10",
"kind": "patch",
"published_at": "2026-06-20T08:09:52Z"
},
{
"tag": "v0.2.9",
"kind": "patch",
"published_at": "2026-06-20T06:01:31Z"
},
{
"tag": "v0.2.8",
"kind": "patch",
"published_at": "2026-06-19T19:51:28Z"
},
{
"tag": "v0.2.7",
"kind": "patch",
"published_at": "2026-06-19T19:26:42Z"
},
{
"tag": "v0.2.6",
"kind": "patch",
"published_at": "2026-06-19T19:15:51Z"
},
{
"tag": "v0.2.5",
"kind": "patch",
"published_at": "2026-06-19T19:00:41Z"
},
{
"tag": "v0.2.4",
"kind": "patch",
"published_at": "2026-06-19T18:28:00Z"
},
{
"tag": "v0.2.3",
"kind": "patch",
"published_at": "2026-06-19T17:13:32Z"
},
{
"tag": "v0.2.2",
"kind": "patch",
"published_at": "2026-06-19T16:57:13Z"
},
{
"tag": "v0.2.1",
"kind": "patch",
"published_at": "2026-06-15T19:23:11Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2026-06-15T16:24:11Z"
},
{
"tag": "v0.1.0",
"kind": "minor",
"published_at": "2026-06-15T05:32:24Z"
}
],
"recent_commits": [
{
"oid": "3ea8b0a14f9c9a00a24b931bd16e5568606b3765",
"body": "fix(st20): stop the speaker asking to be set up, and start the mDNS daemon the firmware never starts",
"is_bot": false,
"headline": "Merge pull request #127 from milderdb/fix/st20-setup-state-machine",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-26T15:18:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "123bdbe4b1e491c1ab49768effd3a9c4619f59aa",
"body": "… whole bracket\n\nHardware measurement narrowed this down. What makes a speaker keep asking to be set\nup is the firmware's persistent flag, from GET /setup:\n\n <setupStateResponse state=\"SETUP_INACTIVE\" systemstate=\"SETUP_LANG_NOT_SET\"/>\n\nand exactly one frame flips it:\n\n <msg><header deviceID=\"\n[…]\ngger in favour of the explicit flag, which is a fact rather than an inference.\n\nspeaker.SetupState reads the flag; sim serves GET /setup and gains SetSystemState so the\nstate is reproducible in tests.",
"is_bot": false,
"headline": "fix(setup): flip the firmware's language flag with one frame, not the…",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-26T15:16:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dff7aff7b51983da8c53d440a8a24472aff5319d",
"body": "…r on free space\n\nTwo hardening changes found while working on a live speaker.\n\n**Minimal pairing payload.** setupsession could send the extended\n<PairDeviceWithAccount> shape the official Bose app uses — <boseServer>,\n<updateServer> and <accountEmail> — and autopair did. On a real ST20 the effect o\n[…]\nx (\"delete an old\nretouch.* binary\"), sized from the running binary plus a 1 MB margin, and stays\npermissive when the partition cannot be measured so an unmeasurable filesystem\nnever blocks an update.",
"is_bot": false,
"headline": "fix(pairing): send only the minimal account payload; guard the update…",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-26T12:54:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "76d0f15a5b654f7af1c23fd3f216ceb65f67b10d",
"body": "…scoverable\n\nA SoundTouch 20 publishes no mDNS records at all: no _soundtouch, no\n_spotify-connect, no _raop, no _airplay. It is invisible to AirPlay, to Spotify\nand to every SoundTouch controller, while a SoundTouch 10 on the same LAN\npublishes all four.\n\nBoseApp does not publish mDNS itself — it l\n[…]\noundation, not yet the whole story: with avahi healthy,\nBoseApp still registers nothing, and its own IPC ports (30034, 40087) refuse\nconnections. That part is firmware-internal and tracked separately.",
"is_bot": false,
"headline": "fix(discovery): start the firmware's mDNS daemon so the speaker is di…",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-26T10:54:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f876d2da1fda476ba981f2488a97f17913e54d91",
"body": "After a cold boot a SoundTouch 20 parks in the firmware's setup mode:\n/now_playing reports source=SETUP, the speaker asks for the SoundTouch app on\nevery start, and its streaming services never initialise — it does not even\nadvertise _spotify-connect on mDNS, and its ZeroConf activeUser stays empty.\n[…]\nVerified on a live SoundTouch 20: all nine steps ack, source goes SETUP ->\nINVALID_SOURCE, and the firmware's own flag advances from SETUP_LANG_NOT_SET to\nSETUP_LANG_SET and stays there.\n\nCloses #126.",
"is_bot": false,
"headline": "fix(setup): drive the firmware SETUP state machine to leave setup mode",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-26T09:38:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1c27a1367e7361df34591a977a6a8600fef29ed3",
"body": "fix(display): lowercase font glyphs + larger line spacing for large layout",
"is_bot": false,
"headline": "Merge pull request #125 from milderdb/fix/st20-pairing-bootstrap",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-25T10:48:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1065f42bf2fe502ca53c3bc0e3d808ec615b3b4b",
"body": "…ayout",
"is_bot": false,
"headline": "fix(display): lowercase font glyphs + larger line spacing for large l…",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-25T10:37:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f26b47795dddd7d77b68450f345bf9f19c1046fc",
"body": "feat(display): bigger waste icon layout with shortened text",
"is_bot": false,
"headline": "Merge pull request #124 from milderdb/fix/st20-pairing-bootstrap",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-25T09:54:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d980ea9457cac2746b0bbe374eedb86b39f6e28d",
"body": "…ore logic",
"is_bot": false,
"headline": "refactor(display): generic Large layout flag; remove waste-specific c…",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-25T09:22:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "da284a72610b4a9180b0a20e79daf0265c0769b1",
"body": null,
"is_bot": false,
"headline": "feat(display): bigger waste icon layout with shortened text",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-25T09:16:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b0a7823f8a98a603d8570c6b7b84dabbe4de55d",
"body": "fix(installer): complete ST20 pairing bootstrap",
"is_bot": false,
"headline": "Merge pull request #123 from milderdb/fix/st20-pairing-bootstrap",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-25T08:46:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "22ab98e00fdc4a026501b7f032e3307d2858bb95",
"body": null,
"is_bot": false,
"headline": "fix(installer): complete ST20 pairing bootstrap",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-25T08:25:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "156e553b7de58584b0faab8774ed8b63f2bdc8db",
"body": null,
"is_bot": false,
"headline": "fix(installer): use speaker route for pairing stub",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-25T08:13:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "951c59befaad39c45485c6aec33b03352b4845b6",
"body": "…b-actions-4c2bda7e8b\n\nchore(deps): bump the github-actions group with 2 updates",
"is_bot": false,
"headline": "Merge pull request #119 from stein155/dependabot/github_actions/githu…",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-24T20:23:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7412566378f0a9c6e59f9e346d8625b1dcc934c8",
"body": "…d/npm-production-59026ebf8a\n\nchore(deps): bump styled-components from 6.4.3 to 6.4.4 in /frontend in the npm-production group",
"is_bot": false,
"headline": "Merge pull request #120 from stein155/dependabot/npm_and_yarn/fronten…",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-24T20:23:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "747224de7796a2b56f9a965c17dc4fa6ed52ca49",
"body": "…d/npm-development-25b94af664\n\nchore(deps-dev): bump vite from 8.1.4 to 8.1.5 in /frontend in the npm-development group",
"is_bot": false,
"headline": "Merge pull request #121 from stein155/dependabot/npm_and_yarn/fronten…",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-24T20:20:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b912bf21f2f6eadfe8177c185315ee41f0207dde",
"body": "fix(installer): handle factory-reset speakers",
"is_bot": false,
"headline": "Merge pull request #122 from milderdb/fix/factory-reset-installer",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-24T20:20:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "471a94ea880c07641a7b10b95956b11165f2a05a",
"body": null,
"is_bot": false,
"headline": "fix(installer): run cloud config repair on boot",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-24T20:16:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d0fa3c54bcc72bfb3c1fa4120113a6c00106642f",
"body": null,
"is_bot": false,
"headline": "fix(player): fall back when TuneIn source is missing",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-24T19:58:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7f1ef6a08af5f85d2e94544787cd6a9247ff3d0f",
"body": null,
"is_bot": false,
"headline": "fix(installer): handle factory-reset speakers",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-24T19:21:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ed5474fb63e12b0748c25694fcfe25eae6f7376",
"body": "Bumps the npm-development group in /frontend with 1 update: [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).\n\n\nUpdates `vite` from 8.1.4 to 8.1.5\n- [Release notes](https://github.com/vitejs/vite/releases)\n- [Changelog](https://github.com/vitejs/vite/blob/main/packages/vite/CHANGELOG.m\n[…]\n dependency-version: 8.1.5\n dependency-type: direct:development\n update-type: version-update:semver-patch\n dependency-group: npm-development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "chore(deps-dev): bump vite in /frontend in the npm-development group",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-20T18:56:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c9c029aeafb00d2e4b6c8cfd5e1cf1a8bfa05db1",
"body": "Bumps the npm-production group in /frontend with 1 update: [styled-components](https://github.com/styled-components/styled-components).\n\n\nUpdates `styled-components` from 6.4.3 to 6.4.4\n- [Release notes](https://github.com/styled-components/styled-components/releases)\n- [Commits](https://github.com/\n[…]\n\n dependency-version: 6.4.4\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: npm-production\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "chore(deps): bump styled-components",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-20T18:55:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "630eaacbb782bc54dd254d737a6ba799b2d32605",
"body": "Bumps the github-actions group with 2 updates: [actions/setup-node](https://github.com/actions/setup-node) and [actions/setup-go](https://github.com/actions/setup-go).\n\n\nUpdates `actions/setup-node` from 6 to 7\n- [Release notes](https://github.com/actions/setup-node/releases)\n- [Commits](https://git\n[…]\ngo\n dependency-version: '7'\n dependency-type: direct:production\n update-type: version-update:semver-major\n dependency-group: github-actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "chore(deps): bump the github-actions group with 2 updates",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-20T18:55:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "19ec45c19f53be9e7ced2921f48f87ec7b547c64",
"body": "…malize\n\nfix(wifi): normalise dBm/percentage signal strength (POC)",
"is_bot": false,
"headline": "Merge pull request #116 from stein155/claude/wifi-signal-strength-nor…",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-14T20:03:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c049cedbe6f1e935d3306bdf0d3a58c341f1b0cf",
"body": "…b-actions-8daa59a3df\n\nchore(deps): bump the github-actions group with 3 updates",
"is_bot": false,
"headline": "Merge pull request #117 from stein155/dependabot/github_actions/githu…",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-14T20:02:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0e5968e120fdde9a0ad36facc19de42048a7a1ee",
"body": "…d/npm-development-886071112c\n\nchore(deps-dev): bump the npm-development group in /frontend with 2 updates",
"is_bot": false,
"headline": "Merge pull request #118 from stein155/dependabot/npm_and_yarn/fronten…",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-14T20:02:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f148fb24113b3b191702578bdb53e42d3f1637c2",
"body": "Bumps the npm-development group in /frontend with 2 updates: [typescript](https://github.com/microsoft/TypeScript) and [vite](https://github.com/vitejs/vite/tree/HEAD/packages/vite).\n\n\nUpdates `typescript` from 5.9.3 to 7.0.2\n- [Release notes](https://github.com/microsoft/TypeScript/releases)\n- [Com\n[…]\n dependency-version: 8.1.4\n dependency-type: direct:development\n update-type: version-update:semver-patch\n dependency-group: npm-development\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "chore(deps-dev): bump the npm-development group",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-13T18:56:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "190a7b620bd3b268414081d73402dd73c952ddb6",
"body": "Bumps the github-actions group with 3 updates: [actions/upload-artifact](https://github.com/actions/upload-artifact), [actions/download-artifact](https://github.com/actions/download-artifact) and [softprops/action-gh-release](https://github.com/softprops/action-gh-release).\n\n\nUpdates `actions/upload\n[…]\n\n dependency-version: 3.0.2\n dependency-type: direct:production\n update-type: version-update:semver-patch\n dependency-group: github-actions\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>",
"is_bot": true,
"headline": "chore(deps): bump the github-actions group with 3 updates",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-13T18:56:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "21d85147c674fd20f131a5f562095bb41d6338a1",
"body": "Real SoundTouch firmware reports the site-survey signalStrength as RSSI\nin dBm (a negative number), which the old parser rejected outright\n(n < 0 -> \"\"), so every real network showed no signal label.\n\nInstead of a second set of dBm buckets, normalise the raw value to a\nsingle 0..100 quality scale fi\n[…]\nve values are mapped with the common linear approximation\n2*(dBm+100), clamped to 0..100. Adds a small clamp helper and reuses it\nin SetVolume.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(wifi): normalise dBm/percentage signal strength once (POC)",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-13T05:37:57Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "5c8b8ac971408d53cb4a68a8d3cf495fd5ad69cd",
"body": "Settings: flags, layout & copy fixes + plugin update disk hygiene",
"is_bot": false,
"headline": "Merge pull request #114 from stein155/claude/retouch-ui-settings-cfa21b",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-13T05:13:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5d55e1aa5c0680100cf775b422b217718e4c88d8",
"body": "The mini-player was showing the now-playing artist/title on both lines.\nReTouch deliberately injects the live track onto the speaker's own OLED\n(bmx_tunein), so the firmware echoes that track back as its station name\nin now-playing — which the player then printed on line one, with the same\ntrack aga\n[…]\nthe track. When no station name can be resolved, the player\nfalls back to the track for line one and suppresses the duplicate track\nline below.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(player): show the station on line one, the track on line two",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-13T04:45:22Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "2b285eefe4b9e0e327e16068a2456c7af6f63fa7",
"body": "Settings-sheet pass addressing a batch of UI feedback:\n\n- Language picker: prefix each option with its flag emoji.\n- Move Multiroom directly under Sound in the category menu.\n- Reword the Dutch bass/treble hints away from \"naar smaak\".\n- Network page: drop the redundant \"opnieuw zoeken\" rescan butto\n[…]\ny\".\n- plugins: clear stranded bin.new / rotated log before an install so a\n crashed prior update can't fill the speaker's small disk on retry.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(settings): flags, layout, copy fixes + plugin update disk hygiene",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-13T04:37:30Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "3bf02d7e62bbcf574c2e1d25d4331d71c26217fa",
"body": "feat(speaker): audio notifications via /speaker (replaces PCM)",
"is_bot": false,
"headline": "Merge pull request #113 from stein155/feat/speaker-notifications",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-12T20:23:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c805c62f963e4545dd97ecdbe85367094734207f",
"body": "Extend /api/speaker/notify so callers can either pass a URL the firmware\nfetches itself (JSON — for Google TTS and already-hosted clips) or upload the\naudio bytes directly (binary body). Uploaded clips are cached in RAM and served\nback to the co-located firmware over loopback (GET /api/speaker/audio\n[…]\nt TTL, and a cap on how many are\nheld at once — the speaker is memory-constrained. On-speaker the fetch URL is\nReTouch's own loopback web port.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(speaker): host uploaded notification clips + size cap",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-12T08:49:18Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "85b4c85aac5f02ae53c3c3d80205aeebe2f2d5e8",
"body": "Resurrect the firmware's /speaker audio-notification endpoint, which has been\ndead since Bose shut down its cloud: the firmware validates the request's\napp_key against Bose's audio-notification auth host, and that host is gone.\n\nThe firmware makes that auth call over HTTPS (:443), not plain HTTP, so\n[…]\n play a clip by POSTing a URL, with the app_key + XML handled in the core.\n\nReworked from the #112 POC (verified on SoundTouch 10, fw 27.0.6).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(speaker): audio notifications via the /speaker endpoint",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-12T08:35:23Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b9cc7dcd563184b99deb1889a9d317437735537c",
"body": "Redesign the plugin settings UI (iOS-style sections, slider + times fields, dark mode fixes)",
"is_bot": false,
"headline": "Merge pull request #110 from milderdb/feat/plugin-settings-redesign",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-12T06:13:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "897646c06d8b0eafc15c8043443cb1cdb48ebd70",
"body": "BassSlider's arrow keys move by 1; rounding that back to the nearest step\ncancelled the keypress. Run the slider in step units instead.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(plugins): slider moves in whole step units",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-11T21:38:28Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "20c910c39ac173a1504630b2245797dc01c8fa08",
"body": "Restyle the server-driven plugin settings panel to match the rest of the\nsettings sheet: an uppercase section eyebrow per manifest section, a status\npill instead of a bare hint line, consistent section spacing, and action\nbuttons with real primary/default/danger variants (danger is quiet red\ninstead\n[…]\nR helpers used\nhardcoded light-theme colours; they now use the theme tokens. The QR quiet\nzone intentionally stays white so codes keep scanning.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(plugins): redesign the plugin settings renderer",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-11T21:20:23Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b16c83f1d07d9dce10c848f69a9b3e50ce28b2e2",
"body": "Add Afvalwijzer plugin to the catalog",
"is_bot": false,
"headline": "Merge pull request #107 from milderdb/feature/afvalwijzer-catalog",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-11T20:29:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "788b131ea8c5843868a391db1fe72742f251cbca",
"body": "plugins: select field type in the manifest renderer",
"is_bot": false,
"headline": "Merge pull request #109 from milderdb/feat/manifest-select",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-11T20:28:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e7626bbc72c48aa543b42c7db406b0afaa99bbad",
"body": "A plugin can now offer a fixed choice ({\"type\": \"select\", \"options\":\n[{value, label}]}) instead of a free-text input; rendered as a native\nright-aligned <select> in the field row. Older hosts degrade it to the\ntext input, so plugins can adopt it without a version gate.\n\nFirst user: the Afvalwijzer plugin's provider choice.",
"is_bot": false,
"headline": "feat(plugins): select field type in the manifest renderer",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-11T20:27:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0b43ae54d529ff705f462ef91b18c5cd049facc7",
"body": "display: flicker-free content next to the firmware standby clock",
"is_bot": false,
"headline": "Merge pull request #108 from milderdb/fix/display-clock-fight",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-11T20:24:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "46d40aebecfc02fec56f7b404ab00df99c1471f3",
"body": "… -speaker-host with port\n\nReview findings:\n- restoreClock only ran when a frame was actually shown. If the clock\n was suppressed but the first Draw failed, clearing the content left\n the firmware clock disabled. The restore is now unconditional on the\n nothing-to-show path (a no-op when untouche\n[…]\nock API address with JoinHostPort unconditionally,\n turning an explicit \"host:port\" -speaker-host into host:port:8090.\n The port now only defaults to 8090 when none is given, matching\n speaker.New.",
"is_bot": false,
"headline": "fix(display): restore the clock even when no frame ever landed; honor…",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-11T20:13:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8bd8a1057009d9f406d1b621694ca80c9bc18fae",
"body": "The per-tick rewrite repaired clock overwrites within a second but\nthat still reads as a flash on an ST20 with the clock enabled. The\nmanager now does a read-modify-write on the firmware's /clockDisplay:\nwhen it takes over the panel it flips userEnable to false (keeping\ntimezone/format/brightness in\n[…]\nno message.\n\nBest-effort by design: if the endpoint is missing or the user already\nhas the clock off, nothing is touched and the per-tick rewrite remains\nthe fallback. Covered by httptest-based tests.",
"is_bot": false,
"headline": "feat(display): pause the firmware standby clock while content is shown",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-11T19:30:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2c669c4c1d3983dd7e66037c3782c4907c5d69bc",
"body": "The firmware paints its own standby clock over the panel whenever it\nupdates. The manager only wrote on content changes and assumed its\nframe was still up, so the clock won and plugin content only flashed\nbriefly. With standby/notification content active the frame is now\nrewritten every tick: identical bytes are visually a no-op, and a\nfirmware overwrite is repaired within a second.",
"is_bot": false,
"headline": "fix(display): rewrite the frame every tick to beat the standby clock",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-11T19:07:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5e97f0e0010197d45c080ddf1261324788925ec0",
"body": "Shows the next Dutch waste pickup on the ST20 display (via the display\nAPI) and can announce it through the speaker at configured times.\nPublic repo with released armv7l binary + SHA256SUMS (checksum-only,\nno signing key yet).",
"is_bot": false,
"headline": "feat(plugins): add Afvalwijzer to the catalog",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-11T16:40:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "63d579948ed00c47783d07557796801895b7f816",
"body": "Show internet radio icon on SoundTouch displays",
"is_bot": false,
"headline": "Merge pull request #105 from milderdb/fix/smoother-controls",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-11T16:39:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cb3aae8b0b5cfe34cfa7fec8817b130cf13d35d8",
"body": "Central OLED display manager + /api/display plugin endpoints",
"is_bot": false,
"headline": "Merge pull request #106 from milderdb/feature/display-api",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-11T16:39:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d4efd79e652794143c27c443f135fa7c3143be89",
"body": null,
"is_bot": false,
"headline": "test(display): ICONDUMP preview dump of all built-in icons",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-11T14:06:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "89723cf801629d52239ea9238636bf2ed694ad83",
"body": "internal/display is now the single writer to the ST20's /dev/fb0.\nPlugins and internal features hand it content (a built-in icon or a\ncustom sprite plus a text line); the manager arbitrates: a short-lived\nnotification beats a standby screen, standby screens only show while\nthe speaker is in standby \n[…]\n {owner, icon|sprite, text}\n DELETE /api/display/standby?owner= remove a standby screen\n\nOn models without the 128x100 framebuffer the manager is a no-op and\nthe API reports available:false.",
"is_bot": false,
"headline": "feat(display): central OLED manager + /api/display endpoints",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-11T14:06:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "84bc4ef35cb9278f7ed9d1585f67ea6d060b6309",
"body": "…OLED\n\nA small Canvas (5x7 font with accent folding, rects, ASCII-art sprites,\nword wrap) plus a Framebuffer that snapshots the panel on first draw and\nrestores it afterwards. oled.Available() detects the ST20's 128x100\ngrayscale framebuffer so callers can skip drawing on other models.\n\nExtracted from the afvalwijzer plugin so plugins (afvalwijzer, ring) and\nReTouch itself (e.g. the Home Assistant bridge) can share one\nimplementation.",
"is_bot": false,
"headline": "feat(oled): shared drawing package for the SoundTouch 20 front-panel …",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-11T14:05:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e7a5fdb7090741ab02d439541f02c5865ec48ec2",
"body": "The speaker-side preset art is now the local display icon (a file://\npath browsers cannot load). GET /api/presets blanked it, which lost\nthe station logo on every preset tile. Serve the station's real logo\nfrom the local preset store instead (matched by slot + station id).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(presets): keep station logos in the web UI",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-11T13:49:58Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "efb0014a871a86d15b1acbe067977deffec1bc59",
"body": null,
"is_bot": false,
"headline": "fix(playback): use local internet radio icon",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-11T09:04:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5bd4a1f000c6f209a13c4454a7df796da9bb76b1",
"body": "feat(plugins): hide version, flag updates with a \"!\" badge",
"is_bot": false,
"headline": "Merge pull request #104 from milderdb/feat/plugin-update-badge",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-11T08:15:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "45b595054eb12954ba55dcf48e1bfbfc93aa62cc",
"body": "The plugin settings page showed a version-number card by default, which is\nnoise for a non-technical user. Hide it. What actually matters — that an\nupdate is waiting — now surfaces two ways:\n\n- a small \"!\" badge on the installed-plugin list row, so a pending update is\n glanceable without opening th\n[…]\nesolves the newest release per (non-sideloaded) plugin to decide\nwhether to show the badge. New i18n key `updateAvailable` in all six languages.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(plugins): hide version, flag available updates with a \"!\" badge",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-11T08:07:48Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a04334465609466910ce1c3cdc5ef97f22c1086a",
"body": "feat: browse TuneIn by genre/region",
"is_bot": false,
"headline": "Merge pull request #101 from milderdb/feat/tunein-browse",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-11T08:00:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f828f07208ac1ba306a3cb830f359947c8ee5ed6",
"body": "fix: security & robustness bugs from an adversarial audit",
"is_bot": false,
"headline": "Merge pull request #103 from milderdb/fix/audit-round2",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-11T08:00:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3e4938702d29608dcf9ba7d92641c875739383d7",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "style: gofmt update_test.go",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-11T07:42:17Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "eb4cf3ed39b38cd0b60c871927082dcd236278bb",
"body": "Two bugs in the browse directory:\n\n- Category labels (\"By Location\", \"By Language\", …) were always English\n because the Browse.ashx request sent no locale. Pass the UI language's\n TuneIn locale on every browse request; TuneIn propagates it into the child\n URLs it returns, so labels stay translate\n[…]\nsts: api.browse.test.ts covers locale forcing, station parsing under a\ngroup outline, and the By-Language id rewrite. tsc clean; 37 vitest pass.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(browse): localize TuneIn labels and make By Language reach stations",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-11T07:35:17Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7924b049299cc716b4a5f23cb0c279fbc8380513",
"body": "Follow-up scan after PR #102. Four independent reviewers went over the\nrelease/update/plugin, web/marge, and network-client/persistence layers.\n\n- update: the binary download used a default http.Client, bypassing the\n SSRF-safe transport the API lookups use — a 302/DNS-rebind on the artifact\n host\n[…]\ncjson round-trip,\nsettings .corrupt preservation, plugin routes added to the auth-401 table.\ngo vet + go test clean; ARMv7 + amd64 builds clean.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: security & robustness bugs from an adversarial audit",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-11T07:21:19Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ab26d006a5ee204d915fe3dc0d37615be64af61b",
"body": "The search sheet's empty state is now a browsable directory instead of a\nblank prompt: it loads TuneIn's Browse.ashx tree (Music, By Location, By\nLanguage, …), drills into categories with a back button, and plays a\nstation on tap.\n\n- lib/api.ts: browseTuneIn(path) walks one Browse level into categor\n[…]\nt search showed \"No stations found\" during the debounce (now shows\n \"Searching…\").\n\ntypecheck clean; 34 vitest tests pass; build ok on Node 24.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(browse): browse TuneIn by genre/region",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-11T06:45:20Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "e96a6ced1e76972a62d53090c8d08922727a063a",
"body": "fix: four bugs found by an adversarial audit",
"is_bot": false,
"headline": "Merge pull request #102 from milderdb/fix/audit-bugs",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-11T06:43:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a523cae2f7964f044a143560136a312f1db30266",
"body": "- speaker.Wake: `sys power` is a TOGGLE, but Wake sent it unconditionally,\n so playing/preset actions on an already-awake speaker switched it OFF and\n then stalled ~6s waiting to leave the standby they'd just caused. Only\n toggle when actually in standby (mirrors habridge.setPower). [MED]\n- telne\n[…]\neset in finally. [MED]\n\nTests: Wake-skips-when-awake (sim-backed), telnet-failure-doesn't-persist.\ngo vet + go test + tsc clean; all tests pass.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: four bugs found by an adversarial audit",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-10T23:37:28Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "0bae7b64f59c78bee69603245d9d526abe542959",
"body": "test(frontend): cover API client, MiniPlayer, StationLogo, optimistic playback",
"is_bot": false,
"headline": "Merge pull request #100 from milderdb/test/frontend-more-tests",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-10T23:33:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ae2b9f3c1836c1d1eb3c106ad2e2c69a53578537",
"body": "…stic playback\n\n+19 tests (34 -> 53):\n- lib/api.test.ts: normalizeNowPlaying (standby/invalid/full/trim), getVolume,\n getPresets (6-slot mapping, location->tuneInId, out-of-range drop, failure),\n searchTuneIn (nested OPML walk, s-prefix filter, 30-cap, failure).\n- MiniPlayer.test.tsx: station + li\n[…]\n.test.ts: playOptimistic -> starting, stopOptimistic -> idle,\n cancelPending -> idle.\n\ntsc --noEmit clean; all 53 vitest tests pass on Node 24.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "test(frontend): cover the API client, MiniPlayer, StationLogo, optimi…",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-10T23:12:23Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "948834d132deaf06317b279432aae042160e51f7",
"body": "refactor(frontend): migrate the web UI to TypeScript (strict)",
"is_bot": false,
"headline": "Merge pull request #99 from milderdb/refactor/frontend-typescript",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-10T23:07:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2807d8614bbb3883ca7a02360eea2fe2cd1bb02",
"body": "Convert the whole web UI from JS/JSX to TS/TSX under `strict`:\n\n- Rename every src file .jsx->.tsx / .js->.ts; index.html -> main.tsx.\n- Add tsconfig.json (strict), typescript + @types/react(-dom) devDeps,\n a `typecheck` script, and vite-env.d.ts.\n- Add src/lib/types.ts: shared domain types (NowPla\n[…]\nblind build can't mask regressions.\n\nNo runtime/behaviour change: build (86 modules) is byte-equivalent and\nall 34 vitest tests pass on Node 24.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor(frontend): migrate to TypeScript (strict)",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-10T23:00:29Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4863cf64d97c5c2eae99c003acbd795ffc8059d5",
"body": null,
"is_bot": false,
"headline": "wip(frontend): type lib, hooks, theme, qr, api (domain types)",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-10T22:45:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f3a8e15a36928a2421130cd94487bf09a47871b4",
"body": null,
"is_bot": false,
"headline": "wip(frontend): partial TS types (atoms/molecules/small organisms)",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-10T22:36:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31cf1acc6f52f998cfe006f7f2b055d22b3dca0c",
"body": "Add tsconfig.json (strict), typescript + @types/react(-dom) devDeps, a\ntypecheck script, and vite-env.d.ts; rename every src file .jsx->.tsx /\n.js->.ts and point index.html at main.tsx. Vite/vitest handle TS\nnatively so the build stays green; type annotations follow (tsc is not\nyet clean).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor(frontend): TypeScript scaffolding + rename to .ts/.tsx",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-10T16:48:05Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "3c46820fecc6ccb2d89f3d4d630577802cc9a906",
"body": "feat(settings): iOS-style Wi-Fi network settings",
"is_bot": false,
"headline": "Merge pull request #62 from stein155/claude/wifi-network-settings",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-10T16:44:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "efdb50b7ee068b41756d4bf64e089717ead3bae9",
"body": "fix(icy): decode Latin-1/Windows-1252 now-playing metadata",
"is_bot": false,
"headline": "Merge pull request #98 from stein155/fix/icy-latin1-decoding",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-10T16:44:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9e529e7b5ddb044117358060a7cbdad625b225a3",
"body": "…ettings\n\n# Conflicts:\n#\tfrontend/src/components/organisms/SettingsSheet/index.jsx\n#\tinternal/web/web.go",
"is_bot": false,
"headline": "Merge remote-tracking branch 'origin/main' into claude/wifi-network-s…",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-10T16:32:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "138ca2cd136386f0f5f346203ebf23c79723c204",
"body": "ICY metadata is often sent Latin-1 or Windows-1252 encoded, but the\nblock was decoded as UTF-8, so bytes like 0xE9 (\"é\") rendered as the\nreplacement character (e.g. \"André\" → \"Andr�\"). Keep valid UTF-8 as-is\nand decode anything else byte-for-byte through Windows-1252.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(icy): decode Latin-1/Windows-1252 StreamTitle metadata",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-10T16:24:33Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "8432d6c2a95eaec7f8b1caba27e3c9a21322abd1",
"body": "test(sim): cover the simulator's wire format + state machine",
"is_bot": false,
"headline": "Merge pull request #97 from milderdb/test/sim-coverage",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-10T16:12:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4d02a26df9026985797575f061ab78fe9862929d",
"body": "refactor(frontend): component-per-folder layout with styled/index.js",
"is_bot": false,
"headline": "Merge pull request #96 from milderdb/refactor/styled-folders",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-10T16:12:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a8a2581e41346a617d4c1676261cfc3c38be0398",
"body": "The SoundTouch simulator backs every web/marge/speaker integration test\nbut had no tests of its own. Add direct HTTP/CLI coverage: /info wire\nformat, standby default, select -> now_playing, key transitions\n(PAUSE/PLAY/STOP/PLAY_PAUSE), press-only (release ignored), POWER +\nCLI 'sys power' standby to\n[…]\ng endpoints.\n\nAlso dedup the POWER toggle: /key POWER and CLI 'sys power' now share\npowerToggleLocked() instead of duplicating the standby swap.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "test(sim): cover the simulator's wire format and state machine",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-10T16:05:52Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "203b670c837f3e06699fc1e9bc1f13d7e4810a44",
"body": "Every component that defines styled-components keeps them in\n<Name>/styled/index.js and imports them into index.jsx; pure-styled\nmodules (Button, Section, Slider, Field, AppShell, ...) re-export from\n./styled. Components with none (Icon, QRCode, StationLogo, Volume/\nBassSlider) stay plain. 22 styled\n[…]\n\n\nRebuilt on current main so it includes the plugin-OTA additions. Byte-\nidentical styling; build (86 modules) and all 34 tests pass on Node 24.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor(frontend): extract all styled-components into styled/index.js",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-10T16:04:07Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "70af8ef656a286887edeb038c435185a31f4db30",
"body": "Move every component to <Name>/index.jsx (rebuilt on current main, which\nincludes the plugin OTA additions). Imports into components unchanged;\nwithin-file imports re-depthed. styled extraction follows.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor(frontend): component-per-folder layout (index.jsx)",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-10T15:57:29Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "8e0d05931ce34cdc50b39e73fa8306450316ff64",
"body": "chore: build the frontend on Node 24 (current LTS)",
"is_bot": false,
"headline": "Merge pull request #95 from milderdb/chore/node-24",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-10T15:51:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9d513cecc5ac2d630d9100616842f406bbab61bc",
"body": "fix(frontend): resolve 8 UI state/lifecycle bugs",
"is_bot": false,
"headline": "Merge pull request #94 from milderdb/fix/frontend-bugs",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-10T13:32:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4ce6b0cc48277b877b8d822aae071d6a78cb4e9e",
"body": "Node 20 reached end-of-life in April 2026; Node 24 (Krypton) is the\ncurrent active LTS. Bump the CI, beta and release workflows and the\nAGENTS.md build commands from node 20 -> 24, and pin a floor via a\npackage.json engines field (>=22, the oldest still-supported LTS).\n\nVerified: npm ci + vitest + vite build all pass on node:24-alpine.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: build the frontend on Node 24 (current LTS)",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-10T13:30:02Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2653735c7ce236efa360cc1514532bda08bb5d25",
"body": "- PresetTile: a loose station-name match lit up several tiles at once\n ('Radio 1' + 'NPO Radio 1'). Move matching into station.activePresetIndex\n (prefer id, then exact name, then a UNIQUE loose match) and resolve the\n single active slot in PresetGrid; the tile just takes an `active` prop.\n- Stat\n[…]\ning.\n\nMatching logic moves out of the tile into lib/station (tested), keeping\nUI presentational. No security/XSS issues were found in the sweep.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(frontend): resolve 8 UI state/lifecycle bugs from a bug hunt",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-10T13:26:48Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f3dc50aa96bff907a246fdc577ac42fdf0c150d2",
"body": "feat(display): show the live track on the speaker's own display via marge",
"is_bot": false,
"headline": "Merge pull request #93 from milderdb/feat/nowplaying-on-display",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-10T13:19:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "93be8abe0a0442113e396bfe87671a72c0b3d858",
"body": "refactor(web): extract telnet LAN-block into internal/telnet",
"is_bot": false,
"headline": "Merge pull request #92 from milderdb/refactor/extract-telnet",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-10T13:19:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "86c48b0c366224e1c3936959a68b7bd5195f8430",
"body": "…entitem\n\nrefactor(speaker): own native-preset play and ContentItem XML",
"is_bot": false,
"headline": "Merge pull request #91 from milderdb/refactor/speaker-preset-and-cont…",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-10T13:19:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ece1c533254a18710147d5fdd42947755419c10e",
"body": "refactor: extract now-playing enrichment from web into internal/nowplaying",
"is_bot": false,
"headline": "Merge pull request #90 from milderdb/refactor/extract-nowplaying",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-10T13:18:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3752a8b958255bb7736850f71cbe1da0c331a9ec",
"body": "refactor: extract self-update engine from web into internal/update",
"is_bot": false,
"headline": "Merge pull request #89 from milderdb/refactor/extract-self-update",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-10T13:18:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3c737b066a0cd084dc3b4a67132e78880daaa8f1",
"body": "feat(ui): tidy plugins UI — collapsible settings, no run-status text",
"is_bot": false,
"headline": "Merge pull request #88 from stein155/claude/gracious-mirzakhani-cc374f",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-10T13:18:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7ae955893eb2970e541f2edadcb1bed8722150aa",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "style: gofmt web.go struct comment alignment",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-10T12:35:51Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "b8fbc4e72cff64ae5db1e9fb4ab3ca89841368ef",
"body": "…arge\n\nThe speaker's front-panel display shows whatever Name the TuneIn\nplayback doc carries. The Bose cloud used to push the rolling track\nthere; with the cloud gone, marge only ever returned the station name,\nso the display lost the now-playing line (the station logo/icon still\nworks).\n\nFeed the l\n[…]\n re-polls is visible in marge's logs\n(\"bmx tunein now-playing on display\") and /debug/requests, so the effect\ncan be confirmed on real hardware.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(display): show the live track on the speaker's own display via m…",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-10T12:14:09Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "13e08aa50abc2dc2ab1299c5de4d331155d1df81",
"body": "The iptables raw-table DROP that hides the :17000 diagnostic CLI from\nthe LAN — plus its .close-telnet reboot-persistence marker, the\nstartup re-apply, and the exec seam that existed only to keep iptables\nout of web's tests — lived inside the HTTP handler package. That is host\n/OS logic (root exec, \n[…]\n pass as-is and internal/telnet gets its\nown unit tests. web loses its os/exec dependency.\n\nStacked on the now-playing extraction (same web.go).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor(web): extract telnet LAN-block into internal/telnet",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-10T12:05:41Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "9ccbba773f64b00d705dcfce2d4b21bbfd60a2d6",
"body": "Two bits of speaker-protocol knowledge had leaked out of the speaker\npackage into its callers:\n\n- Playing a native preset (wake, then press PRESET_<n>) was hand-\n assembled identically in web.playPreset and habridge.selectPreset,\n each rebuilding the wake-then-key sequence and the \"PRESET_\"+n key\n\n[…]\ns byte-identical (covered by the new contentItemXML test\nand the existing preset/select round-trips against the simulator); no\nbehaviour change.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor(speaker): own native-preset play and ContentItem XML",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-10T11:43:46Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "a5d8206a8c9c8395e94e8cde78ebee27a84a444d",
"body": "…aying\n\nThe live track/artist/cover enrichment (ICY stream metadata, TuneIn\nfallback, iTunes artwork lookup, plus the now-playing and stream-URL\ncaches) lived inside the web server, and the Home Assistant bridge\nconsumed it by reaching through web.Server.EnrichedNowPlaying.\n\nMove it to internal/nowp\n[…]\nion dropped, stopped/non-TuneIn ids untouched),\n which had no direct coverage before.\n\nCode moved verbatim where possible; no behaviour change.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor: extract now-playing enrichment from web into internal/nowpl…",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-10T11:17:50Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "52876702ea41ed43abb8fd11aeee908d618e8085",
"body": "The web package owned the whole OTA machinery next to its HTTP handlers:\nGitHub release discovery, download + checksum/signature verification,\nthe binary swap with rollback, and the process restart (os.Exit). That\nmade web the package habridge had to depend on for its Home Assistant\nupdate entity, a\n[…]\nove with the code; web's signature/download tests duplicated\n internal/release coverage and are folded into that package.\n\nNo behaviour change.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor: extract self-update engine from web into internal/update",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-10T10:43:38Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "9a46c469c48717274696585b1de98459ad8b90a1",
"body": ".gitignore documents that internal/web/dist/.gitkeep is committed so\n//go:embed all:dist compiles before the frontend is built, but the file\nwas missing — go vet/test failed on a clean clone.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: commit dist/.gitkeep so a fresh checkout builds",
"author_name": "milderdb",
"author_login": "milderdb",
"committed_at": "2026-07-10T10:43:37Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "87583cd946a5352e93b43bac3616ccd796b18329",
"body": "Installed plugins had no update path in the UI: the catalog card only shows\nfor plugins that aren't installed yet, so the only way to get a newer build\nwas remove + reinstall — which wipes the plugin's state dir (the HomeKit\npairing). A plain re-install upgrades the binary in place and keeps that\nst\n[…]\ntalls latest (pairing preserved) and re-mounts the config panel;\n otherwise it shows \"up to date\". Sideloaded plugins keep the can't-OTA hint.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(plugins): over-the-air update button for installed plugins",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-10T06:01:02Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "17e894561b417d564a0e60fb95b02012766a3fdd",
"body": "Replace the inline accordion with a real subpage: each installed plugin is\nnow a single row (name + \"Geïnstalleerd\" + \"Instellingen ›\") that opens the\nplugin's config — QR / pairing code and the remove button — as its own\nsettings subpage, with the sheet's back arrow walking detail → list → menu.\n\nA\n[…]\nved by the plugin binary\nitself; the app already forwards ?lang= so the plugin can localise it, but\nthat must land in the retouch-homekit repo.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(ui): open plugin settings as a subpage; localise Apple Home catalog",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-10T05:43:43Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "420c82dc16e5ff87259d774dfd00c9bb63047b62",
"body": "docs: regenerate README screenshots in English",
"is_bot": false,
"headline": "Merge pull request #87 from stein155/claude/goofy-kirch-b6b901",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-10T05:32:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "289f8314786065064b67629e14dea9abb51ef3e8",
"body": "Rework the Plugins settings section:\n\n- Drop the \"Draait niet\"/\"Draait\" run-status label; each installed plugin\n now reads \"Geïnstalleerd\" under its name.\n- Make each installed plugin a tappable, collapsed-by-default row (name +\n chevron) that expands to reveal the plugin's own settings panel — wh\n[…]\n as ?lang= to the plugin /manifest and /action\n endpoints so a plugin can localise its own manifest text (the plugin\n itself must honour it).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(ui): tidy plugins UI — collapsible settings, no run-status text",
"author_name": "Stein Milder",
"author_login": "stein155",
"committed_at": "2026-07-10T05:31:00Z",
"body_truncated": true,
"is_coding_agent": true
}
],
"releases_count": 40,
"commits_last_year": 336,
"latest_release_at": "2026-07-25T11:01:20Z",
"latest_release_tag": "v0.2.38",
"releases_from_tags": false,
"days_since_last_push": 1,
"active_weeks_last_year": 7,
"days_since_latest_release": 10,
"mean_days_between_releases": 2.6
},
"artifacts": {
"collected": true,
"structure": [
"tree.go_importable",
"tree.go_main"
],
"declarations": [
{
"name": null,
"path": "frontend/package.json",
"tokens": [
"npm.private"
],
"ecosystem": "npm"
}
]
},
"community": {
"has_readme": true,
"has_license": true,
"readme_badges": {
"hosts": [
"shields.io"
],
"total": 5,
"header": 5,
"collected": true,
"has_inspect_badge": false
},
"has_description": true,
"has_contributing": false,
"health_percentage": 42,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/stein155/retouch",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"categories": [],
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/stein155/retouch",
"declared_type": null,
"is_deprecated": false,
"latest_version": "v0.2.38",
"repository_url": "https://github.com/stein155/retouch",
"versions_count": 40,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-25T10:48:53Z",
"latest_version_yanked": null,
"days_since_latest_publish": 10
}
]
},
"popularity": {
"forks": 2,
"stars": 2,
"watchers": 0,
"fork_history": {
"days": [
{
"date": "2026-06-20",
"count": 1
},
{
"date": "2026-07-10",
"count": 1
}
],
"complete": true,
"collected": 2,
"total_forks": 2
},
"star_history": null,
"open_issues_and_prs": 3
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"frontend/tsconfig.json"
],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 44973,
"source_files_sampled": 155,
"oversized_source_files": 0,
"agent_instruction_files": [
"AGENTS.md"
],
"agent_instruction_max_bytes": 6731
},
"dependencies": {
"manifests": [
"frontend/package.json",
"go.mod"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go",
"npm"
],
"dependencies": [
{
"name": "react",
"manifest": "frontend/package.json",
"ecosystem": "npm",
"version_constraint": "^19.2.0"
},
{
"name": "react-dom",
"manifest": "frontend/package.json",
"ecosystem": "npm",
"version_constraint": "^19.2.0"
},
{
"name": "styled-components",
"manifest": "frontend/package.json",
"ecosystem": "npm",
"version_constraint": "^6.4.4"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 3,
"merged_prs": 118,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 9
},
"bus_factor": 1,
"bot_contributors": 1,
"top_contributors": [
{
"type": "User",
"login": "stein155",
"commits": 224,
"avatar_url": "https://avatars.githubusercontent.com/u/25324301?v=4"
},
{
"type": "User",
"login": "milderdb",
"commits": 99,
"avatar_url": "https://avatars.githubusercontent.com/u/293030091?v=4"
},
{
"type": "User",
"login": "MauritsvanderZee",
"commits": 3,
"avatar_url": "https://avatars.githubusercontent.com/u/32610905?v=4"
}
],
"contributors_sampled": 3,
"top_contributor_share": 0.687
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"beta.yml",
"ci.yml",
"release-drafter.yml",
"release.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 7,
"reason": "Found 5/7 approved changesets -- score normalized to 7",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 6,
"reason": "dependency not pinned by hash detected -- score normalized to 6",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 6,
"reason": "4 out of the last 5 releases have a total of 4 signed artifacts.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 4,
"reason": "6 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "3ea8b0a14f9c9a00a24b931bd16e5568606b3765",
"ran_at": "2026-08-05T09:25:48Z",
"aggregate_score": 4.6,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"recent_prs": {
"merged_7d": 0,
"decided_7d": 0,
"merged_30d": 42,
"authors_30d": 2,
"decided_30d": 45,
"sample_size": 60,
"window_days": 30,
"sample_exhausted": false,
"authors_probed_30d": 2,
"newcomer_merged_30d": 0,
"bot_prs_excluded_30d": 7,
"newcomer_authors_30d": 0,
"newcomer_decided_30d": 0
},
"ci_last_run_at": "2026-08-03T18:56:11Z",
"oldest_open_prs": [
{
"number": 111,
"created_at": "2026-07-11T21:36:59Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 128,
"created_at": "2026-07-27T18:55:19Z",
"last_comment_at": "2026-07-27T18:55:19Z",
"last_comment_author": "dependabot"
},
{
"number": 130,
"created_at": "2026-08-03T18:56:05Z",
"last_comment_at": "2026-08-03T18:56:06Z",
"last_comment_author": "dependabot"
}
],
"last_merged_pr_at": "2026-07-26T15:18:56Z",
"ci_last_conclusion": "SKIPPED",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/stein155/retouch",
"host": "github.com",
"name": "retouch",
"owner": "stein155"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": "The weighted overall 57 is calibrated to 60 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 57,
"calibrated": 60,
"calibration": "2026-08-02"
}
}
],
"value": 60,
"inputs": {
"security": 46,
"vitality": 74,
"community": 24,
"governance": 57,
"calibration": "2026-08-02",
"engineering": 71,
"ai_readiness": 85,
"weighted_overall_raw": 57
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 74,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 59,
"inputs": {
"commits_last_year": 336,
"human_commit_share": 0.95,
"days_since_last_push": 1,
"active_weeks_last_year": 7
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 1 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 1
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "7/52 weeks with commits",
"points": 4.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 7
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "336 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 336
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "exceptional",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 96,
"inputs": {
"releases_count": 40,
"latest_release_tag": "v0.2.38",
"releases_from_tags": false,
"days_since_latest_release": 10,
"mean_days_between_releases": 2.6
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "40 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 40
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 10 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 10
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~2.6 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 2.6
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "4 out of the last 5 releases have a total of 4 signed artifacts.",
"points": 6,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 24,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 2,
"stars": 2,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "2 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 2
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "2 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 2
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": 5,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [
"shields.io"
],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 57,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 3,
"top_contributor_share": 0.687
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 69% of commits",
"points": 7,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 69
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "3 contributors",
"points": 4.1,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 3
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "excellent",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution, Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution",
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 85,
"inputs": {
"merged_prs": 118,
"open_issues": 0,
"closed_issues": 0,
"prs_merged_7d": 0,
"prs_decided_7d": 0,
"prs_merged_30d": 42,
"prs_decided_30d": 45,
"issue_closed_ratio": null,
"closed_unmerged_prs": 9,
"first_time_authors_30d": 0,
"first_time_prs_merged_30d": 0,
"first_time_prs_decided_30d": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "118/127 decided PRs merged",
"points": 27.9,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 118,
"decided": 127
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 5/7 approved changesets -- score normalized to 7",
"points": 10.5,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "weak",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 39,
"inputs": {
"followers": 2,
"owner_type": "User",
"is_verified": null,
"owner_login": "stein155",
"public_repos": 5,
"account_age_days": 3479
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "2 followers of stein155",
"points": 3.4,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 2,
"login": "stein155"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "5 public repos, account ~9 yr old",
"points": 17.7,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 5
}
},
{
"code": "account_age_years",
"params": {
"years": 9
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/stein155/retouch"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 10
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 10 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 10
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "40 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 40
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 71,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "4 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 4
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"topics": [
"bose",
"golang",
"internet-radio",
"multiroom",
"radio",
"react",
"self-hosted",
"soundtouch",
"tunein"
],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "9 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 9
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "weak",
"name": "Security",
"value": 46,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "weak",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 46,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 4.6
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "12 out of 12 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 5/7 approved changesets -- score normalized to 7",
"points": 5.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 6",
"points": 3,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "4 out of the last 5 releases have a total of 4 signed artifacts.",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "6 existing vulnerabilities detected",
"points": 3,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 3
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "excellent",
"name": "AI Readiness",
"value": 85,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [
"AGENTS.md"
],
"agent_instruction_max_bytes": 6731
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "AGENTS.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "AGENTS.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "95 of 95 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 95,
"sampled": 95
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "excellent",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"package-lock.json"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
"frontend/tsconfig.json"
],
"agent_commit_share": 0.33,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0.05
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "go.mod (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "go.mod"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "frontend/tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "frontend/tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "33 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 33,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "5 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 5,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 6",
"points": 6,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "exceptional",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 44973,
"source_files_sampled": 155,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/155 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 155,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"top": [
"application"
],
"labels": [
"web-ui"
],
"scores": {
"web-ui": 4,
"library": 2.4,
"application": 5,
"network-service": 2
},
"primary": "web-ui",
"evidence": [
{
"tier": "structure",
"label": "application",
"source": "tree.go_main",
"weight": 5
},
{
"tier": "dependencies",
"label": "web-ui",
"source": "dep:react-dom",
"weight": 4
},
{
"tier": "declared",
"label": "library",
"source": "npm.private",
"weight": -3.6
},
{
"tier": "distribution",
"label": "library",
"source": "registry:go",
"weight": 3
},
{
"tier": "structure",
"label": "library",
"source": "tree.go_importable",
"weight": 3
},
{
"tier": "tags",
"label": "network-service",
"source": "tag:self-hosted",
"weight": 2
}
],
"artifacts": [
{
"path": "frontend/package.json",
"labels": [],
"ecosystem": "npm"
}
],
"confidence": "medium",
"host_extension": false,
"runs_as_process": true,
"consumed_by_code": false
},
"metrics_version": "2.5.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-08-05T09:26:13.289940Z",
"schema_version": "0.31.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/stein155/retouch.svg",
"full_name": "stein155/retouch",
"license_state": "standard",
"license_spdx": "MIT"
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with stein155/retouch. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.5.0, schema v0.31.0 — full methodology · metrics wiki.
