Public recordAt risk
Software health reportschema 0.27.0 · metrics 1.13.0 · 2026-07-27 02:16 UTC
stellarshenson / jupyterlab_colourful_tab_extension
Jupyterlab extension that makes the tabs coloured (using pastel colours) to help you find tab when many of them are opened. Colour persists between refreshes
stellarshenson/jupyterlab_colourful_tab_extension holds a health index of 44 out of 100, placing it in the At risk band. It scores highest on AI Readiness (76/100) and lowest on Community & Adoption (33/100). It was last updated 6 days ago. A single contributor accounts for most of its recent work.
44
overall / 100Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
44
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Ownership
Konrad JeleńPersonal account
9 followers122 public repossince Apr 2016Kolomolo, Ai4Process, PMR
This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.
Package ecosystems
| Registry | Package | Version | Downloads / mo | Versions | Last publish | Tags |
|---|---|---|---|---|---|---|
| npm | jupyterlab_colourful_tab_extension | 1.1.16 | 2,480 | 21 | 6 days ago | jupyterjupyterlabjupyterlab-extension |
| PyPI | jupyterlab_colourful_tab_extension | 1.1.16 | 2,213 | 21 | 6 days ago | jupyterjupyterlabjupyterlab-extension |
Metrics by category
Vitality
Is the project alive — is code being written and are releases shipping?
39
Development activity
65Moderate
How it's scored
| 36/36 | Push recency — last push 6 days ago |
| 3.5/36 | Commit cadence — 5/52 weeks with commits |
| 15.6/18 | Commit volume — 54 commits in the last year |
| 10/10 | OpenSSF Scorecard: Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
Inputs used
| commits_last_year | 54 |
| human_commit_share | 1 |
| days_since_last_push | 6 |
| active_weeks_last_year | 5 |
Release discipline
1Critical
How it's scored
| 0/27 | Ships releases — no releases published |
| 0/36 | Release recency — no releases |
| 0/27 | Release cadence — no releases |
| 0/10 | OpenSSF Scorecard: Signed-Releases — no data |
Inputs used
| releases_count | 0 |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.
Community & Adoption
Does the project have users, downloads, attention, and a welcoming setup for contributors?
33
Popularity & adoption
1Critical
How it's scored
| 0/60 | Stars — 0 stars |
| 0/25 | Forks — 0 forks |
| 0/15 | Watchers — 0 watchers |
Inputs used
| forks | 0 |
| stars | 0 |
| watchers | 0 |
| growth_state | unverified |
| growth_factor_pct | 100 |
| growth_unverified_reason | no_history |
Community health
50Moderate
How it's scored
| 22.5/22.5 | README |
| 22.5/22.5 | License — recognized license (BSD-3-Clause) |
| 0/18 | CONTRIBUTING guide |
| 0/13.5 | Code of conduct |
| 0/7.2 | Issue template |
| 0/6.3 | PR template |
Inputs used
| has_readme | yes |
| has_license | yes |
| has_contributing | no |
| has_issue_template | no |
| has_code_of_conduct | no |
| has_pull_request_template | no |
Ecosystem adoption (downloads)
61Moderate
How it's scored
| 49/80 | Monthly downloads — 4,693 downloads/month across npm, pypi |
| 0/20 | Registry dependents — not reported by this ecosystem |
Inputs used
| packages | jupyterlab_colourful_tab_extension, jupyterlab_colourful_tab_extension |
| dependents | — |
| ecosystems | npm, pypi |
| total_downloads | — |
| monthly_downloads | 4,693 |
Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.
Sustainability & Governance
Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?
37
Maintainer resilience (bus factor)
13Critical
How it's scored
| 9/54 | Bus factor — 1 contributor(s) cover half of all commits |
| 0/22.5 | Commit distribution — top contributor authored 100% of commits |
| 1.4/13.5 | Contributor breadth — 1 contributors |
| 3/10 | OpenSSF Scorecard: Contributors — project has 1 contributing companies or organizations -- score normalized to 3 |
Inputs used
| bus_factor | 1 |
| contributors_sampled | 1 |
| top_contributor_share | 1 |
Issue & PR responsiveness
1Critical
How it's scored
| 0/46.8 | Issue resolution — no issues or no data |
| 0/38.3 | PR acceptance — no decided pull requests or no data |
| 0/15 | OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
Inputs used
| merged_prs | 0 |
| open_issues | 0 |
| closed_issues | 0 |
| issue_closed_ratio | — |
| closed_unmerged_prs | 0 |
Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.
Ownership & stewardship
53Moderate
How it's scored
| 10/30 | Ownership backing — personal (user) account |
| 0/20 | Verified domain — not applicable to user accounts |
| 7.2/25 | Owner reach — 9 followers of stellarshenson |
| 25/25 | Track record — 122 public repos, account ~10 yr old |
Inputs used
| followers | 9 |
| owner_type | User |
| is_verified | — |
| owner_login | stellarshenson |
| public_repos | 122 |
| account_age_days | 3,757 |
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.
Package maintenance
100Excellent
How it's scored
| 25/25 | Published & resolvable — 2 package(s) on npm, pypi |
| 35/35 | Publish recency — latest publish 6 days ago |
| 20/20 | Version history — 21 published versions |
| 20/20 | Not deprecated — active, not deprecated or yanked |
Inputs used
| packages | jupyterlab_colourful_tab_extension, jupyterlab_colourful_tab_extension |
| ecosystems | npm, pypi |
| any_deprecated | no |
| min_days_since_publish | 6 |
Engineering Quality
Are baseline engineering and documentation practices in place?
66
Engineering practices
60Moderate
How it's scored
| 24/24 | CI workflows — 6 workflow(s) |
| 24/24 | Tests present |
| 0/16 | Linter config |
| 0/9.6 | Pre-commit hooks |
| 0/6.4 | .editorconfig |
| 0/20 | OpenSSF Scorecard: CI-Tests — no data |
Inputs used
| has_ci | yes |
| has_tests | yes |
| has_editorconfig | no |
| has_linter_config | no |
| has_precommit_config | no |
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.
Documentation
75Good
How it's scored
| 30/30 | README |
| 25/25 | Documentation directory |
| 0/15 | Documentation / homepage site |
| 10/10 | Repository description |
| 0/10 | Topics |
| 10/10 | Wiki |
Inputs used
| topics | — |
| has_wiki | yes |
| homepage | — |
| has_readme | yes |
| has_docs_dir | yes |
| has_description | yes |
Security
Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?
45
Security posture
31At risk
How it's scored
| 7.5/7.5 | Binary-Artifacts — no binaries found in the repo |
| 0/7.5 | Branch-Protection — branch protection not enabled on development/release branches |
| 0/2.5 | CI-Tests — no data |
| 0/2.5 | CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected |
| 0/7.5 | Code-Review — Found 0/30 approved changesets -- score normalized to 0 |
| 0.8/2.5 | Contributors — project has 1 contributing companies or organizations -- score normalized to 3 |
| 10/10 | Dangerous-Workflow — no dangerous workflow patterns detected |
| 0/7.5 | Dependency-Update-Tool — no update tool detected |
| 0/5 | Fuzzing — project is not fuzzed |
| 2.5/2.5 | License — license file detected |
| 7.5/7.5 | Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| 0/5 | Packaging — no data |
| 0/5 | Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
| 0/5 | SAST — no SAST tool detected |
| 0/5 | Security-Policy — security policy file not detected |
| 0/7.5 | Signed-Releases — no data |
| 0/7.5 | Token-Permissions — detected GitHub workflow tokens with excessive permissions |
| 0/7.5 | Vulnerabilities — 65 existing vulnerabilities detected |
Inputs used
| source | openssf_scorecard |
| checks_evaluated | 15 |
| scorecard_version | v5.5.0 |
| checks_inconclusive | 3 |
| scorecard_aggregate | 3.1 |
Excluded from scoring (no data or not applicable): ci_tests, packaging, signed_releases. Remaining weights renormalized.
Dependency advisories
100Excellent
How it's scored
| 35/35 | Direct dependencies free of known advisories — no direct dependency carries a known advisory |
| 25/25 | Indirect dependencies free of known advisories — no indirect dependency carries a known advisory |
| 0/40 | No advisories left outstanding — no advisory carries a publication date |
Inputs used
| source | osv |
| advisories | 0 |
| affected_packages | 0 |
| assessed_packages | 116 |
| unassessed_packages | 0 |
| affected_by_severity | none |
| direct_affected_packages | 0 |
Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:jupyterlab_colourful_tab_extension@1.1.16 runtime dependency closure — what installing the published package pulls in — 116 packages. Reachability is not analyzed.
AI Readiness
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
76
Agent context & guidance
85Excellent
How it's scored
| 45/45 | Agent instructions — .claude/CLAUDE.md |
| 0/15 | Machine-readable docs (llms.txt) |
| 40/40 | Legible commit history — 53 of 54 human commits state their intent (structured subject or explanatory body) |
Inputs used
| has_llms_txt | no |
| legible_history_share | 0.981 |
| agent_instruction_files | .claude/CLAUDE.md |
| agent_instruction_max_bytes | 2,154 |
Verify loop (build / test / typecheck)
61Moderate
How it's scored
| 18/18 | One-command bootstrap — Makefile |
| 22/22 | Automated tests |
| 0/11 | Lint / format config |
| 11/11 | Static type checking — tsconfig.json |
| 10/10 | Reproducible environment — lockfile |
| 0/10 | Demonstrated agent practice — no agent-authored commits among the last 54 |
| 0/8 | Automated maintenance — no automated dependency updates observed |
| 0/10 | OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0 |
Inputs used
| has_nix | no |
| has_tests | yes |
| lockfiles | package-lock.json, yarn.lock |
| has_dockerfile | no |
| typed_language | yes |
| bootstrap_files | Makefile |
| has_devcontainer | no |
| has_linter_config | no |
| typecheck_configs | tsconfig.json |
| agent_commit_share | 0 |
| toolchain_manifests | — |
| dependency_bot_commit_share | 0 |
Code legibility for models
100Excellent
How it's scored
| 45/45 | Type-checkable code — TypeScript (statically typed) |
| 55/55 | Manageable file sizes — 0/24 source files over 60KB |
Inputs used
| primary_language | TypeScript |
| largest_source_bytes | 15,853 |
| source_files_sampled | 24 |
| oversized_source_files | 0 |
Key facts
0GitHub stars
1contributors
54commits, last 12 months
6days since last push
0releases
1bus factor
0open issues
npm, PyPIpackage ecosystems
Data collection warnings
- GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
OpenSSF Scorecard 3.1 / 10
3.1aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).
| 10 | Binary-Artifacts | no binaries found in the repo |
| 0 | Branch-Protection | branch protection not enabled on development/release branches |
| n/a | CI-Tests | no pull request found |
| 0 | CII-Best-Practices | no effort to earn an OpenSSF best practices badge detected |
| 0 | Code-Review | Found 0/30 approved changesets -- score normalized to 0 |
| 3 | Contributors | project has 1 contributing companies or organizations -- score normalized to 3 |
| 10 | Dangerous-Workflow | no dangerous workflow patterns detected |
| 0 | Dependency-Update-Tool | no update tool detected |
| 0 | Fuzzing | project is not fuzzed |
| 10 | License | license file detected |
| 10 | Maintained | 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10 |
| n/a | Packaging | packaging workflow not detected |
| 0 | Pinned-Dependencies | dependency not pinned by hash detected -- score normalized to 0 |
| 0 | SAST | no SAST tool detected |
| 0 | Security-Policy | security policy file not detected |
| n/a | Signed-Releases | no releases found |
| 0 | Token-Permissions | detected GitHub workflow tokens with excessive permissions |
| 0 | Vulnerabilities | 65 existing vulnerabilities detected |
Direct dependencies 6
| Registry | Package | Version constraint | Manifest |
|---|---|---|---|
| npm | @jupyterlab/application | ^4.0.0 | package.json |
| npm | @jupyterlab/settingregistry | ^4.0.0 | package.json |
| npm | @jupyterlab/terminal | ^4.0.0 | package.json |
| npm | @jupyterlab/ui-components | ^4.0.0 | package.json |
| npm | @lumino/coreutils | ^2.0.0 | package.json |
| npm | @lumino/widgets | ^2.0.0 | package.json |
All dependencies not collected
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Dependency advisories 0
Installing npm:jupyterlab_colourful_tab_extension@1.1.16 pulls in 116 packages, direct and transitive: 0 carry known advisories, of which 0 are direct dependencies.
No known advisories affect the assessed dependencies.
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 3684,
"has_wiki": true,
"homepage": null,
"languages": {
"CSS": 7697,
"Python": 1697,
"Makefile": 6184,
"JavaScript": 1037,
"TypeScript": 61068
},
"pushed_at": "2026-07-20T15:17:47Z",
"created_at": "2025-12-02T13:23:13Z",
"owner_type": "User",
"updated_at": "2026-07-20T15:20:27Z",
"description": "Jupyterlab extension that makes the tabs coloured (using pastel colours) to help you find tab when many of them are opened. Colour persists between refreshes",
"is_archived": false,
"is_disabled": false,
"license_spdx": "BSD-3-Clause",
"default_branch": "main",
"license_spdx_raw": "BSD-3-Clause",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript"
]
},
"owner": {
"blog": "https://www.linkedin.com/in/konradjelen/",
"name": "Konrad Jeleń",
"type": "User",
"login": "stellarshenson",
"company": "Kolomolo, Ai4Process, PMR",
"location": "Krakow, Poland",
"followers": 9,
"avatar_url": "https://avatars.githubusercontent.com/u/18424023?v=4",
"created_at": "2016-04-12T15:32:51Z",
"is_verified": null,
"public_repos": 122,
"account_age_days": 3757
},
"license": {
"state": "standard",
"spdx_id": "BSD-3-Clause",
"raw_spdx": "BSD-3-Clause",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [],
"recent_commits": [
{
"oid": "15d436c2a5a0db69e529a4595acb53df3eb5c92d",
"body": "- low now 2:1 - a deliberate hairline below the WCAG non-text floor\n (the divider is an aesthetic aid, not text)\n- medium now 3:1 - the WCAG non-text minimum, still the default\n- high now 4:1 - byte-identical greys to the previous medium, so the\n old default strength remains selectable\n- the previous 6:1 tier is removed; anti-drift pins, schema description\n and README follow the new values",
"is_bot": false,
"headline": "feat: retune divider contrast ladder one notch subtler",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2026-07-20T15:17:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a58a95398e468f7914d9cdcf1b002c1035b5a562",
"body": null,
"is_bot": false,
"headline": "chore: post-publish 1.1.16 package metadata",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2026-07-20T15:17:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "098756d24fc2bc4f7d0639deda7834acf2dfc5a0",
"body": "- dividerContrast setting (low 3:1 / medium 4:1 / high 6:1, default\n medium - the previous fixed behaviour): CONTRAST_TARGETS maps the\n magnitude to the target ratio, asDividerContrast guards raw settings\n values by deriving membership from the map\n- the divider no longer recolours a seam touchin\n[…]\na\n description ratios, strict all-colour monotonicity and both clamp\n directions; a guard test keeps the :not on every divider rule\n- DEF-7 registered in docs/defects.md with live pixel verification",
"is_bot": false,
"headline": "feat: divider contrast setting + exclude active tab from divider (DEF-7)",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2026-07-17T12:38:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "08226f36d181988ed5cd944994b0942a147e66a5",
"body": null,
"is_bot": false,
"headline": "chore: post-publish 1.1.15 package metadata",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2026-07-17T12:37:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "137e10aa3e29e32c89fce6f824c556706de88710",
"body": "…ditor\n\n- adjacent tabs sharing a colour keep a visible seam: the theme's 1px\n divider stroke is recoloured with a runtime-computed grey at >=4:1\n contrast against both the inactive and active shade - darker than the\n tabs in the light theme, brighter in the dark theme; both seam borders\n are se\n[…]\ne\n divider still active instead of silently disabling the feature\n- yarn.lock gains the new @jupyterlab/settingregistry and ajv entries\n so CI's immutable install resolves against the committed lock",
"is_bot": false,
"headline": "feat: dynamic divider between same-coloured tabs + settings palette e…",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2026-07-17T11:18:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5e79d620637b271c70686d14dbe177c4098db56e",
"body": null,
"is_bot": false,
"headline": "chore: post-publish 1.1.14 package metadata",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2026-07-17T11:17:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6ed8ac5a36a563cf605d0ca80afc058b1991ef3b",
"body": "Brand-new tabs opened already coloured because colours were keyed on\nidentifiers that get reused:\n\n- a launcher's widget id (launcher-0) is a per-browser-session counter,\n so the first launcher of every session re-read the same key\n- a terminal's session name is handed straight back out by terminad\n[…]\nrally\n{name: string}, so the new terminal is indistinguishable from the old.\nJupyterLab conflates them identically - its restorer keys terminals on\nsession.name. Closing this needs a server extension.",
"is_bot": false,
"headline": "fix: never persist a tab colour under a recyclable id (DEF-6)",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2026-07-17T07:30:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f2eedebaef0c23455e5d3e32b6ae5be2f076b158",
"body": null,
"is_bot": false,
"headline": "chore: post-publish 1.1.13 package metadata",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2026-07-17T07:29:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "664471212dbd22f393ddba79a8e449f01a9ca3c4",
"body": "Follow-up to the 1.1.11 base-colour darkening: the active (selected)\nshades get the same ~13% treatment (e.g. rose #43282e -> #3a2328), so\nthe selected tab keeps its familiar darker-than-siblings contrast\nagainst the newly darkened inactive tabs.",
"is_bot": false,
"headline": "style: darken dark-theme active tab shades",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2026-07-16T21:10:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a89b5668de74856d3204a80561d7a5f07beaa0b",
"body": null,
"is_bot": false,
"headline": "chore: post-publish 1.1.12 package metadata",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2026-07-16T21:10:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2e275e6cd8bc3ac8cacb6aec713c6b79f618274",
"body": "The six base colours were too bright in dark mode next to the dark\nchrome. Darkened them ~13% (e.g. rose #5a3840 -> #4e3138); the active\n(selected) shades are unchanged and remain visibly darker than the new\nbase, preserving the selected-tab distinction.",
"is_bot": false,
"headline": "style: darken dark-theme inactive tab colours",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2026-07-16T21:02:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a1409b1b375a5b53229cf4ee5d07091d960cafd8",
"body": null,
"is_bot": false,
"headline": "chore: post-publish 1.1.11 package metadata",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2026-07-16T21:02:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9411c89de2cdb5283fba1d18780d02623960635b",
"body": "An API-tinted tab flickered between two colours: the API colour renders\nfrom title.className on every Lumino re-render, while refreshAllTabColours\nre-applied the localStorage menu map on every mutation, stripping all\ncolour classes (the API's included) before painting its own. The second\ncolour usua\n[…]\n\n- a non-null API setColour takes ownership: releaseMenuColour deletes\n the stored menu entry for that widget's tab and persists, so the stale\n colour cannot resurface when the API colour is cleared",
"is_bot": false,
"headline": "fix: stop API and menu colours fighting over the same tab (DEF-5)",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2026-07-16T08:08:53Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "75f61b9117bb7a7d6f8ed98304aaf2d7ed027ca8",
"body": null,
"is_bot": false,
"headline": "chore: post-publish 1.1.10 package metadata",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2026-07-16T08:08:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82aeae6b2667b1e43bfac6f2bc102e927629e6da",
"body": "applyToolbarColour assumed a single-panel layout: it sourced the colour\nfrom the first .lm-mod-current tab in document order and painted the\nfirst visible jp-toolbar, so in split layouts the tab and the toolbar\ncould belong to different widgets. API-tinted terminals (claude_code)\nwere the worst case\n[…]\nur (read from its live\nclass list) is applied only to the toolbar inside its own widget node,\nmatched via the shared widget id (tab data-id = widget node id).\nWidgets without a toolbar colour nothing.",
"is_bot": false,
"headline": "fix: stop colour bleeding onto other panels in split layouts (DEF-4)",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2026-07-16T07:26:20Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3aadf0740cd1600e39ab3823fe6b65f823ba63f6",
"body": null,
"is_bot": false,
"headline": "chore: post-publish 1.1.9 package metadata",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2026-07-16T07:25:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b4fc72b9776f6b4debdb511320ae245698635ae1",
"body": "applyToolbarColour sourced the toolbar colour from the menu-driven\ntabColours localStorage map, which the public setColour API never writes -\nsetColour only sets the tab's title.className. So a tab tinted through the\nAPI (e.g. by jupyterlab_claude_code_extension on conversation restore)\ncoloured the\n[…]\n now follows either. The menu path\nis unchanged; getStableTabId/tabColours remain in use elsewhere.\n\nRegister DEF-3 in docs/defects.md, add the acceptance criterion, journal\nentry 21, changelog 1.1.8.",
"is_bot": false,
"headline": "fix: colour the toolbar for API-tinted tabs (DEF-3)",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2026-07-15T17:08:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1814efd53e7430b063d1305c5f9cbd4b7231afc0",
"body": null,
"is_bot": false,
"headline": "chore: post-publish 1.1.8 package metadata",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2026-07-15T17:08:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "88dc45e2982ada8f7bfcaf532b40ea1c5cfa324c",
"body": "The 1.1.5 active-tab feature gave the selected tab a distinct -active\nshade but added no matching rule for the toolbar, so the base\n::part(positioning-region) rule kept painting the strip below the tab the\nbase shade. On the current widget the tab moved to the vivid active shade\nwhile its toolbar st\n[…]\nlbar). The block sits ahead of the active-tab rules to satisfy\nstylelint no-descending-specificity.\n\nRegister DEF-2 in docs/defects.md, add the acceptance criterion, journal\nentry 20, changelog 1.1.7.",
"is_bot": false,
"headline": "fix: match the current tab's toolbar to its active shade (DEF-2)",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2026-07-15T15:16:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "567a53cca6b751c203a30e4208e119f1dba1cbfd",
"body": null,
"is_bot": false,
"headline": "chore: post-publish 1.1.7 package metadata",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2026-07-15T15:15:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a62efbdf82c61f132c98cc5b1e6ba687dd72afb",
"body": "The public setColour API overwrote widget.title.className wholesale, but the JupyterLab shell stores the selected-tab accent as jp-mod-current on that same property. A consumer re-tinting a tab on each title update destroyed jp-mod-current, so Lumino's next render dropped the blue accent bar - visib\n[…]\ntoken, and preserves every other class.\n\n- add 3 tests asserting the accent survives tint/swap/clear\n- track as DEF-1 in docs/defects.md with acc-crit coverage\n- gitignore stray root-level screenshots",
"is_bot": false,
"headline": "fix: preserve the current-tab accent when tinting a tab (DEF-1)",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2026-07-15T11:15:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "16151facb752e5efcb3f2f6e447050fc664b4512",
"body": null,
"is_bot": false,
"headline": "chore: post-publish 1.1.6 package metadata",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2026-07-15T11:14:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f9cc5557358f9b6a9b36976d1cfb4927121dc09",
"body": "Give the active (selected) dock tab a distinct shade of its colour so it stands out from inactive coloured tabs - brighter/more saturated in the light theme, darker in the dark theme. Implemented with per-colour --jp-colourful-tab-<id>-active CSS variables and .lm-mod-current override rules for all six colours.\n\n- add acceptance criteria doc for the feature\n- document the behaviour in README and CHANGELOG (1.1.5)\n- gitignore the uv.lock the Makefile regenerates during publish",
"is_bot": false,
"headline": "feat: distinct shade for the selected coloured tab",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2026-07-15T10:48:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ff2838eb35edf8618e79cb91ab4bf8813957a7bf",
"body": null,
"is_bot": false,
"headline": "chore: post-publish 1.1.5 package metadata",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2026-07-15T10:46:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2f074ca7e78ab781f709d5c1097dc16db141ff2",
"body": null,
"is_bot": false,
"headline": "docs: add 1.1.4 changelog (maintenance re-release)",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2026-07-13T18:40:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5db3c595ebeab9794f37cfb499e934572c8db4a",
"body": null,
"is_bot": false,
"headline": "chore: post-publish 1.1.4 package metadata",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2026-07-13T18:40:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d34f4b9e5cc9328167c3576bdb2ad10956303642",
"body": "Colours vanished permanently after visiting the hub control panel and\nreturning to JupyterLab. Root cause was cleanupStaleColours() running on\napp.restored: during the cold reload, file paths and terminal sessions\naren't resolved yet, so every stored colour was misclassified as stale,\ndeleted from t\n[…]\nadopt the canonical Makefile (v1.34), which uses a project-local\n.nodeenv/ instead of overwriting the conda node prefix - fixes the\nintermittent \"Text file busy\" publish failures; gitignore .nodeenv/.",
"is_bot": false,
"headline": "fix: keep tab colours saved across JupyterHub round-trips",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2026-07-13T18:35:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "684c9a3be83bacf90841b1e0cf543142837491b2",
"body": null,
"is_bot": false,
"headline": "chore: post-publish 1.1.3 package metadata",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2026-07-13T18:34:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "492291c953b2833117513616696712153e09d7bc",
"body": null,
"is_bot": false,
"headline": "chore: post-publish 1.1.1 package metadata",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2026-07-13T13:03:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "66914445ca06188dd54c844349285b7adb122f33",
"body": "The public IColourfulTabs API is a backward-compatible feature, so promote to a\nminor version per semver. The identical content is already published as 1.0.20.",
"is_bot": false,
"headline": "chore: bump version to 1.1.0",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2026-07-13T12:59:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "de007d65160d5a985b9762ca93d5ba01fe7330ee",
"body": "- extract COLOURS and the tab-tinting logic into src/colours.ts (imports only\n @lumino/widgets) so the API is testable without the JupyterLab-heavy plugin\n module; index.ts imports and wires api.setColour to it\n- add tokens.spec.ts pinning the token id (guards the federation contract)\n- add set-colour.spec.ts: id->class mappings, null/unknown-id clear, disposed\n widget guard\n- document the 1.0.20 release in CHANGELOG\n- gitignore junit.xml test reporter output",
"is_bot": false,
"headline": "test: add IColourfulTabs API unit tests and extract colours module",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2026-07-13T12:59:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7139c6e91e89e28158c2b02085a0e8fa6fc9ec05",
"body": null,
"is_bot": false,
"headline": "chore: post-publish 1.0.20 package metadata",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2026-07-13T12:47:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2c28e17aede2030d2c09d6a0ccf712b29d7c6522",
"body": "…nting\n\nExpose a Lumino token so other extensions can tint a widget's dock tab\nprogrammatically. First consumer is jupyterlab_claude_code_extension.\n\n- add src/tokens.ts with IColourfulTabs token and setColour(widget, colourId)\n- provide the token from the plugin; tint via widget.title.className so \n[…]\nunchanged\n- add @lumino/coreutils dependency and sharedPackages federation singleton so\n the token resolves to a single runtime instance across extensions\n- document the API in README, bump to 1.0.19",
"is_bot": false,
"headline": "feat: add public IColourfulTabs colour API for cross-extension tab ti…",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2026-07-13T12:19:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2440ccca1b7a45f621fb6c84f0d02fcab610249b",
"body": "- mrproper now removes ui-tests/node_modules (Playwright browser binaries)\n- add full changelog history to Makefile header",
"is_bot": false,
"headline": "chore: update Makefile to v1.31",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2026-03-24T03:30:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f1f60bebb10756dd1919ab34f54a0178452d0cff",
"body": "- Remove 'urls' from dynamic field list in pyproject.toml since\n [project.urls] is statically defined - fixes hatchling build error\n- Add steps_to_skip: \"build-changelog\" to check-release.yml and\n prep-release.yml for direct commit workflow compatibility\n- Add RH_SINCE_LAST_STABLE environment variable to both workflows\n- Update .claude/CLAUDE.md with mandatory bans section and correct\n technology stack (frontend-only, no server extension)\n- Run prettier on all workflow files",
"is_bot": false,
"headline": "fix: resolve pyproject.toml metadata conflict and update CI workflows",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2026-01-26T18:12:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ddea5647e41e3143d98f1a1bde35688f95221c8c",
"body": null,
"is_bot": false,
"headline": "docs: add stellars_jupyterlab_extensions metapackage reference",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2026-01-26T18:02:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "29b37ae36aeaaec38decd19fa7da0588375c5eb5",
"body": null,
"is_bot": false,
"headline": "updated package version",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2025-12-07T19:16:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c8f0004fc075733549a954b8eff085f3029b7820",
"body": null,
"is_bot": false,
"headline": "fix: prettier formatting for package-lock.json",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2025-12-02T23:50:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "199f158ad44f3c9cb203c6cffe09004442f2a0de",
"body": null,
"is_bot": false,
"headline": "docs: update CHANGELOG for v1.0.15",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2025-12-02T23:45:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d693e7ba1dc5b3436a12fd7a07de6813904fc224",
"body": null,
"is_bot": false,
"headline": "chore: release v1.0.15",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2025-12-02T23:44:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e83d80ee2191a43662491063c0c716df6c46f826",
"body": null,
"is_bot": false,
"headline": "feat: add theme-aware colour icons to context menu",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2025-12-02T23:42:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9f0254568457bfba7b9ec05dfce2a810a889517c",
"body": null,
"is_bot": false,
"headline": "chore: release v1.0.11",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2025-12-02T22:06:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "59512ea71454aeca5abd4ce22b7fabec9ff433b1",
"body": null,
"is_bot": false,
"headline": "fix: prettier formatting for package-lock.json",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2025-12-02T22:03:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1235ba15ce8c33297e6e1893fe62786a3b1882b2",
"body": null,
"is_bot": false,
"headline": "docs: update CHANGELOG with complete version history from package.json",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2025-12-02T14:17:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3a47909c8795269b343214b6b52956e7978650c4",
"body": null,
"is_bot": false,
"headline": "docs: add CHANGELOG with version history",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2025-12-02T14:15:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b1f7b78b1697ed1b06dfef26738cbd9cd6d0696",
"body": null,
"is_bot": false,
"headline": "fix: prettier formatting for lint check",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2025-12-02T13:49:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f7f2751e42bed2c4da821475040bb3b8543f3528",
"body": null,
"is_bot": false,
"headline": "fix: CSS lint errors and add self-deprecating README comment",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2025-12-02T13:45:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dcb211ec154c24b6cda673aeee20c6a8e32543c2",
"body": null,
"is_bot": false,
"headline": "docs: add screenshots to README",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2025-12-02T13:41:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b6e244297031f7b560ba3b714556dd24731b11f4",
"body": null,
"is_bot": false,
"headline": "fix: add repository URL to package.json for npm release check",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2025-12-02T13:39:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2c858855eb681222fd54b6d2a19aac9e99d4c25f",
"body": "- Update build.yml to match reference project (Python 3.12, remove server\n extension checks for frontend-only extension, add ignore_links for badges)\n- Update README with accurate feature descriptions\n- Darken all dark mode colours for better visibility",
"is_bot": false,
"headline": "chore: update CI workflow and README",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2025-12-02T13:34:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ad2a939252b8bd14d39801764fec37d23d68a84",
"body": "Implemented applyToolbarColour() function that syncs the notebook toolbar\n(jp-toolbar) colour with the active tab's colour. Toolbar colour updates on\ntab switch, colour application, colour clearing, and initial load. Persists\ncolours across browser refresh using localStorage with stable identifiers.",
"is_bot": false,
"headline": "feat: add toolbar colouring to match tab colours",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2025-12-02T13:18:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8783458fbab51892416596928bf954192446c1ff",
"body": "- Add MutationObserver for class attribute changes on tabs\n- Debounce refresh with 50ms delay to batch DOM changes\n- Smart filtering to only react to relevant tab mutations\n- Skip redundant DOM updates if colour already applied",
"is_bot": false,
"headline": "fix: persist tab colours when switching tabs",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2025-12-02T10:51:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cc5577b1008fea6aa339b3c366230991719b32b1",
"body": "- Removed non-existent mainDock.dock access (private _dockPanel)\n- Use JupyterLab's data-id attribute on tab elements\n- Store tab element reference directly for colour application\n- Add debug logging for troubleshooting",
"is_bot": false,
"headline": "fix: use data-id attribute for tab element lookup",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2025-12-02T10:44:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cbe829c78d9bc11383c63d86db7c77a276b199f9",
"body": "- 6 pastel colours for light/dark themes (Rose, Peach, Lemon, Mint, Sky, Lavender)\n- Context menu submenu \"Tab Colour\" on tab right-click\n- CSS-based colour definitions with theme detection\n- In-memory persistence for tab lifetime",
"is_bot": false,
"headline": "feat: implement tab colouring with context menu submenu",
"author_name": "stellarshenson",
"author_login": "stellarshenson",
"committed_at": "2025-12-02T10:34:16Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 0,
"commits_last_year": 54,
"latest_release_at": null,
"latest_release_tag": null,
"releases_from_tags": false,
"days_since_last_push": 6,
"active_weeks_last_year": 5,
"days_since_latest_release": null,
"mean_days_between_releases": null
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 42,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "jupyterlab_colourful_tab_extension",
"exists": true,
"license": "BSD-3-Clause",
"keywords": [
"jupyter",
"jupyterlab",
"jupyterlab-extension"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/jupyterlab_colourful_tab_extension",
"is_deprecated": false,
"latest_version": "1.1.16",
"repository_url": "https://github.com/stellarshenson/jupyterlab_colourful_tab_extension",
"versions_count": 21,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 2480,
"first_published_at": "2025-12-02T14:13:31.744000Z",
"latest_published_at": "2026-07-20T15:17:10.677000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 6
},
{
"name": "jupyterlab_colourful_tab_extension",
"exists": true,
"license": null,
"keywords": [
"jupyter",
"jupyterlab",
"jupyterlab-extension",
"Framework :: Jupyter",
"Framework :: Jupyter :: JupyterLab",
"Framework :: Jupyter :: JupyterLab :: 4",
"Framework :: Jupyter :: JupyterLab :: Extensions",
"Framework :: Jupyter :: JupyterLab :: Extensions :: Prebuilt",
"License :: OSI Approved :: BSD License",
"Programming Language :: Python",
"Programming Language :: Python :: 3",
"Programming Language :: Python :: 3.10",
"Programming Language :: Python :: 3.11",
"Programming Language :: Python :: 3.12",
"Programming Language :: Python :: 3.13",
"Programming Language :: Python :: 3.14"
],
"ecosystem": "pypi",
"matches_repo": true,
"registry_url": "https://pypi.org/project/jupyterlab_colourful_tab_extension/",
"is_deprecated": false,
"latest_version": "1.1.16",
"repository_url": "https://github.com/stellarshenson/jupyterlab_colourful_tab_extension",
"versions_count": 21,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 2213,
"first_published_at": "2025-12-02T14:13:33.579957Z",
"latest_published_at": "2026-07-20T15:17:13.363157Z",
"latest_version_yanked": null,
"days_since_latest_publish": 6
}
]
},
"popularity": {
"forks": 0,
"stars": 0,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0,
"collected_at": null
},
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 15853,
"source_files_sampled": 24,
"oversized_source_files": 0,
"agent_instruction_files": [
".claude/CLAUDE.md"
],
"agent_instruction_max_bytes": 2154
},
"dependencies": {
"manifests": [
"package.json",
"pyproject.toml",
"setup.py",
"ui-tests/package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 116,
"malicious_count": 0,
"assessed_package": "npm:jupyterlab_colourful_tab_extension@1.1.16",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm",
"pypi"
],
"dependencies": [
{
"name": "@jupyterlab/application",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.0.0"
},
{
"name": "@jupyterlab/settingregistry",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.0.0"
},
{
"name": "@jupyterlab/terminal",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.0.0"
},
{
"name": "@jupyterlab/ui-components",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^4.0.0"
},
{
"name": "@lumino/coreutils",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^2.0.0"
},
{
"name": "@lumino/widgets",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^2.0.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 0,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "stellarshenson",
"commits": 54,
"avatar_url": "https://avatars.githubusercontent.com/u/18424023?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"build.yml",
"check-release.yml",
"enforce-label.yml",
"prep-release.yml",
"publish-release.yml",
"update-integration-tests.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"package-lock.json",
"yarn.lock"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "65 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "15d436c2a5a0db69e529a4595acb53df3eb5c92d",
"ran_at": "2026-07-27T02:16:28Z",
"aggregate_score": 3.1,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-20T15:22:53Z",
"oldest_open_prs": [],
"last_merged_pr_at": null,
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/stellarshenson/jupyterlab_colourful_tab_extension",
"host": "github.com",
"name": "jupyterlab_colourful_tab_extension",
"owner": "stellarshenson"
},
"metrics": {
"overall": {
"key": "overall",
"band": "at_risk",
"name": "Overall health",
"note": null,
"notes": [],
"value": 44,
"inputs": {
"security": 45,
"vitality": 39,
"community": 33,
"governance": 37,
"engineering": 66
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "at_risk",
"name": "Vitality",
"value": 39,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 65,
"inputs": {
"commits_last_year": 54,
"human_commit_share": 1,
"days_since_last_push": 6,
"active_weeks_last_year": 5
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 6 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 6
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "5/52 weeks with commits",
"points": 3.5,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 5
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "54 commits in the last year",
"points": 15.6,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 54
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "critical",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"releases_count": 0
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "no releases published",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases_published",
"params": {}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "no releases",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases",
"params": {}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "no releases",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases",
"params": {}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 6,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 6 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 6
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 33,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 0,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (BSD-3-Clause)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "BSD-3-Clause"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 61,
"inputs": {
"packages": [
"jupyterlab_colourful_tab_extension",
"jupyterlab_colourful_tab_extension"
],
"dependents": null,
"ecosystems": "npm, pypi",
"total_downloads": null,
"monthly_downloads": 4693
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "4,693 downloads/month across npm, pypi",
"points": 49,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 4693,
"ecosystems": "npm, pypi"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 37,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 13,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "critical",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution",
"pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"merged_prs": 0,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "no decided pull requests or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_decided_prs_or_data",
"params": {}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 53,
"inputs": {
"followers": 9,
"owner_type": "User",
"is_verified": null,
"owner_login": "stellarshenson",
"public_repos": 122,
"account_age_days": 3757
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "9 followers of stellarshenson",
"points": 7.2,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 9,
"login": "stellarshenson"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "122 public repos, account ~10 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 122
}
},
{
"code": "account_age_years",
"params": {
"years": 10
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"jupyterlab_colourful_tab_extension",
"jupyterlab_colourful_tab_extension"
],
"ecosystems": "npm, pypi",
"any_deprecated": false,
"min_days_since_publish": 6
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "2 package(s) on npm, pypi",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 2,
"ecosystems": "npm, pypi"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 6 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 6
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "21 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 21
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 66,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 60,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "6 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 6
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 45,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 31,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 15,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 3,
"scorecard_aggregate": 3.1
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "65 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:jupyterlab_colourful_tab_extension@1.1.16 runtime dependency closure — what installing the published package pulls in — 116 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "npm:jupyterlab_colourful_tab_extension@1.1.16",
"assessed": 116
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 116,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 116,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 2
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 76,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.981,
"agent_instruction_files": [
".claude/CLAUDE.md"
],
"agent_instruction_max_bytes": 2154
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": ".claude/CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".claude/CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "53 of 54 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 53,
"sampled": 54
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 61,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"package-lock.json",
"yarn.lock"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
"tsconfig.json"
],
"agent_commit_share": 0,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 54",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 54
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 15853,
"source_files_sampled": 24,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/24 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 24,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-27T02:16:33.193830Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/stellarshenson/jupyterlab_colourful_tab_extension.svg",
"full_name": "stellarshenson/jupyterlab_colourful_tab_extension",
"license_state": "standard",
"license_spdx": "BSD-3-Clause"
}Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
How one result sits in the wider record: aggregate statistics — npm, PyPI.