sysread/fnord holds a health index of 51 out of 100, placing it in the Moderate band. It scores highest on Engineering Quality (70/100) and lowest on Security (31/100). It was last updated 36 days ago. A single contributor accounts for most of its recent work.
51
overall / 100
Moderate
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.
51
Exceptional93-100The record's top tier (≈ top 5%); essentially all checked criteria met
Excellent80-92Strong across the board; minor gaps
Good65-79Healthy; gaps are limited and manageable
Moderate50-64Acceptable with notable gaps; review recommended
Weak35-49Material weaknesses across several areas
At Risk20-34Significant weaknesses; adoption warrants caution
Critical1-19Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
The weighted overall 51 is calibrated to 51 on the published index scale (record calibration 2026-08-02).
How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
More detail
Star and fork history 0 ★ / 5 ⇿
0Stars
5Forks
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
OpenSSF Scorecard 3.1 / 10
3.1aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-30 15:46 UTC
Full resolved dependency set from the GitHub dependency graph: 0 direct and 0 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
Registry
Package
Version
Relation
Dependency advisories not assessed
Advisory matching could not run for this report: No resolved dependencies to assess
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"ai",
"code",
"database",
"elixir",
"embedding",
"gpt",
"index",
"llm",
"openai",
"search",
"vector",
"vectordb"
],
"is_fork": false,
"size_kb": 27642,
"has_wiki": true,
"homepage": null,
"languages": {
"Elixir": 3065393,
"Makefile": 5166
},
"pushed_at": "2026-06-23T21:39:59Z",
"created_at": "2024-09-27T16:17:34Z",
"owner_type": "User",
"updated_at": "2026-06-23T21:40:02Z",
"description": "Fnord is an AI code archaeologist.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "Elixir",
"significant_languages": [
"Elixir"
]
},
"owner": {
"blog": null,
"name": "Jeff Ober",
"type": "User",
"login": "sysread",
"company": "Papa",
"location": "Colorado",
"followers": 37,
"avatar_url": "https://avatars.githubusercontent.com/u/83381?v=4",
"created_at": "2009-05-11T19:28:33Z",
"is_verified": null,
"public_repos": 82,
"account_age_days": 6288
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [],
"recent_commits": [
{
"oid": "b81ab166d346bedfd8290d15d173990dfff79839",
"body": null,
"is_bot": false,
"headline": "version bump",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-23T21:39:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5016d168a1ddc2839daadb608546d9822831a740",
"body": null,
"is_bot": false,
"headline": "Keep tool-call reindex quiet mode local to Cmd.Index",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-23T21:38:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6a7685f74b937f1fce9a7e870595d9aece35e33e",
"body": null,
"is_bot": false,
"headline": "Fix MCP dynamic tool registration race",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-23T21:08:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "905e5787ebebc5c248a52424ac1238f30864ecb5",
"body": null,
"is_bot": false,
"headline": "version bump",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-23T19:10:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "968aeb54e054da6b81e730813ffb3adc9c4a3c0b",
"body": null,
"is_bot": false,
"headline": "Fix reviewer base selection for branch reviews",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-23T19:00:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5478db3dfe66d8c3c3e24c235618acc916b83f37",
"body": null,
"is_bot": false,
"headline": "version bump",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-23T15:22:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e4b17f1460f7a8972384743d37dae06d779119ef",
"body": null,
"is_bot": false,
"headline": "Handle nil recall query fields in coordinator memory bootstrap",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-23T15:16:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0bc5eb593eac6631b67e58331d86f9d5365c0ff8",
"body": null,
"is_bot": false,
"headline": "version bump",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-17T22:01:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "286f3d9123263c7821128b6fdd4b365f4c77610c",
"body": "A file path resolved through the cwd (Path.absname, File.cwd!) is\nOS-canonical - on macOS /tmp resolves to /private/tmp - but a project's\nsource_root is stored as a plain Path.expand with symlinks intact. When\nthe two differ only by a symlinked ancestor, Path.relative_to/2 can't\nstrip the root prefi\n[…]\nvize with no extra filesystem calls. Normalizing at the comparison\nrather than canonicalizing source_root at storage avoids reintroducing\nthe same asymmetry for paths threaded in from non-cwd sources.",
"is_bot": false,
"headline": "Fix file lookups when project root differs by a symlinked ancestor",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-17T19:10:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fae29aa60e90012d2b336e06fc93ea298650eeea",
"body": "Adds docs/use-cases/ - workflow runbooks (get-started, project\ninstructions, cross-tool integration, safe edit mode, review, context\ntroubleshooting) - as a third user-facing docs lane alongside\ndocs/user/ and docs/dev/.\n\nThe self-help tool and hexdocs extras globs now span both docs/user/\nand docs/\n[…]\ngotcha #43.\n\nAdds a root CLAUDE.md for cross-tool orientation (FNORD.md remains the\nauthoritative, always-injected source) and sharpens the FNORD.md vs\nCLAUDE.md role split in ai-tool-integrations.md.",
"is_bot": false,
"headline": "Add use-cases docs lane, root CLAUDE.md, wire docs globs",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-17T18:31:50Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "beeccda92aceabb249a13092cd4e3178368375f5",
"body": "… approvals",
"is_bot": false,
"headline": "Fix shell approval customize matching for persisted literal and regex…",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-17T17:42:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f8f38cf70025c4248f092817919ea86aa50d524",
"body": null,
"is_bot": false,
"headline": "reviewer: require reachability and producer-chain proof for findings",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-17T16:43:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "635f1ff13c763bf76505b322f7e901568b6dea7a",
"body": null,
"is_bot": false,
"headline": "version bump",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-17T16:04:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e220d74c5911e4e71433aca92f2bc98f9b6d5457",
"body": null,
"is_bot": false,
"headline": "Add explicit Fonz coordinator prompt",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-17T15:59:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "77939a51cfa59970fe19154709cc040c9ba511c4",
"body": null,
"is_bot": false,
"headline": "Add coverage for Fonz prompt injection path",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-17T15:23:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5d3eb608a12d144ad0445d33c277902c01f0f91c",
"body": null,
"is_bot": false,
"headline": "Restore hidden ask --eyyyy fonz flag",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-17T14:52:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8e54e09c588bb6fbe151d0e0f5054c0e5b36875b",
"body": null,
"is_bot": false,
"headline": "ignore .pi",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-12T21:41:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e43692611f1f902309317e78e92ea7c9da035653",
"body": "Every async: false now carries a comment at the use line naming the\nVM-global mechanism that pins it (stderr capture via capture_all,\nLogger level/capture_log, real PATH/env for subprocesses, ad-hoc\nGenServer init hitting Mox facades, VM-globally named processes), so\nsync is visibly intentional rather than an unswept default.",
"is_bot": false,
"headline": "tests: document why each remaining sync file is pinned",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-12T19:49:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fc066d8d76140ace50666a015f4a24ee7d884007",
"body": "Audited the 15 sync files with no detectable async blocker. Twelve are\ngenuinely isolated (per-test instance/tmpdir, tree-scoped config,\nFileLock'd settings writes, ETS queries filtered to the test's own\nGlobals root) and flip cleanly. The three indexer tests stay sync:\ncommit/conversation indexers \n[…]\nr file gains the explanatory comment the other two\nalready had.\n\nSuite: 30.7s -> 18.1s since track C started; sync tail now 5.8s.\nVerified: make check + 8 stress runs at --max-cases 64, zero warnings.",
"is_bot": false,
"headline": "tests: flip 12 audited sync files async",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-12T19:42:57Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "db3e04f9876e3019dc70166f8689ae6a4737f972",
"body": "…acades\n\nCloses the raw-subprocess seam holes outside lib/git_cli:\n- decomposer's git ops move onto new GitCli callbacks (merge_base,\n diff_stat, log_oneline, verify_commit, fetch_ref); its gh calls route\n through Util.Exec\n- Validation.Rules.execute_validation_command routes through Util.Exec;\n \n[…]\ns git's relative --git-common-dir answer against the\n queried dir rather than the process cwd\n- skills_generate_test drops the last File.cd! in the suite for the\n override; stays sync on capture_all",
"is_bot": false,
"headline": "seams: route decomposer, validation, and project resolution through f…",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-12T19:08:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ae27c93c1199d331c09129af37b14ab026c3e2c7",
"body": "endpoint_discovery now resolves the settings path via Settings.settings_file\ninstead of raw System.user_home!, honoring the test home override.\n\nformatter_test, output_test, edit_test, and mcp_test stop mutating real VM\nenv (edit_test was already async and racing); output_test flips async.\nformatter_test and mcp_test stay sync: both mutate VM-global logger state.",
"is_bot": false,
"headline": "tests: migrate formatter/fitting/mcp-debug env vars to put_override",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-12T18:34:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ce724c0ed26eba00463a8870e5a34d823d4735d",
"body": "…on async\n\nFile.cd! in notes_test and worktree_test becomes the Globals-scoped project\nroot override (GitCli's effective_git_dir prefers it over cwd). FNORD_TOOL_-\nROUND_CAP and FNORD_LOGGER_LINES mutations become Util.Env.put_override.\nutil_test's capture_all silencers were dead (UI.debug is suppre\n[…]\n wait_until; save_test's poll fallback was latently broken (reduce_while\nreturn). skills_generate_test keeps its File.cd!: ResolveProject resolves raw\ncwd and is not override-aware (future seam work).",
"is_bot": false,
"headline": "tests: cd/env/sleep conversions; flip notes, worktree, util, completi…",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-12T18:05:08Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ce91fb3f96faf1bc51e7deb14b9e8b37cf67739e",
"body": "Util.Env reads now consult a Services.Globals-scoped override (put_override/2)\nbefore the real environment, so tests can vary env-driven behavior per process\ntree instead of racing async siblings with VM-global put_env. nil overrides\nexpress 'pretend unset'. Lookup goes through Globals.get_override \n[…]\nerver starts (escript startup reads\nenv ahead of Fnord.Instance) by treating the missing table as 'no root'.\nwait_until/1-3 in Fnord.TestCase replaces ad-hoc sleep/poll loops. Documented\nas gotcha 42.",
"is_bot": false,
"headline": "tests: Util.Env override seam + wait_until helper",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-12T18:05:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "249a052d3c9033eafb8222873375861f4dc5d9b8",
"body": "HOME race gone, so the git-fixture files no longer need serialization:\ngit_cli, index, file/notes, decomposer, worktree_ignored_files,\nsource_fallback, and the store/project fixture files. index_test's two\ncapture_all wrappers discarded their output (silencers from when index\noutput bypassed the UI mock); deleted. ai/notes_test and\ngit_cli/worktree_test stay sync - their File.cd! covers prod cwd\nresolution and needs the project_root_override seam instead.",
"is_bot": false,
"headline": "tests: flip git-fixture files async",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-12T15:50:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0147095223c423f4fd2f4a4cbf8c26410df2715e",
"body": "Per-test put_env(\"HOME\") was a VM-global write racing async tests, and\nmock_git_project wrote global gitconfig under it. HOME now points at one\nsuite-lifetime temp dir set in test_helper; per-test isolation rides the\n:test_home_override Globals key that Settings.get_user_home already\nconsults. init.defaultBranch comes from the static GIT_CONFIG_* env.",
"is_bot": false,
"headline": "tests: suite-static HOME; per-test home via Globals only",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-12T15:50:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7fa05a8f4cb6d84b0fcc38c722397adf525ec912",
"body": "No test uses meck anymore. Drop the dep, the safe_meck machinery and\nper-test defensive unloads in Fnord.TestCase, and the test_helper\nstartup. Gotcha 15 becomes the no-meck policy; stale meck analogies in\nGitCli docstrings and dev docs reworded.",
"is_bot": false,
"headline": "remove meck",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-12T15:31:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95892fb710dff2f18c6a700f0b53f5ee1fda2bfc",
"body": "Offload tests use the tree's real Services.TempFile; failure injection\nre-registers the instance entry with a dead pid (whereis nil-checks\nliveness, so fetch! raises into the offload rescue). Indexer e2e runs\nthe real AI.Tools.LongTermMemory against the mock project store; the\ntool-failure case injects a title that passes ScopePolicy but fails\nMemory.new validation. Both files now async.",
"is_bot": false,
"headline": "tests: convert completion offload and session indexer e2e off meck",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-12T15:31:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "267b276b2882782b06b6f91805c95613e74a3ee0",
"body": "Production.confirm probed :prim_tty directly, duplicating UI.is_tty?'s\n:auto path on the same device while ignoring its tree-scoped override.\nRouting through UI.is_tty? is behavior-identical in production and lets\ntests dictate interactivity via set_config(:is_tty, ...) - the old meck\non IO.gets onl\n[…]\nen by real stdin fed through a fresh UI.Queue started\ninside capture_io (gotcha 40); the Owl.Box and Logger mecks were\nvestigial - the facade routed to the output mock before reaching\nproduction code.",
"is_bot": false,
"headline": "ui output: confirm tty gate via UI.is_tty?; notification tests off meck",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T23:10:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1806e4ff2d6bc744c6b80598f3c84bf2d0746415",
"body": "The Owl.Spinner meck tested the quiet-skipped path artificially; the\nquiet posture exercises the same defensive rescue/catch wrapping for\nreal. The Owl.IO meck is replaced by starting a fresh UI.Queue inside\ncapture_io so its real rendered output is assertable. The UI.Queue meck\nforced an error shape that is unreachable through the real queue\n(rescue normalizes the :error class); the test is dropped with a\ncomment. ui_test and production_test flip to async.",
"is_bot": false,
"headline": "tests: convert ui/queue/production tests off meck",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T23:10:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1bbfd54dd998fe124f822d198bd7fc1b9503551e",
"body": "get_tools posture moves from meck-on-UI to the Globals config the UI\nfacade reads; the worktree gate scripts git state through the GitCli\nfacade. The validation describe drops its meck pile (Services.\nConversation, Interrupts, AI.Agent, Validation.Rules) for the real\nthing: a real conversation server, the real completion loop driven by\na canned file_edit_tool turn at the completion-API boundary, and a\nreal Validation.Rules run against changed-file state scripted via\nGitCli.status_short.",
"is_bot": false,
"headline": "tests: convert coordinator glue tools/validation to real flow",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T22:54:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60bf37194daf7a63e5645e8b2dbf92db8d6b87f3",
"body": "Notifier (osascript/notify-send/dunstify) and Cmd.Upgrade (escript\ninstall) shelled out via System directly - external mutations with no\nseam, testable only by mecking System itself. Util.Exec mirrors\nSystem.cmd/find_executable behind the :exec Globals key; tests get the\nloud unstubbed mock (same po\n[…]\ntify/upgrade tests convert to the new seam; upgrade\ndrops its Util/UI mecks too (real version from the app spec, scripted\nhex response at the HTTP boundary, confirm at the Output seam) and\ngoes async.",
"is_bot": false,
"headline": "exec: route outward-facing subprocess calls through Util.Exec seam",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T22:54:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a516d734ee2332f3c655e428a3b78b08401afd5b",
"body": "…facade\n\ngit status --short in validation/rules.ex was a raw System.cmd seam\nhole; the subprocess call and line splitting move into GitCli.Default\nbehind a status_short/1 callback, letting tests script changed-file\nstate through the existing git facade.",
"is_bot": false,
"headline": "git_cli: status_short; validation changed-file discovery through the …",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T22:54:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f3fbcb78a5cf17ebe3333062702b58267a4f41b",
"body": "… dispatch\n\nask_test, ask/worktree_test, git_cli/worktree_test, prime_test, and\nglue_completion_test drop :meck for real Services.Conversation and\nServices.Task GenServers, with the coordinator canned at the existing\n:agent_dispatcher seam. Worktree-flow tests seed real conversation\nfiles with worktree metadata and run --follow instead of mocking\nget_conversation_meta. Tests default the clipboard to an inert success\nstub so the ask flow never touches the developer's clipboard.",
"is_bot": false,
"headline": "tests: convert Services.Conversation cluster to real servers + canned…",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T22:23:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "efe84d0f6d38824c6c953514c397175d1e803eba",
"body": "The Clipboard hex dep shells out to pbcopy/xclip, so a copy is an\noutward-facing side effect. Narrow seam on the :clipboard Globals key,\ndefaulting to the passthrough in Util.Clipboard.Default.",
"is_bot": false,
"headline": "clipboard: route system clipboard writes through Util.Clipboard seam",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T22:23:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ce227d89f93ce7a95a23ef4cdc05c53290f14277",
"body": "Removes the suite-global :meck block in test_helper (MCP.Supervisor /\nHermes.Client.Base) and the per-file mecks it enabled:\n\n- services/mcp_test: the two self-mocking test/0 cases become real\n assertions over check_server_status assembly (facade-scripted runtime,\n real settings, real credentials \n[…]\na configured server (non-vacuous).\n- conversations_test flips async.\n\nmock_mcp_client/0 passes through to Default except start_supervisor,\nwhich must never boot the VM-global hermes stack from a test.",
"is_bot": false,
"headline": "tests: convert MCP cluster to Mox via MCP.Client facade",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T21:40:25Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1aaafe3917d190df92eb33c806ce5fcc58feec8d",
"body": "The VM-global MCP.Supervisor and per-server hermes client calls now go\nthrough an MCP.Client behaviour (Globals key :mcp_client) with the real\nimplementation in MCP.Client.Default: registration/aliveness checks,\nrescue/catch around hermes invocations, response unwrapping, and the\nstart-then-unlink supervisor dance. Services.MCP keeps orchestration;\nMCP.Tools-generated modules invoke tools through the facade. Replaces\nthe suite-global :meck on MCP.Supervisor and Hermes.Client.Base.",
"is_bot": false,
"headline": "mcp: route hermes runtime through MCP.Client facade",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T21:40:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad8d726b14afec7941f5ce4468fb116833106e48",
"body": "…tion",
"is_bot": false,
"headline": "docs: gotchas for init-time mock calls and empty-store project resolu…",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T20:28:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "24efa349fac8b8a6ca53077ba0640b156c7384ec",
"body": "conversations_test: the UI meck blanket (which redirected info/error to\nstderr for capture and scripted confirm) becomes Mox stubs at the\nUI.Output seam doing the same. The MCP.Supervisor test is untouched: it\nmanipulates the global meck installed by test_helper, which is the MCP\nstartup seam's problem, so the file stays sync.\n\ngate_test: async now; policy is configured by writing the real settings\nfile (per-test HOME) via Settings.update/4 instead of mocking the\nsettings reader.",
"is_bot": false,
"headline": "tests: convert conversations and approvals gate tests off meck",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T20:28:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d6090dd9182f26ba0fe6afb1abd5974f5cc182fd",
"body": "Flips async. Cleanup prompts are scripted at the UI.Output seam (puts\nand confirm carry the say/confirm traffic; warning_banner bypasses the\nseam and is asserted via captured stderr). The File.rm meck becomes a\nreal :eacces - removing write permission from the backup's directory -\nand the Store.get_project meck becomes a real unselected project via\nset_config(:project, nil).",
"is_bot": false,
"headline": "tests: convert backup_file_test to Mox and real failure modes",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T20:21:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f1d1b7b3b011073f24ffba5877d8633ace3fa848",
"body": "…laborators\n\nAll three drop their meck blankets (AI.Tools, Services.BackupFile,\nSearch.Files, Store, Store.Project) and flip async.\n\nsearch_test runs the real pipeline end to end: files written to the\nproject source, indexed through Cmd.Index with MockIndexer-canned\none-hot embeddings, ranked by the\n[…]\nhaped session (root override +\n:original_project_root) with only the gitignore check scripted at the\nGitCli.Worktree facade. AI.Tools.get_project/0 rejects empty store\ndirs, so setups seed files_root.",
"is_bot": false,
"headline": "tests: convert file search, contents, and info tool tests to real col…",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T20:14:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cd4bf3c767e058379a43d7fda7a2d0511df08278",
"body": "commit_indexer_test: git enumeration is canned at the GitCli facade; the\nindex_status-once regression now counts rev-list invocations via a\nsentinel, which observes the actual O(M)-forks cost the regression\nguards against. index_status, build_metadata, and write_embeddings run\nreal against the tmpdi\n[…]\n vector.\nThe index footer reflects real classification (no source repo, so\nindexed entries report as deleted). The fabricated index-state error is\nreplaced by a real :project_not_set propagation test.",
"is_bot": false,
"headline": "tests: convert commit indexer and commit search tests to Mox",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T20:07:13Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ec6ec5fb502683d222e6d2bf98b40a6483102c54",
"body": "Moves the rev-list / commit-meta / numstat subprocess calls (and their\noutput parsing) from Store.Project.CommitIndex into the GitCli facade as\ncommit_shas/2, commit_meta/2, and commit_numstat/2. CommitIndex keeps\ncandidate assembly: model stamping, drop logging, and the async fan-out.\n\nCloses the raw System.cmd seam hole that forced tests to meck System to\nscript commit history.",
"is_bot": false,
"headline": "git: route commit enumeration through GitCli",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T20:07:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ab7f4d097f9056dc500c3f587d757ab817617b0",
"body": "Adds GitCli.repo_root_at/1 and routes Cmd.Worktrees' view-path repo\nresolution through it - that was a raw System.cmd(\"git\", ...) outside\nthe GitCli boundary, and the reason two tests had to meck System\nitself.\n\nworktrees_test is now meck-free and async: conversations are written to\nthe real per-tes\n[…]\nits Services.Conversation meck (it scripts the\nconversation server; that layer has its own conversion track) but its\nGitCli.Worktree/Review mecks become facade mocks and the vestigial UI\nmeck is gone.",
"is_bot": false,
"headline": "tests: convert worktrees and ask-worktree tests to git mocks",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T19:06:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3f2c0a21852b94f2502c2fc06b26ed2995b3659e",
"body": "… mocks\n\nFirst consumers of the GitCli facade seams. edit_test and index_test are\nnow meck-free (edit_test flips async; index_test stays sync on the\nmock_git_project global-gitconfig write). commit_indexer_test keeps its\nCommitIndex/BgIndexingControl mecks for the Store track. The\nworktree_test roll\n[…]\nnversation stays mecked to produce the\nGenServer.call exit under test.\n\nAlso deletes index_test's leaked ':meck.new(Cmd.Index)' (created\nwithout expectations and never unloaded - the gotcha 15 shape).",
"is_bot": false,
"headline": "tests: convert edit, index, commit-indexer, and worktree tests to git…",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T18:56:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5ea6b59aff0bd5ddc217402c1411b6ac48f8a1cd",
"body": "GitCli, GitCli.Worktree, and GitCli.Worktree.Review become behaviours\nwhose public functions delegate through impl/0 (Globals keys :git_cli,\n:git_worktree, :git_review); the real System.cmd wrappers move to\nsibling Default modules. Facade delegation (vs the caller-side impl()\nconvention of the narro\n[…]\nls, preserving the\n:meck passthrough semantics the existing tests rely on. Tests opt in\nper test via mock_git_cli/mock_git_worktree/mock_git_review, which\npre-stub the mock to pass through to Default.",
"is_bot": false,
"headline": "git: facade seams over GitCli, Worktree, and Review",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T18:45:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "10be60ad23120579b29c68e6d3b0f54dce2db4a2",
"body": "All three drop to canned_completion with real collaborators and flip\nasync. Patcher runs against the real AI.Tools.get_file_contents (the\nfile exists in the mock project) with messages asserted at the wire,\nwhere the loop's agent-name message adds one to the counts. Accumulator\nruns the real AI.Spli\n[…]\n-test store - its happy-path 'returns :ok' assertion was a\nmeck fantasy (the real function returns the completion state), replaced\nwith assertions on the rebuilt state and the replayed stdout content.",
"is_bot": false,
"headline": "tests: convert patcher, accumulator, and replay tests off meck",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T17:42:23Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fa378ed8eab472a0f9874635e1d67477cfa23312",
"body": "AI.Agent.get_response/2's inner impl invocation now routes through\nAI.Agent.Dispatcher.impl().dispatch/2 (the :agent_dispatcher Globals\nkey). Tests canned-respond per agent module with canned_agent/1 while\nthe wrapper's bookkeeping (name checkout, task wrapping) runs for real.\nUnlike the http/comple\n[…]\n\nindex, session indexer e2e, file info, and glue completion tests -\nglue's verbosity regression now asserts at the wire layer, proving the\nflag survives the full trip through the real completion loop.",
"is_bot": false,
"headline": "ai: agent-dispatch boundary behind an injectable seam",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T17:30:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4937e8a1ef4ef478784753ffa54d0ed82a20c2b1",
"body": "The bare assert_receive flaked under --max-cases 64: a loaded scheduler\ndelays the spawned migration's file I/O past the default window. Every\nsibling DOWN-wait in the suite already carries an explicit timeout.",
"is_bot": false,
"headline": "tests: widen migration DOWN wait beyond the default 100ms",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T16:44:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31df49fb74278b927cbc87f5f4eb3310023df9ec",
"body": "tersify_msg's inner completion runs with compact?: false, so a message\ntoo large to tersify in one shot surfaces as the three-element\n{:error, :context_length_exceeded, usage} - a shape its case had no\nclause for. The tersify task crashed with CaseClauseError and took down\nthe completion that compac\n[…]\nching the tool's error mapping. Its\n'passes errors through unchanged' test asserted a bare\n{:error, :api_unavailable} the loop never produces; it now asserts the\nloop's actual unavailable-API message.",
"is_bot": false,
"headline": "compaction: tolerate context-length error when tersifying a message",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T16:44:07Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d9fe7f488be466f746ab307ca4230ce26e6717d0",
"body": "AI.CompletionAPI.get/6 is the model-call boundary: below it is wire\nconcerns (payload, auth, retry, transport), above it is the completion\nloop. The loop now calls through impl(), resolved per process tree via\nthe :completion_api Globals key. Fnord.TestCase routes the key to a Mox\nmock with no defau\n[…]\nrning the originals - which the assertions tolerated\n('tersified OR unchanged'). They now drive the real tersify and\nsummarize paths with canned responses and assert what compaction\nactually produces.",
"is_bot": false,
"headline": "ai: completion-api boundary behind an injectable seam",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T16:43:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ae1c52254e19192051e6b5646eceb37ae845d8f4",
"body": "…ller\n\nMCP.Tools lazily started a VM-globally-named Agent linked to whichever\nprocess called it first. Under per-test instances that owner is an\narbitrary test process, so the \"global\" registry died when that test\nfinished and concurrent tests crashed with no-process mid-call\n(seed-dependent; caught\n[…]\nded-check keeps\nre-registration idempotent.\n\ngotchas.md item 34 generalizes the rule: lazy whereis-then-start_link\nof a named process is item 33's check-then-create race plus a\ndied-with-creator link.",
"is_bot": false,
"headline": "mcp tools: boot with the instance roster, not lazily linked to the ca…",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T16:15:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "264d6123355a1a114f00efa426a7a8c5707bc0ff",
"body": "Http's retrying JSON helpers and the MCP OAuth/discovery modules called\nHTTPoison directly, so tests could only intercept the network by mecking\nHTTPoison VM-wide - forcing those files sync and leaving the network\nreachable from any unmocked path.\n\nHttp.Client is the single transport boundary: a beh\n[…]\ntration/client); 7 flip\nasync. discovery_test's Registration meck becomes a wire-level stub of\nthe RFC 7591 POST. endpoint_catchall drops a vestigial Store.APIUsage\nmeck that never set an expectation.",
"is_bot": false,
"headline": "http: route all transport through the injectable Http.Client seam",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-11T16:07:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3c4926d481da8690df2a29f6064a749b7a370794",
"body": "The UI.Output behaviour existed for exactly this, but 12 files mocked\nthe UI module itself via :meck - above the seam instead of at it. Tests\nnow expect/stub on UI.Output.Mock (Mox): choose/prompt/confirm map\none-to-one; info/error/report_from/feedback assertions match formatted\ncontent on log/2. TT\n[…]\nure (is_tty true, quiet false) that the bypass hid.\n\nNine of the twelve flip async; formatter/output tests stay sync (env\nmutation) and ui_tools stays sync (global logger level). meck files:\n66 -> 55.",
"is_bot": false,
"headline": "tests: convert UI mecks to the UI.Output seam",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-10T22:19:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b3456421457a2454b619eb0d195b35b47d853516",
"body": "stale_lock_age_ms treated a failed stat as 'stale', but under healthy\ncontention ENOENT is routine: the holder renames the lock dir away on\nrelease, right between a contender's mkdir EEXIST and its staleness\ncheck. The contender then entered attempt_stale_takeover, whose rename\nsteals whatever sits \n[…]\nc6, 7a231f6a). A\nmissing lock dir means the lock is free: report fresh and let the retry\nloop's mkdir win it honestly. The takeover path now fires only on\ngenuinely old lock dirs, i.e. crash recovery.",
"is_bot": false,
"headline": "file_lock: missing lock dir is free, not stale",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-10T22:19:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cc79498881ba5359e188976f9667dddfb8367843",
"body": "Eligibility: no meck, no subprocess/git fixtures, no File.cd, no\ncapture_log assertions, no Process.sleep, no env mutation, no\ncapture_all/stderr capture, no Logger.configure, no persistent_term.\nVerified across five randomized seeds plus make check.\n\nWall-clock is barely moved (the flipped files we\n[…]\ncoped\nisolation under real concurrency. Remaining sync population: meck users\n(pending the Mox conversion track), subprocess/git tests (pending\nper-call env), and a handful of global-state stragglers.",
"is_bot": false,
"headline": "tests: flip 81 conservatively-eligible files to async: true",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-10T21:17:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "62d4d41bb9924888962bb4993f9f3eef67893bc5",
"body": "Check-then-:ets.new on a named table races under concurrent tests (both\ncallers see :undefined; the loser raises, and under max_restarts: 0 that\nkills the whole instance and fails an unrelated test). The table is also\nowned by whichever process created it, vanishing when that process exits -\nunder p\n[…]\noth offenders:\nServices.Notes' :notes_status pending counter and AI.Tools.Cmd's\ntool-availability memo. Surfaced by the first concurrent suite runs as\nseed-dependent failures in rotating victim tests.",
"is_bot": false,
"headline": "globals: race-free shared ETS tables via ensure_shared_table",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-10T21:17:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "86354be2ba2e476c6a1f7ef4f89d6c6fab6ae78f",
"body": "The suite cannot catch a broken production boot: test_helper starts\nfoundational services for the whole VM, so a missing start in the prod\npath passes every test and crashes the binary on any invocation. Boot the\nbuilt escript once (HOME-isolated) and require exit 0; -h is sufficient\nbecause main/1 boots the instance before CLI parsing. Mirrored as a CI\nstep since CI invokes mix directly rather than make check.",
"is_bot": false,
"headline": "make check: boot-check guard for prod boot regressions",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-10T20:57:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d71c9a9b74aa7537200c1938fe7cfe7713e9b70c",
"body": "Three changes gate async: (1) the using-block's bare 'use ExUnit.Case'\ndiscarded the caller's async option (ExUnit.CaseTemplate already forwards\nit) - removed; (2) static env vars move to test_helper, set once per VM\nwith no restore, because per-test on_exit deletes would yank VM-global env\nout from\n[…]\ns allowances\nautomatically after boot.\n\nThe seven bare-ExUnit.Case files convert to Fnord.TestCase: five\nhazard-free ones run async (the canaries for this plumbing); the two\nmeck-using ones stay sync.",
"is_bot": false,
"headline": "tests: async-capable Fnord.TestCase",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-10T20:57:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "516624cb4f7830f8e71804329ea313e5ed6c3257",
"body": "The session-indexer tests carried whereis/already_started/on_exit dances\nfrom the era of one VM-global MemoryIndexer shared across the suite. With\nper-test trees, the indexer is never running at test start and dies with\nthe test process; each defensive block collapses to a plain start_link.",
"is_bot": false,
"headline": "tests: drop lifecycle scaffolding obsoleted by per-test services",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-10T20:57:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7e17ac2640468986db4738c4bf4ddf0729196edc",
"body": "Fnord.Instance.start_link/1 is the single boot path: it starts Globals\n(the one legitimately VM-global service), installs the caller as the tree\nroot, applies config overrides, and supervises the full service roster\nwith max_restarts: 0 (any service death kills the instance and its owner,\nmatching t\n[…]\nt institutionalized in gotchas: the suite cannot catch prod boot\nregressions because test_helper boots Globals for the VM. Verified by\nescript smoke test, which caught exactly that during this change.",
"is_bot": false,
"headline": "boot: unify prod and test startup through Fnord.Instance",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-10T20:57:06Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6e56534fe1e3439fdfa96ca6034c5f67a7620b1c",
"body": "The coordinator restarted the Approvals GenServer 'to pick up edit mode',\nbut Approvals.init reads no config - the impl is resolved at confirm-time.\nThe restart's only real effect was discarding session-scoped grants, which\nis a legitimate session-boundary operation. Make it explicit:\nreset_session/\n[…]\n the same stop/start dance.\n\nProcess restarts of roster services are about to become fatal (the\ninstance supervisor runs with max_restarts: 0), so state resets must be\nAPI calls, not lifecycle events.",
"is_bot": false,
"headline": "approvals: session reset API replaces restart hack",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-10T20:56:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "de807ba3fa5e0820c473d49788181b5c428efb61",
"body": "Every service that registered under name: __MODULE__ now starts unnamed\nand registers via Services.Instance; module APIs resolve their instance\nthrough the caller's process tree. Instance.call preserves crash-on-missing\nsemantics; Instance.cast preserves cast-to-unregistered silent no-op.\nNotes' pen\n[…]\n tests\nspawning service-calling processes use Task.start so the child carries\n$ancestors. Per-test service resets (NamePool.reset, BackupFile.reset)\ndropped where per-test freshness makes them no-ops.",
"is_bot": false,
"headline": "services: convert named singletons to tree-scoped registration",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-10T20:56:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fb7da30904d4d732cf7d98f4a832c6e787b0321c",
"body": "Services register their pid under the current Globals root instead of a\nVM-global atom name, so process trees (tests, instance checkouts) each get\ntheir own copy. Registry entries ride the Globals data table and are wiped\non root death. get_override/3 reads tree-local-only (Application.get_env\ndepre\n[…]\ns;\nget_all_env/1 filters to atom keys to keep Keyword semantics. put_all_env's\nunused list-shape clause deleted (its spec didn't cover the surviving\nshape, which dialyzer flagged as a contract break).",
"is_bot": false,
"headline": "globals: tree-scoped service registry (Services.Instance)",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-10T20:55:44Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c48c1ab7c19626be586d4b6aefec0b838086a7df",
"body": null,
"is_bot": false,
"headline": "version bump",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-10T16:30:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ed089831f7acf468d53f3f1038e51b4d3add8814",
"body": "… sent for websocket too",
"is_bot": false,
"headline": "mcp oauth: comment matched neither behavior nor RFC 8707; resource is…",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-10T16:16:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "31d282e7947d2b31406d30b0c04065da8179bacb",
"body": null,
"is_bot": false,
"headline": "heal warning: composed heal covers more than tool arguments",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-10T16:16:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b7c0ba7806f050cc981c2355525476f32d015de",
"body": null,
"is_bot": false,
"headline": "skill agent: model=web must attach the web_search tool entry",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-10T16:16:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d33a3afb5ecf444de2d09b695f298f75b9ae8b6a",
"body": null,
"is_bot": false,
"headline": "make bump: patch-bump mix.exs and commit it as 'version bump'",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-09T20:50:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dfda0f0224175587a8bd797e20762af41bf7949d",
"body": "…completions leftover",
"is_bot": false,
"headline": "models: restore gpt-5.4 reasoning levels; ignored-arg pin was a chat-…",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-09T19:43:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "377db92ddf24d21857e1ae0235064a095106f3e0",
"body": null,
"is_bot": false,
"headline": "docs: FNORD_NO_LOWFAT and the lowfat auto-wrap behavior",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-09T19:42:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "49c0ec5a4bfbf22e07f423546f97c7d6ee8fae19",
"body": "…ith the v1 writer",
"is_bot": false,
"headline": "conversation format: per-writer tmp names; sync heal docs and tests w…",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-09T19:42:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bfaaa85c932c433762aabde8d7b354c502dcd639",
"body": "…o the queue",
"is_bot": false,
"headline": "ui_queue: nested interact from the queued path must not call back int…",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-09T19:42:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d25c37116246716e084d6f55f1bc83d1d4b9a597",
"body": null,
"is_bot": false,
"headline": "mcp http transport: request base_url verbatim when no mcp_path set",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-09T18:33:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc08228394012a5a11897e3f2865f7c89c0a488b",
"body": "…t_uri host form",
"is_bot": false,
"headline": "mcp oauth: send RFC 8707 resource param; align token-exchange redirec…",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-09T18:33:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9014d563cdd6b542df587b47a0e1a567d2bb8635",
"body": null,
"is_bot": false,
"headline": "gotchas: update #28 now that docs-check is in make check",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-09T16:54:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4c895555706515aa985addf586fb77cf6741c61a",
"body": "…roken autolinks",
"is_bot": false,
"headline": "make check: add docs-check (mix docs --warnings-as-errors) to catch b…",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-09T16:54:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4dadcf2dba609aa3e7fa71823c91d1b01e763cc3",
"body": "…o CI",
"is_bot": false,
"headline": "gotchas: note make check skips mix docs, doc autolink failures slip t…",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-09T16:50:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6e4c22795bd4c02620404a794257db822c01304c",
"body": "…/0 callback",
"is_bot": false,
"headline": "params: fix doc autolink to nonexistent Frobs.spec/1 -> AI.Tools spec…",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-09T16:49:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0cfd5769610ee7034c5aaebb2cf2e882ce9129f6",
"body": "…both)",
"is_bot": false,
"headline": "external-configs nudge: name where detected files live (home/project/…",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-09T16:36:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d5bb6c7837ca5201e9e29da344b1a2156f953bf9",
"body": null,
"is_bot": false,
"headline": "embeddings: reframe cold-start build noise as benign, not warnings",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-09T16:06:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d3fc145d26a88092028e61de214140b5561773bc",
"body": null,
"is_bot": false,
"headline": "fix: clear Elixir 1.20 type warnings; bump meck for OTP 29",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-09T15:53:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "244576d2fa95e047d6be5b2b0aa9419272307fed",
"body": null,
"is_bot": false,
"headline": "cmd_tool: optionally filter output through lowfat when installed",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-09T15:36:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "86cb90796c6f81ec25d2aadd0c866fa0e66eec63",
"body": null,
"is_bot": false,
"headline": "Tighten README and OAuth discovery docs",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-05T23:01:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7f278403d7d3d7dd0482f34d9baa1ca260f06f06",
"body": null,
"is_bot": false,
"headline": "Update stale user docs and code comments",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-05T22:36:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db37f613008388bac06f142f0c1bca9d7f99475f",
"body": "Real bug surfaced by a follow-up reviewer pass: when a v0 file needed\nBOTH heals (legacy task list shape + tool-call args stored as decoded\nmap), each pass persisted independently. The second write built its\nJSON from data the first pass had repaired in memory but NOT threaded\nforward, so the second\n[…]\nAND map-\n shaped tool args persists v1 with both repairs intact (the case\n that would have clobbered before).\n- clean-v0 no-op: a fully-canonical v0 file stays v0 on disk - no\n spurious heal-write.",
"is_bot": false,
"headline": "heal-on-read: compose passes purely, persist once",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-05T21:17:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7869dd4fec2828f5254e15f5e8901acebd428dd3",
"body": "A code-review pass surfaced four \"high confidence\" findings that all\ndissolved on inspection: 429 binary-body guard, raw-map message catch-all,\ntool-spec contract shape, and timeout_ms not being in `required`. Each\nsite is correct as written, but the implicit contract that makes it\ncorrect wasn't vi\n[…]\nmeters: notes tool-spec schemas are NOT strict-validated\n unless we opt in with strict: true (we don't), unlike agent\n @response_format schemas which ARE strict (gotchas.md #24)\n\nNo behavior change.",
"is_bot": false,
"headline": "clarify intent at the false-positive sites a reviewer flagged",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-05T21:05:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3c6affa5ede9637cd91defcea17a335e5adc5101",
"body": "TaskListStatusMigration.heal_and_maybe_write/3 previously rewrote\nhealed v0 files BACK as v0 (keeping the <ts>: prefix), while the\nsibling heal_tool_call_arguments/3 emitted v1. Result: on-disk\nformat after heal was non-deterministic depending on which pass\nfired. Surface area was small (both readab\n[…]\nath now lives in Format.\n\nRegression test in format_test.exs parallels the existing\ntool-call-args heal test: v0 file with legacy bare-list tasks is\nrewritten as v1, in-memory data hydrates correctly.",
"is_bot": false,
"headline": "heal-on-read writes are deterministically v1 across both passes",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-05T21:05:30Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "84b23ca3b6dfb9971636653c9674c806ba42c523",
"body": null,
"is_bot": false,
"headline": "tune models again",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-05T20:21:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "68ffc2c545f190c8b58d3eefdb812b9b028eee5a",
"body": "AI.Tools.perform_tool_call/3 JSON-encodes any structured (list/map)\nreturn from call/1 before propagating to the rest of the pipeline,\nso the `result` arg passed to ui_note_on_result/2 is a string, not\nthe raw list. ListProjects.ui_note_on_result/2 was calling length/1\non it, crashing with ArgumentE\n[…]\necode the result and count. Defensive fallbacks for\nnon-list-shaped JSON and outright invalid JSON.\n\nTest updated to use the actual production-shaped string, plus two\nnew tests for the fallback paths.",
"is_bot": false,
"headline": "list_projects_tool: ui_note_on_result handles the JSON-encoded result",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-05T20:19:40Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "54eb51f576a5146d62ce96ae75fae7f6eac90c36",
"body": "When a caller is already in a UI context (Services.Approvals takes\nthis path via run_from_genserver), UI.Queue.interact/3 runs the\ninteraction inline in the caller's process instead of going through\nthe GenServer. The inline branch never set paused_logs: true on the\nGenServer state, so concurrent {:\n[…]\nh on the outermost\n unpause.\n\nTests use :error level - OTP Logger's default primary level is\n:notice in test runs, which would otherwise filter :info/:debug\nbefore the custom capture handler sees it.",
"is_bot": false,
"headline": "ui_queue: fast-path interact must pause logs too",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-05T20:07:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cbfaec32f76daf540e6f1f52e10dcdfa2aa41258",
"body": "…mode\n\nOpenAI's /v1/responses structured-output validator rejects any\njson_schema where `required` doesn't list every key in `properties`.\nChat Completions used to silently accept partial-required schemas;\nResponses surfaces it as:\n\n Invalid schema for response_format 'X': In context=(), 'require\n[…]\nin arrays\ntoo). New agents with schemas register in the test's @single_accessor\nor @multi_accessor list.\n\ngotchas.md #24 captures the rule and the nullable-union pattern for\ngenuinely-optional fields.",
"is_bot": false,
"headline": "schemas: every property must be in `required` under Responses strict …",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-05T19:31:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b27cd5fd7a874a4c28c1f7f06c29962db04c7cce",
"body": "Each retry honors OpenAI's \"try again in X\" hint; on a saturated 60s\nrolling TPM window with a jumbo single request (20%+ of cap), 3\nattempts spread across ~10-12s can't outwait the bucket draining.\n8 attempts give us ~30-60s of envelope, which covers the worst case\nwithout changing per-attempt behavior. No-op if retries succeed earlier.",
"is_bot": false,
"headline": "endpoint: raise retry cap from 3 to 8",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-05T19:31:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6621d343b0fac61e46f85b2526e35160114dc743",
"body": "The module docstring still narrated the rollout in present tense as if\nthis build were Phase 1b (\"Ship a build (this one - Phase 1b)\" /\n\"writer continues to emit v0\"). The writer flipped to v1 in fbfca94f\ntwo phases ago. The \"Heal-on-read\" section also claimed heal \"persists\nthe repaired v0 shape ba\n[…]\nnse, mark Phase 2c as current,\nand explain why heal rewrites as v1. No code change.\n\nSurfaced by a code-review pass that read the stale doc against current\ncode and flagged the apparent contradiction.",
"is_bot": false,
"headline": "format.ex: docstring describes Phase 2c reality, not Phase 1b",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-05T18:57:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c2f17e157e00a3645771c1fdcb12db44e0e3e6a9",
"body": "Was: count %AI.Message.FunctionCall{} structs + legacy nested tool_calls.\n\nProblem: the canonical tool round emits a FunctionCall (request) +\nFunctionCallOutput (result) pair, both carrying the same call_id. The\nold code only recognized one half (the request). The pair is appended\natomically today, \n[…]\ners don't\nsilently drop the signal. Legacy nested-tool_calls counting unchanged.\n\n5 new tests covering paired, request-only, output-only, multi-call_id\nsame-function, and canonical+legacy mixed cases.",
"is_bot": false,
"headline": "completion: tools_used/1 dedupes by call_id, not by struct kind",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-05T18:39:21Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "05c1dc2906d4a67ea5686285143ca441216956b9",
"body": null,
"is_bot": false,
"headline": "coordinator: note the terminal-UI runtime in the base prompt",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-05T18:29:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "991a38e90645a2b0324756e947d5ecec8142e1c5",
"body": "The mutex check on branch/pr/range used Enum.filter on bare Elixir\ntruthiness. In Elixir, \"\" and 0 are truthy - only nil and false are\nfalsy. OpenAI's tool-call generator emits type-default placeholders\n(\"\" for strings, 0 for integers) for optional params instead of\nomitting them, so calls like {bra\n[…]\n (e.g. branch=\"X\",\npr=0, range=\"\") so the retry loop can self-correct if a real\nmulti-set ever happens.\n\nAdd gotcha #24 - this is exactly the kind of non-obvious failure\nthat will re-trip future devs.",
"is_bot": false,
"headline": "reviewer_tool: treat LLM-style placeholder values as absent",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-05T18:28:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "627155b1428042cfc918bd2c0d1e5dd89449f312",
"body": "Deduplicator does binary classification (merge yes/no) on ~1-2k token\ninputs. AI.Model.large_context() routed it to gpt-4.1, whose 30k TPM\ncap is too tight for the deep-sleep burst: even with max_concurrency: 2,\nthe rolling window saturates and the 3-attempt retry budget can't\noutwait it.\n\nAI.Model.fast() (gpt-5.4-mini) sits on a much higher TPM quota and is\nplenty for the task. Eliminates the \"Deduplication failed\" warnings at\nshutdown.",
"is_bot": false,
"headline": "memory dedup: use the fast tier, not the flagship",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-05T17:03:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9634730aef0ef057de23181c48f3a3b29ea6bf3f",
"body": "OpenAI's Responses API exposes web search via {type: \"web_search\"}; the\nold {type: \"web_search_preview\"} stays around as a legacy form only.\nSwitch the tool entry to the canonical name. Point AI.Model.web_search()\nat gpt-5.4-nano - the SKU-style \"model that does web search\" pattern is\ndead under Responses, any normal model + the tool works.\n\nDrop the now-redundant gpt5_web/0 factory (only web_search/0 called it).\nAdd a gotcha entry documenting the model-plus-switch contract for future\ncallers.",
"is_bot": false,
"headline": "web search: use canonical web_search tool + gpt-5.4-nano",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-05T16:53:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "025ba9440b5c97da19e61c03ed1d66c95a1f1016",
"body": null,
"is_bot": false,
"headline": "tune model choices",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-05T16:40:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13de43434a673699eeac75da2a067656c29e4f74",
"body": "Default async_stream concurrency (schedulers_online) × @deep_sleep_passes\ngenerated TPM storms on gpt-4.1 that the 3-attempt retry budget couldn't\nabsorb, leaking as \"Deduplication failed\" warnings. Dedup is background;\ntrade a few seconds of wall time for actually completing the merges.",
"is_bot": false,
"headline": "memory_indexer: cap deep-sleep dedup concurrency at 2",
"author_name": "Jeff Ober",
"author_login": "sysread",
"committed_at": "2026-06-05T16:30:28Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 0,
"commits_last_year": 1434,
"latest_release_at": null,
"latest_release_tag": null,
"releases_from_tags": false,
"days_since_last_push": 36,
"active_weeks_last_year": 46,
"days_since_latest_release": null,
"mean_days_between_releases": null
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 42,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "fnord",
"exists": true,
"license": "MIT",
"keywords": [],
"ecosystem": "hex",
"matches_repo": true,
"registry_url": "https://hex.pm/packages/fnord",
"is_deprecated": false,
"latest_version": "0.9.40",
"repository_url": "https://github.com/sysread/fnord",
"versions_count": 221,
"total_downloads": 26117,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 2008,
"first_published_at": "2024-09-27T21:48:15.366880Z",
"latest_published_at": "2026-06-23T21:40:32.110875Z",
"latest_version_yanked": null,
"days_since_latest_publish": 36
}
]
},
"popularity": {
"forks": 5,
"stars": 41,
"watchers": 3,
"fork_history": {
"days": [
{
"date": "2024-12-06",
"count": 1
},
{
"date": "2025-01-21",
"count": 1
},
{
"date": "2025-05-07",
"count": 1
},
{
"date": "2025-06-21",
"count": 1
},
{
"date": "2025-08-03",
"count": 1
}
],
"complete": true,
"collected": 5,
"total_forks": 5
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": true,
"bootstrap_files": [
"Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"mix.exs"
],
"largest_source_bytes": 55653,
"source_files_sampled": 490,
"oversized_source_files": 0,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 2050
},
"dependencies": {
"manifests": [
"mix.exs"
],
"advisories": {
"error": "No resolved dependencies to assess",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"hex"
],
"dependencies": [
{
"name": "briefly",
"manifest": "mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 0.5.1"
},
{
"name": "clipboard",
"manifest": "mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 0.2.1"
},
{
"name": "finch",
"manifest": "mix.exs",
"ecosystem": "hex",
"version_constraint": ">= 0.19.0 and < 0.22.0"
},
{
"name": "hermes_mcp",
"manifest": "mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 0.14"
},
{
"name": "httpoison",
"manifest": "mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 2.2.1"
},
{
"name": "jason",
"manifest": "mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 1.4"
},
{
"name": "optimus",
"manifest": "mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 0.2"
},
{
"name": "owl",
"manifest": "mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 0.12"
},
{
"name": "stemmer",
"manifest": "mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 1.2"
},
{
"name": "toml",
"manifest": "mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 0.7"
},
{
"name": "uniq",
"manifest": "mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 0.1"
},
{
"name": "yaml_elixir",
"manifest": "mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 2.9"
},
{
"name": "plug_cowboy",
"manifest": "mix.exs",
"ecosystem": "hex",
"version_constraint": "~> 2.7"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [],
"collected": true,
"truncated": false,
"total_count": 0,
"direct_count": 0,
"indirect_count": 0
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 6,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 3,
"closed_unmerged_prs": 4
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "sysread",
"commits": 2374,
"avatar_url": "https://avatars.githubusercontent.com/u/83381?v=4"
},
{
"type": "User",
"login": "martinlocklear",
"commits": 2,
"avatar_url": "https://avatars.githubusercontent.com/u/59375704?v=4"
},
{
"type": "User",
"login": "claude",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/81847?v=4"
}
],
"contributors_sampled": 3,
"top_contributor_share": 0.999
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"run-tests.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"mix.lock"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "26 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "b81ab166d346bedfd8290d15d173990dfff79839",
"ran_at": "2026-07-30T15:46:37Z",
"aggregate_score": 3.1,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-06-23T21:41:31Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-02-03T00:07:43Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/sysread/fnord",
"host": "github.com",
"name": "fnord",
"owner": "sysread"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": "The weighted overall 51 is calibrated to 51 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 51,
"calibrated": 51,
"calibration": "2026-08-02"
}
}
],
"value": 51,
"inputs": {
"security": 31,
"vitality": 47,
"community": 44,
"governance": 57,
"calibration": "2026-08-02",
"engineering": 70,
"ai_readiness": 56,
"weighted_overall_raw": 51
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "weak",
"name": "Vitality",
"value": 47,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 78,
"inputs": {
"commits_last_year": 1434,
"human_commit_share": 1,
"days_since_last_push": 36,
"active_weeks_last_year": 46
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 36 days ago",
"points": 18,
"status": "partial",
"details": [
{
"code": "push_recency",
"params": {
"days": 36
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "46/52 weeks with commits",
"points": 31.8,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 46
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "1434 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 1434
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "critical",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"releases_count": 0
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "no releases published",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases_published",
"params": {}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "no releases",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases",
"params": {}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "no releases",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_releases",
"params": {}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 41,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 41 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 41
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "weak",
"name": "Community & Adoption",
"value": 44,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 33,
"inputs": {
"forks": 5,
"stars": 41,
"watchers": 3,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "41 stars",
"points": 26,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 41
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "5 forks",
"points": 5,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 5
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "3 watchers",
"points": 1.7,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 3
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 55,
"inputs": {
"packages": [
"fnord"
],
"dependents": null,
"ecosystems": "hex",
"total_downloads": 26117,
"monthly_downloads": 2008
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "2,008 downloads/month across hex",
"points": 44,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 2008,
"ecosystems": "hex"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 57,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 16,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 3,
"top_contributor_share": 0.999
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "3 contributors",
"points": 4.1,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 3
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 69,
"inputs": {
"merged_prs": 6,
"open_issues": 0,
"closed_issues": 3,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 4,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 42,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "6/10 decided PRs merged",
"points": 18,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 6,
"decided": 10
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 58,
"inputs": {
"followers": 37,
"owner_type": "User",
"is_verified": null,
"owner_login": "sysread",
"public_repos": 82,
"account_age_days": 6288
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "37 followers of sysread",
"points": 11.4,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 37,
"login": "sysread"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "82 public repos, account ~17 yr old",
"points": 25,
"status": "met",
"details": [
{
"code": "public_repos",
"params": {
"count": 82
}
},
{
"code": "account_age_years",
"params": {
"years": 17
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"fnord"
],
"ecosystems": "hex",
"any_deprecated": false,
"min_days_since_publish": 36
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on hex",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "hex"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 36 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 36
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "221 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 221
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 70,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 60,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"topics": [
"ai",
"code",
"database",
"elixir",
"embedding",
"gpt",
"index",
"llm",
"openai",
"search",
"vector",
"vectordb"
],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "12 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 12
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 31,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 31,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 15,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 3,
"scorecard_aggregate": 3.1
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "26 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 2
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 56,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.7,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 2050
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "70 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 37.3,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 70,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"mix.lock"
],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [
"Makefile"
],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [],
"agent_commit_share": 0,
"toolchain_manifests": [
"mix.exs"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 100",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"primary_language": "Elixir",
"largest_source_bytes": 55653,
"source_files_sampled": 490,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Elixir without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "Elixir"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/490 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 490,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"example_dirs": [],
"has_mcp_signal": true,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 20,
"status": "met",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"top": [
"library"
],
"labels": [
"library"
],
"scores": {
"library": 6,
"mcp-server": 3
},
"primary": "library",
"evidence": [
{
"tier": "distribution",
"label": "library",
"source": "registry:hex",
"weight": 6
},
{
"tier": "structure",
"label": "mcp-server",
"source": "mcp_signal",
"weight": 3
}
],
"artifacts": [],
"confidence": "medium",
"host_extension": false,
"runs_as_process": false,
"consumed_by_code": true
},
"metrics_version": "2.5.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token"
],
"report_type": "repository",
"generated_at": "2026-07-30T15:46:43.278343Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/sysread/fnord.svg",
"full_name": "sysread/fnord",
"license_state": "standard",
"license_spdx": "MIT"
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with sysread/fnord. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.5.0, schema v0.27.0 — full methodology · metrics wiki.
