tfcace/hash holds a health index of 69 out of 100, placing it in the Good band. It scores highest on Engineering Quality (89/100) and lowest on Community & Adoption (37/100). It was last updated today. A single contributor accounts for most of its recent work.
69
overall / 100
Good
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.
69
Exceptional93-100The record's top tier (≈ top 5%); essentially all checked criteria met
Excellent80-92Strong across the board; minor gaps
Good65-79Healthy; gaps are limited and manageable
Moderate50-64Acceptable with notable gaps; review recommended
Weak35-49Material weaknesses across several areas
At Risk20-34Significant weaknesses; adoption warrants caution
Critical1-19Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
The weighted overall 62 is calibrated to 69 on the published index scale (record calibration 2026-08-02).
How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
Star and fork history 0 ★ / 4 ⇿
0Stars
4Forks
11Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 6Patch 5
OpenSSF Scorecard 5.1 / 10
5.1aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-25 04:34 UTC
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [
"acp",
"agent-client-protocol",
"ai",
"bubbletea",
"claude-code",
"cli",
"gemini-cli",
"golang",
"llm",
"local-first",
"ollama",
"posix",
"shell",
"terminal",
"tui",
"cursor"
],
"is_fork": false,
"size_kb": 978,
"has_wiki": true,
"homepage": "https://runhash.dev",
"languages": {
"Go": 1526410,
"Shell": 5790
},
"pushed_at": "2026-07-24T04:56:59Z",
"created_at": "2026-01-03T19:35:51Z",
"owner_type": "User",
"updated_at": "2026-07-22T17:58:05Z",
"description": "A POSIX shell with AI in the grammar: type ?? to drive Claude Code, Cursor CLI, Gemini CLI, or Ollama over ACP. Local-first, no login, no telemetry.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "master",
"license_spdx_raw": "MIT",
"primary_language": "Go",
"significant_languages": [
"Go"
]
},
"owner": {
"blog": null,
"name": "Assaf Schwartz",
"type": "User",
"login": "tfcace",
"company": "Sayari",
"location": null,
"followers": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/58393187?v=4",
"created_at": "2019-12-01T14:05:53Z",
"is_verified": null,
"public_repos": 12,
"account_age_days": 2427
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.7.1",
"kind": "patch",
"published_at": "2026-07-18T19:27:52Z"
},
{
"tag": "v0.7.0",
"kind": "minor",
"published_at": "2026-06-20T15:56:01Z"
},
{
"tag": "v0.6.1",
"kind": "patch",
"published_at": "2026-06-17T11:43:14Z"
},
{
"tag": "v0.6.0",
"kind": "minor",
"published_at": "2026-06-12T10:52:54Z"
},
{
"tag": "v0.5.1",
"kind": "patch",
"published_at": "2026-06-05T06:35:46Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2026-05-26T10:16:39Z"
},
{
"tag": "v0.4.3",
"kind": "patch",
"published_at": "2026-01-31T21:28:35Z"
},
{
"tag": "v0.4.2",
"kind": "patch",
"published_at": "2026-01-31T17:49:29Z"
},
{
"tag": "v0.4.1",
"kind": "patch",
"published_at": "2026-01-29T20:21:42Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2026-01-29T19:40:27Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2026-01-26T10:49:45Z"
},
{
"tag": "v0.2.0",
"kind": "minor",
"published_at": "2026-01-24T09:21:49Z"
},
{
"tag": "v0.1.2",
"kind": "patch",
"published_at": "2026-01-23T19:20:43Z"
},
{
"tag": "v0.1.1",
"kind": "patch",
"published_at": "2026-01-23T19:16:29Z"
}
],
"recent_commits": [
{
"oid": "2dd186d810fa16c9ac92cad30523844be57f6fb7",
"body": null,
"is_bot": false,
"headline": "docs: document Cursor CLI agent setup",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-07-18T19:49:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3c27f0a8ccd1e4ac4b51163ab4f6bd59267f141f",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(master): release 0.7.1 (#76)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-07-18T19:26:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "781795075718d180cf76ba99ecd91cbce71f9dcf",
"body": "Two streaming-render bugs made the ?? output look mangled:\n- ACP concatenated assistant text blocks that were split by a tool call\n with no separator, gluing them together (investigate.jj does see).\n Insert a paragraph break when text resumes after tool activity.\n- the streaming markdown renderer \n[…]\n Properly parse the agent command, resolve the program name with the same ParsedCommand logic the transport uses before the PATH lookup, and add a regression test. This unlocks using Cursor's CLI ACP.",
"is_bot": false,
"headline": "fix(acp): various ACP fixes (#82)",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-07-18T19:23:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "98875fe6936a6bb01603b51cffdb4b58fb5daaa8",
"body": "Bumps [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) from 1.14.46 to 1.14.48.\n- [Release notes](https://github.com/mattn/go-sqlite3/releases)\n- [Commits](https://github.com/mattn/go-sqlite3/compare/v1.14.46...v1.14.48)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/matt\n[…]\nirect:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "deps: bump github.com/mattn/go-sqlite3 from 1.14.46 to 1.14.48 (#79)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-18T19:20:51Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "09bec3389e51e78f7875401955d8bca2778122ad",
"body": "Bumps [github.com/pelletier/go-toml/v2](https://github.com/pelletier/go-toml) from 2.4.0 to 2.4.3.\n- [Release notes](https://github.com/pelletier/go-toml/releases)\n- [Commits](https://github.com/pelletier/go-toml/compare/v2.4.0...v2.4.3)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/pelle\n[…]\nirect:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "deps: bump github.com/pelletier/go-toml/v2 from 2.4.0 to 2.4.3 (#78)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-18T19:16:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "af067e6742d99f7cb00170532d75430cb0d94102",
"body": "Bumps [github.com/mattn/go-runewidth](https://github.com/mattn/go-runewidth) from 0.0.23 to 0.0.24.\n- [Commits](https://github.com/mattn/go-runewidth/compare/v0.0.23...v0.0.24)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/mattn/go-runewidth\n dependency-version: 0.0.24\n dependency-type:\n[…]\nirect:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "deps: bump github.com/mattn/go-runewidth from 0.0.23 to 0.0.24 (#74)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-18T19:15:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "fc329129a98b076254a9e75ce5bb2231eecdfcb1",
"body": "Bumps [charm.land/lipgloss/v2](https://github.com/charmbracelet/lipgloss) from 2.0.4 to 2.0.5.\n- [Release notes](https://github.com/charmbracelet/lipgloss/releases)\n- [Commits](https://github.com/charmbracelet/lipgloss/compare/v2.0.4...v2.0.5)\n\n---\nupdated-dependencies:\n- dependency-name: charm.land\n[…]\nirect:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "deps: bump charm.land/lipgloss/v2 from 2.0.4 to 2.0.5 (#80)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-18T19:10:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e865245b7f0fb8db46c71e7bc1a7490329d29225",
"body": "Bumps [actions/setup-go](https://github.com/actions/setup-go) from 6 to 7.\n- [Release notes](https://github.com/actions/setup-go/releases)\n- [Commits](https://github.com/actions/setup-go/compare/v6...v7)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-go\n dependency-version: '7'\n depen\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "ci: bump actions/setup-go from 6 to 7 (#81)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-18T19:07:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c6f372fe0b73d591f88ed92df29d4d87f25dd8ea",
"body": "Bumps [golang.design/x/clipboard](https://github.com/golang-design/clipboard) from 0.7.1 to 0.8.0.\n- [Release notes](https://github.com/golang-design/clipboard/releases)\n- [Commits](https://github.com/golang-design/clipboard/compare/v0.7.1...v0.8.0)\n\n---\nupdated-dependencies:\n- dependency-name: gola\n[…]\nirect:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "deps: bump golang.design/x/clipboard from 0.7.1 to 0.8.0 (#73)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-07-18T19:05:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6d31adcbf5d62d031a40584ddc722ea22e4d1e78",
"body": "Bumps [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) from 1.14.45 to 1.14.46.\n- [Release notes](https://github.com/mattn/go-sqlite3/releases)\n- [Commits](https://github.com/mattn/go-sqlite3/compare/v1.14.45...v1.14.46)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/matt\n[…]\nirect:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "deps: bump github.com/mattn/go-sqlite3 from 1.14.45 to 1.14.46 (#72)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-20T16:52:37Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cfe0452d193f7a43a8e578c24474a7fa9a1acb8d",
"body": "Bumps [charm.land/bubbletea/v2](https://github.com/charmbracelet/bubbletea) from 2.0.0 to 2.0.7.\n- [Release notes](https://github.com/charmbracelet/bubbletea/releases)\n- [Commits](https://github.com/charmbracelet/bubbletea/compare/v2.0.0...v2.0.7)\n\n---\nupdated-dependencies:\n- dependency-name: charm.\n[…]\nirect:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "deps: bump charm.land/bubbletea/v2 from 2.0.0 to 2.0.7 (#75)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-20T16:48:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3d7657b6ec53970726eb7be651eb61d3bb744c1e",
"body": "Bumps [googleapis/release-please-action](https://github.com/googleapis/release-please-action) from 4 to 5.\n- [Release notes](https://github.com/googleapis/release-please-action/releases)\n- [Changelog](https://github.com/googleapis/release-please-action/blob/main/CHANGELOG.md)\n- [Commits](https://git\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "ci: bump googleapis/release-please-action from 4 to 5 (#71)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-20T16:45:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a1c82e4312c22b4397c59b86c9ef205abfeb7abe",
"body": "Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 5 to 7.\n- [Release notes](https://github.com/codecov/codecov-action/releases)\n- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/codecov/codecov-action/compare/v\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "ci: bump codecov/codecov-action from 5 to 7 (#70)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-20T16:29:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "51497424a8d352124b5defce2b9c2551d87bee6b",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 6 to 7.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v6...v7)\n\n---\nupdated-dependenc\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "ci: bump actions/checkout from 6 to 7 (#69)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-20T16:28:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "045f61f0d1555f01ad658d3d3bff71ccbe690681",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(master): release 0.7.0 (#68)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-20T15:55:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0de0b46b1355627a57c2049233d713358192e97d",
"body": "First run with no agent no longer faceplants. The static welcome\n(which told users to type ?? then dumped a raw exec error when no\nadapter was installed) is replaced by a Bubble Tea panel that:\n\n- detects ACP adapters on `PATH` (`claude-agent-acp`, `gemini`) and lets the\n user pick one, writing a s\n[…]\niltin\n\nAlso pre-flights ?? : when the configured agent can't be reached\n(adapter missing from `PATH`, or http transport with no URL) it shows a\nfriendly 'run setup' hint instead of a raw exec failure.",
"is_bot": false,
"headline": "feat(onboarding): agent-aware first-run welcome (#67)",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-06-20T15:50:12Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c58b18ed54352606e40100f6f9f8733dae6eaf11",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(master): release 0.6.1 (#66)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-17T11:42:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4d61c56e55bc527af68597c3e93d3cb62598e879",
"body": "Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>",
"is_bot": false,
"headline": "chore(sec): writable file handle closed without error handling",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-06-17T11:37:54Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "3c78ed8e92f5eedc99b85da616b42762918d31c1",
"body": "Bumps [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) from 1.14.32 to 1.14.45.\n- [Release notes](https://github.com/mattn/go-sqlite3/releases)\n- [Commits](https://github.com/mattn/go-sqlite3/compare/v1.14.32...v1.14.45)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/matt\n[…]\nirect:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "deps: bump github.com/mattn/go-sqlite3 from 1.14.32 to 1.14.45 (#64)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-17T11:36:27Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "e2ac17f84a7fea710e92d7e85e5acea9c5bf7a4e",
"body": "Bumps [github.com/pelletier/go-toml/v2](https://github.com/pelletier/go-toml) from 2.2.4 to 2.4.0.\n- [Release notes](https://github.com/pelletier/go-toml/releases)\n- [Commits](https://github.com/pelletier/go-toml/compare/v2.2.4...v2.4.0)\n\n---\nupdated-dependencies:\n- dependency-name: github.com/pelle\n[…]\nirect:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "deps: bump github.com/pelletier/go-toml/v2 from 2.2.4 to 2.4.0 (#63)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-17T11:32:32Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "87404d867e888b1815b0a123a78b5d55a947307f",
"body": "Bumps [charm.land/lipgloss/v2](https://github.com/charmbracelet/lipgloss) from 2.0.0 to 2.0.4.\n- [Release notes](https://github.com/charmbracelet/lipgloss/releases)\n- [Commits](https://github.com/charmbracelet/lipgloss/compare/v2.0.0...v2.0.4)\n\n---\nupdated-dependencies:\n- dependency-name: charm.land\n[…]\nirect:production\n update-type: version-update:semver-patch\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "deps: bump charm.land/lipgloss/v2 from 2.0.0 to 2.0.4 (#61)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-17T11:28:11Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a30840a42502bfb9cacbb81f11dc85b004159e80",
"body": "Bumps [golang.org/x/term](https://github.com/golang/term) from 0.41.0 to 0.44.0.\n- [Commits](https://github.com/golang/term/compare/v0.41.0...v0.44.0)\n\n---\nupdated-dependencies:\n- dependency-name: golang.org/x/term\n dependency-version: 0.44.0\n dependency-type: direct:production\n update-type: version-update:semver-minor\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "deps: bump golang.org/x/term from 0.41.0 to 0.44.0 (#62)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-17T11:21:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6fed47b51184392ed33138a37dec3d7eb02a57db",
"body": "Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 6 to 7.\n- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)\n- [Commits](https://github.com/goreleaser/goreleaser-action/compare/v6...v7)\n\n---\nupdated-dependencies:\n- dependency-name: go\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "ci: bump goreleaser/goreleaser-action from 6 to 7 (#47)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-17T11:21:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1620c840f371ffa62320448f470a160b25fff567",
"body": "Bumps [actions/setup-go](https://github.com/actions/setup-go) from 5 to 6.\n- [Release notes](https://github.com/actions/setup-go/releases)\n- [Commits](https://github.com/actions/setup-go/compare/v5...v6)\n\n---\nupdated-dependencies:\n- dependency-name: actions/setup-go\n dependency-version: '6'\n depen\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "ci: bump actions/setup-go from 5 to 6 (#41)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-17T11:17:52Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "74b294d4ced0a7c5d0b5573c81e32abcf491d99e",
"body": "Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 4 to 7.\n- [Release notes](https://github.com/actions/upload-artifact/releases)\n- [Commits](https://github.com/actions/upload-artifact/compare/v4...v7)\n\n---\nupdated-dependencies:\n- dependency-name: actions/upload-artifac\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "ci: bump actions/upload-artifact from 4 to 7 (#40)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-17T11:09:26Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3c96c3616a2a7c22029812eef57cb70399858217",
"body": "Bumps [actions/checkout](https://github.com/actions/checkout) from 4 to 6.\n- [Release notes](https://github.com/actions/checkout/releases)\n- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/actions/checkout/compare/v4...v6)\n\n---\nupdated-dependenc\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "ci: bump actions/checkout from 4 to 6 (#39)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-17T11:05:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f23d34507f6fae19d7a8513288021f6773ae3fec",
"body": "Bumps [actions/download-artifact](https://github.com/actions/download-artifact) from 4 to 8.\n- [Release notes](https://github.com/actions/download-artifact/releases)\n- [Commits](https://github.com/actions/download-artifact/compare/v4...v8)\n\n---\nupdated-dependencies:\n- dependency-name: actions/downlo\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "ci: bump actions/download-artifact from 4 to 8 (#38)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-06-17T11:00:56Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "478739ca4d5bcccac29a190bf1aaf7e6cfffb7dd",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(master): release 0.6.0 (#60)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-12T10:51:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5d41fec9290712cdfde0d0ab64e39852eef494b0",
"body": "…ect (#59)",
"is_bot": false,
"headline": "feat: turn-by-turn agent conversations, model selection, and zsh dial…",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-06-12T10:47:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a013bcbd3f9a087d7882e51c9c46d3821d86c9f",
"body": null,
"is_bot": true,
"headline": "chore(master): release 0.5.1 (#58)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-06-05T06:34:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0ab97a4dec044de5e9eb9ee947d78649b9836ff9",
"body": "Prevent foreground completion from blocking on Cobra PATH scans and slow or broken symlink targets. Skip Cobra completion for shell builtins, keep cd-style directory completion responsive, and add completion trace events for router, file, and VCS lookups.\n\nPolish editor completion behavior so printable typing resumes command input,\nRight drills into directories, completion-menu clearing avoids terminal scroll,\nand Alt/Ctrl+Tab accepts one ghost-text word.",
"is_bot": false,
"headline": "fix(completion): stabilize autocomplete interactions (#57)",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-06-05T06:32:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2c522e525827f0b002795e1e0d194adcdc6e0c00",
"body": null,
"is_bot": false,
"headline": "docs(release): mark v0.5.0 notes final",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-05-26T10:34:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d624cebe6ee7db523448126c2e7c9b03fee8be2a",
"body": null,
"is_bot": true,
"headline": "chore(master): release 0.5.0 (#34)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-05-26T10:04:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "215d173b7f6c05392cd26bba13b02651d2081175",
"body": "The 0.5.0 release centers on tool calling:\n\n- handle ACP session/request_permission messages bidirectionally\n- render explicit terminal permission prompts for allow once, deny, and always allow decisions\n- persist exact-command approvals by project, globally, or for the current session\n- serialize a\n[…]\nement and database path\n- opt-in first-run shell migration instead of automatic loading\n- refreshed help, status, tips, README, and configuration docs\n- generated coverage/trace cleanup and lint fixes",
"is_bot": false,
"headline": "feat(agent): enable ACP tool calls (#55)",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-05-26T09:53:43Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bbe838f386178cf1e0f5250b1e4011b32d64cb2b",
"body": "Previously, setting command = \"gemini --experimental-acp\" would try to\nexecute a program literally named \"gemini --experimental-acp\". Now the\ncommand string is parsed to extract the program and any embedded arguments,\nwhich are combined with explicit args.",
"is_bot": false,
"headline": "fix(agent): parse arguments from command string in ACP config",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-02-04T18:21:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "39859427719ebbbd3f21ba2ccfdac98299a28c76",
"body": "handleInputError returned (true, nil) for Ctrl+C, intending \"should continue\". But the caller interpreted done=true as \"exit the loop\", \ncausing the shell to exit on Ctrl+C with an empty buffer. Changed to return (false, nil) so Ctrl+C prints ^C and continues",
"is_bot": false,
"headline": "fix(shell): prevent Ctrl+C at empty prompt from exiting shell",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-02-03T17:20:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1bc4b4303968f4f072cca66c7eef7c9cda1bf302",
"body": null,
"is_bot": false,
"headline": "fix(alias): pass arguments when converting aliases into functions",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-02-03T14:25:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c67cc5beaa921a98d1cb7b4c907a6c76837d3029",
"body": "…ation\n\nAdd concurrency group to prevent race conditions when multiple pushes\ntrigger release-please simultaneously. Also strip arch version suffixes\n(_v1, _v8.0) from archive names so Homebrew formula URLs are predictable.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(ci): prevent duplicate release PRs and fix Homebrew formula gener…",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-31T21:47:10Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "af230516cd6b1b4583b85269905c517b6dfded2d",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(master): release 0.4.3 (#32)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-01-31T21:34:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3480bf271eecf71aa39111ceef19641e147987f1",
"body": null,
"is_bot": false,
"headline": "chore(lint): gofmt internal/prompt/colors_additional_test.go",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-31T21:30:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9b39a3d73ecfee27d52c1996689f7306eea4126e",
"body": null,
"is_bot": false,
"headline": "fix: lint errors (gofmt, gosec, staticcheck)",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-31T21:25:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b32e0fed596486b511fdf85bd007d957257f2f96",
"body": "- Fix SIGWINCH goroutine leak in executor by closing channel on cleanup\n- Fix ESC key detection goroutine leak using poll-based I/O instead of\n blocking reads with timeout goroutines\n- Add paste size limit (10MB default, configurable) to prevent memory\n exhaustion from large clipboard content\n- Ma\n[…]\naste end\nmarker even when content exceeds the limit, ensuring clean truncation.\n\nAlso adds comprehensive test coverage for editor, config, context,\ncompat, prompt, executor, shell, and agent packages.",
"is_bot": false,
"headline": "fix: resource leaks and resilience improvements",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-31T21:21:33Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "0bcef0025f028f085b29832393d8385a4abfe317",
"body": null,
"is_bot": false,
"headline": "fix(agent): broken pipe on context cancelation",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-31T20:53:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0280b028158b3c0db9e45fd88515b81e88ed36f2",
"body": null,
"is_bot": false,
"headline": "ci: integrate CodeCov for test coverage reporting (#30)",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-31T18:16:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "db0b0e2a060304c3be8b2d9e471af3bc46893ba0",
"body": "The --split and continue --merge flags are Pro-only features.\nSplit builds into platform-specific IDs (hash-linux, hash-darwin)\nand handle archiving/checksums/release upload manually.",
"is_bot": false,
"headline": "build: replace GoReleaser Pro split/merge with manual release workflow",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-31T18:03:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b88430155f70e5fdef4b23590fb625bd5405e9d4",
"body": null,
"is_bot": true,
"headline": "chore(master): release 0.4.2 (#28)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-01-31T17:48:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8fbf6b075146fb5bcb24db9361495f5e2e7e2c32",
"body": "Bumps [github/codeql-action](https://github.com/github/codeql-action) from 3 to 4.\n- [Release notes](https://github.com/github/codeql-action/releases)\n- [Changelog](https://github.com/github/codeql-action/blob/main/CHANGELOG.md)\n- [Commits](https://github.com/github/codeql-action/compare/v3...v4)\n\n-\n[…]\nirect:production\n update-type: version-update:semver-major\n...\n\nSigned-off-by: dependabot[bot] <support@github.com>\nCo-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "ci: bump github/codeql-action from 3 to 4 (#27)",
"author_name": "dependabot[bot]",
"author_login": "dependabot[bot]",
"committed_at": "2026-01-31T17:42:05Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ed5608d4529cd73ee83a44035010cd4a2c42d1a6",
"body": "StopSpinner() was not waiting for the spinner goroutine to exit before\nreturning, causing data races when the caller accessed the output buffer.\nThis manifested as flaky TestResponseUI_LoadingStates failures on macOS\nCI runners where timing differences exposed the race.\n\nAdded spinnerDone channel to synchronize goroutine shutdown - StopSpinner\nnow waits for the spinner goroutine to fully exit before returning.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: race condition in spinner",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-31T17:35:41Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "37db645e2dcf26a7f3ab83988e2b04ff5ea1dbe4",
"body": "- Add MIT LICENSE file (required by Go Report Card)\n- Add gocyclo linter to golangci.yml for complexity checking\n- Refactor executor.go to reduce cyclomatic complexity:\n - Extract pipelineContext for terminal/pipe detection\n - Extract setupTerminalRawMode helper for PTY raw mode\n - Extract setupP\n[…]\natic complexity:\n - Extract handleAgentConfirmAction for confirmation handling\n - Extract executeAgentCommand for agent command execution\n - Extract handleAgentStreamError for stream error handling",
"is_bot": false,
"headline": "chore: tidy up some cyclomatic and gofmt gaps (#25)",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-31T17:04:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "00c9a018e5f8b63d68f20f5d4d05a97e742d8cd0",
"body": null,
"is_bot": false,
"headline": "ci: add Dependabot for Go modules and GitHub Actions (#18)",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-31T13:57:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1bfd0b97ca06e0321edbca801d360fccf8fe3c09",
"body": "- Add fuzz tests for parser (FuzzParse, FuzzParseConsistency)\n- Add fuzz tests for learning system (FuzzNormalizeError, FuzzExtractPattern)\n- Add CI workflow for automated fuzz testing (weekly + PR triggers)\n- Add VHS tape demos for key features (hero, pipe-completion, learning, context-picker)\n- Add CI workflow for demo generation (manual trigger)\n- Update documentation with fuzz testing and demo instructions",
"is_bot": false,
"headline": "chore: add fuzz testing and VHS demo recordings (#17)",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-31T10:55:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "516272ad0c91caadb6d3f9141e1e9896e99d58e4",
"body": "- Add golangci-lint workflow for automated linting on PRs and pushes\n- Add CodeQL security scanning workflow with weekly schedule\n- Add GoReleaser configuration for cross-platform releases\n- Update release workflow to use GoReleaser split/merge for CGO builds\n- Enhance golangci.yml with security linters (gosec, bodyclose, noctx)",
"is_bot": false,
"headline": "ci: add golangci-lint, CodeQL, and GoReleaser integration (#16)",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-30T22:34:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9bfae7fa4a3069842f41420b1a0906fc4c671dd0",
"body": "- Add dedicated test job that runs before release-please\n- Make release-please job depend on test job passing\n- Move tests out of build-and-release since they run earlier\n- Add go vet check to test job\n- Use matrix strategy to test on both ubuntu-latest and macos-latest\nconcurrently. Linux-specific \n[…]\nLinux CI because the migration code was picking\nup shell config files from the CI environment's home directory. Fixed\nby setting XDG_DATA_HOME to the temp directory, isolating tests from\nsystem state.",
"is_bot": false,
"headline": "ci: run tests before release-please in CI workflow (#15)",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-29T20:54:15Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5f61bfd2d3e6952b62c63e7f9c9ed892ff5d14f6",
"body": null,
"is_bot": true,
"headline": "chore(master): release 0.4.1 (#14)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-01-29T20:21:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0c5f7750f915e28e0cca48ae966de0c3243a1c5e",
"body": "- Update release workflow to Go 1.25 to match go.mod\n\n- Fix cross-platform PTY termios handling by splitting macOS/Linux implementations\n - macOS uses TIOCGETA/TIOCSETA\n - Linux uses TCGETS/TCSETS",
"is_bot": false,
"headline": "fix: resolve release CI failures (#13)",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-29T20:20:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f16e6076a31f67153b5380e9cbf3cc617ca9a46c",
"body": null,
"is_bot": true,
"headline": "chore(master): release 0.4.0 (#11)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-01-29T19:40:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "09d2d882798be34f7fe4d0c10650176a41199f09",
"body": "Automatically mask values of environment variables that may contain secrets.\nVariables with names containing KEY, SECRET, TOKEN, PASSWORD, AUTH,\nCREDENTIAL, or PRIVATE show only the first 4 characters followed by\nbullets (e.g., sk-pr••••••••).\n\n- Add isSensitiveEnvName() to detect sensitive variable names\n- Add maskValue() to show first 4 chars + up to 8 bullets\n- Add mask_sensitive_env config option (default: true)\n- Add comprehensive tests for masking logic",
"is_bot": false,
"headline": "feat(completion): mask sensitive env var values in completion preview",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-29T17:09:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f07c23672333a42b664731362ba1f8e81b56cf36",
"body": "- Add EnvCompleter that triggers on $VAR and ${VAR} patterns\n- Show variable values in completion menu (truncated to 40 chars)\n- Get env vars from shell's runtime environment, not just process env\n- Add EnvProvider interface for executor integration\n- Register at PriorityEnv (130) between aliases and executables\n- Include tests for prefix matching, brace syntax, case sensitivity",
"is_bot": false,
"headline": "fix: add environment variable tab-completion with value preview",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-29T14:59:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec68874b6df35df861a1db8cbf690d88b8e3f226",
"body": "Add tab-completion support for user-defined aliases and shell functions:\n- Track function definitions in executor (decoupled from mvdan/sh)\n- New AliasCompleter at priority 125 (between ToolNative and Executable)\n- Functions display with ƒ icon\n- Complete anywhere (not just command position)\n- Handle unset -f for removal\n- Update README completion docs",
"is_bot": false,
"headline": "feat: alias/function tab-completion",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-29T14:45:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "19e564b657f9e59978d105d14958d10de49b5a00",
"body": null,
"is_bot": false,
"headline": "chore: remove readline mode, keep only editor mode",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-29T14:15:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e2cfef157cba4896cdb3576e13e2fb030f85ea7f",
"body": null,
"is_bot": false,
"headline": "chore: remove unused dev chip feature",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-29T14:10:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8b7fc9c69057a5aa7f5f2c09dd1aded6e9595d0f",
"body": "When running piped commands like `curl ... | bash`, the PTY's default\nONLCR setting would translate LF to CRLF, corrupting the piped data and\ncausing bash to fail with syntax errors.\n\nThe fix detects when a command's stdout is going to a pipe and uses a\nPTY with ONLCR disabled (via runWithPTYRaw). This preserves proper\nsignal handling while preventing data corruption in pipelines.",
"is_bot": false,
"headline": "fix: disable ONLCR on PTY when stdout is a pipe",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-29T14:04:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "43ec1930122474292864c9e330e75a6f7469f29d",
"body": "`mvdan/sh` stores aliases but doesn't expand them on subsequent Parse()\ncalls since each parse is independent. Additionally, `mvdan/sh`'s alias\nbuiltin parses values with POSIX mode, which fails on bash syntax like\n&& or ||.\n\nTo work around this, we intercept the alias builtin via `CallHandler` and \n[…]\nl functions, which work correctly with bash\nsyntax and persist across commands.\n\nExample: `alias foo='cmd1 && cmd2'` becomes `foo() { cmd1 && cmd2; }`\n\nAlso added: trace events to the compat subsystem",
"is_bot": false,
"headline": "fix: improved handling of complex aliases when migrating from zsh (#12)",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-29T13:18:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7101c4989ccfa669689fd4b06f20783f00166c69",
"body": "Instead of maintaining a blocklist of zsh-specific patterns to skip,\nsilently skip any content that fails to parse with LangBash.\n\nThis is more maintainable and handles unknown zsh syntax automatically.\n\nTests added:\n- TestExecutor_SourceZshSpecificFile_GracefulSkip\n- TestExecutor_EvalZshHook_GracefulSkip\n- TestExecutor_EvalZoxideHook_GracefulSkip\n- TestExecutor_SourceMixedContent_PartialExecution\n- TestExecutor_EvalValidBashStillWorks\n- TestExecutor_SourceValidBashStillWorks",
"is_bot": false,
"headline": "fix: use graceful degradation for source/eval compatibility",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-29T12:42:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "847408985fca0c84e307c501a6d9a99b55542d79",
"body": "- Add 'hash migrate' CLI command for interactive migration\n- Detect previous shell (.zshenv, .zprofile, .zshrc, .bashrc)\n- Source existing configs with compatibility filtering\n- Skip zsh-specific commands (bindkey, setopt, compdef, etc.)\n- Skip tool inits that Hash handles natively (starship, zoxide\n[…]\nere\n- Add FilterWithCompat for pre-processing shell configs\n- Store migration state for subsequent startups\n- Add comprehensive tests for all components\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add bash/zsh migration system with compatibility layer",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-29T12:25:19Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "91102252b9bbeff318649563fd5fa792328df3cd",
"body": "- Use system clipboard (golang.design/x/clipboard) instead of internal buffer\n- Show 'Copied to clipboard' feedback on success\n- Align key hints style: [Enter: action] [Tab: action] [Esc: cancel]",
"is_bot": false,
"headline": "fix: copy agent response to system clipboard with feedback",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-29T09:51:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "67959bd113593dbb9c388140cffc1cc00b7592bf",
"body": "- Stop spinner before showing error (fixes spinner continuing after error)\n- For startup failures (command not found, connection refused), show error\n and return to prompt immediately instead of offering retry\n- Add transport-specific troubleshooting hints:\n - stdio: installation, PATH, and executable checks\n - http: service running, URL, and network checks",
"is_bot": false,
"headline": "fix: handle agent startup failures gracefully",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-29T09:40:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa7f0f3199b86cc6539c67b999a603b1959b68e1",
"body": "Use ANSI save/restore cursor sequences instead of manual repositioning\nto keep the cursor in the input area when the autocomplete dropdown is shown.\n\nPreviously, the cursor would jump to column 0 (the gutter) after rendering\nthe completion menu because the code used carriage return without restoring\nthe horizontal position.",
"is_bot": false,
"headline": "fix: preserve cursor position when rendering completion menu",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-26T11:21:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e06d2f9068879815facd8f13475e8e64e1991cd5",
"body": "- InstallHint: use pmOnce.Do() to set package manager in test,\n preventing sync.Once from detecting real OS\n- CdPersistsAcrossCommands: save/restore process CWD since executor\n syncs shell PWD to process, avoiding deleted temp dir for next tests",
"is_bot": false,
"headline": "test: fix OS-incompatible tests for Linux CI",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-26T10:57:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "75c6ce70a2158db06baf6351b336a1e5d4ad7f91",
"body": "Co-authored-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>",
"is_bot": true,
"headline": "chore(master): release 0.3.0 (#10)",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-01-26T10:49:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c36611ebd25c75dc0cb52dba221eb9d5a2c3723d",
"body": null,
"is_bot": false,
"headline": "feat: delightful ux",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-26T10:48:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9898dcb8150464d76f21a513853f2829d7229485",
"body": null,
"is_bot": false,
"headline": "ci: dedicated Homebrew workflow",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-24T12:45:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2eb1431014746d520688aa47b6c8141d57542c87",
"body": "- Add persistent interpreter that preserves function definitions across commands\n- Lazy starship lookup allows PATH to be set up by startup files first\n- Sync interpreter working directory after builtin cd\n- Fix: drain terminal responses before PTY to prevent escape sequence leaks\n\nThe terminal drain fix addresses an issue where DECRQSS responses from\ncolorprofile/lipgloss queries could leak into PTY programs like helix,\nappearing as garbage characters in their input.",
"is_bot": false,
"headline": "feat(shell): persistent interpreter with lazy starship and cd sync",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-23T21:42:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "17cdc7d9efa4bfe10f958f68b345fbe62403c11b",
"body": null,
"is_bot": true,
"headline": "chore(master): release 0.1.2",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-01-23T19:20:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e665a8e55ab68f081b944f85f5cb999e87cd6b52",
"body": "Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(ci): install X11 dev libraries for clipboard build",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-23T19:19:38Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "85f91a26e7fdc6b52023e913644c0239f4fc7edd",
"body": null,
"is_bot": true,
"headline": "chore(master): release 0.1.1",
"author_name": "github-actions[bot]",
"author_login": "github-actions[bot]",
"committed_at": "2026-01-23T19:16:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f270fc5a88b0d8ddf2994fb9576efcf96fd35dcf",
"body": "Keep version below 1.0.0 during development. Features bump patch,\nbreaking changes bump minor.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: configure release-please for 0.x versioning",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-23T19:12:45Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "7ab4c0d646acc2756e5c6230de7e577941cb6f61",
"body": "Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore: trigger CI",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-23T19:09:59Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ccadd627c8ebc029d04b9b0cc0cfdd0b4625b1b7",
"body": "Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(ci): explicitly pass GITHUB_TOKEN to release-please",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-23T19:06:52Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d1082ffd9f94ac52f3c171b6f935075cfb9185d5",
"body": "Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: document HASH_SRC env var and issue command",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-23T18:53:10Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "bd21660f1fe80f7a69f41a16ec00c5ce8758421d",
"body": "Adds Homebrew tap instructions, build script usage, and\nhash-rebuild/hash-upgrade functions for developers.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: update installation section with Homebrew and dev setup",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-23T18:52:28Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "b039b926ed1cd929152cf2a0ba7aabb81142e210",
"body": "Allows both main.go and issue builtin to access version string.\nUpdates ldflags to use package path.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "refactor: centralize version info in version package",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-23T18:51:49Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "58dc80560ece6ff3fb781cdcc72037f8a401dd4b",
"body": "Typing !! after a failed command opens the issue editor with\ncontext pre-filled. Prompts for confirmation if last command succeeded.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add !! shortcut for quick issue submission",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-23T18:47:13Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "addb4323c10217ca97dd9e8290ec836023011ead",
"body": "Opens editor with pre-filled template, collects context from last\ncommand, and submits via gh CLI. Editor fallback: EDITOR -> hx -> nvim -> nano.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add issue builtin for GitHub issue submission",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-23T18:46:51Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "487c2facba2e20405e92d215e1d83ef6a05a1121",
"body": "Adds stderrCapture wrapper to store last command's stderr output\n(up to 10KB) for use by the issue command.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: capture stderr for issue reporting",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-23T18:45:41Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "4b02fe15d1a339472b7a59e7d5b8d94bc1771e7d",
"body": "Automates version bumps via conventional commits, creates GitHub\nreleases, and updates the homebrew-hash tap formula.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: add release-please workflow with homebrew update",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-23T18:44:02Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "76fa01b00b8086fe9601144b33f2752cc68bae05",
"body": "Detects jj changeset and git commit, injects via ldflags.\nSupports --install flag for /usr/local/bin installation.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add build script with version injection",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-23T18:43:34Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "8769415f308bd0a3e8be218aedb208470d4f1e8d",
"body": "Replaces hardcoded version with variables that can be set via\n-ldflags during build. Supports dual VCS info (jj + git).\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add ldflags support for version injection",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-23T18:43:02Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "0ba9e5209752a9bf3600a6e55532b4d5cdc04cf0",
"body": "Replaces hardcoded version with variables that can be set via\n-ldflags during build. Supports dual VCS info (jj + git).\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: add ldflags support for version injection",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-23T18:41:30Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "49ade4d0cea609f9eaa34411512fa93ab889da22",
"body": null,
"is_bot": false,
"headline": "docs: add directive to commit to both jj and git",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-23T18:06:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "58adf13f1d6702d1fb90975c254bffa655309476",
"body": "When a request is cancelled, send the ACP session/cancel notification\nto tell the agent to stop processing. This prevents stale messages from\npiling up in the message channel and causing retry failures.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(agent): send session/cancel on context cancellation",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-23T18:05:25Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "6cfb0c1ab92a2dec165a2c64148d7eff4c159f6d",
"body": "- Add render() after ghost text error to update display immediately\n- Merge wrapper goroutines in agent_handler to avoid race condition\n between 'complete' and 'error' state transitions\n- Fix ESC key detection using channel-based timeout instead of\n SetReadDeadline (which doesn't work on terminal \n[…]\nhen user presses ESC to cancel\n- Fix confirmation UI appearing before streaming completes by properly\n handling closed error channel in select\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(shell): improve ghost text and confirmation UI error handling",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-10T20:06:43Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "1f1391372d1f0bca0edced152f13e497cbdd0fb7",
"body": null,
"is_bot": false,
"headline": "refactor: simplify code by extracting helpers and reducing duplication",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-10T10:00:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9163d09e4cc7d044a37f24a4b576baee9404644f",
"body": "- Add internal/trace package for structured debug tracing\n- Add trace instrumentation to parser, shell, and executor\n- Improve response_ui with streaming and confirmation helpers\n- Add CSI u Tab encoding support in editor\n- Unify agent request handling for all modes",
"is_bot": false,
"headline": "feat(shell): add trace system and improve streaming UX",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-10T10:00:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e0afb6c1f147a0d1e14dbcc1119f3a818435a141",
"body": "This adds a transformative UX improvement for the ?? agent flow:\n\n- Add StreamingTransport interface for real-time text streaming\n- Implement ghost text state in editor (dim gray inline suggestions)\n- Support Tab to accept, Right arrow for char-by-char, Esc to dismiss\n- Stream agent responses direct\n[…]\nflow replaces the blocking \"Thinking...\" modal with inline\nstreaming that feels instant and predictive, similar to GitHub Copilot.\n\nAlso fixes pre-existing syscall.Select return value issues on Linux.",
"is_bot": false,
"headline": "feat(agent): add ghost text streaming for inline AI suggestions",
"author_name": "Claude",
"author_login": "claude",
"committed_at": "2026-01-10T10:00:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "4abd97bbb1495741a73963fd019403a7716b4db8",
"body": "- Fix ESC key detection: use select() instead of SetReadDeadline which\n doesn't work on TTYs (\"file type does not support deadline\")\n- Add mode indicator gutter showing 'i│' (dim) for insert mode and\n 'n│' (bold yellow) for normal mode\n- Show mode indicator on all lines including first line (before prompt)\n- Enable gutter by default since helix is the default keybinding mode\n- After command submission, show neutral '│' without mode letter",
"is_bot": false,
"headline": "feat(editor): improve helix mode UX with mode indicator and ESC fix",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-08T21:23:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "548e8f17de1ee1cc6c91252ba595de40cc63f358",
"body": "- Add Ctrl+P keybinding in insert and normal mode to launch context picker\n- Add ContextPicker field to ModeResult and editor.Result\n- Store selected context in Shell for session persistence\n- Integrate selected context with agent handler\n- Fix: use alternate screen for picker (clears on exit)\n- Fix\n[…]\ntead of Ctrl+E\n\nThe context picker allows users to select what context (cwd, git branch,\nkube context, history, env vars, last output) gets sent to the agent.\nSelections persist for the shell session.",
"is_bot": false,
"headline": "feat(context): wire context picker into editor and agent flow",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-08T20:50:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "f4c696e5eea6c9c51691782eed7da733288a8cd9",
"body": "Add 23 new test cases to improve completion system coverage:\n\n- Fuzzy matching edge cases: single char queries, long queries,\n special characters, numeric patterns, extension matching\n- Score ordering verification: exact > prefix > word-boundary > subsequence\n- File completer: hidden files, absolut\n[…]\n listing after completion, nested paths,\n mixed case handling, git branch-like patterns\n\nTest count increased from 32 to 55 (72% improvement).\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "test(completion): add comprehensive edge case and integration tests",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-08T19:43:56Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4d22850b749a48360e6cea36206c41b371d04971",
"body": null,
"is_bot": false,
"headline": "test(completion): add fuzzy completion integration tests",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-04T18:52:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c19ca97b4725486252103560580ae8017564cdee",
"body": null,
"is_bot": false,
"headline": "feat(shell): wire fuzzy completion config to router",
"author_name": "Assaf Schwartz",
"author_login": "tfcace",
"committed_at": "2026-01-04T18:50:50Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 14,
"commits_last_year": 106,
"latest_release_at": "2026-07-18T19:27:52Z",
"latest_release_tag": "v0.7.1",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 12,
"days_since_latest_release": 6,
"mean_days_between_releases": 18.9
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": false,
"health_percentage": 42,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "github.com/tfcace/hash",
"exists": true,
"license": null,
"keywords": [],
"ecosystem": "go",
"matches_repo": true,
"registry_url": "https://pkg.go.dev/github.com/tfcace/hash",
"is_deprecated": false,
"latest_version": "v0.7.1",
"repository_url": "https://github.com/tfcace/hash",
"versions_count": 15,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": null,
"first_published_at": null,
"latest_published_at": "2026-07-18T19:26:51Z",
"latest_version_yanked": null,
"days_since_latest_publish": 6
}
]
},
"popularity": {
"forks": 4,
"stars": 22,
"watchers": 0,
"fork_history": {
"days": [
{
"date": "2026-01-24",
"count": 1
},
{
"date": "2026-06-09",
"count": 1
},
{
"date": "2026-07-16",
"count": 1
},
{
"date": "2026-07-18",
"count": 1
}
],
"complete": true,
"collected": 4,
"total_forks": 4
},
"star_history": null,
"open_issues_and_prs": 1
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"demos"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [
"go.mod"
],
"largest_source_bytes": 59046,
"source_files_sampled": 241,
"oversized_source_files": 0,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 4233
},
"dependencies": {
"manifests": [
"go.mod"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"go"
],
"dependencies": [
{
"name": "charm.land/bubbletea/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.0.7"
},
{
"name": "charm.land/lipgloss/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.0.5"
},
{
"name": "github.com/chzyer/readline",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.5.1"
},
{
"name": "github.com/creack/pty",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.1.24"
},
{
"name": "github.com/mattn/go-runewidth",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.0.24"
},
{
"name": "github.com/mattn/go-sqlite3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v1.14.48"
},
{
"name": "github.com/pelletier/go-toml/v2",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v2.4.3"
},
{
"name": "golang.design/x/clipboard",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.8.0"
},
{
"name": "golang.org/x/sys",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.46.0"
},
{
"name": "golang.org/x/term",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v0.44.0"
},
{
"name": "mvdan.cc/sh/v3",
"manifest": "go.mod",
"ecosystem": "go",
"version_constraint": "v3.13.1"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 1,
"merged_prs": 62,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 19
},
"bus_factor": 1,
"bot_contributors": 2,
"top_contributors": [
{
"type": "User",
"login": "tfcace",
"commits": 71,
"avatar_url": "https://avatars.githubusercontent.com/u/58393187?v=4"
},
{
"type": "User",
"login": "claude",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/81847?v=4"
}
],
"contributors_sampled": 2,
"top_contributor_share": 0.986
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"codeql.yml",
"demos.yml",
"fuzz.yml",
"lint.yml",
"release.yml"
],
"has_docs_dir": true,
"linter_configs": [
".golangci.yml"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"go.sum"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 9,
"reason": "27 out of 28 merged PRs checked by a CI test -- score normalized to 9",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/5 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 10,
"reason": "project is fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 10,
"reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 9,
"reason": "SAST tool detected but not run on all commits",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 2,
"reason": "8 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "2dd186d810fa16c9ac92cad30523844be57f6fb7",
"ran_at": "2026-07-25T04:34:23Z",
"aggregate_score": 5.1,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": true,
"has_security_policy": false,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-19T01:51:24Z",
"oldest_open_prs": [
{
"number": 83,
"created_at": "2026-07-24T05:22:34Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-18T19:26:51Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/tfcace/hash",
"host": "github.com",
"name": "hash",
"owner": "tfcace"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": "The weighted overall 62 is calibrated to 69 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 62,
"calibrated": 69,
"calibration": "2026-08-02"
}
}
],
"value": 69,
"inputs": {
"security": 51,
"vitality": 79,
"community": 37,
"governance": 48,
"calibration": "2026-08-02",
"engineering": 89,
"ai_readiness": 80,
"weighted_overall_raw": 62
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 79,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "good",
"name": "Development activity",
"note": null,
"notes": [],
"value": 72,
"inputs": {
"commits_last_year": 106,
"human_commit_share": 0.66,
"days_since_last_push": 0,
"active_weeks_last_year": 12
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "12/52 weeks with commits",
"points": 8.3,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 12
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "106 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 106
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 14,
"latest_release_tag": "v0.7.1",
"releases_from_tags": false,
"days_since_latest_release": 6,
"mean_days_between_releases": 18.9
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "14 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 14
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 6 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 6
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~18.9 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 18.9
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 15,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 15 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 15
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "weak",
"name": "Community & Adoption",
"value": 37,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 25,
"inputs": {
"forks": 4,
"stars": 22,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "22 stars",
"points": 21.4,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 22
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "4 forks",
"points": 4,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 4
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"readme_badge_services": [],
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "weak",
"name": "Sustainability & Governance",
"value": 48,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 15,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 2,
"top_contributor_share": 0.986
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 99% of commits",
"points": 0.3,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 99
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "2 contributors",
"points": 2.7,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 2
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "moderate",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution, Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution",
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 51,
"inputs": {
"merged_prs": 62,
"open_issues": 0,
"closed_issues": 0,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": null,
"closed_unmerged_prs": 19,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "62/81 decided PRs merged",
"points": 23,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 62,
"decided": 81
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/5 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "weak",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 44,
"inputs": {
"followers": 4,
"owner_type": "User",
"is_verified": null,
"owner_login": "tfcace",
"public_repos": 12,
"account_age_days": 2427
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "4 followers of tfcace",
"points": 5,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 4,
"login": "tfcace"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "12 public repos, account ~6 yr old",
"points": 20.1,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 12
}
},
{
"code": "account_age_years",
"params": {
"years": 6
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"github.com/tfcace/hash"
],
"ecosystems": "go",
"any_deprecated": false,
"min_days_since_publish": 6
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on go",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "go"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 6 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 6
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "15 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 15
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 89,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "excellent",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 82,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "5 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 5
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".golangci.yml",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "27 out of 28 merged PRs checked by a CI test -- score normalized to 9",
"points": 18,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "exceptional",
"name": "Documentation",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"topics": [
"acp",
"agent-client-protocol",
"ai",
"bubbletea",
"claude-code",
"cli",
"gemini-cli",
"golang",
"llm",
"local-first",
"ollama",
"posix",
"shell",
"terminal",
"tui",
"cursor"
],
"has_wiki": true,
"homepage": "https://runhash.dev",
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": "https://runhash.dev",
"points": 15,
"status": "met",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "16 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 16
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 51,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "moderate",
"name": "Security posture",
"note": null,
"notes": [],
"value": 51,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 18,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 0,
"scorecard_aggregate": 5.1
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "27 out of 28 merged PRs checked by a CI test -- score normalized to 9",
"points": 2.2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/5 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is fuzzed",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool detected but not run on all commits",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "8 existing vulnerabilities detected",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "excellent",
"name": "AI Readiness",
"value": 80,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 4233
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "66 of 66 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 66,
"sampled": 66
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "excellent",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"go.sum"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0.21,
"toolchain_manifests": [
"go.mod"
],
"dependency_bot_commit_share": 0.21
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "go.mod (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "go.mod"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".golangci.yml",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".golangci.yml"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "Go (statically typed)",
"points": 11,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "21 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 21,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "21 of the last 100 commits are automated dependency updates",
"points": 8,
"status": "met",
"details": [
{
"code": "dependency_bot_commits",
"params": {
"count": 21,
"sampled": 100
}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "exceptional",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "Go",
"largest_source_bytes": 59046,
"source_files_sampled": 241,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Go (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "Go"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/241 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 241,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "weak",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"demos"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "demos",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "demos"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"labels": [
"library",
"cli"
],
"scores": {
"cli": 4,
"tui": 2,
"library": 6
},
"primary": "library",
"evidence": [
{
"tier": "distribution",
"label": "library",
"source": "registry:go",
"weight": 6
},
{
"tier": "description",
"label": "cli",
"source": "description:cli",
"weight": 2
},
{
"tier": "tags",
"label": "cli",
"source": "tag:cli",
"weight": 2
},
{
"tier": "tags",
"label": "tui",
"source": "tag:tui",
"weight": 2
}
],
"artifacts": [],
"confidence": "medium",
"host_extension": false,
"runs_as_process": true,
"consumed_by_code": true
},
"metrics_version": "2.3.1"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-25T04:34:39.187573Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/t/tfcace/hash.svg",
"full_name": "tfcace/hash",
"license_state": "standard",
"license_spdx": "MIT"
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with tfcace/hash. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.3.1, schema v0.27.0 — full methodology · metrics wiki.
