tmfadhlul/claude-code-profile holds a health index of 49 out of 100, placing it in the At risk band. It scores highest on Vitality (69/100) and lowest on Community & Adoption (35/100). It was last updated 5 days ago. A single contributor accounts for most of its recent work.
49
overall / 100
At risk
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
49
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Direct dependencies free of known advisories — no direct dependency carries a known advisory
25/25
Indirect dependencies free of known advisories — no indirect dependency carries a known advisory
0/40
No advisories left outstanding — no advisory carries a publication date
Inputs used
source
osv
advisories
0
affected_packages
0
assessed_packages
5
unassessed_packages
0
affected_by_severity
none
direct_affected_packages
0
Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:claude-account-sync@0.12.1 runtime dependency closure — what installing the published package pulls in — 5 packages. Reachability is not analyzed.
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
Manageable file sizes — 0/115 source files over 60KB
Inputs used
primary_language
TypeScript
largest_source_bytes
29,091
source_files_sampled
115
oversized_source_files
0
Key facts
3GitHub stars
1contributors
159commits, last 12 months
5days since last push
15releases
1bus factor
0open issues
npmpackage ecosystems
Data collection warnings
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
More detail
Star and fork history 0 ★ / 2 ⇿
0Stars
2Forks
8Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 5Patch 3
OpenSSF Scorecard 3.1 / 10
3.1aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-25 18:42 UTC
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Dependency advisories 0
Installing npm:claude-account-sync@0.12.1 pulls in 5 packages, direct and transitive: 0 carry known advisories, of which 0 are direct dependencies.
No known advisories affect the assessed dependencies.
An advisory means the version recorded in the dependency graph falls inside an advisory’s affected range. Reachability is not analysed, and the graph includes development and test pins — a finding may concern tooling rather than shipped software.
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 588,
"has_wiki": false,
"homepage": null,
"languages": {
"CSS": 5670,
"HTML": 266,
"JavaScript": 3069,
"TypeScript": 523738
},
"pushed_at": "2026-07-19T19:37:14Z",
"created_at": "2026-07-04T22:30:53Z",
"owner_type": "User",
"updated_at": "2026-07-19T19:37:18Z",
"description": null,
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript"
]
},
"owner": {
"blog": null,
"name": "Teuku Fadhlul",
"type": "User",
"login": "tmfadhlul",
"company": null,
"location": null,
"followers": 15,
"avatar_url": "https://avatars.githubusercontent.com/u/37733393?v=4",
"created_at": "2018-03-24T09:08:38Z",
"is_verified": null,
"public_repos": 19,
"account_age_days": 3045
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.12.0",
"kind": "minor",
"published_at": "2026-07-17T07:54:15Z"
},
{
"tag": "v0.11.1",
"kind": "patch",
"published_at": "2026-07-13T01:06:50Z"
},
{
"tag": "v0.11.0",
"kind": "minor",
"published_at": "2026-07-13T00:45:12Z"
},
{
"tag": "v0.10.0",
"kind": "minor",
"published_at": "2026-07-13T00:06:32Z"
},
{
"tag": "v0.9.2",
"kind": "patch",
"published_at": "2026-07-12T23:42:03Z"
},
{
"tag": "v0.9.1",
"kind": "patch",
"published_at": "2026-07-12T23:21:34Z"
},
{
"tag": "v0.9.0",
"kind": "minor",
"published_at": "2026-07-12T22:18:36Z"
},
{
"tag": "v0.8.0",
"kind": "minor",
"published_at": "2026-07-10T05:08:36Z"
},
{
"tag": "v0.6.0",
"kind": "minor",
"published_at": "2026-07-06T09:36:15Z"
},
{
"tag": "v0.5.3",
"kind": "patch",
"published_at": "2026-07-06T09:01:54Z"
},
{
"tag": "v0.5.2",
"kind": "patch",
"published_at": "2026-07-06T08:49:36Z"
},
{
"tag": "v0.5.1",
"kind": "patch",
"published_at": "2026-07-06T04:01:04Z"
},
{
"tag": "v0.5.0",
"kind": "minor",
"published_at": "2026-07-05T21:34:18Z"
},
{
"tag": "v0.4.0",
"kind": "minor",
"published_at": "2026-07-05T16:23:22Z"
},
{
"tag": "v0.3.0",
"kind": "minor",
"published_at": "2026-07-05T09:39:14Z"
}
],
"recent_commits": [
{
"oid": "24a7602ddd7d0f8046ee213707b158a83d30dfb0",
"body": "…xable plugin drift loop\n\nTwo defects in discovery's read of installed_plugins.json, both surfacing as\n`clp fix` failing or looping forever.\n\n1. Project-scope installs were counted as profile plugins. `installedPlugins`\n used Object.keys(plugins) with no scope filter, so a profile holding a\n plu\n[…]\ngain, forever. A versionless\n plugin now contributes no drift signal; detecting nothing beats detecting\n noise with no remedy.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "release: ccprofiles-core 0.8.1, claude-account-sync 0.12.1 — fix unfi…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-19T19:36:09Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "74598db9e2a348b94b04a69cdb1d5d9b822c4359",
"body": "…ofile plugin version drift detection + `clp fix`\n\nMotivated by a real incident: mismatched claude-mem versions across six\nClaude profiles fought over the single shared ~/.claude-mem worker — each\nsession killed the other's worker and respawned its own, orphaning a\nchroma-mcp child every cycle until\n[…]\n achievable\ninvariant — hence every holder is updated, not just the laggard.\n\n330 tests (was 311). npm run build + npm test green.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "release: ccprofiles-core 0.8.0, claude-account-sync 0.12.0 — cross-pr…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-17T07:54:15Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "94cef7be904234f7a25f5a921f37f4a535aef371",
"body": "…petual codex mcp drift and doctor/migrate rc-key mismatch\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "release: ccprofiles-core 0.7.3, claude-account-sync 0.11.1 -- fix per…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-13T01:06:50Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "4d9802543182d9ae8c7203fb5a94abb827afba59",
"body": "…or reuses secrets-migrate's own detection\n\nTwo independent bugs found live on a real machine:\n\n1. clp status/adopt never converged for Codex profiles whose config.toml\n has an env table AND a field outside McpServerSchema (e.g. Codex's\n startup_timeout_sec). sortKeys() only sorted the top-level\n[…]\nid 'nothing to fix', with no way out. doctor now calls\n migrateRcSecrets(ctx, {dryRun:true}) directly, so the two can never\n disagree again.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: recursive MCP-drift comparison (perpetual codex sync loop); doct…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-13T01:03:56Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7c021a49ef7e11efb62f454b038624f6e08066ef",
"body": "…s-device sync crash on large plugin caches, better sync diagnostics, staged loading UI\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "release: ccprofiles-core 0.7.2, claude-account-sync 0.11.0 — fix cros…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-13T00:45:12Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "a82a4981d7f704511ccd0ec23366f01c58fa0673",
"body": "… on real installs\n\ncollectAssets treated plugins/ like skills/commands (whole-directory copy),\nbut plugins/ is marketplace git clones + installed-plugin caches — routinely\nmulti-GB (3.9GB on the reporting user's machine). JSON.stringify inside\nsealJson exceeded V8's max string length trying to seri\n[…]\nwired into\nsync/import — file-copying plugins/ was both redundant and, at real scale,\nfatal. Removed 'plugins' from the hub-asset dirs entirely.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(sync): stop walking plugins/ as a hub asset — it crashed sealJson…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-13T00:23:39Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "669709960d6b9de928deda08d8804dd09fe7ec20",
"body": "…tates in the dashboard\n\nsyncserver's catch block swallowed every /manifest failure with zero logging\nanywhere (client only ever saw the generic 'internal error', and the machine\nrunning 'clp serve' had no way to diagnose it either) — a Windows user hit\nthis on first pull. Now logs to the serving pr\n[…]\n visual indicator — added a spinner plus honest staged status text\nthat reflects what each request is actually doing, instead of a frozen label.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(sync): log the real /manifest error server-side; staged loading s…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-13T00:18:37Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "edad99cdf3eb5e40ebccb369b4ef52c3936d4996",
"body": "…, version in UI, -v alias\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "release: claude-account-sync 0.10.0 — pair devices from the dashboard…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-13T00:06:32Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1521192c025b05cbe851470ef05187d99735c850",
"body": "…v alias\n\nPOST /api/pair drives the same PIN-authenticated pairing as clp pair, with a\nPair-device dialog on the Sync page (host/port/PIN/name) — pairing no longer\nrequires the CLI on the receiving machine. GET /api/version feeds a version\nline in the sidebar; the CLI gains -v as a version alias.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(ui): pair devices from the dashboard; show version in sidebar; -…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-13T00:04:19Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "5e0f15af012ab2b23337151e84b21268657d6b4e",
"body": "…ns apply\n\nThe pulled manifest declared plugins but nothing installed them on the peer —\nsync/import now reconcile every claude profile (best-effort, with a pointer to\n'clp plugins apply --all' when claude isn't available). plugins apply is the\nstandalone make-live-match-manifest verb. release cli 0.9.4.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(sync): install plugins after cross-device sync/import; add plugi…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T23:58:46Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "fb7729ddde85e2d2e48a6ea6129f1c0e0ede7b4e",
"body": "…des, dark-mode dashboard; release cli 0.9.3\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: README — plugins matrix, cross-agent handoff, Anthropic auth mo…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T23:50:58Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "0dd64e95b53060f1dc8dd76b7b59180103e0732a",
"body": "…concile uses installed state\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "release: ccprofiles-core 0.7.1, claude-account-sync 0.9.2 — plugin re…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T23:42:03Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "e268998184544b291f5e1ab276f3e3049c330c6a",
"body": "…gins\n\nThe retired union-sharing feature left enabledPlugins entries in settings.json\nfor plugins that were never installed. Reconcile derived 'current' from\nenabledPlugins, saw them as present, and never ran 'claude plugin install' —\nso a synced plugin was listed as enabled but had no commands/skills/MCP.\nLiveProfile now exposes installedPlugins (keys of installed_plugins.json)\nand reconcile diffs against that ground truth.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(plugins): reconcile against installed state, not stale enabledPlu…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T23:39:26Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "c1ae232b7f9be28dc6efb9d495159482bf5c99f1",
"body": "providerAuthMode derived the mode purely from token-value emptiness, so\nselecting API key / Auth token from the login state recomputed back to\n'login' and the token field never appeared. Track the chosen mode as\nexplicit UI state instead. Verified in a browser (Playwright): all three\nmodes switch and reveal the correct token var. release cli 0.9.1.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(ui): Anthropic auth-mode selector was stuck on CLI login",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T23:21:34Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "9cd82bd50e8562133acb6d3476cc49abb5262591",
"body": "…nt handoff, plugins v2 (MCP-style), audit hardening, Anthropic auth-mode\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "release: ccprofiles-core 0.7.0, claude-account-sync 0.9.0 — cross-age…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T22:18:36Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "049132a6ad538d581deda62e153b1dedad4c7c39",
"body": "Anthropic-default provider (empty base URL) now shows a CLI login / API\nkey / Auth token selector instead of the plain info blurb, wired to the\ncore anthropicAuthMode concept via a new providerAuthMode(form) helper.\nCustom providers keep the existing tokenVar toggle unchanged.",
"is_bot": false,
"headline": "feat(ui): 3-way Anthropic authentication selector in the provider editor",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T22:12:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a43810e60f75ef7f97ff13ea28fd2741006d8e7c",
"body": "…or paths",
"is_bot": false,
"headline": "fix(cli): validate base URL before storing provider secret; cover err…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T22:07:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3480b7c26d0da31a4bdc356cfde56017675af193",
"body": "…oken)",
"is_bot": false,
"headline": "feat(cli): provider anthropic auth-mode command (login/api-key/auth-t…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T22:00:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab2d88fd0ba84afa1ed514b9d904052627838675",
"body": null,
"is_bot": false,
"headline": "feat(core): Anthropic auth-mode derive/set helpers",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T21:57:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0261f05528572895ba6ca1455daed48fab616166",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: Anthropic auth-mode implementation plan",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T21:56:30Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2aa701d14e1f2ccddf3180ad04886cfcfd7169f8",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: Anthropic provider auth-mode design spec",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T21:54:53Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "aaee76cb44e92280c99190d8070701fab9988833",
"body": "Add a full dark OKLCH token palette (same hue family as light, not a\nnaive invert) under both prefers-color-scheme and an explicit\n[data-theme] override, plus a persisted sidebar toggle (localStorage\nccp-theme) that stamps data-theme on <html>. Add semantic\nsuccess/warning/info tokens so status pill\n[…]\ncol\"/\"row\" on headers.\n\nAlso fixes the 3 pre-existing UI tsc strict errors from Task 12\n(NAV/TABS tuple-union inference, Toaster position prop) so\n`tsc -p packages/ui/tsconfig.json --noEmit` is clean.",
"is_bot": false,
"headline": "feat(ui): dark mode + diff/table accessibility",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T17:52:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5b9da40a5ecb94883faa4dd200c83ab8ba79fb43",
"body": "…routing, sync preview\n\nTask 12 of audit remediation: matrix toggles now track in-flight cells as a\nSet (no more 2nd-click-clears-1st-click race) with a visible spinner;\ndestructive actions (mcp/plugin sync-to-all, skip-permissions-on, secret\ndetach) now confirm; the boot token is scrubbed from the \n[…]\n patch + add/rm loop; ProfilesPage and\nSecretsPage fetch in parallel; tabs are backed by location.hash for\nrefresh/deep-link/back support; and SyncPage previews a dry-run before\npulling from a device.",
"is_bot": false,
"headline": "fix(ui): toggle race, destructive confirms, token scrub, batch save, …",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T17:41:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c65be64c9e522156a3f45a024ad255fcfaafa3fa",
"body": "…h profile apply\n\n- scanSessions (core/src/sessions.ts) now caches parsed per-file session\n metadata keyed by (mtimeMs, size); unchanged transcripts are served from\n cache instead of re-read+re-parsed on every GET /api/sessions. Also caps\n bytes read per file and per scan request, marking oversiz\n[…]\nsired MCP set) and applies it in the same single save+apply as the\n other fields, instead of requiring a patch + N separate add/rm calls.\n Back-compat with the existing per-field patch is unchanged.",
"is_bot": false,
"headline": "fix(api): cache session scan, cap body size, 404 unknown secret, batc…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T17:27:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "534f75fff1f79345998deeaa683b459953ec4848",
"body": "- cli/core prepack now rebuilds from repo root before packing, so a\n stale local `dist/` can't silently ship\n- add packages/core/README.md and an explicit exports map (core\n previously had no README and no conditional exports)\n- document why root package.json pins vite via overrides",
"is_bot": false,
"headline": "chore: rebuild-on-prepack, ccprofiles-core README, exports map",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T17:19:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a6426b1c1c97c088dbc3bcf09be8b8c20daf3e15",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(cli): --version/--help exit 0 (honor commander exit code)",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T17:16:41Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "3f7ff6aa6aeda20777c1922ddd9c40dc11f13b5e",
"body": "`secrets set <name>` no longer requires the secret as a plaintext argv\npositional (which leaks into shell history and `ps`): with no value it\nreads from a masked stdin prompt (raw-mode, no echo), injectable via\nctx.promptSecret for tests. Passing the value explicitly still works,\nnow with a stderr w\n[…]\nwires up\n`ccprofiles --version`/`-V`, reading the version from the cli\npackage.json via createRequire (works under NodeNext ESM without\nresolveJsonModule, resolves the same from src/ and built dist/).",
"is_bot": false,
"headline": "feat(cli): masked secrets-set prompt + argv warning; --version flag",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T17:15:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d4d7db0d98cdcaf938bc58ec5061712d25f2670b",
"body": "…lures\n\nisWithin used process.platform (the host OS) instead of the target\nPlatform.os already threaded through planApply, so it silently\nmisjudged link containment whenever a plan was built for a different\nOS than the one running it (e.g. win32-target paths on a posix host,\nsince node's bare relati\n[…]\nt history. Now only those two\ncases are swallowed; other failures warn on stderr without throwing\n(manifest.yaml is already written by then). The Task 3 plaintext-secret\ncommit-skip path is unchanged.",
"is_bot": false,
"headline": "fix(core): thread Platform.os in isWithin; don't swallow real git fai…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T17:10:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "980e6937b058f100e0542d3fb1531b23cc9eeeb7",
"body": "…cy plugin restore\n\nThree correctness fixes: (a) planApply now strips the Claude-only `type`\nfield from desired MCP server defs on codex profiles, mirroring\nwriteCodexMcpServers, so the drift check converges instead of re-emitting\nset-mcp-servers on every apply; (b) toTemplate now requires a path-se\n[…]\nmistemplated; (c) restoreLegacyPluginSymlink now throws instead of\nunlinking the symlink when its pool target is missing, so a profile's\nplugins/ can never be silently replaced with an empty real dir.",
"is_bot": false,
"headline": "fix(core): codex MCP drift converges; home-prefix boundary; safe lega…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T17:01:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9d310bb64450206e5848095adf3f69523c54cd58",
"body": null,
"is_bot": false,
"headline": "fix(core): thread real pool root (CCPROFILES_HOME) into buildManifest",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T16:58:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "698b1951f20d9d45f69450c0007120f4dbe9d6b7",
"body": "…t plain links\n\nbuildManifest recorded pool symlinks (claude projects/todos/shell-snapshots,\ncodex sessions) as plain `links` entries and hardcoded sharedSessions: false.\nThe next apply then saw \"linked to pool\" + \"sharing off\" and emitted\nunshare-session-dir, copying the entire by-project shared po\n[…]\nntry> as pooled: it sets\nsharedSessions: true instead of adding a links entry. CLAUDE_SHARED_ENTRIES\nand CODEX_SHARED_ENTRIES are now exported from apply.ts so both sides use the\nidentical entry list.",
"is_bot": false,
"headline": "fix(core): adopt recognizes pooled session dirs as sharedSessions, no…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T16:51:48Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "3079b81b526c76269b8d7200d3979ea3e0c63aa7",
"body": "… import warning\n\nwriteAssets clobbered local hub skills/commands and per-profile\nCLAUDE.md/AGENTS.md with no recovery path when sync --from <device> or\nbundle import wrote over existing files (apply.ts already backed up\neverything else — this was the gap). writeAssets now takes an optional\n{ backup\n[…]\nync route now\nthread ctx.backupRoot + stamp() through. Also updates bundle import's\n--yes confirmation text to call out that local skills/commands/guidance\nfiles will be overwritten (backed up first).",
"is_bot": false,
"headline": "fix(core): back up assets before writeAssets overwrites them; clearer…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T16:46:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8be8d53d4784e08164eb8354d12c9b096d38f2e8",
"body": "A corrupt or unreadable .claude.json/settings.json/config.toml was being\ntreated the same as a genuinely missing file, so set-mcp-servers and\nset-settings-env would silently wipe oauthAccount/projects/hooks/etc by\nreplacing the whole file with just { mcpServers } / { env }. Now only a\nreal ENOENT proceeds as a new file; any other read or parse failure on an\nexisting file backs it up and aborts the action instead.",
"is_bot": false,
"headline": "fix(core): never replace a config whose existing content is unreadable",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T16:41:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bf77d5ae2eddc1599e2a9bf073bf993e047cd78b",
"body": null,
"is_bot": false,
"headline": "fix(core): doctor surfaces plaintext-secret manifest (UI-visible)",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T16:37:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ba97a2d55cc9e3979957a1b92358c9f03399ed3e",
"body": "…octor warns on remote\n\nsaveManifest still writes manifest.yaml (0600) when the serialized YAML\nmatches a plaintext token pattern (sk-ant-*, sk-*, AKIA*), but now skips\nthe git add/commit so the secret never lands in ~/.ccprofiles git\nhistory, warning via stderr instead. Manifests with only secret:/\n[…]\ntor)\nthat warns if the manifest root's git repo has any remote configured,\nsince that would let manifest/secrets history be pushed off-machine.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(core): refuse to git-commit a manifest with a plaintext secret; d…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T16:31:01Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7e7f2b50cf18af7b9b34c333cd3942026f31f7df",
"body": "Close the argv/flag-injection gap: profile names, launchers, marketplace\nnames/sources, and both halves of a plugin id could start with '-' and\ninject a flag into `claude plugin` or the shell launcher. SAFE_NAME and\nSAFE_SOURCE now forbid a leading hyphen while still allowing internal\nhyphens. Profi\n[…]\nsted positional in `plugin install`/`uninstall`/`marketplace add`\nargv — verified against the installed `claude` binary that `--` is\naccepted and correctly stops flag parsing for a leading-dash value.",
"is_bot": false,
"headline": "fix(core): reject leading-dash identifiers; forbid .. in profile dir",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T16:23:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "83fa3507a1c25dd9839887a7eb21437a962aed9d",
"body": "…m tests",
"is_bot": false,
"headline": "fix(core): 0700 manifestRoot before git init; manifest.yaml 0600; per…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T16:19:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "305949adda488db6a5a9cafa1092b1d460ef10c1",
"body": "Secret-bearing files (devices.json's pairing key/token, secrets.enc,\nsecret-names.json, secrets.dpapi.json, and applied settings.json with\nresolved secret:// env values) were written world-readable (~0644).\natomicWrite now accepts { mode?: number } and chmods explicitly after\nrename to sidestep umask surprises; every secret call site passes\n0o600. manifestRoot and the backups dir are created 0o700 wherever\nthey're first made, since secrets.enc/devices.json live directly in\nmanifestRoot.",
"is_bot": false,
"headline": "fix(core): write secret-bearing files 0600 / dirs 0700",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T16:10:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f0261c3d5574f3dea0bf8faaf87af92ad007b3a6",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: audit remediation implementation plan",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-12T16:05:12Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ae98465b36b14be3ec56c4db80a4c30274a951e1",
"body": "…path",
"is_bot": false,
"headline": "fix(core): adopt filters orphan plugin ids; test uninstall reconcile …",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T13:58:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dea331ce667cba2d8823bfea754ab7977fb8cdee",
"body": "Mirrors McpPage: matrix rows are the union of profile plugin ids,\nSwitch toggles call addPlugin/rmPlugin, Add dialog collects id +\nmarketplace source. Adds Plugins nav tab in App.tsx.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "feat(ui): Plugins matrix page",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T13:48:44Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "4c7011061f3044f29c4c9ef76b60e7e1949e8fab",
"body": "Mirrors /api/mcp's GET/POST/DELETE/sync shape for Claude Code plugins,\ndriving the same reconcile-via-runner flow the plugins CLI command uses.\nExtracted reconcilePlugins() out of commands/plugins.ts (alongside the\nnow-exported claudeRunner()) so the CLI and the UI API share one\nimplementation inste\n[…]\ncit\ncodex target 400s across add/delete/sync, matching the CLI's guard.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "feat(api): /api/plugins routes (matrix + add/rm/sync reconcile)",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T13:42:51Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "85c241fa5f20a3c28bec97f92f39f55a7d05dd51",
"body": null,
"is_bot": false,
"headline": "fix(cli): reject codex profiles as explicit plugin targets",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T13:37:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c23c82b099c1eca07004a70efa3919e475e77396",
"body": "Mirrors the mcp command: mutates manifest plugins[]/marketplaces then\nreconciles live profiles via a PluginRunner (real: shells out to\n`claude plugin install/uninstall/marketplace add` with CLAUDE_CONFIG_DIR;\ntest: injected via ctx.pluginRunner). adopt's buildManifest now derives\nthe marketplaces registry and each profile's plugins[] from discovery.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "feat(cli): plugins list/add/rm/sync driving claude plugin CLI + adopt",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T13:30:56Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "399fd8b9cdbc82bef315a4d2ebf75a6f59623e08",
"body": "Adds pure/injectable plugin reconciliation logic for plugins-v2:\nPluginRunner interface, planPluginReconcile (set diff), marketplaceOf\n(id -> marketplace name), reconcileProfilePlugins (uninstall removed,\nthen marketplace-add once per new marketplace + install), and\nrestoreLegacyPluginSymlink (repla\n[…]\ncore/src/index.ts for\nconsumption by the CLI (Task 5) and API (Task 6).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "feat(core): plugin reconciler (planner + runner iface + legacy restore)",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T13:25:43Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "8655f90b78ee0ccf62b314a62e650253f6b3db37",
"body": null,
"is_bot": false,
"headline": "feat(core): discovery reads plugin marketplaces",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T13:22:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "03af125103432944d67b82e3a362fa81507d782a",
"body": null,
"is_bot": false,
"headline": "feat(core): manifest plugins[] + marketplaces registry",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T13:16:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ffef992d4029dd8ae5269466902575037fb55305",
"body": "…del)",
"is_bot": false,
"headline": "revert: remove symlink/union plugin sharing (replaced by MCP-style mo…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T13:06:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "584f44af58e53b244d6b21e07084c7d4dc0418d0",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "docs: plugins v2 MCP-style implementation plan",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T13:00:42Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "3a08d927249ec044b08d36abfea7072088467c92",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "docs: plugins v2 — MCP-style per-profile management design spec",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T12:51:53Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "0692253d3e4ff9ff143a2493017bb6f86e73965a",
"body": "Wires the core handoff helpers (Tasks 1-2) into a CLI verb:\n`handoff --from <p> --to <p> [--print]` resolves both profiles, finds\nthe current cwd's latest source session (accounting for pooled vs.\nisolated session scope), renders+writes the transcript under\n<manifestRoot>/handoffs, resolves the targ\n[…]\ngent directly.\n\nRegistered in context.ts after registerSessionCommands.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "feat(cli): handoff command — open target agent seeded with prior session",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T08:50:09Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "fadf41bb0317924f9d9296cd48958a57a703c3f9",
"body": null,
"is_bot": false,
"headline": "feat(core): launcher handoff intercept (posix + pwsh)",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T08:49:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "edefe2c7c11493f12609a19910a68df1e38e38c1",
"body": "…ld launch",
"is_bot": false,
"headline": "feat(core): handoff helpers — find last session, render markdown, bui…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T08:49:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9871c7689cc8cb070001e46b3129342c80e1b767",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "docs: cross-agent handoff implementation plan",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T08:49:29Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "5b0a1174872fcb32a1e193ec6a91963aff88cb9c",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "docs: cross-agent session handoff design spec",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T08:49:29Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f3913dbdebb315015bfd91c454e7874c0fc8ddd5",
"body": null,
"is_bot": false,
"headline": "fix(core): report plugin backup dir + unshare wording + idempotency test",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T08:45:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2f2ca4515f2c26668968e345efc3e6fbd1d6291a",
"body": "GET /api/profiles now returns sharedPlugins, PATCH accepts and validates\nit as a boolean (400 on non-boolean), mirroring the existing\nsharedSessions handling. The profile editor gets a claude-only \"Share\nplugins pool\" toggle (not launcher-gated) that warns about the\nseed-or-adopt behavior before enabling it on a non-first profile.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "feat(ui): sharedPlugins on profiles API + editor toggle",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T08:37:26Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "cc245be228e7d909a8b37673c9173079c95b60f0",
"body": "Mirrors the sessions CLI command: flips sharedPlugins on the named\nprofile, saves the manifest, and re-applies actions so the plugins\ndir gets pooled/unpooled and enabledPlugins gets unioned.",
"is_bot": false,
"headline": "feat(cli): plugins share/unshare command",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T08:32:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5861422454e8229f23473f6da96ab6a044964d3a",
"body": "Adds seed-or-adopt plugin dir sharing (first shared profile seeds the\npool, later profiles adopt via symlink) and unshare (snapshot pool back\nto a real dir), plus set-enabled-plugins which writes the union of\nenabledPlugins across shared Claude profiles into each settings.json.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "feat(core): share-plugins-dir + enabledPlugins union apply actions",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T08:27:05Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "4a42fe728d1d14e7ad6b49c1f43c4c9ee46a50f3",
"body": "TS2741 was latent because tsc -b excludes test/ and vitest doesn't\ntype-check; adding the required enabledPlugins field to LiveProfile\nbroke the two direct object literals in adopt.test.ts.",
"is_bot": false,
"headline": "test(core): backfill enabledPlugins in LiveProfile fixtures",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T08:24:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "06a05c4fded25dbef46a745470ac2cfbc27edc8e",
"body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "feat(core): discovery reads enabledPlugins from settings.json",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T08:20:30Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "514892d48a4516d47bc3e49f44a1ac2994baf67f",
"body": "Mirrors sharedSessions: a new boolean field on ProfileSchema (default\nfalse) that Tasks 3-5 will use to gate plugin config sharing across\nprofiles. Every ProfileDecl object literal in src/ and test/ updated\nto set it alongside sharedSessions.",
"is_bot": false,
"headline": "feat(core): add sharedPlugins flag to profile schema",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T08:16:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0468bbe47f05432fed2fb265ab4d886336c0d9b7",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "docs: plugin sharing implementation plan",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T08:12:01Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1a513b362e4b06fed9844530372a69a91adb3243",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "docs: plugin sharing across profiles design spec",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T08:01:52Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "86ddbde9508f0771581a9dd9f7682120ac087a74",
"body": "…ranscript viewer, codex user-scope MCP, cross-agent MCP sync\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "release: ccprofiles-core 0.6.0, claude-account-sync 0.8.0 — session t…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T05:08:36Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "83d3bc5dc2e92bc814b4e4da4be82942d105bcce",
"body": "Read a session's full message thread (role/text/label/timestamp) via a new\ncore reader + API route, rendered inline in the Sessions page. Guards session\nids and caps entry size.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "feat: in-dashboard session transcript viewer (Claude + Codex)",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T05:07:59Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "661a7135324a1e40502550c726d8d97fa5c2b4f0",
"body": null,
"is_bot": false,
"headline": "chore: add Ko-fi funding link",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T04:23:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7ba734037d1745a3966115da62c540867964c6be",
"body": null,
"is_bot": false,
"headline": "chore: align npm bin metadata",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T04:16:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "236df471a12fad63a5f0b55c902c73bf05330b1f",
"body": null,
"is_bot": false,
"headline": "feat: revamp dashboard and safely share agent assets",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T04:15:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "196a12212a94488485de5d6546494fe69728f792",
"body": "…roject launchers\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "docs: README — cross-agent MCP sync + Codex user-scope filtering of p…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T03:36:48Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "6473cc1b6433d4b12c6bbf9b3d6292195d7c619f",
"body": "…serve them on write\n\nCodex keeps all MCP servers in one flat global mcp_servers table with no scope\nmarker, so per-project launchers (e.g. CCE 'cce serve --project-dir <path>') leak\ninto clp's user-scope matrix. readCodexMcpServers now filters out --project-dir\nlaunchers; writeCodexMcpServers preserves any it finds so apply never deletes them.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "fix(codex): treat MCP as user-scope — hide project-dir launchers, pre…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T03:19:48Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "c8d11cc7053293516943d4b1e498686861e95ff1",
"body": null,
"is_bot": false,
"headline": "feat: share resumable Codex sessions across profiles",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T02:52:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4f8d65735d2263a14baae830e9a9f876e8d87ee5",
"body": null,
"is_bot": false,
"headline": "fix: harden session viewer scan + use agent-aware profile name in CLI",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T02:37:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4b8856365d2297c5627d8097d36aa88a55b978a1",
"body": "Adds the sessions API client method, a read-only Sessions\nprojects/sessions browser page with a nav tab, and a (non-launcher-gated)\nsharedSessions checkbox in ProfileEditor wired into the patchProfile call.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "feat(ui): Sessions page + sharedSessions toggle",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T02:24:22Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "cff2e50258a2412196e67c26638f91a769fdc1df",
"body": "Surfaces the sharedSessions flag on GET/PATCH /api/profiles and adds\nGET /api/sessions returning scanSessions() over all live profiles.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "feat(api): sessions route + sharedSessions on profiles",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T02:16:09Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "dfab9e1dfe37630193b2a7d525df6d284c1b6d99",
"body": null,
"is_bot": false,
"headline": "feat(cli): sessions share/unshare/list command",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T02:10:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9750b3235cb40d1e76a9ef8ab19be3e61a8babc9",
"body": "Concurrent feature completed in the working tree, committed as one unit\nto unblock session-sharing Tasks 4-6 on the same branch.",
"is_bot": false,
"headline": "feat: codex agent support (discovery, MCP config, UI)",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T02:03:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7b7f5c48966723660f81c7c6beebd05134a03be8",
"body": "Adds a read-only reader that turns the shared pool and each isolated\nprofile's projects/ directory into ProjectSessions[] for the upcoming\nCLI (Task 4) and API (Task 5) session viewers. Parses .jsonl transcripts\nfor first prompt, message count, git branch, model, and real cwd, and\nskips profiles whose projects/ is a symlink into the shared pool.",
"is_bot": false,
"headline": "feat(core): scanSessions reader for pool + isolated profiles",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T01:49:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "776123bcd473e6bcce78a23ce8bc7013f5ed0656",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "feat(core): share/unshare session-dir apply actions",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T01:42:19Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "524c86726748b89ac953961388a679360209b841",
"body": null,
"is_bot": false,
"headline": "test(core): backfill sharedSessions in fixture literals",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T01:39:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9fc0344707f588730bd40e77c071cfe637927a96",
"body": null,
"is_bot": false,
"headline": "feat(core): add sharedSessions flag to profile schema",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T01:34:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "29613bf6b6b34e13d630f0c7b0401fe2d8396602",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "docs: session-sharing implementation plan",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T01:29:20Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "01baec9086407499cff1b622b49e18b6ebc45953",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01LA4Po64G7tE3AKTK7Qh3P4",
"is_bot": false,
"headline": "docs: session-sharing across profiles design spec",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-10T01:14:56Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "01d496b6a13f9be626c9bfad3841003b47b9fb67",
"body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: sync packages/cli/README.md (prepack output)",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-06T09:36:54Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "1555b8b1bbcf90640ab24e0047f4ebeb664d0c36",
"body": "…le skip-permissions launcher toggle\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "release: ccprofiles-core 0.4.0, claude-account-sync 0.6.0 — per-profi…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-06T09:36:15Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "0adfee227682e84a7a16b96402a7080df2dfe7a3",
"body": "…); document toggle in README\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: force skipPermissions off for launcherless profiles (server-side…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-06T09:35:46Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "46b54818cd1c15d18b9d405084422987bad71740",
"body": "…-permissions toggle\n\nAdd skipPermissions: false to pre-existing ProfileDecl/Manifest test\nfixtures for schema consistency, and stop ProfileEditor from PATCHing\na stale skipPermissions:true after the launcher is cleared.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "test: fixture consistency + guard stale skipPermissions; e2e for skip…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-06T09:29:17Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "cb16fd2b48fb987da1c66d5dd41c7449b8224c45",
"body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(ui): skip-permissions checkbox (launcher-gated) + table badge",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-06T09:23:13Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "50eb771113c08e1e6e49dc583cf140cd9bc9695d",
"body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(ui-api): expose and accept skipPermissions on profiles",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-06T09:20:37Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ae52e232cfda485a1ec3bf5a699927cdfdd4e007",
"body": "…rmissions in launcher\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(core): per-profile skipPermissions renders --dangerously-skip-pe…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-06T09:15:39Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2b1e9ef26e1776088c3097170db571551c1bff41",
"body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: plan for skip-permissions launcher toggle",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-06T09:13:03Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "456b041d35024bfb81801c87fff0eab879931398",
"body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: spec for per-profile skip-permissions launcher toggle",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-06T09:11:48Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f01478e932fc82326af17d76f7613c95692c8e4a",
"body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: sync packages/cli/README.md (prepack output)",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-06T09:02:21Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "8e622665d82f8268ce7e958e624921a1ad10f5a9",
"body": "….5.3\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: README — clarify clp manages user-scope MCP only; release cli 0…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-06T09:01:54Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "17d9d7719f3554e74049b1e646607618bb7a5876",
"body": "Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: sync packages/cli/README.md (prepack output)",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-06T08:50:11Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "d447502bffad0d50a34d2efcd7f6df63480a87fa",
"body": "…sphrase); release cli 0.5.2\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: README — per-OS secrets setup (libsecret install + headless pas…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-06T08:49:36Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "c496144eca137d424b5e5c85a1faa6189aaca057",
"body": "…copy on publish\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "release: claude-account-sync 0.5.1 — sync npm README with root; auto-…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-06T04:01:04Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "49c12e60b1728bac0b46a88fe19174ce94f79d65",
"body": "…ution policy, OneDrive)\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: README — using launchers on Windows (PowerShell 7 profile, exec…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-06T03:59:24Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f5430a4d41482c6d10ce6bc02897759e1b5cf419",
"body": "…upport (remote MCP + DPAPI secrets); drop Related projects from README\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "release: ccprofiles-core 0.3.0, claude-account-sync 0.5.0 — Windows s…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-05T21:34:18Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "25ef1e74906b225bc6f6aa2043db187467fec130",
"body": "…ws; gate test-os seam\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(core): gitignore DPAPI secrets file; handle empty secret on Windo…",
"author_name": "Teuku Fadhlul",
"author_login": "tmfadhlul",
"committed_at": "2026-07-05T21:28:59Z",
"body_truncated": false,
"is_coding_agent": true
}
],
"releases_count": 15,
"commits_last_year": 159,
"latest_release_at": "2026-07-17T07:54:15Z",
"latest_release_tag": "v0.12.0",
"releases_from_tags": true,
"days_since_last_push": 5,
"active_weeks_last_year": 3,
"days_since_latest_release": 8,
"mean_days_between_releases": 1.2
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": false,
"has_contributing": false,
"health_percentage": 28,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "claude-account-sync",
"exists": true,
"license": "MIT",
"keywords": [
"claude-code",
"claude",
"profiles",
"accounts",
"mcp",
"cli",
"sync",
"multi-account",
"keychain"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/claude-account-sync",
"is_deprecated": false,
"latest_version": "0.12.1",
"repository_url": "https://github.com/tmfadhlul/claude-code-profile",
"versions_count": 23,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 3474,
"first_published_at": "2026-07-04T23:18:20.282000Z",
"latest_published_at": "2026-07-19T19:36:55.134000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
},
{
"name": "ccprofiles-core",
"exists": true,
"license": "MIT",
"keywords": [
"claude-code",
"claude",
"profiles",
"mcp",
"config-management"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/ccprofiles-core",
"is_deprecated": false,
"latest_version": "0.8.1",
"repository_url": "https://github.com/tmfadhlul/claude-code-profile",
"versions_count": 14,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 2179,
"first_published_at": "2026-07-04T23:03:53.159000Z",
"latest_published_at": "2026-07-19T19:36:31.471000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 5
}
]
},
"popularity": {
"forks": 2,
"stars": 3,
"watchers": 0,
"fork_history": {
"days": [
{
"date": "2026-07-10",
"count": 1
},
{
"date": "2026-07-19",
"count": 1
}
],
"complete": true,
"collected": 2,
"total_forks": 2
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"packages/cli/tsconfig.json",
"packages/core/tsconfig.json",
"packages/ui/tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 29091,
"source_files_sampled": 115,
"oversized_source_files": 0,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 5,
"malicious_count": 0,
"assessed_package": "npm:claude-account-sync@0.12.1",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "ccprofiles-core",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^0.8.1"
},
{
"name": "commander",
"manifest": "packages/cli/package.json",
"ecosystem": "npm",
"version_constraint": "^12.1.0"
},
{
"name": "smol-toml",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^1.7.0"
},
{
"name": "yaml",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^2.5.0"
},
{
"name": "zod",
"manifest": "packages/core/package.json",
"ecosystem": "npm",
"version_constraint": "^3.23.0"
},
{
"name": "@fontsource-variable/manrope",
"manifest": "packages/ui/package.json",
"ecosystem": "npm",
"version_constraint": "^5.2.8"
},
{
"name": "@fontsource-variable/newsreader",
"manifest": "packages/ui/package.json",
"ecosystem": "npm",
"version_constraint": "^5.2.10"
},
{
"name": "@radix-ui/react-dialog",
"manifest": "packages/ui/package.json",
"ecosystem": "npm",
"version_constraint": "^1.1.1"
},
{
"name": "@radix-ui/react-label",
"manifest": "packages/ui/package.json",
"ecosystem": "npm",
"version_constraint": "^2.1.0"
},
{
"name": "@radix-ui/react-slot",
"manifest": "packages/ui/package.json",
"ecosystem": "npm",
"version_constraint": "^1.1.0"
},
{
"name": "@radix-ui/react-switch",
"manifest": "packages/ui/package.json",
"ecosystem": "npm",
"version_constraint": "^1.1.0"
},
{
"name": "class-variance-authority",
"manifest": "packages/ui/package.json",
"ecosystem": "npm",
"version_constraint": "^0.7.0"
},
{
"name": "clsx",
"manifest": "packages/ui/package.json",
"ecosystem": "npm",
"version_constraint": "^2.1.1"
},
{
"name": "lucide-react",
"manifest": "packages/ui/package.json",
"ecosystem": "npm",
"version_constraint": "^0.454.0"
},
{
"name": "react",
"manifest": "packages/ui/package.json",
"ecosystem": "npm",
"version_constraint": "^18.3.1"
},
{
"name": "react-dom",
"manifest": "packages/ui/package.json",
"ecosystem": "npm",
"version_constraint": "^18.3.1"
},
{
"name": "sonner",
"manifest": "packages/ui/package.json",
"ecosystem": "npm",
"version_constraint": "^1.5.0"
},
{
"name": "tailwind-merge",
"manifest": "packages/ui/package.json",
"ecosystem": "npm",
"version_constraint": "^2.5.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 0,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "tmfadhlul",
"commits": 159,
"avatar_url": "https://avatars.githubusercontent.com/u/37733393?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 3,
"reason": "dependency not pinned by hash detected -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 9,
"reason": "1 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "24a7602ddd7d0f8046ee213707b158a83d30dfb0",
"ran_at": "2026-07-25T18:42:45Z",
"aggregate_score": 3.1,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-19T19:38:27Z",
"oldest_open_prs": [],
"last_merged_pr_at": null,
"ci_last_conclusion": "FAILURE",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/tmfadhlul/claude-code-profile",
"host": "github.com",
"name": "claude-code-profile",
"owner": "tmfadhlul"
},
"metrics": {
"overall": {
"key": "overall",
"band": "at_risk",
"name": "Overall health",
"note": null,
"notes": [],
"value": 49,
"inputs": {
"security": 45,
"vitality": 69,
"community": 35,
"governance": 36,
"engineering": 58
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 69,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"commits_last_year": 159,
"human_commit_share": 1,
"days_since_last_push": 5,
"active_weeks_last_year": 3
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 5 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 5
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "3/52 weeks with commits",
"points": 2.1,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 3
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "159 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 159
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 88,
"inputs": {
"releases_count": 15,
"latest_release_tag": "v0.12.0",
"releases_from_tags": true,
"days_since_latest_release": 8,
"mean_days_between_releases": 1.2
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "15 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 15
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 8 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 8
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~1.2 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 1.2
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 35,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 5,
"inputs": {
"forks": 2,
"stars": 3,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "3 stars",
"points": 4.9,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 3
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "2 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 2
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "moderate",
"name": "Community health",
"note": null,
"notes": [],
"value": 50,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": false,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 62,
"inputs": {
"packages": [
"claude-account-sync",
"ccprofiles-core"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 5653
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "5,653 downloads/month across npm",
"points": 50,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 5653,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 36,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 10,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "critical",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution",
"pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"merged_prs": 0,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "no decided pull requests or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_decided_prs_or_data",
"params": {}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "moderate",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 50,
"inputs": {
"followers": 15,
"owner_type": "User",
"is_verified": null,
"owner_login": "tmfadhlul",
"public_repos": 19,
"account_age_days": 3045
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "15 followers of tmfadhlul",
"points": 8.7,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 15,
"login": "tmfadhlul"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "19 public repos, account ~8 yr old",
"points": 21.5,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 19
}
},
{
"code": "account_age_years",
"params": {
"years": 8
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"claude-account-sync",
"ccprofiles-core"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 5
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "2 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 2,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 5 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 5
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "23 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 23
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 58,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 60,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "1 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 1
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 45,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 31,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 15,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 3,
"scorecard_aggregate": 3.1
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 3",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "1 existing vulnerabilities detected",
"points": 6.8,
"status": "partial",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:claude-account-sync@0.12.1 runtime dependency closure — what installing the published package pulls in — 5 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "npm:claude-account-sync@0.12.1",
"assessed": 5
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 5,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 5,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 58,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "100 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 100,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"package-lock.json"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
"packages/cli/tsconfig.json",
"packages/core/tsconfig.json",
"packages/ui/tsconfig.json"
],
"agent_commit_share": 0.6,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "packages/cli/tsconfig.json, packages/core/tsconfig.json, packages/ui/tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "packages/cli/tsconfig.json, packages/core/tsconfig.json, packages/ui/tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "60 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 60,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 29091,
"source_files_sampled": 115,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/115 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 115,
"oversized": 0
}
}
],
"max_points": 55
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-25T18:42:49.532820Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/t/tmfadhlul/claude-code-profile.svg",
"full_name": "tmfadhlul/claude-code-profile",
"license_state": "standard",
"license_spdx": "MIT"
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with tmfadhlul/claude-code-profile. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
