KindMCP serverChat botLibraryNetwork serviceWeb interfaceCommand-line toolhow this is determined
use-agent-os/agent-os holds a health index of 71 out of 100, placing it in the Good band. It scores highest on Engineering Quality (80/100) and lowest on Security (46/100). It was last updated today. A single contributor accounts for most of its recent work.
71
overall / 100
Good
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean, calibrated against the distribution of the public record so bands carry percentile meaning; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At Risk ceiling of 34.
71
Exceptional93-100The record's top tier (≈ top 5%); essentially all checked criteria met
Excellent80-92Strong across the board; minor gaps
Good65-79Healthy; gaps are limited and manageable
Moderate50-64Acceptable with notable gaps; review recommended
Weak35-49Material weaknesses across several areas
At Risk20-34Significant weaknesses; adoption warrants caution
Critical1-19Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
The weighted overall 63 is calibrated to 71 on the published index scale (record calibration 2026-08-02).
How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight (4%): agent tooling is a real maintenance signal, but a repository with none can still reach 100/100.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
deps.dev does not index pypi:use-agent-os@2026.7.30; advisories assessed against the repository dependency graph instead
More detail
Star and fork history 0 ★ / 14 ⇿
0Stars
14Forks
16Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 0Patch 11
OpenSSF Scorecard 4.6 / 10
4.6aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-30 17:25 UTC
The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 19333,
"has_wiki": true,
"homepage": null,
"languages": {
"CSS": 443063,
"HTML": 1324,
"Ruby": 2556,
"Jinja": 15582,
"Shell": 28286,
"Python": 12163582,
"Dockerfile": 4536,
"JavaScript": 4207,
"PowerShell": 43334,
"TypeScript": 2170520
},
"pushed_at": "2026-07-30T16:18:20Z",
"created_at": "2026-07-13T07:30:45Z",
"owner_type": "Organization",
"updated_at": "2026-07-30T16:22:35Z",
"description": "The Open Agent Operation System",
"is_archived": false,
"is_disabled": false,
"license_spdx": "Apache-2.0",
"default_branch": "main",
"license_spdx_raw": "Apache-2.0",
"primary_language": "Python",
"significant_languages": [
"Python",
"TypeScript"
]
},
"owner": {
"blog": "https://useagentos.dev",
"name": "AgentOS",
"type": "Organization",
"login": "use-agent-os",
"company": null,
"location": null,
"followers": 5,
"avatar_url": "https://avatars.githubusercontent.com/u/304313632?v=4",
"created_at": "2026-07-13T06:59:15Z",
"is_verified": null,
"public_repos": 1,
"account_age_days": 17
},
"license": {
"state": "standard",
"spdx_id": "Apache-2.0",
"raw_spdx": "Apache-2.0",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v2026.7.30",
"kind": "patch",
"published_at": "2026-07-30T16:23:32Z"
},
{
"tag": "v2026.7.29",
"kind": "patch",
"published_at": "2026-07-29T15:01:07Z"
},
{
"tag": "v2026.7.28",
"kind": "patch",
"published_at": "2026-07-28T15:21:15Z"
},
{
"tag": "v2026.7.27",
"kind": "patch",
"published_at": "2026-07-27T16:37:30Z"
},
{
"tag": "v2026.7.26",
"kind": "patch",
"published_at": "2026-07-26T17:25:51Z"
},
{
"tag": "v2026.7.25",
"kind": "patch",
"published_at": "2026-07-25T04:41:33Z"
},
{
"tag": "v2026.7.23",
"kind": "patch",
"published_at": "2026-07-23T17:29:14Z"
},
{
"tag": "v2026.7.22.post1",
"kind": "other",
"published_at": "2026-07-22T16:35:23Z"
},
{
"tag": "v2026.7.22",
"kind": "patch",
"published_at": "2026-07-22T03:18:16Z"
},
{
"tag": "v2026.7.20",
"kind": "patch",
"published_at": "2026-07-20T13:57:38Z"
},
{
"tag": "v2026.7.19.post1",
"kind": "other",
"published_at": "2026-07-19T15:00:46Z"
},
{
"tag": "v2026.7.19",
"kind": "patch",
"published_at": "2026-07-19T13:06:25Z"
},
{
"tag": "v2026.7.18.post1",
"kind": "other",
"published_at": "2026-07-18T15:00:39Z"
},
{
"tag": "v2026.7.18",
"kind": "patch",
"published_at": "2026-07-18T14:47:46Z"
},
{
"tag": "v2026.7.17.post1",
"kind": "other",
"published_at": "2026-07-16T20:40:36Z"
},
{
"tag": "v2026.7.17",
"kind": "patch",
"published_at": "2026-07-16T20:01:45Z"
},
{
"tag": "v2026.7.15.post1",
"kind": "other",
"published_at": "2026-07-15T11:11:56Z"
},
{
"tag": "v2026.7.15",
"kind": "patch",
"published_at": "2026-07-15T03:05:44Z"
}
],
"recent_commits": [
{
"oid": "2e422bec178dd1e999ef89c0047ffd66a3eea42b",
"body": "chore(release): bump version to 2026.7.30",
"is_bot": false,
"headline": "Merge pull request #166 from use-agent-os/chore/bump-2026.7.30",
"author_name": "andreapn.eth",
"author_login": "andreapn",
"committed_at": "2026-07-30T16:17:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ec51eebc61f64b68c006120ed79fb89e9d5de594",
"body": "A skills release. The agent can now tell which of its installed skills\napplies to a request — descriptions shorten to fit the prompt budget\ninstead of dropping at a cliff, names-only mode points at `skill_list`,\nthe block moves into the cacheable system prompt, and cron turns get\n`skill_view`/`skill\n[…]\ne (#144), runtime dependencies carry upper\nbounds (#153), and the Web UI skill grid and Installed chip are fixed\n(#135, #161, #121).\n\nCo-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(release): bump version to 2026.7.30",
"author_name": "andreapn.eth",
"author_login": "andreapn",
"committed_at": "2026-07-30T16:13:28Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "1c8025ff3de685307214315e68315fa2ee0c5a36",
"body": "fix(webui): stabilize skill card layout",
"is_bot": false,
"headline": "Merge pull request #164 from thanhtan1105/fix/161-skills-layout",
"author_name": "andreapn.eth",
"author_login": "andreapn",
"committed_at": "2026-07-30T16:07:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a0c15d0edee306c63699e8b9f9ef4529c23761dc",
"body": null,
"is_bot": false,
"headline": "fix(webui): stabilize skill card layout",
"author_name": "yonle",
"author_login": "thanhtan1105",
"committed_at": "2026-07-30T15:59:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d89b5031e819bd15dcda7849bec57ad1d692eede",
"body": "…led-chip\n\nfix(webui): repair installed skill chip in detail dialog",
"is_bot": false,
"headline": "Merge pull request #160 from thanhtan1105/fix/121-skill-detail-instal…",
"author_name": "andreapn.eth",
"author_login": "andreapn",
"committed_at": "2026-07-30T15:54:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "48076703a84d5afc4ccd47478fdf942fadf4d50b",
"body": null,
"is_bot": false,
"headline": "docs: remove unrelated evaluation guide",
"author_name": "yonle",
"author_login": "thanhtan1105",
"committed_at": "2026-07-30T15:11:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d58a357a9d29944f737ca1908cd8fbcc3858da7f",
"body": "fix(skills): stop skill_view spending a whole skill on every read",
"is_bot": false,
"headline": "Merge pull request #163 from keyKQ/fix/skill-view-read-ceiling",
"author_name": "andreapn.eth",
"author_login": "andreapn",
"committed_at": "2026-07-30T14:36:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4f77d0ebb25ffb535cd6a1e12f6812948dac7966",
"body": "Asked for a skill that is not installed, skill_view answered with what not to\ndo — do not go looking on disk — and then \"tell the user the skill is not\ninstalled\". That is a dead end even when a configured hub carries the skill and\nthe tools to fetch it are sitting in the same session, and a model h\n[…]\nn — whose allowlist carries neither hub tool\n— is offered neither. Installing writes to the machine, so it is always phrased\nas something to offer the user, never something to do unasked.\n\nFixes #162.",
"is_bot": false,
"headline": "fix(skills): give skill_view a next step when a skill is not installed",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-30T14:22:31Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "15ccd8b5ff0ee2722c6a919fcf4feabc6fe0d2da",
"body": "Path.relative_to returns a native path, so on Windows the index offered\n'references\\api.md'. The model quotes that back as file_path, where a\nbackslash is an escape character in the tool call's JSON, and it does not\nmatch how a SKILL.md writes its own links. Emit as_posix() instead.\n\nThe reader already normalised separators, so nothing was unreadable — the\ndefect was in what the agent was told to type.",
"is_bot": false,
"headline": "fix(skills): name a skill's linked files with forward slashes on Windows",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-30T13:19:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "02cef56c703cf46a68c28ccedb9ff6c66750edb6",
"body": "skill_view returned every byte of a SKILL.md. That is fine for the shipped\nset — 37 bundled skills, median 2,430 characters, largest 21,647 — but skills\ninstalled from a hub or written for another agent run far larger: 56,209\ncharacters for one, 86,805 for another. At roughly four characters per tok\n[…]\nsolves\nit to the default — verified against a gateway booted from one — the skill\nsnapshot schema is unchanged so no cache is invalidated, and agentos upgrade\nalready restarts the gateway.\n\nRefs #158.",
"is_bot": false,
"headline": "fix(skills): stop skill_view spending a whole skill on every read",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-30T12:43:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2b9623c2f48516dabc6f88f2720d69314b389d51",
"body": "fix(skills): make the skills block something the model can act on",
"is_bot": false,
"headline": "Merge pull request #159 from keyKQ/fix/skills-block-the-model-can-act-on",
"author_name": "andreapn.eth",
"author_login": "andreapn",
"committed_at": "2026-07-30T07:20:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8b119d8b92e1a48fbae42fcedbda8e06de2e8008",
"body": null,
"is_bot": false,
"headline": "fix(webui): repair installed skill chip in detail dialog",
"author_name": "yonle",
"author_login": "thanhtan1105",
"committed_at": "2026-07-30T06:27:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "412c7e813840d081369ddd05006cf7f27e8f5da6",
"body": "An install with skills added could not get the agent to use them: it\nanswered from general knowledge while every skill still reported itself as\noffered. Four independent causes, each sufficient on its own.\n\nThe prompt budget was a cliff. One skill over it and *every* description in\nthe block was dro\n[…]\nwhich reports skill loading as slow and difficult: a name-only\nblock asking for one skill_view per plausible name is a plausible cause of\nthat fan-out, though the slowness itself is not verified here.",
"is_bot": false,
"headline": "fix(skills): make the skills block something the model can act on",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-30T05:55:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2b0e56f199fad3f62116b54f81e1b7aab23e57fe",
"body": "fix(assets): refine Capminal symbol logo paths and square tile",
"is_bot": false,
"headline": "Merge pull request #157 from use-agent-os/fix/capminal-symbol-logo",
"author_name": "andreapn.eth",
"author_login": "andreapn",
"committed_at": "2026-07-30T05:31:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8a900aacc3a5c5b01d2b313084177845baab7fda",
"body": "Update the Capminal brand mark with refined two-blade \"C\" spiral paths for crisper, more detailed rendering. Remove the rounded rx=\"96\" corners from the background tile so it renders as a clean square, and add a descriptive comment documenting the mark.",
"is_bot": false,
"headline": "fix(assets): refine Capminal symbol logo paths and square tile",
"author_name": "andreapn.eth",
"author_login": "andreapn",
"committed_at": "2026-07-30T04:47:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9a0103074c14c9d786d2866b73e0a97fed5c39d4",
"body": "Feat/capminal skills",
"is_bot": false,
"headline": "Merge pull request #144 from Preciousuche/feat/capminal-skills",
"author_name": "andreapn.eth",
"author_login": "andreapn",
"committed_at": "2026-07-30T04:25:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c9a1cd869883fa0ae6f8a9acf0dfab48ba5dd48b",
"body": "…g fallbacks",
"is_bot": false,
"headline": "feat(skills): update Capminal brand asset color and fix logo renderin…",
"author_name": "Bukee",
"author_login": "bukeeastrey",
"committed_at": "2026-07-29T19:49:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e0008f0258cc0428847a9b6defb0c80f8f6a5ae8",
"body": null,
"is_bot": false,
"headline": "chore(packaging): sync uv.lock with pyproject.toml dependency bounds",
"author_name": "Bukee",
"author_login": "bukeeastrey",
"committed_at": "2026-07-29T18:24:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ef311831e9c8289bb3278adacd37ee95d3ec594",
"body": null,
"is_bot": false,
"headline": "chore(packaging): cap runtime dependencies in pyproject.toml (#153)",
"author_name": "Bukee",
"author_login": "bukeeastrey",
"committed_at": "2026-07-29T17:54:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c78458d6fed8c422ebb9c22378a29f3cc7d802b5",
"body": null,
"is_bot": false,
"headline": "merge: resolve CHANGELOG.md conflict with upstream/main",
"author_name": "Bukee",
"author_login": "bukeeastrey",
"committed_at": "2026-07-29T16:54:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af82726e302860298142c82bd02f30995cdeaef4",
"body": "chore(release): bump version to 2026.7.29",
"is_bot": false,
"headline": "Merge pull request #156 from use-agent-os/chore/bump-2026.7.29",
"author_name": "andreapn.eth",
"author_login": "andreapn",
"committed_at": "2026-07-29T14:53:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eaecd7b885e49d1f96c9d4822678f155f9199660",
"body": "Two changes land since v2026.7.28: Bankr skills published from bankr.bot\nunder an author's wallet address are now browsable and installable through\nthe Bankr source (#150), and SECURITY.md states where audit reports belong,\nthat there is no bug bounty program, and how researchers are credited (#154).\n\nCo-Authored-By: Claude Opus 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(release): bump version to 2026.7.29",
"author_name": "andreapn.eth",
"author_login": "andreapn",
"committed_at": "2026-07-29T14:52:04Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "237ea3aa9041903a0bf7aea75972157ac2b8617f",
"body": "…policy\n\ndocs(security): reject audit reports as PRs and state no bounty program",
"is_bot": false,
"headline": "Merge pull request #154 from use-agent-os/docs/security-audit-report-…",
"author_name": "andreapn.eth",
"author_login": "andreapn",
"committed_at": "2026-07-29T08:47:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "62bef08dd947cb43158200a94d6f205051845af0",
"body": "An external contributor opened a PR adding a point-in-time SECURITY_AUDIT.md\nat the repository root. The existing policy covers where to send vulnerability\ndetails but says nothing about audit documents, reward programs, or how\nresearchers get credited, so there was nothing to point at when declinin\n[…]\n form rather than a PR, no bug bounty\nexists or is planned, and researchers whose reports lead to a fix are credited\nin that fix's release notes.\n\nCo-Authored-By: Claude Opus 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(security): reject audit reports as PRs and state no bounty program",
"author_name": "andreapn.eth",
"author_login": "andreapn",
"committed_at": "2026-07-29T08:29:12Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "90a239d197b18a420e5b985ad21deaa586f26bcd",
"body": "feat(skills): install Bankr skills published from bankr.bot",
"is_bot": false,
"headline": "Merge pull request #150 from keyKQ/feat/bankr-registry-skills",
"author_name": "andreapn.eth",
"author_login": "andreapn",
"committed_at": "2026-07-29T07:32:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b15064a8eded38a1a9de2577883127334daa9e1",
"body": "# Conflicts:\n#\tCHANGELOG.md",
"is_bot": false,
"headline": "Merge remote-tracking branch 'upstream/main' into feat/capminal-skills",
"author_name": "Bukee",
"author_login": "bukeeastrey",
"committed_at": "2026-07-28T16:23:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d60c5ec4b718cedbae8fd290be863db1b79d33f0",
"body": null,
"is_bot": false,
"headline": "fix(webui): prevent skill cards from overflowing grid tracks (#135)",
"author_name": "Bukee",
"author_login": "bukeeastrey",
"committed_at": "2026-07-28T16:22:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb16c7eb8c0a056c66f8de7c5f732116105cb773",
"body": "Bankr publishes in two places. The skills in BankrBot/skills are what the\nBankr source has been able to read; anyone can also publish from bankr.bot,\nwhere a skill lives under its author's wallet address and is served by\napi.bankr.bot/public/skills/<wallet>/<slug> as JSON with the body inline.\nThere\n[…]\nrenders unbranded\nrather than in the Partners group, and author avatars are dropped rather\nthan widening the console's img-src CSP.\n\nShips stock-premium-lp-manager as the first such skill.\n\nFixes #149",
"is_bot": false,
"headline": "feat(skills): install Bankr skills published from bankr.bot",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-28T15:32:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5f4bb765c133ae6ca4bfad1a40dacc3ad749d1a0",
"body": "ci: restore Git LFS objects from the Actions cache",
"is_bot": false,
"headline": "Merge pull request #148 from use-agent-os/ci/cache-git-lfs-objects",
"author_name": "andreapn.eth",
"author_login": "andreapn",
"committed_at": "2026-07-28T15:16:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ee83482a112d318235a5772c8c8e2ee8848bcd12",
"body": "The three CI jobs that need the bundled ONNX weights each checked out with\n`lfs: true`, so every run pulled ~45 MB (bge + MiniLM + pilot) three times.\nThat exhausted the account's Git LFS bandwidth quota and blocked checkout on\nevery job with \"This repository exceeded its LFS budget\".\n\nAll three gen\n[…]\nue` + `git lfs pull` path;\ntheir hydration asserts are the last line of defense against shipping a\npointer inside a published wheel.\n\nCo-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: restore Git LFS objects from the Actions cache",
"author_name": "andreapn.eth",
"author_login": "andreapn",
"committed_at": "2026-07-28T15:05:14Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "41cd2adc773d9e66884164678bde5fe294a51f3d",
"body": "chore(release): bump version to 2026.7.28",
"is_bot": false,
"headline": "Merge pull request #147 from use-agent-os/chore/bump-2026.7.28",
"author_name": "andreapn.eth",
"author_login": "andreapn",
"committed_at": "2026-07-28T14:55:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a56dbf8405508e78f9c2565a5853efa02f1b1af",
"body": null,
"is_bot": false,
"headline": "fix(skills): resolve code review findings for Capminal Skills",
"author_name": "Bukee",
"author_login": "bukeeastrey",
"committed_at": "2026-07-28T14:54:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b6711a3c9b3272be57e13738822e51db766c3f16",
"body": "Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(release): bump version to 2026.7.28",
"author_name": "andreapn.eth",
"author_login": "andreapn",
"committed_at": "2026-07-28T14:14:18Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2d14fba65024dd1945e2f124494174ecf6b42063",
"body": "Cmd/Ctrl+Shift+O starts a new chat from anywhere in the console, reusing the same startNewChat flow as the button. The tooltip shows the platform-appropriate hint.\n\nCloses #120",
"is_bot": false,
"headline": "feat(webui): add keyboard shortcut for the new chat button (#131)",
"author_name": "Wasn",
"author_login": "HaimiyaWasn",
"committed_at": "2026-07-28T03:07:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "94c28da164de808627f6111c6e336ae7b422589a",
"body": "Standardizes the route title, sidebar item, page heading, browser tab title, and docs on `Agent Setup`.\n\nCloses #123",
"is_bot": false,
"headline": "fix(webui): standardize Agent Setup labels (#125)",
"author_name": "Kudala Bharani Kumar Reddy",
"author_login": "kudala-bharani",
"committed_at": "2026-07-28T02:42:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c857a182045105cd5f5ab859f524ad7a57b4797e",
"body": null,
"is_bot": false,
"headline": "fix(skills): resolve compile error from registry panel signature change",
"author_name": "Bukee",
"author_login": "bukeeastrey",
"committed_at": "2026-07-27T20:43:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "462d093cdea4c3727629088c91f6f06c632ea7bf",
"body": "# Conflicts:\n#\tfrontend/src/views/skills/SkillsPage.tsx",
"is_bot": false,
"headline": "Merge remote-tracking branch 'upstream/main' into feat/capminal-skills",
"author_name": "Bukee",
"author_login": "bukeeastrey",
"committed_at": "2026-07-27T20:36:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8e273de8df1409ef72490a9a53357faa048004f4",
"body": "…+ tab)",
"is_bot": false,
"headline": "feat(skills): add native support for Capminal Skills (partner source …",
"author_name": "Bukee",
"author_login": "bukeeastrey",
"committed_at": "2026-07-27T18:31:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "93fd50533628405dbefbae8c6d8307cce47ab99b",
"body": "chore(release): bump version to 2026.7.27",
"is_bot": false,
"headline": "Merge pull request #143 from use-agent-os/chore/bump-2026.7.27",
"author_name": "andreapn.eth",
"author_login": "andreapn",
"committed_at": "2026-07-27T16:29:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b5441f18f7b9cb9babc751dacbff292a17a4882d",
"body": "Cut the 2026.7.27 release across every touchpoint the release\nconsistency and install-script guards check: pyproject.toml, uv.lock,\nCHANGELOG.md ([Unreleased] moved into a [2026.7.27] section with an\nempty [Unreleased] reopened), RELEASES.md, README.md install examples\nand wheel URL, install.sh / install.ps1 defaults and usage text, and\nthe CURRENT_VERSION / CURRENT_RELEASE_TAG constants in tests.\n\nNo runtime code changes.\n\nCo-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(release): bump version to 2026.7.27",
"author_name": "andreapn.eth",
"author_login": "andreapn",
"committed_at": "2026-07-27T16:28:19Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "0d7d5718cb1d8886245e0549ffc1d61e7dadb20d",
"body": "…-selection\n\ndocs(config): separate model selection from plain-text mode settings",
"is_bot": false,
"headline": "Merge pull request #133 from use-agent-os/docs/ollama-plaintext-model…",
"author_name": "andreapn.eth",
"author_login": "andreapn",
"committed_at": "2026-07-27T15:33:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e31431a6d4898929c6634a3fd277bac05e0fce68",
"body": "The Ollama plain-text example hardcoded model = \"qwen2.5:7b\" and\nagent_max_iterations = 8. Copying the snippet could overwrite a user's\nconfigured model or point at a model that is not installed locally, and\nthe tool-loop cap is irrelevant while tools are disabled.\n\nModel selection is now a separate\n[…]\nlock shows only the settings plain-text mode\nrequires.\n\nCo-authored-by: Preciousuche <85787225+Preciousuche@users.noreply.github.com>\nCo-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(config): separate model selection from plain-text mode settings",
"author_name": "andreapn.eth",
"author_login": "andreapn",
"committed_at": "2026-07-27T15:31:52Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "13e2cdfd98073000a1a3fe37446bd1cf320d8ca2",
"body": "* feat(skills): make publisher real data behind a server-side allowlist\n\nSkill cards showed partner branding from a name heuristic, so who stands\nbehind a skill was never actually recorded. Add a SkillPublisher field that\na SKILL.md may select by id, and resolve that id against an allowlist so a\nthi\n[…]\nt alone, and an unset\nkey is not materialised.\n\nOne test asserts the point rather than the number: the value it lifts to has to\nactually fit the shipped set in full mode, or the migration is cosmetic.",
"is_bot": false,
"headline": "fix(skills): give every surface one answer about a skill (#132)",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-27T15:27:03Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "03fc2d9a882aeb12cb55e9a39ccc4acb51d8731d",
"body": "…available actions (#129)\n\n* feat(env): look for a credential before asking someone to produce one\n\nA variable reported as missing often is not. The operator has usually already\nrun `gh auth login`, and telling them to go find a token they effectively lost\nis worse than looking where it lives.\n\ncred\n[…]\n skill_view, where the agent is\nactually trying to use the skill, not repeated once per entry across a\nlisting of fifty.\n\n* docs(web-ui): document the credential import offer on the Environment screen",
"is_bot": false,
"headline": "feat(env): find credentials that already exist, and stop promising un…",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-27T10:06:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d88b7861be9dd44793e76642856b0438398c4262",
"body": "…view (#128)\n\n* test(memory): add a curated-memory retention benchmark\n\n\"Memory works poorly\" is a felt thing, not a number, so a rebuild has\nnothing to prove itself against. This drives the real turn path --\nbuild_services -> TurnRunner.run -> nudge review -> the `memory` tool --\nagainst a throwawa\n[…]\nad as a\n40-point regression that had not happened. It decides whether a planted\nfact counts as reaching memory, so a bug in it moves every rate the\nbenchmark reports, and both failures are now pinned.",
"is_bot": false,
"headline": "fix(memory): stop fabricated profile facts and wake the background re…",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-27T10:04:59Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "d44fe7f17b2664316b80c7293b479547ab5495f9",
"body": "…nt (#127)\n\n* feat(env): add a policy-gated writer for ~/.agentos/.env\n\nAgentOS could read .env files but never write one, so every flow that\ndetected a missing environment variable could only tell the operator to go\nedit a dotfile by hand. This lands the write side.\n\nenv_policy holds the gate. Writ\n[…]\nms that were previously parsed into\nunusable keys now take effect, CLI logs move to stderr, and the skill cache\nis rebuilt once.\n\n* docs(changelog): merge the duplicated Fixed section under Unreleased",
"is_bot": false,
"headline": "feat(env): manage environment variables from the Web UI, CLI, and age…",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-27T08:30:19Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bdacd6d07c2f56066e670e188e327b8cde440338",
"body": "* refactor(memory): remove the session flush stack\n\nDelete the session flush subsystem and update every consumer and test\nto match.\n\nRemoved:\n- memory/session_flush.py, memory/flush.py, memory/archive.py\n- the flush wiring in engine/agent.py, engine/runtime.py, gateway/boot.py\n and gateway/rpc_sess\n[…]\npended on the receipt.\n\nVerified on a real install carrying all 11 legacy keys: gateway boots\nclean, the keys are ignored with one warning, memory reads intact, and a\nweb-UI turn completes end to end.",
"is_bot": false,
"headline": "refactor(memory): remove the session flush stack (#124)",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-27T05:26:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "a5a576a4c7e8d3ba04f4c4e23c1f2f4d3fc24726",
"body": "chore(release): bump version to 2026.7.26",
"is_bot": false,
"headline": "Merge pull request #119 from use-agent-os/chore/bump-2026.7.26",
"author_name": "andreapn.eth",
"author_login": "andreapn",
"committed_at": "2026-07-26T17:16:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "64d6df26644107329887ab23f427f281016c3792",
"body": "Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "chore(release): bump version to 2026.7.26",
"author_name": "andreapn.eth",
"author_login": "andreapn",
"committed_at": "2026-07-26T17:15:58Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "95ca8f8d975398c66f100c73ca5689e32493478b",
"body": "…mand (#118)\n\nFirst half of removing the flush stack. Net -3,156 lines.\n\nRemoved:\n - gateway/memory_repair_service.py (891) — existed only to retry failed\n flushes; with the flush service going it has nothing to retry\n - cli/memory_flush_cmd.py (400) and `agentos memory flush-session`\n - `agen\n[…]\nCLI/RPC change, taken deliberately on a 0.x line. Both\ncommand groups already errored out under the default config (flush is off),\nso nothing that worked before stops working.\n\nFull suite 6302 passed.",
"is_bot": false,
"headline": "refactor(memory): remove the repair service and the flush-session com…",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-26T13:03:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "bedf221fd64d33a2f6fc6dc684c797b92d3c52c5",
"body": "…one (#117)\n\n`flush_compaction_safety_mode = \"block\"` tells compaction to refuse unless a\nsafe flush receipt exists. That is a reasonable demand while the flush path\nis running. With flush disabled -- the default -- no receipt is ever written,\nso \"block\" refuses compaction on every turn.\n\nThe failur\n[…]\nerwise wedge compaction permanently for any user who\nhad set either option.\n\nAdds tests/test_compaction_safe_receipt_gate.py (10 tests). Reverting the\ngate turns 4 of them red. Full suite 6333 passed.",
"is_bot": false,
"headline": "fix(compaction): only require a flush receipt when flush can produce …",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-26T12:39:46Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "02bd23366a43b6575f8ef4c9bae11154163af727",
"body": "…tatus (#116)\n\n* refactor(memory): remove Dream consolidation and the orphaned flush_status\n\nTwo removals, both verified dead rather than assumed dead.\n\nflush_status.py had zero production importers. Every `flush_status` hit in\nsrc/ resolved to a different symbol -- mark_compaction_flush_status_with\n[…]\nmpaction_lifecycle stays function-local -- it costs nothing\nand keeps the file safe if that edge ever comes back -- but its comment no\nlonger claims a cycle that is not there.\n\nFull suite 6323 passed.",
"is_bot": false,
"headline": "refactor(memory): remove Dream consolidation and the orphaned flush_s…",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-26T11:33:02Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "720e2f137fb864ed15211016df874ab6e4b27d14",
"body": "memory/flush_status.py imports from session/compaction_lifecycle at module\nscope. compaction_lifecycle.pre_compaction_flush_enabled imports back from\nmemory/flush_config, but from inside the function body -- which is the only\nreason the cycle does not close at import time.\n\nNothing marked that as lo\n[…]\no a neutral module. That is a real option\nand a better end state, but it moves a module two packages depend on -- worth\ndoing on its own rather than folded into a comment fix.\n\nFull suite 6361 passed.",
"is_bot": false,
"headline": "test(memory): pin the memory <-> session import cycle (#115)",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-26T10:05:36Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "b4b8b1052d2682810c9f6f331d32463a7d6a6d97",
"body": "Two write-path defects in the one-time free-form migration.\n\nMEMORY.md was rewritten with a plain write_text, which truncates before the\nnew content lands. Ordering makes that worse than a generic non-atomic write:\noverflow is appended to the archive first, then MEMORY.md is overwritten. A\ncrash dur\n[…]\ny (6 tests) covering both, plus\nthe happy paths so the guards cannot pass by disabling migration. Reverting\neither fix turns 3 of them red. Existing migration tests unchanged.\n\nFull suite 6363 passed.",
"is_bot": false,
"headline": "fix(memory): make the MEMORY.md migration non-destructive (#114)",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-26T10:01:28Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "7c9dec66192da1cdc3dc70c9ed146371177b79f4",
"body": "…113)\n\nMemoryManager.degraded only ever grew. status() records up to five\ndegradations per call -- one per store metric plus curated -- and then\nserializes the entire list into its own response.\n\nUnder a health poller against a broken store that compounds: every poll adds\nfive entries, and every pol\n[…]\nAdds tests/test_memory_degraded_bounded.py (8 tests), including a full\nday-of-polling cycle asserting the list stays at five entries. Reverting the\ndedupe turns 3 of them red.\n\nFull suite 6357 passed.",
"is_bot": false,
"headline": "fix(memory): stop the degraded list growing once per failed metric (#…",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-26T09:51:39Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "92aa8512259b72d732be3d6201f9c693d47890a4",
"body": "TurnCaptureService rewrote the day file with Path.write_text, which opens\nwith \"w\" -- truncate first, then write. The file being rewritten is the whole\nday's captures for that session, appended to on every turn and allowed to\ngrow to capture_roll_max_chars (50 KB default). So the truncate window is\n\n[…]\n(8 tests). The decisive one drives a\nreal capture, fails the rename, and asserts the previous day's content is\nstill there byte-for-byte; reverting to write_text turns it red.\n\nFull suite 6357 passed.",
"is_bot": false,
"headline": "fix(memory): write turn captures atomically (#112)",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-26T09:48:54Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "235f148b1fe8f91894c534ceacebc83d5294a6dd",
"body": "Daily notes are not auto-injected: runtime.py drops them unconditionally\nright before assembling the prompt. But every snapshot build still loaded\nthem first -- a directory scan plus up to daily_notes_total_max_chars of\nfile reads (8 KB default), on session start, after every compaction, and on\never\n[…]\nerting a count of 1, and should: it populates a snapshot\ndirectly, so notes exist in memory and must still be dropped -- a snapshot\ncaptured before this change can carry them.\n\nFull suite 6341 passed.",
"is_bot": false,
"headline": "perf(memory): stop reading daily notes that are always discarded (#111)",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-26T09:42:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "c256f638e7e60302bf66f7a5cd6f140df4def77b",
"body": "…(#109)\n\n#106 introduced _read_raw_checked and routed every WRITE path through it,\nso a transient read failure could no longer flush emptiness over real\nentries. The READ path was left on _read_file, whose own docstring admits it\n\"Returns [] for both empty AND unreadable\" -- and that is the path dec\n[…]\nllowed\nby a recovered file preserves all prior entries and appends normally.\n\nAdds tests/test_memory_curated_load_failure.py (8 tests). Reverting the\nguard turns 3 of them red. Full suite 6338 passed.",
"is_bot": false,
"headline": "fix(memory): surface unreadable curated files instead of going blind …",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-26T09:00:38Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9aba9700f33b6c334397ba1962df7193ca97a6d6",
"body": "… (#110)\n\nUSER.md is a curated memory store in its own right. CuratedMemoryStore\nresolves it alongside MEMORY.md (curated.py `_path_for`), loads it,\nsanitizes it, and puts it in the frozen snapshot that enters the system\nprompt. The periodic memory review added in #108 writes user-profile facts\nther\n[…]\nest_memory_user_md_notify.py (11 tests), including negative cases\nso the widening does not sweep in every root-level markdown file. Reverting\nthe predicate turns 2 of them red. Full suite 6341 passed.",
"is_bot": false,
"headline": "fix(memory): treat USER.md as a memory source for write notifications…",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-26T08:51:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "dfa27fe4d99dc74a3aad05202409d949faf2e8e9",
"body": "* feat(memory): periodic memory-review nudge\n\nCurated memory only fills up when something asks the agent to write to it.\nLeft alone an agent runs for hundreds of turns with an empty MEMORY.md,\nbecause saving is never the most urgent thing in any single turn -- the\nrecent durability fixes made memory\n[…]\nt trigger reviews.\n\nAdds a behavioural test that drives the stage with a transcript port\nreturning False and asserts the nudge still counted; re-nesting the call\nturns it red.\n\nFull suite 6330 passed.",
"is_bot": false,
"headline": "feat(memory): periodic memory-review nudge (#108)",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-26T08:19:14Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "15d991e598fcffad37fb2863fe7580c2dac61f90",
"body": "* fix(memory): restore hermes durability guards in curated store\n\nCuratedMemoryStore was adapted from hermes-agent tools/memory_tool.py but\ndropped several guards the original relies on, two of which could silently\ndestroy or freeze curated memory.\n\nUnreadable != empty. _read_file mapped OSError to \n[…]\nliberately not changed: the curated `memory` tool still does not fire\non_memory_write. Leaving the frozen snapshot alone mid-session is the\nprefix-cache invariant upstream relies on, not an oversight.",
"is_bot": false,
"headline": "fix(memory): lock curated writes on Windows, widen injection scan (#107)",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-26T06:30:49Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9dd2035e55e0c3819372d6b0a03d18ff8c23a5e4",
"body": "CuratedMemoryStore was adapted from hermes-agent tools/memory_tool.py but\ndropped several guards the original relies on, two of which could silently\ndestroy or freeze curated memory.\n\nUnreadable != empty. _read_file mapped OSError to [], and UnicodeDecodeError\nwas not caught at all. A transient lock\n[…]\nr paths still carry it,\nwhich is where it is actually needed.\n\nAdds tests/test_memory_curated_durability.py (17 tests) covering each guard,\nincluding that a failed read leaves the file byte-identical.",
"is_bot": false,
"headline": "fix(memory): restore hermes durability guards in curated store (#106)",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-26T06:30:24Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "cf938af449763fec558777c08829376e3fe5cc6f",
"body": "feat(gateway)!: simplify channel access to pairing",
"is_bot": false,
"headline": "Merge pull request #104 from keyKQ/codex/role-free-pairing-control",
"author_name": "andreapn.eth",
"author_login": "andreapn",
"committed_at": "2026-07-25T17:34:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b22a8460669190b56e99153f1dc7b7c0e4097492",
"body": null,
"is_bot": false,
"headline": "fix(cron): scope job management to profiles",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-25T15:48:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6476a7bf65fea1cdc8d649ba6fe25be8dc219fe7",
"body": "Render common Markdown as escaped Telegram HTML, convert tables into mobile-friendly labeled rows, and preserve explicit parse-mode overrides. Fall back to plain text on entity parse errors and cover messages, edits, captions, and forum replies.",
"is_bot": false,
"headline": "fix(telegram): render markdown replies",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-25T15:00:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f964cc81daab5c6d6f170ec705857d312da843c2",
"body": "Keep admission proofs and validators outside persisted route metadata while preserving queued-turn revalidation. Add network headroom to Telegram long polling and cover both regressions.",
"is_bot": false,
"headline": "fix(telegram): keep pairing runtime state serializable",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-25T15:00:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2174d776beb5687033ae8d9f2404748f8116f79b",
"body": "Replace role and scope authorization with binary Control and Channel connection surfaces backed by explicit RPC audiences.\n\nRequire durable Telegram pairing, safe group admission, and grant revalidation before turns and tools. Remove owner/admin elevation from tools, cron, CLI, and Control UI while preserving sandbox and approval policy.\n\nBREAKING CHANGE: channel roles, scoped tokens, access modes, and unauthenticated public Control are removed.",
"is_bot": false,
"headline": "feat(gateway)!: replace channel roles with pairing surfaces",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-25T15:00:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6b68e8932d0457800a1de980a82a4b47ee020565",
"body": "fix(gateway): non-destructive /new and /reset when flush unavailable",
"is_bot": false,
"headline": "Merge pull request #102 from use-agent-os/fix/session-reset-flush-gate",
"author_name": "andreapn.eth",
"author_login": "andreapn",
"committed_at": "2026-07-25T14:19:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eef97b0f1735b89548da91c5fd985aeb8f1f2de1",
"body": "sessions.reset failed closed with flush_unavailable whenever the flush\nservice was disabled (the default) and no durable checkpoint receipt\ncovered the transcript, intermittently breaking /new and /reset on\nWebUI and Telegram.\n\n- session: add rotate_session_id_archive_only() and report archive\n suc\n[…]\n when a checkpoint\n receipt covers the transcript\n- channels: add ChannelSessionPointers and route channel /new to a\n fresh session key (WebUI \"New Chat\" parity), leaving the old\n session untouched",
"is_bot": false,
"headline": "fix(gateway): non-destructive /new and /reset when flush unavailable",
"author_name": "andreapn.eth",
"author_login": "andreapn",
"committed_at": "2026-07-25T13:58:04Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "229354e99ed306ea7df57a7ed4d71f30c7df0531",
"body": "fix(telegram): allow admitted DM slash commands",
"is_bot": false,
"headline": "Merge pull request #101 from use-agent-os/fix/telegram-dm-slash-commands",
"author_name": "andreapn.eth",
"author_login": "andreapn",
"committed_at": "2026-07-25T07:27:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6870ff6433f5bf90ed6ba625624c2e4e435906bd",
"body": null,
"is_bot": false,
"headline": "fix(telegram): allow admitted DM slash commands",
"author_name": "andreapn.eth",
"author_login": "andreapn",
"committed_at": "2026-07-25T07:26:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "13c81056feae936c34000764fc189e88edc9e819",
"body": "…ting\n\ndocs(security): establish private vulnerability reporting",
"is_bot": false,
"headline": "Merge pull request #99 from keyKQ/codex/enable-private-security-repor…",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-25T06:46:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bedb69f653b585b36ed13424257152e919fd3f4b",
"body": "Add native Telegram typing feedback with a four-second refresh cadence, route chat and forum-topic context through the shared keepalive, and isolate Bot API failures from turn execution. Advertise the capability, document the behavior, and cover payloads, routing, policy selection, cadence, fallback targets, and failure handling with offline regression tests.\n\nFixes #92",
"is_bot": false,
"headline": "feat(telegram): show typing indicators during turns (#100)",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-25T06:44:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a5e71260313bbd915809b505b5e109af3f4de341",
"body": "…e-security-reporting",
"is_bot": false,
"headline": "Merge remote-tracking branch 'upstream/main' into codex/enable-privat…",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-25T06:38:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4074db86eed1154e629d834ab8e8f3e04ec5ea90",
"body": "fix(slack): dispatch socket mode slash commands",
"is_bot": false,
"headline": "Merge pull request #98 from keyKQ/codex/fix-slack-socket-slash-commands",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-25T06:30:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f1ac1fab635c83237abde5e52263291b9aa79fc",
"body": "Point security researchers to the enabled private advisory form and enforce the reporting contract with an offline release-hygiene regression test.",
"is_bot": false,
"headline": "docs(security): document private vulnerability reporting",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-25T06:27:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3e1df8f1716182e30eade31bac0d0215260ad182",
"body": "Normalize slash_commands envelopes through a shared webhook and Socket Mode path so sender, channel, team, command text, and group classification are preserved.\n\nTreat native slash commands as directed interactions so mention-only group gating does not discard them, and add regression coverage for acknowledgement and enqueue behavior.\n\nFixes #55",
"is_bot": false,
"headline": "fix(slack): dispatch socket mode slash commands",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-25T06:19:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2a3e0867db07ce4a37b76a92df7207de2d18e08f",
"body": "…tion\n\nfix(channels): grant admitted senders read access",
"is_bot": false,
"headline": "Merge pull request #97 from keyKQ/codex/fix-channel-command-authoriza…",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-25T06:15:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dc0304466407218bf6504bdec92ac0323416c519",
"body": "fix(slack): classify slash command conversations correctly",
"is_bot": false,
"headline": "Merge pull request #96 from keyKQ/codex/fix-slack-channel-classification",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-25T06:15:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a9503bbd43cfcf238ab46bddff51eb74a2605f66",
"body": "Acknowledge application commands before dispatch and complete deferred original responses for command, batch, and streaming reply paths.",
"is_bot": false,
"headline": "fix(discord): complete native interaction responses (#95)",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-25T06:11:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fb9d154b274c2a9f33b65368e04c9429465f5055",
"body": "Grant operator.read to channel senders after access-policy admission while reserving operator.write for configured channel admins. Document the permission model and cover read/write authorization tiers.\n\nRefs #57",
"is_bot": false,
"headline": "fix(channels): grant admitted senders read access",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-25T06:07:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "eb53e4fa01a1eb9e2b348cf4feb36132ef8ce8ac",
"body": "Derive Slack conversation types from channel ID prefixes and mark native slash forms as explicit interactions. Preserve group access controls while bypassing mention-only gating for slash commands.\n\nRefs #56",
"is_bot": false,
"headline": "fix(slack): classify slash command conversations correctly",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-25T06:04:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5defda024cd9232d24a15c430fad835d57fa99d0",
"body": "Gracefully degrade Discord native command registration failures without aborting gateway startup. Adds regression coverage for REST errors and exhausted rate-limit retries.\\n\\nFixes #54",
"is_bot": false,
"headline": "fix(discord): tolerate command registration failures (#94)",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-25T06:03:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d973e4a85dca41bff846555c345f1d080302f48",
"body": "Acknowledge application commands before dispatch and complete deferred original responses for command, batch, and streaming reply paths.",
"is_bot": false,
"headline": "fix(discord): complete native interaction responses",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-25T05:59:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4a82a3e2e88078434b1e130ca3e1936014c23681",
"body": "…plies\n\nfix(telegram): preserve forum command reply targets",
"is_bot": false,
"headline": "Merge pull request #93 from keyKQ/codex/fix-telegram-forum-command-re…",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-25T05:44:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9515e13fe68ee8008b7d7d55f1c05a88f82c2cd5",
"body": "…mentions-51\n\nfix(telegram): handle native bot command mentions",
"is_bot": false,
"headline": "Merge pull request #64 from thanhtan1105/fix/telegram-native-command-…",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-25T05:43:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "72e57dc3775d651b8b05e6438c5311a892d5d7ea",
"body": "feat(provider): add OpenCAP gateway support",
"is_bot": false,
"headline": "Merge pull request #63 from thanhtan1105/feat/opencap-llm-gateway",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-25T05:41:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe2209ee768c37401f385de1fb3d503f54a75b3e",
"body": "Use the gateway route channel metadata as the Telegram chat ID and map a thread-targeted reply_to value to message_thread_id.\n\nAdd an end-to-end regression test from an inbound forum command through the Bot API payload.\n\nFixes #50",
"is_bot": false,
"headline": "fix(telegram): preserve forum command reply targets",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-25T05:36:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ee498aab03fc5c873122ab5a4ff3c906dda2ad8",
"body": null,
"is_bot": false,
"headline": "fix(telegram): resolve native command edge cases",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-25T05:31:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "32fad70f2085ac7d8f4d08690aeef8861b6cde46",
"body": null,
"is_bot": false,
"headline": "fix(provider): resolve OpenCAP conflicts with React console",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-25T05:31:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ed4a6b727858ea14900fd3d4b26770ad524b5793",
"body": "chore(release): bump version to 2026.7.25",
"is_bot": false,
"headline": "Merge pull request #91 from use-agent-os/chore/bump-2026.7.25",
"author_name": "andreapn.eth",
"author_login": "andreapn",
"committed_at": "2026-07-25T04:32:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ede3c71d33f1e61645ed7deba486ea1bd6ee08ff",
"body": null,
"is_bot": false,
"headline": "docs: add version bump guidelines for release cuts",
"author_name": "andreapn.eth",
"author_login": "andreapn",
"committed_at": "2026-07-25T04:32:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "17b1394d1f375b45535d82b60fd350a943494480",
"body": null,
"is_bot": false,
"headline": "chore(release): bump version to 2026.7.25",
"author_name": "andreapn.eth",
"author_login": "andreapn",
"committed_at": "2026-07-25T04:17:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "23bac767ce41430905e1e36fb09d20f090e254d5",
"body": "fix(platform): resolve windows compatibility type-checking and test s…",
"is_bot": false,
"headline": "Merge pull request #89 from Preciousuche/fix/windows-compatibility",
"author_name": "andreapn.eth",
"author_login": "andreapn",
"committed_at": "2026-07-24T16:43:36Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ded736bd09df100e538525d12ea390512e7e174c",
"body": "…ark latency ceiling",
"is_bot": false,
"headline": "fix(platform): explicitly define and document windows-specific benchm…",
"author_name": "Bukee",
"author_login": "bukeeastrey",
"committed_at": "2026-07-24T14:45:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "24ff9ba2fd3e9d14e93606823aaea2992b99657f",
"body": "…uite bugs",
"is_bot": false,
"headline": "fix(platform): resolve windows compatibility type-checking and test s…",
"author_name": "Bukee",
"author_login": "bukeeastrey",
"committed_at": "2026-07-24T13:04:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ed6fc2aa254d9e8f56d6580f27bea026b751ada1",
"body": "fix(frontend): repair settings, Bankr icons, and session reset",
"is_bot": false,
"headline": "Merge pull request #88 from keyKQ/codex/fix-issues-82-84-85",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-24T12:31:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a125bae48428ab64fff6b8ef11f9dcfeaa986836",
"body": null,
"is_bot": false,
"headline": "test(chat): stabilize tool output modal test",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-24T12:14:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fabcd042a96c715b5d670a66fdcec2aee52d2194",
"body": "Restore embedded Config layout and YAML sizing, use the Bankr brand asset when catalog metadata omits a logo, and add an explicit no-backup reset recovery action shared by chat controls.\n\nRefs #82, #84, #85",
"is_bot": false,
"headline": "fix(frontend): repair settings, Bankr icons, and session reset",
"author_name": "Key KQ",
"author_login": "keyKQ",
"committed_at": "2026-07-24T11:56:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "859adf36a9db97dd6cbbe14a0566db775b20eaa0",
"body": "fix(cli): wrap onboarding prompt input",
"is_bot": false,
"headline": "Merge pull request #87 from use-agent-os/fix/cli-prompt-line-breaks",
"author_name": "andreapn.eth",
"author_login": "andreapn",
"committed_at": "2026-07-24T11:14:04Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 18,
"commits_last_year": 361,
"latest_release_at": "2026-07-30T16:23:32Z",
"latest_release_tag": "v2026.7.30",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 3,
"days_since_latest_release": 0,
"mean_days_between_releases": 1.1
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 100,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "use-agent-os",
"exists": true,
"license": "Apache-2.0",
"keywords": [
"agent",
"chatbot",
"gateway",
"llm",
"mcp",
"router",
"Development Status :: 3 - Alpha",
"License :: OSI Approved :: Apache Software License",
"Operating System :: OS Independent",
"Programming Language :: Python :: 3.12"
],
"ecosystem": "pypi",
"matches_repo": true,
"registry_url": "https://pypi.org/project/use-agent-os/",
"is_deprecated": false,
"latest_version": "2026.7.30",
"repository_url": "https://github.com/use-agent-os/agent-os",
"versions_count": 17,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 2040,
"first_published_at": "2026-07-15T02:55:50.778642Z",
"latest_published_at": "2026-07-30T17:23:26.985764Z",
"latest_version_yanked": null,
"days_since_latest_publish": 0
}
]
},
"popularity": {
"forks": 14,
"stars": 17,
"watchers": 1,
"fork_history": {
"days": [
{
"date": "2026-07-14",
"count": 1
},
{
"date": "2026-07-15",
"count": 1
},
{
"date": "2026-07-16",
"count": 1
},
{
"date": "2026-07-18",
"count": 1
},
{
"date": "2026-07-19",
"count": 1
},
{
"date": "2026-07-20",
"count": 1
},
{
"date": "2026-07-21",
"count": 1
},
{
"date": "2026-07-24",
"count": 1
},
{
"date": "2026-07-27",
"count": 3
},
{
"date": "2026-07-28",
"count": 1
},
{
"date": "2026-07-29",
"count": 2
}
],
"complete": true,
"collected": 14,
"total_forks": 14
},
"star_history": null,
"open_issues_and_prs": 18
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": true,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"frontend/tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 249033,
"source_files_sampled": 1401,
"oversized_source_files": 23,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md",
"docs/agents.md",
"src/agentos/identity/templates/bootstrap/AGENTS.md"
],
"agent_instruction_max_bytes": 10771
},
"dependencies": {
"manifests": [
"frontend/package.json",
"pyproject.toml"
],
"advisories": {
"error": null,
"scope": null,
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm",
"pypi"
],
"dependencies": [
{
"name": "@radix-ui/react-slot",
"manifest": "frontend/package.json",
"ecosystem": "npm",
"version_constraint": "^1.3.0"
},
{
"name": "@tabler/icons-react",
"manifest": "frontend/package.json",
"ecosystem": "npm",
"version_constraint": "^3.45.0"
},
{
"name": "@tanstack/react-query",
"manifest": "frontend/package.json",
"ecosystem": "npm",
"version_constraint": "^5.101.2"
},
{
"name": "class-variance-authority",
"manifest": "frontend/package.json",
"ecosystem": "npm",
"version_constraint": "^0.7.1"
},
{
"name": "clsx",
"manifest": "frontend/package.json",
"ecosystem": "npm",
"version_constraint": "^2.1.1"
},
{
"name": "dompurify",
"manifest": "frontend/package.json",
"ecosystem": "npm",
"version_constraint": "^3.4.12"
},
{
"name": "highlight.js",
"manifest": "frontend/package.json",
"ecosystem": "npm",
"version_constraint": "^11.11.1"
},
{
"name": "lucide-react",
"manifest": "frontend/package.json",
"ecosystem": "npm",
"version_constraint": "^1.25.0"
},
{
"name": "marked",
"manifest": "frontend/package.json",
"ecosystem": "npm",
"version_constraint": "^18.0.7"
},
{
"name": "motion",
"manifest": "frontend/package.json",
"ecosystem": "npm",
"version_constraint": "^12.42.2"
},
{
"name": "react",
"manifest": "frontend/package.json",
"ecosystem": "npm",
"version_constraint": "^19.2.7"
},
{
"name": "react-dom",
"manifest": "frontend/package.json",
"ecosystem": "npm",
"version_constraint": "^19.2.7"
},
{
"name": "react-router",
"manifest": "frontend/package.json",
"ecosystem": "npm",
"version_constraint": "^7.18.1"
},
{
"name": "sonner",
"manifest": "frontend/package.json",
"ecosystem": "npm",
"version_constraint": "^2.0.7"
},
{
"name": "tailwind-merge",
"manifest": "frontend/package.json",
"ecosystem": "npm",
"version_constraint": "^3.6.0"
},
{
"name": "zustand",
"manifest": "frontend/package.json",
"ecosystem": "npm",
"version_constraint": "^5.0.14"
},
{
"name": "starlette",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.40,<2.0"
},
{
"name": "python-multipart",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.0.20"
},
{
"name": "uvicorn",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.30,<1.0"
},
{
"name": "pydantic",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=2.0,<3.0"
},
{
"name": "pydantic-settings",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=2.0,<3.0"
},
{
"name": "sqlmodel",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.0.20,<0.1.0"
},
{
"name": "anyio",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=4.0"
},
{
"name": "httpx",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.27,<0.29"
},
{
"name": "mcp",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=1.2.0,<2.0"
},
{
"name": "brotli",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=1.1"
},
{
"name": "jinja2",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=3.1"
},
{
"name": "structlog",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=24.0"
},
{
"name": "typer",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.12"
},
{
"name": "rich",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=13.0"
},
{
"name": "websockets",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=13.0"
},
{
"name": "aiosqlite",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.20"
},
{
"name": "apscheduler",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=3.10"
},
{
"name": "pyyaml",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=6.0"
},
{
"name": "sqlite-vec",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.1"
},
{
"name": "html2text",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=2024.2"
},
{
"name": "readability-lxml",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.8"
},
{
"name": "beautifulsoup4",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=4.12"
},
{
"name": "cachetools",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=5.3"
},
{
"name": "pdfplumber",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=0.11"
},
{
"name": "pillow",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=10.0"
},
{
"name": "croniter",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=2.0"
},
{
"name": "tomli-w",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=1.0"
},
{
"name": "yoyo-migrations",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=8.2"
},
{
"name": "prompt-toolkit",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=3.0"
},
{
"name": "questionary",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=2.0"
},
{
"name": "python-docx",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=1.1.0"
},
{
"name": "python-pptx",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=1.0.0"
},
{
"name": "openpyxl",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=3.1.0"
},
{
"name": "pypdf",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=4.0.0"
},
{
"name": "reportlab",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=4.0.0"
},
{
"name": "python-telegram-bot",
"manifest": "pyproject.toml",
"ecosystem": "pypi",
"version_constraint": ">=20.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 2,
"merged_prs": 110,
"open_issues": 16,
"closed_ratio": 0.673,
"closed_issues": 33,
"closed_unmerged_prs": 6
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "keyKQ",
"commits": 239,
"avatar_url": "https://avatars.githubusercontent.com/u/122466625?v=4"
},
{
"type": "User",
"login": "andreapn",
"commits": 103,
"avatar_url": "https://avatars.githubusercontent.com/u/107019027?v=4"
},
{
"type": "User",
"login": "thanhtan1105",
"commits": 13,
"avatar_url": "https://avatars.githubusercontent.com/u/12711672?v=4"
},
{
"type": "User",
"login": "bukeeastrey",
"commits": 12,
"avatar_url": "https://avatars.githubusercontent.com/u/158785820?v=4"
},
{
"type": "User",
"login": "iamhaniofficial",
"commits": 8,
"avatar_url": "https://avatars.githubusercontent.com/u/306947529?v=4"
},
{
"type": "User",
"login": "kudala-bharani",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/121555407?v=4"
},
{
"type": "User",
"login": "HaimiyaWasn",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/116284029?v=4"
}
],
"contributors_sampled": 7,
"top_contributor_share": 0.634
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"frontend.yml",
"live-release-e2e.yml",
"llm-e2e.yml",
"pypi-publish.yml",
"webui-browser-smoke.yml",
"wheelhouse-release.yml"
],
"has_docs_dir": true,
"linter_configs": [
"biome.json",
"eslint.config.js"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"package-lock.json",
"uv.lock"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": null,
"reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 10,
"reason": "11 out of 11 merged PRs checked by a CI test -- score normalized to 10",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 5,
"reason": "Found 6/11 approved changesets -- score normalized to 5",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 3,
"reason": "project has 1 contributing companies or organizations -- score normalized to 3",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": 10,
"reason": "packaging workflow detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 0,
"reason": "dependency not pinned by hash detected -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": 0,
"reason": "Project has not signed or included provenance with any releases.",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 10,
"reason": "GitHub workflow tokens follow principle of least privilege",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "71 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "2e422bec178dd1e999ef89c0047ffd66a3eea42b",
"ran_at": "2026-07-30T17:25:38Z",
"aggregate_score": 4.6,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": true,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-30T17:23:32Z",
"oldest_open_prs": [
{
"number": 155,
"created_at": "2026-07-29T09:18:43Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 167,
"created_at": "2026-07-30T17:17:01Z",
"last_comment_at": null,
"last_comment_author": null
}
],
"last_merged_pr_at": "2026-07-30T16:17:01Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": [
{
"number": 126,
"created_at": "2026-07-27T06:54:59Z",
"last_comment_at": "2026-07-27T15:38:51Z",
"last_comment_author": "andreapn"
},
{
"number": 135,
"created_at": "2026-07-27T16:08:20Z",
"last_comment_at": "2026-07-28T02:40:22Z",
"last_comment_author": "keyKQ"
},
{
"number": 136,
"created_at": "2026-07-27T16:08:22Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 137,
"created_at": "2026-07-27T16:08:29Z",
"last_comment_at": "2026-07-28T17:07:04Z",
"last_comment_author": "Preciousuche"
},
{
"number": 138,
"created_at": "2026-07-27T16:08:32Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 139,
"created_at": "2026-07-27T16:17:29Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 140,
"created_at": "2026-07-27T16:17:38Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 141,
"created_at": "2026-07-27T16:19:44Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 142,
"created_at": "2026-07-27T16:26:11Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 145,
"created_at": "2026-07-28T05:59:58Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 151,
"created_at": "2026-07-29T08:24:27Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 152,
"created_at": "2026-07-29T08:24:43Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 153,
"created_at": "2026-07-29T08:24:57Z",
"last_comment_at": "2026-07-29T17:15:01Z",
"last_comment_author": "Preciousuche"
},
{
"number": 158,
"created_at": "2026-07-30T05:50:41Z",
"last_comment_at": null,
"last_comment_author": null
},
{
"number": 161,
"created_at": "2026-07-30T06:22:43Z",
"last_comment_at": "2026-07-30T13:57:56Z",
"last_comment_author": "thanhtan1105"
},
{
"number": 165,
"created_at": "2026-07-30T15:52:37Z",
"last_comment_at": null,
"last_comment_author": null
}
]
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/use-agent-os/agent-os",
"host": "github.com",
"name": "agent-os",
"owner": "use-agent-os"
},
"metrics": {
"overall": {
"key": "overall",
"band": "good",
"name": "Overall health",
"note": "The weighted overall 63 is calibrated to 71 on the published index scale (record calibration 2026-08-02).",
"notes": [
{
"code": "overall_calibration",
"params": {
"raw": 63,
"calibrated": 71,
"calibration": "2026-08-02"
}
}
],
"value": 71,
"inputs": {
"security": 46,
"vitality": 70,
"community": 58,
"governance": 57,
"calibration": "2026-08-02",
"engineering": 80,
"ai_readiness": 66,
"weighted_overall_raw": 63
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 70,
"weight": 0.21,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 56,
"inputs": {
"commits_last_year": 361,
"human_commit_share": 1,
"days_since_last_push": 0,
"active_weeks_last_year": 3
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "3/52 weeks with commits",
"points": 2.1,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 3
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "361 commits in the last year",
"points": 18,
"status": "met",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 361
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": null,
"notes": [],
"value": 90,
"inputs": {
"releases_count": 18,
"latest_release_tag": "v2026.7.30",
"releases_from_tags": false,
"days_since_latest_release": 0,
"mean_days_between_releases": 1.1
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "18 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 18
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~1.1 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 1.1
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "exceptional",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 58,
"weight": 0.17,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 29,
"inputs": {
"forks": 14,
"stars": 17,
"watchers": 1,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "17 stars",
"points": 19.5,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 17
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "14 forks",
"points": 9.3,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 14
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "1 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 1
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "excellent",
"name": "Community health",
"note": null,
"notes": [],
"value": 92,
"inputs": {
"has_readme": true,
"has_license": true,
"readme_badges": null,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": true,
"readme_badge_services": [],
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (Apache-2.0)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "Apache-2.0"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 55,
"inputs": {
"packages": [
"use-agent-os"
],
"dependents": null,
"ecosystems": "pypi",
"total_downloads": null,
"monthly_downloads": 2040
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "2,040 downloads/month across pypi",
"points": 44.1,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 2040,
"ecosystems": "pypi"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 57,
"weight": 0.23,
"metrics": [
{
"key": "maintainer_resilience",
"band": "at_risk",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 30,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 7,
"top_contributor_share": 0.634
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 63% of commits",
"points": 8.2,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 63
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "7 contributors",
"points": 9.5,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 7
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 3,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "good",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Newcomer PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"newcomer_pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 74,
"inputs": {
"merged_prs": 110,
"open_issues": 16,
"closed_issues": 33,
"prs_merged_7d": null,
"prs_decided_7d": null,
"prs_merged_30d": null,
"prs_decided_30d": null,
"issue_closed_ratio": 0.673,
"closed_unmerged_prs": 6,
"first_time_authors_30d": null,
"first_time_prs_merged_30d": null,
"first_time_prs_decided_30d": null
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "67% of issues closed",
"points": 28.3,
"status": "partial",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 67
}
}
],
"max_points": 42
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "110/116 decided PRs merged",
"points": 28.4,
"status": "partial",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 110,
"decided": 116
}
}
],
"max_points": 30
},
{
"key": "newcomer_pr_acceptance",
"name": "Newcomer PR acceptance",
"detail": "no first-time contributor's PR decided in 30d",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_newcomer_prs",
"params": {
"days": 30
}
}
],
"max_points": 13
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 6/11 approved changesets -- score normalized to 5",
"points": 7.5,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "weak",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 38,
"inputs": {
"followers": 5,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "use-agent-os",
"public_repos": 1,
"account_age_days": 17
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "5 followers of use-agent-os",
"points": 5.6,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 5,
"login": "use-agent-os"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "1 public repos, account ~0 yr old",
"points": 2.3,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 1
}
},
{
"code": "account_age_years",
"params": {
"years": 0
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "exceptional",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"use-agent-os"
],
"ecosystems": "pypi",
"any_deprecated": false,
"min_days_since_publish": 0
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on pypi",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "pypi"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 0 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 0
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "17 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 17
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "excellent",
"name": "Engineering Quality",
"value": 80,
"weight": 0.19,
"metrics": [
{
"key": "engineering_practices",
"band": "excellent",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "7 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 7
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "biome.json, eslint.config.js",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "biome.json, eslint.config.js"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "11 out of 11 merged PRs checked by a CI test -- score normalized to 10",
"points": 20,
"status": "met",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "good",
"name": "Documentation",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"topics": [],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "weak",
"name": "Security",
"value": 46,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "weak",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Branch-Protection. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"branch_protection"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 46,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 17,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 1,
"scorecard_aggregate": 4.6
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "11 out of 11 merged PRs checked by a CI test -- score normalized to 10",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 6/11 approved changesets -- score normalized to 5",
"points": 3.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 1 contributing companies or organizations -- score normalized to 3",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "Project has not signed or included provenance with any releases.",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "GitHub workflow tokens follow principle of least privilege",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "71 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "exceptional",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"commit_weight_rule": {
"min_commits": 50,
"min_commit_share": 0.1
},
"review_only_matches": 0,
"below_threshold_exposures": [],
"assessed_self_published_locations": 4
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 66,
"weight": 0.04,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.97,
"agent_instruction_files": [
"AGENTS.md",
"CLAUDE.md",
"docs/agents.md",
"src/agentos/identity/templates/bootstrap/AGENTS.md"
],
"agent_instruction_max_bytes": 10771
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "AGENTS.md, CLAUDE.md, docs/agents.md, src/agentos/identity/templates/bootstrap/AGENTS.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "AGENTS.md, CLAUDE.md, docs/agents.md, src/agentos/identity/templates/bootstrap/AGENTS.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "97 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 97,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"package-lock.json",
"uv.lock"
],
"has_dockerfile": true,
"typed_language": false,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"frontend/tsconfig.json"
],
"agent_commit_share": 0.08,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "biome.json, eslint.config.js",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "biome.json, eslint.config.js"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "frontend/tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "frontend/tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "8 of the last 100 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 8,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 81,
"inputs": {
"primary_language": "Python",
"largest_source_bytes": 249033,
"source_files_sampled": 1401,
"oversized_source_files": 23
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "Python with type-check config (frontend/tsconfig.json)",
"points": 27,
"status": "partial",
"details": [
{
"code": "typecheck_config_language",
"params": {
"files": "frontend/tsconfig.json",
"language": "Python"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "23/1401 source files over 60KB",
"points": 54.1,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 1401,
"oversized": 23
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"example_dirs": [],
"has_mcp_signal": true,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 20,
"status": "met",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? Carries a deliberately small weight: agent tooling is a real maintenance signal, but its absence must never gate the top of the scale (calibration saturates at raw 91, so 100/100 remains reachable with AI Readiness at zero)."
}
],
"classification": {
"labels": [
"mcp-server",
"chat-bot",
"library",
"network-service",
"web-ui",
"cli"
],
"scores": {
"cli": 4,
"web-ui": 4,
"library": 6,
"chat-bot": 6,
"mcp-server": 7,
"network-service": 4
},
"primary": "mcp-server",
"evidence": [
{
"tier": "distribution",
"label": "library",
"source": "registry:pypi",
"weight": 6
},
{
"tier": "dependencies",
"label": "chat-bot",
"source": "dep:python-telegram-bot",
"weight": 4
},
{
"tier": "dependencies",
"label": "cli",
"source": "dep:typer",
"weight": 4
},
{
"tier": "dependencies",
"label": "mcp-server",
"source": "dep:mcp",
"weight": 4
},
{
"tier": "dependencies",
"label": "network-service",
"source": "dep:starlette",
"weight": 4
},
{
"tier": "dependencies",
"label": "web-ui",
"source": "dep:react-dom",
"weight": 4
},
{
"tier": "structure",
"label": "mcp-server",
"source": "mcp_signal",
"weight": 3
},
{
"tier": "tags",
"label": "chat-bot",
"source": "tag:chatbot",
"weight": 2
}
],
"artifacts": [],
"confidence": "medium",
"host_extension": false,
"runs_as_process": true,
"consumed_by_code": true
},
"metrics_version": "2.3.1"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"deps.dev does not index pypi:use-agent-os@2026.7.30; advisories assessed against the repository dependency graph instead"
],
"report_type": "repository",
"generated_at": "2026-07-30T17:25:58.487717Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/u/use-agent-os/agent-os.svg",
"full_name": "use-agent-os/agent-os",
"license_state": "standard",
"license_spdx": "Apache-2.0"
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with use-agent-os/agent-os. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v2.3.1, schema v0.27.0 — full methodology · metrics wiki.
