Read-only mirror of the System module for Winter CMS.
PHP · JavaScript · LessMIT★ 4 stars⑂ 6 forkssince Mar 2021View on GitHub ↗
wintercms/wn-system-module holds a health index of 54 out of 100, placing it in the Moderate band. It scores highest on Vitality (66/100) and lowest on Security (45/100). It was last updated today. 2 contributors account for most of its recent work.
54
overall / 100
Moderate
Software health index
Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.
54
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
Score profile
Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.
Excluded from scoring (no data or not applicable): ci_tests, dangerous_workflow, packaging, pinned_dependencies, signed_releases, token_permissions. Remaining weights renormalized.
How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
No resolved dependencies carried a version and a supported ecosystem
More detail
Star and fork history 0 ★ / 6 ⇿
0Stars
6Forks
26Releases
When each star and fork was added, collected from GitHub and bucketed by day. Cumulative growth sits directly above the daily additions it is made of, so the two read against each other: steady organic accretion looks nothing like an abrupt, short-lived burst. Where that difference is measurable, it is reported as growth authenticity.
Major 0Minor 1Patch 25
Each point covers 5 days.
OpenSSF Scorecard 4.5 / 10
4.5aggregate
Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-25 19:51 UTC
Full resolved dependency set from the GitHub dependency graph: 3 direct and 17 indirect (transitive) packages. The transitive closure is complete when the repository commits a lockfile.
Registry
Package
Version
Relation
npm
@fortawesome/fontawesome-free
^6.5.2
direct
npm
js-cookie
^3.0.1
direct
Packagist
laravel/framework
—
direct
npm
@babel/core
^7.16.0
indirect
npm
@babel/plugin-transform-runtime
^7.16.4
indirect
npm
@babel/preset-env
^7.16.4
indirect
npm
@babel/register
^7.16.0
indirect
npm
@babel/runtime
^7.16.3
indirect
npm
babel-plugin-module-resolver
^5.0.0
indirect
npm
eslint
^8.6.0
indirect
npm
eslint-config-airbnb-base
^15.0.0
indirect
npm
eslint-plugin-import
^2.25.4
indirect
npm
eslint-plugin-vue
^8.5.0
indirect
npm
jest
^27.4.3
indirect
npm
jsdom
^18.1.1
indirect
npm
laravel-mix
^6.0.34
indirect
npm
laravel-mix-polyfill
^3.0.1
indirect
Packagist
composer/installers
—
indirect
Packagist
composer/semver
—
indirect
Packagist
php
—
indirect
Dependency advisories not assessed
Advisory matching could not run for this report: No resolved dependencies carried a version and a supported ecosystem
Raw JSON report machine-readable
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 19805,
"has_wiki": false,
"homepage": null,
"languages": {
"CSS": 15031,
"PHP": 2309167,
"HTML": 11,
"Hack": 7487,
"Less": 418241,
"Blade": 787,
"JavaScript": 1067952
},
"pushed_at": "2026-07-25T19:44:02Z",
"created_at": "2021-03-05T20:52:05Z",
"owner_type": "Organization",
"updated_at": "2026-07-25T19:44:06Z",
"description": "Read-only mirror of the System module for Winter CMS.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "develop",
"license_spdx_raw": "MIT",
"primary_language": "PHP",
"significant_languages": [
"PHP",
"JavaScript",
"Less"
]
},
"owner": {
"blog": "https://wintercms.com",
"name": "Winter CMS",
"type": "Organization",
"login": "wintercms",
"company": null,
"location": "Canada",
"followers": 223,
"avatar_url": "https://avatars.githubusercontent.com/u/80017359?v=4",
"created_at": "2021-03-04T02:18:00Z",
"is_verified": null,
"public_repos": 77,
"account_age_days": 1969
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v1.2.12",
"kind": "patch",
"published_at": "2026-02-20T08:37:49Z"
},
{
"tag": "v1.2.11",
"kind": "patch",
"published_at": "2026-02-08T19:30:26Z"
},
{
"tag": "v1.2.10",
"kind": "patch",
"published_at": "2026-01-21T22:27:15Z"
},
{
"tag": "v1.2.9",
"kind": "patch",
"published_at": "2025-08-13T22:52:19Z"
},
{
"tag": "v1.2.8",
"kind": "patch",
"published_at": "2025-06-25T21:31:18Z"
},
{
"tag": "v1.2.7",
"kind": "patch",
"published_at": "2024-12-04T21:26:45Z"
},
{
"tag": "v1.2.6",
"kind": "patch",
"published_at": "2024-04-25T21:49:06Z"
},
{
"tag": "v1.2.5",
"kind": "patch",
"published_at": "2024-03-05T00:19:17Z"
},
{
"tag": "v1.2.4",
"kind": "patch",
"published_at": "2023-12-05T00:02:49Z"
},
{
"tag": "v1.2.3",
"kind": "patch",
"published_at": "2023-07-07T20:13:19Z"
},
{
"tag": "v1.2.2",
"kind": "patch",
"published_at": "2023-04-27T17:00:16Z"
},
{
"tag": "v1.2.1",
"kind": "patch",
"published_at": "2022-10-20T05:01:16Z"
},
{
"tag": "v1.2.0",
"kind": "minor",
"published_at": "2022-07-15T04:36:00Z"
},
{
"tag": "v1.1.11",
"kind": "patch",
"published_at": "2024-10-16T05:48:52Z"
},
{
"tag": "v1.1.10",
"kind": "patch",
"published_at": "2022-09-16T07:41:23Z"
},
{
"tag": "v1.1.9",
"kind": "patch",
"published_at": "2022-06-26T20:19:41Z"
},
{
"tag": "v1.1.8",
"kind": "patch",
"published_at": "2022-02-15T16:43:29Z"
},
{
"tag": "v1.1.7",
"kind": "patch",
"published_at": "2021-11-07T18:30:51Z"
},
{
"tag": "v1.1.6",
"kind": "patch",
"published_at": "2021-08-10T03:35:44Z"
},
{
"tag": "v1.1.5",
"kind": "patch",
"published_at": "2021-08-10T03:35:44Z"
},
{
"tag": "v1.1.4",
"kind": "patch",
"published_at": "2021-08-20T22:02:52Z"
},
{
"tag": "v1.1.3",
"kind": "patch",
"published_at": "2021-08-09T16:57:00Z"
},
{
"tag": "v1.1.2",
"kind": "patch",
"published_at": "2021-03-12T06:37:47Z"
},
{
"tag": "v1.0.475",
"kind": "patch",
"published_at": "2022-03-02T21:08:17Z"
},
{
"tag": "v1.0.474",
"kind": "patch",
"published_at": "2021-04-02T02:03:13Z"
},
{
"tag": "v1.0.473",
"kind": "patch",
"published_at": "2021-04-02T02:03:13Z"
}
],
"recent_commits": [
{
"oid": "3f13e6ff39b54bde00850fe5a57afa5bf29844b8",
"body": "* Harden Twig sandbox against SecurityPolicy bypasses (GHSA-8cfw-pcwh-v63w)\n\nThe CVE-2024-54149 blocklist was incomplete: Model::__call transparently\nforwards to the query builder, and models hand out builders, connections,\nrelations and collections the policy did not cover.\n\n- Model the real __call\n[…]\nal\nblocklist (parity with the reporter's proposed fix) and cover with a test.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Merge commit from fork",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2026-07-25T19:43:22Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4b9129b1a21f19913997e726ee017bdf499e6772",
"body": null,
"is_bot": false,
"headline": "Fix code quality",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2026-06-29T19:37:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a2703ca2ecea817d80ec29c8b314de8f435be86d",
"body": null,
"is_bot": false,
"headline": "Improve LESS import security functionality",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2026-06-29T19:21:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "045b8de2eb859531c3819fe8fe5a4b1d9a50066d",
"body": null,
"is_bot": false,
"headline": "fix(php): resolve PHP 8.4/8.5 deprecations (#1486)",
"author_name": "Derrick Austin",
"author_login": "austinderrick",
"committed_at": "2026-05-28T16:05:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b2aaf1fa353d4f74f70b992222f7682036b628c8",
"body": null,
"is_bot": false,
"headline": "Improve Ukrainian translation (#1470)",
"author_name": "gviabcua",
"author_login": "gviabcua",
"committed_at": "2026-05-27T22:09:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3b21b9b8aeabe8ec65051bada34b36c109ecb4a6",
"body": "… (#1478)\n\nFixes #421",
"is_bot": false,
"headline": "Fix infinite loop in form widget with circular dependsOn declarations…",
"author_name": "Derrick Austin",
"author_login": "austinderrick",
"committed_at": "2026-05-27T22:03:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4cb861e87af7e9ee8c9cbaa22ab1d1339d60dd91",
"body": null,
"is_bot": false,
"headline": "Fix TypeError when removing a non-existent plugin (#1484)",
"author_name": "fanti1",
"author_login": "fanti1",
"committed_at": "2026-05-27T00:21:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b7cf378185a9a94d6a0f78d3aff92ec85724695",
"body": "* Added support for returning vite assets in their correct group\n\n* Add tests\n\n* Added expanded asset type detection for the ai\n\n* Apply suggestion from @jaxwilko\n\n---------\n\nCo-authored-by: Luke Towers <git@luketowers.ca>",
"is_bot": false,
"headline": "Added support for returning vite assets in their correct group (#1481)",
"author_name": "Jack Wilkinson",
"author_login": "jaxwilko",
"committed_at": "2026-05-13T15:33:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5285fd120b51ece542202c8b66e57787f72d4f47",
"body": "* Added basic viewer for event log details\n\n* Apply suggestion from @jaxwilko",
"is_bot": false,
"headline": "Added basic viewer for event log details (#1482)",
"author_name": "Jack Wilkinson",
"author_login": "jaxwilko",
"committed_at": "2026-05-13T05:24:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab424119f26f5877dff380a5e044ca3006840646",
"body": "Some permissions in the Backend and CMS are expected to be given only to\ntrusted users, as they grant access to features of the CMS that can\nnegatively manipulate the experience of other users or grant themselves\nmore access than intended. We now make this explicit by providing hints\nabout these permissions.\n\nCo-authored-by: Luke Towers <git@luketowers.ca>",
"is_bot": false,
"headline": "Add comments on risky permissions (#1468)",
"author_name": "Ben Thomson",
"author_login": "bennothommo",
"committed_at": "2026-03-14T14:11:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8f0c4daac6cca3264583b234aa1062fa4a93c9df",
"body": "Fixes #1416, replaces #1417",
"is_bot": false,
"headline": "Fix z-index on MediaManager move dropdown",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2026-02-20T08:37:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "67f0b5cd8b104e46234e4c129262e598f19e8bb1",
"body": "This adds common License file names (which usually don't come with extensions) to the list of searchable files.",
"is_bot": false,
"headline": "Detect plugin license filenames without extensions (#1452)",
"author_name": "Hendrik Erz",
"author_login": "nathanlesage",
"committed_at": "2026-02-08T19:30:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c7e139a89b324088370667b4b9e009ff942184eb",
"body": "Co-authored-by: Luke Towers <git@luketowers.ca>\nCo-authored-by: Luke Towers <github@luketowers.ca>\n\nRead the PR for the details.",
"is_bot": false,
"headline": "Replace Ace Editor with Monaco Editor (#801)",
"author_name": "Ben Thomson",
"author_login": "bennothommo",
"committed_at": "2026-01-21T22:27:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "580348be05197dbac41694a6a09365b73c2fd1e7",
"body": null,
"is_bot": false,
"headline": "Add escaping to MailBrandSetting as well",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2026-01-14T20:53:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b07699a5c2a178b4922c936a11e30f083bdf2874",
"body": null,
"is_bot": false,
"headline": "Trigger ajaxRedirected event always (#1438)",
"author_name": "Marc Jauvin",
"author_login": "mjauvin",
"committed_at": "2026-01-13T20:33:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1376dd7e61b19c0b44856ce16085327b4d9e90b5",
"body": null,
"is_bot": false,
"headline": "Add .user.ini to list of automatically mirrored files (#1426)",
"author_name": "Marc Jauvin",
"author_login": "mjauvin",
"committed_at": "2025-12-09T21:13:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82d66de15766f8c9ab429e2effd69038474103b1",
"body": null,
"is_bot": false,
"headline": "Add 'llms.txt' to the list of mirrored files (#1425)",
"author_name": "AIC BV",
"author_login": "AIC-BV",
"committed_at": "2025-12-06T13:42:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d44dd4ff59785f67826a3202ab0ae3d95bb8b1e9",
"body": null,
"is_bot": false,
"headline": "Update Font Awesome API URL to specific release - 6.7.2 (#1420)",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-10-30T15:06:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fdf0deebac277909d91a802e85d417d32c1a4e99",
"body": null,
"is_bot": false,
"headline": "Fix 8.1",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-08-13T22:52:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c77c91d1a2734003952b98f67c69ccf309823371",
"body": null,
"is_bot": false,
"headline": "Fix the squeaky gate",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-08-13T22:11:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d788e9408f0c3fed12782f794f543c4a7bb83e05",
"body": "Co-authored-by: Roni Sommerfeld <roni@4tech.mobi>",
"is_bot": false,
"headline": "Include array indexes in FormData for Request.js (#1391)",
"author_name": "Roni Sommerfeld",
"author_login": "phpiando",
"committed_at": "2025-08-07T04:44:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "28ad281754dcfbc68fe66fcd5fe41708be8742dc",
"body": "Co-authored-by: Roni Sommerfeld <roni@4tech.mobi>",
"is_bot": false,
"headline": "Skip null/undefined values in Snowboard.request createFormData (#1386)",
"author_name": "Roni Sommerfeld",
"author_login": "phpiando",
"committed_at": "2025-08-07T04:38:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "379902647b30df0f49abfd4c8630aac23dfa4968",
"body": "Co-authored-by: Matteo Trubini <7964032+matteotrubini@users.noreply.github.com>",
"is_bot": false,
"headline": "Add failover transport to MailSetting (#1315)",
"author_name": "Marc Jauvin",
"author_login": "mjauvin",
"committed_at": "2025-07-28T08:25:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "94a09c761091ead3362e90ae3448e9bd1dd7e3db",
"body": "…red (#1314)\n\nCo-authored-by: Luke Towers <git@luketowers.ca>",
"is_bot": false,
"headline": "Allow \"winter:util compile\" command to download Font Awesome if requi…",
"author_name": "Ben Thomson",
"author_login": "bennothommo",
"committed_at": "2025-07-23T19:43:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c38064a3f01a0444cd5de41dbd70ec136e9caf51",
"body": null,
"is_bot": false,
"headline": "Improve PHP 8.4 support",
"author_name": "Luke Towers",
"author_login": null,
"committed_at": "2025-07-20T05:51:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1ee7fe45bc7aa672971cd87c7fa837af84aec73a",
"body": "Replaces #1377.\nCo-authored-by: Matteo Trubini <7964032+matteotrubini@users.noreply.github.com>",
"is_bot": false,
"headline": "Improve vite base path generation to fix importing fonts (#1388)",
"author_name": "Jack Wilkinson",
"author_login": "jaxwilko",
"committed_at": "2025-07-16T21:04:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "010394f8eb51684ab5b1862c420553950ce34a2d",
"body": null,
"is_bot": false,
"headline": "Fix winter:util purge uploads deleting files that are in-use (#1387)",
"author_name": "Mark Bingham",
"author_login": "Mrkbingham",
"committed_at": "2025-07-16T20:06:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "da5858f0335c10200b0028207247585d53930369",
"body": null,
"is_bot": false,
"headline": "Add fix to unify asset:compile & asset:watch arguments (#1384)",
"author_name": "Jack Wilkinson",
"author_login": "jaxwilko",
"committed_at": "2025-07-09T14:49:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e25244cd22594943d3a43a17bf8deb904839470d",
"body": "…for the command scaffolder (#1379)",
"is_bot": false,
"headline": "Add support for hyphens in command names and specifying descriptions …",
"author_name": "Damien MATHIEU",
"author_login": "damsfx",
"committed_at": "2025-07-02T20:11:46Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4556ba7226c1a1384a17b402ebc7c091750e6e86",
"body": "Co-authored-by: Marc Jauvin <marc.jauvin@gmail.com>\nCo-authored-by: Luke Towers <luke@luketowers.ca>\n\nAdds default views for the following backend controller behaviors:\n\n- FormController\n- ImportExportController\n- ListController\n- ReorderController\n\n`Backend\\Classes\\ControllerBehavior` will now auto\n[…]\n\n- Improved handling of `abort(404)` in the backend\n- Improved styling of disabled fields in the fancy form layout\n- Improved styling of file generated / updated status message in scaffolding commands",
"is_bot": false,
"headline": "Add support for Behaviour default views (#1312)",
"author_name": "Jack Wilkinson",
"author_login": "jaxwilko",
"committed_at": "2025-06-25T21:31:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "58b1c67ef7655e21bcaf6178b9f0faa511f6374c",
"body": null,
"is_bot": false,
"headline": "Add asset:create module support (#1370)",
"author_name": "Jack Wilkinson",
"author_login": "jaxwilko",
"committed_at": "2025-06-18T18:28:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2115e400dbeb8af8e8103ad06641811184a308fc",
"body": null,
"is_bot": false,
"headline": "Fix support for --force in winter:env (#1368)",
"author_name": "Isaiah Paget",
"author_login": "IsaiahPaget",
"committed_at": "2025-06-13T04:29:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "37fb24fc5ae54271e1156e5219ed57929579ad27",
"body": null,
"is_bot": false,
"headline": "Added fix for multiple vite assets being deleted as duplicate (#1362)",
"author_name": "Jack Wilkinson",
"author_login": "jaxwilko",
"committed_at": "2025-06-06T17:14:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d0e07143683e4bd5875c80cb5758b16cd5906601",
"body": null,
"is_bot": false,
"headline": "Improve Dutch translation (#1357)",
"author_name": "AIC BV",
"author_login": "AIC-BV",
"committed_at": "2025-05-28T20:19:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "28240a81bfc4189298761e67c37a65ae341ee3c7",
"body": null,
"is_bot": false,
"headline": "only show sort icon if column is actually sortable (#1356)",
"author_name": "Marc Jauvin",
"author_login": "mjauvin",
"committed_at": "2025-05-19T16:19:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e9d9269d7ea4962bd7af7139250507b0c3f43034",
"body": "Co-authored-by: Marc Jauvin <marc.jauvin@gmail.com>\n\nDocumented by https://github.com/wintercms/docs/pull/235",
"is_bot": false,
"headline": "List filter improvements (button-group & dropdown filter scopes) (#1349)",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-05-09T20:28:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e6363f5ecdb9cd2122afc05590df3680886b72ce",
"body": null,
"is_bot": false,
"headline": "Redo migration",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-05-09T15:05:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6bd2e0621d4da1f6aafd48d973bf607d72a16cb6",
"body": null,
"is_bot": false,
"headline": "Fix migration",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-05-09T15:03:33Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7a87c01d2bd4dfcd780d0b25e9edd3df91e7197a",
"body": null,
"is_bot": false,
"headline": "Fix casing in namespace",
"author_name": "Ben Thomson",
"author_login": "bennothommo",
"committed_at": "2025-05-08T07:40:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5b50f2ec442fb5191f5306a666704af1980f1f86",
"body": "Style read-only columns with slightly darker grey background to indicate read-only state\nPrevent editors from being created for all column types if read-only (previously, only string columns would be rendered read-only by setting the readonly attribute, this is not ideal because it can be easily cha\n[…]\ndding and deleting buttons are disabled\nFixed styling of toolbar if only the search box is shown (no background previously)\nFixed styling of pagination\nFixed broken search if client datasource is used",
"is_bot": false,
"headline": "Table widget improvements (#1285)",
"author_name": "Ben Thomson",
"author_login": "bennothommo",
"committed_at": "2025-05-05T02:56:09Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "919eec7267aa56f238eea2986dfc79cc3e671bf4",
"body": "…e Lists columns\n\nSortable columns will now display a \"right arrow\" instead of a greyed out down arrow when they aren't actively applied.",
"is_bot": false,
"headline": "Use right arrow for default UI element on currently unapplied sortabl…",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-05-01T20:04:47Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad316e72554f6d69c1b4ae8974b7f32aaa598a95",
"body": null,
"is_bot": false,
"headline": "Added fix for addVite method to bind assets to parent controller (#1345)",
"author_name": "Jack Wilkinson",
"author_login": "jaxwilko",
"committed_at": "2025-04-30T21:50:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aee3e4b73575d762b2ef5dad5e78e36870a3a482",
"body": null,
"is_bot": false,
"headline": "Improve stubs",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-04-27T04:03:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9059a3e780c9151507fae1d9bc700e59c8fa5493",
"body": null,
"is_bot": false,
"headline": "add pull method to allowed session methods (#1342)",
"author_name": "Marc Jauvin",
"author_login": "mjauvin",
"committed_at": "2025-04-23T19:39:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5f8fdd8ec36c5469f7a9458605428c5252273eb4",
"body": null,
"is_bot": false,
"headline": "Improve argument description",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-04-15T16:23:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1ad9172ff9f1d37d00bd2ef20237c8da6ded3293",
"body": null,
"is_bot": false,
"headline": "Fix for case sensitive file systems",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-04-11T08:50:57Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e11b939d60e1b08455fdfaf30125c3e55662c6c8",
"body": "…order",
"is_bot": false,
"headline": "Reset routes during tests so plugin routes are loaded in the correct …",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-04-11T06:37:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "88b4c758329c19717def7c0edac9b606db1e699d",
"body": "…thod signatures on File model",
"is_bot": false,
"headline": "Add migration for metadata column to system_files table and update me…",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-04-10T22:41:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5eaea1be983e02aa0d36cb82f7d8c08c61f6fa5c",
"body": null,
"is_bot": false,
"headline": "Fix tests",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-02-26T18:53:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6aaa42cb8bff2ea9f41a6bf593d235dd021cd62e",
"body": "…n run yet\n\nFixes #1273, #1317. Also fixes issues when trying to interact with a Parameter model when the database is present but the migrations haven't been run yet.",
"is_bot": false,
"headline": "Fix infinite loop when database is present but migrations haven't bee…",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-02-26T18:29:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ffd291cef1b03aa55f8cc9d7caee4fca5ec3425a",
"body": "… being written (#1319)\n\nCo-authored-by: Luke Towers <luke@luketowers.ca>\n\nRequires wintercms/storm#208",
"is_bot": false,
"headline": "Migrate logging code to winter from storm to prevent excess file logs…",
"author_name": "Jack Wilkinson",
"author_login": "jaxwilko",
"committed_at": "2025-02-26T16:47:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "25e3b1bdfeb2a84cc5616605504213f4a9633548",
"body": "Related: https://github.com/wintercms/storm/commit/78f58d14b2676c39b35e86d1797317957a92b1f5",
"is_bot": false,
"headline": "Drop PHP 8.0 support",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-02-26T15:46:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "860f7aed2d73f9b36d1575e0ba4148a5d19b670c",
"body": "…n't been run yet.\n\nRelated: 8c0d2f490030d04187aab7d0605465021b5022d2, https://github.com/octobercms/october/issues/3208, #1317, #1273.",
"is_bot": false,
"headline": "Gracefully handle registering or booting plugins when migrations have…",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-02-26T15:42:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dffb57e2aa940e503047cf275b7f9cdb16cc3abe",
"body": "* Added support for translations to the event log details partial\n\n* Update modules/system/lang/en/lang.php\n\n---------\n\nCo-authored-by: Luke Towers <luke@luketowers.ca>",
"is_bot": false,
"headline": "Added support for translations to the event log details partial (#1310)",
"author_name": "Jack Wilkinson",
"author_login": "jaxwilko",
"committed_at": "2025-02-15T05:52:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "736f1d047537d78cfd9dec5cf554afb75a6d8036",
"body": null,
"is_bot": false,
"headline": "Added fix for some labels in the new exception page (#1309)",
"author_name": "Jack Wilkinson",
"author_login": "jaxwilko",
"committed_at": "2025-02-13T20:34:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5c8ee1752263578fe8896f7f1e8a3dfe0a853761",
"body": "Documented by wintercms/docs#229.\r\n\r\nAdditional instructions for adding to a theme:\r\n\r\n- Run `artisan create:theme mytheme tailwind` to generate a theme that makes use of Tailwind\r\n- Run `artisan vite:create theme-mytheme --tailwind --react --force` to generate the required files for React\r\n- Run `a\n[…]\ne/footer.htm`\r\nAdd the `<div id=\"root\"></div>` element wherever you want your React app to be injected into the DOM (either in `themes/mytheme/layouts/default.htm` or `themes/mytheme/pages/home.htm`).",
"is_bot": false,
"headline": "Add support for React (#1304)",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-02-13T05:19:47Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9e4385086566bfe97a236f37662228ea124d7cbc",
"body": "Co-authored-by: Luke Towers <git@luketowers.ca>\r\nRelated: wintercms/storm#204\r\n\r\nThis adds a fully backwards compatible \"v2\" log viewer that allows of unrolling of all previous exceptions. It also adds snippets for each frame in the call stack and extra information about the environment is recorded and displayed to the user.\r\n\r\nThis is a stopgap solution until we get around to fully implementing the Ignition error page in Winter CMS core and displaying stored errors with that instead.",
"is_bot": false,
"headline": "Added better log viewing (#1303)",
"author_name": "Jack Wilkinson",
"author_login": "jaxwilko",
"committed_at": "2025-02-13T05:13:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1d73c4ca0b12a5615228d9794618debe174537b9",
"body": null,
"is_bot": false,
"headline": "Support customizing the Vite build directory (#1272)",
"author_name": "Roman Chernyshov",
"author_login": "truechernyshov",
"committed_at": "2025-02-05T23:35:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5ae3cc0a45566da93a8a53ffb706347acd17b7a4",
"body": "Co-authored-by: HitArrowLegend <fun_dropper@msn.com>\r\nCo-authored-by: Ben Thomson <git@alfreido.com>",
"is_bot": false,
"headline": "Update Winter's branding colors (#93)",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-02-05T23:19:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe74e23eb343186ad55d9361e86d96023a2f864c",
"body": null,
"is_bot": false,
"headline": "Add `test` alias for `winter:test`",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-02-05T21:32:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6c27e2777e798e5aee2a085a07df48b8096b32b8",
"body": null,
"is_bot": false,
"headline": "Add allowList functionality to Twig security policy (#1293)",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-02-05T21:30:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "491805bff7b224eb9a3e5bbbcf7c680c46bcbc52",
"body": "Requires https://github.com/wintercms/storm/commit/b9b5aae924eaa4be17a10c7c8138732328be6b7f",
"is_bot": false,
"headline": "Improve factory stub",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-02-01T06:46:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "245a9dfec41f59f3541b870cdbc9db0a515a74c3",
"body": null,
"is_bot": false,
"headline": "Clarify decision on adding detected packages",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-01-25T04:50:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3a9bf6e4cbd06a3a4630c4af7028a771f28cad8e",
"body": "Should improve #1288.",
"is_bot": false,
"headline": "Use Laravel's Windows-Friendly symlinking",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-01-22T20:18:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fe3401a7df34302d41fb633c6650038c79556eeb",
"body": null,
"is_bot": false,
"headline": "Fix using vite packages when they're ignored from compiling (#1284)",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2025-01-08T21:04:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4488fa3747035d87c52abff985d903bd81ef094d",
"body": null,
"is_bot": false,
"headline": "Recompile assets",
"author_name": "Ben Thomson",
"author_login": "bennothommo",
"committed_at": "2024-12-19T03:33:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ebe5d5dfe49857c675d30e00f751f91df38cf81e",
"body": "…ASE env values (#1266)\n\nCo-authored-by: Luke Towers <luke@luketowers.ca>\r\n\r\nRelated #1242",
"is_bot": false,
"headline": "Added fix to ensure escaped backslash paths are preserved in DB_DATAB…",
"author_name": "Jack Wilkinson",
"author_login": "jaxwilko",
"committed_at": "2024-12-04T21:26:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f5e038a8e7d0067583380ea2ae0dda195e74a77a",
"body": null,
"is_bot": false,
"headline": "Force mirror absolute paths on Windows (#1265)",
"author_name": "Jack Wilkinson",
"author_login": "jaxwilko",
"committed_at": "2024-12-04T21:04:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4623562445777c9e8e63565817a1471e70831866",
"body": null,
"is_bot": false,
"headline": "Avoid Vite generating an extra `assets` folder in `assets/dist` (#1264)",
"author_name": "Damien MATHIEU",
"author_login": "damsfx",
"committed_at": "2024-12-04T20:15:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "32719152566aa5fee719d43f52d35ab2679fa34a",
"body": null,
"is_bot": false,
"headline": "Add support for showTotals in the Lists widget (#1262)",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2024-12-03T23:03:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "707faa374470cbb07e1f81f1064bb18cb80a1418",
"body": null,
"is_bot": false,
"headline": "Bump vite and laravel vite plugin versions (#1260)",
"author_name": "Jack Wilkinson",
"author_login": "jaxwilko",
"committed_at": "2024-12-03T15:26:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a526993c288bd381921055b79cad412829a9dec4",
"body": null,
"is_bot": false,
"headline": "Allow create:migration --update flag for models without fields.yaml",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2024-12-03T10:02:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "88d589caf137117ecd6abd281b0ce4910fde9a94",
"body": null,
"is_bot": false,
"headline": "Tailwind theme create improvements (#1255)",
"author_name": "Jack Wilkinson",
"author_login": "jaxwilko",
"committed_at": "2024-11-25T17:02:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "24883da838145ae4211634675510c92542493c9a",
"body": "Replaces #1244. Alters how create:theme [name] tailwind works to generate the default asset configs via the vite:* commands, it also runs an initial compile to ensure styles are generated before first load.",
"is_bot": false,
"headline": "Vite theme create (#1253)",
"author_name": "Jack Wilkinson",
"author_login": "jaxwilko",
"committed_at": "2024-11-22T15:53:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8d570ec1f16189e2beaedc1830615d4d671df7bb",
"body": "See https://laravel.com/docs/11.x/artisan#isolatable-commands",
"is_bot": false,
"headline": "Support --isolatable flag on migration command (#1226)",
"author_name": "Alex Orosciuc",
"author_login": "lex0r",
"committed_at": "2024-11-13T22:06:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95e36ebd901b6afc2e8eac6ef8c1c6620a21bc3d",
"body": null,
"is_bot": false,
"headline": "Remove redundent vite logic (#1249)",
"author_name": "Jack Wilkinson",
"author_login": "jaxwilko",
"committed_at": "2024-11-08T09:28:06Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b95f5e5e756b5174db28a55170306b9126f2bbef",
"body": "… (#1235)\"\n\nThis reverts commit 4ff066f4700c82ea5fc7387ea03cbf3cfc6021b9.",
"is_bot": false,
"headline": "Revert \"Attach original AJAX framework events to Snowboard in Backend…",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2024-11-06T21:07:16Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d4f533dc9c11c2471c3af0da8bba20f4e2915976",
"body": "Replaces #1234, fixes #1233.\r\n\r\nInstead of loading framework.extras.css, which appears to be excluded from the Backend, this PR hooks the necessary original AJAX framework events into Snowboard's events, allowing the applicable events to execute UI functionality such as data-attach-loading and the S\n[…]\n a full Snowboard request, so there's the potential for custom Snowboard event listeners to break if they are relying on Snowboard request information, but I'm not aware of that happening yet in core.",
"is_bot": false,
"headline": "Attach original AJAX framework events to Snowboard in Backend (#1235)",
"author_name": "Ben Thomson",
"author_login": "bennothommo",
"committed_at": "2024-10-31T01:27:22Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "2aa7910207102fbf1cf38a1d6978e80720dd6524",
"body": "When using a mirrored public folder (i.e. `artisan winter:mirror public`), the working directory for the request is set to base_path('public') instead of base_path(), so it is important to use absolute paths when calling File::exists() as it internally just calls file_exists(), which uses the curren\n[…]\n8423e91aa0e8ecbeb4fa064#diff-58c1a5c5e22fc25e75bb02e4af9d2085cfe66b8cfe7c3cffc2f32a4fb60240aaR31\n- https://github.com/laravel/framework/issues/45679\n- https://github.com/laravel/framework/issues/13243",
"is_bot": false,
"headline": "Fix compilable assets when using a mirrored public folder",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2024-10-30T22:27:10Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "5d2d26e476a87423125a93634d52e2251d9b9ce6",
"body": null,
"is_bot": false,
"headline": "Move CMS error handling to CMS module",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2024-10-26T09:08:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7d67661d23fc0515d4546733ecbc46dab2db0f14",
"body": "Documented by https://github.com/wintercms/docs/pull/213",
"is_bot": false,
"headline": "Completed npm commands (npm:install, npm:update, npm:run) (#1202)",
"author_name": "Jack Wilkinson",
"author_login": "jaxwilko",
"committed_at": "2024-10-25T19:02:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "76b9331d22c788cd572305a40d2184cbb980d15f",
"body": "This adds support for all abort($code) errors that can be thrown.\r\n\r\n404 will always display the 404 page (either provided by the theme or the default CMS 404 view)\r\n\r\nAny other status code will either display the exception itself when debug mode is enabled or the nice error page (provided by the theme /error page or the default CMS error view) when debug mode is disabled.\r\n\r\nFixes #1236",
"is_bot": false,
"headline": "Add error handling for HttpExceptions",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2024-10-23T21:38:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "711e129acf71a140478742ac05810307f9cc9120",
"body": "* Harden theme objects, prevent certain properties from being passed through to ThemeData object\n\n* Improve and properly scope Twig security policy\n\n- Deny access to \"include\" and \"extends\" tags/functions, as per Markup docs\n- Block methods that write, delete or modify records and attributes in Data\n[…]\nvided to extended objects should still be OK)\n\n* Minor\n\n* Make theme magic method calls case insensitive\n\n* Allow include and extends tags/functions\n\n* Add additional blocked methods\n\n* Add test cases",
"is_bot": false,
"headline": "Merge commit from fork",
"author_name": "Ben Thomson",
"author_login": "bennothommo",
"committed_at": "2024-10-16T05:31:35Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9ac3b57083034aa7580e18383249dc2f66b5f3c9",
"body": null,
"is_bot": false,
"headline": "Use local path for sqlite in winter:install",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2024-10-15T05:17:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "283d2b4ad461dbf38eeadf3565ae656e5d3e4ee2",
"body": "Some developers are used to including the --seed option, this makes for a smoother experience for them.\r\n\r\nNote: at some point we should review all of the options provided by Laravel's artisan migrate and include matching functionality in our migrator.",
"is_bot": false,
"headline": "Improve compatibility with artisan migrate",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2024-10-15T04:53:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b338b7924e3fc6b01bb12fe21031a04cb0712e8c",
"body": "Co-authored-by: Luke Towers <github@luketowers.ca>",
"is_bot": false,
"headline": "Add create:factory command (#1209)",
"author_name": "gseph",
"author_login": "sephyld",
"committed_at": "2024-10-03T17:52:48Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ab965fdb75ac06b0c6b474e3bb29a6cade43e32f",
"body": null,
"is_bot": false,
"headline": "Remove extraneous CSS file",
"author_name": "Ben Thomson",
"author_login": "bennothommo",
"committed_at": "2024-09-27T02:36:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2b7d4d61c5a46311ef4a0d031ab953c841192241",
"body": null,
"is_bot": false,
"headline": "Make stripe loader configurable with data attribute (#1201)",
"author_name": "Luca Benati",
"author_login": "webbati",
"committed_at": "2024-09-26T18:44:02Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1334303ae657869d4b06999ae003c4d617ea3655",
"body": null,
"is_bot": false,
"headline": "Add --batchable option to create:job command (#1215)",
"author_name": "Damien MATHIEU",
"author_login": "damsfx",
"committed_at": "2024-09-26T18:33:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dbd19856c4639860d50cbaf61abb93e471534586",
"body": null,
"is_bot": false,
"headline": "Allow command names to contain number (#1207)",
"author_name": "Damien MATHIEU",
"author_login": "damsfx",
"committed_at": "2024-09-26T18:31:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f2095a4c705d866acd9ee9a87498637b1fda3f9e",
"body": null,
"is_bot": false,
"headline": "Fix job class generated twice when using the sync option (#1204)",
"author_name": "Damien MATHIEU",
"author_login": "damsfx",
"committed_at": "2024-09-26T08:54:18Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e9734dc109a1e56152120dee8a97b160f2fc1f97",
"body": "Replaces https://github.com/wintercms/winter/pull/1213",
"is_bot": false,
"headline": "Fix icon path for error pages, recompile",
"author_name": "Ben Thomson",
"author_login": "bennothommo",
"committed_at": "2024-09-26T07:57:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6b6e2ffda1cdd397028831e5eedfa9d0111c1a07",
"body": null,
"is_bot": false,
"headline": "Fix display of deleted files when reviewing changes in \"winter:version\"",
"author_name": "Ben Thomson",
"author_login": "bennothommo",
"committed_at": "2024-09-05T00:11:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3bea4bfbed37c81ad327785f6e71dbd87c0555cd",
"body": null,
"is_bot": false,
"headline": "Add ability to print only the version number in \"winter:version\" command",
"author_name": "Ben Thomson",
"author_login": "bennothommo",
"committed_at": "2024-09-05T00:11:03Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "902aed79a50a1ce9c7d07516cf3e309b885971b8",
"body": "Console command to purge all entries in resized storage folder.",
"is_bot": false,
"headline": "Add winter:util purge resized console command (#1186)",
"author_name": "Marc Jauvin",
"author_login": "mjauvin",
"committed_at": "2024-08-19T18:29:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "998653acd2905280ef4c2921dbc1056e07cd32b2",
"body": "This fix allows nested objects within the request data to be correctly converted to nested form data when sending the request.\r\n\r\nPreviously, if the data option in a Request contained nested objects or arrays within the data, these were being incorrectly converted to [Array array] or [Object object]\n[…]\normData object would simply convert them to strings. With this fix, we traverse the data structure and ensure that they are given the right key in order to keep the shape of the data in the POST data.",
"is_bot": false,
"headline": "Fix nested form data in Snowboard requests (#1182)",
"author_name": "Ben Thomson",
"author_login": "bennothommo",
"committed_at": "2024-08-14T15:33:45Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "6284e7f7232401e5df2217450346d4d4eeb3afb8",
"body": null,
"is_bot": false,
"headline": "Quick test for request data attribute parsing",
"author_name": "Ben Thomson",
"author_login": "bennothommo",
"committed_at": "2024-08-13T00:56:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1316042736d1696db47a71f4ff823aff714e977f",
"body": null,
"is_bot": false,
"headline": "Update model.stub",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2024-08-10T06:07:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e3795917e801a8e0519149d7feadbcbbf2a89ce0",
"body": null,
"is_bot": false,
"headline": "Fix minor issues with styling for select2 inputs",
"author_name": "Luke Towers",
"author_login": "LukeTowers",
"committed_at": "2024-08-02T15:46:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e685fb93fcf07eae68d3d18bb1c7821265e07508",
"body": null,
"is_bot": false,
"headline": "Fix Mix webpack config not being cleaned (#1175)",
"author_name": "Jack Wilkinson",
"author_login": "jaxwilko",
"committed_at": "2024-07-30T18:42:59Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 26,
"commits_last_year": 22,
"latest_release_at": "2026-02-20T08:37:49Z",
"latest_release_tag": "v1.2.12",
"releases_from_tags": true,
"days_since_last_push": 0,
"active_weeks_last_year": 13,
"days_since_latest_release": 155,
"mean_days_between_releases": 106.5
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 87,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "winter/wn-system-module",
"exists": true,
"license": "MIT",
"keywords": [
"system",
"winter",
"winter cms"
],
"ecosystem": "packagist",
"matches_repo": true,
"registry_url": "https://packagist.org/packages/winter/wn-system-module",
"is_deprecated": false,
"latest_version": "v1.2.12",
"repository_url": "https://github.com/wintercms/wn-system-module",
"versions_count": 26,
"total_downloads": 260840,
"dependents_count": 7,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 4134,
"first_published_at": null,
"latest_published_at": "2026-02-20T08:37:49Z",
"latest_version_yanked": null,
"days_since_latest_publish": 155
}
]
},
"popularity": {
"forks": 6,
"stars": 4,
"watchers": 5,
"fork_history": {
"days": [
{
"date": "2021-03-12",
"count": 1
},
{
"date": "2021-03-23",
"count": 1
},
{
"date": "2021-06-25",
"count": 1
},
{
"date": "2021-09-05",
"count": 1
},
{
"date": "2026-06-08",
"count": 1
},
{
"date": "2026-06-20",
"count": 1
}
],
"complete": true,
"collected": 6,
"total_forks": 6
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [
"sample"
],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": false,
"bootstrap_files": [
"assets/ui/vendor/flot/Makefile"
],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [],
"toolchain_manifests": [],
"largest_source_bytes": 1736208,
"source_files_sampled": 664,
"oversized_source_files": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"composer.json",
"package.json"
],
"advisories": {
"error": "No resolved dependencies carried a version and a supported ecosystem",
"scope": "repository_graph",
"source": null,
"findings": [],
"collected": false,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 0,
"malicious_count": 0,
"assessed_package": null,
"unassessed_count": 20,
"direct_affected_count": 0
},
"ecosystems": [
"npm",
"packagist"
],
"dependencies": [
{
"name": "laravel/framework",
"manifest": "composer.json",
"ecosystem": "packagist",
"version_constraint": "^9.1"
},
{
"name": "@fortawesome/fontawesome-free",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^6.5.2"
},
{
"name": "js-cookie",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^3.0.1"
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "@fortawesome/fontawesome-free",
"direct": true,
"version": "^6.5.2",
"ecosystem": "npm"
},
{
"name": "js-cookie",
"direct": true,
"version": "^3.0.1",
"ecosystem": "npm"
},
{
"name": "laravel/framework",
"direct": true,
"version": null,
"ecosystem": "packagist"
},
{
"name": "@babel/core",
"direct": false,
"version": "^7.16.0",
"ecosystem": "npm"
},
{
"name": "@babel/plugin-transform-runtime",
"direct": false,
"version": "^7.16.4",
"ecosystem": "npm"
},
{
"name": "@babel/preset-env",
"direct": false,
"version": "^7.16.4",
"ecosystem": "npm"
},
{
"name": "@babel/register",
"direct": false,
"version": "^7.16.0",
"ecosystem": "npm"
},
{
"name": "@babel/runtime",
"direct": false,
"version": "^7.16.3",
"ecosystem": "npm"
},
{
"name": "babel-plugin-module-resolver",
"direct": false,
"version": "^5.0.0",
"ecosystem": "npm"
},
{
"name": "eslint",
"direct": false,
"version": "^8.6.0",
"ecosystem": "npm"
},
{
"name": "eslint-config-airbnb-base",
"direct": false,
"version": "^15.0.0",
"ecosystem": "npm"
},
{
"name": "eslint-plugin-import",
"direct": false,
"version": "^2.25.4",
"ecosystem": "npm"
},
{
"name": "eslint-plugin-vue",
"direct": false,
"version": "^8.5.0",
"ecosystem": "npm"
},
{
"name": "jest",
"direct": false,
"version": "^27.4.3",
"ecosystem": "npm"
},
{
"name": "jsdom",
"direct": false,
"version": "^18.1.1",
"ecosystem": "npm"
},
{
"name": "laravel-mix",
"direct": false,
"version": "^6.0.34",
"ecosystem": "npm"
},
{
"name": "laravel-mix-polyfill",
"direct": false,
"version": "^3.0.1",
"ecosystem": "npm"
},
{
"name": "composer/installers",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "composer/semver",
"direct": false,
"version": null,
"ecosystem": "packagist"
},
{
"name": "php",
"direct": false,
"version": null,
"ecosystem": "packagist"
}
],
"collected": true,
"truncated": false,
"total_count": 20,
"direct_count": 3,
"indirect_count": 17
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 0,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 3
},
"bus_factor": 2,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "daftspunk",
"commits": 1053,
"avatar_url": "https://avatars.githubusercontent.com/u/1392869?v=4"
},
{
"type": "User",
"login": "LukeTowers",
"commits": 459,
"avatar_url": "https://avatars.githubusercontent.com/u/7253840?v=4"
},
{
"type": "User",
"login": "bennothommo",
"commits": 230,
"avatar_url": "https://avatars.githubusercontent.com/u/15900351?v=4"
},
{
"type": "User",
"login": "jaxwilko",
"commits": 111,
"avatar_url": "https://avatars.githubusercontent.com/u/31214002?v=4"
},
{
"type": "User",
"login": "alekseybobkov",
"commits": 107,
"avatar_url": "https://avatars.githubusercontent.com/u/481606?v=4"
},
{
"type": "User",
"login": "gergo85",
"commits": 56,
"avatar_url": "https://avatars.githubusercontent.com/u/2959112?v=4"
},
{
"type": "User",
"login": "mjauvin",
"commits": 52,
"avatar_url": "https://avatars.githubusercontent.com/u/2013630?v=4"
},
{
"type": "User",
"login": "gabsource",
"commits": 32,
"avatar_url": "https://avatars.githubusercontent.com/u/1851314?v=4"
},
{
"type": "User",
"login": "WebVPF",
"commits": 24,
"avatar_url": "https://avatars.githubusercontent.com/u/61043464?v=4"
},
{
"type": "User",
"login": "nathan-van-der-werf",
"commits": 18,
"avatar_url": "https://avatars.githubusercontent.com/u/1123054?v=4"
}
],
"contributors_sampled": 100,
"top_contributor_share": 0.424
},
"quality_signals": {
"has_ci": false,
"has_tests": true,
"ci_workflows": [],
"has_docs_dir": false,
"linter_configs": [
".eslintrc.json"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 34 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": null,
"reason": "no workflows found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 7,
"reason": "9 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 7",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": null,
"reason": "no dependencies found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 10,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": null,
"reason": "No tokens found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "3f13e6ff39b54bde00850fe5a57afa5bf29844b8",
"ran_at": "2026-07-25T19:51:17Z",
"aggregate_score": 4.5,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-25T19:44:04Z",
"oldest_open_prs": [],
"last_merged_pr_at": null,
"ci_last_conclusion": null,
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/wintercms/wn-system-module",
"host": "github.com",
"name": "wn-system-module",
"owner": "wintercms"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 54,
"inputs": {
"security": 45,
"vitality": 66,
"community": 52,
"governance": 57,
"engineering": 46
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "moderate",
"name": "Vitality",
"value": 66,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 64,
"inputs": {
"commits_last_year": 22,
"human_commit_share": 1,
"days_since_last_push": 0,
"active_weeks_last_year": 13
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "13/52 weeks with commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 13
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "22 commits in the last year",
"points": 12.2,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 22
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "9 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 7",
"points": 7,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "good",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 70,
"inputs": {
"releases_count": 26,
"latest_release_tag": "v1.2.12",
"releases_from_tags": true,
"days_since_latest_release": 155,
"mean_days_between_releases": 106.5
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "26 version tags (no GitHub releases)",
"points": 16.2,
"status": "partial",
"details": [
{
"code": "version_tags_no_releases",
"params": {
"count": 26
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 155 days ago",
"points": 27,
"status": "partial",
"details": [
{
"code": "release_recency",
"params": {
"days": 155
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~106.5 days",
"points": 19.8,
"status": "partial",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 106.5
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "maintained",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": null,
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": 0,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "last human commit 0 days ago",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_maintained",
"params": {
"days": 0
}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 52,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 17,
"inputs": {
"forks": 6,
"stars": 4,
"watchers": 5,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "4 stars",
"points": 7.7,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 4
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "6 forks",
"points": 5.8,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 6
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "5 watchers",
"points": 3.3,
"status": "partial",
"details": [
{
"code": "watchers",
"params": {
"count": 5
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "excellent",
"name": "Community health",
"note": null,
"notes": [],
"value": 92,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": null,
"notes": [],
"value": 54,
"inputs": {
"packages": [
"winter/wn-system-module"
],
"dependents": 7,
"ecosystems": "packagist",
"total_downloads": 260840,
"monthly_downloads": 4134
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "4,134 downloads/month across packagist",
"points": 48.2,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 4134,
"ecosystems": "packagist"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "7 packages depend on it",
"points": 6,
"status": "partial",
"details": [
{
"code": "registry_dependents",
"params": {
"count": 7
}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 57,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "moderate",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 62,
"inputs": {
"bus_factor": 2,
"contributors_sampled": 100,
"top_contributor_share": 0.424
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "2 contributor(s) cover half of all commits",
"points": 25.2,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 2
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 42% of commits",
"points": 13,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 42
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "100 contributors",
"points": 13.5,
"status": "met",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 100
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 34 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "critical",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"merged_prs": 0,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 3
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "0/3 decided PRs merged",
"points": 0,
"status": "missed",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 0,
"decided": 3
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 71,
"inputs": {
"followers": 223,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "wintercms",
"public_repos": 77,
"account_age_days": 1969
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "223 followers of wintercms",
"points": 16.9,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 223,
"login": "wintercms"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "77 public repos, account ~5 yr old",
"points": 23.8,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 77
}
},
{
"code": "account_age_years",
"params": {
"years": 5
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"winter/wn-system-module"
],
"ecosystems": "packagist",
"any_deprecated": false,
"min_days_since_publish": 155
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on packagist",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "packagist"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 155 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 155
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "26 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 26
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "at_risk",
"name": "Engineering Quality",
"value": 46,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 50,
"inputs": {
"has_ci": false,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": ".eslintrc.json",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".eslintrc.json"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "at_risk",
"name": "Documentation",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": false,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 45,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests, Dangerous-Workflow, Packaging, Pinned-Dependencies, Signed-Releases, Token-Permissions. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests",
"dangerous_workflow",
"packaging",
"pinned_dependencies",
"signed_releases",
"token_permissions"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 45,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 12,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 6,
"scorecard_aggregate": 4.5
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 34 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no workflows found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "9 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 7",
"points": 5.2,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 5,
"status": "met",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "No tokens found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 20
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "at_risk",
"name": "AI Readiness",
"value": 48,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 35,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.66,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "66 of 100 human commits state their intent (structured subject or explanatory body)",
"points": 35.2,
"status": "partial",
"details": [
{
"code": "legible_history",
"params": {
"legible": 66,
"sampled": 100
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Pinned-Dependencies. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_pinned_dependencies"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 59,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [],
"has_dockerfile": false,
"typed_language": false,
"bootstrap_files": [
"assets/ui/vendor/flot/Makefile"
],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [],
"agent_commit_share": 0.01,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "assets/ui/vendor/flot/Makefile",
"points": 18,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "assets/ui/vendor/flot/Makefile"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": ".eslintrc.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".eslintrc.json"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "1 of the last 100 commits agent-authored or agent-credited",
"points": 2,
"status": "partial",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 1,
"sampled": 100
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "no dependencies found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "moderate",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"primary_language": "PHP",
"largest_source_bytes": 1736208,
"source_files_sampled": 664,
"oversized_source_files": 1
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "PHP without a type-check config",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_typecheck_config_language",
"params": {
"language": "PHP"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "1/664 source files over 60KB",
"points": 54.9,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 664,
"oversized": 1
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "at_risk",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"example_dirs": [
"sample"
],
"has_mcp_signal": false,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": "sample",
"points": 40,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "sample"
}
}
],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"No resolved dependencies carried a version and a supported ecosystem"
],
"report_type": "repository",
"generated_at": "2026-07-25T19:51:35.074699Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/w/wintercms/wn-system-module.svg",
"full_name": "wintercms/wn-system-module",
"license_state": "standard",
"license_spdx": "MIT"
}
Related records
Inspected repositories sharing catalogue tags or ecosystems with wintercms/wn-system-module. Read them side by side →
Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.
Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.27.0 — full methodology · metrics wiki.
