Public record
Software health reportschema 0.23.0 · metrics 1.13.0 · 2026-07-21 19:47 UTC

yasyf / reposync

Your other machine already pulled.

GoCustom license★ 0 stars⑂ 0 forkssince Jun 2026View on GitHub ↗

yasyf/reposync holds a health index of 50 out of 100, placing it in the Moderate band. It scores highest on Engineering Quality (85/100) and lowest on Community & Adoption (21/100). It was last updated today. A single contributor accounts for most of its recent work.

50
overall / 100
Moderate

Software health index

Metrics are grouped into weighted categories on one standardized 1–100 scale. Overall starts as their weighted mean; when public evidence triggers the High-Risk Jurisdiction Policy, the rating is adjusted and receives an At risk ceiling of 49. AI Readiness sits outside the overall score.

50
Excellent85-100Exemplary; meets essentially all checked criteria
Good70-84Healthy; minor gaps
Moderate50-69Acceptable with notable gaps; review recommended
At risk30-49Significant weaknesses; adoption warrants caution
Critical1-29Severe problems (abandoned, single-maintainer, no hygiene)
VitalityCommunity &AdoptionSustainability &GovernanceEngineeringQualitySecurityAI Readiness

Score profile

Each axis is a category. The shape matters more than the average — a healthy subject fills the whole shape, while a spike-and-crater profile means strength in one dimension is masking risk in another.

Ownership

Yasyf MohamedaliPersonal account
181 followers194 public repossince Apr 2011@anetaco

This repository is owned by a personal account. A single-owner project carries more continuity risk than an organization-backed one.

Package ecosystems

RegistryPackageVersionDownloads / moVersionsLast publish
Gogithub.com/yasyf/reposyncv0.18.1-340 days ago

Metrics by category

Vitality

Is the project alive — is code being written and are releases shipping?

71Good · 22% of overall
How it's scored
36/36Push recency — last push 0 days ago
3.5/36Commit cadence — 5/52 weeks with commits
18/18Commit volume — 135 commits in the last year
0/10OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully
Inputs used
commits_last_year135
human_commit_share0.89
days_since_last_push0
active_weeks_last_year5
How it's scored
27/27Ships releases — 34 releases published
36/36Release recency — latest release 0 days ago
27/27Release cadence — a release every ~2 days
0/10OpenSSF Scorecard: Signed-Releases — Project has not signed or included provenance with any releases.
Inputs used
releases_count34
latest_release_tagv0.18.1
releases_from_tagsno
days_since_latest_release0
mean_days_between_releases2

Community & Adoption

Does the project have users, downloads, attention, and a welcoming setup for contributors?

21Critical · 18% of overall
How it's scored
0/60Stars — 0 stars
0/25Forks — 0 forks
0/15Watchers — 0 watchers
Inputs used
forks0
stars0
watchers0
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
How it's scored
22.5/22.5README
16.9/22.5License — license file present, not a recognized license
0/18CONTRIBUTING guide
0/13.5Code of conduct
0/7.2Issue template
0/6.3PR template
Inputs used
has_readmeyes
has_licenseyes
has_contributingno
has_issue_templateno
has_code_of_conductno
has_pull_request_templateno

Sustainability & Governance

Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?

42At risk · 24% of overall
How it's scored
9/54Bus factor — 1 contributor(s) cover half of all commits
0/22.5Commit distribution — top contributor authored 100% of commits
1.4/13.5Contributor breadth — 1 contributors
10/10OpenSSF Scorecard: Contributors — project has 6 contributing companies or organizations
Inputs used
bus_factor1
contributors_sampled1
top_contributor_share1
How it's scored
0/46.8Issue resolution — no issues or no data
0/38.3PR acceptance — no decided pull requests or no data
0/15OpenSSF Scorecard: Code-Review — Found 0/30 approved changesets -- score normalized to 0
Inputs used
merged_prs0
open_issues0
closed_issues0
issue_closed_ratio
closed_unmerged_prs0
Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.
How it's scored
10/30Ownership backing — personal (user) account
0/20Verified domain — not applicable to user accounts
16.2/25Owner reach — 181 followers of yasyf
25/25Track record — 194 public repos, account ~15 yr old
Inputs used
followers181
owner_typeUser
is_verified
owner_loginyasyf
public_repos194
account_age_days5,586
Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.
How it's scored
25/25Published & resolvable — 1 package(s) on go
35/35Publish recency — latest publish 0 days ago
20/20Version history — 34 published versions
20/20Not deprecated — active, not deprecated or yanked
Inputs used
packagesgithub.com/yasyf/reposync
ecosystemsgo
any_deprecatedno
min_days_since_publish0

Engineering Quality

Are baseline engineering and documentation practices in place?

85Excellent · 20% of overall
How it's scored
24/24CI workflows — 3 workflow(s)
24/24Tests present
16/16Linter config — .golangci.yml
9.6/9.6Pre-commit hooks
0/6.4.editorconfig
0/20OpenSSF Scorecard: CI-Tests — no data
Inputs used
has_ciyes
has_testsyes
has_editorconfigno
has_linter_configyes
has_precommit_configyes
Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.
How it's scored
30/30README
25/25Documentation directory
0/15Documentation / homepage site
10/10Repository description
0/10Topics
10/10Wiki
Inputs used
topics
has_wikiyes
homepage
has_readmeyes
has_docs_diryes
has_descriptionyes

Security

Are visible security and supply-chain practices strong, without unresolved high-risk jurisdiction exposure?

23Critical · 16% of overall
How it's scored
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — branch protection not enabled on development/release branches
0/2.5CI-Tests — no data
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 0/30 approved changesets -- score normalized to 0
2.5/2.5Contributors — project has 6 contributing companies or organizations
10/10Dangerous-Workflow — no dangerous workflow patterns detected
0/7.5Dependency-Update-Tool — no update tool detected
0/5Fuzzing — project is not fuzzed
2.2/2.5License — license file detected
0/7.5Maintained — project was created within the last 90 days. Please review its contents carefully
0/5Packaging — no data
0/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
0/5SAST — no SAST tool detected
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — Project has not signed or included provenance with any releases.
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
0/7.5Vulnerabilities — 11 existing vulnerabilities detected
Inputs used
sourceopenssf_scorecard
checks_evaluated16
scorecard_versionv5.5.0
checks_inconclusive2
scorecard_aggregate2.3
Excluded from scoring (no data or not applicable): ci_tests, packaging. Remaining weights renormalized.

AI Readiness

How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score.

72Good · 0% of overall
How it's scored
45/45Agent instructions — AGENTS.md, CLAUDE.md
0/15Machine-readable docs (llms.txt)
40/40Legible commit history — 89 of 89 human commits state their intent (structured subject or explanatory body)
Inputs used
has_llms_txtno
legible_history_share1
agent_instruction_filesAGENTS.md, CLAUDE.md
agent_instruction_max_bytes21,196
How it's scored
12.6/18One-command bootstrap — go.mod (toolchain convention, no task runner)
22/22Automated tests
11/11Lint / format config — .golangci.yml
11/11Static type checking — Go (statically typed)
10/10Reproducible environment — lockfile
4/10Demonstrated agent practice — 2 of the last 100 commits agent-authored or agent-credited
0/8Automated maintenance — no automated dependency updates observed
0/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
Inputs used
has_nixno
has_testsyes
lockfilesgo.sum
has_dockerfileno
typed_languageyes
bootstrap_files
has_devcontainerno
has_linter_configyes
typecheck_configs
agent_commit_share0.02
toolchain_manifestsgo.mod
dependency_bot_commit_share0
How it's scored
45/45Type-checkable code — Go (statically typed)
55/55Manageable file sizes — 0/68 source files over 60KB
Inputs used
primary_languageGo
largest_source_bytes52,642
source_files_sampled68
oversized_source_files0
How it's scored
0/40API schema (OpenAPI/GraphQL/proto)
20/20MCP server
0/40Runnable examples
Inputs used
example_dirs
has_mcp_signalyes
api_schema_files

Key facts

0GitHub stars
1contributors
135commits, last 12 months
0days since last push
34releases
1bus factor
0open issues
Gopackage ecosystems

Data collection warnings

  • GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

More detail

OpenSSF Scorecard 2.3 / 10
2.3aggregate

Independent, tool-agnostic security assessment from the open-source OpenSSF Scorecard. Each check rewards a security practice, not a specific vendor's tool. Checks Scorecard could not determine are marked n/a and excluded from the security score (never counted as zero).Scorecard v5.5.0 · 2026-07-21 19:47 UTC

10Binary-Artifactsno binaries found in the repo
0Branch-Protectionbranch protection not enabled on development/release branches
n/aCI-Testsno pull request found
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 0/30 approved changesets -- score normalized to 0
10Contributorsproject has 6 contributing companies or organizations
10Dangerous-Workflowno dangerous workflow patterns detected
0Dependency-Update-Toolno update tool detected
0Fuzzingproject is not fuzzed
9Licenselicense file detected
0Maintainedproject was created within the last 90 days. Please review its contents carefully
n/aPackagingpackaging workflow not detected
0Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 0
0SASTno SAST tool detected
0Security-Policysecurity policy file not detected
0Signed-ReleasesProject has not signed or included provenance with any releases.
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
0Vulnerabilities11 existing vulnerabilities detected
Direct dependencies 6
RegistryPackageVersion constraintManifest
Gogithub.com/charmbracelet/bubblesv1.0.0go.mod
Gogithub.com/charmbracelet/bubbleteav1.3.10go.mod
Gogithub.com/charmbracelet/lipglossv1.1.0go.mod
Gogithub.com/spf13/cobrav1.10.2go.mod
Gogithub.com/yasyf/synckitv0.24.0go.mod
Gogolang.org/x/termv0.45.0go.mod
All dependencies not collected

The resolved dependency set could not be collected for this report: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

Raw JSON report machine-readable
{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 1100,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "Go": 449189
      },
      "pushed_at": "2026-07-21T13:01:22Z",
      "created_at": "2026-06-18T09:42:01Z",
      "owner_type": "User",
      "updated_at": "2026-07-21T13:01:34Z",
      "description": "Your other machine already pulled.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": null,
      "default_branch": "main",
      "license_spdx_raw": "NOASSERTION",
      "primary_language": "Go",
      "significant_languages": [
        "Go"
      ]
    },
    "owner": {
      "blog": "http://www.yasyf.com",
      "name": "Yasyf Mohamedali",
      "type": "User",
      "login": "yasyf",
      "company": "@anetaco",
      "location": "San Francisco, CA",
      "followers": 181,
      "avatar_url": "https://avatars.githubusercontent.com/u/709645?v=4",
      "created_at": "2011-04-05T00:07:09Z",
      "is_verified": null,
      "public_repos": 194,
      "account_age_days": 5586
    },
    "license": {
      "state": "custom",
      "spdx_id": null,
      "raw_spdx": "NOASSERTION",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.18.1",
          "kind": "patch",
          "published_at": "2026-07-21T12:10:39Z"
        },
        {
          "tag": "v0.18.0",
          "kind": "minor",
          "published_at": "2026-07-21T08:34:46Z"
        },
        {
          "tag": "v0.17.0",
          "kind": "minor",
          "published_at": "2026-07-21T07:43:40Z"
        },
        {
          "tag": "v0.16.0",
          "kind": "minor",
          "published_at": "2026-07-17T12:25:58Z"
        },
        {
          "tag": "v0.15.1",
          "kind": "patch",
          "published_at": "2026-07-14T22:01:10Z"
        },
        {
          "tag": "v0.15.0",
          "kind": "minor",
          "published_at": "2026-07-14T09:04:53Z"
        },
        {
          "tag": "v0.14.0",
          "kind": "minor",
          "published_at": "2026-07-13T12:34:53Z"
        },
        {
          "tag": "v0.13.0",
          "kind": "minor",
          "published_at": "2026-07-04T02:19:07Z"
        },
        {
          "tag": "v0.12.0",
          "kind": "minor",
          "published_at": "2026-07-03T23:44:31Z"
        },
        {
          "tag": "v0.11.1",
          "kind": "patch",
          "published_at": "2026-07-03T21:08:26Z"
        },
        {
          "tag": "v0.11.0",
          "kind": "minor",
          "published_at": "2026-07-02T10:44:42Z"
        },
        {
          "tag": "v0.10.3",
          "kind": "patch",
          "published_at": "2026-07-02T00:14:27Z"
        },
        {
          "tag": "v0.10.2",
          "kind": "patch",
          "published_at": "2026-06-27T10:43:21Z"
        },
        {
          "tag": "v0.10.1",
          "kind": "patch",
          "published_at": "2026-06-27T10:11:38Z"
        },
        {
          "tag": "v0.10.0",
          "kind": "minor",
          "published_at": "2026-06-27T09:23:31Z"
        },
        {
          "tag": "v0.9.0",
          "kind": "minor",
          "published_at": "2026-06-26T20:41:22Z"
        },
        {
          "tag": "v0.8.1",
          "kind": "patch",
          "published_at": "2026-06-26T01:05:24Z"
        },
        {
          "tag": "v0.8.0",
          "kind": "minor",
          "published_at": "2026-06-25T08:16:28Z"
        },
        {
          "tag": "v0.7.0",
          "kind": "minor",
          "published_at": "2026-06-24T22:12:13Z"
        },
        {
          "tag": "v0.6.1",
          "kind": "patch",
          "published_at": "2026-06-23T12:44:43Z"
        },
        {
          "tag": "v0.6.0",
          "kind": "minor",
          "published_at": "2026-06-23T03:47:11Z"
        },
        {
          "tag": "v0.5.1",
          "kind": "patch",
          "published_at": "2026-06-23T01:10:52Z"
        },
        {
          "tag": "v0.5.0",
          "kind": "minor",
          "published_at": "2026-06-23T01:01:19Z"
        },
        {
          "tag": "v0.4.6",
          "kind": "patch",
          "published_at": "2026-06-21T01:24:22Z"
        },
        {
          "tag": "v0.4.5",
          "kind": "patch",
          "published_at": "2026-06-19T10:05:44Z"
        },
        {
          "tag": "v0.4.4",
          "kind": "patch",
          "published_at": "2026-06-19T09:42:39Z"
        },
        {
          "tag": "v0.4.3",
          "kind": "patch",
          "published_at": "2026-06-19T09:33:39Z"
        },
        {
          "tag": "v0.4.2",
          "kind": "patch",
          "published_at": "2026-06-19T09:09:38Z"
        },
        {
          "tag": "v0.4.1",
          "kind": "patch",
          "published_at": "2026-06-19T08:36:59Z"
        },
        {
          "tag": "v0.4.0",
          "kind": "minor",
          "published_at": "2026-06-19T08:25:54Z"
        },
        {
          "tag": "v0.3.0",
          "kind": "minor",
          "published_at": "2026-06-18T22:57:21Z"
        },
        {
          "tag": "v0.2.0",
          "kind": "minor",
          "published_at": "2026-06-18T12:49:02Z"
        },
        {
          "tag": "v0.1.1",
          "kind": "patch",
          "published_at": "2026-06-18T12:07:23Z"
        },
        {
          "tag": "v0.1.0",
          "kind": "minor",
          "published_at": "2026-06-18T11:54:48Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "570688d0c352de57c5b02e7542f6a4e370df4d5e",
          "body": "…0f5b)",
          "is_bot": true,
          "headline": "chore: re-render guides (cc-guides 0.1.44, sources cc-skills@364b48c0…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-21T13:01:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "210233716efef91ad92644d2991c83eea45997c0",
          "body": null,
          "is_bot": false,
          "headline": "ci: guides.yml becomes the cc-guides shim — CI owns rendering",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-21T12:59:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "083566ae9b45cb29e53f5a822358dc2548307517",
          "body": null,
          "is_bot": false,
          "headline": "chore: repin daemonkit v0.3.2",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-21T11:48:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "11daa76363c161d3242a22b1df34ea34915ff518",
          "body": "…c12b)",
          "is_bot": true,
          "headline": "chore: re-render guides (cc-guides 0.1.43, sources cc-skills@0474f4d7…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-21T11:20:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bc4257a0a4798df9e4b4b65b7fdf3313b86615ed",
          "body": null,
          "is_bot": false,
          "headline": "build: require daemonkit v0.3.0",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-21T08:31:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "25667b6b4925646a06b4205c581e7fa9d87abf95",
          "body": "Signed-off-by: Yasyf Mohamedali <yasyfm@gmail.com>",
          "is_bot": false,
          "headline": "chore: pin stable daemonkit and synckit releases",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-21T07:40:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "29872f51f49873611362690fc3cd2865c78047f9",
          "body": "Signed-off-by: Yasyf Mohamedali <yasyfm@gmail.com>",
          "is_bot": false,
          "headline": "chore: repin daemonkit authentication hard cut",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-21T04:56:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "73c0cb87b19e7780c3e5abfc158194648222a6ea",
          "body": "Signed-off-by: Yasyf Mohamedali <yasyfm@gmail.com>",
          "is_bot": false,
          "headline": "refactor: hard cut reposync onto synckit v1",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-21T02:59:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "428aa78ab462d5af077bab66f7900ab62d2cb76a",
          "body": "Signed-off-by: Yasyf Mohamedali <yasyfm@gmail.com>",
          "is_bot": false,
          "headline": "chore: repin final synckit v1 graph",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-21T02:27:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2075576778f06efeef08019468869799b211006a",
          "body": "…4789)",
          "is_bot": true,
          "headline": "chore: re-render guides (cc-guides 0.1.43, sources cc-skills@efa49a40…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-20T11:59:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6e44706f46f2eebe53f631ecdcffa21f752b1eef",
          "body": "Signed-off-by: Yasyf Mohamedali <yasyfm@gmail.com>",
          "is_bot": false,
          "headline": "feat: hard cut reposync to strict Synckit runtime",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-20T05:40:41Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9e0f570a4b2f419e486742724f45de12f1b2bf2a",
          "body": null,
          "is_bot": false,
          "headline": "gitignore: migrate to cc-guides-managed artifact (cc-guides 0.1.42)",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-20T04:51:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9a56e951f7762ec0b8f10942d84f575eef88b575",
          "body": "Claude-Session-Id: d97c4285-ac09-4505-afc1-b917f01cc477",
          "is_bot": false,
          "headline": "config: retire capt-hook consumer config — v11 is zero-config",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-19T23:31:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "407bd132cfb02109e4eb67625e4edb37d9d3a625",
          "body": "…7155)",
          "is_bot": true,
          "headline": "chore: re-render guides (cc-guides 0.1.39, sources cc-skills@797b0844…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-19T10:45:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "46b0fb9671405a45d4fd09a7f15c6c3724d65ca7",
          "body": "…998d)",
          "is_bot": true,
          "headline": "chore: re-render guides (cc-guides 0.1.34, sources cc-skills@a646e9b0…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-18T10:42:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c13b6be6868625cf921116893a0ed32aa76e2e65",
          "body": "….toml)",
          "is_bot": false,
          "headline": "chore: drop legacy packs.toml (capt-hook 10.x reads .claude/capt-hook…",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-18T10:14:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9c5a22c0b6a28608c71d1815757561b1de79b3af",
          "body": null,
          "is_bot": false,
          "headline": "chore(guides): adopt .claude/capt-hook.toml via cc-guides",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-18T03:22:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cc0f640bb7e2b6b012f01cf3534a861567aa5022",
          "body": "New package github.com/yasyf/reposync/registry wraps internal/state to give\nexternal importers (first consumer: cc-orchestrate) a read-only view of the\nrepo registry: Load() returns the expanded default location and the\nnon-tombstoned repos sorted by relpath. A missing state file yields an empty\nregistry; corrupt state errors.\n\nClaude-Session-Id: bc216835-eb2a-4e32-87bf-a705adef75a2",
          "is_bot": false,
          "headline": "feat(registry): expose the repo registry as a public read-only package",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-17T12:21:40Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8881fd70e46fc72ee1b49b89d52a8e1a30ff8731",
          "body": "…section\n\nClaude-Session-Id: 48869672-df0b-4772-b240-79e035168365",
          "is_bot": false,
          "headline": "docs(guides): drop the orphaned LSP/Grep block superseded by the ccx …",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-17T10:26:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2c6016926336b473dfbbc043382ef3572fd40038",
          "body": "… code search\n\nClaude-Session-Id: 48869672-df0b-4772-b240-79e035168365",
          "is_bot": false,
          "headline": "docs(guides): retire the stale semble code-search guidance — ccx owns…",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-17T10:12:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d568fe70a490627dffc0cae69c7c3589726e3d2b",
          "body": "…erver (ccx facade ships via the cc-context plugin)\n\nClaude-Session-Id: 48869672-df0b-4772-b240-79e035168365",
          "is_bot": false,
          "headline": "chore(guides): manage .mcp.json via cc-guides — drop the semble MCP s…",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-17T05:26:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2ba6e9126d51367feec5c48cacf526cd9c0e170b",
          "body": "…arkers)\n\nClaude-Session-Id: c40ec844-b3e8-469b-aae9-f61999d0dc52",
          "is_bot": false,
          "headline": "chore(prek): one-time hygiene pass (trailing whitespace, EOF, merge m…",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-16T20:59:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ff8ae71232e625910ad6068c086ef89104e253a1",
          "body": "Claude-Session-Id: c40ec844-b3e8-469b-aae9-f61999d0dc52",
          "is_bot": false,
          "headline": "chore(prek): render .pre-commit-config.yaml from cc-skills fragments",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-16T20:57:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "18c6c0526de06d0e4fccad4c3dfb6a8f8e5c3eaa",
          "body": "…41e9)",
          "is_bot": true,
          "headline": "chore: re-render guides (cc-guides 0.1.24, sources cc-skills@7427f102…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-16T11:14:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5d4225f7e22dc2eaa790f3f7fe5cf7ae7b3b532e",
          "body": "…c45e)",
          "is_bot": true,
          "headline": "chore: re-render guides (cc-guides 0.1.22, sources cc-skills@6930a148…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-15T11:03:27Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1b39be882ae0376b5c35009466a9c49017b389a0",
          "body": null,
          "is_bot": false,
          "headline": "release: 0.15.1",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-14T21:59:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "845fb6cca376217bf08bb1b9fda34302bc8856f9",
          "body": "jj new and jj rebase take their own working-copy snapshot at execution\ntime, so edits typed between Advance's classification probe and the\nmutating command were swept into the outgoing commit and vanished from\ndisk, recoverable only by hand from the orphaned head. Advance now\npost-verifies every mut\n[…]\nam (ShimJJ / ShimJJDirtOn) that injects\nworking-copy writes at the exact mutating argv, reproducing the race\ndeterministically against real binaries.\n\ncc-task: b16944e9ba32a1a20fde5e810761d37c6d19dbcc",
          "is_bot": false,
          "headline": "fix(vcs): verify Advance mutations and recover swept working-copy edits",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-14T21:54:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ec63ff29ef2d883d26d29555c5cee03bffc624b0",
          "body": null,
          "is_bot": false,
          "headline": "chore: re-render guides (fleet effort xhigh + Models table v5)",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-14T13:04:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "442d1957db37fbeddac1b06ae09b698dc1d17afd",
          "body": "…6fcb)",
          "is_bot": true,
          "headline": "chore: re-render guides (cc-guides 0.1.21, sources cc-skills@f3c968ea…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-14T10:57:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cecacda70790a899b24cbc0942256d68f5b12181",
          "body": "v0.14.0 already shipped yesterday (fsnotify watch backend + CI fix,\ntagged at 11d6eee without a changelog cut); the env-sync feature the\nprevious commit mislabeled 0.14.0 ships as 0.15.0, and the 0.14.0\nsection is backfilled.",
          "is_bot": false,
          "headline": "release: 0.15.0",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-14T09:03:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "994a30ea0ad602771cfc58954f2408ef91e6229b",
          "body": null,
          "is_bot": false,
          "headline": "release: 0.14.0",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-14T08:59:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0da648565939f66b5b1dd20b21e5e6da8b954346",
          "body": "Findings from the final adversarial review: the quiet-window gate and\nthe file writes were not coupled (env.ApplyAll now plans and gates\nevery file before writing any), a merge of individually valid peer\npayloads could exceed the wire caps and get this host rejected\nmesh-wide (capMergedToWire mirror\n[…]\n was computed\nbefore the unlocked peer fetch (reloaded under the flock). The two\naccepted crash-window limits are documented flat in the package doc.\n\ncc-task: 9c4286e4668b64c0f2f68cbe72161941fcc908f6",
          "is_bot": false,
          "headline": "reconcile: close env converge races and cap merged state to the wire",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-14T08:57:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7b907c0c7c1a6bfe642c7d5b8293f128e327e718",
          "body": "Watch items for env-syncing repos declare the untracked root .env*\nfile paths (plus .env/.env.local even when absent, picked up by the\nwatch sweep on creation), and every fingerprint becomes\ntrunkHash + \"\\n\" + envDigest so a value edit notifies peers while a\ncomment-only edit or a converge apply stays quiet.\n\ncc-task: 9c4286e4668b64c0f2f68cbe72161941fcc908f6",
          "is_bot": false,
          "headline": "cli: watch .env files and fold their digest into the fingerprint",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-14T07:53:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8608b3d54c2964caf469360b480866864aef2dc2",
          "body": "cc-task: 9c4286e4668b64c0f2f68cbe72161941fcc908f6",
          "is_bot": false,
          "headline": "docs: document .env file sync in the README and changelog",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-14T07:37:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "261a7ed6a1701320df8c5749ea0f7f1fa79bf228",
          "body": "Append an env converge pass to Reconcile: fetch every peer's stamped\nenv state over the existing rpc-serve ssh channel (including the\nnotifying origin peer — it is the only holder of the new content),\nkey-level LWW merge per file under the flock, quiet-window gate, apply\npreserving local layout, and\n[…]\ne blanked so deleted secrets do not linger;\npeer-only tombstone names never persist while locally held ones keep\npropagating their deletion until GC.\n\ncc-task: 9c4286e4668b64c0f2f68cbe72161941fcc908f6",
          "is_bot": false,
          "headline": "reconcile: sync .env files across hosts via env.get_state pull-merge",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-14T07:33:14Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "22618bd72dc290fa8331a49e8578c55ccbac34ac",
          "body": "New internal/env package: byte-faithful dotenv parse/rewrite that\npreserves local layout, an idempotent mtime-stamped Observe fold over\na per-file cregistry LWW map, newest-wins Merge with an apply-stable\nvalues-only Digest, and a per-repo sidecar with 90-day tombstone GC.\nSymlinked, non-regular, and oversized files are exempt: never\nobserved, written, or propagated. vcs.TrackedNames gates syncing to\nfiles git does not track.\n\ncc-task: 9c4286e4668b64c0f2f68cbe72161941fcc908f6",
          "is_bot": false,
          "headline": "env: add key-level LWW merge core for .env file sync",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-14T06:13:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "16386031816d6710b5ff7b28c35072280cfc8f17",
          "body": "…e TUI\n\nThe flag is dormant plumbing for env-file sync: zero value keeps env\nsync on, `repo add --no-env-sync` opts a repo out, and the setting\nshows as an ENV column in `repo ls` and an env line in the TUI detail\npane.\n\ncc-task: 9c4286e4668b64c0f2f68cbe72161941fcc908f6",
          "is_bot": false,
          "headline": "state: add per-repo NoEnvSync opt-out, surfaced in repo add/ls and th…",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-14T06:13:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "accc71e25a4a524f873cbd0a239b9a7161af394e",
          "body": null,
          "is_bot": false,
          "headline": "chore: add missing go.mod hashes to go.sum",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-14T05:26:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "11d6eee39db231e3c9b80695e1b2db29cd4b0da7",
          "body": "go-version: \"1.26\" pinned 1.26.4 under GOTOOLCHAIN=local, breaking vet once\ngo.mod required 1.26.5 via the synckit bump.",
          "is_bot": false,
          "headline": "ci: test job resolves Go from go.mod like every other job",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-13T12:30:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "53fd143a1d8141f093505ed557b2d7afe161dd0d",
          "body": "synckit v0.9.0's fsnotify backend watches the VCS leaf dirs recursively\nand self-heals (kqueue/inotify, zero FSEvents streams), ending reposync's\ncontribution to the watchman FSEvents root exhaustion. Drop the watchman\nformula dependency from the brew cask; reposync no longer needs it.\n\ncc-task: 4018a782",
          "is_bot": false,
          "headline": "feat(watch): flip synckit watch backend to hardened fsnotify",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-13T12:27:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bbd878b77e3b851676f52fbe79b39d2fb7e6c94f",
          "body": "…3eae)",
          "is_bot": true,
          "headline": "chore: re-render guides (cc-guides 0.1.21, sources cc-skills@d8f21c50…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-13T12:18:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d92d5bf897bc4e9b21f27dea399bbd21d39a3474",
          "body": "…5686)",
          "is_bot": true,
          "headline": "chore: re-render guides (cc-guides 0.1.21, sources cc-skills@c8859419…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-13T07:00:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "775998f31812634c9d4320d7d17cf9c44f805250",
          "body": "…5293)",
          "is_bot": true,
          "headline": "chore: re-render guides (cc-guides 0.1.21, sources cc-skills@85d67094…",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-12T10:45:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b9f82d9f728d3cb26efe9c52223b747f90facdf6",
          "body": null,
          "is_bot": false,
          "headline": "chore: render .claude/settings.json from cc-guides fragments",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-12T07:25:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1e81cdb46c79c6f1d29d23e536cafd44dc2a34a6",
          "body": "…claude-rules import + guides.yml)\n\nSigned-off-by: Yasyf Mohamedali <yasyfm@gmail.com>",
          "is_bot": false,
          "headline": "chore(guides): adopt the cc-guides pull model (fragments + cc-skills:…",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-12T03:30:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "59f37f47a32ae92f2049a6b77c4545606b816ba8",
          "body": "….0.0)\n\nSigned-off-by: Yasyf Mohamedali <yasyfm@gmail.com>",
          "is_bot": false,
          "headline": "chore: drop capt-hook settings wiring — plugin-canonical (capt-hook 9…",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-11T18:15:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3a582e9d790b13527026d1e27b0f690c09cca7b1",
          "body": "…ne Skill(codex)\n\nSigned-off-by: Yasyf Mohamedali <yasyfm@gmail.com>",
          "is_bot": false,
          "headline": "chore: re-stamp gpt-5.5 Models row - codex:codex-wrapper agent + inli…",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-08T20:12:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "14aff7c87df9214f5da2f4c9e500b014e61b1e99",
          "body": null,
          "is_bot": false,
          "headline": "docs(changelog): backfill 0.10.3-0.11.1 and repair footer links",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-05T00:04:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dfd09997406b539cce82508f0b1fc98d1549b64c",
          "body": null,
          "is_bot": false,
          "headline": "chore(release): pin synckit v0.8.0 and cut 0.13.0",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-04T02:15:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fb4aeef61b783cc9a9f4611550df7f4a484debd6",
          "body": "Thread synckit v0.8.0's required *converge.PeerStatus into convergeReposWith\nand hold one process-lived tracker (peerStatus) that converge.Reconcile logs\ntransitions against, so a down peer warns once when it drops and once with the\noutage duration when it recovers instead of every 15-minute pass. Tests inject\na fresh tracker each.",
          "is_bot": false,
          "headline": "feat(reconcile): log unreachable peers once per outage",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-04T01:39:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8e3c864cc73303ab09add153f0ca10b1565694ce",
          "body": "…sensitive code to gpt-5.5 via codex (Models table)\n\nSigned-off-by: Yasyf Mohamedali <yasyfm@gmail.com>",
          "is_bot": false,
          "headline": "docs(claude): route security review/audit + verification of security-…",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-04T00:52:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b31d5f9f49a2d8e3193a5f0572d944381016b399",
          "body": null,
          "is_bot": false,
          "headline": "chore(vcs): annotate the trusted lock-path opens for gosec",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-03T23:41:09Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "af8b4cc24d755853a8a0918cc3f8d14c2cfd6ea0",
          "body": null,
          "is_bot": false,
          "headline": "chore(vcs): satisfy errcheck on the flock probe close",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-03T23:37:47Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8bdcdfd9c6d897ca889502edb0ad13cf63761466",
          "body": null,
          "is_bot": false,
          "headline": "docs: roll the changelog for v0.12.0",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-03T23:34:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0757281406ec478f526b489b4f16cb5f2e35ba44",
          "body": null,
          "is_bot": false,
          "headline": "docs: document lock self-healing and cancellation hardening",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-03T23:33:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f8e66b967569da09ab6ad384dcd9cecba48db4d3",
          "body": null,
          "is_bot": false,
          "headline": "chore: tidy go.sum",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-03T23:33:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4467811c5982ddccd1177ef354c010c73a46aeb9",
          "body": "Matches the vcs opTimeout backstop so a large fetch on a slow link is bounded once, not twice.",
          "is_bot": false,
          "headline": "chore(state): raise the default repo_op_timeout to 5m",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-03T23:33:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e44dfc8a5f4b4c58ca3acced3520f7576e4aa7fd",
          "body": "A killed git or jj could wedge a repo busy forever. Sync now removes a packed-refs.lock older than 30 minutes and reclaims a jj working-copy or git-import lock once a flock probe confirms its holder is dead, logging what it cleaned.",
          "is_bot": false,
          "headline": "fix(vcs): self-heal stale locks left by killed processes",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-03T23:33:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e27269b249a2ab05a233f4e6f2e185624897f656",
          "body": "A canceled invocation previously left jj's spawned git mid-ref-transaction with lock files on disk. SIGTERM now reaches the whole group and gets a 10s grace to unwind before Go's SIGKILL backstop; command-scope config suppresses auto-gc and auto-maintenance so no reposync-driven git holds packed-refs.lock inside a killable window.",
          "is_bot": false,
          "headline": "fix(vcs): cancel git/jj as a process group with a SIGTERM grace",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-03T23:33:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "42b20b4de23a0ddb9890cdf4d38fe23ccfc6797a",
          "body": "A second enter mid-apply reopened the disable confirm from the still-stale\nitem state and could launch a concurrent apply whose first completion\ncleared the spinner early. Repo keys now drop until reposAppliedMsg lands;\ntab, help, and quit stay live at the router.",
          "is_bot": false,
          "headline": "fix(tui): ignore repo keys while an apply is in flight",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-03T23:11:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c42520b92ef360d6e0517acd97fe7f6afdbadbe7",
          "body": "…os split\n\nThe repos View joins a 3-row confirm box and/or a 1-row \"Applying…\"\nspinner below a master-detail split already sized to fill the whole height\nbudget (reposReserve covered only the status line), so an open confirm\npushed the layout past the last terminal row.\n\nMirror the hosts screen: sto\n[…]\napplying.\nCall it from WindowSizeMsg and every site that toggles confirm/applying.\n\nRegression tests pin lipgloss.Height(View()) to the terminal budget in the\nplain, confirm-open, and applying states.",
          "is_bot": false,
          "headline": "fix(tui): reserve the confirm box and applying spinner out of the rep…",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-03T23:03:45Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9826462849c403901ca87162551f9d3f637528fa",
          "body": "Picks up the shared TUI fixes: master-detail rows truncated to listW no\nlonger word-wrap, and the tab router measures the help bar's live height.",
          "is_bot": false,
          "headline": "build(deps): bump synckit to v0.7.2",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-03T22:59:19Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "35b8433addaac3847f07ed95c25018babe030215",
          "body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: Yasyf Mohamedali <yasyfm@gmail.com>",
          "is_bot": false,
          "headline": "chore: wire capt-hook PermissionRequest hook",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-03T22:56:47Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "933cab1960de7d13031ffe8f3ea6724c911f5b5a",
          "body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>\nSigned-off-by: Yasyf Mohamedali <yasyfm@gmail.com>",
          "is_bot": false,
          "headline": "chore: enable capt-hook fixes pack",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-03T22:15:39Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "e72599430f1d77f60598e3a23e548bb1ae48f9ed",
          "body": "…meout\n\nPulls the syncservice fix for the nil-deref panic in cmdTransport.Do\n(an abandoned exchange goroutine read pipe fields reset() had cleared\nafter a converge peer timeout), plus the v0.6.0/v0.7.0 synckit line.",
          "is_bot": false,
          "headline": "build: synckit v0.7.1 — fix stale-exchange transport crash on peer ti…",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-03T21:05:20Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "51a6379dbcec22d80f2215e6334daf304aebe8fd",
          "body": "…tion)\n\nSigned-off-by: Yasyf Mohamedali <yasyfm@gmail.com>",
          "is_bot": false,
          "headline": "docs(agents): emphasize terse, self-documenting comments (godoc excep…",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-03T20:41:14Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "40dc7b2e604cd60939cbe86fef2c32b471170b8c",
          "body": "…options to fable, never improvise detours",
          "is_bot": false,
          "headline": "docs(claude): check back on the unexpected — delegated agents return …",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-03T12:36:15Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5cd65f7b7d0f612ee3a4198647c75d8dfdca92c9",
          "body": "…'t-edit-inline, plan model+effort\n\nSigned-off-by: Yasyf Mohamedali <yasyfm@gmail.com>",
          "is_bot": false,
          "headline": "docs: Models routing v2 — gpt-5.5 review/diagnosis lane, delegate-don…",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-03T11:52:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b94aa2b3a5d0cc107ce736aaab38644671abe9e8",
          "body": "…et-started, demo, agent block\n\nFollow-up: align the demo alt text with the captured run's visible\noutcomes (advanced / busy / up-to-date) — the sync outcome word is\n'advanced', not 'fast-forwarded'. Hooks (packs.toml general+go), demo\ngenerator, and GitHub About were already shipped in f41c964.",
          "is_bot": false,
          "headline": "docs: retrofit README to the conversion skeleton — opener, one-path g…",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-03T11:07:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f41c964560e5aafbc60c531400d6f83a11d44563",
          "body": "…et-started, demo, agent block\n\nAdd docs/scripts/demo.sh, a sandboxed real 'reposync sync' run (throwaway\nXDG_CONFIG_HOME + local fixture origins) frozen to docs/assets/demo.png.\nEnable the capt-hook go pack in .claude/hooks/packs.toml.\nGitHub About set to the opener fragment.",
          "is_bot": false,
          "headline": "docs: retrofit README to the conversion skeleton — opener, one-path g…",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-03T10:50:57Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "78fbdb8cfe8c8a90dd478f0a2dc98704d670d03d",
          "body": "…s lane\n\nSigned-off-by: Yasyf Mohamedali <yasyfm@gmail.com>",
          "is_bot": false,
          "headline": "docs: flip Models routing — opus-4.8 delegation default, gpt-5.5 edit…",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-03T09:06:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8738e4ec2a1a68714c4f064342fa9eab2f565ef1",
          "body": null,
          "is_bot": false,
          "headline": "docs: route all prose/writing to fable (Models table)",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-03T06:52:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "993131befd415b8d159f73f37ae56827c67fea20",
          "body": "…erspective\n\nSigned-off-by: Yasyf Mohamedali <yasyfm@gmail.com>",
          "is_bot": false,
          "headline": "docs: hard planning subagents stay on fable; opus narrows to second p…",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-02T11:41:05Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ed43a6a826d49389148c98f1de36aef047bc77b3",
          "body": "…ounts",
          "is_bot": false,
          "headline": "feat: consume synckit v0.5.0 — busy on the watch wire, skipped-busy c…",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-02T10:39:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e04c0b82099139dda7d8ba0b71a6a678b15575a7",
          "body": "…ked-generated take",
          "is_bot": false,
          "headline": "test(vcs): lock error classification, watch paths, gate order, untrac…",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-02T09:53:01Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "590ec2f14d935c7b144de51ba03beaee430ec7a3",
          "body": "…ntract rationale",
          "is_bot": false,
          "headline": "refactor(vcs): drop argv-restating error wraps, restore WatchPaths co…",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-02T09:44:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8a62375b5bea5423fa28cf3d440c3348fc4c98b5",
          "body": "Signed-off-by: Yasyf Mohamedali <yasyfm@gmail.com>",
          "is_bot": false,
          "headline": "docs: replace max-effort rule with model routing table",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-02T09:19:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a401b2292fb092204ac854a9ae8f371151734844",
          "body": null,
          "is_bot": false,
          "headline": "fix(reconcile): report busy repos as busy, not present",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-02T09:06:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "68ec9c1260367a76a0efd29a34e4b93f602a19fe",
          "body": null,
          "is_bot": false,
          "headline": "docs: fix stale repo map in AGENTS.md",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-02T08:58:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d729bc65c79773f881c8607ba2e64dfd36adb6b8",
          "body": null,
          "is_bot": false,
          "headline": "fix(tui): plumb idle threshold from state load, drop dead fallback",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-02T08:51:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "30d3b45ce2281a3124c1a4487e40cbdd740b69ed",
          "body": null,
          "is_bot": false,
          "headline": "refactor(vcs): export WatchPaths, retire consumer copies",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-02T08:46:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ec8ba91f4e1da54c2bbc693898b647fc73f00bbd",
          "body": null,
          "is_bot": false,
          "headline": "refactor(sync): adopt vcstest fixture",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-02T08:42:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c8809792138a0da625fed668ec057c009d752e59",
          "body": null,
          "is_bot": false,
          "headline": "refactor(vcs): extract vcstest fixture package",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-02T08:34:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "16463935f07326d34381a098a9815d3ba3636846",
          "body": null,
          "is_bot": false,
          "headline": "refactor(sync): own the sync-level outcome dispositions",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-02T08:25:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e276d0aab9259adc332217bd5449d4437bd0646e",
          "body": null,
          "is_bot": false,
          "headline": "fix(vcs): align git InUse gate order with jj",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-02T08:19:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "34c048536b5a53984934b17f78d204681b2941ab",
          "body": null,
          "is_bot": false,
          "headline": "fix(vcs): jj Advance classifies the working copy in one probe",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-02T08:14:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d6b4741a37465de2f6706cb925ebd3342b4d5446",
          "body": "…owing failures",
          "is_bot": false,
          "headline": "fix(vcs): git Advance classifies divergence structurally, stops swall…",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-02T08:00:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0dff8b7e6040ba5a8093bd98123053eacc3627ad",
          "body": null,
          "is_bot": false,
          "headline": "refactor(vcs): hoist shared substrate into repoCore, add head guard",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-02T07:48:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f5cc1466594b0b9aa9f08c72a31d9d2d43be118f",
          "body": "Bump every action pin present in this repo to the fleet's current baseline so\nnothing runs on the deprecated Node-20 runtime and versions stop drifting:\ncheckout@v7, setup-go@v6, setup-uv@v8.2.0, cache@v5, golangci-lint-action@v9,\nupload-pages-artifact@v5, deploy-pages@v5, and mlugg/setup-zig@v2 ->\nxyzzylabs/setup-zig@v1 (a maintained Node-24 fork).\n\nSigned-off-by: Yasyf Mohamedali <yasyfm@gmail.com>",
          "is_bot": false,
          "headline": "ci: unify GitHub Actions to current majors (Node-24 baseline)",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-02T07:45:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "19b6b4b3d3c2773ef66a64b65f69a35b32fbfe20",
          "body": "…ry idempotence\n\nSigned-off-by: Yasyf Mohamedali <yasyfm@gmail.com>",
          "is_bot": false,
          "headline": "ci(release): replace_existing_artifacts for the shared workflow's ret…",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-02T06:06:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f62864fc03e6033c5528c60be37767b6c2b3a118",
          "body": null,
          "is_bot": false,
          "headline": "refactor(vcs): typed command errors",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-02T04:52:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "eb0e30b93440c8b7c18ffed6cfecaf14869c9bb4",
          "body": null,
          "is_bot": false,
          "headline": "refactor(vcs): split exec substrate and rename dirt classifier",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-02T04:41:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a319a0f87747d14e1484807dc2801d52fe248adc",
          "body": "…ve punctuation\n\nThe new raw-git-commit tests (TestJJStableDetectsGitHeadDrift,\nTestJJAdvanceRawCommitNotStranded) run git commit in a colocated jj clone,\nwhich carries no git identity on a clean CI runner (\"Author identity unknown\").\nConfigure it locally per repo, exactly as gitClone already does.\n\n[…]\ngCopyContention\nfixture so revive's error-strings rule passes (it flags trailing punctuation,\nnot the leading capital). IsWorkingCopyContention matches on the substring, so\nthe assertion is unchanged.",
          "is_bot": false,
          "headline": "test(vcs): fix CI - git identity for colocated raw-commit tests, revi…",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-02T01:51:46Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ad6b5b21796f4ca846881bae5a71b9351e9d18a3",
          "body": "… on drift\n\nreposync raced a user's rapid raw `git commit`s in a jj-colocated repo and\norphaned commits (packed-refs.lock warnings; changes reappeared uncommitted).\nA raw git commit moves git HEAD with no jj op, so a subsequent reposync jj\nsnapshot reconciled against the diverged HEAD and `jj new tr\n[…]\n.\n\nTests cover every marker, the drift predicate (incl. a raw git commit the\nop-head misses), the fetch gate, the sync-level locked-repo skip, and the\nend-to-end footgun (raw-committed work survives).",
          "is_bot": false,
          "headline": "fix(vcs): never disrupt an active repo — gate sync on live ops, abort…",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-02T01:44:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "05c4bc5940ede40ca1c7153e8b32d1a1d75e7f72",
          "body": "…tive jj\n\nInUse snapshotted the working copy (and Advance did via disposable()\neven with trunk unmoved), racing an in-flight interactive jj command\ninto \"Internal error: Failed to check out commit: Concurrent checkout\".\nRun the op-log recency gate first, read the last-recorded @ with\n--ignore-workin\n[…]\n a\nbusy skip retried next converge. Raise the manifest watch debounce to\n15s so a converge fires after a push rather than mid-flight, and drop\nthe never-consumed WatchDebounce/Interval settings knobs.",
          "is_bot": false,
          "headline": "fix(vcs): make daemon probes snapshot-free so they never race interac…",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-07-02T00:11:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "093ff597635f825387917e5c70648990c3309624",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump synckit v0.4.2 (Hosts tab seed + revalidate)",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-06-27T10:41:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "21f2dba4df86dfabb64ea9d8dacd9d742d390317",
          "body": null,
          "is_bot": false,
          "headline": "chore: bump synckit v0.4.1 (Hosts tab registered-first sort)",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-06-27T10:09:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "07d496294a1de99fa831537ad2de20b65c7b92c0",
          "body": "The generic UI shell + Hosts tab move into synckit/tui (shared across consumers);\nreposync keeps only its Repos content screen, refactored to implement the exported\ntui.Screen on the shared primitives. Drops the dev replace and pins synckit v0.4.0,\nwhich also brings the host-discovery fixes (no self in Hosts; a peer with the daemon\nreads \"installed\").",
          "is_bot": false,
          "headline": "feat(tui): adopt synckit v0.4.0 shared tui; keep only the Repos screen",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-06-27T09:21:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "93ca306e84fa336c47286e66283a4e0e432c654d",
          "body": "Serve synckitd over a single 'reposync rpc-serve' stdio entrypoint implementing\nsyncservice.SyncConsumer (capabilities/list/reconcile/sync/get_state); route\ncross-host registry fetch through typed svc.get_state over ssh-stdio (apply stays a\nnative in-process pull-only write). Drop the list/reconcile/state CLI verbs and the\nmanifest actions/list_cmd for a service{transport:stdio,serve_args} block. Bump\ngithub.com/yasyf/synckit to v0.3.0.",
          "is_bot": false,
          "headline": "feat: adopt synckit v0.3.0 typed RPC contract (rpc-serve)",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-06-26T20:36:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cc5115346ec376f38386c5109350fc72923d0ce9",
          "body": "…OKEN\n\nReplace the inline goreleaser job with yasyf/homebrew-tap/.github/workflows/release-go.yml@v1\nand rename the tap push token from TAP_GITHUB_TOKEN to the fleet-standard\nHOMEBREW_TAP_TOKEN (same fine-grained PAT). Also gains the verify-tag-on-main gate.\n\nNOTE: set HOMEBREW_TAP_TOKEN on the repo before the next release.\nSigned-off-by: Yasyf Mohamedali <yasyfm@gmail.com>",
          "is_bot": false,
          "headline": "ci(release): use shared release-go.yml; standardize on HOMEBREW_TAP_T…",
          "author_name": "Yasyf Mohamedali",
          "author_login": "yasyf",
          "committed_at": "2026-06-25T08:56:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 34,
      "commits_last_year": 135,
      "latest_release_at": "2026-07-21T12:10:39Z",
      "latest_release_tag": "v0.18.1",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 5,
      "days_since_latest_release": 0,
      "mean_days_between_releases": 2
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 42,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "github.com/yasyf/reposync",
          "exists": true,
          "license": null,
          "keywords": [],
          "ecosystem": "go",
          "matches_repo": true,
          "registry_url": "https://pkg.go.dev/github.com/yasyf/reposync",
          "is_deprecated": false,
          "latest_version": "v0.18.1",
          "repository_url": "https://github.com/yasyf/reposync",
          "versions_count": 34,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": null,
          "first_published_at": null,
          "latest_published_at": "2026-07-21T11:48:31Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 0
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 0,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0
      },
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": true,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [
        "go.mod"
      ],
      "largest_source_bytes": 52642,
      "source_files_sampled": 68,
      "oversized_source_files": 0,
      "agent_instruction_files": [
        "AGENTS.md",
        "CLAUDE.md"
      ],
      "agent_instruction_max_bytes": 21196
    },
    "dependencies": {
      "manifests": [
        "go.mod"
      ],
      "advisories": {
        "error": null,
        "scope": null,
        "source": null,
        "findings": [],
        "collected": false,
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 0,
        "assessed_package": null,
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "go"
      ],
      "dependencies": [
        {
          "name": "github.com/charmbracelet/bubbles",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.0.0"
        },
        {
          "name": "github.com/charmbracelet/bubbletea",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.3.10"
        },
        {
          "name": "github.com/charmbracelet/lipgloss",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.1.0"
        },
        {
          "name": "github.com/spf13/cobra",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v1.10.2"
        },
        {
          "name": "github.com/yasyf/synckit",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.24.0"
        },
        {
          "name": "golang.org/x/term",
          "manifest": "go.mod",
          "ecosystem": "go",
          "version_constraint": "v0.45.0"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 0,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "yasyf",
          "commits": 133,
          "avatar_url": "https://avatars.githubusercontent.com/u/709645?v=4"
        }
      ],
      "contributors_sampled": 1,
      "top_contributor_share": 1
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "guides.yml",
        "release.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [
        ".golangci.yml"
      ],
      "has_editorconfig": false,
      "has_linter_config": true,
      "has_precommit_config": true
    },
    "security_signals": {
      "lockfiles": [
        "go.sum"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": null,
            "reason": "no pull request found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 6 contributing companies or organizations",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 9,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": null,
            "reason": "packaging workflow not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "no SAST tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": 0,
            "reason": "Project has not signed or included provenance with any releases.",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 0,
            "reason": "11 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "570688d0c352de57c5b02e7542f6a4e370df4d5e",
        "ran_at": "2026-07-21T19:47:03Z",
        "aggregate_score": 2.3,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/yasyf/reposync",
    "host": "github.com",
    "name": "reposync",
    "owner": "yasyf"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 50,
      "inputs": {
        "security": 23,
        "vitality": 71,
        "community": 21,
        "governance": 42,
        "engineering": 85
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 71,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 58,
            "inputs": {
              "commits_last_year": 135,
              "human_commit_share": 0.89,
              "days_since_last_push": 0,
              "active_weeks_last_year": 5
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "5/52 weeks with commits",
                "points": 3.5,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "135 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 135
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": null,
            "notes": [],
            "value": 90,
            "inputs": {
              "releases_count": 34,
              "latest_release_tag": "v0.18.1",
              "releases_from_tags": false,
              "days_since_latest_release": 0,
              "mean_days_between_releases": 2
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "34 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 34
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~2 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 2
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "critical",
        "name": "Community & Adoption",
        "value": 21,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 0,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "at_risk",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 44,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file present, not a recognized license",
                "points": 16.9,
                "status": "partial",
                "details": [
                  {
                    "code": "license_custom",
                    "params": {}
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "at_risk",
        "name": "Sustainability & Governance",
        "value": 42,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 20,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 1,
              "top_contributor_share": 1
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 100% of commits",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 100
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "1 contributors",
                "points": 1.4,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 6 contributing companies or organizations",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "critical",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution",
                    "pr_acceptance"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 1,
            "inputs": {
              "merged_prs": 0,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "no decided pull requests or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_decided_prs_or_data",
                    "params": {}
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "verified_domain"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 64,
            "inputs": {
              "followers": 181,
              "owner_type": "User",
              "is_verified": null,
              "owner_login": "yasyf",
              "public_repos": 194,
              "account_age_days": 5586
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "personal (user) account",
                "points": 10,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_personal",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": "not applicable to user accounts",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_applicable_to_user_accounts",
                    "params": {}
                  }
                ],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "181 followers of yasyf",
                "points": 16.2,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 181,
                      "login": "yasyf"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "194 public repos, account ~15 yr old",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 194
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 15
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "github.com/yasyf/reposync"
              ],
              "ecosystems": "go",
              "any_deprecated": false,
              "min_days_since_publish": 0
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on go",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "go"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 0 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "34 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 34
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "excellent",
        "name": "Engineering Quality",
        "value": 85,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "excellent",
            "name": "Engineering practices",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_ci_tests"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 92,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": true,
              "has_precommit_config": true
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "3 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": ".golangci.yml",
                "points": 16,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 9.6,
                "status": "met",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "good",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "critical",
        "name": "Security",
        "value": 23,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "critical",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): CI-Tests, Packaging. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "ci_tests",
                    "packaging"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 23,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 2.3
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "no pull request found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 6 contributing companies or organizations",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.2,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow not detected",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "no SAST tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "Project has not signed or included provenance with any releases.",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "11 existing vulnerabilities detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 5
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "good",
        "name": "AI Readiness",
        "value": 72,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [
                "AGENTS.md",
                "CLAUDE.md"
              ],
              "agent_instruction_max_bytes": 21196
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "AGENTS.md, CLAUDE.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "AGENTS.md, CLAUDE.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "89 of 89 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 89,
                      "sampled": 89
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "good",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 71,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "go.sum"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": true,
              "typecheck_configs": [],
              "agent_commit_share": 0.02,
              "toolchain_manifests": [
                "go.mod"
              ],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": "go.mod (toolchain convention, no task runner)",
                "points": 12.6,
                "status": "partial",
                "details": [
                  {
                    "code": "toolchain_convention",
                    "params": {
                      "files": "go.mod"
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": ".golangci.yml",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".golangci.yml"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "Go (statically typed)",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "2 of the last 100 commits agent-authored or agent-credited",
                "points": 4,
                "status": "partial",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 2,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "Go",
              "largest_source_bytes": 52642,
              "source_files_sampled": 68,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Go (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "Go"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/68 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 68,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "critical",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 20,
            "inputs": {
              "example_dirs": [],
              "has_mcp_signal": true,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-21T19:47:08.591911Z",
  "schema_version": "0.23.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/y/yasyf/reposync.svg",
  "full_name": "yasyf/reposync",
  "license_state": "custom",
  "license_spdx": null
}

Scores are signals, not warranties. They reflect publicly visible practices on GitHub — not a code audit, and not a security guarantee.

Missing data is excluded and weights renormalized, never scored as zero. Methodology is versioned and open: metrics v1.13.0, schema v0.23.0 — full methodology · metrics wiki.

How one result sits in the wider record: aggregate statisticsGo.