DIG-Network / dig-sdk

Не вдалося зібрати розв'язаний набір залежностей для цього звіту: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

Встановлення npm:@dignetwork/dig-sdk@0.4.1 тягне 2 пакетів, прямих і транзитивних: 0 мають відомі сповіщення, з них 0 — прямі залежності.

Жодне відоме сповіщення не стосується оцінених залежностей.

Сповіщення означає, що версія, записана в графі залежностей, потрапляє в уражений діапазон. Досяжність не аналізується, а граф містить піниї розробки й тестування — знахідка може стосуватися інструментів, а не поставленого коду.

{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 231,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "JavaScript": 83973,
        "TypeScript": 144425
      },
      "pushed_at": "2026-07-19T04:09:06Z",
      "created_at": "2026-06-28T01:47:23Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-19T04:09:08Z",
      "description": "@dignetwork/dig-sdk — the typed front door for building dapps on the DIG Network: a Chia wallet abstraction (ChiaProvider: injected window.chia → WalletConnect/Sage) plus DigClient read-crypto (verify + decrypt content by URN) and the canonical CHIP-0035 spend builder, in ESM + CJS + .d.ts.",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "MIT",
      "default_branch": "main",
      "license_spdx_raw": "MIT",
      "primary_language": "TypeScript",
      "significant_languages": [
        "TypeScript",
        "JavaScript"
      ]
    },
    "owner": {
      "blog": "https://dig.net",
      "name": "DIG Network",
      "type": "Organization",
      "login": "DIG-Network",
      "company": null,
      "location": null,
      "followers": 41,
      "avatar_url": "https://avatars.githubusercontent.com/u/180309536?v=4",
      "created_at": "2024-09-03T14:43:13Z",
      "is_verified": null,
      "public_repos": 105,
      "account_age_days": 689
    },
    "license": {
      "state": "standard",
      "spdx_id": "MIT",
      "raw_spdx": "MIT",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [
        {
          "tag": "v0.2.0",
          "kind": "minor",
          "published_at": "2026-06-30T05:57:38Z"
        },
        {
          "tag": "v0.1.0",
          "kind": "minor",
          "published_at": "2026-06-28T14:57:12Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "281cfa72fc11ffb9f5f3eebe61bab3390dd1c653",
          "body": null,
          "is_bot": false,
          "headline": "chore(release): v0.4.1",
          "author_name": "dig-release-bot",
          "author_login": "release-bot",
          "committed_at": "2026-07-19T04:09:04Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a8a2bba6a91a0fbebadf495121ead24ac585b302",
          "body": "…ransport tests (§2.3) (#6)\n\nWire c8 coverage collection + a CI-gated ≥80% floor (lines/functions/branches/statements) and add 26 tests for the WalletConnect request/retry loop (timeout race, transient-publish retry, no-double-prompt), the ChiaProvider surface + CHIP-0002 normalizers, and the Vite/N\n[…]\n→88% lines. Tests are Node-18 compatible (no mock.timers); adds a private defaulted backoffBaseMs seam (behaviour-preserving). Actions #1156 finding #3.\n\nCo-authored-by: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test(dig-sdk): add c8 coverage gate (≥80%) + WalletConnect/provider t…",
          "author_name": "mt-dev",
          "author_login": "MichaelTaylor3d",
          "committed_at": "2026-07-19T04:08:53Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "ee27bd544fb540246d94b00b0aa2940e8feb4bfd",
          "body": null,
          "is_bot": false,
          "headline": "chore(release): v0.4.0",
          "author_name": "dig-release-bot",
          "author_login": "release-bot",
          "committed_at": "2026-07-18T23:21:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "701b284ed811044f9f8e9976557f47b99f3f45c8",
          "body": "Bump @dignetwork/chip35-dl-coin-wasm ^0.8.0 -> ^0.13.0 so the funded multi-item bulk-mint builder bulkMintFunded (chip35 #221) flows through the ./spend export* re-export. +regression test (NEW_0_13_0_EXPORTS) + version-floor >= 0.13.0 + README/doc. Core/0.5/0.7/0.8 builders verified still present. Minor 0.3.3 -> 0.4.0.\n\nCloses #305.\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(spend): re-export bulkMintFunded via chip35 0.13.0 bump (#305)",
          "author_name": "mt-dev",
          "author_login": "MichaelTaylor3d",
          "committed_at": "2026-07-18T23:21:42Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b113eef30e548e0d18522c16a050f9c2c13f2b3f",
          "body": null,
          "is_bot": false,
          "headline": "chore(release): v0.3.3",
          "author_name": "dig-release-bot",
          "author_login": "release-bot",
          "committed_at": "2026-07-18T19:19:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ae3cb9ec58ffac15f9ce69287d48b3c8ce2588ee",
          "body": "…asm (#987) (#4)\n\n* chore(dig-sdk): retarget read-crypto dep to @dignetwork/dig-capsule-wasm (#987)\n\nThe read-crypto wasm package was renamed @dignetwork/dig-client →\n@dignetwork/dig-capsule-wasm (dig-capsule #987). Retarget the runtime dependency,\nthe loader import paths (/node, /web, /dig_client_b\n[…]\nle-wasm instead of @dignetwork/dig-client)\n\nAll 116 unit tests pass. Build + typecheck clean.\n\nCo-Authored-By: Claude <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(dig-sdk): retarget read-crypto dep to @dignetwork/dig-capsule-w…",
          "author_name": "mt-dev",
          "author_login": "MichaelTaylor3d",
          "committed_at": "2026-07-18T19:18:59Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6152bd11b4b3107a198377632cb1112ed7aa130f",
          "body": "Co-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): v0.3.2",
          "author_name": "Michael Taylor",
          "author_login": "MichaelTaylor3d",
          "committed_at": "2026-07-07T19:43:59Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a10b78a929691f76b1a8f39039fbdfc28e130bb4",
          "body": "…y (#3)\n\nnpm run test used `node --test test/` (an explicit directory path). On\nNode 22 this now throws ERR_MODULE_NOT_FOUND / MODULE_NOT_FOUND trying\nto resolve the directory as a bare specifier before the test runner\ngets to scan it, whereas Node 18/20 handled it. The bare `node --test`\nform (no e\n[…]\nered run (v0.3.1)\nfailed at the test step for this reason before reaching npm publish.\n\nPatch bump (0.3.1 -> 0.3.2): fix, no public API/behavior change.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: use bare node --test to fix Node 22 directory-arg incompatibilit…",
          "author_name": "Michael Taylor",
          "author_login": "MichaelTaylor3d",
          "committed_at": "2026-07-07T19:43:51Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9e0df04bf131417ce72b55fb83a28980c2f620f7",
          "body": "Co-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): v0.3.1",
          "author_name": "Michael Taylor",
          "author_login": "MichaelTaylor3d",
          "committed_at": "2026-07-07T19:28:32Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "637f6d2739b8e3125847843341abafe5bf94d666",
          "body": "Convert publish-npm.yml to npm Trusted Publishing: add id-token: write\npermission, bump the publish job to Node 22 (trusted publishing requires\nNode >= 22.14.0), upgrade npm to >= 11.5.1 before publish, and drop the\nNODE_AUTH_TOKEN/NPM_TOKEN env from the publish step (OIDC is\nauto-detected; provenan\n[…]\npendency for this repo (#201).\n\nPatch bump (0.3.0 -> 0.3.1): CI-only change, no public API/behavior\nchange, required to pass the version-increment gate.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: publish via npm trusted publishing (OIDC), retire NPM_TOKEN (#2)",
          "author_name": "Michael Taylor",
          "author_login": "MichaelTaylor3d",
          "committed_at": "2026-07-07T19:28:23Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c5a722ca52971010aae17a1dcaeacdef5b396a51",
          "body": "Co-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): v0.3.0",
          "author_name": "Michael Taylor",
          "author_login": "MichaelTaylor3d",
          "committed_at": "2026-07-06T03:05:25Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "3026545b4382664ebee2ff3b81a29373fd9a45e9",
          "body": "ChiaProvider.connect's mode: \"auto\" silently prefers the injected\nwallet, which is fine for a single-wallet-target dapp but removes the\nchoice when a user has both a DIG Browser wallet and Sage. Add\nChiaProvider.listConnectors() — a pure, side-effect-free enumeration\nof the \"browser-wallet\" / \"walle\n[…]\n\") or mode: \"walletconnect\".\n\n\"auto\"/\"injected\"/\"walletconnect\" resolve exactly as before; this is\npurely additive.\n\nCloses DIG-Network/dig_ecosystem#63\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat(provider): dual Browser Wallet vs WalletConnect connector chooser",
          "author_name": "Michael Taylor",
          "author_login": "MichaelTaylor3d",
          "committed_at": "2026-07-06T03:05:15Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9c7e7e4d850afc2eed7deb93a1e27dde85580815",
          "body": "Co-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(release): v0.2.1",
          "author_name": "Michael Taylor",
          "author_login": "MichaelTaylor3d",
          "committed_at": "2026-07-04T08:34:12Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a59266ce173f70fdcd16d7b26126418983313794",
          "body": "…to-publish-everything)\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: auto-publish npm on version tag + changelog/tag on merge (#230 au…",
          "author_name": "Michael Taylor",
          "author_login": "MichaelTaylor3d",
          "committed_at": "2026-07-04T08:34:04Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "fca0e4a7ca497b9d9499aa6227734e53575ffda2",
          "body": "Co-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore(changelog): add git-cliff config for Conventional-Commit changelog",
          "author_name": "Michael Taylor",
          "author_login": "MichaelTaylor3d",
          "committed_at": "2026-07-04T05:21:16Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "8315bcf7ad0e408ac3afd39112e5b06a9e25ab80",
          "body": "Co-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: enforce Conventional Commits with commitlint on PRs",
          "author_name": "Michael Taylor",
          "author_login": "MichaelTaylor3d",
          "committed_at": "2026-07-04T05:08:41Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "fcba9a7d2af962f51f1784f6aedc4e133bdba23a",
          "body": "Co-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: enforce Conventional Commits with commitlint on PRs",
          "author_name": "Michael Taylor",
          "author_login": "MichaelTaylor3d",
          "committed_at": "2026-07-04T05:04:28Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "67b109e0dd62e8d8da67349b95a8a07d0903a866",
          "body": "Co-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "ci: enforce version increment in PRs (package.json / Cargo.toml)",
          "author_name": "Michael Taylor",
          "author_login": "MichaelTaylor3d",
          "committed_at": "2026-07-04T04:49:53Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "e357a85e21a3d2bca1255014012b7a984fd4eed3",
          "body": "…#108/#16/#201)\n\nReplace the vendored read-crypto wasm/glue with a runtime dependency on\n@dignetwork/dig-client@^0.1.0 — the published, installable form of digstore's\ndig-client-wasm crate. The SDK's public API is unchanged: DigClient read-crypto\n(decryptResource/verifyInclusion/deriveKey/reconstruc\n[…]\ndigest == the package integrity.json. Existing\n  read-crypto tests run end-to-end against the packaged wasm and stay green\n  (110/110).\n- Bump to 0.2.1.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "De-vendor dig-client wasm: consume published @dignetwork/dig-client (…",
          "author_name": "Michael Taylor",
          "author_login": "MichaelTaylor3d",
          "committed_at": "2026-07-02T21:49:08Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "2f5d2ff76d9071a2812d3248097f6936c3dce3f1",
          "body": "…ilities()\n\nBump @dignetwork/dig-sdk to 0.2.0 for the additive surface that landed since the\npublished 0.1.0 (tag v0.1.0):\n\n- DigClient collection reads: getCollection + listCollectionItems\n- chia:// DeployResult (chiaUrl/hubUrl; digUrl deprecated alias) in the deploy adapters\n- Paywall pay-to-unloc\n[…]\nities\ndoc-comment to 0.2.0. SDK_VERSION is injected from package.json at build time, so the\ncapabilities test (SDK_VERSION === pkg.version) stays green.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Release 0.2.0: collection reads, chia:// DeployResult, Paywall, capab…",
          "author_name": "Michael Taylor",
          "author_login": "MichaelTaylor3d",
          "committed_at": "2026-06-30T05:52:02Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "311244f2aaca404e3874f53ffeac6c4fd5271588",
          "body": "Co-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Document DigClient collection reads in the API table (#39)",
          "author_name": "Michael Taylor",
          "author_login": "MichaelTaylor3d",
          "committed_at": "2026-06-29T23:59:42Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "e406a5e561d2de2cbb021326d4ae6910ef475a17",
          "body": "…#39)\n\nExpose the new public dig RPC collection read methods on DigClient as typed\ncalls against rpc.dig.net:\n\n  getCollection({ launcherIds, did? }) -> CollectionMeta\n  listCollectionItems({ launcherIds, offset?, limit? }) -> CollectionItemsPage\n\nBoth are plain JSON-RPC reads (no wallet, no read-cr\n[…]\nhe SDK\nsends (launcher_ids/did/offset/limit, omitted when absent), the typed result\nshaping, and RPC_ERROR mapping. typecheck + build + 106 tests green.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Add DigClient collection reads: getCollection + listCollectionItems (…",
          "author_name": "Michael Taylor",
          "author_login": "MichaelTaylor3d",
          "committed_at": "2026-06-29T23:48:24Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "0a93741f1900e294909188c616ce3bb140a9b2e2",
          "body": "Match the chia:// content-URL contract that just landed in digstore\n(content_address = chia://<storeId>:<rootHash>/, the address a user opens\nin the DIG Browser/extension). digstore is the canonical URL emitter; the\nSDK now surfaces that same value.\n\n- DeployResult: add `chiaUrl` = chia://<storeId>:\n[…]\npecheck green.\n\nFollow-up: dig-framework-adapters still needs to consume the SDK's chia://\nfield (DeployResult.chiaUrl) and update its READMEs to match.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "UX consistency: chia:// content-open URL, DIGHUb wordmark, $DIG sigil",
          "author_name": "Michael Taylor",
          "author_login": "MichaelTaylor3d",
          "committed_at": "2026-06-29T17:49:14Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a8ea28c1a02e9cfb7fccf90f7d895e84f158fb57",
          "body": "chip35-dl-coin-wasm 0.8.0 adds an agent-friendly runtime introspection\nsurface — version() (the loaded build's semver) and capabilities()\n({ name, version, builders, errorCodes }) — plus typed { code, message }\nerrors. The SDK's \"./spend\" entry is `export * from\n\"@dignetwork/chip35-dl-coin-wasm\"`, s\n[…]\n re-export.\n- spend.test.mjs: raise the resolved-version floor to >= 0.8.0 and add a\n  contract test asserting version()/capabilities() are re-exported.\n\nCo-Authored-By: Claude <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Bump chip35-dl-coin-wasm to ^0.8.0 (agent-friendly introspection)",
          "author_name": "Michael Taylor",
          "author_login": "MichaelTaylor3d",
          "committed_at": "2026-06-29T02:18:44Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9bad9ee258932086e08b5caf719fb8b83291ca91",
          "body": "…omy (#92)\n\nMake the SDK self-describing and machine-readable, additive and non-breaking:\n\n- Export SDK_VERSION (injected from package.json via tsup `define`) and\n  capabilities()/describe() — returns the SDK surface (modules, wallet/sign\n  methods, transports, chains, default RPC, read-crypto wasm \n[…]\nemits the new value+type exports and the injected version.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01GjQgGAisBupqs7vpkmUhuN",
          "is_bot": false,
          "headline": "Agent-friendly polish: SDK_VERSION, capabilities(), typed error taxon…",
          "author_name": "Michael Taylor",
          "author_login": "MichaelTaylor3d",
          "committed_at": "2026-06-28T23:26:36Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a7b65e066d3d00cd4ce012e3666620037e93f449",
          "body": "CI failed on Node 18: the no-memo/no-nonce path called\n`crypto.getRandomValues`, but Node exposes `globalThis.crypto` only since\nv20 — on Node 18 it is undefined, throwing \"crypto is not defined\". The SDK\ntargets Node 18+, so this is a real cross-runtime bug.\n\nrandomNonce() now prefers the global We\n[…]\ne is still generated and the payment still builds +\nsigns.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01GjQgGAisBupqs7vpkmUhuN",
          "is_bot": false,
          "headline": "Fix Paywall random-nonce on Node 18 (no global WebCrypto)",
          "author_name": "Michael Taylor",
          "author_login": "MichaelTaylor3d",
          "committed_at": "2026-06-28T20:40:24Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8f3e98b41ac832f62007f23573586b21e72d84ca",
          "body": "Paywall composes a connected ChiaProvider with the canonical chip35\nmonetization spends so a dapp can charge for access in a few lines:\n\n  - requestPayment({ amount, owner, assetId?, memo?, nonce?, fee? })\n    sources the buyer's coins from the wallet, builds the payment via the\n    wasm (buildPayme\n[…]\nREADME example (typechecked against the built dist types).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01GjQgGAisBupqs7vpkmUhuN",
          "is_bot": false,
          "headline": "Add high-level Paywall helper (#46 monetization)",
          "author_name": "Michael Taylor",
          "author_login": "MichaelTaylor3d",
          "committed_at": "2026-06-28T20:36:11Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "364c91536cd9a4b73dad1ca2e01c47d004dab4cd",
          "body": "chip35 0.7.0 added the in-dapp monetization spends (#46). Bump the dep\n^0.5.0 -> ^0.7.0 so the \"./spend\" re-export (export * from chip35) now\nforwards buildPayment / buildCatPayment / paymentNonce /\nverifyPaymentReceipt / proveNftOwnership / proveCollectionMembership.\n\nExtend the spend re-export reg\n[…]\n the\nexisting 0.5.0 asset builders + core store builders).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01GjQgGAisBupqs7vpkmUhuN",
          "is_bot": false,
          "headline": "Bump chip35-dl-coin-wasm ^0.7.0; surface monetization spends at /spend",
          "author_name": "Michael Taylor",
          "author_login": "MichaelTaylor3d",
          "committed_at": "2026-06-28T20:35:51Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a86b7352468434565114496809d3be6f0e483312",
          "body": "Bump the canonical spend builder dependency ^0.4.0 -> ^0.5.0 so the new\nasset builders flow through the `/spend` re-export (`export *`):\nmintNft, bulkMint, createDid, issueCat, buildChip0007Metadata,\nvalidateChip0007, generateItemMetadata, sha256, encodeOffer, decodeOffer.\n\nThis also republishes a W\n[…]\nnnerPuzzleHash;\n  add the asset/CHIP-0007/offer builders).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01GjQgGAisBupqs7vpkmUhuN",
          "is_bot": false,
          "headline": "Consume chip35-dl-coin-wasm 0.5.0 (asset builders via /spend)",
          "author_name": "Michael Taylor",
          "author_login": "MichaelTaylor3d",
          "committed_at": "2026-06-28T14:56:21Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "499b96e3abb52d7ae6ed988ba68499589b730e8c",
          "body": "Roadmap #44 (framework adapters) and #16 (stop vendoring dig-client), both as\nsubpath exports of @dignetwork/dig-sdk (one repo, one CI).\n\n#44 Framework adapters\n  - New subpaths: @dignetwork/dig-sdk/vite (digVite plugin + digDeploy) and\n    /next (digDeploy + digNextDevShimTag/Script). Vite/Next are\n[…]\np build + typecheck + README-examples typecheck all green.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01GjQgGAisBupqs7vpkmUhuN",
          "is_bot": false,
          "headline": "Add framework adapters (Vite/Next) + publishable read-crypto subpath",
          "author_name": "Michael Taylor",
          "author_login": "MichaelTaylor3d",
          "committed_at": "2026-06-28T04:20:01Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b6390583229a8501226520aaf7f1884e83f2a151",
          "body": "The proven DIG integration logic was locked inside hub.dig.net + vendored wasm\nwith no `npm i`. This standalone, publishable package extracts and genericizes\nit (roadmap Wave-2 #15/#16):\n\n- ChiaProvider — a Chia wallet abstraction that prefers the injected DIG Browser\n  wallet (window.chia) and fall\n[…]\n pattern as\n  chip35_dl_coin). Not published yet (no tag).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>\nClaude-Session: https://claude.ai/code/session_01GjQgGAisBupqs7vpkmUhuN",
          "is_bot": false,
          "headline": "Seed @dignetwork/dig-sdk — the typed front door for DIG dapps",
          "author_name": "Michael Taylor",
          "author_login": "MichaelTaylor3d",
          "committed_at": "2026-06-28T02:04:28Z",
          "body_truncated": true,
          "is_coding_agent": true
        }
      ],
      "releases_count": 2,
      "commits_last_year": 31,
      "latest_release_at": "2026-06-30T05:57:38Z",
      "latest_release_tag": "v0.2.0",
      "releases_from_tags": false,
      "days_since_last_push": 5,
      "active_weeks_last_year": 3,
      "days_since_latest_release": 24,
      "mean_days_between_releases": 1.6
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 50,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "@dignetwork/dig-sdk",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "dig",
            "dig-network",
            "chia",
            "chip-0002",
            "chip-0035",
            "wallet",
            "walletconnect",
            "sage",
            "datalayer",
            "decentralized",
            "content"
          ],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@dignetwork/dig-sdk",
          "is_deprecated": false,
          "latest_version": "0.4.1",
          "repository_url": "https://github.com/DIG-Network/dig-sdk",
          "versions_count": 177,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 2323,
          "first_published_at": "2024-09-09T20:38:51.167000Z",
          "latest_published_at": "2026-07-19T04:09:35.586000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 5
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 0,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0,
        "collected_at": null
      },
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "tsconfig.json"
      ],
      "toolchain_manifests": [],
      "largest_source_bytes": 16336,
      "source_files_sampled": 53,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "package.json"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 2,
        "malicious_count": 0,
        "assessed_package": "npm:@dignetwork/dig-sdk@0.4.1",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm"
      ],
      "dependencies": [
        {
          "name": "@dignetwork/chip35-dl-coin-wasm",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^0.13.0"
        },
        {
          "name": "@dignetwork/dig-capsule-wasm",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^0.1.3"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 6,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "MichaelTaylor3d",
          "commits": 28,
          "avatar_url": "https://avatars.githubusercontent.com/u/5665004?v=4"
        },
        {
          "type": "User",
          "login": "release-bot",
          "commits": 3,
          "avatar_url": "https://avatars.githubusercontent.com/u/6581690?v=4"
        }
      ],
      "contributors_sampled": 2,
      "top_contributor_share": 0.903
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "ci.yml",
        "commitlint.yml",
        "ensure-version-increment.yml",
        "publish-npm.yml",
        "release.yml"
      ],
      "has_docs_dir": false,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "package-lock.json"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": null,
            "reason": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "3 out of 3 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/30 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 0,
            "reason": "project has 0 contributing companies or organizations -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 4,
            "reason": "dependency not pinned by hash detected -- score normalized to 4",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 10,
            "reason": "SAST tool is run on all commits",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 7,
            "reason": "3 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "281cfa72fc11ffb9f5f3eebe61bab3390dd1c653",
        "ran_at": "2026-07-25T01:37:27Z",
        "aggregate_score": 4.4,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-21T12:24:09Z",
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-07-19T04:08:53Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/DIG-Network/dig-sdk",
    "host": "github.com",
    "name": "dig-sdk",
    "owner": "DIG-Network"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 56,
      "inputs": {
        "security": 55,
        "vitality": 71,
        "community": 32,
        "governance": 57,
        "engineering": 61
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 71,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 52,
            "inputs": {
              "commits_last_year": 31,
              "human_commit_share": 1,
              "days_since_last_push": 5,
              "active_weeks_last_year": 3
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "3/52 weeks with commits",
                "points": 2.1,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 3
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "31 commits in the last year",
                "points": 13.5,
                "status": "partial",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 31
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "releases_count": 2,
              "latest_release_tag": "v0.2.0",
              "releases_from_tags": false,
              "days_since_latest_release": 24,
              "mean_days_between_releases": 1.6
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "2 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 24 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 24
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~1.6 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 1.6
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 32,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 0,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (MIT)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "MIT"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 56,
            "inputs": {
              "packages": [
                "@dignetwork/dig-sdk"
              ],
              "dependents": null,
              "ecosystems": "npm",
              "total_downloads": null,
              "monthly_downloads": 2323
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "2,323 downloads/month across npm",
                "points": 44.9,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 2323,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 57,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 14,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 2,
              "top_contributor_share": 0.903
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 90% of commits",
                "points": 2.2,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 90
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "2 contributors",
                "points": 2.7,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 72,
            "inputs": {
              "merged_prs": 6,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "6/6 decided PRs merged",
                "points": 38.2,
                "status": "met",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 6,
                      "decided": 6
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 58,
            "inputs": {
              "followers": 41,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "DIG-Network",
              "public_repos": 105,
              "account_age_days": 689
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "41 followers of DIG-Network",
                "points": 11.7,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 41,
                      "login": "DIG-Network"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "105 public repos, account ~1 yr old",
                "points": 16.8,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 105
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 1
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "@dignetwork/dig-sdk"
              ],
              "ecosystems": "npm",
              "any_deprecated": false,
              "min_days_since_publish": 5
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 5 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "177 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 177
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "moderate",
        "name": "Engineering Quality",
        "value": 61,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "5 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 5
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "3 out of 3 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "moderate",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": false,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 55,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Branch-Protection, Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "branch_protection",
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 44,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 16,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 2,
              "scorecard_aggregate": 4.4
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "3 out of 3 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/30 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 0 contributing companies or organizations -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 4",
                "points": 2,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is run on all commits",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "3 existing vulnerabilities detected",
                "points": 5.2,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:@dignetwork/dig-sdk@0.4.1 runtime dependency closure — what installing the published package pulls in — 2 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "npm:@dignetwork/dig-sdk@0.4.1",
                  "assessed": 2
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 0,
              "affected_packages": 0,
              "assessed_packages": 2,
              "unassessed_packages": 0,
              "affected_by_severity": "none",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "no indirect dependency carries a known advisory",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "no_indirect_advisories",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 2,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 1
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 56,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 1,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "31 of 31 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 31,
                      "sampled": 31
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 57,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "package-lock.json"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [
                "tsconfig.json"
              ],
              "agent_commit_share": 0.903,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "28 of the last 31 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 28,
                      "sampled": 31
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 4",
                "points": 4,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "TypeScript",
              "largest_source_bytes": 16336,
              "source_files_sampled": 53,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "TypeScript (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "TypeScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/53 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 53,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-25T01:37:34.714417Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/d/DIG-Network/dig-sdk.svg",
  "full_name": "DIG-Network/dig-sdk",
  "license_state": "standard",
  "license_spdx": "MIT"
}