Публічний реєстр
Звіт про здоров'я програмного забезпеченнясхема 0.27.0 · метрики 1.13.0 · 2026-07-28 16:20 UTC

EliteaAI / elitea-sdk

SDK for EliteA

PythonApache-2.0★ 1 зірка⑂ 1 форкз квіт. 2026 р.Переглянути на GitHub ↗

EliteaAI/elitea-sdk має індекс здоров’я 54 зі 100, що відповідає смузі «Помірний». Найвищий показник — Engineering Quality (71/100), найнижчий — Community & Adoption (35/100). Останнє оновлення — сьогодні. Більшість нещодавньої роботи виконують 3 учасники.

54
загалом / 100
Помірний

Індекс здоров'я програмного забезпечення

Метрики згруповано у зважені категорії на шкалі 1–100. Загальна оцінка починається як їхнє середнє; коли публічні дані активують Політику юрисдикцій високого ризику, рейтинг коригується й отримує верхню межу 49 («Під ризиком»). Готовність до ШІ не входить до індексу.

54
Відмінний85-100Зразковий; відповідає практично всім перевіреним критеріям
Добрий70-84Здоровий; незначні прогалини
Помірний50-69Прийнятний, але з помітними прогалинами; рекомендовано перевірку
У зоні ризику30-49Суттєві слабкі місця; впровадження потребує обережності
Критичний1-29Серйозні проблеми (покинутий, єдиний мейнтейнер, без базової гігієни)
ЖиттєздатністьСпільнота тавпровадженняСталість таврядуванняІнженернаякістьБезпекаГотовність доШІ

Профіль оцінок

Кожна вісь — окрема категорія. Форма важить більше, ніж середнє: здоровий об'єкт заповнює всю фігуру, тоді як профіль із піками та провалами означає, що сила в одному вимірі маскує ризик в іншому.

Власність

ELITEA AIОрганізація
8 підписників64 публічні репозиторіїз бер. 2026 р.

За цим репозиторієм стоїть організація — спільна, підзвітна опіка, здатна пережити будь-якого окремого мейнтейнера.

Пакетні екосистеми

РеєстрПакетВерсіяЗавантажень / місВерсіїОстання публікація
PyPIelitea_sdk0.8.3710 5262460 днів тому

Метрики за категоріями

Життєздатність

Чи живий проєкт — чи пишеться код і чи виходять релізи?

45У зоні ризику · 22% загального індексу
Як обчислюється оцінка
36/36Свіжість push — останній push 0 дн. тому
11.1/36Ритм комітів — 16/52 тижнів із комітами
18/18Обсяг комітів — 681 комітів за останній рік
10/10OpenSSF Scorecard: Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Використані вхідні дані
commits_last_year681
human_commit_share0,75
days_since_last_push0
active_weeks_last_year16
Як обчислюється оцінка
0/27Випускає релізи — релізів не опубліковано
0/36Свіжість релізів — релізів немає
0/27Ритм релізів — релізів немає
0/10OpenSSF Scorecard: Signed-Releases — немає даних
Використані вхідні дані
releases_count0
Виключено з оцінювання (немає даних або не застосовно): OpenSSF Scorecard: Signed-Releases. Залишкові ваги перенормовано.

Спільнота та впровадження

Чи має проєкт користувачів, завантаження, увагу та влаштовані умови для контриб’юторів?

35У зоні ризику · 18% загального індексу
Як обчислюється оцінка
0/60Зірки — 1 зірок
0/25Форки — 1 форків
0/15Спостерігачі — 0 спостерігачів
Використані вхідні дані
forks1
stars1
watchers0
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history
Як обчислюється оцінка
22.5/22.5README
22.5/22.5Ліцензія — визнана ліцензія (Apache-2.0)
0/18Настанови CONTRIBUTING
0/13.5Кодекс поведінки
0/7.2Шаблон issue
0/6.3Шаблон PR
Використані вхідні дані
has_readmeтак
has_licenseтак
has_contributingні
has_issue_templateні
has_code_of_conductні
has_pull_request_templateні
Як обчислюється оцінка
53.6/80Щомісячні завантаження — 10 526 завантажень/місяць у pypi
0/20Залежні пакети в реєстрі — ця екосистема цього не повідомляє
Використані вхідні дані
packageselitea_sdk
dependents
ecosystemspypi
total_downloads
monthly_downloads10 526
Виключено з оцінювання (немає даних або не застосовно): Залежні пакети в реєстрі. Залишкові ваги перенормовано.

Сталість та врядування

Чи переживе проєкт своїх людей — бас-фактор, реактивність, хто за ним стоїть і як супроводжуються пакети?

65Помірний · 24% загального індексу
Як обчислюється оцінка
36/54Бас-фактор — на 3 контриб’ютор(ів) припадає половина всіх комітів
15.9/22.5Розподіл комітів — головний контриб’ютор — автор 29% комітів
13.5/13.5Широта контриб’юторів — 17 контриб’юторів
10/10OpenSSF Scorecard: Contributors — project has 3 contributing companies or organizations -- score normalized to 10
Використані вхідні дані
bus_factor3
contributors_sampled17
top_contributor_share0,292
Як обчислюється оцінка
2.1/46.8Вирішення issue — закрито 4% issue
36.7/38.3Прийняття PR — злито 349/364 вирішених PR
0/15OpenSSF Scorecard: Code-Review — Found 1/17 approved changesets -- score normalized to 0
Використані вхідні дані
merged_prs349
open_issues107
closed_issues5
issue_closed_ratio0,045
closed_unmerged_prs15
Як обчислюється оцінка
30/30Підтримка власника — у власності організації
0/20Верифікований домен
6.9/25Охоплення власника — 8 підписників у EliteaAI
13.7/25Послужний список — 64 публічних репозиторіїв, вік облікового запису ~0 р.
Використані вхідні дані
followers8
owner_typeOrganization
is_verified
owner_loginEliteaAI
public_repos64
account_age_days125

Супровід пакетів

100Відмінний
Як обчислюється оцінка
25/25Опубліковано й доступно — 1 пакет(ів) у pypi
35/35Свіжість публікацій — остання публікація 0 дн. тому
20/20Історія версій — 246 опублікованих версій
20/20Не застарілий — активний, не deprecated і не yanked
Використані вхідні дані
packageselitea_sdk
ecosystemspypi
any_deprecatedні
min_days_since_publish0

Інженерна якість

Чи наявні базові інженерні практики та документація?

71Добрий · 20% загального індексу
Як обчислюється оцінка
24/24Процеси CI — 8 процес(ів) CI
24/24Наявні тести
0/16Конфігурація лінтера
0/9.6Pre-commit-хуки
0/6.4.editorconfig
20/20OpenSSF Scorecard: CI-Tests — 10 out of 10 merged PRs checked by a CI test -- score normalized to 10
Використані вхідні дані
has_ciтак
has_testsтак
has_editorconfigні
has_linter_configні
has_precommit_configні
Як обчислюється оцінка
30/30README
25/25Каталог документації
0/15Сайт документації / домашня сторінка
10/10Опис репозиторію
0/10Теми
10/10Wiki
Використані вхідні дані
topics
has_wikiтак
homepage
has_readmeтак
has_docs_dirтак
has_descriptionтак

Безпека

Чи міцні видимі практики безпеки й ланцюга постачання, без непослабленої пов’язаності з юрисдикціями високого ризику?

53Помірний · 16% загального індексу

Стан безпеки

41У зоні ризику
Як обчислюється оцінка
7.5/7.5Binary-Artifacts — no binaries found in the repo
0/7.5Branch-Protection — branch protection not enabled on development/release branches
2.5/2.5CI-Tests — 10 out of 10 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 1/17 approved changesets -- score normalized to 0
2.5/2.5Contributors — project has 3 contributing companies or organizations -- score normalized to 10
0/10Dangerous-Workflow — dangerous workflow patterns detected
0/7.5Dependency-Update-Tool — no update tool detected
0/5Fuzzing — project is not fuzzed
2.5/2.5Ліцензія — license file detected
7.5/7.5Maintained — 30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
5/5Packaging — packaging workflow detected
0/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
5/5SAST — SAST tool is run on all commits
0/5Security-Policy — security policy file not detected
0/7.5Signed-Releases — немає даних
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
7.5/7.5Vulnerabilities — 0 existing vulnerabilities detected
Використані вхідні дані
sourceopenssf_scorecard
checks_evaluated17
scorecard_versionv5.5.0
checks_inconclusive1
scorecard_aggregate4,1
Виключено з оцінювання (немає даних або не застосовно): signed_releases. Залишкові ваги перенормовано.
Як обчислюється оцінка
35/35Прямі залежності без відомих сповіщень — жодна пряма залежність не має відомих сповіщень
0/25Непрямі залежності без відомих сповіщень — транзитивний набір не відокремлюється від залежностей розробки й тестування в цьому обсязі
0/40Немає задавнених сповіщень — жодне сповіщення не має дати публікації
Використані вхідні дані
sourceosv
advisories132
affected_packages19
assessed_packages91
unassessed_packages36
affected_by_severitycritical 3, high 10, moderate 5, low 1
direct_affected_packages0
Виключено з оцінювання (немає даних або не застосовно): Непрямі залежності без відомих сповіщень, Немає задавнених сповіщень. Залишкові ваги перенормовано. Звірено 91 резолвлених залежностей із OSV. 36 не вдалося оцінити — немає резолвленої версії, непідтримувана екосистема або поза межами звітованого переліку пакетів. Цей репозиторій не публікує пакета, який резолвить індекс, тож натомість оцінено граф залежностей репозиторію. Цей граф змішує закріплені версії для розробки й тестування зі справді постачаними залежностями, тож оцінюються лише задекларовані runtime-залежності; транзитивні знахідки подаються як контекст і в оцінку не входять. Досяжність не аналізується.

Готовність до ШІ

Наскільки репозиторій оснащений для розробки та супроводу за участі ШІ-агентів? Незалежний, експериментальний бейдж — вага 0.0, тож він подається окремо і не впливає на загальний індекс здоров'я.

65Помірний · 0% загального індексу
Як обчислюється оцінка
45/45Інструкції для агентів — .github/copilot-instructions.md, .github/instructions/bug-reporting.instructions.md, .github/instructions/test-coverage-structure.instructions.md
0/15Машиночитана документація (llms.txt)
40/40Читабельна історія комітів — намір зазначено у 74 з 75 людських комітів (структурований заголовок або пояснювальний текст)
Використані вхідні дані
has_llms_txtні
legible_history_share0,987
agent_instruction_files.github/copilot-instructions.md, .github/instructions/bug-reporting.instructions.md, .github/instructions/test-coverage-structure.instructions.md
agent_instruction_max_bytes13 190
Як обчислюється оцінка
0/18Розгортання однією командою
22/22Автоматизовані тести
0/11Конфігурація лінтера / форматера
0/11Статична перевірка типів
10/10Відтворюване середовище — Dockerfile
10/10Підтверджена практика роботи з агентами — 20 з останніх 100 комітів створено агентом або з його зазначенням
0/8Автоматизоване супроводження — автоматичних оновлень залежностей не виявлено
0/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 0
Використані вхідні дані
has_nixні
has_testsтак
lockfiles
has_dockerfileтак
typed_languageні
bootstrap_files
has_devcontainerні
has_linter_configні
typecheck_configs
agent_commit_share0,2
toolchain_manifests
dependency_bot_commit_share0
Як обчислюється оцінка
0/45Типізований код — Python без конфігурації перевірки типів
52.4/55Керовані розміри файлів — 32/686 файлів вихідного коду понад 60 КБ
Використані вхідні дані
primary_languagePython
largest_source_bytes174 204
source_files_sampled686
oversized_source_files32
Як обчислюється оцінка
40/40Схема API (OpenAPI/GraphQL/proto) — elitea_sdk/tools/github/schema.docs.graphql
20/20Сервер MCP
40/40Придатні до запуску приклади — examples
Використані вхідні дані
example_dirsexamples
has_mcp_signalтак
api_schema_fileselitea_sdk/tools/github/schema.docs.graphql

Ключові факти

1зірок GitHub
17контриб'юторів
681комітів за останні 12 місяців
0днів від останнього пушу
0релізів
3бас-фактор
107відкритих issue
PyPIпакетних екосистем

Попередження щодо збору даних

  • Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
  • deps.dev does not index pypi:elitea_sdk@0.8.37; advisories assessed against the repository dependency graph instead

Докладніше

OpenSSF Scorecard 4.1 / 10
4.1сукупно

Незалежна, не прив'язана до інструментів оцінка безпеки від відкритого проєкту OpenSSF Scorecard. Кожна перевірка винагороджує практику безпеки, а не інструмент конкретного постачальника. Перевірки, які Scorecard не зміг визначити, позначено н/д і виключено з оцінки безпеки (вони ніколи не зараховуються як нуль).Scorecard v5.5.0 · 2026-07-28 16:19 UTC

10Binary-Artifactsno binaries found in the repo
0Branch-Protectionbranch protection not enabled on development/release branches
10CI-Tests10 out of 10 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 1/17 approved changesets -- score normalized to 0
10Contributorsproject has 3 contributing companies or organizations -- score normalized to 10
0Dangerous-Workflowdangerous workflow patterns detected
0Dependency-Update-Toolno update tool detected
0Fuzzingproject is not fuzzed
10Licenselicense file detected
10Maintained30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
10Packagingpackaging workflow detected
0Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 0
10SASTSAST tool is run on all commits
0Security-Policysecurity policy file not detected
н/дSigned-Releasesno releases found
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
10Vulnerabilities0 existing vulnerabilities detected
Прямі залежності 15
РеєстрПакетОбмеження версіїМаніфест
PyPIsqlalchemy<2.0.36pyproject.toml
PyPItiktoken>=0.7.0pyproject.toml
PyPIopenai>=1.55.0pyproject.toml
PyPIpython-dotenv~=1.0.1pyproject.toml
PyPIjinja2~=3.1.3pyproject.toml
PyPIpillow~=11.1.0pyproject.toml
PyPIrequests~=2.3pyproject.toml
PyPIpydantic~=2.12.0pyproject.toml
PyPIchardet==5.2.0pyproject.toml
PyPIfastapi==0.115.9pyproject.toml
PyPIhttpcore==1.0.7pyproject.toml
PyPIurllib3>=2pyproject.toml
PyPIcertifi==2024.8.30pyproject.toml
PyPItruststore>=0.10.4pyproject.toml
PyPIaiohttp>=3.9.0pyproject.toml
Усі залежності 127

Повний розв'язаний набір залежностей із графа залежностей GitHub: 15 прямих і 112 непрямих (транзитивних) пакетів. Транзитивне замикання є повним, коли в репозиторії закомічено lockfile.

РеєстрПакетВерсіяЗв'язок
PyPIaiohttpпряма
PyPIcertifi2024.8.30пряма
PyPIchardet5.2.0пряма
PyPIfastapi0.115.9пряма
PyPIhttpcore1.0.7пряма
PyPIjinja2пряма
PyPIopenaiпряма
PyPIpillowпряма
PyPIpydanticпряма
PyPIpython-dotenvпряма
PyPIrequestsпряма
PyPIsqlalchemyпряма
PyPItiktokenпряма
PyPItruststoreпряма
PyPIurllib3пряма
PyPIanthropic0.76.0непряма
PyPIastorнепряма
PyPIatlassian-python-apiнепряма
PyPIazure-core1.30.2непряма
PyPIazure-devops7.1.0b4непряма
PyPIazure-identity1.16.0непряма
PyPIazure-keyvault-keys4.9.0непряма
PyPIazure-keyvault-secrets4.8.0непряма
PyPIazure-mgmt-core1.4.0непряма
PyPIazure-mgmt-resource23.0.1непряма
PyPIazure-mgmt-storage21.1.0непряма
PyPIazure-search-documents11.5.2непряма
PyPIazure-storage-blob12.23.1непряма
PyPIbeautifulsoup44.12.2непряма
PyPIboto3непряма
PyPIcairocffi1.7.1непряма
PyPIcharset-normalizer3.3.2непряма
PyPIchromadbнепряма
PyPIclickнепряма
PyPIdeepevalнепряма
PyPIdeltalake1.0.2непряма
PyPIduckduckgo-search5.3.0непряма
PyPIdulwich0.21.6непряма
PyPIelitea-analyse0.1.2непряма
PyPIfactor-analyzer0.5.1непряма
PyPIfigmapy2018.1.0непряма
PyPIformulas1.3.3непряма
PyPIgensim4.3.3непряма
PyPIgitpython3.1.43непряма
PyPIgoogle-api-python-client2.154.0непряма
PyPIgoogle-cloud-bigquery3.34.0непряма
PyPIgooglemaps4.10.0непряма
PyPIgrpcio-statusнепряма
PyPIhtmldocxнепряма
PyPIjira3.8.0непряма
PyPIkeybert0.8.3непряма
PyPIlangchain1.2.6непряма
PyPIlangchain-anthropic1.3.1непряма
PyPIlangchain-chroma1.0.0непряма
PyPIlangchain-community0.4.1непряма
PyPIlangchain-core1.2.7непряма
PyPIlangchain-mcp-adaptersнепряма
PyPIlangchain-openai1.1.7непряма
PyPIlangchain-postgres0.0.16непряма
PyPIlangchain-text-splitters1.1.0непряма
PyPIlangchain-unstructured1.0.0непряма
PyPIlanggraph1.0.7непряма
PyPIlanggraph-checkpoint2.1.2непряма
PyPIlanggraph-checkpoint-postgres2.0.21непряма
PyPIlanggraph-checkpoint-sqlite2.0.11непряма
PyPIlanggraph-prebuilt1.0.7непряма
PyPIlanggraph-swarm0.1.0непряма
PyPIlangsmithнепряма
PyPIlxml5.2.2непряма
PyPImammoth1.9.0непряма
PyPImarkdown3.5.1непряма
PyPImarkdownifyнепряма
PyPImsrest0.7.1непряма
PyPInetworkxнепряма
PyPIoffice365-rest-python-client2.5.14непряма
PyPIopencv-python4.11.0.86непряма
PyPIopenpyxl3.1.5непряма
PyPIopentelemetry-apiнепряма
PyPIopentelemetry-exporter-otlp-proto-grpcнепряма
PyPIopentelemetry-instrumentationнепряма
PyPIpandas2.2.3непряма
PyPIparamiko3.3.1непряма
PyPIpdf2image1.16.3непряма
PyPIpdfminer-six20240706непряма
PyPIpgvector0.2.5непряма
PyPIplaywrightнепряма
PyPIprotobufнепряма
PyPIpsycopg2-binary2.9.10непряма
PyPIpygithub2.3.0непряма
PyPIpymupdf1.24.9непряма
PyPIpymysql1.1.1непряма
PyPIpypdf4.3.1непряма
PyPIpypdf2непряма
PyPIpyral1.6.0непряма
PyPIpysnc1.1.10непряма
PyPIpytest-reportportalнепряма
PyPIpython-calamine0.5.3непряма
PyPIpython-docx1.1.2непряма
PyPIpython-gitlab4.5.0непряма
PyPIpython-graphql-clientнепряма
PyPIpython-pptx1.0.2непряма
PyPIpyyamlнепряма
PyPIqtest-swagger-client0.0.3непряма
PyPIreportlab4.2.5непряма
PyPIrequests-openapi1.0.5непряма
PyPIretry-extended0.2.3непряма
PyPIrichнепряма
PyPIrlpycairo0.3.0непряма
PyPIscipy1.13.1непряма
PyPIsentence-transformers2.7.0непряма
PyPIsetuptoolsнепряма
PyPIslack-sdk3.35.0непряма
PyPIstatsmodels0.14.4непряма
PyPIstreamlitнепряма
PyPIsvglib1.5.1непряма
PyPItabulate0.9.0непряма
PyPItestcontainersнепряма
PyPItestrail-api1.13.4непряма
PyPItextract-py32.1.1непряма
PyPItree-sitter0.20.2непряма
PyPItree-sitter-languages1.10.2непряма
PyPIunstructured0.16.23непряма
PyPIunstructured-inference0.8.7непряма
PyPIunstructured-pytesseract0.3.13непряма
PyPIwikipedia1.4.0непряма
PyPIyagmail0.15.293непряма
PyPIzephyr-python-api0.1.0непряма
Сповіщення про залежності 19

Цей репозиторій не публікує пакета, який розпізнає індекс, тож оцінено його власний граф залежностей — 91 пакетів, серед яких є й піниї розробки та тестування, що ніколи не постачаються: 19 мають відомі сповіщення, з них 0 прямі. 36 не вдалося оцінити — немає резолвленої версії, непідтримувана екосистема або поза наведеним переліком пакетів.

ПакетВерсіяЗв'язокКритичністьСповіщеньВиправлено в
gitpython3.1.43непрямакритична173.1.55
mammoth1.9.0непрямакритична21.11.0
unstructured0.16.23непрямакритична20.18.18
azure-core1.30.2непрямависока21.38.0
dulwich0.21.6непрямависока41.2.5
langchain-core1.2.7непрямависока81.3.3
langgraph1.0.7непрямависока21.0.10rc1
langgraph-checkpoint2.1.2непрямависока64.1.1
langgraph-checkpoint-sqlite2.0.11непрямависока23.0.1
lxml5.2.2непрямависока26.1.0
markdown3.5.1непрямависока23.8.1
pdfminer-six20240706непрямависока420251230
pypdf4.3.1непрямависока656.14.2
azure-identity1.16.0непрямапомірна24.61.3
langchain1.2.6непрямапомірна21.4.6
langchain-anthropic1.3.1непрямапомірна21.4.6
langchain-text-splitters1.1.0непрямапомірна21.1.2
paramiko3.3.1непрямапомірна43.4.0
langchain-openai1.1.7непряманизька21.1.14

Сповіщення означає, що версія, записана в графі залежностей, потрапляє в уражений діапазон. Досяжність не аналізується, а граф містить піниї розробки й тестування — знахідка може стосуватися інструментів, а не поставленого коду.

Звіт у форматі JSON машиночитний
{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 13321,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "Shell": 50232,
        "Groovy": 2747,
        "Python": 9505616,
        "TypeScript": 14277
      },
      "pushed_at": "2026-07-28T16:17:00Z",
      "created_at": "2026-04-09T08:45:46Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-28T16:19:17Z",
      "description": "SDK for EliteA",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": "Apache-2.0",
      "default_branch": "main",
      "license_spdx_raw": "Apache-2.0",
      "primary_language": "Python",
      "significant_languages": [
        "Python"
      ]
    },
    "owner": {
      "blog": "https://elitea.ai",
      "name": "ELITEA AI",
      "type": "Organization",
      "login": "EliteaAI",
      "company": null,
      "location": null,
      "followers": 8,
      "avatar_url": "https://avatars.githubusercontent.com/u/270877885?v=4",
      "created_at": "2026-03-25T07:36:47Z",
      "is_verified": null,
      "public_repos": 64,
      "account_age_days": 125
    },
    "license": {
      "state": "standard",
      "spdx_id": "Apache-2.0",
      "raw_spdx": "Apache-2.0",
      "file_present": true,
      "scorecard_found": true,
      "profile_has_license": true
    },
    "activity": {
      "releases": [],
      "recent_commits": [
        {
          "oid": "7f5cadb8ef1cfe1d9c3cf94d66018fe5b0e28e0a",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-28T16:16:59Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c004559b921bb40974e26b9ffeb9735f0e9fb933",
          "body": null,
          "is_bot": false,
          "headline": "fix: propagate sensitive tool autoapproval to subagents (#478)",
          "author_name": "Roman Mitusov",
          "author_login": "Roman-Mitusov",
          "committed_at": "2026-07-28T16:16:26Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5bd1c375b0a6cee547319ff6585b1c80b6b4c327",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-28T15:25:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9ff3f31b091a296a13d2661cfc58b7aa80dd4d55",
          "body": null,
          "is_bot": false,
          "headline": "fix: [EL-5925][EL-5927] route MCP authentication correctly (#477)",
          "author_name": "Roman Mitusov",
          "author_login": "Roman-Mitusov",
          "committed_at": "2026-07-28T15:24:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "09fc0aa9a373b358aea997e948b585280b53a6f3",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-28T13:42:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d8cc877627ce2796391c424b0cfe426a98126075",
          "body": "…(#471)\n\nLoaded skill bodies persist in conversation history, so the load_skill\nresponses now state the scope contract explicitly: outside the\nsituation the agent instructions or the current request scope a skill\nto, it is inactive regardless of \"always\"-style wording in its body,\nand it never appli\n[…]\nrecord of the skill.\n\nThe \"already loaded\" response gets a stable prefix and a shared regex,\nmirroring the existing serve marker, so consumers can recognize both\noutcomes without duplicating literals.",
          "is_bot": false,
          "headline": "feat(skills): scope loaded skills to their trigger situation (#5977) …",
          "author_name": "Daniyar Chambylov",
          "author_login": "daniyarchambylov",
          "committed_at": "2026-07-28T13:40:34Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "33c41b69d1fc5f9eba5aeecaf936b8b4eb56b588",
          "body": "… (#5994) (#476)\n\nThe UI marked Path as required for List Files and List Folders and blocked\nsubmission when it was empty, even though both tools treat it as optional and\nlist the repository root when it is omitted. Users had to pass \"/\" as a\nworkaround.\n\nThe models declared path and branch as Optio\n[…]\nunusable without a value the caller shouldn't need to\nsupply. Descriptions now state the omitted-value behaviour, since they are what\nthe model reads when deciding whether to pass the argument at all.",
          "is_bot": false,
          "headline": "fix(gitlab): make path and branch optional on list_files/list_folders…",
          "author_name": "Daniyar Chambylov",
          "author_login": "daniyarchambylov",
          "committed_at": "2026-07-28T11:33:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b689e5fe7eba7105865013323c0d5a0dac70fe32",
          "body": "…ption is not None (#5996) (#474)\n\nLoading any GitLab toolkit raised \"unsupported operand type(s) for +:\n'NoneType' and 'str'\" and the whole toolkit failed to instantiate — every\ntool disappeared, not just the offending one.\n\nextend_with_file_operations builds the read_multiple_files tool's descript\n[…]\nit has to\nstate the capped return contract — content, a content_too_large object, or a\nskip notice for a file never fetched — which the generic base docstring\n(\"content or error messages\") gets wrong.",
          "is_bot": false,
          "headline": "fix(gitlab): restore read_multiple_files docstring so its tool descri…",
          "author_name": "Daniyar Chambylov",
          "author_login": "daniyarchambylov",
          "committed_at": "2026-07-28T11:10:02Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "929c31c7e700c8a5e9dc63f538479d6d4973f971",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-28T10:39:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1be76d696db871c87fcaaa280aa1ae266921299b",
          "body": "build_line_range_metadata's multi-line branch never set read_limits, so\nget_file_metadata's True baseline went unchallenged and any multi-line file\nover the 200K-char output cap was reported as fully readable, contradicting\nwhat read_file itself does for the same file. The single-line branch already\n[…]\n DEFAULT_MAX_OUTPUT_CHARS. Added a\nregression test covering the multi-line-over-cap case, which previously had\nno test coverage.\n\nConnected issue: https://github.com/EliteaAI/elitea_issues/issues/5988",
          "is_bot": false,
          "headline": "Fix: multi-line files over cap wrongly report full_read_allowed=true",
          "author_name": "Mikhail Campos Guadamuz",
          "author_login": "plageat",
          "committed_at": "2026-07-28T10:26:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3a65be89da1884cd0f7462fbd769b92ba87daf21",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-27T17:55:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8b6fc4c19956079b7773152f1cd2d1bbadffed3d",
          "body": "…978) (#470)\n\n* fix(config): preserve configurable when minting a thread_id\n\nMinting a thread id replaced the whole configurable dict instead of setting\nthe key, discarding anything already placed there. Six lines earlier the same\nfunction stores selected_tools/selected_toolkits from dynamic tool se\n[…]\ns on its own version\ndetails, and the caller's are cleared rather than inherited. Public\napplications are fetched with the runtime payload variant so cross-project\nsub-agents resolve their skills too.",
          "is_bot": false,
          "headline": "feat(skills): give a sub-agent its own skills, never its caller's (#5…",
          "author_name": "Daniyar Chambylov",
          "author_login": "daniyarchambylov",
          "committed_at": "2026-07-27T17:51:50Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "b8cb6d1a1cd3ea92b8b0aabbb6f05d9cab7579c2",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-27T05:48:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b5d36faa7d6762f6d8bc0d5874f8f36b2713109e",
          "body": "…ved) (#469)\n\nThe OpenAPI toolkit handed query params to requests as a dict, which\nrequests encodes with quote_plus — spaces became '+'. Servers whose\nparsers require %20 and reject '+' (e.g. Planisware OData) returned\nHTTP 400 \"Nobody expected this character: '+'\". The toolkit also\nignored the spec\n[…]\now uses the same serializer so error messages match the\nreal request.\n\nAdds tests/tools/test_openapi_query_encoding.py (21 cases: unit\nserialization + full _execute integration + no-monkeypatch-leak).",
          "is_bot": false,
          "headline": "fix(openapi): serialize query params ourselves (%20, honor allowReser…",
          "author_name": "Roman Mitusov",
          "author_login": "Roman-Mitusov",
          "committed_at": "2026-07-27T05:47:29Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1cfedc3f523ff979044d9e0e466b8de03eacad84",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-25T12:41:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5e3f025e78b676b71f8b9a747970339301365e89",
          "body": "Opus 5 was missing from the _adaptive_only allowlist in AlitaClient's Anthropic\nLLM configuration, so predict requests fell through to the thinking.type=enabled\nbranch. Anthropic rejects that mode for this model family, returning a 400 with\n\"thinking.type.enabled is not supported for this model. Use\n[…]\npus 5 now gets\nthinking={type: adaptive, display: summarized} + effort, matching the existing\nOpus 4.7/4.8 and Sonnet 5 entries.\n\nConnected issue: https://github.com/EliteaAI/elitea_issues/issues/5983",
          "is_bot": false,
          "headline": "Fix: Opus 5 predict fails with thinking.type.enabled 400 error",
          "author_name": "Mikhail Campos Guadamuz",
          "author_login": "plageat",
          "committed_at": "2026-07-25T12:12:03Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "48c51a16634a9924f6c5d5313c3bacedb0b5b56b",
          "body": "fix(tests): unbreak failed image-loader + index_sharepoint test pipelines",
          "is_bot": false,
          "headline": "Merge pull request #465 from EliteaAI/fix/failed-test-pipelines",
          "author_name": "Aliaksei Breilian",
          "author_login": "breilian",
          "committed_at": "2026-07-24T20:50:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "792382c91d29a8566dbf1a8ee37988a2c7394ff3",
          "body": null,
          "is_bot": false,
          "headline": "fix(tests): [index_sharepoint] Fix 1 failing tests - ISP02",
          "author_name": "Aliaksei Breilian",
          "author_login": "breilian",
          "committed_at": "2026-07-24T20:40:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1fd9ac77acc5f906b9ae5541cfd6767c06a91bee",
          "body": "- Remove summarize_text_large code node, let LLM validate directly\n- Use output_fields: [\"metadata.Name\", \"metadata.chunk_id\"] for minimal payload\n- Update validation rules to work with raw search results\n- Simpler test with same coverage\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "refactor(test): simplify ISP02 by removing code node",
          "author_name": "Aliaksei Breilian",
          "author_login": "breilian",
          "committed_at": "2026-07-24T20:28:24Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a0a8199c23ebc801c5d13b73bed28e8cc580818a",
          "body": null,
          "is_bot": false,
          "headline": "fix(tests): [index_sharepoint] Fix 1 failing tests - ISP02",
          "author_name": "Aliaksei Breilian",
          "author_login": "breilian",
          "committed_at": "2026-07-24T20:03:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "23922a1057eaae246f9dcca6d02870aaca8a37c4",
          "body": "…tion\n\n- Change expected chunk count from 3 to 4 (text_large.txt has 860 tokens,\n  which produces 4 chunks at max_tokens=256)\n- Add output_fields: [\"metadata\"] to search_index to reduce payload size\n  and prevent context truncation when passing results to LLM validator\n- Change filter to JSON string\n[…]\n LLM validator, causing it to see only 3 of 4 chunks. By excluding\npage_content from the output, all chunk metadata fits within context limits.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(tests): [ISP02] correct chunk count and reduce payload for valida…",
          "author_name": "Aliaksei Breilian",
          "author_login": "breilian",
          "committed_at": "2026-07-24T19:53:43Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "7d634b1f5c966c9fe98fad2155f8c1d53dcd0bd7",
          "body": null,
          "is_bot": false,
          "headline": "fix(tests): [index_sharepoint] Fix 1 failing tests - ISP02",
          "author_name": "Aliaksei Breilian",
          "author_login": "breilian",
          "committed_at": "2026-07-24T19:12:16Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "6fdd05bfa79e025c8b95c06a7293ec2b6151d6ac",
          "body": "Search results are ranked by similarity score, not by chunk_id order.\nThe previous validation incorrectly required chunk_ids to be exactly\n(1, 2, 3), but search can return any 3 chunks from the text_large.txt\ndocument depending on query relevance.\n\nChange validation to only verify:\n- Exactly 3 chunks returned\n- All chunks belong to text_large.txt\n- Each chunk has a valid integer chunk_id\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(tests): [ISP02] relax chunk_id validation for search results",
          "author_name": "Aliaksei Breilian",
          "author_login": "breilian",
          "committed_at": "2026-07-24T19:03:11Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "28aa5f3f1a0fada7da3d383c9f59d23723624549",
          "body": null,
          "is_bot": false,
          "headline": "fix(tests): [index_sharepoint] Fix 1 failing tests - ISP02",
          "author_name": "Aliaksei Breilian",
          "author_login": "breilian",
          "committed_at": "2026-07-24T19:01:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a6eac3636808f308af00d1ee830e3dedcb3d1849",
          "body": "The SDK's text_chunker (introduced in commit 440b358) produces exactly\n3 chunks for text_large.txt at max_tokens=256, not 4 as the original\nmarkdown_chunker did.\n\nRoot cause: text_chunker uses TokenTextSplitter directly without the\nwhitespace normalization and small-chunk merging that markdown_chunk\n[…]\nt expectation to 3 to detect any future changes in\nthe chunker implementation rather than hiding them behind a flexible\n\"at least N\" assertion.\n\nCo-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(tests): [ISP02] expect exactly 3 chunks for text_large.txt",
          "author_name": "Aliaksei Breilian",
          "author_login": "breilian",
          "committed_at": "2026-07-24T18:51:11Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "464e04b4ab8443b3d5dc988b6d9ffadd45c6b935",
          "body": null,
          "is_bot": false,
          "headline": "fix(tests): [index_sharepoint] Fix 1 failing tests - ISP02",
          "author_name": "Aliaksei Breilian",
          "author_login": "breilian",
          "committed_at": "2026-07-24T13:54:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "9dbbfc9b8088c5f6381b81e4b15b7c593bc43286",
          "body": null,
          "is_bot": false,
          "headline": "fix(tests): [github] Fix 1 failing tests - GH08",
          "author_name": "Aliaksei Breilian",
          "author_login": "breilian",
          "committed_at": "2026-07-24T13:19:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "927d88352ce5db2148c2a7c30037eec7b3d8aed4",
          "body": null,
          "is_bot": false,
          "headline": "fix(tests): [gitlab] Fix 1 failing tests - GL05",
          "author_name": "Aliaksei Breilian",
          "author_login": "breilian",
          "committed_at": "2026-07-24T13:17:21Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3a24a7d85525115cdb2484a24d89743217542736",
          "body": "…not an SDK/platform issue\n\nContext for the two remaining postman failures we saw across the failed runs.\n\nPST18 \"execute request happy path\" reproduced locally against dev.elitea.ai\n=========================================================================\n\nCommand:\n  cd .elitea/tests/test_pipelines\n[…]\nvalidator prompt allows subjective judgement on folder-ID equality and\nthe LLM output non-determinism produced a false negative once. Not\ntracked here; will need a separate investigation if it recurs.",
          "is_bot": false,
          "headline": "docs: record PST18 local-against-DEV reproduction — httpbin.org 503, …",
          "author_name": "Aliaksandr Valadzko",
          "author_login": "aliaksandr-valadzko",
          "committed_at": "2026-07-24T12:52:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1eca30c58196b9b1f5586eca588a15700803ed18",
          "body": "Replaces the earlier _SKIP-only patch (ffd56a1) with the proper fix: the\ninput JSONs now pass max_tokens to the loader, and the module docstring\nrecords why this is a test defect — not an SDK defect — with the full\nhistory so a future reader doesn't chase the SDK.\n\nWhat was wrong (test side, not SDK\n[…]\neffective value was 512 and will not match the\n  loader's now-correct 2048/8192 chunking. Baseline regeneration needs\n  LLM credentials and is left as a follow-up.\n\nRefs: closed loader-side bug #4259.",
          "is_bot": false,
          "headline": "fix(tests): rename _max_tokens → max_tokens in EliteAImageLoader inputs",
          "author_name": "Aliaksandr Valadzko",
          "author_login": "aliaksandr-valadzko",
          "committed_at": "2026-07-24T12:30:43Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e28f140ae2d1b0da1662034b22ccad41ed08c4ab",
          "body": "…onfig fix\n\nFollow-up context for the sharepoint-index-config.json change in ffd56a1\n(list_collections → list_indexes).\n\nProof this is a stale test config, not a valid tool name:\n\n  Commit ac6420c (PR #442, squash-merged to main on 2026-07-21)\n    \"feat: [EL-5708] bump index_name max_length 7 -> 32 \n[…]\nthe config to \"list_indexes\" is the direct completion of the rename\nthat PR #442 started.\n\nNo behaviour change in the test — the tool still exists with the same\nsemantics, only under its current name.",
          "is_bot": false,
          "headline": "docs: link SDK rename commit that necessitated the sharepoint-index-c…",
          "author_name": "Aliaksandr Valadzko",
          "author_login": "aliaksandr-valadzko",
          "committed_at": "2026-07-24T12:24:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "ffd56a14c90266776a21103e5c988a30e96dba69",
          "body": "- Skip elitea_screenshot_jpeg config1 in image loader tests: same _max_tokens\n  prefix bug as several_in_one_png — the underscore-prefixed key is stripped\n  before reaching the loader, so max_tokens defaults to 512 and non-deterministic\n  LLM output length yields variable chunk counts vs the 2-chunk\n[…]\nh 'list_indexes' in sharepoint-index-config\n  selected_tools; the alias was removed from the base indexer toolkit, causing\n  toolkit creation to fail with HTTP 400 in the index_sharepoint suite setup.",
          "is_bot": false,
          "headline": "fix(tests): unblock EliteAImageLoader and index_sharepoint pipelines",
          "author_name": "Aliaksandr Valadzko",
          "author_login": "aliaksandr-valadzko",
          "committed_at": "2026-07-24T12:15:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "2bda0d32fc75badbc48c195432d2ad8e450eab85",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-24T07:48:52Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7a577cb7cdbdb5e06940664d7568794e2bf04239",
          "body": "Emit metadata.group (default \"Other\") from each mcp_servers entry so the UI can group MCP toolkits into sub-sections.",
          "is_bot": false,
          "headline": "feat: expose group metadata on MCP config toolkit schemas (#5942) (#455)",
          "author_name": "Daniyar Chambylov",
          "author_login": "daniyarchambylov",
          "committed_at": "2026-07-24T07:45:18Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "bf45c4ac71387c5c49fe143b8984a61900d1f561",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-23T17:06:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e00afb4a6afc7bcf8ff6557987535251d1a834a3",
          "body": "… (#460)\n\nMicrosoft's token endpoints return expires_in as a JSON string (\"3600\")\nrather than a number, so `time.time() + expires_in` raised\n\"unsupported operand type(s) for +: 'float' and 'str'\" and every OAuth2\nclient_credentials exchange failed after the secret-masking fix let the\nreal credential\n[…]\npires_in(): accepts int/float/numeric-string, preserves a\nvalid number exactly (float(3600) == 3600.0), and falls back to 1h for\nmissing / non-numeric / non-positive values. Wire it into _cache_token.",
          "is_bot": false,
          "headline": "fix(openapi): tolerate string expires_in in OAuth token cache (#5956)…",
          "author_name": "Roman Mitusov",
          "author_login": "Roman-Mitusov",
          "committed_at": "2026-07-23T17:02:10Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "57a418f30ba73142ff22b730806c74696d928171",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-23T14:26:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4e73e043849e4a25dbd41d85db535600cfce8c42",
          "body": "Fix #5844: per-toolkit LRU image description cache across all indexers",
          "is_bot": false,
          "headline": "Merge pull request #457 from EliteaAI/fix/5844-image-cache",
          "author_name": "MikalaiB",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-23T14:26:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5f922a282d4243f0bc82d40468401cb94270d4ab",
          "body": "Wire image_cache kwarg from BaseIndexerToolkit._chunk_one call sites in\nindex_data through process_document_by_type into process_content_by_type,\nso the per-toolkit LRU image description cache is populated during regular\nindexing runs (not only via get_page_with_image_descriptions).\n\nUses getattr fa\n[…]\ns that own one (e.g. Confluence) participate in caching.\n\nLive-verified with two Confluence pages sharing the same image: second\npage produced [img-cache HIT] on the shared md5, skipping the LLM call.",
          "is_bot": false,
          "headline": "Fix #5844: thread image_cache through index_data flow",
          "author_name": "mikalai_biazruchka",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-23T14:03:58Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "72a412187ee95eb46fddd822b05fa7bbc6f3928a",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-23T11:26:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b0f2080a9aab8ed6fdf5744efb1ad5890e6d30d7",
          "body": "… the security configurations via the indexer config for the deno (#458)",
          "is_bot": false,
          "headline": "feat: Fix the SecretStr unsecret in the OpenAPI configuration and add…",
          "author_name": "Roman Mitusov",
          "author_login": "Roman-Mitusov",
          "committed_at": "2026-07-23T11:25:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "21efbfdd1cb7edf0fa02f8b8d49106d2b7024724",
          "body": "…e_cache\n\n- Thread image_cache through parse_content_from_bytes → process_content_by_type\n  so SharePoint's binary download path (OneNote attachments) is no longer bypassed.\n- Apply prepare_loader-style signature filter to load_content (fallback path)\n  and process_content_by_type so future strict-s\n[…]\nrt\n  on cache.cache storage side (len == 0) instead of get() short-circuit — the\n  prior assertion would have passed even if set() were broken.\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Address PR #457 review round 2: wire remaining indexers + thread imag…",
          "author_name": "mikalai_biazruchka",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-23T11:06:37Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "9dac79b129ccacf2630fa3bfadfb8b5f31d321a1",
          "body": "… and add the security configurations via the indexer config for the deno\"\n\nThis reverts commit a6f262f4db90dae2f4b4197ac2e4bf0f12bcaef6.",
          "is_bot": false,
          "headline": "Revert \"feat: Fix the SecretStr unsecret in the OpenAPI configuration…",
          "author_name": "Roman-Mitusov",
          "author_login": "Roman-Mitusov",
          "committed_at": "2026-07-23T11:06:28Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ec5725816a5d440ba8657165fce579101582a335",
          "body": null,
          "is_bot": false,
          "headline": "Merge remote-tracking branch 'origin/main'",
          "author_name": "Roman-Mitusov",
          "author_login": "Roman-Mitusov",
          "committed_at": "2026-07-23T10:59:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a6f262f4db90dae2f4b4197ac2e4bf0f12bcaef6",
          "body": "… the security configurations via the indexer config for the deno",
          "is_bot": false,
          "headline": "feat: Fix the SecretStr unsecret in the OpenAPI configuration and add…",
          "author_name": "Roman-Mitusov",
          "author_login": "Roman-Mitusov",
          "committed_at": "2026-07-23T10:59:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3b456e1bf6e08628bfb5fd7f9f111d6e97117cde",
          "body": "- image_cache: cache key is md5(bytes) + md5(prompt) only; image_name is\n  logging context only. Enables cross-doc dedup for the same asset\n  (company logos on every page/slide, reused images across documents),\n  which is what #5844 was actually asking for.\n- PDF/PPT/DOCX loaders: pass bare source (\n[…]\nefault.\n- tests: rewrite test_image_name_is_part_of_key → NOT_part_of_key with\n  positive assertion; update docstring.\n\nAll 17 unit tests pass.\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Address PR #457 review: drop image_name from key, fix MIME, bump log",
          "author_name": "mikalai_biazruchka",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-23T10:10:30Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "d41367facaca5b58cf6db6a7ee108f7dc7f4eaa6",
          "body": "Consolidate LLM image-description caching so every indexer (ADO Wiki,\nADO Boards, Jira, Confluence, and the document-loader path used by\nSharePoint / GitLab / QTest / etc.) shares the same behaviour:\n\n- Move ImageDescriptionCache to runtime/langchain/document_loaders as the\n  canonical home; re-expo\n[…]\nthe cache (LRU, prompt-in-key, env-var-driven\nmax_size) and the shared helper (cache hit / miss / prompt-change /\nempty-description behaviour).\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Fix #5844: per-toolkit LRU image description cache across all indexers",
          "author_name": "mikalai_biazruchka",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-23T09:58:42Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "39483ac4094d56e28ae24f915bc7c1e7b7f031ae",
          "body": "…achments\n\nFix #5869: skip non-image ADO Wiki attachments in image processing",
          "is_bot": false,
          "headline": "Merge pull request #456 from EliteaAI/fix/5869-ado-wiki-non-image-att…",
          "author_name": "MikalaiB",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-23T09:29:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d9b4703dc677d364fee051de0cd2fdc66cfa9386",
          "body": "ADO Wiki inserts every attachment (PDF, DOCX, images alike) using\nimage-markdown syntax `![name](/.attachments/<guid>.<ext>)`.\n`_process_images` treated any such match as an image and routed\nnon-image files through the image-description pipeline. When\n`parse_file_content` returned a `ToolException` \n[…]\n tests covering the classification helper and the\n  `_process_images` behaviour for PDFs, images, mixed content, and\n  `ToolException` returns.\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Fix #5869: skip non-image ADO Wiki attachments in image processing",
          "author_name": "mikalai_biazruchka",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-23T09:20:42Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "7bd6dbb0669f4b0aa02009903686a62391c6a839",
          "body": "* Use system CA trust store for TLS (DLP / interception support)\n\nPython HTTP libraries (requests, urllib3, aiohttp, httpcore/httpx, the\nopenai/anthropic clients) verify TLS against the bundled certifi CA store\nand ignore the OS trust store. In corporate DLP / TLS-interception\nenvironments the proxy\n[…]\nn macOS/Windows and minimal Linux images need\nSSL_CERT_FILE) in the README.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.8 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Use system CA trust store for TLS (DLP / interception support) (#452)",
          "author_name": "Alexander Kharkevich",
          "author_login": "kharkevich",
          "committed_at": "2026-07-23T09:10:47Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a78d3654f99d8ff89ca7233f20a66d676e564f79",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-22T15:48:23Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a81f0ac369f544cd5c707ee94b205d43a8cccd1f",
          "body": "…diverged\n\nFix #5820: reindex non-code docs when dependent set diverges",
          "is_bot": false,
          "headline": "Merge pull request #451 from EliteaAI/fix/5820-attachment-dependents-…",
          "author_name": "MikalaiB",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-22T15:47:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "3395ca314724890b6cd0caf90ff3dc44779d1946",
          "body": "PR #451 switched the dependent_docs join separator from ',' to ';'\nin both the producer (_emit_document_with_deps) and the vector-store\nconsumers (VectorStoreAdapter). Update the two regression assertions\nthat still expected the old comma-joined string.\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Fix test: expect ';' separator for aggregated dependent_docs",
          "author_name": "mikalai_biazruchka",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-22T15:17:30Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "63fd471c67a5a19a83a1e2072e969f91bd1397e1",
          "body": "Move the attachment-list fetch into _base_loader for Confluence,\nTestRail, and SharePoint OneNote (Jira already had it in the JQL\nbatch) and store the raw list on document.metadata['_attachments_data'].\nBoth _dependents_diverged and _process_document now read from that\nmetadata slot, with a fallback\n[…]\nskip glob logic and drop the\nin-method 'import re as _re' (module-level re is already imported).\n\nAddresses review findings 1 and 2 on PR #451.\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "Refactor: share attachment fetch between diverge check and processing",
          "author_name": "mikalai_biazruchka",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-22T15:10:47Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a829e3eb336d4268db80e9f68d30949cefa82e19",
          "body": "Adds a _dependents_diverged template hook on NonCodeIndexerToolkit so\ncompare_fn can force reprocessing of a document whose updated_on is\nunchanged but whose emitted dependent set (attachments, images, etc.)\nhas diverged from the indexed copy — the previous behavior let\n_reduce_duplicates skip the p\n[…]\nTest (no dependents), Figma (deps track file mtime).\n\nKnown limitation: replacing an attachment's binary content under the\nsame ID is not detected — set membership stays identical. Tracked\nseparately.",
          "is_bot": false,
          "headline": "Fix #5820: reindex non-code docs when dependent set diverges",
          "author_name": "mikalai_biazruchka",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-22T14:52:53Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "1a8a0a864581dd0bf6ffa9edae718ab13c1ac4db",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-22T10:52:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7da1e2ff720681f91d098e2f765d418fe576650c",
          "body": "* feat: Add OpenAPI delegated auth support\n\n* fix: [EL-4864] Redact sensitive values from OpenAPI OAuth debug logs\n\n* fix: Remove sensitive data from debug log statements\nCodeQL flagged logger.debug calls that could leak OAuth endpoint URLs\nand configuration identifiers. Replace with generic success messages\nto satisfy clear-text logging security checks.\n\n---------\n\nCo-authored-by: utkarsh.mishra1504 <utkarsh.mishra@deiglobal.com>",
          "is_bot": false,
          "headline": "feat: Add OpenAPI delegated auth support (#106)",
          "author_name": "Utkarsh Mishra",
          "author_login": "umishra1504",
          "committed_at": "2026-07-22T10:51:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "18122a1121a502ffe66c1e7b59a71edecfef30fa",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-22T08:08:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "850d0d21118f78564c2c472cafad4d3d454eb565",
          "body": "…test run (#450)",
          "is_bot": false,
          "headline": "feat: Add upload attachments to test run and update status of latest …",
          "author_name": "Roman Mitusov",
          "author_login": "Roman-Mitusov",
          "committed_at": "2026-07-22T08:06:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1d35a0f38cd3c636cb405831600ed1edf1511093",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-22T07:29:48Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f441abe4d8684125d1b42ac6acd7175cfa6f1f21",
          "body": "openpyxl's read_only worksheet mode derives max_row/max_column exclusively from\nthe worksheet's <dimension> XML tag, with no fallback. Workbooks written via\nopenpyxl's write_only=True streaming mode never emit that tag, so every helper\nrelying on it (check_excel_read_limits, list_excel_sheets, _read\n[…]\n,\ncheck_excel_read_limits, and read_excel_rows against a write_only=True fixture\nthat reproduces the missing-dimension-tag case.\n\nConnected issue: https://github.com/EliteaAI/elitea_issues/issues/5890",
          "is_bot": false,
          "headline": "Fix: Excel bounded-read guard falls back when dimension tag is missing",
          "author_name": "Mikhail Campos Guadamuz",
          "author_login": "plageat",
          "committed_at": "2026-07-21T19:45:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "3d048486d71324628fd7152c3087b955574d4cb8",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-21T18:38:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ac6420cfc1bcbbd124582e54ddb760233fa9b14d",
          "body": "* feat: [EL-5708] bump index_name max_length 7 -> 32\n\nRaise the Pydantic max_length constraint on index_name fields across\nBaseIndexParams / BaseCodeIndexParams / RemoveIndexParams /\nBaseSearchParams / BaseStepbackSearchParams and the dynamic\nBaseIndexerToolkit index_params schema. index_name is sto\n[…]\nIntroduces\nINDEX_NAME_MAX_LENGTH constant to replace scattered 32 literals.\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>\n\n---------\n\nCo-authored-by: Claude Opus 4.7 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: [EL-5708] bump index_name max_length 7 -> 32 (#442)",
          "author_name": "MikalaiB",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-21T18:33:10Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "458b5b6af661e5374e75d91083668fd344277c15",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-21T15:05:39Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d44c798575e4346331176def2d47db0f371c83d2",
          "body": "feat: [EL-5907] Add Aha! project management toolkit integration",
          "is_bot": false,
          "headline": "Merge pull request #448 from EliteaAI/feat/EL-5907-aha-toolkit",
          "author_name": "MikalaiB",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-21T13:46:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "411b9a060d437b2e35ad01b4471147a5ce05d7e2",
          "body": "…record\n\nEach write test now creates a uniquely-named record (`elitea-sdk-e2e-<kind>-<uuid>`),\nreads it back via `read_records`, updates it, deletes it, and re-verifies\nthat the delete landed — with a `finally` block that best-effort deletes\nthe artifact even when the assertion path fails. This keep\n[…]\nupdate → delete). The other write types\nskip on 403 for `product owner` roles or fail cleanly when the .env\nrefs point at non-existent parents.\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "test: [EL-5907] add self-cleaning e2e lifecycle tests for Aha manage_…",
          "author_name": "mikalai_biazruchka",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-21T13:07:18Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "70a250504e5223909fe0b7f4c9b681f40a3d97c9",
          "body": "…Not Trigger Authentication (#446)\n\n* fix: [EL-5868] SharePoint Delegated Toolkit Index Functionality Does Not Trigger Authentication\n\n* refactor code according to review comments",
          "is_bot": false,
          "headline": "fix: [EL-5868] SharePoint Delegated Toolkit Index Functionality Does …",
          "author_name": "HawkQing1",
          "author_login": "HawkQing1",
          "committed_at": "2026-07-21T13:00:07Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "022fcdbac0e2e9594f2cff277324cf2d2ae74056",
          "body": "…tive/epic/page\n\n- Add `delete` action to `manage_record` (feature/requirement/idea/release/\n  initiative/epic/page) — hits `DELETE /{plural}/{record_id}` and returns a\n  consistent `{deleted, record_type, record_id}` shape.\n- Extend the create/update whitelist and dispatcher to cover release,\n  ini\n[…]\n operations flowing through a single dispatcher. GraphQL remains the\nread path for pages via `get_page` and `read_records(record_type='page')`.\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: [EL-5907] extend Aha manage_record with delete + release/initia…",
          "author_name": "mikalai_biazruchka",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-21T12:45:58Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "7f71fbcb1d70f89a55f9a7be6a852e2f188c7130",
          "body": null,
          "is_bot": false,
          "headline": "feat: add Aha! configuration import to initialization",
          "author_name": "mikalai_biazruchka",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-21T12:31:43Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a69e2a378475e76418d04e2a45399d02d2563f01",
          "body": "Adds a new Aha! toolkit exposing 19 read-side tools over REST v1 and\nGraphQL v2, per feature request #5907.\n\nToolkit surface (read-only in this iteration):\n  * REST reads: get_product, get_feature, get_requirement, get_release,\n    get_initiative, get_epic, get_idea, get_page (via GraphQL)\n  * REST \n[…]\n\n    scoped lists and 404 on /custom_fields (endpoint absent on some\n    tenants).\n\nRefs: https://github.com/EliteaAI/elitea_issues/issues/5907\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: [EL-5907] Add Aha! project management toolkit integration",
          "author_name": "mikalai_biazruchka",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-21T11:57:58Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "e2ca023ed63c6043417248567cc0d0f7cd8bc3b0",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-21T09:03:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "26981ac216f74201111ebd01c6493dd4a6b3c35a",
          "body": "Internal Elitea MCP servers authenticate with the caller's personal token.\nWhen a prebuilt server definition carries no Authorization header template to\nsubstitute into, dispatch previously sent no auth (silent 401) while discovery\nsucceeded, an asymmetric and confusing failure. Fall back to injecti\n[…]\nir existing header.\n\nAlso drop an Authorization header still holding an unresolved {placeholder} when\nthere is no token, so a user without a PAT gets a clean auth error instead of a\nliteral-token 401.",
          "is_bot": false,
          "headline": "fix(mcp): auth fallback for internal MCP dispatch (#5772) (#445)",
          "author_name": "Daniyar Chambylov",
          "author_login": "daniyarchambylov",
          "committed_at": "2026-07-21T08:41:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "95b731a145b88404842c47ad050b0530aa8619ee",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-20T15:10:53Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4aff7c0c25e0441379f4620c42cd5cdb8eca3d51",
          "body": "LangChain's default_tool_parser / langchain_anthropic's extract_tool_calls set a\ntool_call's id to None (never absent) when the raw provider payload lacks a\nusable id. Elitea's tool_call.get('id', '') pattern only guards an absent key,\nso the None flowed through into ToolMessage(tool_call_id=None), \n[…]\ntwo existing reproduction tests to assert correct\npost-fix behavior and added a new unit-test file covering the helper\ndirectly.\n\nConnected issue: https://github.com/EliteaAI/elitea_issues/issues/5750",
          "is_bot": false,
          "headline": "Fix: repair provider-supplied null tool_call_id (#5750)",
          "author_name": "Mikhail Campos Guadamuz",
          "author_login": "plageat",
          "committed_at": "2026-07-20T14:02:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "aae620939865ea18ae32980a99a2cfa919d6140d",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-17T09:26:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e778a43b10adc74df001e916fba20f633672b4df",
          "body": "…ia internal mcp tool call",
          "is_bot": false,
          "headline": "feat: [EL-5692] fixed post_configurations_configurations for github v…",
          "author_name": "daniilmotsnyi",
          "author_login": "daniilmotsniy",
          "committed_at": "2026-07-17T08:07:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "2cb85480260a92207f3b3d6d3a84149e10de7949",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-16T14:23:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "804273523f79e1fd8d1c391fff17d9033e111e69",
          "body": "…ilt-in delegated-OAuth toolkits through deferred proxies) (#391)\n\n* fix: [EL-5638] route built-in delegated-OAuth toolkits through smart-auth deferred proxies\n\nSharePoint (and other built-in toolkits that require browser OAuth) raised\nMcpAuthorizationRequired eagerly at tool-load time from the batc\n[…]\n pull request finding 'CodeQL / Clear-text logging of sensitive information'\n\nCo-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>\n\n---------",
          "is_bot": false,
          "headline": "fix: [EL-5638] SharePoint smart-auth \"Skip\" no longer loops (route bu…",
          "author_name": "Roman Mitusov",
          "author_login": "Roman-Mitusov",
          "committed_at": "2026-07-16T14:19:26Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "f8b244d17a0eb003b8aaa8fbc7a932a3040263ca",
          "body": "…#441)",
          "is_bot": false,
          "headline": "fix: the toolkit_type missing from mcp_authorization_required event (…",
          "author_name": "HawkQing1",
          "author_login": "HawkQing1",
          "committed_at": "2026-07-16T09:52:31Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "134d633e0b3e28b347f34fd8b1d17ad5c636755b",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-16T09:13:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "efaa1472faf3fb5be06e95d0bf4fa5fce112ada0",
          "body": "* feat: [EL-5695] refresh MCP configuration cache\n\n* perf: [EL-5695] reuse unchanged MCP toolkit schemas",
          "is_bot": false,
          "headline": "feat: [EL-5695] refresh MCP configuration cache (#440)",
          "author_name": "Roman Mitusov",
          "author_login": "Roman-Mitusov",
          "committed_at": "2026-07-16T09:12:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0c986294cbb1a6dec469a94eed40f72f5738ee4e",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-16T08:02:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "82339a79cb18869f1ae4ada483d0cb53b81a9c69",
          "body": "* feat: [#5778] nested (2-level) parallel HITL resume routing + ancestry chain\n\nSupport depth-3 agent nesting on the Track-1 (in-process gather) path: a root\nthat fans out to parallel container sub-agents, each of which itself fans out to\nparallel leaves, where HITL can pause leaves under multiple c\n[…]\nd, no regressions.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>\n\n* Fix nested parallel HITL resume\n\n* Bound persisted trace-step payloads\n\n* Harden nested HITL routing contracts\n\n---------",
          "is_bot": false,
          "headline": "feat: [EL-5778] support depth-3 nested parallel HITL (#439)",
          "author_name": "Roman Mitusov",
          "author_login": "Roman-Mitusov",
          "committed_at": "2026-07-16T08:01:41Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "554737eb67d576926fa51e81eb9c8343242e0376",
          "body": "perf(ado-indexer): opt-in cross-doc parallelism + updated_on inheritance",
          "is_bot": false,
          "headline": "Merge pull request #437 from EliteaAI/perf/ado-indexer-parallelism",
          "author_name": "MikalaiB",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-13T13:48:33Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ad276f3421d53625561f2da1f3a96ae775c7635a",
          "body": "Unbounded `workers` values on the ADO wiki and work-item indexers can\nsaturate the ADO REST quota (429s), the LLM rate limit (when\n`process_images=True`), and the pgvector connection pool. Values above\n~10 give diminishing throughput anyway because the outer ThreadPoolExecutor\ngates on downstream I/\n[…]\npy cover the\nconstant, runtime clamp + warning, within-cap pass-through, default\nserial behaviour, and the schema constraint for both wrappers.\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "perf(ado-indexer): cap workers at 10 (schema + runtime clamp)",
          "author_name": "mikalai_biazruchka",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-13T13:24:56Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "b5587236ef838476fbfea9bb01238ab17a5eef85",
          "body": "Adds a bounded per-invocation `workers` knob to ADO wiki + work-item indexers\nso callers can fan out per-base-doc pipelines (image LLM, attachment I/O,\nchunking) while keeping all state mutation and pgvector writes on the main\nthread. Nested-pool guard falls back to serial when called from an outer\n\n[…]\n semantics + regression surface (parent_id set,\ndependent_docs aggregation, yield order, empty-deps case, existing\n`dependent_docs` extension).\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "perf(ado-indexer): opt-in cross-doc parallelism + updated_on inheritance",
          "author_name": "mikalai_biazruchka",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-10T13:35:16Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "a220a66a625eddeaf4f4132694761eadd4289926",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-10T09:30:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "b0d57d9ba77307d08d8c26c25e26c1cbc3b2b738",
          "body": "When the parallel-handoff guard or orphan sanitizer trims AIMessage.tool_calls,\nthey must also prune matching tool_use blocks from .content. langchain_anthropic\nserializes from .content and re-emits any tool_use block whose id is absent from\n.tool_calls — leaving discarded calls orphaned, which cras\n[…]\nmetadata\npreservation, and end-to-end _format_messages invariant (no orphaned tool_use).\nAll 77 existing swarm suite tests pass.\n\nConnected issue: https://github.com/EliteaAI/elitea_issues/issues/5768",
          "is_bot": false,
          "headline": "Fix: Prevent orphaned tool_use blocks in swarm mode (issue #5768)",
          "author_name": "Mikhail Campos Guadamuz",
          "author_login": "plageat",
          "committed_at": "2026-07-10T09:29:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "505e0501af81551292b78a0e8ff37619b2fe405a",
          "body": "Review follow-up: the multi-sheet sampling path reopened and fully re-parsed the\nworkbook once per sheet (via read_excel_rows -> load_workbook), on top of the open\nalready done by list_excel_sheets. Because each open reparses the whole growing\nfile, guard cost scaled ~quadratically with sheet count \n[…]\nare\nunchanged (same _format_row formatting); only the number of opens drops from N+1\nto 1. Benchmark: 500 sheets 87.5s -> 0.60s.\n\nConnected issue: https://github.com/EliteaAI/elitea_issues/issues/5713",
          "is_bot": false,
          "headline": "Fix: make whole-workbook Excel guard O(1) in sheet count",
          "author_name": "Mikhail Campos Guadamuz",
          "author_login": "plageat",
          "committed_at": "2026-07-10T08:15:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c2c19098d9f9e6da1be8f724e537750784a983bd",
          "body": "The Excel pre-flight read-limit guard could be bypassed by many-sheet workbooks\nwhere no single sheet tripped the per-sheet row or text-budget thresholds but the\nworkbook total far exceeded the output cap.\n\nTwo defects: get_content() coerced start_row to 1 before calling the guard, so\nis_unbounded_r\n[…]\nrow-count rejection, small\nmulti-sheet full reads passing, named-sheet scoping isolation, and get_content()\nfull-read rejection.\n\nConnected issue: https://github.com/EliteaAI/elitea_issues/issues/5713",
          "is_bot": false,
          "headline": "Fix: Excel guard defeated by multi-sheet workbooks",
          "author_name": "Mikhail Campos Guadamuz",
          "author_login": "plageat",
          "committed_at": "2026-07-10T08:15:16Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "59cc1f79b8a8e17e2cf1559b1a858db8e10d1451",
          "body": "Fix: defer ADO wiki image LLM calls until after dedup",
          "is_bot": false,
          "headline": "Merge pull request #434 from EliteaAI/fix/ado-wiki-image-llm-cost",
          "author_name": "MikalaiB",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-10T07:33:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "824815941d57273b746674df2665f25dccbfeadf",
          "body": "_base_loader ran _process_images on every fetched page unconditionally,\nfiring one LLM call per referenced image on every run — even for pages\n_reduce_duplicates would discard because their raw content hadn't\nchanged. On a large wiki this meant paying for image descriptions\nalready stored from a pri\n[…]\ne_loader is unchanged, so dedup semantics are preserved.\n\nAlso add per-page / per-image / per-attachment debug logs so operators\ncan trace incremental progress without turning on request-body logging.",
          "is_bot": false,
          "headline": "Fix: defer ADO wiki image LLM calls until after dedup",
          "author_name": "mikalai_biazruchka",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-09T19:46:43Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "f543cf972e0af2ca1f4d400efe92799e066594d9",
          "body": null,
          "is_bot": true,
          "headline": "Increment version",
          "author_name": "github-actions[bot]",
          "author_login": "github-actions[bot]",
          "committed_at": "2026-07-09T16:29:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "07b68fd14b829ee7d44fb73c4353b3f7a09e939e",
          "body": "ArtifactWrapper.read_multiple_files previously read each file through its own\ncapped read_file, bounding each individual file at 200K chars but applying no\nshared budget across the batch — a request for N files could return up to\nN x 200K chars in one response.\n\nRoute it through the same capped_read\n[…]\nnd skips remaining files once the\nshared 200K budget is reached, closing the same failure class the epic was\ncreated to address.\n\nConnected issue: https://github.com/EliteaAI/elitea_issues/issues/5780",
          "is_bot": false,
          "headline": "Fix: cap read_multiple_files cumulative batch size in artifact toolkit",
          "author_name": "Mikhail Campos Guadamuz",
          "author_login": "plageat",
          "committed_at": "2026-07-09T16:22:06Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "6ef17e7113409b89602c64bbf9c0959e8a8baf52",
          "body": "feat(ado-wiki): index images and attachments in wiki pages",
          "is_bot": false,
          "headline": "Merge pull request #428 from EliteaAI/feature/ado-wiki-image-indexing",
          "author_name": "MikalaiB",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-09T16:06:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "fd9cf6eb3dfc5fa8527280578a956d436d5a9dc2",
          "body": "…-count\n\nfix(indexer): fix meta.indexed count for incremental re-index",
          "is_bot": false,
          "headline": "Merge pull request #422 from EliteaAI/fix/indexer-incremental-indexed…",
          "author_name": "MikalaiB",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-09T16:06:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4c4efa6a11e81ce0fd310aca41f4901203327d86",
          "body": "…debug\n\nfix(bitbucket): drop stray root-logger DEBUG basicConfig at module load",
          "is_bot": false,
          "headline": "Merge pull request #431 from EliteaAI/fix/bitbucket-drop-root-logger-…",
          "author_name": "MikalaiB",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-09T16:05:45Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cee117b6d67e3735b82d8bd7db9fedfe96f9e8ca",
          "body": "cloud_api_wrapper.py called logging.basicConfig(level=logging.DEBUG) as a\ntop-level statement. Because tools/__init__.py auto-imports the bitbucket\npackage at SDK import time, this ran on every process start and flipped\nthe root logger to DEBUG globally — activating httpx, openai, anthropic\nand boto\n[…]\nger = logging.getLogger(__name__) on the line above already gives this\nmodule a properly namespaced logger.\n\nNo behavioural change for callers.\n\nCo-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(bitbucket): drop stray root-logger DEBUG basicConfig at module load",
          "author_name": "mikalai_biazruchka",
          "author_login": "MikalaiB",
          "committed_at": "2026-07-09T16:05:06Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "53d75c707fd47d45ef03596770eb409b67364ae7",
          "body": "…t guidance\n\nThe SharePoint Excel over-limit path hand-rebuilt the metadata skeleton\n(total_rows/total_sheets/sheets/read_limits) from the estimate, silently\ndropping the richer diagnostics the shared build_excel_metadata_from_estimate\nalready computes (excel_max_request_rows, excel_full_read_max_by\n[…]\ntruction_for_readFile to reflect read_document's narrower surface\n(sheet_name only, no row range). Added a test assertion that the shared\ndiagnostics survive so the thin version can't silently return.",
          "is_bot": false,
          "headline": "Fix: Reuse build_excel_metadata_from_estimate in SharePoint over-limi…",
          "author_name": "Mikhail Campos Guadamuz",
          "author_login": "plageat",
          "committed_at": "2026-07-09T16:03:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "e520259dcf5047f4f647ebbc674cd5c401949487",
          "body": "Brings the SharePoint read_document tool onto the shared chunked-read\ncontract (Epic #5431, Phase 5), matching the six prior toolkits. The facade\nread_file() now supports bounded start_line/end_line reads, applies the\nuniversal 200K-char output cap, and returns a structured content_too_large\nguidanc\n[…]\n only sheet_name (the sole\nnarrowing lever read_document supports) and refusing plainly when a single\nsheet is still over limit.\n\nConnected issue: https://github.com/EliteaAI/elitea_issues/issues/5451",
          "is_bot": false,
          "headline": "Fix: Add read cap + structured guidance to SharePoint read_document",
          "author_name": "Mikhail Campos Guadamuz",
          "author_login": "plageat",
          "committed_at": "2026-07-09T16:03:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        }
      ],
      "releases_count": 0,
      "commits_last_year": 681,
      "latest_release_at": null,
      "latest_release_tag": null,
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 16,
      "days_since_latest_release": null,
      "mean_days_between_releases": null
    },
    "community": {
      "has_readme": true,
      "has_license": true,
      "has_description": true,
      "has_contributing": false,
      "health_percentage": 50,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "elitea_sdk",
          "exists": true,
          "license": "Apache-2.0",
          "keywords": [
            "Operating System :: OS Independent",
            "Programming Language :: Python :: 3"
          ],
          "ecosystem": "pypi",
          "matches_repo": true,
          "registry_url": "https://pypi.org/project/elitea_sdk/",
          "is_deprecated": false,
          "latest_version": "0.8.37",
          "repository_url": "https://github.com/EliteaAI/elitea-sdk/issues",
          "versions_count": 246,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": null,
          "monthly_downloads": 10526,
          "first_published_at": "2026-04-09T11:41:58.457564Z",
          "latest_published_at": "2026-07-28T16:17:39.607808Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 0
        }
      ]
    },
    "popularity": {
      "forks": 1,
      "stars": 1,
      "watchers": 0,
      "fork_history": {
        "days": [
          {
            "date": "2026-05-01",
            "count": 1
          }
        ],
        "complete": true,
        "collected": 1,
        "total_forks": 1
      },
      "star_history": null,
      "open_issues_and_prs": 109
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": true,
      "has_mcp_signal": true,
      "bootstrap_files": [],
      "api_schema_files": [
        "elitea_sdk/tools/github/schema.docs.graphql"
      ],
      "has_devcontainer": false,
      "typecheck_configs": [],
      "toolchain_manifests": [],
      "largest_source_bytes": 174204,
      "source_files_sampled": 686,
      "oversized_source_files": 32,
      "agent_instruction_files": [
        ".github/copilot-instructions.md",
        ".github/instructions/bug-reporting.instructions.md",
        ".github/instructions/test-coverage-structure.instructions.md"
      ],
      "agent_instruction_max_bytes": 13190
    },
    "dependencies": {
      "manifests": [
        "pyproject.toml",
        "setup.py"
      ],
      "advisories": {
        "error": null,
        "scope": "repository_graph",
        "source": "osv",
        "findings": [
          {
            "name": "gitpython",
            "direct": false,
            "version": "3.1.43",
            "severity": "critical",
            "ecosystem": "pypi",
            "cvss_score": 9.8,
            "advisory_ids": [
              "GHSA-2f96-g7mh-g2hx",
              "GHSA-3rp5-jjmw-4wv2",
              "GHSA-6p8h-3wgx-97gf",
              "GHSA-7545-fcxq-7j24",
              "GHSA-94p4-4cq8-9g67",
              "GHSA-956x-8gvw-wg5v",
              "GHSA-fjr4-x663-mwxc",
              "GHSA-mv93-w799-cj2w",
              "GHSA-r9mr-m37c-5fr3",
              "GHSA-rpm5-65cw-6hj4"
            ],
            "fixed_version": "3.1.55",
            "advisory_count": 17,
            "oldest_advisory_days": 93
          },
          {
            "name": "mammoth",
            "direct": false,
            "version": "1.9.0",
            "severity": "critical",
            "ecosystem": "pypi",
            "cvss_score": 9.3,
            "advisory_ids": [
              "GHSA-rmjr-87wv-gf87",
              "PYSEC-2026-1603"
            ],
            "fixed_version": "1.11.0",
            "advisory_count": 2,
            "oldest_advisory_days": 284
          },
          {
            "name": "unstructured",
            "direct": false,
            "version": "0.16.23",
            "severity": "critical",
            "ecosystem": "pypi",
            "cvss_score": 9.8,
            "advisory_ids": [
              "GHSA-gm8q-m8mv-jj5m",
              "PYSEC-2026-558"
            ],
            "fixed_version": "0.18.18",
            "advisory_count": 2,
            "oldest_advisory_days": 174
          },
          {
            "name": "azure-core",
            "direct": false,
            "version": "1.30.2",
            "severity": "high",
            "ecosystem": "pypi",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-jm66-cg57-jjv5",
              "PYSEC-2026-1208"
            ],
            "fixed_version": "1.38.0",
            "advisory_count": 2,
            "oldest_advisory_days": 195
          },
          {
            "name": "dulwich",
            "direct": false,
            "version": "0.21.6",
            "severity": "high",
            "ecosystem": "pypi",
            "cvss_score": 8.8,
            "advisory_ids": [
              "GHSA-897w-fcg9-f6xj",
              "GHSA-xrvj-v92f-53gj",
              "PYSEC-2026-2463",
              "PYSEC-2026-2466"
            ],
            "fixed_version": "1.2.5",
            "advisory_count": 4,
            "oldest_advisory_days": 60
          },
          {
            "name": "langchain-core",
            "direct": false,
            "version": "1.2.7",
            "severity": "high",
            "ecosystem": "pypi",
            "cvss_score": 8.2,
            "advisory_ids": [
              "GHSA-2g6r-c272-w58r",
              "GHSA-926x-3r5x-gfhw",
              "GHSA-pjwx-r37v-7724",
              "GHSA-qh6h-p6c9-ff54",
              "PYSEC-2026-2193",
              "PYSEC-2026-2562",
              "PYSEC-2026-2563",
              "PYSEC-2026-2564"
            ],
            "fixed_version": "1.3.3",
            "advisory_count": 8,
            "oldest_advisory_days": 167
          },
          {
            "name": "langgraph",
            "direct": false,
            "version": "1.0.7",
            "severity": "high",
            "ecosystem": "pypi",
            "cvss_score": 7.2,
            "advisory_ids": [
              "GHSA-g48c-2wqr-h844",
              "PYSEC-2026-83"
            ],
            "fixed_version": "1.0.10rc1",
            "advisory_count": 2,
            "oldest_advisory_days": 144
          },
          {
            "name": "langgraph-checkpoint",
            "direct": false,
            "version": "2.1.2",
            "severity": "high",
            "ecosystem": "pypi",
            "cvss_score": 8.1,
            "advisory_ids": [
              "GHSA-fjqc-hq36-qh5p",
              "GHSA-mhr3-j7m5-c7c9",
              "GHSA-wwqv-p2pp-99h5",
              "PYSEC-2026-1527",
              "PYSEC-2026-2573",
              "PYSEC-2026-2574"
            ],
            "fixed_version": "4.1.1",
            "advisory_count": 6,
            "oldest_advisory_days": 264
          },
          {
            "name": "langgraph-checkpoint-sqlite",
            "direct": false,
            "version": "2.0.11",
            "severity": "high",
            "ecosystem": "pypi",
            "cvss_score": 7.3,
            "advisory_ids": [
              "GHSA-9rwj-6rc7-p77c",
              "PYSEC-2026-1530"
            ],
            "fixed_version": "3.0.1",
            "advisory_count": 2,
            "oldest_advisory_days": 230
          },
          {
            "name": "lxml",
            "direct": false,
            "version": "5.2.2",
            "severity": "high",
            "ecosystem": "pypi",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-vfmq-68hx-4jfw",
              "PYSEC-2026-87"
            ],
            "fixed_version": "6.1.0",
            "advisory_count": 2,
            "oldest_advisory_days": 97
          },
          {
            "name": "markdown",
            "direct": false,
            "version": "3.5.1",
            "severity": "high",
            "ecosystem": "pypi",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-5wmx-573v-2qwq",
              "PYSEC-2026-89"
            ],
            "fixed_version": "3.8.1",
            "advisory_count": 2,
            "oldest_advisory_days": 145
          },
          {
            "name": "pdfminer-six",
            "direct": false,
            "version": "20240706",
            "severity": "high",
            "ecosystem": "pypi",
            "cvss_score": 8.6,
            "advisory_ids": [
              "GHSA-f83h-ghpp-7wcc",
              "GHSA-wf5f-4jwr-ppcp",
              "PYSEC-2026-1761",
              "PYSEC-2026-1762"
            ],
            "fixed_version": "20251230",
            "advisory_count": 4,
            "oldest_advisory_days": 262
          },
          {
            "name": "pypdf",
            "direct": false,
            "version": "4.3.1",
            "severity": "high",
            "ecosystem": "pypi",
            "cvss_score": 7.5,
            "advisory_ids": [
              "GHSA-248m-82v9-q6g6",
              "GHSA-2q4j-m29v-hq73",
              "GHSA-2rw7-x74f-jg35",
              "GHSA-3crg-w4f6-42mx",
              "GHSA-4f6g-68pf-7vhv",
              "GHSA-4pxv-j86v-mhcw",
              "GHSA-4xc4-762w-m6cg",
              "GHSA-52x6-gq3r-vpf4",
              "GHSA-55h5-xmcq-c37v",
              "GHSA-5hgr-hg42-57jg"
            ],
            "fixed_version": "6.14.2",
            "advisory_count": 65,
            "oldest_advisory_days": 348
          },
          {
            "name": "azure-identity",
            "direct": false,
            "version": "1.16.0",
            "severity": "moderate",
            "ecosystem": "pypi",
            "cvss_score": 5.5,
            "advisory_ids": [
              "GHSA-m5vv-6r4h-3vj9",
              "PYSEC-2026-1209"
            ],
            "fixed_version": "4.61.3",
            "advisory_count": 2,
            "oldest_advisory_days": 776
          },
          {
            "name": "langchain",
            "direct": false,
            "version": "1.2.6",
            "severity": "moderate",
            "ecosystem": "pypi",
            "cvss_score": 5.5,
            "advisory_ids": [
              "GHSA-gr75-jv2w-4656",
              "PYSEC-2026-2192"
            ],
            "fixed_version": "1.4.6",
            "advisory_count": 2,
            "oldest_advisory_days": 42
          },
          {
            "name": "langchain-anthropic",
            "direct": false,
            "version": "1.3.1",
            "severity": "moderate",
            "ecosystem": "pypi",
            "cvss_score": 5.1,
            "advisory_ids": [
              "GHSA-gr75-jv2w-4656",
              "PYSEC-2026-2556"
            ],
            "fixed_version": "1.4.6",
            "advisory_count": 2,
            "oldest_advisory_days": 42
          },
          {
            "name": "langchain-text-splitters",
            "direct": false,
            "version": "1.1.0",
            "severity": "moderate",
            "ecosystem": "pypi",
            "cvss_score": 6.5,
            "advisory_ids": [
              "GHSA-fv5p-p927-qmxr",
              "PYSEC-2026-77"
            ],
            "fixed_version": "1.1.2",
            "advisory_count": 2,
            "oldest_advisory_days": 102
          },
          {
            "name": "paramiko",
            "direct": false,
            "version": "3.3.1",
            "severity": "moderate",
            "ecosystem": "pypi",
            "cvss_score": 5.9,
            "advisory_ids": [
              "GHSA-45x7-px36-x8w8",
              "GHSA-r374-rxx8-8654",
              "PYSEC-2026-1758",
              "PYSEC-2026-2858"
            ],
            "fixed_version": "3.4.0",
            "advisory_count": 4,
            "oldest_advisory_days": 952
          },
          {
            "name": "langchain-openai",
            "direct": false,
            "version": "1.1.7",
            "severity": "low",
            "ecosystem": "pypi",
            "cvss_score": 3.1,
            "advisory_ids": [
              "GHSA-r7w7-9xr2-qq2r",
              "PYSEC-2026-76"
            ],
            "fixed_version": "1.1.14",
            "advisory_count": 2,
            "oldest_advisory_days": 102
          }
        ],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {
          "low": 1,
          "high": 10,
          "critical": 3,
          "moderate": 5
        },
        "advisory_count": 132,
        "affected_count": 19,
        "assessed_count": 91,
        "malicious_count": 0,
        "assessed_package": null,
        "unassessed_count": 36,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "pypi"
      ],
      "dependencies": [
        {
          "name": "sqlalchemy",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": "<2.0.36"
        },
        {
          "name": "tiktoken",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=0.7.0"
        },
        {
          "name": "openai",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=1.55.0"
        },
        {
          "name": "python-dotenv",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": "~=1.0.1"
        },
        {
          "name": "jinja2",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": "~=3.1.3"
        },
        {
          "name": "pillow",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": "~=11.1.0"
        },
        {
          "name": "requests",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": "~=2.3"
        },
        {
          "name": "pydantic",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": "~=2.12.0"
        },
        {
          "name": "chardet",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": "==5.2.0"
        },
        {
          "name": "fastapi",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": "==0.115.9"
        },
        {
          "name": "httpcore",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": "==1.0.7"
        },
        {
          "name": "urllib3",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=2"
        },
        {
          "name": "certifi",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": "==2024.8.30"
        },
        {
          "name": "truststore",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=0.10.4"
        },
        {
          "name": "aiohttp",
          "manifest": "pyproject.toml",
          "ecosystem": "pypi",
          "version_constraint": ">=3.9.0"
        }
      ],
      "all_dependencies": {
        "error": null,
        "source": "github-sbom",
        "packages": [
          {
            "name": "aiohttp",
            "direct": true,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "certifi",
            "direct": true,
            "version": "2024.8.30",
            "ecosystem": "pypi"
          },
          {
            "name": "chardet",
            "direct": true,
            "version": "5.2.0",
            "ecosystem": "pypi"
          },
          {
            "name": "fastapi",
            "direct": true,
            "version": "0.115.9",
            "ecosystem": "pypi"
          },
          {
            "name": "httpcore",
            "direct": true,
            "version": "1.0.7",
            "ecosystem": "pypi"
          },
          {
            "name": "jinja2",
            "direct": true,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "openai",
            "direct": true,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "pillow",
            "direct": true,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "pydantic",
            "direct": true,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "python-dotenv",
            "direct": true,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "requests",
            "direct": true,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "sqlalchemy",
            "direct": true,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "tiktoken",
            "direct": true,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "truststore",
            "direct": true,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "urllib3",
            "direct": true,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "anthropic",
            "direct": false,
            "version": "0.76.0",
            "ecosystem": "pypi"
          },
          {
            "name": "astor",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "atlassian-python-api",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "azure-core",
            "direct": false,
            "version": "1.30.2",
            "ecosystem": "pypi"
          },
          {
            "name": "azure-devops",
            "direct": false,
            "version": "7.1.0b4",
            "ecosystem": "pypi"
          },
          {
            "name": "azure-identity",
            "direct": false,
            "version": "1.16.0",
            "ecosystem": "pypi"
          },
          {
            "name": "azure-keyvault-keys",
            "direct": false,
            "version": "4.9.0",
            "ecosystem": "pypi"
          },
          {
            "name": "azure-keyvault-secrets",
            "direct": false,
            "version": "4.8.0",
            "ecosystem": "pypi"
          },
          {
            "name": "azure-mgmt-core",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "pypi"
          },
          {
            "name": "azure-mgmt-resource",
            "direct": false,
            "version": "23.0.1",
            "ecosystem": "pypi"
          },
          {
            "name": "azure-mgmt-storage",
            "direct": false,
            "version": "21.1.0",
            "ecosystem": "pypi"
          },
          {
            "name": "azure-search-documents",
            "direct": false,
            "version": "11.5.2",
            "ecosystem": "pypi"
          },
          {
            "name": "azure-storage-blob",
            "direct": false,
            "version": "12.23.1",
            "ecosystem": "pypi"
          },
          {
            "name": "beautifulsoup4",
            "direct": false,
            "version": "4.12.2",
            "ecosystem": "pypi"
          },
          {
            "name": "boto3",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "cairocffi",
            "direct": false,
            "version": "1.7.1",
            "ecosystem": "pypi"
          },
          {
            "name": "charset-normalizer",
            "direct": false,
            "version": "3.3.2",
            "ecosystem": "pypi"
          },
          {
            "name": "chromadb",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "click",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "deepeval",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "deltalake",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "pypi"
          },
          {
            "name": "duckduckgo-search",
            "direct": false,
            "version": "5.3.0",
            "ecosystem": "pypi"
          },
          {
            "name": "dulwich",
            "direct": false,
            "version": "0.21.6",
            "ecosystem": "pypi"
          },
          {
            "name": "elitea-analyse",
            "direct": false,
            "version": "0.1.2",
            "ecosystem": "pypi"
          },
          {
            "name": "factor-analyzer",
            "direct": false,
            "version": "0.5.1",
            "ecosystem": "pypi"
          },
          {
            "name": "figmapy",
            "direct": false,
            "version": "2018.1.0",
            "ecosystem": "pypi"
          },
          {
            "name": "formulas",
            "direct": false,
            "version": "1.3.3",
            "ecosystem": "pypi"
          },
          {
            "name": "gensim",
            "direct": false,
            "version": "4.3.3",
            "ecosystem": "pypi"
          },
          {
            "name": "gitpython",
            "direct": false,
            "version": "3.1.43",
            "ecosystem": "pypi"
          },
          {
            "name": "google-api-python-client",
            "direct": false,
            "version": "2.154.0",
            "ecosystem": "pypi"
          },
          {
            "name": "google-cloud-bigquery",
            "direct": false,
            "version": "3.34.0",
            "ecosystem": "pypi"
          },
          {
            "name": "googlemaps",
            "direct": false,
            "version": "4.10.0",
            "ecosystem": "pypi"
          },
          {
            "name": "grpcio-status",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "htmldocx",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "jira",
            "direct": false,
            "version": "3.8.0",
            "ecosystem": "pypi"
          },
          {
            "name": "keybert",
            "direct": false,
            "version": "0.8.3",
            "ecosystem": "pypi"
          },
          {
            "name": "langchain",
            "direct": false,
            "version": "1.2.6",
            "ecosystem": "pypi"
          },
          {
            "name": "langchain-anthropic",
            "direct": false,
            "version": "1.3.1",
            "ecosystem": "pypi"
          },
          {
            "name": "langchain-chroma",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "langchain-community",
            "direct": false,
            "version": "0.4.1",
            "ecosystem": "pypi"
          },
          {
            "name": "langchain-core",
            "direct": false,
            "version": "1.2.7",
            "ecosystem": "pypi"
          },
          {
            "name": "langchain-mcp-adapters",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "langchain-openai",
            "direct": false,
            "version": "1.1.7",
            "ecosystem": "pypi"
          },
          {
            "name": "langchain-postgres",
            "direct": false,
            "version": "0.0.16",
            "ecosystem": "pypi"
          },
          {
            "name": "langchain-text-splitters",
            "direct": false,
            "version": "1.1.0",
            "ecosystem": "pypi"
          },
          {
            "name": "langchain-unstructured",
            "direct": false,
            "version": "1.0.0",
            "ecosystem": "pypi"
          },
          {
            "name": "langgraph",
            "direct": false,
            "version": "1.0.7",
            "ecosystem": "pypi"
          },
          {
            "name": "langgraph-checkpoint",
            "direct": false,
            "version": "2.1.2",
            "ecosystem": "pypi"
          },
          {
            "name": "langgraph-checkpoint-postgres",
            "direct": false,
            "version": "2.0.21",
            "ecosystem": "pypi"
          },
          {
            "name": "langgraph-checkpoint-sqlite",
            "direct": false,
            "version": "2.0.11",
            "ecosystem": "pypi"
          },
          {
            "name": "langgraph-prebuilt",
            "direct": false,
            "version": "1.0.7",
            "ecosystem": "pypi"
          },
          {
            "name": "langgraph-swarm",
            "direct": false,
            "version": "0.1.0",
            "ecosystem": "pypi"
          },
          {
            "name": "langsmith",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "lxml",
            "direct": false,
            "version": "5.2.2",
            "ecosystem": "pypi"
          },
          {
            "name": "mammoth",
            "direct": false,
            "version": "1.9.0",
            "ecosystem": "pypi"
          },
          {
            "name": "markdown",
            "direct": false,
            "version": "3.5.1",
            "ecosystem": "pypi"
          },
          {
            "name": "markdownify",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "msrest",
            "direct": false,
            "version": "0.7.1",
            "ecosystem": "pypi"
          },
          {
            "name": "networkx",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "office365-rest-python-client",
            "direct": false,
            "version": "2.5.14",
            "ecosystem": "pypi"
          },
          {
            "name": "opencv-python",
            "direct": false,
            "version": "4.11.0.86",
            "ecosystem": "pypi"
          },
          {
            "name": "openpyxl",
            "direct": false,
            "version": "3.1.5",
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-api",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-exporter-otlp-proto-grpc",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "opentelemetry-instrumentation",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "pandas",
            "direct": false,
            "version": "2.2.3",
            "ecosystem": "pypi"
          },
          {
            "name": "paramiko",
            "direct": false,
            "version": "3.3.1",
            "ecosystem": "pypi"
          },
          {
            "name": "pdf2image",
            "direct": false,
            "version": "1.16.3",
            "ecosystem": "pypi"
          },
          {
            "name": "pdfminer-six",
            "direct": false,
            "version": "20240706",
            "ecosystem": "pypi"
          },
          {
            "name": "pgvector",
            "direct": false,
            "version": "0.2.5",
            "ecosystem": "pypi"
          },
          {
            "name": "playwright",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "protobuf",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "psycopg2-binary",
            "direct": false,
            "version": "2.9.10",
            "ecosystem": "pypi"
          },
          {
            "name": "pygithub",
            "direct": false,
            "version": "2.3.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pymupdf",
            "direct": false,
            "version": "1.24.9",
            "ecosystem": "pypi"
          },
          {
            "name": "pymysql",
            "direct": false,
            "version": "1.1.1",
            "ecosystem": "pypi"
          },
          {
            "name": "pypdf",
            "direct": false,
            "version": "4.3.1",
            "ecosystem": "pypi"
          },
          {
            "name": "pypdf2",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "pyral",
            "direct": false,
            "version": "1.6.0",
            "ecosystem": "pypi"
          },
          {
            "name": "pysnc",
            "direct": false,
            "version": "1.1.10",
            "ecosystem": "pypi"
          },
          {
            "name": "pytest-reportportal",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "python-calamine",
            "direct": false,
            "version": "0.5.3",
            "ecosystem": "pypi"
          },
          {
            "name": "python-docx",
            "direct": false,
            "version": "1.1.2",
            "ecosystem": "pypi"
          },
          {
            "name": "python-gitlab",
            "direct": false,
            "version": "4.5.0",
            "ecosystem": "pypi"
          },
          {
            "name": "python-graphql-client",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "python-pptx",
            "direct": false,
            "version": "1.0.2",
            "ecosystem": "pypi"
          },
          {
            "name": "pyyaml",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "qtest-swagger-client",
            "direct": false,
            "version": "0.0.3",
            "ecosystem": "pypi"
          },
          {
            "name": "reportlab",
            "direct": false,
            "version": "4.2.5",
            "ecosystem": "pypi"
          },
          {
            "name": "requests-openapi",
            "direct": false,
            "version": "1.0.5",
            "ecosystem": "pypi"
          },
          {
            "name": "retry-extended",
            "direct": false,
            "version": "0.2.3",
            "ecosystem": "pypi"
          },
          {
            "name": "rich",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "rlpycairo",
            "direct": false,
            "version": "0.3.0",
            "ecosystem": "pypi"
          },
          {
            "name": "scipy",
            "direct": false,
            "version": "1.13.1",
            "ecosystem": "pypi"
          },
          {
            "name": "sentence-transformers",
            "direct": false,
            "version": "2.7.0",
            "ecosystem": "pypi"
          },
          {
            "name": "setuptools",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "slack-sdk",
            "direct": false,
            "version": "3.35.0",
            "ecosystem": "pypi"
          },
          {
            "name": "statsmodels",
            "direct": false,
            "version": "0.14.4",
            "ecosystem": "pypi"
          },
          {
            "name": "streamlit",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "svglib",
            "direct": false,
            "version": "1.5.1",
            "ecosystem": "pypi"
          },
          {
            "name": "tabulate",
            "direct": false,
            "version": "0.9.0",
            "ecosystem": "pypi"
          },
          {
            "name": "testcontainers",
            "direct": false,
            "version": null,
            "ecosystem": "pypi"
          },
          {
            "name": "testrail-api",
            "direct": false,
            "version": "1.13.4",
            "ecosystem": "pypi"
          },
          {
            "name": "textract-py3",
            "direct": false,
            "version": "2.1.1",
            "ecosystem": "pypi"
          },
          {
            "name": "tree-sitter",
            "direct": false,
            "version": "0.20.2",
            "ecosystem": "pypi"
          },
          {
            "name": "tree-sitter-languages",
            "direct": false,
            "version": "1.10.2",
            "ecosystem": "pypi"
          },
          {
            "name": "unstructured",
            "direct": false,
            "version": "0.16.23",
            "ecosystem": "pypi"
          },
          {
            "name": "unstructured-inference",
            "direct": false,
            "version": "0.8.7",
            "ecosystem": "pypi"
          },
          {
            "name": "unstructured-pytesseract",
            "direct": false,
            "version": "0.3.13",
            "ecosystem": "pypi"
          },
          {
            "name": "wikipedia",
            "direct": false,
            "version": "1.4.0",
            "ecosystem": "pypi"
          },
          {
            "name": "yagmail",
            "direct": false,
            "version": "0.15.293",
            "ecosystem": "pypi"
          },
          {
            "name": "zephyr-python-api",
            "direct": false,
            "version": "0.1.0",
            "ecosystem": "pypi"
          }
        ],
        "collected": true,
        "truncated": false,
        "total_count": 127,
        "direct_count": 15,
        "indirect_count": 112
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 2,
        "merged_prs": 349,
        "open_issues": 107,
        "closed_ratio": 0.045,
        "closed_issues": 5,
        "closed_unmerged_prs": 15
      },
      "bus_factor": 3,
      "bot_contributors": 1,
      "top_contributors": [
        {
          "type": "User",
          "login": "MikalaiB",
          "commits": 151,
          "avatar_url": "https://avatars.githubusercontent.com/u/58071282?v=4"
        },
        {
          "type": "User",
          "login": "breilian",
          "commits": 98,
          "avatar_url": "https://avatars.githubusercontent.com/u/4901112?v=4"
        },
        {
          "type": "User",
          "login": "plageat",
          "commits": 96,
          "avatar_url": "https://avatars.githubusercontent.com/u/2870966?v=4"
        },
        {
          "type": "User",
          "login": "Roman-Mitusov",
          "commits": 59,
          "avatar_url": "https://avatars.githubusercontent.com/u/74918387?v=4"
        },
        {
          "type": "User",
          "login": "daniyarchambylov",
          "commits": 39,
          "avatar_url": "https://avatars.githubusercontent.com/u/7006388?v=4"
        },
        {
          "type": "User",
          "login": "HawkQing1",
          "commits": 27,
          "avatar_url": "https://avatars.githubusercontent.com/u/149657285?v=4"
        },
        {
          "type": "User",
          "login": "daniilmotsniy",
          "commits": 12,
          "avatar_url": "https://avatars.githubusercontent.com/u/20089762?v=4"
        },
        {
          "type": "User",
          "login": "eln1nxl",
          "commits": 11,
          "avatar_url": "https://avatars.githubusercontent.com/u/117268645?v=4"
        },
        {
          "type": "User",
          "login": "umishra1504",
          "commits": 5,
          "avatar_url": "https://avatars.githubusercontent.com/u/175803473?v=4"
        },
        {
          "type": "User",
          "login": "LifeDJIK",
          "commits": 4,
          "avatar_url": "https://avatars.githubusercontent.com/u/3430492?v=4"
        }
      ],
      "contributors_sampled": 17,
      "top_contributor_share": 0.292
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "docker-build-push.yml",
        "execute-indexing-tests-on-demand.yml",
        "execute-tests-on-pr.yml",
        "execute-toolkit-tests-on-demand.yml",
        "pypi.yml",
        "test-artifacts-cleanup.yml",
        "test-runner-reusable.yml",
        "update-sdk-plugin.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 0,
            "reason": "branch protection not enabled on development/release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "10 out of 10 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 1/17 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 10,
            "reason": "project has 3 contributing companies or organizations -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 0,
            "reason": "dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 10,
            "reason": "license file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 10,
            "reason": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 0,
            "reason": "dependency not pinned by hash detected -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 10,
            "reason": "SAST tool is run on all commits",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 0,
            "reason": "security policy file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 10,
            "reason": "0 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "7f5cadb8ef1cfe1d9c3cf94d66018fe5b0e28e0a",
        "ran_at": "2026-07-28T16:19:55Z",
        "aggregate_score": 4.1,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": false,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": "2026-07-28T16:18:05Z",
      "oldest_open_prs": [
        {
          "number": 174,
          "created_at": "2026-05-20T16:36:27Z",
          "last_comment_at": "2026-05-20T16:39:33Z",
          "last_comment_author": "github-actions"
        },
        {
          "number": 475,
          "created_at": "2026-07-28T11:09:41Z",
          "last_comment_at": "2026-07-28T13:21:24Z",
          "last_comment_author": "aliaksandr-valadzko"
        }
      ],
      "last_merged_pr_at": "2026-07-28T16:16:27Z",
      "ci_last_conclusion": "SUCCESS",
      "oldest_open_issues": [
        {
          "number": 68,
          "created_at": "2026-04-27T10:03:18Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 72,
          "created_at": "2026-04-27T12:48:28Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 73,
          "created_at": "2026-04-27T13:00:32Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 75,
          "created_at": "2026-04-27T15:11:56Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 78,
          "created_at": "2026-04-28T09:15:58Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 99,
          "created_at": "2026-05-04T12:44:32Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 100,
          "created_at": "2026-05-04T13:08:29Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 101,
          "created_at": "2026-05-04T15:43:02Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 103,
          "created_at": "2026-05-05T11:34:57Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 107,
          "created_at": "2026-05-06T14:22:59Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 108,
          "created_at": "2026-05-06T14:29:06Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 109,
          "created_at": "2026-05-06T14:29:44Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 110,
          "created_at": "2026-05-07T06:53:21Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 111,
          "created_at": "2026-05-07T07:01:47Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 112,
          "created_at": "2026-05-07T07:53:06Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 120,
          "created_at": "2026-05-11T17:28:15Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 124,
          "created_at": "2026-05-12T09:07:16Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 125,
          "created_at": "2026-05-12T09:46:53Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 126,
          "created_at": "2026-05-12T10:05:37Z",
          "last_comment_at": null,
          "last_comment_author": null
        },
        {
          "number": 127,
          "created_at": "2026-05-12T10:47:39Z",
          "last_comment_at": null,
          "last_comment_author": null
        }
      ]
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/EliteaAI/elitea-sdk",
    "host": "github.com",
    "name": "elitea-sdk",
    "owner": "EliteaAI"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 54,
      "inputs": {
        "security": 53,
        "vitality": 45,
        "community": 35,
        "governance": 65,
        "engineering": 71
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "at_risk",
        "name": "Vitality",
        "value": 45,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "good",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "commits_last_year": 681,
              "human_commit_share": 0.75,
              "days_since_last_push": 0,
              "active_weeks_last_year": 16
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "16/52 weeks with commits",
                "points": 11.1,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 16
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "681 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 681
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "critical",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 1,
            "inputs": {
              "releases_count": 0
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "no releases published",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_releases_published",
                    "params": {}
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "no releases",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_releases",
                    "params": {}
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "no releases",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_releases",
                    "params": {}
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 35,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 1,
              "stars": 1,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "1 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "1 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "moderate",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 50,
            "inputs": {
              "has_readme": true,
              "has_license": true,
              "has_contributing": false,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "recognized license (Apache-2.0)",
                "points": 22.5,
                "status": "met",
                "details": [
                  {
                    "code": "license_standard",
                    "params": {}
                  },
                  {
                    "code": "license_spdx",
                    "params": {
                      "spdx": "Apache-2.0"
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 67,
            "inputs": {
              "packages": [
                "elitea_sdk"
              ],
              "dependents": null,
              "ecosystems": "pypi",
              "total_downloads": null,
              "monthly_downloads": 10526
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "10,526 downloads/month across pypi",
                "points": 53.6,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 10526,
                      "ecosystems": "pypi"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 65,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "good",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "bus_factor": 3,
              "contributors_sampled": 17,
              "top_contributor_share": 0.292
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "3 contributor(s) cover half of all commits",
                "points": 36,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 3
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 29% of commits",
                "points": 15.9,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 29
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "17 contributors",
                "points": 13.5,
                "status": "met",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 17
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 3 contributing companies or organizations -- score normalized to 10",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "at_risk",
            "name": "Issue & PR responsiveness",
            "note": null,
            "notes": [],
            "value": 39,
            "inputs": {
              "merged_prs": 349,
              "open_issues": 107,
              "closed_issues": 5,
              "issue_closed_ratio": 0.045,
              "closed_unmerged_prs": 15
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "4% of issues closed",
                "points": 2.1,
                "status": "partial",
                "details": [
                  {
                    "code": "issues_closed_share",
                    "params": {
                      "share": 4
                    }
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "349/364 decided PRs merged",
                "points": 36.7,
                "status": "partial",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 349,
                      "decided": 364
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 1/17 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "moderate",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 51,
            "inputs": {
              "followers": 8,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "EliteaAI",
              "public_repos": 64,
              "account_age_days": 125
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "8 followers of EliteaAI",
                "points": 6.9,
                "status": "partial",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 8,
                      "login": "EliteaAI"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "64 public repos, account ~0 yr old",
                "points": 13.7,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 64
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 0
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "elitea_sdk"
              ],
              "ecosystems": "pypi",
              "any_deprecated": false,
              "min_days_since_publish": 0
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on pypi",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "pypi"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 0 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "246 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 246
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 71,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "8 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 8
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "10 out of 10 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "good",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 53,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 41,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 4.1
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection not enabled on development/release branches",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "10 out of 10 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 1/17 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 3 contributing companies or organizations -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "dangerous workflow patterns detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file detected",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "30 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is run on all commits",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "0 existing vulnerabilities detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): Indirect dependencies free of known advisories, No advisories left outstanding. Remaining weights renormalized. Matched 91 resolved dependencies against OSV; 36 could not be assessed (no resolved version, an unsupported ecosystem, or beyond the reported package list). This repository publishes no package the index resolves, so the repository dependency graph was assessed instead. That graph mixes development and test pins with shipped dependencies, so only the declared runtime dependencies are scored; transitive findings are reported as context and excluded from the score. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "indirect_dependencies_free_of_known_advisories",
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_repository",
                "params": {
                  "assessed": 91
                }
              },
              {
                "code": "advisories_unassessed",
                "params": {
                  "count": 36
                }
              },
              {
                "code": "advisories_repo_graph_caveat",
                "params": {}
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 132,
              "affected_packages": 19,
              "assessed_packages": 91,
              "unassessed_packages": 36,
              "affected_by_severity": "critical 3, high 10, moderate 5, low 1",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "transitive set not separable from development and test dependencies in this scope",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_scope_not_separable",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 91,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 4
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 65,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "excellent",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 85,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.987,
              "agent_instruction_files": [
                ".github/copilot-instructions.md",
                ".github/instructions/bug-reporting.instructions.md",
                ".github/instructions/test-coverage-structure.instructions.md"
              ],
              "agent_instruction_max_bytes": 13190
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": ".github/copilot-instructions.md, .github/instructions/bug-reporting.instructions.md, .github/instructions/test-coverage-structure.instructions.md",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": ".github/copilot-instructions.md, .github/instructions/bug-reporting.instructions.md, .github/instructions/test-coverage-structure.instructions.md"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "74 of 75 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 74,
                      "sampled": 75
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "at_risk",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 42,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [],
              "has_dockerfile": true,
              "typed_language": false,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [],
              "agent_commit_share": 0.2,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "Dockerfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "Dockerfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "20 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 20,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "moderate",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 52,
            "inputs": {
              "primary_language": "Python",
              "largest_source_bytes": 174204,
              "source_files_sampled": 686,
              "oversized_source_files": 32
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "Python without a type-check config",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_typecheck_config_language",
                    "params": {
                      "language": "Python"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "32/686 source files over 60KB",
                "points": 52.4,
                "status": "partial",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 686,
                      "oversized": 32
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "excellent",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": true,
              "api_schema_files": [
                "elitea_sdk/tools/github/schema.docs.graphql"
              ]
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": "elitea_sdk/tools/github/schema.docs.graphql",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "elitea_sdk/tools/github/schema.docs.graphql"
                    }
                  }
                ],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
    "deps.dev does not index pypi:elitea_sdk@0.8.37; advisories assessed against the repository dependency graph instead"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-28T16:20:20.323078Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/e/EliteaAI/elitea-sdk.svg",
  "full_name": "EliteaAI/elitea-sdk",
  "license_state": "standard",
  "license_spdx": "Apache-2.0"
}

Оцінки — це сигнали, а не гарантії. Вони відображають публічно видимі практики на GitHub — це не аудит коду й не гарантія безпеки.

Відсутні дані виключаються, а ваги перенормовуються — нуль за відсутність ніколи не ставиться. Методологія версіонована й відкрита: метрики v1.13.0, схема v0.27.0 — повна методологія · вікі метрик.

Як окремий результат виглядає на тлі всього реєстру: сукупна статистикаPyPI.