Публічний реєстр
Звіт про здоров'я програмного забезпеченнясхема 0.27.0 · метрики 1.13.0 · 2026-07-24 13:15 UTC

InnerOpen / marvin-cli

Official CLI for Marvin CMS - interact with the Marvin Publishing API

TypeScriptЛіцензію не виявлено★ 0 зірок⑂ 0 форківз лип. 2026 р.Переглянути на GitHub ↗

InnerOpen/marvin-cli має індекс здоров’я 58 зі 100, що відповідає смузі «Помірний». Найвищий показник — Vitality (74/100), найнижчий — Community & Adoption (32/100). Останнє оновлення — сьогодні. Більшість нещодавньої роботи виконує один учасник.

58
загалом / 100
Помірний

Індекс здоров'я програмного забезпечення

Метрики згруповано у зважені категорії на шкалі 1–100. Загальна оцінка починається як їхнє середнє; коли публічні дані активують Політику юрисдикцій високого ризику, рейтинг коригується й отримує верхню межу 49 («Під ризиком»). Готовність до ШІ не входить до індексу.

58
Відмінний85-100Зразковий; відповідає практично всім перевіреним критеріям
Добрий70-84Здоровий; незначні прогалини
Помірний50-69Прийнятний, але з помітними прогалинами; рекомендовано перевірку
У зоні ризику30-49Суттєві слабкі місця; впровадження потребує обережності
Критичний1-29Серйозні проблеми (покинутий, єдиний мейнтейнер, без базової гігієни)
ЖиттєздатністьСпільнота тавпровадженняСталість таврядуванняІнженернаякістьБезпекаГотовність доШІ

Профіль оцінок

Кожна вісь — окрема категорія. Форма важить більше, ніж середнє: здоровий об'єкт заповнює всю фігуру, тоді як профіль із піками та провалами означає, що сила в одному вимірі маскує ризик в іншому.

Власність

InnerOpenОрганізація
0 підписників8 публічних репозиторіївз черв. 2026 р.

За цим репозиторієм стоїть організація — спільна, підзвітна опіка, здатна пережити будь-якого окремого мейнтейнера.

Пакетні екосистеми

РеєстрПакетВерсіяЗавантажень / місВерсіїОстання публікаціяТеги
npm@inneropen/marvin-cli2.7.06 692475 днів томуmarvincmsclipublishingheadless-cms

Метрики за категоріями

Життєздатність

Чи живий проєкт — чи пишеться код і чи виходять релізи?

74Добрий · 22% загального індексу
Як обчислюється оцінка
36/36Свіжість push — останній push 0 дн. тому
2.1/36Ритм комітів — 3/52 тижнів із комітами
18/18Обсяг комітів — 148 комітів за останній рік
0/10OpenSSF Scorecard: Maintained — project was created within the last 90 days. Please review its contents carefully
Використані вхідні дані
commits_last_year148
human_commit_share1
days_since_last_push0
active_weeks_last_year3
Як обчислюється оцінка
27/27Випускає релізи — опубліковано 26 релізів
36/36Свіжість релізів — останній реліз 5 дн. тому
27/27Ритм релізів — реліз кожні ~0,5 дн.
0/10OpenSSF Scorecard: Signed-Releases — немає даних
Використані вхідні дані
releases_count26
latest_release_tagv2.7.0
releases_from_tagsні
days_since_latest_release5
mean_days_between_releases0,5
Виключено з оцінювання (немає даних або не застосовно): OpenSSF Scorecard: Signed-Releases. Залишкові ваги перенормовано.

Спільнота та впровадження

Чи має проєкт користувачів, завантаження, увагу та влаштовані умови для контриб’юторів?

32У зоні ризику · 18% загального індексу
Як обчислюється оцінка
0/60Зірки — 0 зірок
0/25Форки — 0 форків
0/15Спостерігачі — 0 спостерігачів
Використані вхідні дані
forks0
stars0
watchers0
growth_stateunverified
growth_factor_pct100
growth_unverified_reasonno_history

Здоров'я спільноти

45У зоні ризику
Як обчислюється оцінка
22.5/22.5README
0/22.5Ліцензія — файлу ліцензії не виявлено
18/18Настанови CONTRIBUTING
0/13.5Кодекс поведінки
0/7.2Шаблон issue
0/6.3Шаблон PR
Використані вхідні дані
has_readmeтак
has_licenseні
has_contributingтак
has_issue_templateні
has_code_of_conductні
has_pull_request_templateні
Як обчислюється оцінка
51/80Щомісячні завантаження — 6 692 завантажень/місяць у npm
0/20Залежні пакети в реєстрі — ця екосистема цього не повідомляє
Використані вхідні дані
packages@inneropen/marvin-cli
dependents
ecosystemsnpm
total_downloads
monthly_downloads6 692
Виключено з оцінювання (немає даних або не застосовно): Залежні пакети в реєстрі. Залишкові ваги перенормовано.

Сталість та врядування

Чи переживе проєкт своїх людей — бас-фактор, реактивність, хто за ним стоїть і як супроводжуються пакети?

54Помірний · 24% загального індексу
Як обчислюється оцінка
9/54Бас-фактор — на 1 контриб’ютор(ів) припадає половина всіх комітів
4.8/22.5Розподіл комітів — головний контриб’ютор — автор 79% комітів
2.7/13.5Широта контриб’юторів — 2 контриб’юторів
6/10OpenSSF Scorecard: Contributors — project has 2 contributing companies or organizations -- score normalized to 6
Використані вхідні дані
bus_factor1
contributors_sampled2
top_contributor_share0,788
Як обчислюється оцінка
0/46.8Вирішення issue — немає issue або даних
38.2/38.3Прийняття PR — злито 1/1 вирішених PR
0/15OpenSSF Scorecard: Code-Review — Found 0/2 approved changesets -- score normalized to 0
Використані вхідні дані
merged_prs1
open_issues0
closed_issues0
issue_closed_ratio
closed_unmerged_prs0
Виключено з оцінювання (немає даних або не застосовно): Вирішення issue. Залишкові ваги перенормовано.

Власність та опіка

37У зоні ризику
Як обчислюється оцінка
30/30Підтримка власника — у власності організації
0/20Верифікований домен
0/25Охоплення власника — 0 підписників у InnerOpen
7.1/25Послужний список — 8 публічних репозиторіїв, вік облікового запису ~0 р.
Використані вхідні дані
followers0
owner_typeOrganization
is_verified
owner_loginInnerOpen
public_repos8
account_age_days31

Супровід пакетів

100Відмінний
Як обчислюється оцінка
25/25Опубліковано й доступно — 1 пакет(ів) у npm
35/35Свіжість публікацій — остання публікація 5 дн. тому
20/20Історія версій — 47 опублікованих версій
20/20Не застарілий — активний, не deprecated і не yanked
Використані вхідні дані
packages@inneropen/marvin-cli
ecosystemsnpm
any_deprecatedні
min_days_since_publish5

Інженерна якість

Чи наявні базові інженерні практики та документація?

71Добрий · 20% загального індексу
Як обчислюється оцінка
24/24Процеси CI — 4 процес(ів) CI
24/24Наявні тести
0/16Конфігурація лінтера
0/9.6Pre-commit-хуки
0/6.4.editorconfig
20/20OpenSSF Scorecard: CI-Tests — 1 out of 1 merged PRs checked by a CI test -- score normalized to 10
Використані вхідні дані
has_ciтак
has_testsтак
has_editorconfigні
has_linter_configні
has_precommit_configні
Як обчислюється оцінка
30/30README
25/25Каталог документації
0/15Сайт документації / домашня сторінка
10/10Опис репозиторію
0/10Теми
10/10Wiki
Використані вхідні дані
topics
has_wikiтак
homepage
has_readmeтак
has_docs_dirтак
has_descriptionтак

Безпека

Чи міцні видимі практики безпеки й ланцюга постачання, без непослабленої пов’язаності з юрисдикціями високого ризику?

53Помірний · 16% загального індексу

Стан безпеки

41У зоні ризику
Як обчислюється оцінка
7.5/7.5Binary-Artifacts — no binaries found in the repo
0.8/7.5Branch-Protection — branch protection is not maximal on development and all release branches
2.5/2.5CI-Tests — 1 out of 1 merged PRs checked by a CI test -- score normalized to 10
0/2.5CII-Best-Practices — no effort to earn an OpenSSF best practices badge detected
0/7.5Code-Review — Found 0/2 approved changesets -- score normalized to 0
1.5/2.5Contributors — project has 2 contributing companies or organizations -- score normalized to 6
10/10Dangerous-Workflow — no dangerous workflow patterns detected
0/7.5Dependency-Update-Tool — no update tool detected
0/5Fuzzing — project is not fuzzed
0/2.5Ліцензія — license file not detected
0/7.5Maintained — project was created within the last 90 days. Please review its contents carefully
5/5Packaging — packaging workflow detected
0.5/5Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 1
0/5SAST — SAST tool is not run on all commits -- score normalized to 0
5/5Security-Policy — security policy file detected
0/7.5Signed-Releases — немає даних
0/7.5Token-Permissions — detected GitHub workflow tokens with excessive permissions
7.5/7.5Vulnerabilities — 0 existing vulnerabilities detected
Використані вхідні дані
sourceopenssf_scorecard
checks_evaluated17
scorecard_versionv5.5.0
checks_inconclusive1
scorecard_aggregate4,1
Виключено з оцінювання (немає даних або не застосовно): signed_releases. Залишкові ваги перенормовано.
Як обчислюється оцінка
35/35Прямі залежності без відомих сповіщень — жодна пряма залежність не має відомих сповіщень
25/25Непрямі залежності без відомих сповіщень — жодна непряма залежність не має відомих сповіщень
0/40Немає задавнених сповіщень — жодне сповіщення не має дати публікації
Використані вхідні дані
sourceosv
advisories0
affected_packages0
assessed_packages5
unassessed_packages0
affected_by_severitynone
direct_affected_packages0
Виключено з оцінювання (немає даних або не застосовно): Немає задавнених сповіщень. Залишкові ваги перенормовано. Звірено з runtime-замиканням залежностей npm:@inneropen/marvin-cli@2.7.0 — тим, що тягне за собою встановлення опублікованого пакета, — 5 пакетів. Досяжність не аналізується.

Готовність до ШІ

Наскільки репозиторій оснащений для розробки та супроводу за участі ШІ-агентів? Незалежний, експериментальний бейдж — вага 0.0, тож він подається окремо і не впливає на загальний індекс здоров'я.

55Помірний · 0% загального індексу
Як обчислюється оцінка
0/45Інструкції для агентів — немає CLAUDE.md / AGENTS.md / правил редактора
0/15Машиночитана документація (llms.txt)
40/40Читабельна історія комітів — намір зазначено у 94 з 100 людських комітів (структурований заголовок або пояснювальний текст)
Використані вхідні дані
has_llms_txtні
legible_history_share0,94
agent_instruction_files
agent_instruction_max_bytes
Як обчислюється оцінка
0/18Розгортання однією командою
22/22Автоматизовані тести
0/11Конфігурація лінтера / форматера
11/11Статична перевірка типів — tsconfig.json
10/10Відтворюване середовище — lockfile
10/10Підтверджена практика роботи з агентами — 47 з останніх 100 комітів створено агентом або з його зазначенням
0/8Автоматизоване супроводження — автоматичних оновлень залежностей не виявлено
1/10OpenSSF Scorecard: Pinned-Dependencies — dependency not pinned by hash detected -- score normalized to 1
Використані вхідні дані
has_nixні
has_testsтак
lockfilespackage-lock.json
has_dockerfileні
typed_languageтак
bootstrap_files
has_devcontainerні
has_linter_configні
typecheck_configstsconfig.json
agent_commit_share0,47
toolchain_manifests
dependency_bot_commit_share0
Як обчислюється оцінка
45/45Типізований код — TypeScript (статично типізована)
55/55Керовані розміри файлів — 0/67 файлів вихідного коду понад 60 КБ
Використані вхідні дані
primary_languageTypeScript
largest_source_bytes13 750
source_files_sampled67
oversized_source_files0
Як обчислюється оцінка
0/40Схема API (OpenAPI/GraphQL/proto)
0/20Сервер MCP
40/40Придатні до запуску приклади — examples
Використані вхідні дані
example_dirsexamples
has_mcp_signalні
api_schema_files

Ключові факти

0зірок GitHub
2контриб'юторів
148комітів за останні 12 місяців
0днів від останнього пушу
26релізів
1бас-фактор
0відкритих issue
npm, PyPIпакетних екосистем

Попередження щодо збору даних

  • GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

Докладніше

OpenSSF Scorecard 4.1 / 10
4.1сукупно

Незалежна, не прив'язана до інструментів оцінка безпеки від відкритого проєкту OpenSSF Scorecard. Кожна перевірка винагороджує практику безпеки, а не інструмент конкретного постачальника. Перевірки, які Scorecard не зміг визначити, позначено н/д і виключено з оцінки безпеки (вони ніколи не зараховуються як нуль).Scorecard v5.5.0 · 2026-07-24 13:15 UTC

10Binary-Artifactsno binaries found in the repo
1Branch-Protectionbranch protection is not maximal on development and all release branches
10CI-Tests1 out of 1 merged PRs checked by a CI test -- score normalized to 10
0CII-Best-Practicesno effort to earn an OpenSSF best practices badge detected
0Code-ReviewFound 0/2 approved changesets -- score normalized to 0
6Contributorsproject has 2 contributing companies or organizations -- score normalized to 6
10Dangerous-Workflowno dangerous workflow patterns detected
0Dependency-Update-Toolno update tool detected
0Fuzzingproject is not fuzzed
0Licenselicense file not detected
0Maintainedproject was created within the last 90 days. Please review its contents carefully
10Packagingpackaging workflow detected
1Pinned-Dependenciesdependency not pinned by hash detected -- score normalized to 1
0SASTSAST tool is not run on all commits -- score normalized to 0
10Security-Policysecurity policy file detected
н/дSigned-Releasesno releases found
0Token-Permissionsdetected GitHub workflow tokens with excessive permissions
10Vulnerabilities0 existing vulnerabilities detected
Прямі залежності 4
РеєстрПакетОбмеження версіїМаніфест
npm@inneropen/marvin-sdk^3.2.0-next.23package.json
npmchalk^5.6.2package.json
npmcommander^12.1.0package.json
npmdotenv^16.4.5package.json
Усі залежності не зібрано

Не вдалося зібрати розв'язаний набір залежностей для цього звіту: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository

Сповіщення про залежності 0

Встановлення npm:@inneropen/marvin-cli@2.7.0 тягне 5 пакетів, прямих і транзитивних: 0 мають відомі сповіщення, з них 0 — прямі залежності.

Жодне відоме сповіщення не стосується оцінених залежностей.

Сповіщення означає, що версія, записана в графі залежностей, потрапляє в уражений діапазон. Досяжність не аналізується, а граф містить піниї розробки й тестування — знахідка може стосуватися інструментів, а не поставленого коду.

Звіт у форматі JSON машиночитний
{
  "data": {
    "repo": {
      "topics": [],
      "is_fork": false,
      "size_kb": 2357,
      "has_wiki": true,
      "homepage": null,
      "languages": {
        "JavaScript": 14983,
        "TypeScript": 292017
      },
      "pushed_at": "2026-07-24T04:00:30Z",
      "created_at": "2026-07-07T00:27:35Z",
      "owner_type": "Organization",
      "updated_at": "2026-07-19T00:30:37Z",
      "description": "Official CLI for Marvin CMS - interact with the Marvin Publishing API",
      "is_archived": false,
      "is_disabled": false,
      "license_spdx": null,
      "default_branch": "main",
      "license_spdx_raw": null,
      "primary_language": "TypeScript",
      "significant_languages": [
        "TypeScript"
      ]
    },
    "owner": {
      "blog": "https://www.inneropen.com",
      "name": "InnerOpen",
      "type": "Organization",
      "login": "InnerOpen",
      "company": null,
      "location": "United States of America",
      "followers": 0,
      "avatar_url": "https://avatars.githubusercontent.com/u/295994472?v=4",
      "created_at": "2026-06-22T22:55:23Z",
      "is_verified": null,
      "public_repos": 8,
      "account_age_days": 31
    },
    "license": {
      "state": "absent",
      "spdx_id": null,
      "raw_spdx": null,
      "file_present": false,
      "scorecard_found": false,
      "profile_has_license": false
    },
    "activity": {
      "releases": [
        {
          "tag": "v2.7.0",
          "kind": "minor",
          "published_at": "2026-07-19T00:30:39Z"
        },
        {
          "tag": "v2.6.0-next.23",
          "kind": "prerelease",
          "published_at": "2026-07-18T20:32:55Z"
        },
        {
          "tag": "v2.6.0-next.22",
          "kind": "prerelease",
          "published_at": "2026-07-16T17:59:13Z"
        },
        {
          "tag": "v2.6.0-next.21",
          "kind": "prerelease",
          "published_at": "2026-07-16T16:44:45Z"
        },
        {
          "tag": "v2.6.0-next.20",
          "kind": "prerelease",
          "published_at": "2026-07-16T16:39:59Z"
        },
        {
          "tag": "v2.6.0-next.19",
          "kind": "prerelease",
          "published_at": "2026-07-16T16:36:43Z"
        },
        {
          "tag": "v2.6.0-next.18",
          "kind": "prerelease",
          "published_at": "2026-07-16T16:27:03Z"
        },
        {
          "tag": "v2.6.0-next.17",
          "kind": "prerelease",
          "published_at": "2026-07-16T16:19:34Z"
        },
        {
          "tag": "v2.6.0-next.16",
          "kind": "prerelease",
          "published_at": "2026-07-14T21:38:41Z"
        },
        {
          "tag": "v2.6.0-next.15",
          "kind": "prerelease",
          "published_at": "2026-07-14T21:35:31Z"
        },
        {
          "tag": "v2.6.0-next.14",
          "kind": "prerelease",
          "published_at": "2026-07-14T21:11:50Z"
        },
        {
          "tag": "v2.6.0-next.13",
          "kind": "prerelease",
          "published_at": "2026-07-14T04:39:42Z"
        },
        {
          "tag": "v2.6.0-next.12",
          "kind": "prerelease",
          "published_at": "2026-07-12T20:29:58Z"
        },
        {
          "tag": "v2.6.0-next.11",
          "kind": "prerelease",
          "published_at": "2026-07-11T21:36:12Z"
        },
        {
          "tag": "v2.6.0-next.10",
          "kind": "prerelease",
          "published_at": "2026-07-11T17:04:59Z"
        },
        {
          "tag": "v2.6.0-next.9",
          "kind": "prerelease",
          "published_at": "2026-07-11T16:54:30Z"
        },
        {
          "tag": "v2.6.0-next.8",
          "kind": "prerelease",
          "published_at": "2026-07-11T16:46:43Z"
        },
        {
          "tag": "v2.6.1",
          "kind": "patch",
          "published_at": "2026-07-10T17:23:23Z"
        },
        {
          "tag": "v2.6.0-next.7",
          "kind": "prerelease",
          "published_at": "2026-07-10T17:22:49Z"
        },
        {
          "tag": "v2.6.0-next.6",
          "kind": "prerelease",
          "published_at": "2026-07-10T17:17:07Z"
        },
        {
          "tag": "v2.6.0",
          "kind": "minor",
          "published_at": "2026-07-10T17:17:02Z"
        },
        {
          "tag": "v2.6.0-next.5",
          "kind": "prerelease",
          "published_at": "2026-07-10T16:53:31Z"
        },
        {
          "tag": "v2.6.0-next.4",
          "kind": "prerelease",
          "published_at": "2026-07-10T02:48:18Z"
        },
        {
          "tag": "v2.6.0-next.3",
          "kind": "prerelease",
          "published_at": "2026-07-10T00:52:40Z"
        },
        {
          "tag": "v2.6.0-next.2",
          "kind": "prerelease",
          "published_at": "2026-07-09T02:28:45Z"
        },
        {
          "tag": "v2.6.0-next.1",
          "kind": "prerelease",
          "published_at": "2026-07-08T16:50:59Z"
        }
      ],
      "recent_commits": [
        {
          "oid": "b3def4969ef40e69427fc2377777bb6bb4e24d60",
          "body": "# [2.7.0](https://github.com/inneropen/marvin-cli/compare/v2.6.1...v2.7.0) (2026-07-19)\n\n### Bug Fixes\n\n* Add null check for collection.get() return value ([d362859](https://github.com/inneropen/marvin-cli/commit/d36285996b315c7d4e18433b99cf5025853cfab7))\n* camelCase column specs in email-subscripti\n[…]\nca9b5e00b4ecb9c2eb90c8f9d18b626e))\n* Rename publish entry-types → publish renderers, add --all flag ([fdb6ba8](https://github.com/inneropen/marvin-cli/commit/fdb6ba8e040a4981cd12e9b6eadec2e7cf7594b1))",
          "is_bot": false,
          "headline": "chore(release): 2.7.0 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-19T00:30:33Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "003972557c3ba8c6b9ad69a863fba5c72a081d19",
          "body": "develop carries the refactored CLI (80 files, large cleanup) plus the\nPUBLISHING_TOKEN fix; main only had release-bookkeeping commits (2.6.0,\n2.6.1 version bumps). Merge develop's tree so the stable release ships\nthe current code. semantic-release will cut the next stable version.",
          "is_bot": false,
          "headline": "chore: reconcile develop into main for stable release",
          "author_name": "Jared Mashburn",
          "author_login": "jmashburn",
          "committed_at": "2026-07-19T00:28:58Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "e98b1dec15ef1d49c35b7cc22fd3cbb6e5236cf8",
          "body": null,
          "is_bot": false,
          "headline": "🔧 chore(deps): bump marvin-sdk to 3.2.0-next.23",
          "author_name": "Jared Mashburn",
          "author_login": "jmashburn",
          "committed_at": "2026-07-18T21:16:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "06a0f6b34bdfff48d5b6cd4514ac8c9818c5444a",
          "body": "# [2.6.0-next.23](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.22...v2.6.0-next.23) (2026-07-18)\n\n### Bug Fixes\n\n* **release:** parse gitmoji-prefixed commit subjects ([da9ee93](https://github.com/inneropen/marvin-cli/commit/da9ee933bfd2f4a852915e91a53255a75a3e27f4))\n\n### Features\n\n* cover all backend endpoints in the CLI ([99d9801](https://github.com/inneropen/marvin-cli/commit/99d98013722ae4306192c0ff93481ce7ef6e6045))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.23 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-18T20:32:49Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "713fcf0cb8d0ed6eb18cbcdabfb960db95653f87",
          "body": null,
          "is_bot": false,
          "headline": "👷 ci: install latest SDK develop tag instead of stale lockfile pin",
          "author_name": "Jared Mashburn",
          "author_login": "jmashburn",
          "committed_at": "2026-07-18T20:19:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "da9ee933bfd2f4a852915e91a53255a75a3e27f4",
          "body": null,
          "is_bot": false,
          "headline": "🐛 fix(release): parse gitmoji-prefixed commit subjects",
          "author_name": "Jared Mashburn",
          "author_login": "jmashburn",
          "committed_at": "2026-07-18T20:19:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "c22f1be530700794a9268a18ca397d6019f61586",
          "body": null,
          "is_bot": false,
          "headline": "📝 docs: add status badges",
          "author_name": "Jared Mashburn",
          "author_login": "jmashburn",
          "committed_at": "2026-07-18T18:43:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "99d98013722ae4306192c0ff93481ce7ef6e6045",
          "body": "Add ~76 commands so the CLI wraps every non-excluded backend operation:\n- platform ai: providers (+ nested models), operations, executions, settings\n  (nested under `platform` to mirror the SDK's platform.ai.* namespace)\n- admin: new backups, scheduled-tasks, email (+templates), groups and\n  workspa\n[…]\nn/webhook logs and\n  types; email-template event-connections\n- user: api-token get/update\n- auth: public register / forgot-password / reset-password via a new\n  AuthClient factory in shared/clients.ts",
          "is_bot": false,
          "headline": "✨ feat: cover all backend endpoints in the CLI",
          "author_name": "Jared Mashburn",
          "author_login": "jmashburn",
          "committed_at": "2026-07-18T17:53:44Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7d4b6ec3919c1600e059af6054902af424f3dae1",
          "body": "# [2.6.0-next.22](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.21...v2.6.0-next.22) (2026-07-16)\n\n### Features\n\n* centralized table-schemas.ts — single source of truth for column specs, typed against SDK schema ([a671164](https://github.com/inneropen/marvin-cli/commit/a671164bea234aa2bd06ec0f118bb7b5e52e60ae))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.22 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-16T17:59:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a671164bea234aa2bd06ec0f118bb7b5e52e60ae",
          "body": "…n specs, typed against SDK schema\n\nAll platform command renderList column specs moved to src/shared/table-schemas.ts.\nString field names use `satisfies ColSpec<T>` to type-check against SDK schema types\nat compile time. Mixed schemas (strings + functions) use `satisfies ColumnSpec<T>`.\nTest updated to use per-command fixtures built from TABLE_SCHEMAS entries.",
          "is_bot": false,
          "headline": "feat: centralized table-schemas.ts — single source of truth for colum…",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-16T17:58:22Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "82e4248529b3da38230de3ba64a9ddb623b73561",
          "body": "- webhooks log/logs: fix column spec from snake_case (webhook_id, event_type,\n  created_at) to correct camelCase (webhookId, httpStatusCode, executedAt)\n  matching the WebhookExecutionLogRead API schema\n- event-log list/entity/user: fix column spec from snake_case (event_id,\n  occurred_at, user_id, \n[…]\nests for each; the table test acts as drift detection and\n  will fail if a column spec references a wrong field name; adding a new\n  command automatically gets all three tests with no manual additions",
          "is_bot": false,
          "headline": "test: fully dynamic output format tests; fix log column field names",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-16T17:26:07Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "4d0771260994a456a574cf640168d3db7113b3e7",
          "body": "Adds Vitest test suite (89 tests) covering three layers:\n\n1. Explicit per-command tests (72) — secrets, variables, webhooks,\n   email-subscriptions, entry-types, entries, collections, api-clients,\n   assets, resources, notifications, forms, scheduled-tasks list/log,\n   event-log, invites, email-temp\n[…]\nurn for empty bypassed --json mode,\n  outputting human text instead of []\n- invites list: trailing Total: line appended after JSON body made\n  output unparseable; empty early-return also bypassed mode",
          "is_bot": false,
          "headline": "test: comprehensive output format tests for all platform list commands",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-16T17:10:35Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "76ca7719ef65826823c74addb237d8721f358bdc",
          "body": "# [2.6.0-next.21](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.20...v2.6.0-next.21) (2026-07-16)\n\n### Bug Fixes\n\n* getOutputMode + handleCommandError across all 16 command files; fix camelCase column specs ([61d6838](https://github.com/inneropen/marvin-cli/commit/61d6838c79c9a6f93edc19d1bbd0cb1c410fffa2))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.21 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-16T16:44:38Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "61d6838c79c9a6f93edc19d1bbd0cb1c410fffa2",
          "body": "…fix camelCase column specs\n\n- All commands now respect --json/--yaml/--csv flags via getOutputMode()\n- All commands use handleCommandError for consistent structured error output\n- Fixed snake_case column specs: eventType, webhookId, createdAt, templateType etc\n- email-templates list shows Scope as 'workspace'/'system' instead of raw groupId",
          "is_bot": false,
          "headline": "fix: getOutputMode + handleCommandError across all 16 command files; …",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-16T16:44:10Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cfba4c5313df3fca3aeb4a6d7746a1ae4d7dd5fb",
          "body": "# [2.6.0-next.20](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.19...v2.6.0-next.20) (2026-07-16)\n\n### Bug Fixes\n\n* entry-types list — renderingJson/capabilitiesJson field names, add isSystem, empty when null ([ea2722c](https://github.com/inneropen/marvin-cli/commit/ea2722ca22f5dec4ad537359f310525f259cb41f))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.20 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-16T16:39:54Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "ea2722ca22f5dec4ad537359f310525f259cb41f",
          "body": "…dd isSystem, empty when null",
          "is_bot": false,
          "headline": "fix: entry-types list — renderingJson/capabilitiesJson field names, a…",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-16T16:39:29Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "dd2316074895b0332178b1b6f951295ed9212130",
          "body": "# [2.6.0-next.19](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.18...v2.6.0-next.19) (2026-07-16)\n\n### Bug Fixes\n\n* camelCase column specs in email-subscriptions list; default recipient_type to admins ([7b1d3d7](https://github.com/inneropen/marvin-cli/commit/7b1d3d7f6a5badbd51e283e3421e00ef8930706f))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.19 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-16T16:36:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7b1d3d7f6a5badbd51e283e3421e00ef8930706f",
          "body": "…pient_type to admins",
          "is_bot": false,
          "headline": "fix: camelCase column specs in email-subscriptions list; default reci…",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-16T16:36:08Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "03d8cf066bb7ad311d3c8025f4b35762f1265f70",
          "body": "# [2.6.0-next.18](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.17...v2.6.0-next.18) (2026-07-16)\n\n### Bug Fixes\n\n* machine-mode errors to stdout (json/yaml/csv all pipe cleanly to jq/yq) ([4fdd3b6](https://github.com/inneropen/marvin-cli/commit/4fdd3b6f732bda2a5a731144261b7ce899c4810a))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.18 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-16T16:26:56Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4fdd3b6f732bda2a5a731144261b7ce899c4810a",
          "body": "… jq/yq)",
          "is_bot": false,
          "headline": "fix: machine-mode errors to stdout (json/yaml/csv all pipe cleanly to…",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-16T16:26:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "91dd384e82a087ad2f1e3210dd7dcbe757c96c3a",
          "body": "# [2.6.0-next.17](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.16...v2.6.0-next.17) (2026-07-16)\n\n### Bug Fixes\n\n* global structured error output matching --json/--yaml/--csv flags; slug normalization ([9b77358](https://github.com/inneropen/marvin-cli/commit/9b7735844a3b39b2dc8c3a1ba4\n[…]\nns, events, webhook logs, workspace import/prefs, entry-type write ops, entry collection membership ([59ec311](https://github.com/inneropen/marvin-cli/commit/59ec3110a89430952ac287dfd25e4ed43c2ffcc2))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.17 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-16T16:19:28Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9b7735844a3b39b2dc8c3a1ba4af61bfb3b8da4e",
          "body": "…s; slug normalization\n\n- handleCommandError: respects output format flag for ALL commands\n  --json: stderr {\"error\":\"msg\",\"status\":N}\n  --yaml: stderr valid YAML error block\n  --csv/default: plain text or styled chalk\n- FastAPI 422 array detail rendered properly (was [object Object])\n- secrets + variables create: slug auto-normalized to UPPER_SNAKE_CASE",
          "is_bot": false,
          "headline": "fix: global structured error output matching --json/--yaml/--csv flag…",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-16T16:19:03Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "650b26550d6a67f937c5dc397e5363d45c8211d8",
          "body": "…ents, webhook logs, workspace import/prefs, entry-type write ops, entry collection ops\n\nNew commands:\n- secrets list/get/slugs/reveal/create/update/delete\n- variables list/get/create/update/delete\n- email-subscriptions list/get/create/delete\n- webhooks log / webhooks logs <id>\n- workspace import --\n[…]\nreferences / workspace preferences update\n- entry-types create/update/delete\n- entries collections <id> / add-to-collection / remove-from-collection\n- tasks log\n- user profile update\n- event-log types",
          "is_bot": false,
          "headline": "feat: fill all CLI gaps — secrets, variables, email-subscriptions, ev…",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-16T14:53:31Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "59ec3110a89430952ac287dfd25e4ed43c2ffcc2",
          "body": "…, webhook logs, workspace import/prefs, entry-type write ops, entry collection membership\n\nCo-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: fill CLI gaps — secrets, variables, email-subscriptions, events…",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-16T14:49:03Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "57103e9ce543dab0b4d66a87603678240edc2ec7",
          "body": "…ma type errors\n\n- health.ts: raw fetch replaced with PlatformClient.app.health()\n- email-templates.ts: snake_case keys updated to camelCase (templateType, headerText etc)\n- forms.ts: getPublishedForm/submitForm now pass workspace slug (SDK signature fix)\n- webhooks.ts: updated to match new test() response shape {message}\n- workspaces.ts: null-safe slug access for setActive/getSiteToken\n- tokens.ts: integrationId now required in createApiToken payload",
          "is_bot": false,
          "headline": "fix: replace raw fetch in health command with SDK AppModule; fix sche…",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-16T14:34:51Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "75ee703ff84df65382e0e32544ce2e0f15b30af8",
          "body": "- Define EntryLike, CollectionLike, ResourceLike, AssetLike interfaces\n  for column specs instead of MarvinEntry/MarvinCollection etc. — allows\n  CollectionEntry, Entry, PublishedCollectionSummary etc. to flow through\n  without casts\n- collection <slug> now builds output from Collection class getter\n[…]\nh a Slug column\n  instead of misusing entryColumns on non-entry data\n- entry <slug> uses toJSON() instead of broken Entry[] cast\n\nCo-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Properly type column specs and fix collection <slug> entries shape",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-14T23:41:05Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "bb43dc67e4b499339d8f94448927c2a3b3b0fc4a",
          "body": "# [2.6.0-next.16](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.15...v2.6.0-next.16) (2026-07-14)\n\n### Bug Fixes\n\n* Render single items as table rows, not raw JSON objects ([8bf2e8b](https://github.com/inneropen/marvin-cli/commit/8bf2e8bf80c7f2ac41bb0cd414266338bceab894))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.16 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-14T21:38:35Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "8bf2e8bf80c7f2ac41bb0cd414266338bceab894",
          "body": "collection, resource, asset single-item commands now use renderList\nwith column specs in table/CSV mode. JSON and YAML still return the\nfull object. Also fixes renderData fallthrough to console.dir which\nwas producing JSON-like output in table mode.\n\nCo-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Render single items as table rows, not raw JSON objects",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-14T21:38:13Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "3f0c52a4de4f54d5813ba41d556dc8a2635dab20",
          "body": "# [2.6.0-next.15](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.14...v2.6.0-next.15) (2026-07-14)\n\n### Features\n\n* Persist apiUrl in credentials, consistent empty output across all modes ([97a27f0](https://github.com/inneropen/marvin-cli/commit/97a27f0fca9b5e00b4ecb9c2eb90c8f9d18b626e))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.15 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-14T21:35:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "97a27f0fca9b5e00b4ecb9c2eb90c8f9d18b626e",
          "body": "…ll modes\n\n- Save apiUrl to ~/.marvin/credentials.json on login so marvin works\n  outside any project directory without MARVIN_API_URL env var\n- --api-url flag is now read from global opts in login command\n- Empty list results: --json returns [], --yaml returns [], --csv shows\n  headers only, table \n[…]\ne,\n  asset, and collection commands\n- renderJson falls back to [] for undefined data (was 'undefined')\n- renderList is null-safe\n\nCo-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Persist apiUrl in credentials, consistent empty output across a…",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-14T21:34:59Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "8b88b0eaf04e21853bba5217def0880232df22bb",
          "body": "# [2.6.0-next.14](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.13...v2.6.0-next.14) (2026-07-14)\n\n### Features\n\n* Auth-aware CLI — site-token login, command visibility, credential precedence ([34dce56](https://github.com/inneropen/marvin-cli/commit/34dce565073f05742d5edac2dae6437aa89bbe58))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.14 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-14T21:11:44Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "34dce565073f05742d5edac2dae6437aa89bbe58",
          "body": "…al precedence\n\n- marvin login accepts --site-token with live validation against publish API\n- marvin logout --site-token/--all/bare for scoped credential clearing\n- marvin --help shows auth status line and hides commands based on token availability\n- workspace hidden when no user token; slug passable via --workspace or env\n- Site token precedence: CLI flag > stored credentials > env var\n\nCo-Authored-By: Claude Sonnet 4.6 (1M context) <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Auth-aware CLI — site-token login, command visibility, credenti…",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-14T21:11:12Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "41b3125e71380d8e4c9dbc6b5e2f5a80fe6c6265",
          "body": "# [2.6.0-next.13](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.12...v2.6.0-next.13) (2026-07-14)\n\n### Bug Fixes\n\n* Return empty array instead of [null] when slug not found ([96cdb88](https://github.com/inneropen/marvin-cli/commit/96cdb88eb5deccfb71e8875d544a6f5800ed9ece))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.13 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-14T04:39:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "96cdb88eb5deccfb71e8875d544a6f5800ed9ece",
          "body": "Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Return empty array instead of [null] when slug not found",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-14T04:38:57Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5e44dfcd9d3852516ee3bfb0213be204fa94f05d",
          "body": "Document the marvin publish renderers command with --all flag and\nisRendered filtering behavior.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: Add publish renderers command documentation",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-12T22:40:18Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "2ac42242ed8521ccf93c53882e12ba9b7e26c6cd",
          "body": "# [2.6.0-next.12](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.11...v2.6.0-next.12) (2026-07-12)\n\n### Bug Fixes\n\n* Update marvin-sdk dependency to next.20 with renderers rename ([fe591f6](https://github.com/inneropen/marvin-cli/commit/fe591f687e79665f6ae4728bef8d09ea9e4d8ceb))\n\n### Fe\n[…]\n875fcd1d38286c8494112cc4f43c170d))\n* Rename publish entry-types → publish renderers, add --all flag ([fdb6ba8](https://github.com/inneropen/marvin-cli/commit/fdb6ba8e040a4981cd12e9b6eadec2e7cf7594b1))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.12 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-12T20:29:51Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "fe591f687e79665f6ae4728bef8d09ea9e4d8ceb",
          "body": "The lockfile was pinned to next.18 which lacked the renderers module.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Update marvin-sdk dependency to next.20 with renderers rename",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-12T20:29:10Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "fdb6ba8e040a4981cd12e9b6eadec2e7cf7594b1",
          "body": "Command now shows only entry types with isRendered=true by default.\nUse --all to include non-rendered types. Renamed entryTypeColumns →\nrendererColumns.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Rename publish entry-types → publish renderers, add --all flag",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-12T20:18:25Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "a11126be875fcd1d38286c8494112cc4f43c170d",
          "body": "Adds `marvin publish entry-types` to list entry types with rendering\ninfo via the publishing API. Updates platform entry-types list to show\nrendering and capabilities columns.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Add publish entry-types command and update platform entry-types",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-12T19:33:40Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "52ad904abd20dcb6de366a313c4a7854baaf6099",
          "body": "# [2.6.0-next.11](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.10...v2.6.0-next.11) (2026-07-11)\n\n### Bug Fixes\n\n* Add null check for collection.get() return value ([d362859](https://github.com/inneropen/marvin-cli/commit/d36285996b315c7d4e18433b99cf5025853cfab7))\n\n### Features\n\n* Add workspace export command ([b6bce79](https://github.com/inneropen/marvin-cli/commit/b6bce79b592e36f556984b53d409b589604a74f8))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.11 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-11T21:36:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d36285996b315c7d4e18433b99cf5025853cfab7",
          "body": "Fixes TypeScript error TS18047 after SDK update where collections.get()\ncan return null.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Add null check for collection.get() return value",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-11T21:35:38Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b6bce79b592e36f556984b53d409b589604a74f8",
          "body": "Adds 'marvin workspace export' to download workspace data as JSON.\nSupports --output <file>, --include-system-types, and --no-pretty flags.\n\nCo-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Add workspace export command",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-11T21:35:23Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "6794a4d4d04fe9418f8bd035fa6fef143cde8c8a",
          "body": "Documentation Updates:\n- Add MIGRATION.md - Comprehensive upgrade guide from v2.5.x\n- Add SECURITY.md - Security features and best practices\n- Add DOCUMENTATION_UPDATES.md - Summary of all changes\n- Update README.md - Security features, new command syntax, examples\n- Update CHANGELOG.md - Complete v\n[…]\n fixed (error messages, help text)\n\nBreaking changes, migration paths, and security improvements\nare now fully documented for v2.6.0 release.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: Complete v2.6.0 documentation and fix command inconsistencies",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-11T17:29:14Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c09312724db60e43c7b1e4de85a5348f4bcc47b7",
          "body": "# [2.6.0-next.10](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.9...v2.6.0-next.10) (2026-07-11)\n\n### Bug Fixes\n\n* **quality:** Pin SDK version and add token validation (LOW priority) ([cbd1579](https://github.com/inneropen/marvin-cli/commit/cbd157941119c4fbed3ad604d4a51a41fa804fc9)), \n[…]\ninneropen/marvin-cli/issues/11) [#12](https://github.com/inneropen/marvin-cli/issues/12) [#4](https://github.com/inneropen/marvin-cli/issues/4) [#13](https://github.com/inneropen/marvin-cli/issues/13)",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.10 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-11T17:04:54Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "5af2dcd1079d35fe9dddacc8b5b214d81e9b9ec9",
          "body": "Complete documentation of security audit and remediation:\n- 17 issues identified (4 CRITICAL, 6 MEDIUM, 7 LOW)\n- 15 issues fixed (88% resolution rate)\n- Risk level: HIGH → LOW\n- Production ready\n\nFiles changed: 21 (7 new docs, 14 modified source)\nLines: +2,200 added, -70 removed\n\nExecutive summary for stakeholders and deployment checklist.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "docs: Add comprehensive security audit summary",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-11T17:04:32Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "cbd157941119c4fbed3ad604d4a51a41fa804fc9",
          "body": "LOW-priority quality improvements:\n\nIssue #16: SDK dependency pinned to specific version\n- Changed from \"develop\" branch to \"^2.0.1\"\n- Provides supply chain predictability\n- Allows semver patch/minor updates\n- Works with package-lock.json\n\nIssue #17: Login token validated before saving\n- Calls clien\n[…]\n test coverage: recommendations provided\n\nFiles changed: 3 (2 modified, 1 new doc)\nResolution: 15/17 issues fixed (88%)\nFinal risk level: LOW\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(quality): Pin SDK version and add token validation (LOW priority)",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-11T17:00:25Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "00ab45756a53bdabe91a22813402dca076834d1c",
          "body": "# [2.6.0-next.9](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.8...v2.6.0-next.9) (2026-07-11)\n\n### Bug Fixes\n\n* **security:** Add input validation and fix error handling (MEDIUM priority) ([f1cc4d6](https://github.com/inneropen/marvin-cli/commit/f1cc4d6c5c44e19047d95743ca11c80a2c3b863d))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.9 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-11T16:54:25Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "f1cc4d6c5c44e19047d95743ca11c80a2c3b863d",
          "body": "…iority)\n\nMEDIUM-priority security improvements addressing 6 vulnerabilities:\n\n1. Path validation on --file option\n   - Validate file exists and is not a directory\n   - Warn when reading from sensitive paths (SSH keys, credentials)\n   - Prevent path traversal in automation scenarios\n\n2. Input valida\n[…]\nNew utilities:\n- src/shared/validation.ts - Comprehensive validation functions\n\nFiles changed: 9 (2 new, 7 modified)\nRisk level: MEDIUM → LOW\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(security): Add input validation and fix error handling (MEDIUM pr…",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-11T16:54:03Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "06199021f39389d7cf131f8202a307efa08beb27",
          "body": "# [2.6.0-next.8](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.7...v2.6.0-next.8) (2026-07-11)\n\n### Bug Fixes\n\n* **security:** Eliminate critical credential exposure vulnerabilities ([a96a86a](https://github.com/inneropen/marvin-cli/commit/a96a86a4c7f4238828a14b6cbe05160daf5e0543)), closes [HI#priority](https://github.com/HI/issues/priority)",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.8 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-11T16:46:37Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "a96a86a4c7f4238828a14b6cbe05160daf5e0543",
          "body": "CRITICAL security fixes addressing 4 HIGH-priority vulnerabilities:\n\n1. Password visibility in shell history\n   - Removed password CLI flags from change-password command\n   - Implemented secure interactive prompts with hidden input\n   - Added password confirmation to prevent typos\n\n2. Token exposure\n[…]\nactively (use --from-stdin for scripts)\n\nFiles changed: 9 (3 new, 6 modified)\nRisk level: HIGH → LOW\nSecurity posture: Significantly improved\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix(security): Eliminate critical credential exposure vulnerabilities",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-11T16:45:40Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "abb1d9281dedeac652d84c8bf7c57286be6135df",
          "body": "## [2.6.1](https://github.com/inneropen/marvin-cli/compare/v2.6.0...v2.6.1) (2026-07-10)\n\n### Bug Fixes\n\n* Use PUBLISHING_TOKEN parameter name ([0acb56e](https://github.com/inneropen/marvin-cli/commit/0acb56e76a10b7b88f62f8324ef2e49f85849210))",
          "is_bot": false,
          "headline": "chore(release): 2.6.1 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-10T17:23:17Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "0acb56e76a10b7b88f62f8324ef2e49f85849210",
          "body": "Rename from GITHUB_TOKEN to PUBLISHING_TOKEN to avoid collision\nwith GitHub's reserved system token name.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Use PUBLISHING_TOKEN parameter name",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-10T17:22:53Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "87259d5be9a0644ee7dbab67839e592f93fba120",
          "body": "# [2.6.0-next.7](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.6...v2.6.0-next.7) (2026-07-10)\n\n### Bug Fixes\n\n* Use PUBLISHING_TOKEN parameter name ([1596319](https://github.com/inneropen/marvin-cli/commit/15963195450f0f2658d169abc55b44b10dc16db5))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.7 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-10T17:22:42Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "15963195450f0f2658d169abc55b44b10dc16db5",
          "body": "Rename from GITHUB_TOKEN to PUBLISHING_TOKEN to avoid collision\nwith GitHub's reserved system token name.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Use PUBLISHING_TOKEN parameter name",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-10T17:22:17Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "87a4827f5d06922aa5889dea743831b681f05005",
          "body": "# [2.6.0-next.6](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.5...v2.6.0-next.6) (2026-07-10)\n\n### Bug Fixes\n\n* Map INNEROPEN_IO_TOKEN to GITHUB_TOKEN parameter ([7f96be8](https://github.com/inneropen/marvin-cli/commit/7f96be883566fa00ee995e02b2846d5fa0825679))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.6 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-10T17:17:00Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "1cf235098decf42888c83b041c253c67229ed5c4",
          "body": "# [2.6.0](https://github.com/inneropen/marvin-cli/compare/v2.5.7...v2.6.0) (2026-07-10)\n\n### Bug Fixes\n\n* Add npm-production environment to release workflow ([c00de05](https://github.com/inneropen/marvin-cli/commit/c00de050fc79ae71d888a7c97fb1c58d1a180a96))\n* Adding deps to develop ([8a4fb5e](https:\n[…]\narvin-cli/commit/5f199faba7dc72d8caa2800fba75f7200ade118b))\n* Apply error handling to auth commands ([ce20a21](https://github.com/inneropen/marvin-cli/commit/ce20a2194f80117b002162912289e3b84f778ca8))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-10T17:16:56Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "7f96be883566fa00ee995e02b2846d5fa0825679",
          "body": "The reusable workflow expects GITHUB_TOKEN as a secret parameter.\nExplicitly map the org-level INNEROPEN_IO_TOKEN to this parameter\ninstead of using secrets: inherit.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Map INNEROPEN_IO_TOKEN to GITHUB_TOKEN parameter",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-10T17:16:31Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "954a7d54d5169ffd89d6049b6a2977b5a60b7163",
          "body": "# [2.6.0-next.5](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.4...v2.6.0-next.5) (2026-07-10)\n\n### Features\n\n* Add automatic publishing to inneropen.io ([4170b64](https://github.com/inneropen/marvin-cli/commit/4170b6479a97daa1bd9a83145df3e7f2ce205c76))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.5 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-10T16:53:24Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4170b6479a97daa1bd9a83145df3e7f2ce205c76",
          "body": "Add GitHub Actions workflow to automatically publish releases to the\nInnerOpen engineering site.\n\nWhen a release is published, this workflow:\n- Calls the reusable workflow in inneropen.io\n- Generates a markdown update with release details\n- Opens a pull request for human review\n- Labels it as automa\n[…]\nediting before publication and prevents duplicate posts\nfor the same version.\n\nRequires org-level secret INNEROPEN_IO_TOKEN to be configured.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Add automatic publishing to inneropen.io",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-10T16:52:42Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c1679c213ce664066873cfbd4005951901104437",
          "body": "- Add mkdocs.yml with Material theme configuration\n- Add 38 documentation files across 6 sections\n- Add Getting Started guides (installation, quickstart, configuration)\n- Add 20 command reference pages (Publishing, Platform, Admin APIs)\n- Add usage guides (filtering, scripting, pipelines, CI/CD)\n- A\n[…]\nping)\n- Add GitHub Actions workflow for auto-deployment\n- Add requirements.txt for mkdocs dependencies\n- Update package.json with docs scripts\n\nTotal: 38 Markdown files with complete CLI documentation",
          "is_bot": false,
          "headline": "docs: Add comprehensive mkdocs documentation structure",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-10T14:27:01Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "9776a0f2302d7572b47cd018f95cedd3b10bdfdc",
          "body": null,
          "is_bot": false,
          "headline": "docs: Add comprehensive mkdocs documentation structure",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-10T14:21:12Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "5a4e3d3959df4ef20b77f59d2ccbf67a28433cf8",
          "body": "# [2.6.0-next.4](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.3...v2.6.0-next.4) (2026-07-10)\n\n### Bug Fixes\n\n* Adding deps to develop ([8a4fb5e](https://github.com/inneropen/marvin-cli/commit/8a4fb5ed2c35d568e4fc50b2720ab2375b865546))\n\n### Features\n\n* Add Forms module to Platform CLI\n[…]\nli/commit/d5f52bad7ec1766ef3531f6026f03945a24bb449))\n* Add scheduled-tasks commands to platform CLI ([269523b](https://github.com/inneropen/marvin-cli/commit/269523b259e6161a5df11d755194792b6dc46fa5))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.4 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-10T02:48:11Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "8a4fb5ed2c35d568e4fc50b2720ab2375b865546",
          "body": null,
          "is_bot": false,
          "headline": "fix: Adding deps to develop",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-10T02:47:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "d5f52bad7ec1766ef3531f6026f03945a24bb449",
          "body": "- Implement forms CRUD commands (list, get, create, update, delete)\n- Add submissions command to view form submissions\n- Add Publishing API commands (get-published, submit)\n- Follow existing patterns from entries/collections modules",
          "is_bot": false,
          "headline": "feat: Add Forms module to Platform CLI",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-10T02:41:13Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "269523b259e6161a5df11d755194792b6dc46fa5",
          "body": "- Implement 9 commands: list, get, create, update, delete, run, history, types, stats\n- Support filtering (enabled-only, failed-only)\n- Add quick enable/disable shortcuts\n- Support all output formats (table, json, yaml, csv)\n\nPart of scheduled tasks feature - CLI integration",
          "is_bot": false,
          "headline": "feat: Add scheduled-tasks commands to platform CLI",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-10T02:01:02Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "85908be53637a26f0ddd9ea5b220dece4746a678",
          "body": "# [2.6.0-next.3](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.2...v2.6.0-next.3) (2026-07-10)\n\n### Bug Fixes\n\n* Update email templates commands to match CLI patterns and fix type errors ([0153166](https://github.com/inneropen/marvin-cli/commit/01531668691cc60f1610c728fe46c3594b79ca96))\n\n### Features\n\n* Add email templates commands to marvin-cli ([709097b](https://github.com/inneropen/marvin-cli/commit/709097b96aa8c38f6bfd4881286fb5e646a7c65e))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.3 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-10T00:52:34Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "01531668691cc60f1610c728fe46c3594b79ca96",
          "body": "…pe errors",
          "is_bot": false,
          "headline": "fix: Update email templates commands to match CLI patterns and fix ty…",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-10T00:52:06Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "709097b96aa8c38f6bfd4881286fb5e646a7c65e",
          "body": "Add complete email template management commands to the CLI platform group.\n\nCommands:\n- marvin platform email-templates list - List all templates\n- marvin platform email-templates get <id> - Get template details\n- marvin platform email-templates create - Create new template\n- marvin platform email-t\n[…]\nated into platform command group alongside other workspace resources.\nNote: CLI has pre-existing TypeScript errors to be resolved separately.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Add email templates commands to marvin-cli",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-10T00:40:44Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "532b0ce85e1df68f9e5b084061cb7fbd53abbb22",
          "body": "# [2.6.0-next.2](https://github.com/inneropen/marvin-cli/compare/v2.6.0-next.1...v2.6.0-next.2) (2026-07-09)\n\n### Bug Fixes\n\n* Call toJSON() on Collection objects before rendering ([c0942e6](https://github.com/inneropen/marvin-cli/commit/c0942e6d7d5ad56dda074c0bc411bebbea2cc6e7))\n* Complete error ha\n[…]\narvin-cli/commit/728fca38ff97685bd0ebf38506d07bee1d1416ec))\n* Apply error handling to auth commands ([ce20a21](https://github.com/inneropen/marvin-cli/commit/ce20a2194f80117b002162912289e3b84f778ca8))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.2 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-09T02:28:40Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "42fc506af94f33baf9422c1101f38600e1ab0ff8",
          "body": "The dependency value should just be \"develop\", not the full package@tag.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Use correct dist-tag format in CI workflows",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-09T02:28:17Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "eeb2909c539cb1386bf3b3cad271819c079a3ad6",
          "body": "Use full package@tag format: @inneropen/marvin-sdk@develop\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Correct SDK dependency format in CI workflows",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-09T02:27:58Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "f9e7c152d619a8c624fa0714ffc8f3cd22d6b87e",
          "body": "Replace file dependency with @develop dist-tag in CI workflows.\nThe file:../marvin-sdk dependency only works locally where both\nrepos are checked out side-by-side.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Update GitHub Actions workflows to use published SDK",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-09T02:27:08Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "91da5ea5a129b30c2b2f482c28a3de313a3661bf",
          "body": "- Import Marvin error classes from main SDK package instead of core/errors\n- Fix collection entries command to use proper column spec format\n- Display order, ID, title, status, and published date for entries\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Update error imports and collection entries display",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-09T02:22:01Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "728fca38ff97685bd0ebf38506d07bee1d1416ec",
          "body": "Display the order field as the first column when listing entries in a\ncollection, showing the sort_order from the collection relationship.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Add order column to collection-entries command output",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-09T02:10:08Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "1f630939e343535501162d87c52cb3d8376c4e58",
          "body": "Add CLI commands:\n- marvin collections entries <id> - list entries in order\n- marvin collections reorder <id> - bulk reorder entries\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Add collection entries and reorder commands",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-09T01:32:21Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "c0942e6d7d5ad56dda074c0bc411bebbea2cc6e7",
          "body": "Fixed issue where 'marvin publish collection <slug>' was returning\nthe full Collection class with private MarvinHttpClient instead of\njust the collection data.\n\nChanges:\n- Call toJSON() on Collection objects before rendering\n- Applied error handler to all publish commands\n- Collections, assets, and resources now properly serialize\n\nBefore: Returns Collection { http: MarvinHttpClient {...}, ... }\nAfter: Returns clean JSON data object\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Call toJSON() on Collection objects before rendering",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-09T00:19:29Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "709ebce160f8af887e022f940ee18244d5749d4f",
          "body": "Replaced remaining console.error calls with handleCommandError\nfor consistent error messaging.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Complete error handling migration in auth commands",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-09T00:11:24Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ce20a2194f80117b002162912289e3b84f778ca8",
          "body": "Updated login and logout commands to use the new error handler\nfor consistent, helpful error messages across all CLI commands.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Apply error handling to auth commands",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-09T00:11:15Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "b0f154b13c04430609df410821b9c481dbd5dc65",
          "body": "Created error-handler utility module with:\n- Specific handling for MarvinAuthError (401/403)\n- MarvinApiError with status code-based suggestions\n- MarvinConfigError for missing configuration\n- MarvinValidationError for input validation\n- Helpful suggestions for common errors:\n  * 401: Login expired \n[…]\nes.\nErrors now show:\n  ✗ Error Type (Status Code)\n  Helpful error message\n  Suggestions for resolution\n\nSupports DEBUG mode for stack traces.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Add comprehensive error handling for CLI commands",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-09T00:10:50Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "c53b38ad8eca2a9d0313467919b7ae737225bd6c",
          "body": "- Created event-log command group with 4 subcommands:\n  - list: Query events with filtering by type, entity, user, date range\n  - get: Get single event by ID\n  - entity: Get complete event history for an entity\n  - user: Get activity history for a user\n- Added alias \"events\" for \"event-log\"\n- Integrated with EventLogModule from SDK\n- Full support for all filter parameters and pagination\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Add event-log commands to Platform CLI",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T21:23:17Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "db2b54b600df8ba9d2627fef2e0b8a059b85ec36",
          "body": "Changed @inneropen/marvin-sdk dependency from pinned version\nto 'develop' tag to automatically track latest develop branch.\n\nThis ensures CLI always uses the latest SDK features from develop.",
          "is_bot": false,
          "headline": "chore: Update SDK dependency to use @develop tag",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T19:02:50Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "efed8ab053f716e6e710d2d7c670f18ba0d82006",
          "body": "Highlights the ability to create invitation tokens with specific workspace roles (VIEWER, AUTHOR, EDITOR, ADMIN, OWNER) using the --role parameter.",
          "is_bot": false,
          "headline": "docs: Add workspace roles feature to README",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T18:44:30Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "cb0357aa32c6840a429136133916bfbf1444fbc2",
          "body": "Updated to latest SDK with workspace role support.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: Update SDK to 1.11.0-next.1 (develop tag)",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T17:06:56Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "74cf439242229959794d276734832fe33c770c58",
          "body": "Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: Remove old publish workflow (replaced by semantic-release)",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T16:52:57Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "46f8678eeef4e597934eacb4cbeaffd432ce317c",
          "body": "# [2.6.0-next.1](https://github.com/inneropen/marvin-cli/compare/v2.5.7...v2.6.0-next.1) (2026-07-08)\n\n### Bug Fixes\n\n* Add npm-production environment to release workflow ([c00de05](https://github.com/inneropen/marvin-cli/commit/c00de050fc79ae71d888a7c97fb1c58d1a180a96))\n* Update Node.js version to \n[…]\n/commit/d7247ed92540196c9b529f08ca93b96ad333229f))\n\n### Features\n\n* Add semantic-release automation ([5f199fa](https://github.com/inneropen/marvin-cli/commit/5f199faba7dc72d8caa2800fba75f7200ade118b))",
          "is_bot": false,
          "headline": "chore(release): 2.6.0-next.1 [skip ci]",
          "author_name": "semantic-release-bot",
          "author_login": "semantic-release-bot",
          "committed_at": "2026-07-08T16:50:52Z",
          "body_truncated": true,
          "is_coding_agent": false
        },
        {
          "oid": "c00de050fc79ae71d888a7c97fb1c58d1a180a96",
          "body": "Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Add npm-production environment to release workflow",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T16:50:16Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "d7247ed92540196c9b529f08ca93b96ad333229f",
          "body": "Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Update Node.js version to 22.14 in release workflow",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T16:45:02Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "5f199faba7dc72d8caa2800fba75f7200ade118b",
          "body": "- Automatic versioning based on conventional commits\n- Publish @next tag from develop branch\n- Publish stable releases from main branch\n- Auto-generate CHANGELOG.md\n- Create GitHub releases with release notes\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Add semantic-release automation",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T16:42:20Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "f1b9035b83fc9db4e06948f0407b6c79ce7b4e52",
          "body": null,
          "is_bot": false,
          "headline": "2.5.7",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T16:37:11Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "4cfa4dcef7d0fbfa811728a5cafce7047c24ffb6",
          "body": "Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: Update SDK to 1.10.6 for workspace role support",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T16:36:26Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "0f3a7bb71081ab69a428944c1df6b197ed5935d8",
          "body": "- Added --role option to 'platform invites invite' command\n- Supports all workspace roles: VIEWER, AUTHOR, EDITOR, ADMIN, OWNER\n- Display workspace role in list and create outputs\n- Default role is EDITOR\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Add --role option to invites command",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T16:29:04Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "adff6333cf952224c1caa331bce1addec31378d2",
          "body": "Updates SDK to include fixed auth endpoints and registration schema.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: Bump to 2.5.6 with SDK 1.10.4",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T15:11:32Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "4e4ab7bdf3e11e033f76b50efd5bca5497c769ed",
          "body": "Updates SDK to fix invitation URL generation (now uses frontend URL).\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: Bump to 2.5.5 with SDK 1.10.3",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T14:57:11Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "057b4f77806a2e6d9e4466c865a29e733ec7775f",
          "body": "Co-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: Bump to 2.5.4",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T14:48:40Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ded989ce7e4ac402f612c40b00fc9b4e754d6a1b",
          "body": "Fixes 'Unknown' creation date by checking both camelCase and snake_case\nfield names from API response.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "fix: Handle both createdAt and created_at in invite token display",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T14:48:30Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "ecd671ab5d9e63c635dc097cb8d57728f241f2ae",
          "body": "Updates to marvin-sdk@next (v1.10.2) which includes invites API.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "chore: Bump to 2.5.3 for SDK 1.10.2 compatibility",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T14:41:09Z",
          "body_truncated": false,
          "is_coding_agent": true
        },
        {
          "oid": "579fa1687c3d9ca97c25803ec7d3398eade3d471",
          "body": "New commands under 'marvin platform invites':\n- list - Show all invitation tokens\n- invite [--email] - Create token and optionally send email\n  - Without --email: just shows the link to copy/paste\n  - With --email: sends email and shows link as backup\n- link --token - Generate URL from existing toke\n[…]\nexample.com  # Send email\n  marvin platform invites list\n  marvin platform invites revoke --id <id> --yes\n\nTested and working with local API.\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Add platform invites CLI commands",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T14:27:41Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "537fcdbd312cce430b85825ed86d4786f22a14b1",
          "body": "New commands under 'marvin platform invites':\n- list - Show all invitation tokens\n- create - Create a new token (shows link)\n- invite [--email] - Create token and optionally send email\n  - Without --email: just shows the link to copy/paste\n  - With --email: sends email and shows link as backup\n- lin\n[…]\nlatform invites invite --email user@example.com  # Send email\n  marvin platform invites list\n  marvin platform invites revoke --id <id> --yes\n\nCo-Authored-By: Claude Sonnet 4.5 <noreply@anthropic.com>",
          "is_bot": false,
          "headline": "feat: Add platform invites CLI commands",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T14:13:39Z",
          "body_truncated": true,
          "is_coding_agent": true
        },
        {
          "oid": "6c05ab29291aa4fe89b4c0349aabdfec231a9d61",
          "body": null,
          "is_bot": false,
          "headline": "Merge main into develop - take main version for conflicts",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T08:16:32Z",
          "body_truncated": false,
          "is_coding_agent": false
        },
        {
          "oid": "7ce90ef44a76e9c18892945926afbc7035d090b3",
          "body": null,
          "is_bot": false,
          "headline": "chore: Bump version to 2.2.2",
          "author_name": "Jared Mash",
          "author_login": null,
          "committed_at": "2026-07-08T04:31:55Z",
          "body_truncated": false,
          "is_coding_agent": false
        }
      ],
      "releases_count": 26,
      "commits_last_year": 148,
      "latest_release_at": "2026-07-19T00:30:39Z",
      "latest_release_tag": "v2.7.0",
      "releases_from_tags": false,
      "days_since_last_push": 0,
      "active_weeks_last_year": 3,
      "days_since_latest_release": 5,
      "mean_days_between_releases": 0.5
    },
    "community": {
      "has_readme": true,
      "has_license": false,
      "has_description": true,
      "has_contributing": true,
      "health_percentage": 62,
      "has_issue_template": false,
      "has_code_of_conduct": false,
      "has_pull_request_template": false
    },
    "ecosystem": {
      "packages": [
        {
          "name": "@inneropen/marvin-cli",
          "exists": true,
          "license": "MIT",
          "keywords": [
            "marvin",
            "cms",
            "cli",
            "publishing",
            "headless-cms"
          ],
          "ecosystem": "npm",
          "matches_repo": true,
          "registry_url": "https://www.npmjs.com/package/@inneropen/marvin-cli",
          "is_deprecated": false,
          "latest_version": "2.7.0",
          "repository_url": "https://github.com/inneropen/marvin-cli",
          "versions_count": 47,
          "total_downloads": null,
          "dependents_count": null,
          "deprecation_note": null,
          "maintainers_count": 1,
          "monthly_downloads": 6692,
          "first_published_at": "2026-07-07T00:31:28.888000Z",
          "latest_published_at": "2026-07-19T00:30:38.987000Z",
          "latest_version_yanked": null,
          "days_since_latest_publish": 5
        }
      ]
    },
    "popularity": {
      "forks": 0,
      "stars": 0,
      "watchers": 0,
      "fork_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_forks": 0
      },
      "star_history": {
        "days": [],
        "complete": true,
        "collected": 0,
        "total_stars": 0,
        "collected_at": null
      },
      "open_issues_and_prs": 0
    },
    "ai_readiness": {
      "has_nix": false,
      "example_dirs": [
        "examples"
      ],
      "has_llms_txt": false,
      "has_dockerfile": false,
      "has_mcp_signal": false,
      "bootstrap_files": [],
      "api_schema_files": [],
      "has_devcontainer": false,
      "typecheck_configs": [
        "tsconfig.json"
      ],
      "toolchain_manifests": [],
      "largest_source_bytes": 13750,
      "source_files_sampled": 67,
      "oversized_source_files": 0,
      "agent_instruction_files": [],
      "agent_instruction_max_bytes": null
    },
    "dependencies": {
      "manifests": [
        "package.json",
        "requirements.txt"
      ],
      "advisories": {
        "error": null,
        "scope": "published_package",
        "source": "osv",
        "findings": [],
        "collected": true,
        "malicious": [],
        "truncated": false,
        "by_severity": {},
        "advisory_count": 0,
        "affected_count": 0,
        "assessed_count": 5,
        "malicious_count": 0,
        "assessed_package": "npm:@inneropen/marvin-cli@2.7.0",
        "unassessed_count": 0,
        "direct_affected_count": 0
      },
      "ecosystems": [
        "npm",
        "pypi"
      ],
      "dependencies": [
        {
          "name": "@inneropen/marvin-sdk",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^3.2.0-next.23"
        },
        {
          "name": "chalk",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^5.6.2"
        },
        {
          "name": "commander",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^12.1.0"
        },
        {
          "name": "dotenv",
          "manifest": "package.json",
          "ecosystem": "npm",
          "version_constraint": "^16.4.5"
        }
      ],
      "all_dependencies": {
        "error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
        "source": null,
        "packages": [],
        "collected": false,
        "truncated": false,
        "total_count": null,
        "direct_count": null,
        "indirect_count": null
      }
    },
    "maintainership": {
      "issues": {
        "open_prs": 0,
        "merged_prs": 1,
        "open_issues": 0,
        "closed_ratio": null,
        "closed_issues": 0,
        "closed_unmerged_prs": 0
      },
      "bus_factor": 1,
      "bot_contributors": 0,
      "top_contributors": [
        {
          "type": "User",
          "login": "semantic-release-bot",
          "commits": 26,
          "avatar_url": "https://avatars.githubusercontent.com/u/32174276?v=4"
        },
        {
          "type": "User",
          "login": "jmashburn",
          "commits": 7,
          "avatar_url": "https://avatars.githubusercontent.com/u/231223?v=4"
        }
      ],
      "contributors_sampled": 2,
      "top_contributor_share": 0.788
    },
    "quality_signals": {
      "has_ci": true,
      "has_tests": true,
      "ci_workflows": [
        "docs.yml",
        "publish-release.yml",
        "release.yml",
        "test.yml"
      ],
      "has_docs_dir": true,
      "linter_configs": [],
      "has_editorconfig": false,
      "has_linter_config": false,
      "has_precommit_config": false
    },
    "security_signals": {
      "lockfiles": [
        "package-lock.json"
      ],
      "scorecard": {
        "checks": [
          {
            "name": "Binary-Artifacts",
            "score": 10,
            "reason": "no binaries found in the repo",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
          },
          {
            "name": "Branch-Protection",
            "score": 1,
            "reason": "branch protection is not maximal on development and all release branches",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
          },
          {
            "name": "CI-Tests",
            "score": 10,
            "reason": "1 out of 1 merged PRs checked by a CI test -- score normalized to 10",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
          },
          {
            "name": "CII-Best-Practices",
            "score": 0,
            "reason": "no effort to earn an OpenSSF best practices badge detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
          },
          {
            "name": "Code-Review",
            "score": 0,
            "reason": "Found 0/2 approved changesets -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
          },
          {
            "name": "Contributors",
            "score": 6,
            "reason": "project has 2 contributing companies or organizations -- score normalized to 6",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
          },
          {
            "name": "Dangerous-Workflow",
            "score": 10,
            "reason": "no dangerous workflow patterns detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
          },
          {
            "name": "Dependency-Update-Tool",
            "score": 0,
            "reason": "no update tool detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
          },
          {
            "name": "Fuzzing",
            "score": 0,
            "reason": "project is not fuzzed",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
          },
          {
            "name": "License",
            "score": 0,
            "reason": "license file not detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
          },
          {
            "name": "Maintained",
            "score": 0,
            "reason": "project was created within the last 90 days. Please review its contents carefully",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
          },
          {
            "name": "Packaging",
            "score": 10,
            "reason": "packaging workflow detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
          },
          {
            "name": "Pinned-Dependencies",
            "score": 1,
            "reason": "dependency not pinned by hash detected -- score normalized to 1",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
          },
          {
            "name": "SAST",
            "score": 0,
            "reason": "SAST tool is not run on all commits -- score normalized to 0",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
          },
          {
            "name": "Security-Policy",
            "score": 10,
            "reason": "security policy file detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
          },
          {
            "name": "Signed-Releases",
            "score": null,
            "reason": "no releases found",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
          },
          {
            "name": "Token-Permissions",
            "score": 0,
            "reason": "detected GitHub workflow tokens with excessive permissions",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
          },
          {
            "name": "Vulnerabilities",
            "score": 10,
            "reason": "0 existing vulnerabilities detected",
            "documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
          }
        ],
        "commit": "b3def4969ef40e69427fc2377777bb6bb4e24d60",
        "ran_at": "2026-07-24T13:15:21Z",
        "aggregate_score": 4.1,
        "scorecard_version": "v5.5.0"
      },
      "has_codeql_workflow": false,
      "has_security_policy": true,
      "has_dependabot_config": false
    },
    "contribution_flow": {
      "collected": true,
      "ci_last_run_at": null,
      "oldest_open_prs": [],
      "last_merged_pr_at": "2026-07-19T00:30:05Z",
      "ci_last_conclusion": null,
      "oldest_open_issues": []
    }
  },
  "config": {
    "disabled_metrics": [],
    "disabled_categories": [],
    "disabled_components": {}
  },
  "source": {
    "url": "https://github.com/InnerOpen/marvin-cli",
    "host": "github.com",
    "name": "marvin-cli",
    "owner": "InnerOpen"
  },
  "metrics": {
    "overall": {
      "key": "overall",
      "band": "moderate",
      "name": "Overall health",
      "note": null,
      "notes": [],
      "value": 58,
      "inputs": {
        "security": 53,
        "vitality": 74,
        "community": 32,
        "governance": 54,
        "engineering": 71
      },
      "components": []
    },
    "categories": [
      {
        "key": "vitality",
        "band": "good",
        "name": "Vitality",
        "value": 74,
        "weight": 0.22,
        "metrics": [
          {
            "key": "development_activity",
            "band": "moderate",
            "name": "Development activity",
            "note": null,
            "notes": [],
            "value": 56,
            "inputs": {
              "commits_last_year": 148,
              "human_commit_share": 1,
              "days_since_last_push": 0,
              "active_weeks_last_year": 3
            },
            "components": [
              {
                "key": "push_recency",
                "name": "Push recency",
                "detail": "last push 0 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "push_recency",
                    "params": {
                      "days": 0
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_cadence",
                "name": "Commit cadence",
                "detail": "3/52 weeks with commits",
                "points": 2.1,
                "status": "partial",
                "details": [
                  {
                    "code": "commit_cadence_weeks",
                    "params": {
                      "weeks": 3
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "commit_volume",
                "name": "Commit volume",
                "detail": "148 commits in the last year",
                "points": 18,
                "status": "met",
                "details": [
                  {
                    "code": "commits_last_year",
                    "params": {
                      "count": 148
                    }
                  }
                ],
                "max_points": 18
              },
              {
                "key": "openssf_scorecard_maintained",
                "name": "OpenSSF Scorecard: Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "release_discipline",
            "band": "excellent",
            "name": "Release discipline",
            "note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "openssf_scorecard_signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "releases_count": 26,
              "latest_release_tag": "v2.7.0",
              "releases_from_tags": false,
              "days_since_latest_release": 5,
              "mean_days_between_releases": 0.5
            },
            "components": [
              {
                "key": "ships_releases",
                "name": "Ships releases",
                "detail": "26 releases published",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "releases_published",
                    "params": {
                      "count": 26
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "release_recency",
                "name": "Release recency",
                "detail": "latest release 5 days ago",
                "points": 36,
                "status": "met",
                "details": [
                  {
                    "code": "release_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 36
              },
              {
                "key": "release_cadence",
                "name": "Release cadence",
                "detail": "a release every ~0.5 days",
                "points": 27,
                "status": "met",
                "details": [
                  {
                    "code": "release_cadence",
                    "params": {
                      "gap": 0.5
                    }
                  }
                ],
                "max_points": 27
              },
              {
                "key": "openssf_scorecard_signed_releases",
                "name": "OpenSSF Scorecard: Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 10
              }
            ]
          },
          {
            "key": "abandonment",
            "band": "excellent",
            "name": "Abandonment",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "cap": null,
              "state": "unverified",
              "guards": [],
              "signals": [],
              "red_flag": false,
              "multiplier_pct": 100,
              "declared_reason": null,
              "unverified_reason": "repository_too_young",
              "unanswered_open_prs": null,
              "unanswered_open_issues": null,
              "days_since_last_merged_pr": null,
              "days_since_last_human_commit": null,
              "days_since_last_human_commit_is_floor": false
            },
            "components": [
              {
                "key": "project_is_still_maintained",
                "name": "Project is still maintained",
                "detail": "maintenance record not established from the collected data",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "abandonment_unverified",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Is the project alive — is code being written and are releases shipping?"
      },
      {
        "key": "community",
        "band": "at_risk",
        "name": "Community & Adoption",
        "value": 32,
        "weight": 0.18,
        "metrics": [
          {
            "key": "popularity",
            "band": "critical",
            "name": "Popularity & adoption",
            "note": null,
            "notes": [],
            "value": 1,
            "inputs": {
              "forks": 0,
              "stars": 0,
              "watchers": 0,
              "growth_state": "unverified",
              "growth_factor_pct": 100,
              "growth_unverified_reason": "no_history"
            },
            "components": [
              {
                "key": "stars",
                "name": "Stars",
                "detail": "0 stars",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "stars",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 60
              },
              {
                "key": "forks",
                "name": "Forks",
                "detail": "0 forks",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "forks",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "watchers",
                "name": "Watchers",
                "detail": "0 watchers",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "watchers",
                    "params": {
                      "count": 0
                    }
                  }
                ],
                "max_points": 15
              }
            ]
          },
          {
            "key": "community_health",
            "band": "at_risk",
            "name": "Community health",
            "note": null,
            "notes": [],
            "value": 45,
            "inputs": {
              "has_readme": true,
              "has_license": false,
              "has_contributing": true,
              "has_issue_template": false,
              "has_code_of_conduct": false,
              "has_pull_request_template": false
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 22.5,
                "status": "met",
                "details": [],
                "max_points": 22.5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "no license file detected",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "license_absent",
                    "params": {}
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributing_guide",
                "name": "CONTRIBUTING guide",
                "detail": null,
                "points": 18,
                "status": "met",
                "details": [],
                "max_points": 18
              },
              {
                "key": "code_of_conduct",
                "name": "Code of conduct",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 13.5
              },
              {
                "key": "issue_template",
                "name": "Issue template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.2
              },
              {
                "key": "pr_template",
                "name": "PR template",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.3
              }
            ]
          },
          {
            "key": "ecosystem_adoption",
            "band": "moderate",
            "name": "Ecosystem adoption (downloads)",
            "note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "registry_dependents"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 64,
            "inputs": {
              "packages": [
                "@inneropen/marvin-cli"
              ],
              "dependents": null,
              "ecosystems": "npm",
              "total_downloads": null,
              "monthly_downloads": 6692
            },
            "components": [
              {
                "key": "monthly_downloads",
                "name": "Monthly downloads",
                "detail": "6,692 downloads/month across npm",
                "points": 51,
                "status": "partial",
                "details": [
                  {
                    "code": "downloads_monthly",
                    "params": {
                      "count": 6692,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 80
              },
              {
                "key": "registry_dependents",
                "name": "Registry dependents",
                "detail": "not reported by this ecosystem",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "not_reported_by_this_ecosystem",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
      },
      {
        "key": "governance",
        "band": "moderate",
        "name": "Sustainability & Governance",
        "value": 54,
        "weight": 0.24,
        "metrics": [
          {
            "key": "maintainer_resilience",
            "band": "critical",
            "name": "Maintainer resilience (bus factor)",
            "note": null,
            "notes": [],
            "value": 22,
            "inputs": {
              "bus_factor": 1,
              "contributors_sampled": 2,
              "top_contributor_share": 0.788
            },
            "components": [
              {
                "key": "bus_factor",
                "name": "Bus factor",
                "detail": "1 contributor(s) cover half of all commits",
                "points": 9,
                "status": "partial",
                "details": [
                  {
                    "code": "bus_factor",
                    "params": {
                      "count": 1
                    }
                  }
                ],
                "max_points": 54
              },
              {
                "key": "commit_distribution",
                "name": "Commit distribution",
                "detail": "top contributor authored 79% of commits",
                "points": 4.8,
                "status": "partial",
                "details": [
                  {
                    "code": "top_contributor_share",
                    "params": {
                      "share": 79
                    }
                  }
                ],
                "max_points": 22.5
              },
              {
                "key": "contributor_breadth",
                "name": "Contributor breadth",
                "detail": "2 contributors",
                "points": 2.7,
                "status": "partial",
                "details": [
                  {
                    "code": "contributors_sampled",
                    "params": {
                      "count": 2
                    }
                  }
                ],
                "max_points": 13.5
              },
              {
                "key": "openssf_scorecard_contributors",
                "name": "OpenSSF Scorecard: Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 6,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "responsiveness",
            "band": "good",
            "name": "Issue & PR responsiveness",
            "note": "Excluded from scoring (no data or not applicable): Issue resolution. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "issue_resolution"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 72,
            "inputs": {
              "merged_prs": 1,
              "open_issues": 0,
              "closed_issues": 0,
              "issue_closed_ratio": null,
              "closed_unmerged_prs": 0
            },
            "components": [
              {
                "key": "issue_resolution",
                "name": "Issue resolution",
                "detail": "no issues or no data",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_issues_or_data",
                    "params": {}
                  }
                ],
                "max_points": 46.75
              },
              {
                "key": "pr_acceptance",
                "name": "PR acceptance",
                "detail": "1/1 decided PRs merged",
                "points": 38.2,
                "status": "met",
                "details": [
                  {
                    "code": "decided_prs_merged",
                    "params": {
                      "merged": 1,
                      "decided": 1
                    }
                  }
                ],
                "max_points": 38.25
              },
              {
                "key": "openssf_scorecard_code_review",
                "name": "OpenSSF Scorecard: Code-Review",
                "detail": "Found 0/2 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              }
            ]
          },
          {
            "key": "stewardship",
            "band": "at_risk",
            "name": "Ownership & stewardship",
            "note": null,
            "notes": [],
            "value": 37,
            "inputs": {
              "followers": 0,
              "owner_type": "Organization",
              "is_verified": null,
              "owner_login": "InnerOpen",
              "public_repos": 8,
              "account_age_days": 31
            },
            "components": [
              {
                "key": "ownership_backing",
                "name": "Ownership backing",
                "detail": "organization-owned",
                "points": 30,
                "status": "met",
                "details": [
                  {
                    "code": "owner_organization",
                    "params": {}
                  }
                ],
                "max_points": 30
              },
              {
                "key": "verified_domain",
                "name": "Verified domain",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "owner_reach",
                "name": "Owner reach",
                "detail": "0 followers of InnerOpen",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "owner_followers",
                    "params": {
                      "count": 0,
                      "login": "InnerOpen"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "track_record",
                "name": "Track record",
                "detail": "8 public repos, account ~0 yr old",
                "points": 7.1,
                "status": "partial",
                "details": [
                  {
                    "code": "public_repos",
                    "params": {
                      "count": 8
                    }
                  },
                  {
                    "code": "account_age_years",
                    "params": {
                      "years": 0
                    }
                  }
                ],
                "max_points": 25
              }
            ]
          },
          {
            "key": "package_maintenance",
            "band": "excellent",
            "name": "Package maintenance",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "packages": [
                "@inneropen/marvin-cli"
              ],
              "ecosystems": "npm",
              "any_deprecated": false,
              "min_days_since_publish": 5
            },
            "components": [
              {
                "key": "published_resolvable",
                "name": "Published & resolvable",
                "detail": "1 package(s) on npm",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "packages_published",
                    "params": {
                      "count": 1,
                      "ecosystems": "npm"
                    }
                  }
                ],
                "max_points": 25
              },
              {
                "key": "publish_recency",
                "name": "Publish recency",
                "detail": "latest publish 5 days ago",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "publish_recency",
                    "params": {
                      "days": 5
                    }
                  }
                ],
                "max_points": 35
              },
              {
                "key": "version_history",
                "name": "Version history",
                "detail": "47 published versions",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "published_versions",
                    "params": {
                      "count": 47
                    }
                  }
                ],
                "max_points": 20
              },
              {
                "key": "not_deprecated",
                "name": "Not deprecated",
                "detail": "active, not deprecated or yanked",
                "points": 20,
                "status": "met",
                "details": [
                  {
                    "code": "package_not_deprecated",
                    "params": {}
                  }
                ],
                "max_points": 20
              }
            ]
          }
        ],
        "description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
      },
      {
        "key": "engineering",
        "band": "good",
        "name": "Engineering Quality",
        "value": 71,
        "weight": 0.2,
        "metrics": [
          {
            "key": "engineering_practices",
            "band": "moderate",
            "name": "Engineering practices",
            "note": null,
            "notes": [],
            "value": 68,
            "inputs": {
              "has_ci": true,
              "has_tests": true,
              "has_editorconfig": false,
              "has_linter_config": false,
              "has_precommit_config": false
            },
            "components": [
              {
                "key": "ci_workflows",
                "name": "CI workflows",
                "detail": "4 workflow(s)",
                "points": 24,
                "status": "met",
                "details": [
                  {
                    "code": "ci_workflows",
                    "params": {
                      "count": 4
                    }
                  }
                ],
                "max_points": 24
              },
              {
                "key": "tests_present",
                "name": "Tests present",
                "detail": null,
                "points": 24,
                "status": "met",
                "details": [],
                "max_points": 24
              },
              {
                "key": "linter_config",
                "name": "Linter config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 16
              },
              {
                "key": "pre_commit_hooks",
                "name": "Pre-commit hooks",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 9.6
              },
              {
                "key": "editorconfig",
                "name": ".editorconfig",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 6.4
              },
              {
                "key": "openssf_scorecard_ci_tests",
                "name": "OpenSSF Scorecard: CI-Tests",
                "detail": "1 out of 1 merged PRs checked by a CI test -- score normalized to 10",
                "points": 20,
                "status": "met",
                "details": [],
                "max_points": 20
              }
            ]
          },
          {
            "key": "documentation",
            "band": "good",
            "name": "Documentation",
            "note": null,
            "notes": [],
            "value": 75,
            "inputs": {
              "topics": [],
              "has_wiki": true,
              "homepage": null,
              "has_readme": true,
              "has_docs_dir": true,
              "has_description": true
            },
            "components": [
              {
                "key": "readme",
                "name": "README",
                "detail": null,
                "points": 30,
                "status": "met",
                "details": [],
                "max_points": 30
              },
              {
                "key": "documentation_directory",
                "name": "Documentation directory",
                "detail": null,
                "points": 25,
                "status": "met",
                "details": [],
                "max_points": 25
              },
              {
                "key": "documentation_homepage_site",
                "name": "Documentation / homepage site",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "repository_description",
                "name": "Repository description",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "topics",
                "name": "Topics",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 10
              },
              {
                "key": "wiki",
                "name": "Wiki",
                "detail": null,
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              }
            ]
          }
        ],
        "description": "Are baseline engineering and documentation practices in place?"
      },
      {
        "key": "security",
        "band": "moderate",
        "name": "Security",
        "value": 53,
        "weight": 0.16,
        "metrics": [
          {
            "key": "security_posture",
            "band": "at_risk",
            "name": "Security posture",
            "note": "Excluded from scoring (no data or not applicable): Signed-Releases. Remaining weights renormalized.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "signed_releases"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              }
            ],
            "value": 41,
            "inputs": {
              "source": "openssf_scorecard",
              "checks_evaluated": 17,
              "scorecard_version": "v5.5.0",
              "checks_inconclusive": 1,
              "scorecard_aggregate": 4.1
            },
            "components": [
              {
                "key": "binary_artifacts",
                "name": "Binary-Artifacts",
                "detail": "no binaries found in the repo",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "branch_protection",
                "name": "Branch-Protection",
                "detail": "branch protection is not maximal on development and all release branches",
                "points": 0.8,
                "status": "partial",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "ci_tests",
                "name": "CI-Tests",
                "detail": "1 out of 1 merged PRs checked by a CI test -- score normalized to 10",
                "points": 2.5,
                "status": "met",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "cii_best_practices",
                "name": "CII-Best-Practices",
                "detail": "no effort to earn an OpenSSF best practices badge detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "code_review",
                "name": "Code-Review",
                "detail": "Found 0/2 approved changesets -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "contributors",
                "name": "Contributors",
                "detail": "project has 2 contributing companies or organizations -- score normalized to 6",
                "points": 1.5,
                "status": "partial",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "dangerous_workflow",
                "name": "Dangerous-Workflow",
                "detail": "no dangerous workflow patterns detected",
                "points": 10,
                "status": "met",
                "details": [],
                "max_points": 10
              },
              {
                "key": "dependency_update_tool",
                "name": "Dependency-Update-Tool",
                "detail": "no update tool detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "fuzzing",
                "name": "Fuzzing",
                "detail": "project is not fuzzed",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "license",
                "name": "License",
                "detail": "license file not detected",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 2.5
              },
              {
                "key": "maintained",
                "name": "Maintained",
                "detail": "project was created within the last 90 days. Please review its contents carefully",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "packaging",
                "name": "Packaging",
                "detail": "packaging workflow detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "pinned_dependencies",
                "name": "Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 1",
                "points": 0.5,
                "status": "partial",
                "details": [],
                "max_points": 5
              },
              {
                "key": "sast",
                "name": "SAST",
                "detail": "SAST tool is not run on all commits -- score normalized to 0",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 5
              },
              {
                "key": "security_policy",
                "name": "Security-Policy",
                "detail": "security policy file detected",
                "points": 5,
                "status": "met",
                "details": [],
                "max_points": 5
              },
              {
                "key": "signed_releases",
                "name": "Signed-Releases",
                "detail": "no releases found",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "no_data",
                    "params": {}
                  }
                ],
                "max_points": 7.5
              },
              {
                "key": "token_permissions",
                "name": "Token-Permissions",
                "detail": "detected GitHub workflow tokens with excessive permissions",
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 7.5
              },
              {
                "key": "vulnerabilities",
                "name": "Vulnerabilities",
                "detail": "0 existing vulnerabilities detected",
                "points": 7.5,
                "status": "met",
                "details": [],
                "max_points": 7.5
              }
            ]
          },
          {
            "key": "dependency_advisories",
            "band": "excellent",
            "name": "Dependency advisories",
            "note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the npm:@inneropen/marvin-cli@2.7.0 runtime dependency closure — what installing the published package pulls in — 5 packages. Reachability is not analyzed.",
            "notes": [
              {
                "code": "excluded_no_data",
                "params": {
                  "components": [
                    "no_advisories_left_outstanding"
                  ]
                }
              },
              {
                "code": "weights_renormalized",
                "params": {}
              },
              {
                "code": "advisories_scope_published",
                "params": {
                  "package": "npm:@inneropen/marvin-cli@2.7.0",
                  "assessed": 5
                }
              },
              {
                "code": "advisories_reachability",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "source": "osv",
              "advisories": 0,
              "affected_packages": 0,
              "assessed_packages": 5,
              "unassessed_packages": 0,
              "affected_by_severity": "none",
              "direct_affected_packages": 0
            },
            "components": [
              {
                "key": "direct_dependencies_free_of_known_advisories",
                "name": "Direct dependencies free of known advisories",
                "detail": "no direct dependency carries a known advisory",
                "points": 35,
                "status": "met",
                "details": [
                  {
                    "code": "no_direct_advisories",
                    "params": {}
                  }
                ],
                "max_points": 35
              },
              {
                "key": "indirect_dependencies_free_of_known_advisories",
                "name": "Indirect dependencies free of known advisories",
                "detail": "no indirect dependency carries a known advisory",
                "points": 25,
                "status": "met",
                "details": [
                  {
                    "code": "no_indirect_advisories",
                    "params": {}
                  }
                ],
                "max_points": 25
              },
              {
                "key": "no_advisories_left_outstanding",
                "name": "No advisories left outstanding",
                "detail": "no advisory carries a publication date",
                "points": 0,
                "status": "excluded",
                "details": [
                  {
                    "code": "advisories_no_publication_date",
                    "params": {}
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "malicious_dependencies",
            "band": "excellent",
            "name": "Malicious dependencies",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "source": "osv",
              "meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
              "packages": [],
              "red_flag": false,
              "assessed_packages": 5,
              "malicious_packages": 0,
              "direct_malicious_packages": 0,
              "withdrawn_malicious_packages": 0,
              "installable_malicious_packages": 0
            },
            "components": [
              {
                "key": "no_dependency_reported_as_a_malicious_package",
                "name": "No dependency reported as a malicious package",
                "detail": "no dependency is reported as a malicious package",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "no_malicious_dependencies",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          },
          {
            "key": "high_risk_jurisdiction_exposure",
            "band": "excellent",
            "name": "High-Risk Jurisdiction Exposure",
            "note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
            "notes": [
              {
                "code": "jurisdiction_evidence_limits",
                "params": {}
              }
            ],
            "value": 100,
            "inputs": {
              "meaning": "self-published location evidence; not nationality or citizenship",
              "red_flag": false,
              "exposures": [],
              "policy_countries": [
                "Russia",
                "Iran",
                "North Korea"
              ],
              "review_only_matches": 0,
              "assessed_self_published_locations": 3
            },
            "components": [
              {
                "key": "policy_exposure_multiplier",
                "name": "Policy exposure multiplier",
                "detail": "no confirmed policy-scope location match",
                "points": 100,
                "status": "met",
                "details": [
                  {
                    "code": "jurisdiction_no_match",
                    "params": {}
                  }
                ],
                "max_points": 100
              }
            ]
          }
        ],
        "description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
      },
      {
        "key": "ai_readiness",
        "band": "moderate",
        "name": "AI Readiness",
        "value": 55,
        "weight": 0,
        "metrics": [
          {
            "key": "ai_agent_context",
            "band": "at_risk",
            "name": "Agent context & guidance",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "has_llms_txt": false,
              "legible_history_share": 0.94,
              "agent_instruction_files": [],
              "agent_instruction_max_bytes": null
            },
            "components": [
              {
                "key": "agent_instructions",
                "name": "Agent instructions",
                "detail": "no CLAUDE.md / AGENTS.md / editor rules",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_agent_instructions",
                    "params": {}
                  }
                ],
                "max_points": 45
              },
              {
                "key": "machine_readable_docs_llms_txt",
                "name": "Machine-readable docs (llms.txt)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 15
              },
              {
                "key": "legible_commit_history",
                "name": "Legible commit history",
                "detail": "94 of 100 human commits state their intent (structured subject or explanatory body)",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "legible_history",
                    "params": {
                      "legible": 94,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          },
          {
            "key": "ai_verify_loop",
            "band": "moderate",
            "name": "Verify loop (build / test / typecheck)",
            "note": null,
            "notes": [],
            "value": 54,
            "inputs": {
              "has_nix": false,
              "has_tests": true,
              "lockfiles": [
                "package-lock.json"
              ],
              "has_dockerfile": false,
              "typed_language": true,
              "bootstrap_files": [],
              "has_devcontainer": false,
              "has_linter_config": false,
              "typecheck_configs": [
                "tsconfig.json"
              ],
              "agent_commit_share": 0.47,
              "toolchain_manifests": [],
              "dependency_bot_commit_share": 0
            },
            "components": [
              {
                "key": "one_command_bootstrap",
                "name": "One-command bootstrap",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 18
              },
              {
                "key": "automated_tests",
                "name": "Automated tests",
                "detail": null,
                "points": 22,
                "status": "met",
                "details": [],
                "max_points": 22
              },
              {
                "key": "lint_format_config",
                "name": "Lint / format config",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 11
              },
              {
                "key": "static_type_checking",
                "name": "Static type checking",
                "detail": "tsconfig.json",
                "points": 11,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "tsconfig.json"
                    }
                  }
                ],
                "max_points": 11
              },
              {
                "key": "reproducible_environment",
                "name": "Reproducible environment",
                "detail": "lockfile",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "lockfile"
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "demonstrated_agent_practice",
                "name": "Demonstrated agent practice",
                "detail": "47 of the last 100 commits agent-authored or agent-credited",
                "points": 10,
                "status": "met",
                "details": [
                  {
                    "code": "agent_authored_commits",
                    "params": {
                      "count": 47,
                      "sampled": 100
                    }
                  }
                ],
                "max_points": 10
              },
              {
                "key": "automated_maintenance",
                "name": "Automated maintenance",
                "detail": "no automated dependency updates observed",
                "points": 0,
                "status": "missed",
                "details": [
                  {
                    "code": "no_dependency_automation",
                    "params": {}
                  }
                ],
                "max_points": 8
              },
              {
                "key": "openssf_scorecard_pinned_dependencies",
                "name": "OpenSSF Scorecard: Pinned-Dependencies",
                "detail": "dependency not pinned by hash detected -- score normalized to 1",
                "points": 1,
                "status": "partial",
                "details": [],
                "max_points": 10
              }
            ]
          },
          {
            "key": "ai_code_legibility",
            "band": "excellent",
            "name": "Code legibility for models",
            "note": null,
            "notes": [],
            "value": 100,
            "inputs": {
              "primary_language": "TypeScript",
              "largest_source_bytes": 13750,
              "source_files_sampled": 67,
              "oversized_source_files": 0
            },
            "components": [
              {
                "key": "type_checkable_code",
                "name": "Type-checkable code",
                "detail": "TypeScript (statically typed)",
                "points": 45,
                "status": "met",
                "details": [
                  {
                    "code": "statically_typed_language",
                    "params": {
                      "language": "TypeScript"
                    }
                  }
                ],
                "max_points": 45
              },
              {
                "key": "manageable_file_sizes",
                "name": "Manageable file sizes",
                "detail": "0/67 source files over 60KB",
                "points": 55,
                "status": "met",
                "details": [
                  {
                    "code": "oversized_source_files",
                    "params": {
                      "kb": 60,
                      "sampled": 67,
                      "oversized": 0
                    }
                  }
                ],
                "max_points": 55
              }
            ]
          },
          {
            "key": "ai_interfaces",
            "band": "at_risk",
            "name": "Machine-readable interfaces",
            "note": null,
            "notes": [],
            "value": 40,
            "inputs": {
              "example_dirs": [
                "examples"
              ],
              "has_mcp_signal": false,
              "api_schema_files": []
            },
            "components": [
              {
                "key": "api_schema_openapi_graphql_proto",
                "name": "API schema (OpenAPI/GraphQL/proto)",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 40
              },
              {
                "key": "mcp_server",
                "name": "MCP server",
                "detail": null,
                "points": 0,
                "status": "missed",
                "details": [],
                "max_points": 20
              },
              {
                "key": "runnable_examples",
                "name": "Runnable examples",
                "detail": "examples",
                "points": 40,
                "status": "met",
                "details": [
                  {
                    "code": "file_list",
                    "params": {
                      "files": "examples"
                    }
                  }
                ],
                "max_points": 40
              }
            ]
          }
        ],
        "description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
      }
    ],
    "metrics_version": "1.13.0"
  },
  "warnings": [
    "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
  ],
  "report_type": "repository",
  "generated_at": "2026-07-24T13:15:37.615701Z",
  "schema_version": "0.27.0",
  "badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/i/InnerOpen/marvin-cli.svg",
  "full_name": "InnerOpen/marvin-cli",
  "license_state": "absent",
  "license_spdx": null
}

Оцінки — це сигнали, а не гарантії. Вони відображають публічно видимі практики на GitHub — це не аудит коду й не гарантія безпеки.

Відсутні дані виключаються, а ваги перенормовуються — нуль за відсутність ніколи не ставиться. Методологія версіонована й відкрита: метрики v1.13.0, схема v0.27.0 — повна методологія · вікі метрик.

Як окремий результат виглядає на тлі всього реєстру: сукупна статистикаnpm.