Servidor MCP para buscar productos, comparar precios y armar la mejor lista de compra en supermercados chilenos (Jumbo, Santa Isabel, Unimarc, Tottus, Lider) desde Claude o ChatGPT. 100% local.
NLACE-COM/mcp-supermercados-cl має індекс здоров’я 62 зі 100, що відповідає смузі «Помірний». Найвищий показник — Engineering Quality (82/100), найнижчий — Security (40/100). Останнє оновлення було 6 днів тому. Більшість нещодавньої роботи виконує один учасник.
62
загалом / 100
Помірний
Індекс здоров'я програмного забезпечення
Метрики згруповано у зважені категорії на шкалі 1–100. Загальна оцінка починається як їхнє середнє; коли публічні дані активують Політику юрисдикцій високого ризику, рейтинг коригується й отримує верхню межу 49 («Під ризиком»). Готовність до ШІ не входить до індексу.
62
Відмінний85-100Зразковий; відповідає практично всім перевіреним критеріям
Добрий70-84Здоровий; незначні прогалини
Помірний50-69Прийнятний, але з помітними прогалинами; рекомендовано перевірку
У зоні ризику30-49Суттєві слабкі місця; впровадження потребує обережності
Критичний1-29Серйозні проблеми (покинутий, єдиний мейнтейнер, без базової гігієни)
Профіль оцінок
Кожна вісь — окрема категорія. Форма важить більше, ніж середнє: здоровий об'єкт заповнює всю фігуру, тоді як профіль із піками та провалами означає, що сила в одному вимірі маскує ризик в іншому.
Прямі залежності без відомих сповіщень — жодна пряма залежність не має відомих сповіщень
13.2/25
Непрямі залежності без відомих сповіщень — уражено 1: @hono/node-server 1.19.15 (moderate 5.9)
40/40
Немає задавнених сповіщень — жодне сповіщення не є публічним довше за 90 дн.
Використані вхідні дані
source
osv
advisories
1
affected_packages
1
assessed_packages
95
unassessed_packages
0
affected_by_severity
moderate 1
direct_affected_packages
0
Звірено з runtime-замиканням залежностей npm:mcp-supermercados-cl@1.4.6 — тим, що тягне за собою встановлення опублікованого пакета, — 95 пакетів. Досяжність не аналізується.
Наскільки репозиторій оснащений для розробки та супроводу за участі ШІ-агентів? Незалежний, експериментальний бейдж — вага 0.0, тож він подається окремо і не впливає на загальний індекс здоров'я.
Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token
GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Докладніше
Історія зірок і форків 0 ★ / 13 ⇿
0Зірки
13Форки
8Релізи
Коли додано кожну зірку й форк — зібрано з GitHub і згруповано за днями. Кумулятивне зростання розміщено просто над денними додаваннями, з яких воно складається, тож їх видно одне проти одного: рівномірне органічне накопичення виглядає зовсім інакше, ніж різкий короткочасний сплеск. Там, де цю різницю можна виміряти, її подано як автентичність росту.
Мажорні 0Мінорні 3Патчі 5
OpenSSF Scorecard 2.8 / 10
2.8сукупно
Незалежна, не прив'язана до інструментів оцінка безпеки від відкритого проєкту OpenSSF Scorecard. Кожна перевірка винагороджує практику безпеки, а не інструмент конкретного постачальника. Перевірки, які Scorecard не зміг визначити, позначено н/д і виключено з оцінки безпеки (вони ніколи не зараховуються як нуль).Scorecard v5.5.0 · 2026-07-27 10:29 UTC
Не вдалося зібрати розв'язаний набір залежностей для цього звіту: GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository
Сповіщення про залежності 1
Встановлення npm:mcp-supermercados-cl@1.4.6 тягне 95 пакетів, прямих і транзитивних: 1 мають відомі сповіщення, з них 0 — прямі залежності.
Пакет
Версія
Зв'язок
Критичність
Сповіщень
Виправлено в
@hono/node-server
1.19.15
непряма
помірна
1
2.0.5
Сповіщення означає, що версія, записана в графі залежностей, потрапляє в уражений діапазон. Досяжність не аналізується, а граф містить піниї розробки й тестування — знахідка може стосуватися інструментів, а не поставленого коду.
Звіт у форматі JSON машиночитний
{
"data": {
"repo": {
"topics": [
"chile",
"claude",
"jumbo",
"lider",
"mcp",
"model-context-protocol",
"open-source",
"supermercado",
"typescript",
"unimarc"
],
"is_fork": false,
"size_kb": 365,
"has_wiki": true,
"homepage": null,
"languages": {
"JavaScript": 5437,
"TypeScript": 324667
},
"pushed_at": "2026-07-20T18:55:17Z",
"created_at": "2026-07-07T14:40:45Z",
"owner_type": "User",
"updated_at": "2026-07-22T23:09:17Z",
"description": "Servidor MCP para buscar productos, comparar precios y armar la mejor lista de compra en supermercados chilenos (Jumbo, Santa Isabel, Unimarc, Tottus, Lider) desde Claude o ChatGPT. 100% local.",
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript"
]
},
"owner": {
"blog": "https://nlace.com/",
"name": "nlace",
"type": "User",
"login": "NLACE-COM",
"company": null,
"location": "Chile",
"followers": 12,
"avatar_url": "https://avatars.githubusercontent.com/u/167659833?v=4",
"created_at": "2024-04-21T01:39:05Z",
"is_verified": null,
"public_repos": 11,
"account_age_days": 827
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v1.4.5",
"kind": "patch",
"published_at": "2026-07-15T13:41:40Z"
},
{
"tag": "v1.4.4",
"kind": "patch",
"published_at": "2026-07-13T16:45:43Z"
},
{
"tag": "v1.4.3",
"kind": "patch",
"published_at": "2026-07-09T21:01:55Z"
},
{
"tag": "v1.4.2",
"kind": "patch",
"published_at": "2026-07-09T20:47:36Z"
},
{
"tag": "v1.4.1",
"kind": "patch",
"published_at": "2026-07-09T20:34:38Z"
},
{
"tag": "v1.4.0",
"kind": "minor",
"published_at": "2026-07-09T19:23:35Z"
},
{
"tag": "v1.2.0",
"kind": "minor",
"published_at": "2026-07-07T19:50:07Z"
},
{
"tag": "v1.1.0",
"kind": "minor",
"published_at": "2026-07-07T19:17:07Z"
}
],
"recent_commits": [
{
"oid": "45d61059c73f6ea99a8aadd32aad3fc6d95f4848",
"body": "Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: registra el estado v1.4.6 (ofertas rotadas + release automatizado)",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-20T18:55:16Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "49b54d273b13ff1e0f4491a625848c0781abf6c5",
"body": "fix(jumbo): get_offers 404 — la colección de ofertas rotó (cierra #15)",
"is_bot": false,
"headline": "Merge pull request #16 from NLACE-COM/fix/jumbo-offers-collection-rotada",
"author_name": "nlace",
"author_login": "NLACE-COM",
"committed_at": "2026-07-20T18:53:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "969b58a7cc4fc5bf5326acbeed6f556211a81687",
"body": "…a #15)\n\nEl smoke live semanal detectó que get_offers de Jumbo devolvía HTTP 404.\nNo es cambio de formato: Jumbo rota los ids de sus colecciones de\nConstructor y los hardcodeados quedaron muertos.\n\n- Ofertas generales: /jumbo-ofertas pasó de collection_id/30399 a 30509\n (verificado en vivo, ~5.300 \n[…]\nrecupera del SSR (originalUrl fq=H%3A<id>); documentado en\nla captura y en el comentario de JUMBO_CONFIG para la próxima rotación.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(jumbo): get_offers fallaba con HTTP 404, la colección rotó (cierr…",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-20T18:52:07Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "edbf430bc683da22e1ea3f013059ed6584bb8e75",
"body": "feat: smoke de sesión para carro, listas y frecuentes (cierra #12)",
"is_bot": false,
"headline": "Merge pull request #13 from NLACE-COM/feat/smoke-sesion",
"author_name": "nlace",
"author_login": "NLACE-COM",
"committed_at": "2026-07-20T18:50:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3d2bb40aa074b773fc561dfd0239bfe3e65e237d",
"body": "ci: publicar a npm por tag (cierra #14)",
"is_bot": false,
"headline": "Merge pull request #17 from NLACE-COM/ci/release-workflow-npm",
"author_name": "nlace",
"author_login": "NLACE-COM",
"committed_at": "2026-07-20T18:50:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e56c8d77fcd530eb50d5f006c1325939ce21207e",
"body": "Publicar la 1.4.5 costó ocho intentos porque el flujo manual choca con el\n2FA de npm y con que NPM_TOKEN no basta solo. Este workflow dispara con el\ntag `vX.Y.Z` y:\n\n- verifica que el tag coincida con package.json (no publica un tag mal puesto);\n- corre la misma batería que CI (format, lint, typeche\n[…]\nel CHANGELOG.\n\nEl token se configura UNA vez en Settings → Secrets (granular, bypass 2FA).\nDespués, publicar es `git push --tags`.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "ci: workflow de release que publica a npm por tag (cierra #14)",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-20T18:33:42Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ea85ac2f47bb0ca7531364472ce5254b8db4560c",
"body": "El CI falló con 17 no-undef (console/process/setTimeout) en el script de login:\neslint.config.js no declaraba globals para .mjs, porque el resto del proyecto\nes TypeScript y los toma de tsc.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(lint): globals de Node para los scripts .mjs",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-15T14:20:44Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ed1b2b19093cea3713224400d0facb1e188914cc",
"body": "Las tools que dependen del navegador logueado no las cubría nada: los tests de\ncontrato usan fixtures (sin red) y el smoke live solo mira search_products. Ese\nhueco dejó el carro y las listas rotos dos días en la 1.4.4 hasta que lo\nreportó un usuario.\n\nnpm run test:session corre contra el sitio real\n[…]\nás lanzaba un navegador real contra super.lider.cl desde\ntests que no deben tocar la red. Ahora la ausencia se simula con vi.mock.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: smoke de sesión para carro, listas y frecuentes (cierra #12)",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-15T14:18:26Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7ada901b24bf8bd856653fc94c3f92f11e7c3d7a",
"body": "fix(jumbo): align cart browser request with frontend",
"is_bot": false,
"headline": "Merge pull request #11 from cristiancs/fix/jumbo-cart-browser-session",
"author_name": "nlace",
"author_login": "NLACE-COM",
"committed_at": "2026-07-15T13:39:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "cf775e5a22ee2df7a9b98227e9ce1ae52bb1bf58",
"body": "Las apiKey no son intercambiables: cada servicio responde 200 con la suya y\n403 (\"You cannot consume this service\") con la del otro. Verificado en\njumboclj775 contra /lists y /cart.\n\nLa key legacy da 401 en ambos, así que get_saved_lists también estaba roto en\nla 1.4.4 —no solo el carro—. Jumbo rotó\n[…]\n lo vio porque los tests de contrato no tocan\nla red y el smoke live no cubre las tools de sesión (necesitan token del\nnavegador).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: registra la verificación con sesión real",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-15T13:30:27Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "8c251998784b453811d149dbdbf678e37a239ba3",
"body": "El PR #11 arregla el carro cambiando la apiKey a la del servicio de carro,\npero carro y listas comparten la constante de headers: cambiar solo el carro\nhabría roto get_saved_lists en silencio, porque ningún test de contrato toca\nla red.\n\nCada servicio del BFF valida SU apiKey. Verificado contra el b\n[…]\nht.\n\njumboFetchSnippet/jumboMutateSnippet ahora exigen el servicio como parámetro\npara que el compilador no deje repetir el error.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix(jumbo): apiKey del BFF por servicio, no compartida",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-15T13:23:46Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "280e00cb983505807de1b8bbf7aa757e575a2493",
"body": null,
"is_bot": false,
"headline": "fix(jumbo): align cart browser request with frontend",
"author_name": "Cristian Navarrete",
"author_login": "cristiancs",
"committed_at": "2026-07-14T01:16:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6fd9bb6a211cb57fa97cab578e82fbcbd52872a5",
"body": "fix: el smoke live tolera el bloqueo antibot esperable (cierra #9)",
"is_bot": false,
"headline": "Merge pull request #10 from NLACE-COM/fix/smoke-live-tolera-antibot",
"author_name": "nlace",
"author_login": "NLACE-COM",
"committed_at": "2026-07-13T16:42:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e6fce0a6c13f558c16c199ce4349bc178eabb29c",
"body": "Documenta el fix del smoke live (tolera bloqueo antibot, SMOKE_STRICT):\nentrada [1.4.4] en CHANGELOG.md, bump de versión en package.json y línea de\nestado en CLAUDE.md.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs: changelog 1.4.4 y estado del smoke live tolerante",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-13T16:42:02Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "f2e3a39fde06cbb6dcfe24cc34032bef8208c206",
"body": "El workflow semanal corría las 5 cadenas y Tottus/Lider bloquean siempre\ndesde IP de datacenter (GitHub Actions), abriendo un issue de falso positivo\ncada lunes (ej. #9) que enterraba las alertas reales.\n\nAhora el smoke distingue bloqueo antibot (HttpStatusError 401/403/307/429 o\nmensaje de antibot)\n[…]\na cobertura real de las tres cadenas. Verificado en vivo: modo\nnormal 7/7 (Tottus/Lider tolerados con warning), estricto 2 failed.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: el smoke live tolera el bloqueo antibot esperable desde datacenter",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-13T16:35:10Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "69cb83e31829e87a0e446639a906ccb12612af54",
"body": "fix: condición de carrera del puente al navegar cadenas en paralelo",
"is_bot": false,
"headline": "Merge pull request #8 from NLACE-COM/fix/bridge-concurrencia",
"author_name": "nlace",
"author_login": "NLACE-COM",
"committed_at": "2026-07-09T20:59:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aab8cfc4502d5313f810ed17b61d87464b968caf",
"body": "compare_stores y build_cheapest_basket navegan las cadenas en paralelo, y dos\nlaunchPersistentContext concurrentes sobre el mismo userDataDir chocaban por el\nlock del perfil (\"Target page, context or browser has been closed\"): en la\npráctica Tottus resolvía y Líder caía como \"bloqueado\".\n\nPlaywright\n[…]\njusta\nal nuevo campo.\n\nVerificado contra los sitios reales (Chrome real, en paralelo): Líder y Tottus\nresuelven juntos. 157 tests.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: condición de carrera del puente al navegar cadenas en paralelo",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-09T20:58:51Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "deffb3e244d7d2d0adb720f69817b6d365dcf13b",
"body": "fix: cargar Playwright global cuando el server corre por npx (SUPERMERCADOS_PLAYWRIGHT_PATH)",
"is_bot": false,
"headline": "Merge pull request #7 from NLACE-COM/fix/playwright-npx-loading",
"author_name": "nlace",
"author_login": "NLACE-COM",
"committed_at": "2026-07-09T20:47:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82404b68c2f0154e65855ba1df9e614773f8f9a5",
"body": "…RCADOS_PLAYWRIGHT_PATH)\n\nEl puente automático solo cargaba Playwright si era dependencia local. Por\nnpx (Claude Desktop) el node_modules del paquete es efímero y no ve el\nPlaywright global. NODE_PATH no ayuda: el bridge carga con import() (ESM) y\nNODE_PATH solo aplica a require() (CommonJS) — verif\n[…]\nocal + SUPERMERCADOS_PLAYWRIGHT_PATH al global): Líder 46 productos.\nREADME con la variable y la config lista para npx. 157 tests.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: cargar Playwright global cuando el server corre por npx (SUPERME…",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-09T20:46:35Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7541a51b4c18e6c747e86706f0a8511533dbd510",
"body": "fix: puente de navegador ahora sí resuelve Líder/Tottus (nonce CSP + fetchSsrHtml)",
"is_bot": false,
"headline": "Merge pull request #6 from NLACE-COM/fix/next-data-nonce-y-fetchssrhtml",
"author_name": "nlace",
"author_login": "NLACE-COM",
"committed_at": "2026-07-09T19:44:52Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "600b3c74ef558963694ed330b1d5f1fb22293706",
"body": "…fetchSsrHtml)\n\nAl validar el puente de la 1.4.0 contra los sitios reales con Playwright\naparecieron tres bugs que lo hacían fallar siempre, invisibles a los tests\ncon fixtures (el fetch plano no reproduce el HTML del navegador real):\n\n1. El HTML del navegador trae <script nonce=\"\" id=\"__NEXT_DATA__\n[…]\n state:\"attached\".\n\nVerificado contra los sitios reales (Chrome real, channel chrome): Líder ~46\nproductos, Tottus ~48. 157 tests.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "fix: puente de navegador ahora sí resuelve Líder/Tottus (nonce CSP + …",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-09T19:44:25Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "fe56e619776c39d7e48520e8d01b095c5ce67867",
"body": "…ador automático\n\nAgrupa lo mergeado desde 1.3.0: la contribución de @dmnavalon (PR #3:\nbuild_cheapest_basket + puente browserHtml para Líder/Tottus + prompt\nsuper_eficiente), el puente de navegador automático por Playwright (PR #5,\ncierra #2) y la corrección de docs del bloqueo de Líder. Se documenta también\nla 1.3.0, que tenía tag pero faltaba en el CHANGELOG.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "v1.4.0: compra multi-cadena (build_cheapest_basket) y puente de naveg…",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-09T19:22:02Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "c842d1266e2c91c71bbaf3d278c8a458d78fea76",
"body": "feat: puente de navegador automático para Líder/Tottus (Playwright por entorno)",
"is_bot": false,
"headline": "Merge pull request #5 from NLACE-COM/feat/puente-navegador-automatico",
"author_name": "nlace",
"author_login": "NLACE-COM",
"committed_at": "2026-07-09T19:20:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6f8d8ff75755cf942087f45c055c6a690189e98f",
"body": "…r entorno)\n\nAntes el PlaywrightBridge existía pero el server nunca lo instanciaba, así\nque el puente contra el antibot de Líder/Tottus era solo manual (pegar\nbrowserHtml). Ahora se activa por variables de entorno y las tools lo usan\ncomo fallback automático.\n\n- src/adapters/browserBridge.ts (nuevo)\n[…]\nfil de Chrome\nlogueado + IP residencial; se verificó el cableo y la lectura de entorno con un\npuente fake, no una navegación real.\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: puente de navegador automático para Líder/Tottus (Playwright po…",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-09T19:18:05Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "1e446552f934c5792abbed1ff195d41b2ba62eae",
"body": "Add MseeP.ai badge",
"is_bot": false,
"headline": "Merge pull request #4 from mseep-ai/add-mseep-badge",
"author_name": "nlace",
"author_login": "NLACE-COM",
"committed_at": "2026-07-09T19:04:59Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "78fe71d28ac2e6d2823972ad030f628bab6433cc",
"body": "…ssue #2)\n\nEl comentario del adaptador afirmaba que Líder responde desde IP\nresidencial pese a PerimeterX; al 2026-07-08 el sitio bloquea todo\ncliente HTTP plano por fingerprint del cliente (TLS/JA3 + PerimeterX +\nF5 BIG-IP, 307 → /blocked). Se actualiza el docstring, el mensaje de\nerror (menciona F5 y guía a browserHtml) y CLAUDE.md; se documenta la\ncontribución del PR #3 (puente de navegador + build_cheapest_basket).\n\nCo-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>",
"is_bot": false,
"headline": "docs(lider): corregir bloqueo antibot obsoleto y documentar puente (i…",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-09T19:02:39Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "ed34a5d557fc1b294101ab811eea0c15a388f572",
"body": "… + canasta más barata repartida\n\nfeat: compra multi-cadena — puente de navegador (Líder/Tottus) + canasta más barata repartida",
"is_bot": false,
"headline": "Merge PR #3: compra multi-cadena — puente de navegador (Líder/Tottus)…",
"author_name": "nlace",
"author_login": "NLACE-COM",
"committed_at": "2026-07-09T19:00:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "3a5820557665bcc7d53a36f8ea1b9d58cf74128d",
"body": null,
"is_bot": false,
"headline": "Add MseeP.ai badge to README.md",
"author_name": "MseeP.ai",
"author_login": "mseep-ai",
"committed_at": "2026-07-08T19:04:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a8a4b92dfd3e824134f9c0536d3b54f09d711e4e",
"body": "La CI de upstream corre format:check; estos archivos no pasaban. Sin cambios\nde lógica.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "style: prettier --write (formatea archivos del bridge y del basket)",
"author_name": "Diego Martínez",
"author_login": "dmnavalon",
"committed_at": "2026-07-08T16:56:24Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "b381096833d540cf5fa2b1870d9f196876c93345",
"body": "…ata repartida)\n\nNueva tool que arma la canasta MÁS BARATA repartiendo cada ítem a la cadena\ndonde sale más barato (por precio/unidad), agrupado por cadena. Reusa\ncompare_stores y post-procesa con chooseCheapestBasket (función pura, testeable).\n\n- src/core/cheapestBasket.ts: chooseCheapestBasket (pi\n[…]\nhat (entrada libre/Excel/audio,\n desambiguar genéricos por frecuentes o preguntando, armar carro Jumbo + links).\n- 3 tests nuevos (145 total).\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat: build_cheapest_basket + prompt super_eficiente (canasta más bar…",
"author_name": "Diego Martínez",
"author_login": "dmnavalon",
"committed_at": "2026-07-08T15:39:06Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "578711b2c4225520cbdecf0e4152c21a8bcb9d84",
"body": "…que Líder)\n\nTottus también bloquea el fetch del servidor (403 antibot Falabella) por\nfingerprint del cliente. Se generaliza el puente de Líder:\n\n- TottusAdapter.searchProducts usa session.fetchAuthedHtml si está presente\n (antes solo HTTP directo); helper wrapTottusHtml (HTML o JSON de __NEXT_DATA\n[…]\nse clasifica como\n session_expired, así que la guía se dispara para blocked | session_expired.\n- 3 tests nuevos de Tottus (142 total). Ref #2.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(tottus): puente de navegador para search_products (mismo patrón …",
"author_name": "Diego Martínez",
"author_login": "dmnavalon",
"committed_at": "2026-07-08T14:46:05Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "283ef3331f2d5cefc0502bab9e7ec49318af9d6b",
"body": "…PerimeterX)\n\nLíder bloquea el fetch del servidor (PerimeterX/F5, 307 -> /blocked) por\nfingerprint TLS del cliente, no por IP. El adapter ya soportaba el puente\nsession.fetchAuthedHtml pero search_products no lo exponía.\n\n- search_products acepta browserHtml (HTML de la página o JSON de __NEXT_DATA_\n[…]\nl, la tool devuelve una guía accionable\n (openUrl + browserSnippet + retryWith) en vez de un error seco.\n- 3 tests nuevos (139 total). Ref #2.\n\nCo-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>",
"is_bot": false,
"headline": "feat(lider): puente de navegador para search_products (evita bloqueo …",
"author_name": "Diego Martínez",
"author_login": "dmnavalon",
"committed_at": "2026-07-08T14:36:28Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "eb680ef099160a1fb1767443f6274130dfce913e",
"body": null,
"is_bot": false,
"headline": "v1.3.0: alcance de precios por sucursal y bloqueo de Líder detectado",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-07T20:33:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fa8bfbf6852fbbfd06ea57aa08441da35f6227d3",
"body": "- search_products/build_list/compare_stores incluyen priceScope y\n priceScopeNote: sin branchId los precios son de catálogo nacional y el\n modelo debe advertir que la sucursal del usuario puede diferir.\n- Líder: PerimeterX responde 307 a /blocked (\"Robot or human\") que se\n confundía con 0 resultados; isLiderBlockedHtml lo detecta y lanza error\n blocked accionable. La action de blocked cubre IP residencial bloqueada.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Alcance de precios (priceScope) y detección del bloqueo antibot de Líder",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-07T20:33:17Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "88b70535aca702209504ada1b4e045cbe8c100ba",
"body": "…bles)",
"is_bot": false,
"headline": "v1.2.0: experiencia de usuario (prompts, presupuesto, errores acciona…",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-07T19:49:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a1eea5cddceda333d675d5a7a7daff4a69dd6819",
"body": "…ccionables\n\n- instructions del server + prompts guiados (armar_lista, conectar_sesion,\n comparar_carro, ofertas_frecuentes) para descubribilidad.\n- discover_branch: lee la sucursal del navegador, no se pide a mano.\n- build_list con maxBudget: ajusta a alternativas más baratas (respeta\n frecuentes\n[…]\nformateado, %).\n- Errores accionables (src/core/errors.ts): campo action con el siguiente paso.\n\n132 tests. Lint/format/typecheck/build limpios.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Experiencia de usuario: prompts, instructions, presupuesto, errores a…",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-07T19:49:24Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "bab8fa3665e0fcdf217a399ce4d2f7dfe66c298d",
"body": "…wright",
"is_bot": false,
"headline": "v1.1.0: CI, matching en español, flujo de sesión guiado y puente Play…",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-07T19:15:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1994dcf0d1abb3e4ff42d93175350f488f965de4",
"body": "Frente calidad de repo (para colaboradores):\n- CI en GitHub Actions: lint+typecheck+build+test (Node 20/22).\n- Smoke live semanal que abre issue si una cadena cambia de formato.\n- ESLint (flat) + Prettier + scripts; templates de issue/PR.\n\nFrente núcleo:\n- src/core/matching.ts: matching en español (\n[…]\n el scraping manual de React.\n- Puente Playwright opcional (import dinámico, no pesa en el paquete).\n\n119 tests. Formato/lint/typecheck limpios.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Salud del repo, matching en español y flujo de sesión guiado",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-07T19:15:25Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "2d06d6facf806eb72b387a211d0fb7a4fe7255c1",
"body": "…ecretos\n\nAclara en cencosud.ts y en el README que constructorKey/apiKey son claves\npúblicas embebidas en el frontend de las cadenas (visibles en DevTools),\nno credenciales. Responde a un falso positivo de escaneo de secretos.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Documenta que las API keys del código son públicas del frontend, no s…",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-07T17:43:23Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "aa0f45583d4e39aa2fe97263f74cd33dd9044e32",
"body": null,
"is_bot": false,
"headline": "v1.0.3: documentación de rendimiento/feedback + CHANGELOG",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-07T15:55:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "95a115ec1f59a69a99a1baffbbf6da72784c68c9",
"body": "Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Documenta rendimiento y feedback; agrega CHANGELOG",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-07T15:55:44Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "7a40618f9d75882af6f8562def55d71492cc9b5a",
"body": "…ogreso MCP",
"is_bot": false,
"headline": "v1.0.2: rendimiento (rate limit por tipo de host, fallar rápido) + pr…",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-07T15:53:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bbcfa42052d8e0d1b87ddbbf8839965bb995236c",
"body": "…eso MCP\n\n- HttpClient: hosts de API (Constructor/BFF) a ~350ms vs SSR a ~1s;\n 1 reintento y timeout 8s (fallar rápido). Ajustable por entorno.\n- compare_stores: presupuesto de 25s por cadena (parcial en vez de bloquear)\n y notificaciones de progreso por cadena resuelta.\n- build_list: notificacion\n[…]\no ítem a ítem.\n- Versión del server desde package.json (deja de estar hardcodeada).\n- Tests de HttpClient para rate limit y no-reintento de 4xx.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Rendimiento y feedback: rate limit diferenciado, fallar rápido, progr…",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-07T15:53:49Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4ca0692c684e4fd7687d07aac5daf5e466244e2c",
"body": null,
"is_bot": false,
"headline": "v1.0.1: corrige el log de arranque que aún decía fase 1",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-07T15:32:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "65ee4378d424ea0635ca2843eadd7b0ee85b7f39",
"body": "…adenas\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Actualiza mensajes de fase 1 obsoletos: el servidor cubre las cinco c…",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-07T15:32:35Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "2128282d76514c95e66bf9a53d5a263f686bd800",
"body": "- README: instalación recomendada con npx -y mcp-supermercados-cl\n- badge de versión npm\n- .npmrc protegido en .gitignore\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Publicado en npm: instalación vía npx + badge npm",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-07T14:46:49Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "8f17ea0a4b0f82b86a6c075c4dc36381500b93c1",
"body": "- README completo para GitHub: badges, TOC, sección de deployment (no se\n deploya, corre local por stdio), cobertura, tools, contribución, aviso legal.\n- CONTRIBUTING.md con principios de diseño y cómo agregar/arreglar adaptadores.\n- Planes movidos a docs/ (PLAN-arquitectura, PLAN-referencia-endpoi\n[…]\n bugs).\n- Verificado: sin datos personales ni tokens de sesión; las apiKeys presentes\n son las públicas embebidas en el frontend de los sitios.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Preparación para publicación open source",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-07T14:39:49Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "ae47b351f985ac5da21e4db7af5d843c2d6d39e8",
"body": "…rar formatos\n\nCriterio que pidió el usuario: comparar formatos (Coca-Cola 1L vs 3L, o\nproducto por kilo con etiqueta en gramos) exige que el precio por unidad esté\nen la MISMA escala. Antes '$1.573 x 100ml' y '$596 x lt' no eran comparables.\n\n- normalizeUnitPrice(price, qty, unit): masa->por kg, vo\n[…]\n12 tests nuevos; 104 en total, verdes. Verificado E2E en Lider: shampoo\n '$1.573 x 100ml' -> $15.730/lt (vs bebida $596/lt, ahora comparables).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Normaliza el precio por unidad a base canónica (por kg/lt) para compa…",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-07T14:32:27Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "bc57e8d36323b1dc719edf8e788f15c022bb8db2",
"body": "El usuario notó que los bundles están en varias cadenas, no solo Lider.\nVerificado: cada una los expone en un lugar distinto.\n\n- Product gana promotions[]: {description, type, minQuantity, bundlePrice,\n unitPriceInBundle} — precio efectivo por unidad del pack para comparar.\n- parseBundle (normalize\n[…]\nity>1 en la PDP\n- 8 tests nuevos; 97 en total, verdes. Verificado E2E: yogurt Jumbo 'Lleva 8\n por $5.600' ($700 c/u) separado del precio Prime.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Bundles multi-compra (2x$X, Lleva N por $X) en las cuatro cadenas",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-07T14:23:54Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "fd58546456368b41f8473d9a8993adc89d3be8f4",
"body": "…comendar\n\nNueva tool para el caso 'productos con mayor descuento ahora que quizás no\ntengo en el carro, recomiéndame aprovechar'.\n\n- core/opportunities.ts: rankea las ofertas por % de descuento, filtra stock,\n calcula discountPct/saving/memberSaving. excludeIds para destacar solo lo\n que el usuar\n[…]\nfertas verificada).\n- 5 tests nuevos; 90 en total, verdes. Verificado E2E: papel 30%, Coca-Cola\n 29%, pasta 26% — sin los falsos 90% de granel.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "find_opportunities: oportunidades por mayor descuento + stock para re…",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-07T14:07:18Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "991314b02944b7f98a1bae695f8b523199003831",
"body": "…con ingredientes\n\nCierra el espíritu del caso 4 (más natural, menos ingredientes, mismo precio)\npara cualquier cadena con ficha, sin depender de frecuentes de Tottus (que la\ncuenta del usuario no tiene).\n\n- suggest_swaps gana preferNatural: en vez de exigir mejor precio por unidad,\n trae alternati\n[…]\nffer); los\n adaptadores ya lo llenaban pero se descartaba al validar. Agregado.\n- Test nuevo; 85 en total, verdes. Verificado E2E contra Jumbo.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "suggest_swaps preferNatural: alternativas naturales a precio similar …",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-07T14:02:53Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "e28679807c51e9f04ef9c827c683b4dc99760154",
"body": "…yInStock en build_list\n\n- Product gana ingredients[] y nutritionalFlags[]; get_product de Jumbo/Santa\n Isabel los extrae de la ficha (ingredients top-level + specifications).\n Habilita el juicio de 'más natural / menos ingredientes' del LLM.\n- build_list: flags onlyOffers (solo productos con desc\n[…]\nión de frecuentes.\n- search_products documenta ingredients/nutritionalFlags.\n- 4 tests nuevos; 84 en total, verdes. Verificado E2E contra Jumbo.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Ingredientes en fichas (juicio de naturalidad) + flags onlyOffers/onl…",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-07T13:53:04Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "4a16347c6bde946be6a9540cd53ac22a75186235",
"body": "Cierra la petición transversal: resultados con nombre, descripción, foto y\nprecios para que el LLM entregue mejores alternativas.\n\n- imageUrl en los 3 adaptadores que faltaban: Tottus (mediaUrls), Unimarc\n (item.images), Lider (imageInfo.thumbnailUrl). Campos verificados con\n captura real desde IP\n[…]\n 'productos a $1.000 en Lider' y 'el más barato'.\n- Fixtures actualizadas con campos de imagen; aserciones de enriquecimiento.\n\n80 tests verdes.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Enriquecimiento de resultados (fotos, descripción) + filtros de precio",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-07T13:46:07Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "37df163770aad7109ab55649d7c94556b9d4a133",
"body": "…ad no-Jumbo\n\nMejora 1 — Listas guardadas de Jumbo (fase 2):\n- get_saved_lists + adapters/cencosudLists.ts. Endpoints /lists y\n /lists/{scope}/{idList}; items con precio socio (promotions PRIME_USER).\n Fixture real jumbo-list-2026-07-07.json.\n\nMejora 3 — Detalle de Santa Isabel con comuna:\n- pdpSt\n[…]\nfutura\n (documentado en README).\n\nHttpClient.postJson acepta headers. 12 tools, 80 tests (verdes). El carro del\nusuario en Jumbo quedó intacto.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Tres mejoras: listas guardadas Jumbo, detalle Santa Isabel, profundid…",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-07T13:37:40Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "abf4329c259999d2ca79e171a071ec818634c47f",
"body": "…0.0)\n\nCompleta las cinco cadenas del plan y la comparación entre cadenas.\n\nFase 5-6 (adaptadores nuevos, endpoints verificados con navegador/IP residencial):\n- Unimarc (src/adapters/unimarc.ts): POST bff-unimarc-ecommerce.unimarc.cl/\n catalog/product/search con headers channel/source/version (sin \n[…]\nerver v1.0.0, 10 tools, 5 cadenas. 15 tests nuevos (72 en total, verdes).\nSmoke live de las 3 cadenas nuevas (opt-in, requieren IP residencial).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fases 5-7: Unimarc, Tottus, Lider + compare_stores + publicación (v1.…",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-07T13:16:07Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "f9bdddf4522793e6d11b07d3f95cf8428f114411",
"body": "- CencosudBannerConfig con capacidades por banner (offersCollectionId,\n primeOffersCollectionId, pdpStyle) — Jumbo y Santa Isabel comparten el\n backend de búsqueda pero difieren en frontend (React Query vs VTEX)\n- Santa Isabel registrada: search_products, build_list y suggest_swaps\n funcionan con\n[…]\n0 sin ella)\n- Enums de tools de catálogo ampliados a jumbo|santaisabel\n- Fixture real de búsqueda SI + 6 tests; smoke live SI; 57 tests en total\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fase 4: Santa Isabel (búsqueda) reutilizando el adaptador Cencosud",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-07T12:52:20Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "7ae9b2cb76c055cbe1c86f8129f012fc76c19920",
"body": "Endpoints del BFF capturados con la sesión del usuario (2026-07-07):\n- GET /cart?store={branchId}&simulationTotals=true (leer)\n- PATCH /cart/items (agregar/actualizar; body skuId+quantity+banderas)\n\n- core/types.ts: Cart enriquecido (subTotal, total, savings, primeSavings,\n itemsQuantity, lineTotal\n[…]\ntos) + 9 tests; 51 en total\n\nCon esto Jumbo cierra el ciclo completo del plan (fases 1-3). El carro del\nusuario se dejó intacto tras la captura.\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fase 3: carro Jumbo (add_to_cart, get_cart) con ahorro Prime",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-07T12:41:51Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "e64ca817080513768438f635944d86a427e17d23",
"body": "…o que el usuario compra\n\nCaptura clave (2026-07-07, sesión del usuario): el token de Jumbo vive en\nlocalStorage, no solo cookies, así que la sesión se opera desde el navegador\ndel usuario. El servidor MCP nunca ve credenciales.\n\n- core/types.ts: Session con puente de navegador (fetchAuthedHtml) o c\n[…]\nquent)\n- Fixture real de 7 frecuentes del usuario, incl. el Salame con Prime $1.288\n- 16 tests nuevos de sesión/listBuilder; 42 en total, verdes\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fase 2: productos frecuentes con precio Prime + build_list prioriza l…",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-07T11:23:00Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "b66a99b73292bd43280b4eae39f02bb8415bc81a",
"body": "…s de PDP documentados\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Recon Santa Isabel: búsqueda verificada en ac.cnstrc.com, bloqueadore…",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-07T10:40:49Z",
"body_truncated": false,
"is_coding_agent": true
},
{
"oid": "3365dac53d9c3ea49d4ed28f6eeb57f2f0a673f6",
"body": "- core/listBuilder.ts: ranking por precio por unidad dentro de la unidad\n predominante, alternativas por ítem, total y ahorro; suggestSwaps solo\n propone mejoras estrictas de precio por unidad\n- Tools MCP: build_list, suggest_swaps, adapter_status\n- Cache TTL 15 min en CencosudAdapter (búsquedas, \n[…]\n + cache); 26 en total, todos verdes\n\nLa integración con frecuentes/precio socio queda para la fase 2 (requiere\nsesión del usuario en jumbo.cl).\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fase 3 (pública): build_list, suggest_swaps, adapter_status y cache TTL",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-07T10:37:36Z",
"body_truncated": true,
"is_coding_agent": true
},
{
"oid": "38057f53fa1f512259fcd390e2034c638c9ef08f",
"body": "…fers\n\nServidor MCP (stdio) con adaptador Cencosud sobre Constructor.io:\n- Esquema Product normalizado (zod) con price/listPrice/memberPrice separados\n- Precios y stock por sucursal vía variations_map (filter_by data.storeId)\n- Precio Jumbo Prime desde el estado deshidratado del SSR de la PDP\n- Ofer\n[…]\nsts de contrato con fixtures reales del 2026-07-06 + smoke live opt-in\n- Captura de endpoints documentada en docs/captura-cencosud-2026-07-06.md\n\nCo-Authored-By: Claude Fable 5 <noreply@anthropic.com>",
"is_bot": false,
"headline": "Fase 1: Jumbo lectura pública — search_products, get_product y get_of…",
"author_name": "NLACE-COM",
"author_login": "NLACE-COM",
"committed_at": "2026-07-07T03:50:58Z",
"body_truncated": true,
"is_coding_agent": true
}
],
"releases_count": 8,
"commits_last_year": 61,
"latest_release_at": "2026-07-15T13:41:40Z",
"latest_release_tag": "v1.4.5",
"releases_from_tags": false,
"days_since_last_push": 6,
"active_weeks_last_year": 3,
"days_since_latest_release": 11,
"mean_days_between_releases": 1.1
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": true,
"has_contributing": true,
"health_percentage": 71,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"ecosystem": {
"packages": [
{
"name": "mcp-supermercados-cl",
"exists": true,
"license": "MIT",
"keywords": [
"mcp",
"model-context-protocol",
"claude",
"supermercado",
"chile",
"jumbo",
"unimarc",
"lider",
"tottus",
"santa-isabel",
"precios",
"shopping-list"
],
"ecosystem": "npm",
"matches_repo": true,
"registry_url": "https://www.npmjs.com/package/mcp-supermercados-cl",
"is_deprecated": false,
"latest_version": "1.4.6",
"repository_url": "https://github.com/NLACE-COM/mcp-supermercados-cl",
"versions_count": 14,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 2118,
"first_published_at": "2026-07-07T14:45:52.946000Z",
"latest_published_at": "2026-07-20T18:58:57.272000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 6
}
]
},
"popularity": {
"forks": 13,
"stars": 55,
"watchers": 2,
"fork_history": {
"days": [
{
"date": "2026-07-07",
"count": 1
},
{
"date": "2026-07-08",
"count": 8
},
{
"date": "2026-07-09",
"count": 1
},
{
"date": "2026-07-14",
"count": 1
},
{
"date": "2026-07-21",
"count": 1
},
{
"date": "2026-07-25",
"count": 1
}
],
"complete": true,
"collected": 13,
"total_forks": 13
},
"star_history": null,
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": false,
"has_mcp_signal": true,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
"tsconfig.json"
],
"toolchain_manifests": [],
"largest_source_bytes": 30721,
"source_files_sampled": 70,
"oversized_source_files": 0,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 18924
},
"dependencies": {
"manifests": [
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [
{
"name": "@hono/node-server",
"direct": false,
"version": "1.19.15",
"severity": "moderate",
"ecosystem": "npm",
"cvss_score": 5.9,
"advisory_ids": [
"GHSA-frvp-7c67-39w9"
],
"fixed_version": "2.0.5",
"advisory_count": 1,
"oldest_advisory_days": 5
}
],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {
"moderate": 1
},
"advisory_count": 1,
"affected_count": 1,
"assessed_count": 95,
"malicious_count": 0,
"assessed_package": "npm:mcp-supermercados-cl@1.4.6",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"npm"
],
"dependencies": [
{
"name": "@modelcontextprotocol/sdk",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^1.12.0"
},
{
"name": "zod",
"manifest": "package.json",
"ecosystem": "npm",
"version_constraint": "^3.25.0"
}
],
"all_dependencies": {
"error": "GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository",
"source": null,
"packages": [],
"collected": false,
"truncated": false,
"total_count": null,
"direct_count": null,
"indirect_count": null
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 11,
"open_issues": 0,
"closed_ratio": 1,
"closed_issues": 6,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "NLACE-COM",
"commits": 55,
"avatar_url": "https://avatars.githubusercontent.com/u/167659833?v=4"
},
{
"type": "User",
"login": "dmnavalon",
"commits": 4,
"avatar_url": "https://avatars.githubusercontent.com/u/7022812?v=4"
},
{
"type": "User",
"login": "cristiancs",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/1800919?v=4"
},
{
"type": "User",
"login": "mseep-ai",
"commits": 1,
"avatar_url": "https://avatars.githubusercontent.com/u/207640208?v=4"
}
],
"contributors_sampled": 4,
"top_contributor_share": 0.902
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"ci.yml",
"release.yml",
"smoke-live.yml"
],
"has_docs_dir": true,
"linter_configs": [
"eslint.config.js"
],
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"package-lock.json"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 10,
"reason": "no binaries found in the repo",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 0,
"reason": "branch protection not enabled on development/release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": 8,
"reason": "9 out of 11 merged PRs checked by a CI test -- score normalized to 8",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 2,
"reason": "Found 3/14 approved changesets -- score normalized to 2",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 0,
"reason": "project has 0 contributing companies or organizations -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 0,
"reason": "no update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 5,
"reason": "dependency not pinned by hash detected -- score normalized to 5",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "SAST tool is not run on all commits -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 0,
"reason": "security policy file not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 0,
"reason": "10 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "45d61059c73f6ea99a8aadd32aad3fc6d95f4848",
"ran_at": "2026-07-27T10:29:38Z",
"aggregate_score": 2.8,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": false
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-20T18:55:47Z",
"oldest_open_prs": [],
"last_merged_pr_at": "2026-07-20T18:53:45Z",
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/NLACE-COM/mcp-supermercados-cl",
"host": "github.com",
"name": "mcp-supermercados-cl",
"owner": "NLACE-COM"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 62,
"inputs": {
"security": 40,
"vitality": 72,
"community": 56,
"governance": 57,
"engineering": 82
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 72,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 54,
"inputs": {
"commits_last_year": 61,
"human_commit_share": 1,
"days_since_last_push": 6,
"active_weeks_last_year": 3
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 6 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 6
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "3/52 weeks with commits",
"points": 2.1,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 3
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "61 commits in the last year",
"points": 16.1,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 61
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 8,
"latest_release_tag": "v1.4.5",
"releases_from_tags": false,
"days_since_latest_release": 11,
"mean_days_between_releases": 1.1
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "8 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 8
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 11 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 11
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~1.1 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 1.1
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "moderate",
"name": "Community & Adoption",
"value": 56,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "at_risk",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 37,
"inputs": {
"forks": 13,
"stars": 55,
"watchers": 2,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "55 stars",
"points": 28.1,
"status": "partial",
"details": [
{
"code": "stars",
"params": {
"count": 55
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "13 forks",
"points": 9,
"status": "partial",
"details": [
{
"code": "forks",
"params": {
"count": 13
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "2 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 2
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "good",
"name": "Community health",
"note": null,
"notes": [],
"value": 77,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": false,
"has_pull_request_template": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 6.3,
"status": "met",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "moderate",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 55,
"inputs": {
"packages": [
"mcp-supermercados-cl"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 2118
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "2,118 downloads/month across npm",
"points": 44.3,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 2118,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "moderate",
"name": "Sustainability & Governance",
"value": 57,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 17,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 4,
"top_contributor_share": 0.902
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 90% of commits",
"points": 2.2,
"status": "partial",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 90
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "4 contributors",
"points": 5.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 4
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "excellent",
"name": "Issue & PR responsiveness",
"note": null,
"notes": [],
"value": 88,
"inputs": {
"merged_prs": 11,
"open_issues": 0,
"closed_issues": 6,
"issue_closed_ratio": 1,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "100% of issues closed",
"points": 46.8,
"status": "met",
"details": [
{
"code": "issues_closed_share",
"params": {
"share": 100
}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "11/11 decided PRs merged",
"points": 38.2,
"status": "met",
"details": [
{
"code": "decided_prs_merged",
"params": {
"merged": 11,
"decided": 11
}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 3/14 approved changesets -- score normalized to 2",
"points": 3,
"status": "partial",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "at_risk",
"name": "Ownership & stewardship",
"note": "Excluded from scoring (no data or not applicable): Verified domain. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"verified_domain"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 38,
"inputs": {
"followers": 12,
"owner_type": "User",
"is_verified": null,
"owner_login": "NLACE-COM",
"public_repos": 11,
"account_age_days": 827
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "personal (user) account",
"points": 10,
"status": "partial",
"details": [
{
"code": "owner_personal",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": "not applicable to user accounts",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_applicable_to_user_accounts",
"params": {}
}
],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "12 followers of NLACE-COM",
"points": 8,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 12,
"login": "NLACE-COM"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "11 public repos, account ~2 yr old",
"points": 12.4,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 11
}
},
{
"code": "account_age_years",
"params": {
"years": 2
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "excellent",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"packages": [
"mcp-supermercados-cl"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 6
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 6 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 6
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "14 published versions",
"points": 20,
"status": "met",
"details": [
{
"code": "published_versions",
"params": {
"count": 14
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "good",
"name": "Engineering Quality",
"value": 82,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "good",
"name": "Engineering practices",
"note": null,
"notes": [],
"value": 80,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": false,
"has_linter_config": true,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "3 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 3
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": "eslint.config.js",
"points": 16,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.js"
}
}
],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "9 out of 11 merged PRs checked by a CI test -- score normalized to 8",
"points": 16,
"status": "partial",
"details": [],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "excellent",
"name": "Documentation",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"topics": [
"chile",
"claude",
"jumbo",
"lider",
"mcp",
"model-context-protocol",
"open-source",
"supermercado",
"typescript",
"unimarc"
],
"has_wiki": true,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": true
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": "10 topics",
"points": 10,
"status": "met",
"details": [
{
"code": "topics_count",
"params": {
"count": 10
}
}
],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "at_risk",
"name": "Security",
"value": 40,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "critical",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 28,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 16,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 2,
"scorecard_aggregate": 2.8
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "no binaries found in the repo",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection not enabled on development/release branches",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "9 out of 11 merged PRs checked by a CI test -- score normalized to 8",
"points": 2,
"status": "partial",
"details": [],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 3/14 approved changesets -- score normalized to 2",
"points": 1.5,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 0 contributing companies or organizations -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "no update tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 5",
"points": 2.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "SAST tool is not run on all commits -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file not detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "10 existing vulnerabilities detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Matched the npm:mcp-supermercados-cl@1.4.6 runtime dependency closure — what installing the published package pulls in — 95 packages. Reachability is not analyzed.",
"notes": [
{
"code": "advisories_scope_published",
"params": {
"package": "npm:mcp-supermercados-cl@1.4.6",
"assessed": 95
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 88,
"inputs": {
"source": "osv",
"advisories": 1,
"affected_packages": 1,
"assessed_packages": 95,
"unassessed_packages": 0,
"affected_by_severity": "moderate 1",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "1 affected: @hono/node-server 1.19.15 (moderate 5.9)",
"points": 13.2,
"status": "partial",
"details": [
{
"code": "advisories_affected",
"params": {
"count": 1,
"packages": "@hono/node-server 1.19.15 (moderate 5.9)"
}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory has been public longer than 90 days",
"points": 40,
"status": "met",
"details": [
{
"code": "advisories_none_stale",
"params": {
"days": 90
}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 95,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 5
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "good",
"name": "AI Readiness",
"value": 71,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "excellent",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 0.836,
"agent_instruction_files": [
"CLAUDE.md"
],
"agent_instruction_max_bytes": 18924
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "CLAUDE.md",
"points": 45,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "CLAUDE.md"
}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "51 of 61 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 51,
"sampled": 61
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 69,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"package-lock.json"
],
"has_dockerfile": false,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": true,
"typecheck_configs": [
"tsconfig.json"
],
"agent_commit_share": 0.689,
"toolchain_manifests": [],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": "eslint.config.js",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "eslint.config.js"
}
}
],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": "tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "42 of the last 61 commits agent-authored or agent-credited",
"points": 10,
"status": "met",
"details": [
{
"code": "agent_authored_commits",
"params": {
"count": 42,
"sampled": 61
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "no automated dependency updates observed",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_dependency_automation",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 5",
"points": 5,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 30721,
"source_files_sampled": 70,
"oversized_source_files": 0
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "0/70 source files over 60KB",
"points": 55,
"status": "met",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 70,
"oversized": 0
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "critical",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"example_dirs": [],
"has_mcp_signal": true,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 20,
"status": "met",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Star history unavailable: GitHub GraphQL error: Resource not accessible by personal access token",
"GitHub dependency-graph SBOM unavailable (404); the dependency graph may be disabled for this repository"
],
"report_type": "repository",
"generated_at": "2026-07-27T10:29:54.043677Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/n/NLACE-COM/mcp-supermercados-cl.svg",
"full_name": "NLACE-COM/mcp-supermercados-cl",
"license_state": "standard",
"license_spdx": "MIT"
}
Пов’язані записи
Перевірені репозиторії, що мають спільні каталожні теги або екосистеми з NLACE-COM/mcp-supermercados-cl. Читати поруч →
Оцінки — це сигнали, а не гарантії. Вони відображають публічно видимі практики на GitHub — це не аудит коду й не гарантія безпеки.
Відсутні дані виключаються, а ваги перенормовуються — нуль за відсутність ніколи не ставиться. Методологія версіонована й відкрита: метрики v1.13.0, схема v0.27.0 — повна методологія · вікі метрик.
