Звіт у форматі JSON машиночитний
{
"data": {
"repo": {
"topics": [],
"is_fork": false,
"size_kb": 8254,
"has_wiki": false,
"homepage": null,
"languages": {
"C": 12349,
"HTML": 3349,
"Rust": 329919,
"Shell": 17422,
"JavaScript": 3491983,
"TypeScript": 4597877
},
"pushed_at": "2026-07-26T21:22:43Z",
"created_at": "2026-06-30T00:02:40Z",
"owner_type": "Organization",
"updated_at": "2026-07-26T21:22:49Z",
"description": null,
"is_archived": false,
"is_disabled": false,
"license_spdx": "MIT",
"default_branch": "main",
"license_spdx_raw": "MIT",
"primary_language": "TypeScript",
"significant_languages": [
"TypeScript",
"JavaScript"
]
},
"owner": {
"blog": "https://socket.dev",
"name": "Socket",
"type": "Organization",
"login": "SocketDev",
"company": null,
"location": "United States of America",
"followers": 784,
"avatar_url": "https://avatars.githubusercontent.com/u/69326764?v=4",
"created_at": "2020-08-06T21:36:01Z",
"is_verified": null,
"public_repos": 50,
"account_age_days": 2180
},
"license": {
"state": "standard",
"spdx_id": "MIT",
"raw_spdx": "MIT",
"file_present": true,
"scorecard_found": true,
"profile_has_license": true
},
"activity": {
"releases": [
{
"tag": "v0.1.2",
"kind": "patch",
"published_at": "2026-07-24T22:04:56Z"
},
{
"tag": "v0.1.1",
"kind": "patch",
"published_at": "2026-07-22T02:01:11Z"
}
],
"recent_commits": [
{
"oid": "1c3f01e7f05ff0d3aae9d1af908f3c5c4255ecad",
"body": null,
"is_bot": false,
"headline": "chore(fleet): refresh mirrors from bundle 1.0.13",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-26T21:22:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c93b59d23eebd72b196c591cc41475df14a7ea77",
"body": null,
"is_bot": false,
"headline": "chore(fleet): apply cascade prunes and refresh the lockfile",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-26T12:18:00Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a1433b5eaf2c8c3619a85956d71e3df6a6383472",
"body": "The npm main manifest (platform dirs regenerate from it via\nmake-npm-dirs), the placeholder generator, and the crate manifest all\ncarried github.com/decmpfs/decmpfs — a nonexistent repo. npm provenance\nvalidates repository.url against the building repo, so the mismatch\nwould fail the attestation on the first real publish.",
"is_bot": false,
"headline": "fix(npm): point repository metadata at the real SocketDev owner",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-26T12:17:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "060d50d92d697aee24c92c4a8c535b68932ad3d2",
"body": "Auto-applied by socket-wheelhouse sync-scaffolding into decmpfs.\n166 file(s) touched:\n - .claude/hooks/fleet/_dispatch/dispatch.mts\n - .claude/hooks/fleet/_shared/ast/core.mts\n - .claude/hooks/fleet/_shared/es-polyfills.mts\n - .claude/hooks/fleet/alpha-sort-nudge/index.mts\n - .claude/hooks/flee\n[…]\n.mts\n - .claude/hooks/fleet/gh-token-hygiene-guard/index.mts\n - .claude/hooks/fleet/gitmodules-comment-guard/index.mts\n - .claude/hooks/fleet/hook-snapshot-rewire-nudge/index.mts\n ... and 146 more",
"is_bot": false,
"headline": "chore(wheelhouse): cascade template@3bef5cc3b",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-26T12:15:17Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "8fc157d33a77688cb81ab2d49414400a55e27949",
"body": null,
"is_bot": false,
"headline": "fix(deps): override js-yaml to 5.2.2 for GHSA-pm4m-ph32-ghv5",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-25T22:14:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dfa889f631bc1424afd68b5a0731ccc20f68fe1d",
"body": null,
"is_bot": false,
"headline": "chore(fleet): refresh mirrors from bundle 1.0.12",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-25T12:20:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "582c0be8063f5b9af34226e8a6d927072fb6f161",
"body": null,
"is_bot": false,
"headline": "chore(fleet): drop orphaned actions lib/ dir superseded by _shared",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-25T12:16:42Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9e4134a23d4805e2e2c4b739f33847728f600dd4",
"body": null,
"is_bot": false,
"headline": "chore(deps): relock for @socketsecurity/sdk 4.0.4",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-24T22:02:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "90a2a8ec0981673f66e4c54b2d0bd57dfba92cf5",
"body": null,
"is_bot": false,
"headline": "fix(ci): publish with the rustup cargo ahead of the sfw shim",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-24T21:57:53Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0fd5c7da46bf51ae5277e727de6f861551e9f9b3",
"body": "Auto-applied by socket-wheelhouse sync-scaffolding into decmpfs.\n33 file(s) touched:\n - .claude/output-styles/fleet.md\n - .claude/skills/fleet/reviewing-web-interfaces/SKILL.md\n - .claude/skills/fleet/reviewing-web-interfaces/references/shadscan-audit.md\n - .config/fleet/.prettierignore\n - .con\n[…]\ngithub/actions/fleet/install/action.yml\n - .github/actions/fleet/install/semver.mjs\n - .github/actions/fleet/setup-and-install/action.yml\n - .github/actions/fleet/setup/action.yml\n ... and 13 more",
"is_bot": false,
"headline": "chore(wheelhouse): cascade template@d72753044",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-24T21:56:29Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "ea2140d74b59c7eec35398e7eeec7c3a906ece7f",
"body": "…r parity with CI",
"is_bot": false,
"headline": "fix(release): generate platform manifests before the relock — importe…",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-24T16:46:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "16af6654067ed786a74683d384043e7721792567",
"body": "… parity for the 0.1.2 importers",
"is_bot": false,
"headline": "fix(release): relock with platform manifests present — frozen install…",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-24T16:45:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6af3cfe3e888bd234edc72f49513bdc1e0999d20",
"body": null,
"is_bot": false,
"headline": "chore(deps): settle catalog pins — sdk 4.0.3",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-24T16:35:54Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "220b8dff3547284d4d6ebddc4cf0be36512b99f5",
"body": null,
"is_bot": false,
"headline": "chore(fleet): drop empty lockstep seed; sync member-guarded mirror gate",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-24T15:56:01Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d22734bf1362618e5297fa2f4b631940a4f5efb0",
"body": null,
"is_bot": false,
"headline": "chore(deps): bump @socketregistry/packageurl-js catalog pin to 1.4.7",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-24T15:45:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c3faa7d42aaa41e46ecc13ac23277073c89f5e42",
"body": null,
"is_bot": false,
"headline": "chore: bump version to 0.1.2",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-24T15:39:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "82c9600ba38230d137072ff5583f15038a4feddf",
"body": null,
"is_bot": false,
"headline": "chore(test): finish release-lib test relocation to test/unit",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-24T15:39:12Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2fff9eb34b58f5362d3bc5fe30fdc5ed3fee73fc",
"body": "…sts keep safeDelete\n\nThe tests use the guarded lib-stable cleanup by doctrine; the missing\npiece was the install step the typecheck job already had. Reverts the\ninterim raw-fs rewrite.",
"is_bot": false,
"headline": "fix(ci): install workspace devDependencies in the test job — addon te…",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-24T15:30:21Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9fd7d00e3716f5c24833574dfda4734069b95823",
"body": "The lint sweep swapped mkdtemp cleanup to lib-stable safeDelete in the\nfour addon tests, which only resolves after a pnpm install the Test job\nnever runs. Back to node:fs rm/rmSync on the tests own tmp dirs; the\ninterim devDependency comes out again.",
"is_bot": false,
"headline": "fix(napi): addon tests stay dep-0 — the CI Test job runs with no install",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-24T15:20:39Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "472ecd600ffb7667627b2183b23fd3d9960bb4f3",
"body": null,
"is_bot": false,
"headline": "chore(deps): bump @socketsecurity/lib catalog pin to 6.2.3",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-24T15:11:32Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aa5014ad5ac498b2993645b5e45513bcf26295dd",
"body": "…b-stable into a pre-install script",
"is_bot": false,
"headline": "fix(ci): setup-pnpm install-tool stays dep-0 — lint sweep imported li…",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-24T15:08:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "038dbf5259ee20e7eafa918d37841197f66f8978",
"body": "… gate",
"is_bot": false,
"headline": "style(test): exitCode over exit; js branch structured out of the rust…",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-24T15:06:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "77670b4252ef032bab910c06bd7b484cbb3e7216",
"body": "feat/fix/perf render as conventionalcommits-shaped sections with scope\nlead-ins; plumbing (ci, deps, fleet churn, lint waves) drops out; a\nrelease with nothing user-facing says so plainly. The named-file test\npath in the wrapper runs node --test instead of Rust-gating.",
"is_bot": false,
"headline": "feat(release): derive the CHANGELOG section from commit subjects",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-24T15:04:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0fb3935b62400030d6d8c0d9094b4f1d6c3847ba",
"body": null,
"is_bot": false,
"headline": "chore(fleet): refresh mirrors from bundle 1.0.11",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-24T14:57:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "425fdb0eb281fb0c90d1a55710c5434cd6f6159d",
"body": "…it — hoisting broke on the catalog bump",
"is_bot": false,
"headline": "fix(napi): declare @socketsecurity/lib-stable where the tests import …",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-24T14:51:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5505d88fa2dc5b7b8c656c910e9bf5fa40c19417",
"body": null,
"is_bot": false,
"headline": "chore(deps): bump @socketregistry/packageurl-js catalog pin to 1.4.6",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-24T13:23:25Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1a7617a5363590267e6898ad67caeb6ee9e6cbd1",
"body": null,
"is_bot": false,
"headline": "chore(deps): bump @socketsecurity/sdk catalog pin to 4.0.2",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-24T11:40:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "840ba831304f168a084ceba9e37fc4bb33765e45",
"body": null,
"is_bot": false,
"headline": "chore(deps): bump @socketregistry/packageurl-js catalog pin to 1.4.5",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-24T05:36:22Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2eb8399dc80a3a2c3aa7b47faed1ae7076ff3936",
"body": null,
"is_bot": false,
"headline": "chore(deps): bump @socketsecurity/lib catalog pin to 6.2.2",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-24T03:30:51Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "5bd8449a4c0c8d9cec8eaab0b14711ab25fcedce",
"body": null,
"is_bot": false,
"headline": "chore(deps): bump @socketsecurity/lib catalog pin to 6.2.1",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-24T00:31:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "1f9d4f38eb810eb4a1ea7332f08252d789f088d9",
"body": null,
"is_bot": false,
"headline": "chore(fleet): refresh mirrors from bundle v1.0.10",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-23T23:19:24Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "61c4ce6f4f7d0526f93b5787d2d5f8c5a3294da5",
"body": null,
"is_bot": false,
"headline": "style: hand-fix remaining full-lint findings",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-23T21:09:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "53587f431f72688ed8e2cf40e36c315aa0da7318",
"body": null,
"is_bot": false,
"headline": "chore(soak): drop @socketaddon/* + @socketbin/* excludes — dead scopes",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-23T21:03:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "54b0a461650f24ab63f51c943ca837aff0546662",
"body": null,
"is_bot": false,
"headline": "style: lint --fix --all wave",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-23T20:55:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "8c26322406785e5e8dc3cbf2aecadacb4cdd75bc",
"body": null,
"is_bot": false,
"headline": "chore(fleet): pre-take lint stack from template",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-23T20:53:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "6bff47c7e6cb635d30187f56536fa5aa180db66c",
"body": null,
"is_bot": false,
"headline": "docs(readme): fold parenthetical asides into their sentences",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-23T20:06:31Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "e721881237c42fbce2c9add94546937f4aba947d",
"body": "…-stable to 1.4.4",
"is_bot": false,
"headline": "chore(deps): bump @socketsecurity/lib catalog to 6.2.0, packageurl-js…",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-23T20:06:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "bc2a93609bc1233475f4dfe004753179f189a2fd",
"body": "The cascade tightened clippy to ban std::env::current_dir. decmpfs's safe-delete\nguard legitimately reads the process cwd through the Io seam's cwd() (mocked in\ntests) to refuse deleting the cwd/its ancestors (socket-lib safeDelete model);\nits guard test reads the real cwd to prove that. Per-site #[allow] with reasons,\nnot a global config weakening. Greens the Check step on all 3 Test jobs.",
"is_bot": false,
"headline": "fix(remove): allow current_dir at the Io-seam cwd + its guard test",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-22T16:00:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d428ec5744206d46ec252d26072ea1f27200d1d0",
"body": "… packages\n\nThe 0.1.1 release added five `@decmpfs/<triple>@0.1.1` optionalDependencies to\nnapi/decmpfs/package.json but never backfilled the lockfile, so CI's\n`pnpm install --frozen-lockfile` (the Typecheck job) failed ERR_PNPM_OUTDATED_LOCKFILE.\nRegenerated the lock (adds the 5 importer entries, nothing else). Greens the red\n`🧷 Typecheck (.d.cts)` job on main.",
"is_bot": false,
"headline": "fix(napi): resync pnpm-lock with the @decmpfs/<triple>@0.1.1 platform…",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-22T15:51:28Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9e0757f2680faa18251a325c4f9bce4d5d1eb0e4",
"body": null,
"is_bot": false,
"headline": "refactor(config): move socket-wheelhouse.json to .config/repo",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-22T03:40:05Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f6dada67cfd5a341a2181071471014775683f192",
"body": "Auto-applied by socket-wheelhouse sync-scaffolding into decmpfs.\n4 file(s) touched:\n - bootstrap/fleet.mjs\n - bootstrap/src/fleet.mts\n - bootstrap/src/install.mts\n - bootstrap/src/lockstep.mts",
"is_bot": false,
"headline": "chore(wheelhouse): cascade template@1f9cbd9ed",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-22T03:39:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b13c028938b08b01f5440bd4f0e73578374f8032",
"body": "…a, sync cascade residue",
"is_bot": false,
"headline": "refactor(config): seed segregated lockstep manifest, drop loose schem…",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-22T03:27:20Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "4914c5e90531bf9dde0c08c70f0446e0a190ffa4",
"body": "Auto-applied by socket-wheelhouse sync-scaffolding into decmpfs.\n358 file(s) touched:\n - .claude/commands/fleet/update-hooks-dry.md\n - .claude/commands/fleet/update-pricing.md\n - .claude/hooks/fleet/_dispatch/SNAPSHOT-NOTES.md\n - .claude/hooks/fleet/_shared/README.md\n - .claude/hooks/fleet/_sha\n[…]\nDME.md\n - .claude/hooks/fleet/c8-ignore-reason-guard/README.md\n - .claude/hooks/fleet/c8-ignore-reason-guard/index.mts\n - .claude/hooks/fleet/cascade-first-triage-nudge/README.md\n ... and 338 more",
"is_bot": false,
"headline": "chore(wheelhouse): cascade template@a16b85755",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-22T03:21:00Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9f85b3216aa039d1a3af38f80590066d4e11b9cc",
"body": "…up-and-install\n\nsetup-and-install does its own git auth; a persisted checkout token conflicts and\n400s its fetch. Match the working github-release.yml pattern: a credential-less\nbootstrap checkout only to make the local composite resolvable.",
"is_bot": false,
"headline": "fix(ci): bootstrap checkout with persist-credentials:false before set…",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-22T02:23:45Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ad063b7443401699ec99acee422c6e97fc2ce1f5",
"body": "…publish\n\nA local (./…) action can't be loaded until the repo is checked out; the preset\nstarted with setup-and-install and had no checkout, so the step failed to find\nits action.yml.",
"is_bot": false,
"headline": "fix(ci): checkout before the local setup-and-install action in cargo-…",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-22T02:19:14Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "812a7512c12c9819250e1f6385d4e4b43632ee3d",
"body": "…sh env)\n\nReplace the divergent on:release + raw 'cargo publish' under the 'release'\nenvironment with the fleet preset: workflow_dispatch-only (so the inputs context\nis valid — the old on:release + inputs.dry-run startup-failed), staged/--direct\nvia cargo-publish.mts, OIDC Trusted Publishing + provenance, gated by the\nsame-named 'cargo-publish' environment.",
"is_bot": false,
"headline": "fix(ci): align cargo-publish to the fleet preset (staged, cargo-publi…",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-22T02:16:30Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "983282470fa250714028c8ed5c0790c888fdba1b",
"body": "…on release)\n\nThe job's environment/DRY_RUN expressions read inputs.dry-run, but the inputs\ncontext isn't populated for the release event → workflow startup_failure, so no\npublish ran. github.event.inputs is always available (empty off-dispatch) and\nits string form makes the == 'true' compare correct.",
"is_bot": false,
"headline": "fix(ci): use github.event.inputs in cargo-publish (inputs ctx absent …",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-22T02:08:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f5f14ce899e262c3a785fd807e2447034577ccef",
"body": "…table tags\n\nMove the pure prerelease/bump/as-committed resolver into release-lib.mts with a\nno-network unit test (was inline + untested), and refuse to move a tag whose\nGitHub Release was already cut (verify-before-acting).",
"is_bot": false,
"headline": "refactor(release): extract resolveRelease to a tested lib; guard immu…",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-22T01:44:11Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f0000b7eb2fbb06c6b960641087a26c0e1d7d4d9",
"body": null,
"is_bot": false,
"headline": "chore: sync pnpm-lock.yaml",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-22T01:35:37Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "7abb44dfbbcaebba7761020ef348602063a23acf",
"body": "Run pnpm install --lockfile-only after the napi manifest bump and include\npnpm-lock.yaml in the release commit when it changed, so a release never leaves\nthe lock drifted.",
"is_bot": false,
"headline": "fix(release): resync pnpm-lock.yaml after the version bump",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-22T01:34:58Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "28d1da508d31fd67c781f6948090e28e8e4b5c74",
"body": null,
"is_bot": false,
"headline": "fix(release): dep-0 mint-app-token (cascade from wheelhouse)",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-21T22:28:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a4a0139776461ddab394c91697479727b7296e5e",
"body": "Render on GitHub, crates.io, and npm: light/dark combomark via <picture> with a\nlight <img> fallback, absolute raw-GitHub asset URLs (relative paths don't\nresolve on npm), a floating Socket badge linked to the package page (the pinned\n0.2.0 didn't exist, so it 404'd), and the npm README gets the npm-tuned logo.",
"is_bot": false,
"headline": "docs: cross-registry logo + badges (light/dark, absolute URLs)",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-21T22:28:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "9249c0dc55f76d48f9e8ab4bb23ed5c38c7039bb",
"body": null,
"is_bot": false,
"headline": "chore: bump version to 0.1.1",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-21T22:22:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "da2f0f7cf5585412b917665a1ca4efab7e14b737",
"body": null,
"is_bot": false,
"headline": "test(fuzz): add generated decode_pressed_data corpus entries",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-21T22:22:04Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "22e0f7ec11b4361d9c270f444d22948e7b66bf61",
"body": "release.mts now previews the plan with --dry-run (detected version, CHANGELOG\nsection, tag) without touching the tree, and auto-finalizes a committed\n-prerelease version to its plain semver (0.1.1-prerelease -> 0.1.1), reusing the\nCHANGELOG section already written for it instead of dying on the no-op edit.",
"is_bot": false,
"headline": "feat(release): --dry-run + auto-finalize a -prerelease version",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-21T22:03:23Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "36c47e92f11030f75fa4b90e3991f09aa78bb5ac",
"body": null,
"is_bot": false,
"headline": "test(fuzz): add proptest properties + gate parser/glob fuzz targets",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-21T16:21:29Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a4619e39f84aad0a217e24be77cfef42816c620f",
"body": "Collapses the 51 commits since the crates.io 0.1.0 publish (SHA 55fb470) into one. Net: version 0.1.1-prerelease hint (crate + napi + 5 platform pins), fleet tooling cascades, brand mark, rust 1.97.1 pin, .codex untrack. Published 0.1.0 history preserved.",
"is_bot": false,
"headline": "chore: consolidate development since 0.1.0",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-07-21T12:23:40Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "55fb470a720c03e8cf4feb76c600b7cc1a277838",
"body": "Gate non-dry-run publishes behind a 'release' GitHub environment (reviewer\napproval + a tighter OIDC trusted-publisher match); dry runs skip it.",
"is_bot": false,
"headline": "ci(node): run real publishes in the release environment",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-06-30T00:07:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "10885186f3dde3678aaf2e2ae9ca6e4c4b17c34b",
"body": "Ahead of transferring the repo to the decmpfs GitHub org: repository fields,\ngenerated placeholder metadata, and the provenance.yml job_workflow_ref comment\nnow reference github.com/decmpfs/decmpfs.",
"is_bot": false,
"headline": "chore: point repository URLs at the decmpfs org",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-06-29T23:26:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "80b6ba0a53d46a88c92786b700ce4f99d30c3141",
"body": "The loader still required the old @jdalton scope (only the comment had been\nrenamed), so it would never find the published @decmpfs/* packages — masked in\ntests by the local ./decmpfs.node fallback.",
"is_bot": false,
"headline": "fix(node): loader resolves @decmpfs/<triple>, not @jdalton/decmpfs-",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-06-29T23:26:13Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2440d5db966e8a178d0aeba7c3990cf5a95e1e79",
"body": "Matrix-build each platform addon (one runner per triple), then an inlined publish\njob publishes every @decmpfs/<triple> package plus the main decmpfs package with\nprovenance via npm OIDC trusted publishing. Inlined (not a reusable workflow) so\njob_workflow_ref stays stable for the trusted-publisher match, mirroring\nsocket-lib; dry-run defaults true, actions SHA-pinned.",
"is_bot": false,
"headline": "ci(node): add provenance.yml to publish @decmpfs addons via OIDC",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-06-29T22:34:27Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "dc4f3e94abe2e7bdbf7318db5972816a90f055cb",
"body": "…tstrap\n\nmake-placeholders.mts emits minimal version-0.0.0 packages (no binary, no\nprovenance) so the @decmpfs/<triple> names can be claimed by a one-time manual\npublish — the prerequisite for configuring npm trusted publishing, after which CI\npublishes the real binaries with provenance. Generated tree is gitignored.",
"is_bot": false,
"headline": "build(node): generate @decmpfs/* placeholder packages for publish boo…",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-06-29T21:56:50Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c9d7f8e6cd7534d617ba3c0b8deed001e9f4d377",
"body": "The per-platform packages are addons (a .node dlopen'd into Node), so they take\nnapi-rs's platformArchABI naming (explicit -gnu/-musl/-msvc), not pnpm pack-app's\nbinary naming — an addon built against one C library can't load on another. Scope\nthem under the dedicated @decmpfs org: @decmpfs/darwin-arm64,\n@decmpfs/linux-x64-gnu, @decmpfs/win32-x64-msvc, etc. Loader, generator, and\noptionalDependencies all track the target list.",
"is_bot": false,
"headline": "build(node): scope platform addons under @decmpfs with napi-rs naming",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-06-29T21:55:41Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "c46da26953047f2e99c513ede434bd2fd602efdd",
"body": "scripts/targets.mts is the canonical platform list; scripts/make-npm-dirs.mts\nwrites node/npm/<triple>/package.json for each (os/cpu/libc gates, hardened\npublishConfig) and stages the host's freshly built binary. The generated npm/\ntree is gitignored — the publish workflow rebuilds it per matrix host.",
"is_bot": false,
"headline": "build(node): generate per-triple npm package dirs from a target list",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-06-29T21:41:43Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "d81cbe5e2f5ee88501d38b87c329718a1a9565b1",
"body": "index.cjs resolves @jdalton/decmpfs-<triple> for the host (platform/arch + glibc\n/musl/msvc abi), falling back to a local ./decmpfs.node for dev. The main\npackage now ships only index.cjs; the prebuilt binaries live in per-platform\noptionalDependencies (@jdalton/decmpfs-darwin-arm64, …) that npm installs\nselectively by os/cpu. Fix the test require path for the .cjs rename.",
"is_bot": false,
"headline": "feat(node): multi-platform loader + per-triple optional deps",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-06-29T21:39:35Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f5a47ef16809d11633d50a14bab6aa1be3749b88",
"body": "Replace the macOS-hardcoded inline 'cp …dylib' with node/scripts/build.mts,\nwhich maps the cdylib artifact per platform (dylib/so/dll). Rename the loader\nshim to index.cjs (explicit CommonJS). Node strips the .mts types natively, so\nthe package stays zero-dependency.",
"is_bot": false,
"headline": "build: move the addon build into a platform-aware .mts script",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-06-29T21:05:56Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "b7b7216f41dbb9e6da961063cb9f0e9d1af4aeea",
"body": "…registry)",
"is_bot": false,
"headline": "build: use the fleet-hardened publishConfig (access, provenance, npm …",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-06-29T21:03:10Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "ffdf5e7c88fc6521989a195223fa25da8cee6075",
"body": "Add publishConfig (public access) and set the version to 0.1.0 to match the\ncrate. The files allowlist (index.js + *.node) was already correct.",
"is_bot": false,
"headline": "build: harden the node package manifest for publish",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-06-29T20:59:55Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "af7337887b8080be0f53a2ca81dd4d49861a51b5",
"body": "…aths\n\nIntroduce a Backend trait (instance methods) with the real Os impl and a\n#[cfg(test)] FakeBackend; route compress_file/compress_bytes through generic\n_with helpers. Static dispatch threads Os in release — monomorphized and inlined\nto the same code as a direct call, no vtable. A single configu\n[…]\npply-error propagation, the not-loadable/read-back rollbacks, and\nthe plain-write fallbacks (unsupported FS, guarded skip) that a real APFS write\nnever reaches. Line coverage 96.5% -> 97.0%, 57 tests.",
"is_bot": false,
"headline": "test: inject the backend via a trait to cover rollback and fallback p…",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-06-29T20:56:18Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "9f5dac44d3ce1431970793ca586aecd629c9db8d",
"body": "Direct unit tests for setxattr failure, empty-input compress_block, the\napply_inplace read-error path, and compress_bytes_guarded propagating an\nunclassifiable backend error. Line coverage 95.7% -> 96.5%; macos.rs reaches\n97.7%.",
"is_bot": false,
"headline": "test: cover backend syscall-error and unclassifiable-error paths",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-06-29T20:42:26Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "aace50571af3e35e1439c3fee5283a6e50802cb5",
"body": null,
"is_bot": false,
"headline": "docs: bump coverage badge to 96%",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-06-29T20:39:44Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "fd385d2f86c5549791f68d5f5228a56a83ed2904",
"body": "Extract the post-apply verification tails of apply_guarded and\ncompress_bytes_guarded into verify_loadable_or_restore /\nverify_readback_or_restore so the not-loadable and read-back-mismatch rollbacks\nare unit-testable without a corrupting backend, and add a plain_write no-parent\ntest. Line coverage 94.5% -> 95.7%.",
"is_bot": false,
"headline": "test: cover the rollback safety nets and the no-parent guard",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-06-29T20:39:07Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "05c8cee724154d215121290cc697f9c8d10d14c8",
"body": null,
"is_bot": false,
"headline": "docs: name the badges coverage-score and socket-score",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-06-29T20:21:34Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "10bc14b34e882bb5741385a45702548d4bddae74",
"body": "The addon is a cdylib build artifact, so pin its lockfile for reproducibility.",
"is_bot": false,
"headline": "build: track the node addon lockfile",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-06-29T20:19:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a12dc8d790d510441aa01e8dfdbc315ea52e6dcf",
"body": "Self-contained SVG badges committed in assets/ and referenced by relative path\n(crates.io rewrites these to the repo), so they render with no img.shields.io\ndependency. The socket badge links to the cargo package score page.",
"is_bot": false,
"headline": "docs: add coverage and socket score badges to the readme",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-06-29T20:19:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "2155c9c9af05c705f9b313c001cd94d250ddab51",
"body": "Add deterministic tests for the existing-target/read-only-dir/directory-target\nfail-soft paths, the magic_prefix read-error arm, and the gate's no-size and\nsingle-star edges. Line coverage 90% -> 94%; gate and verify reach 100%. The\nresidual misses are syscall-error and corruption-rollback safety nets that only\na fault-injecting backend could reach.",
"is_bot": false,
"headline": "test: cover reachable backend and gate branches",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-06-29T20:19:09Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a80eb6a5ae6bfa1f9e2c3853beab9963aac9a445",
"body": "Exact-pin zstd, sha2, libc, and windows-sys (Cargo.lock already locks the\ntransitive tree) so a published build resolves byte-for-byte.",
"is_bot": false,
"headline": "build(deps): pin direct dependencies to exact versions",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-06-29T20:19:08Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "33f1af3129a94f22a2444b01ca01fd9942e4aa6b",
"body": "Describes the one-pass compress_bytes / in-place compress_file, the fail-soft Outcome, the Gate, the per-OS codecs, the addon feature, and the node/ N-API binding. cargo auto-includes README.md + sets the readme field.",
"is_bot": false,
"headline": "docs: add crate README for the crates.io page",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-06-29T19:58:49Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "0e2857ee8736f37f62807f90629819489c518dc4",
"body": "…leSync\n\nN-API binding over the core: mirrors fs.writeFile/writeFileSync, writing bytes straight to an OS-FS-compressed file in one pass (compress_bytes — no rewrite). Atomic by default (sibling temp + rename, gate judged on the real target path not the temp); { atomic: false } opts out. cp-shaped {\n[…]\n compressed, before, after, reason }), never throws on an unsupported FS. 12 node:test cases cover every branch + outcome; on APFS a 300KB compressible file lands at 4KB on disk, round-trip-identical.",
"is_bot": false,
"headline": "feat(node): decmpfs N-API package — writeDecmpfsFile / writeDecmpfsFi…",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-06-29T19:54:01Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "757c6f2d3fc202ffced0519fbf152011ec5a91cb",
"body": "Add the install-time API the PM agents call:\n\n- Gate: glob (default **/*.node, recursive matcher) AND/OR a size predicate\n (>/>= with B/KB/MB/GB/KiB/MiB/GiB units → bytes); gate.matches(name, len).\n- compress_bytes(path, &content, &Gate): one-pass write of content as an\n OS-compressed file — no wr\n[…]\ncoded\n length — matching socket-btm/bin-infra's ABI.\n\n48 unit tests + 2 btrfs harness tests; cargo test + llvm-cov green on macOS\n(91% lines). btrfs path is ci/Dockerfile; Windows backend is CI-only.",
"is_bot": false,
"headline": "feat: gate + one-pass compress_bytes + addon hybrid unwrap",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-06-29T14:56:42Z",
"body_truncated": true,
"is_coding_agent": false
},
{
"oid": "1c2c8456afcc8043712dc3066c12bc136800654e",
"body": null,
"is_bot": false,
"headline": "test: btrfs Docker harness — real-FS coverage for the linux backend",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-06-29T02:09:38Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "44b88159632209604d464e9af0410c7e6664c47a",
"body": null,
"is_bot": false,
"headline": "test: cover the compress success path + restore edge cases (88%→91%)",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-06-29T01:55:19Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "a733aafc2f4191155722fb3117d635a21435e6c0",
"body": null,
"is_bot": false,
"headline": "test: cover Error display/source + probe (lib.rs 79%→94%)",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-06-29T01:45:17Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "f2f3386d9ad329091cf28906d2dc7872414762f4",
"body": "…std)",
"is_bot": false,
"headline": "refactor: trim to the FS-compression core (drop napi self-loading + z…",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-06-29T01:36:15Z",
"body_truncated": false,
"is_coding_agent": false
},
{
"oid": "60af13753ffb51804ca3deeac22ff96f80a50790",
"body": "…s / NTFS)",
"is_bot": false,
"headline": "feat: FS-compression core (probe + compress_file; APFS decmpfs / btrf…",
"author_name": "jdalton",
"author_login": "jdalton",
"committed_at": "2026-06-29T01:00:50Z",
"body_truncated": false,
"is_coding_agent": false
}
],
"releases_count": 2,
"commits_last_year": 81,
"latest_release_at": "2026-07-24T22:04:56Z",
"latest_release_tag": "v0.1.2",
"releases_from_tags": false,
"days_since_last_push": 0,
"active_weeks_last_year": 2,
"days_since_latest_release": 2,
"mean_days_between_releases": 2.8
},
"community": {
"has_readme": true,
"has_license": true,
"has_description": false,
"has_contributing": true,
"health_percentage": 75,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"ecosystem": {
"packages": [
{
"name": "decmpfs",
"exists": true,
"license": "MIT",
"keywords": [
"apfs",
"btrfs",
"compression",
"decmpfs",
"ntfs",
"filesystem"
],
"ecosystem": "crates",
"matches_repo": false,
"registry_url": "https://crates.io/crates/decmpfs",
"is_deprecated": false,
"latest_version": "0.1.2",
"repository_url": "https://github.com/decmpfs/decmpfs",
"versions_count": 3,
"total_downloads": 6610,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": null,
"monthly_downloads": 2203,
"first_published_at": "2026-06-28T15:17:23.764680Z",
"latest_published_at": "2026-07-24T22:04:53.059540Z",
"latest_version_yanked": false,
"days_since_latest_publish": 2
},
{
"name": "decmpfs",
"exists": true,
"license": "MIT",
"keywords": [
"apfs",
"btrfs",
"compression",
"decmpfs",
"filesystem",
"lzvn",
"native-addon",
"node",
"ntfs",
"zstd"
],
"ecosystem": "npm",
"matches_repo": null,
"registry_url": "https://www.npmjs.com/package/decmpfs",
"is_deprecated": false,
"latest_version": "0.0.0",
"repository_url": null,
"versions_count": 1,
"total_downloads": null,
"dependents_count": null,
"deprecation_note": null,
"maintainers_count": 1,
"monthly_downloads": 182,
"first_published_at": "2026-06-28T15:11:57.798000Z",
"latest_published_at": "2026-06-28T15:11:58.214000Z",
"latest_version_yanked": null,
"days_since_latest_publish": 28
}
]
},
"popularity": {
"forks": 0,
"stars": 0,
"watchers": 0,
"fork_history": {
"days": [],
"complete": true,
"collected": 0,
"total_forks": 0
},
"star_history": {
"days": [],
"complete": true,
"collected": 0,
"total_stars": 0,
"collected_at": null
},
"open_issues_and_prs": 0
},
"ai_readiness": {
"has_nix": false,
"example_dirs": [],
"has_llms_txt": false,
"has_dockerfile": true,
"has_mcp_signal": true,
"bootstrap_files": [],
"api_schema_files": [],
"has_devcontainer": false,
"typecheck_configs": [
".claude/hooks/fleet/actionlint-on-workflow-edit/tsconfig.json",
".claude/hooks/fleet/adversarial-review-nudge/tsconfig.json",
".claude/hooks/fleet/agents-skills-mirror-nudge/tsconfig.json",
".claude/hooks/fleet/ai-config-drift-nudge/tsconfig.json",
".claude/hooks/fleet/ai-config-poisoning-guard/tsconfig.json",
".claude/hooks/fleet/alpha-sort-nudge/tsconfig.json",
".claude/hooks/fleet/answer-questions-nudge/tsconfig.json",
".claude/hooks/fleet/answer-status-requests-nudge/tsconfig.json",
".claude/hooks/fleet/anti-prose-guard/tsconfig.json",
".claude/hooks/fleet/ask-suppression-nudge/tsconfig.json",
".claude/hooks/fleet/auth-rotation-nudge/tsconfig.json",
".claude/hooks/fleet/brew-supply-chain-guard/tsconfig.json",
".claude/hooks/fleet/broken-hook-detector/tsconfig.json",
".claude/hooks/fleet/bundle-flags-guard/tsconfig.json",
".claude/hooks/fleet/c8-ignore-reason-guard/tsconfig.json",
".claude/hooks/fleet/cascade-first-triage-nudge/tsconfig.json",
".claude/hooks/fleet/catch-message-guard/tsconfig.json",
".claude/hooks/fleet/cdn-allowlist-guard/tsconfig.json",
".claude/hooks/fleet/changelog-entry-shape-nudge/tsconfig.json",
".claude/hooks/fleet/changelog-no-empty-guard/tsconfig.json",
".claude/hooks/fleet/check-new-deps/tsconfig.json",
".claude/hooks/fleet/claude-code-action-lockdown-guard/tsconfig.json",
".claude/hooks/fleet/claude-lockdown-guard/tsconfig.json",
".claude/hooks/fleet/claude-md-defer-detail-nudge/tsconfig.json",
".claude/hooks/fleet/claude-md-rule-add-guard/tsconfig.json",
".claude/hooks/fleet/claude-md-section-size-guard/tsconfig.json",
".claude/hooks/fleet/claude-md-size-guard/tsconfig.json",
".claude/hooks/fleet/claude-segmentation-guard/tsconfig.json",
".claude/hooks/fleet/clone-reviewed-repo-nudge/tsconfig.json",
".claude/hooks/fleet/codex-no-write-guard/tsconfig.json",
".claude/hooks/fleet/codex-session-budget-guard/tsconfig.json",
".claude/hooks/fleet/commit-author-guard/tsconfig.json",
".claude/hooks/fleet/commit-cadence-nudge/tsconfig.json",
".claude/hooks/fleet/commit-message-format-guard/tsconfig.json",
".claude/hooks/fleet/commit-pr-nudge/tsconfig.json",
".claude/hooks/fleet/commit-size-nudge/tsconfig.json",
".claude/hooks/fleet/compound-lessons-nudge/tsconfig.json",
".claude/hooks/fleet/concurrent-cargo-build-guard/tsconfig.json",
".claude/hooks/fleet/consumer-grep-nudge/tsconfig.json",
".claude/hooks/fleet/convo-prose-nudge/tsconfig.json",
".claude/hooks/fleet/cross-repo-guard/tsconfig.json",
".claude/hooks/fleet/dated-citation-guard/tsconfig.json",
".claude/hooks/fleet/default-branch-guard/tsconfig.json",
".claude/hooks/fleet/dep-derived-source-nudge/tsconfig.json",
".claude/hooks/fleet/dirty-lockfile-nudge/tsconfig.json",
".claude/hooks/fleet/dirty-worktree-stop-guard/tsconfig.json",
".claude/hooks/fleet/dogfood-cascade-nudge/tsconfig.json",
".claude/hooks/fleet/dont-blame-nudge/tsconfig.json",
".claude/hooks/fleet/dont-stop-mid-queue-nudge/tsconfig.json",
".claude/hooks/fleet/drift-check-nudge/tsconfig.json",
".claude/hooks/fleet/enqueue-dont-pivot-nudge/tsconfig.json",
".claude/hooks/fleet/enterprise-push-nudge/tsconfig.json",
".claude/hooks/fleet/error-message-quality-nudge/tsconfig.json",
".claude/hooks/fleet/excuse-detector/tsconfig.json",
".claude/hooks/fleet/file-size-nudge/tsconfig.json",
".claude/hooks/fleet/fixes-need-tests-nudge/tsconfig.json",
".claude/hooks/fleet/follow-direct-imperative-nudge/tsconfig.json",
".claude/hooks/fleet/gh-token-hygiene-guard/tsconfig.json",
".claude/hooks/fleet/git-config-write-guard/tsconfig.json",
".claude/hooks/fleet/git-identity-drift-nudge/tsconfig.json",
".claude/hooks/fleet/gitmodules-comment-guard/tsconfig.json",
".claude/hooks/fleet/golden-fixture-naming-guard/tsconfig.json",
".claude/hooks/fleet/handoff-command-nudge/tsconfig.json",
".claude/hooks/fleet/headroom-proxy-start/tsconfig.json",
".claude/hooks/fleet/honesty-framing-guard/tsconfig.json",
".claude/hooks/fleet/immutable-release-guard/tsconfig.json",
".claude/hooks/fleet/inline-script-defer-guard/tsconfig.json",
".claude/hooks/fleet/judgment-nudge/tsconfig.json",
".claude/hooks/fleet/keep-working-while-waiting-nudge/tsconfig.json",
".claude/hooks/fleet/land-fast-nudge/tsconfig.json",
".claude/hooks/fleet/lock-step-ref-nudge/tsconfig.json",
".claude/hooks/fleet/logger-guard/tsconfig.json",
".claude/hooks/fleet/markdown-filename-guard/tsconfig.json",
".claude/hooks/fleet/memory-codify-nudge/tsconfig.json",
".claude/hooks/fleet/minimum-release-age-guard/tsconfig.json",
".claude/hooks/fleet/module-noun-name-guard/tsconfig.json",
".claude/hooks/fleet/new-hook-claude-md-guard/tsconfig.json",
".claude/hooks/fleet/no-blanket-file-exclusion-guard/tsconfig.json",
".claude/hooks/fleet/no-blind-keychain-read-guard/tsconfig.json",
".claude/hooks/fleet/no-boolean-trap-guard/tsconfig.json",
".claude/hooks/fleet/no-branch-reuse-nudge/tsconfig.json",
".claude/hooks/fleet/no-corepack-guard/tsconfig.json",
".claude/hooks/fleet/no-direct-linter-guard/tsconfig.json",
".claude/hooks/fleet/no-disable-lint-rule-guard/tsconfig.json",
".claude/hooks/fleet/no-empty-commit-guard/tsconfig.json",
".claude/hooks/fleet/no-env-kill-switch-guard/tsconfig.json",
".claude/hooks/fleet/no-ext-issue-ref-guard/tsconfig.json",
".claude/hooks/fleet/no-file-oxlint-disable-guard/tsconfig.json",
".claude/hooks/fleet/no-fleet-fork-guard/tsconfig.json",
".claude/hooks/fleet/no-force-push-guard/tsconfig.json",
".claude/hooks/fleet/no-github-ai-attribution-guard/tsconfig.json",
".claude/hooks/fleet/no-hook-cmd-regex-guard/tsconfig.json",
".claude/hooks/fleet/no-meta-comments-guard/tsconfig.json",
".claude/hooks/fleet/no-new-config-guard/tsconfig.json",
".claude/hooks/fleet/no-non-fleet-push-guard/tsconfig.json",
".claude/hooks/fleet/no-npm-otp-flag-guard/tsconfig.json",
".claude/hooks/fleet/no-orphaned-staging/tsconfig.json",
".claude/hooks/fleet/no-other-linters-guard/tsconfig.json",
".claude/hooks/fleet/no-pkgjson-pnpm-overrides-guard/tsconfig.json",
".claude/hooks/fleet/no-placeholder-commit-subject-guard/tsconfig.json",
".claude/hooks/fleet/no-platform-import-guard/tsconfig.json",
".claude/hooks/fleet/no-pm-exec-guard/tsconfig.json",
".claude/hooks/fleet/no-pr-from-default-branch-guard/tsconfig.json",
".claude/hooks/fleet/no-pr-from-default-checkout-guard/tsconfig.json",
".claude/hooks/fleet/no-pr-review-verdict-guard/tsconfig.json",
".claude/hooks/fleet/no-premature-commit-kill-guard/tsconfig.json",
".claude/hooks/fleet/no-private-path-in-source-guard/tsconfig.json",
".claude/hooks/fleet/no-private-ref-in-tests-docs-guard/tsconfig.json",
".claude/hooks/fleet/no-registry-mutation-in-repo-script-nudge/tsconfig.json",
".claude/hooks/fleet/no-removal-comment-nudge/tsconfig.json",
".claude/hooks/fleet/no-repo-scope-in-fleet-config-guard/tsconfig.json",
".claude/hooks/fleet/no-revert-guard/tsconfig.json",
".claude/hooks/fleet/no-strip-types-guard/tsconfig.json",
".claude/hooks/fleet/no-subagent-commit-guard/tsconfig.json",
".claude/hooks/fleet/no-tail-install-out-guard/tsconfig.json",
".claude/hooks/fleet/no-test-in-scripts-guard/tsconfig.json",
".claude/hooks/fleet/no-token-in-dotenv-guard/tsconfig.json",
".claude/hooks/fleet/no-total-squash-guard/tsconfig.json",
".claude/hooks/fleet/no-tsx-guard/tsconfig.json",
".claude/hooks/fleet/no-underscore-ident-guard/tsconfig.json",
".claude/hooks/fleet/no-unisolated-git-fixture-guard/tsconfig.json",
".claude/hooks/fleet/no-unmocked-net-guard/tsconfig.json",
".claude/hooks/fleet/no-upstream-gitlink-guard/tsconfig.json",
".claude/hooks/fleet/no-verify-format-nudge/tsconfig.json",
".claude/hooks/fleet/node-modules-staging-guard/tsconfig.json",
".claude/hooks/fleet/non-fleet-pr-issue-ask-guard/tsconfig.json",
".claude/hooks/fleet/npm-otp-flow-nudge/tsconfig.json",
".claude/hooks/fleet/npmrc-trust-optout-guard/tsconfig.json",
".claude/hooks/fleet/options-param-naming-guard/tsconfig.json",
".claude/hooks/fleet/overeager-staging-guard/tsconfig.json",
".claude/hooks/fleet/oxlint-plugin-load-nudge/tsconfig.json",
".claude/hooks/fleet/package-manager-auto-update-guard/tsconfig.json",
".claude/hooks/fleet/parallel-agent-edit-guard/tsconfig.json",
".claude/hooks/fleet/parallel-agent-on-stop-nudge/tsconfig.json",
".claude/hooks/fleet/parallel-agent-removal-nudge/tsconfig.json",
".claude/hooks/fleet/parallel-agent-staging-guard/tsconfig.json",
".claude/hooks/fleet/path-guard/tsconfig.json",
".claude/hooks/fleet/path-regex-normalize-nudge/tsconfig.json",
".claude/hooks/fleet/paths-mts-inherit-guard/tsconfig.json",
".claude/hooks/fleet/personal-path-guard/tsconfig.json",
".claude/hooks/fleet/plan-location-guard/tsconfig.json",
".claude/hooks/fleet/plan-review-nudge/tsconfig.json",
".claude/hooks/fleet/pnpm-filter-zero-match-nudge/tsconfig.json",
".claude/hooks/fleet/pointer-comment-nudge/tsconfig.json",
".claude/hooks/fleet/post-push-ci-monitor-nudge/tsconfig.json",
".claude/hooks/fleet/pr-vs-push-default-nudge/tsconfig.json",
".claude/hooks/fleet/pre-commit-race-nudge/tsconfig.json",
".claude/hooks/fleet/prefer-async-spawn-guard/tsconfig.json",
".claude/hooks/fleet/prefer-evergreen-target-nudge/tsconfig.json",
".claude/hooks/fleet/prefer-fn-decl-guard/tsconfig.json",
".claude/hooks/fleet/prefer-json-clone-guard/tsconfig.json",
".claude/hooks/fleet/prefer-pipx-over-pip-guard/tsconfig.json",
".claude/hooks/fleet/prefer-rebase-over-revert-nudge/tsconfig.json",
".claude/hooks/fleet/prefer-type-import-guard/tsconfig.json",
".claude/hooks/fleet/prefer-vitest-guard/tsconfig.json",
".claude/hooks/fleet/primary-checkout-branch-guard/tsconfig.json",
".claude/hooks/fleet/primary-checkout-on-default-stop-guard/tsconfig.json",
".claude/hooks/fleet/private-name-nudge/tsconfig.json",
".claude/hooks/fleet/proc-environ-exfil-guard/tsconfig.json",
".claude/hooks/fleet/prompt-injection-guard/tsconfig.json",
".claude/hooks/fleet/provenance-publish-nudge/tsconfig.json",
".claude/hooks/fleet/public-surface-nudge/tsconfig.json",
".claude/hooks/fleet/pull-request-target-guard/tsconfig.json",
".claude/hooks/fleet/push-protected-branch-guard/tsconfig.json",
".claude/hooks/fleet/readme-fleet-shape-guard/tsconfig.json",
".claude/hooks/fleet/release-tag-tied-guard/tsconfig.json",
".claude/hooks/fleet/release-workflow-guard/tsconfig.json",
".claude/hooks/fleet/reply-prose-nudge/tsconfig.json",
".claude/hooks/fleet/report-location-guard/tsconfig.json",
".claude/hooks/fleet/reserved-script-dir-guard/tsconfig.json",
".claude/hooks/fleet/rg-replace-flag-nudge/tsconfig.json",
".claude/hooks/fleet/scan-label-in-commit-guard/tsconfig.json",
".claude/hooks/fleet/secret-content-guard/tsconfig.json",
".claude/hooks/fleet/session-handoff-nudge/tsconfig.json",
".claude/hooks/fleet/setup-basics-tools/tsconfig.json",
".claude/hooks/fleet/setup-claude-scanners/tsconfig.json",
".claude/hooks/fleet/setup-firewall/tsconfig.json",
".claude/hooks/fleet/setup-misc-tools/tsconfig.json",
".claude/hooks/fleet/setup-security-tools/tsconfig.json",
".claude/hooks/fleet/setup-signing/tsconfig.json",
".claude/hooks/fleet/shallow-clone-guard/tsconfig.json",
".claude/hooks/fleet/skill-usage-logger/tsconfig.json",
".claude/hooks/fleet/small-pr-nudge/tsconfig.json",
".claude/hooks/fleet/soak-exclude-date-guard/tsconfig.json",
".claude/hooks/fleet/soak-exclude-scope-guard/tsconfig.json",
".claude/hooks/fleet/soak-pin-needs-annotation-guard/tsconfig.json",
".claude/hooks/fleet/squash-history-nudge/tsconfig.json",
".claude/hooks/fleet/stale-process-sweeper/tsconfig.json",
".claude/hooks/fleet/stop-claim-verify-nudge/tsconfig.json",
".claude/hooks/fleet/sweep-ds-store/tsconfig.json",
".claude/hooks/fleet/target-arch-env-guard/tsconfig.json",
".claude/hooks/fleet/test-script-defers-guard/tsconfig.json",
".claude/hooks/fleet/token-guard/tsconfig.json",
".claude/hooks/fleet/token-spend-guard/tsconfig.json",
".claude/hooks/fleet/trust-downgrade-guard/tsconfig.json",
".claude/hooks/fleet/unbacked-claim-commit-guard/tsconfig.json",
".claude/hooks/fleet/uncodified-lesson-nudge/tsconfig.json",
".claude/hooks/fleet/unpushed-main-nudge/tsconfig.json",
".claude/hooks/fleet/untrusted-coauthor-guard/tsconfig.json",
".claude/hooks/fleet/uses-sha-verify-guard/tsconfig.json",
".claude/hooks/fleet/variant-analysis-nudge/tsconfig.json",
".claude/hooks/fleet/verify-absence-claims-nudge/tsconfig.json",
".claude/hooks/fleet/verify-render-pre-commit-nudge/tsconfig.json",
".claude/hooks/fleet/version-bump-order-guard/tsconfig.json",
".claude/hooks/fleet/vitest-vs-node-test-guard/tsconfig.json",
".claude/hooks/fleet/wheelhouse-drift-guard/tsconfig.json",
".claude/hooks/fleet/workflow-multiline-body-guard/tsconfig.json",
".claude/hooks/fleet/workflow-uses-comment-guard/tsconfig.json",
".claude/hooks/fleet/worktree-remove-relink-nudge/tsconfig.json",
"napi/decmpfs/tsconfig.json",
"tsconfig.json"
],
"toolchain_manifests": [
"Cargo.toml",
"crates/decmpfs/Cargo.toml",
"fuzz/Cargo.toml",
"napi/decmpfs/Cargo.toml"
],
"largest_source_bytes": 60023,
"source_files_sampled": 63,
"oversized_source_files": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"dependencies": {
"manifests": [
"Cargo.toml",
"fuzz/Cargo.toml",
"package.json"
],
"advisories": {
"error": null,
"scope": "published_package",
"source": "osv",
"findings": [],
"collected": true,
"malicious": [],
"truncated": false,
"by_severity": {},
"advisory_count": 0,
"affected_count": 0,
"assessed_count": 62,
"malicious_count": 0,
"assessed_package": "crates:decmpfs@0.1.2",
"unassessed_count": 0,
"direct_affected_count": 0
},
"ecosystems": [
"crates",
"npm"
],
"dependencies": [
{
"name": "zstd",
"manifest": "crates/decmpfs/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "=0.13.3"
},
{
"name": "sha2",
"manifest": "crates/decmpfs/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "=0.10.9"
},
{
"name": "napi",
"manifest": "napi/decmpfs/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "3"
},
{
"name": "napi-derive",
"manifest": "napi/decmpfs/Cargo.toml",
"ecosystem": "crates",
"version_constraint": "3"
},
{
"name": "decmpfs",
"manifest": "napi/decmpfs/Cargo.toml",
"ecosystem": "crates",
"version_constraint": null
}
],
"all_dependencies": {
"error": null,
"source": "github-sbom",
"packages": [
{
"name": "napi",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "napi",
"direct": true,
"version": "3.10.1",
"ecosystem": "crates"
},
{
"name": "napi-derive",
"direct": true,
"version": null,
"ecosystem": "crates"
},
{
"name": "napi-derive",
"direct": true,
"version": "3.5.9",
"ecosystem": "crates"
},
{
"name": "sha2",
"direct": true,
"version": "0.10.9",
"ecosystem": "crates"
},
{
"name": "zstd",
"direct": true,
"version": "0.13.3",
"ecosystem": "crates"
},
{
"name": "anstyle",
"direct": false,
"version": "1.0.14",
"ecosystem": "crates"
},
{
"name": "arbitrary",
"direct": false,
"version": "1.4.2",
"ecosystem": "crates"
},
{
"name": "autocfg",
"direct": false,
"version": "1.5.1",
"ecosystem": "crates"
},
{
"name": "bit-set",
"direct": false,
"version": "0.8.0",
"ecosystem": "crates"
},
{
"name": "bit-vec",
"direct": false,
"version": "0.8.0",
"ecosystem": "crates"
},
{
"name": "bitflags",
"direct": false,
"version": "2.13.0",
"ecosystem": "crates"
},
{
"name": "block-buffer",
"direct": false,
"version": "0.10.4",
"ecosystem": "crates"
},
{
"name": "cc",
"direct": false,
"version": "1.2.65",
"ecosystem": "crates"
},
{
"name": "cc",
"direct": false,
"version": "1.2.67",
"ecosystem": "crates"
},
{
"name": "cfg-if",
"direct": false,
"version": "1.0.4",
"ecosystem": "crates"
},
{
"name": "convert_case",
"direct": false,
"version": "0.11.0",
"ecosystem": "crates"
},
{
"name": "cpufeatures",
"direct": false,
"version": "0.2.17",
"ecosystem": "crates"
},
{
"name": "crypto-common",
"direct": false,
"version": "0.1.7",
"ecosystem": "crates"
},
{
"name": "ctor",
"direct": false,
"version": "1.0.7",
"ecosystem": "crates"
},
{
"name": "derive_arbitrary",
"direct": false,
"version": "1.4.2",
"ecosystem": "crates"
},
{
"name": "digest",
"direct": false,
"version": "0.10.7",
"ecosystem": "crates"
},
{
"name": "downcast",
"direct": false,
"version": "0.11.0",
"ecosystem": "crates"
},
{
"name": "errno",
"direct": false,
"version": "0.3.14",
"ecosystem": "crates"
},
{
"name": "fastrand",
"direct": false,
"version": "2.4.1",
"ecosystem": "crates"
},
{
"name": "find-msvc-tools",
"direct": false,
"version": "0.1.9",
"ecosystem": "crates"
},
{
"name": "fnv",
"direct": false,
"version": "1.0.7",
"ecosystem": "crates"
},
{
"name": "fragile",
"direct": false,
"version": "2.1.0",
"ecosystem": "crates"
},
{
"name": "futures",
"direct": false,
"version": "0.3.32",
"ecosystem": "crates"
},
{
"name": "futures-channel",
"direct": false,
"version": "0.3.32",
"ecosystem": "crates"
},
{
"name": "futures-core",
"direct": false,
"version": "0.3.32",
"ecosystem": "crates"
},
{
"name": "futures-executor",
"direct": false,
"version": "0.3.32",
"ecosystem": "crates"
},
{
"name": "futures-io",
"direct": false,
"version": "0.3.32",
"ecosystem": "crates"
},
{
"name": "futures-macro",
"direct": false,
"version": "0.3.32",
"ecosystem": "crates"
},
{
"name": "futures-sink",
"direct": false,
"version": "0.3.32",
"ecosystem": "crates"
},
{
"name": "futures-task",
"direct": false,
"version": "0.3.32",
"ecosystem": "crates"
},
{
"name": "futures-util",
"direct": false,
"version": "0.3.32",
"ecosystem": "crates"
},
{
"name": "generic-array",
"direct": false,
"version": "0.14.7",
"ecosystem": "crates"
},
{
"name": "getrandom",
"direct": false,
"version": "0.3.4",
"ecosystem": "crates"
},
{
"name": "getrandom",
"direct": false,
"version": "0.4.3",
"ecosystem": "crates"
},
{
"name": "jobserver",
"direct": false,
"version": "0.1.34",
"ecosystem": "crates"
},
{
"name": "jobserver",
"direct": false,
"version": "0.1.35",
"ecosystem": "crates"
},
{
"name": "libc",
"direct": false,
"version": "0.2.186",
"ecosystem": "crates"
},
{
"name": "libfuzzer-sys",
"direct": false,
"version": "0.4.13",
"ecosystem": "crates"
},
{
"name": "libloading",
"direct": false,
"version": "0.9.0",
"ecosystem": "crates"
},
{
"name": "linux-raw-sys",
"direct": false,
"version": "0.12.1",
"ecosystem": "crates"
},
{
"name": "memchr",
"direct": false,
"version": "2.8.2",
"ecosystem": "crates"
},
{
"name": "mockall",
"direct": false,
"version": "0.15.0",
"ecosystem": "crates"
},
{
"name": "mockall_derive",
"direct": false,
"version": "0.15.0",
"ecosystem": "crates"
},
{
"name": "napi-build",
"direct": false,
"version": null,
"ecosystem": "crates"
},
{
"name": "napi-build",
"direct": false,
"version": "2.3.2",
"ecosystem": "crates"
},
{
"name": "napi-derive-backend",
"direct": false,
"version": "5.1.1",
"ecosystem": "crates"
},
{
"name": "napi-sys",
"direct": false,
"version": "3.2.2",
"ecosystem": "crates"
},
{
"name": "nohash-hasher",
"direct": false,
"version": "0.2.0",
"ecosystem": "crates"
},
{
"name": "num-traits",
"direct": false,
"version": "0.2.19",
"ecosystem": "crates"
},
{
"name": "once_cell",
"direct": false,
"version": "1.21.4",
"ecosystem": "crates"
},
{
"name": "pin-project-lite",
"direct": false,
"version": "0.2.17",
"ecosystem": "crates"
},
{
"name": "pkg-config",
"direct": false,
"version": "0.3.33",
"ecosystem": "crates"
},
{
"name": "ppv-lite86",
"direct": false,
"version": "0.2.21",
"ecosystem": "crates"
},
{
"name": "predicates",
"direct": false,
"version": "3.1.4",
"ecosystem": "crates"
},
{
"name": "predicates-core",
"direct": false,
"version": "1.0.10",
"ecosystem": "crates"
},
{
"name": "predicates-tree",
"direct": false,
"version": "1.0.13",
"ecosystem": "crates"
},
{
"name": "proc-macro2",
"direct": false,
"version": "1.0.106",
"ecosystem": "crates"
},
{
"name": "proptest",
"direct": false,
"version": "1.11.0",
"ecosystem": "crates"
},
{
"name": "quick-error",
"direct": false,
"version": "1.2.3",
"ecosystem": "crates"
},
{
"name": "quote",
"direct": false,
"version": "1.0.46",
"ecosystem": "crates"
},
{
"name": "r-efi",
"direct": false,
"version": "5.3.0",
"ecosystem": "crates"
},
{
"name": "r-efi",
"direct": false,
"version": "6.0.0",
"ecosystem": "crates"
},
{
"name": "rand",
"direct": false,
"version": "0.9.5",
"ecosystem": "crates"
},
{
"name": "rand_chacha",
"direct": false,
"version": "0.9.0",
"ecosystem": "crates"
},
{
"name": "rand_core",
"direct": false,
"version": "0.9.5",
"ecosystem": "crates"
},
{
"name": "rand_xorshift",
"direct": false,
"version": "0.4.0",
"ecosystem": "crates"
},
{
"name": "regex-syntax",
"direct": false,
"version": "0.8.11",
"ecosystem": "crates"
},
{
"name": "rustc-hash",
"direct": false,
"version": "2.1.3",
"ecosystem": "crates"
},
{
"name": "rustix",
"direct": false,
"version": "1.1.4",
"ecosystem": "crates"
},
{
"name": "rusty-fork",
"direct": false,
"version": "0.3.1",
"ecosystem": "crates"
},
{
"name": "semver",
"direct": false,
"version": "1.0.28",
"ecosystem": "crates"
},
{
"name": "shlex",
"direct": false,
"version": "2.0.1",
"ecosystem": "crates"
},
{
"name": "slab",
"direct": false,
"version": "0.4.12",
"ecosystem": "crates"
},
{
"name": "syn",
"direct": false,
"version": "2.0.118",
"ecosystem": "crates"
},
{
"name": "tempfile",
"direct": false,
"version": "3.27.0",
"ecosystem": "crates"
},
{
"name": "termtree",
"direct": false,
"version": "0.5.1",
"ecosystem": "crates"
},
{
"name": "typenum",
"direct": false,
"version": "1.20.1",
"ecosystem": "crates"
},
{
"name": "unarray",
"direct": false,
"version": "0.1.4",
"ecosystem": "crates"
},
{
"name": "unicode-ident",
"direct": false,
"version": "1.0.24",
"ecosystem": "crates"
},
{
"name": "unicode-segmentation",
"direct": false,
"version": "1.13.3",
"ecosystem": "crates"
},
{
"name": "version_check",
"direct": false,
"version": "0.9.5",
"ecosystem": "crates"
},
{
"name": "wait-timeout",
"direct": false,
"version": "0.2.1",
"ecosystem": "crates"
},
{
"name": "wasip2",
"direct": false,
"version": "1.0.4+wasi-0.2.12",
"ecosystem": "crates"
},
{
"name": "windows-link",
"direct": false,
"version": "0.2.1",
"ecosystem": "crates"
},
{
"name": "windows-sys",
"direct": false,
"version": "0.59.0",
"ecosystem": "crates"
},
{
"name": "windows-targets",
"direct": false,
"version": "0.52.6",
"ecosystem": "crates"
},
{
"name": "windows_aarch64_gnullvm",
"direct": false,
"version": "0.52.6",
"ecosystem": "crates"
},
{
"name": "windows_aarch64_msvc",
"direct": false,
"version": "0.52.6",
"ecosystem": "crates"
},
{
"name": "windows_i686_gnu",
"direct": false,
"version": "0.52.6",
"ecosystem": "crates"
},
{
"name": "windows_i686_gnullvm",
"direct": false,
"version": "0.52.6",
"ecosystem": "crates"
},
{
"name": "windows_i686_msvc",
"direct": false,
"version": "0.52.6",
"ecosystem": "crates"
},
{
"name": "windows_x86_64_gnu",
"direct": false,
"version": "0.52.6",
"ecosystem": "crates"
},
{
"name": "windows_x86_64_gnullvm",
"direct": false,
"version": "0.52.6",
"ecosystem": "crates"
},
{
"name": "windows_x86_64_msvc",
"direct": false,
"version": "0.52.6",
"ecosystem": "crates"
},
{
"name": "wit-bindgen",
"direct": false,
"version": "0.57.1",
"ecosystem": "crates"
},
{
"name": "zerocopy",
"direct": false,
"version": "0.8.55",
"ecosystem": "crates"
},
{
"name": "zerocopy-derive",
"direct": false,
"version": "0.8.55",
"ecosystem": "crates"
},
{
"name": "zstd-safe",
"direct": false,
"version": "7.2.4",
"ecosystem": "crates"
},
{
"name": "zstd-sys",
"direct": false,
"version": "2.0.16+zstd.1.5.7",
"ecosystem": "crates"
},
{
"name": "@decmpfs/darwin-arm64",
"direct": false,
"version": "0.1.2",
"ecosystem": "npm"
},
{
"name": "@decmpfs/darwin-x64",
"direct": false,
"version": "0.1.2",
"ecosystem": "npm"
},
{
"name": "@decmpfs/linux-arm64-gnu",
"direct": false,
"version": "0.1.2",
"ecosystem": "npm"
},
{
"name": "@decmpfs/linux-x64-gnu",
"direct": false,
"version": "0.1.2",
"ecosystem": "npm"
},
{
"name": "@decmpfs/win32-x64-msvc",
"direct": false,
"version": "0.1.2",
"ecosystem": "npm"
},
{
"name": "@pnpm/exe",
"direct": false,
"version": "11.9.0",
"ecosystem": "npm"
},
{
"name": "@pnpm/linux-arm64",
"direct": false,
"version": "11.9.0",
"ecosystem": "npm"
},
{
"name": "@pnpm/linux-x64",
"direct": false,
"version": "11.9.0",
"ecosystem": "npm"
},
{
"name": "@pnpm/linuxstatic-arm64",
"direct": false,
"version": "11.9.0",
"ecosystem": "npm"
},
{
"name": "@pnpm/linuxstatic-x64",
"direct": false,
"version": "11.9.0",
"ecosystem": "npm"
},
{
"name": "@pnpm/macos-arm64",
"direct": false,
"version": "11.9.0",
"ecosystem": "npm"
},
{
"name": "@pnpm/win-arm64",
"direct": false,
"version": "11.9.0",
"ecosystem": "npm"
},
{
"name": "@pnpm/win-x64",
"direct": false,
"version": "11.9.0",
"ecosystem": "npm"
},
{
"name": "@reflink/reflink",
"direct": false,
"version": "0.1.19",
"ecosystem": "npm"
},
{
"name": "@reflink/reflink-darwin-arm64",
"direct": false,
"version": "0.1.19",
"ecosystem": "npm"
},
{
"name": "@reflink/reflink-darwin-x64",
"direct": false,
"version": "0.1.19",
"ecosystem": "npm"
},
{
"name": "@reflink/reflink-linux-arm64-gnu",
"direct": false,
"version": "0.1.19",
"ecosystem": "npm"
},
{
"name": "@reflink/reflink-linux-arm64-musl",
"direct": false,
"version": "0.1.19",
"ecosystem": "npm"
},
{
"name": "@reflink/reflink-linux-x64-gnu",
"direct": false,
"version": "0.1.19",
"ecosystem": "npm"
},
{
"name": "@reflink/reflink-linux-x64-musl",
"direct": false,
"version": "0.1.19",
"ecosystem": "npm"
},
{
"name": "@reflink/reflink-win32-arm64-msvc",
"direct": false,
"version": "0.1.19",
"ecosystem": "npm"
},
{
"name": "@reflink/reflink-win32-x64-msvc",
"direct": false,
"version": "0.1.19",
"ecosystem": "npm"
},
{
"name": "@sinclair/typebox",
"direct": false,
"version": "catalog:",
"ecosystem": "npm"
},
{
"name": "@socketregistry/packageurl-js-stable",
"direct": false,
"version": "catalog:",
"ecosystem": "npm"
},
{
"name": "@socketsecurity/lib-stable",
"direct": false,
"version": "catalog:",
"ecosystem": "npm"
},
{
"name": "@socketsecurity/sdk-stable",
"direct": false,
"version": "catalog:",
"ecosystem": "npm"
},
{
"name": "@types/node",
"direct": false,
"version": "catalog:",
"ecosystem": "npm"
},
{
"name": "@ultrathink/acorn.wasm",
"direct": false,
"version": "catalog:",
"ecosystem": "npm"
},
{
"name": "compromise",
"direct": false,
"version": "catalog:",
"ecosystem": "npm"
},
{
"name": "detect-libc",
"direct": false,
"version": "2.1.2",
"ecosystem": "npm"
},
{
"name": "pnpm",
"direct": false,
"version": "11.9.0",
"ecosystem": "npm"
},
{
"name": "regjsparser",
"direct": false,
"version": "catalog:",
"ecosystem": "npm"
},
{
"name": "shell-quote",
"direct": false,
"version": "catalog:",
"ecosystem": "npm"
},
{
"name": "typescript",
"direct": false,
"version": "catalog:",
"ecosystem": "npm"
},
{
"name": "aiohappyeyeballs",
"direct": false,
"version": "2.6.2",
"ecosystem": "pypi"
},
{
"name": "aiohttp",
"direct": false,
"version": "3.14.1",
"ecosystem": "pypi"
},
{
"name": "aiosignal",
"direct": false,
"version": "1.4.0",
"ecosystem": "pypi"
},
{
"name": "annotated-doc",
"direct": false,
"version": "0.0.4",
"ecosystem": "pypi"
},
{
"name": "annotated-types",
"direct": false,
"version": "0.7.0",
"ecosystem": "pypi"
},
{
"name": "anyio",
"direct": false,
"version": "4.13.0",
"ecosystem": "pypi"
},
{
"name": "ast-grep-cli",
"direct": false,
"version": "0.42.3",
"ecosystem": "pypi"
},
{
"name": "async-timeout",
"direct": false,
"version": "5.0.1",
"ecosystem": "pypi"
},
{
"name": "attrs",
"direct": false,
"version": "26.1.0",
"ecosystem": "pypi"
},
{
"name": "blockbuster",
"direct": false,
"version": "1.5.26",
"ecosystem": "pypi"
},
{
"name": "certifi",
"direct": false,
"version": "2026.4.22",
"ecosystem": "pypi"
},
{
"name": "certifi",
"direct": false,
"version": "2026.5.20",
"ecosystem": "pypi"
},
{
"name": "cffi",
"direct": false,
"version": "2.0.0",
"ecosystem": "pypi"
},
{
"name": "charset-normalizer",
"direct": false,
"version": "3.4.7",
"ecosystem": "pypi"
},
{
"name": "click",
"direct": false,
"version": "8.4.0",
"ecosystem": "pypi"
},
{
"name": "click",
"direct": false,
"version": "8.4.1",
"ecosystem": "pypi"
},
{
"name": "cloudpickle",
"direct": false,
"version": "3.1.2",
"ecosystem": "pypi"
},
{
"name": "colorama",
"direct": false,
"version": "0.4.6",
"ecosystem": "pypi"
},
{
"name": "coloredlogs",
"direct": false,
"version": "15.0.1",
"ecosystem": "pypi"
},
{
"name": "croniter",
"direct": false,
"version": "6.2.2",
"ecosystem": "pypi"
},
{
"name": "cryptography",
"direct": false,
"version": "48.0.1",
"ecosystem": "pypi"
},
{
"name": "distro",
"direct": false,
"version": "1.9.0",
"ecosystem": "pypi"
},
{
"name": "exceptiongroup",
"direct": false,
"version": "1.3.1",
"ecosystem": "pypi"
},
{
"name": "fastapi",
"direct": false,
"version": "0.136.3",
"ecosystem": "pypi"
},
{
"name": "fastuuid",
"direct": false,
"version": "0.14.0",
"ecosystem": "pypi"
},
{
"name": "filelock",
"direct": false,
"version": "3.29.1",
"ecosystem": "pypi"
},
{
"name": "flatbuffers",
"direct": false,
"version": "25.12.19",
"ecosystem": "pypi"
},
{
"name": "forbiddenfruit",
"direct": false,
"version": "0.1.4",
"ecosystem": "pypi"
},
{
"name": "frozenlist",
"direct": false,
"version": "1.8.0",
"ecosystem": "pypi"
},
{
"name": "fsspec",
"direct": false,
"version": "2026.4.0",
"ecosystem": "pypi"
},
{
"name": "googleapis-common-protos",
"direct": false,
"version": "1.75.0",
"ecosystem": "pypi"
},
{
"name": "grpcio",
"direct": false,
"version": "1.78.0",
"ecosystem": "pypi"
},
{
"name": "grpcio-health-checking",
"direct": false,
"version": "1.78.0",
"ecosystem": "pypi"
},
{
"name": "grpcio-tools",
"direct": false,
"version": "1.78.0",
"ecosystem": "pypi"
},
{
"name": "h11",
"direct": false,
"version": "0.16.0",
"ecosystem": "pypi"
},
{
"name": "h2",
"direct": false,
"version": "4.3.0",
"ecosystem": "pypi"
},
{
"name": "headroom-ai",
"direct": false,
"version": "0.30.0",
"ecosystem": "pypi"
},
{
"name": "hf-xet",
"direct": false,
"version": "1.5.1",
"ecosystem": "pypi"
},
{
"name": "hpack",
"direct": false,
"version": "4.1.0",
"ecosystem": "pypi"
},
{
"name": "httpcore",
"direct": false,
"version": "1.0.9",
"ecosystem": "pypi"
},
{
"name": "httptools",
"direct": false,
"version": "0.7.1",
"ecosystem": "pypi"
},
{
"name": "httpx",
"direct": false,
"version": "0.28.1",
"ecosystem": "pypi"
},
{
"name": "httpx-sse",
"direct": false,
"version": "0.4.3",
"ecosystem": "pypi"
},
{
"name": "huggingface-hub",
"direct": false,
"version": "1.18.0",
"ecosystem": "pypi"
},
{
"name": "humanfriendly",
"direct": false,
"version": "10.0",
"ecosystem": "pypi"
},
{
"name": "hyperframe",
"direct": false,
"version": "6.1.0",
"ecosystem": "pypi"
},
{
"name": "idna",
"direct": false,
"version": "3.15",
"ecosystem": "pypi"
},
{
"name": "idna",
"direct": false,
"version": "3.18",
"ecosystem": "pypi"
},
{
"name": "importlib-metadata",
"direct": false,
"version": "8.7.1",
"ecosystem": "pypi"
},
{
"name": "importlib-metadata",
"direct": false,
"version": "8.9.0",
"ecosystem": "pypi"
},
{
"name": "jinja2",
"direct": false,
"version": "3.1.6",
"ecosystem": "pypi"
},
{
"name": "jiter",
"direct": false,
"version": "0.14.0",
"ecosystem": "pypi"
},
{
"name": "jiter",
"direct": false,
"version": "0.15.0",
"ecosystem": "pypi"
},
{
"name": "jsonpatch",
"direct": false,
"version": "1.33",
"ecosystem": "pypi"
},
{
"name": "jsonpointer",
"direct": false,
"version": "3.1.1",
"ecosystem": "pypi"
},
{
"name": "jsonschema",
"direct": false,
"version": "4.26.0",
"ecosystem": "pypi"
},
{
"name": "jsonschema-rs",
"direct": false,
"version": "0.44.1",
"ecosystem": "pypi"
},
{
"name": "jsonschema-specifications",
"direct": false,
"version": "2025.9.1",
"ecosystem": "pypi"
},
{
"name": "langchain-core",
"direct": false,
"version": "1.4.0",
"ecosystem": "pypi"
},
{
"name": "langchain-openai",
"direct": false,
"version": "1.2.1",
"ecosystem": "pypi"
},
{
"name": "langchain-protocol",
"direct": false,
"version": "0.0.15",
"ecosystem": "pypi"
},
{
"name": "langgraph",
"direct": false,
"version": "1.2.0",
"ecosystem": "pypi"
},
{
"name": "langgraph-api",
"direct": false,
"version": "0.8.7",
"ecosystem": "pypi"
},
{
"name": "langgraph-checkpoint",
"direct": false,
"version": "4.1.1",
"ecosystem": "pypi"
},
{
"name": "langgraph-cli",
"direct": false,
"version": "0.4.26",
"ecosystem": "pypi"
},
{
"name": "langgraph-prebuilt",
"direct": false,
"version": "1.1.0",
"ecosystem": "pypi"
},
{
"name": "langgraph-runtime-inmem",
"direct": false,
"version": "0.28.1",
"ecosystem": "pypi"
},
{
"name": "langgraph-sdk",
"direct": false,
"version": "0.3.15",
"ecosystem": "pypi"
},
{
"name": "langsmith",
"direct": false,
"version": "0.8.18",
"ecosystem": "pypi"
},
{
"name": "litellm",
"direct": false,
"version": "1.88.1",
"ecosystem": "pypi"
},
{
"name": "magika",
"direct": false,
"version": "1.0.3",
"ecosystem": "pypi"
},
{
"name": "markdown-it-py",
"direct": false,
"version": "4.2.0",
"ecosystem": "pypi"
},
{
"name": "markupsafe",
"direct": false,
"version": "3.0.3",
"ecosystem": "pypi"
},
{
"name": "mcp",
"direct": false,
"version": "1.28.1",
"ecosystem": "pypi"
},
{
"name": "mdurl",
"direct": false,
"version": "0.1.2",
"ecosystem": "pypi"
},
{
"name": "mpmath",
"direct": false,
"version": "1.3.0",
"ecosystem": "pypi"
},
{
"name": "multidict",
"direct": false,
"version": "6.7.1",
"ecosystem": "pypi"
},
{
"name": "numpy",
"direct": false,
"version": "2.2.6",
"ecosystem": "pypi"
},
{
"name": "numpy",
"direct": false,
"version": "2.4.6",
"ecosystem": "pypi"
},
{
"name": "onnxruntime",
"direct": false,
"version": "1.23.2",
"ecosystem": "pypi"
},
{
"name": "onnxruntime",
"direct": false,
"version": "1.26.0",
"ecosystem": "pypi"
},
{
"name": "openai",
"direct": false,
"version": "2.37.0",
"ecosystem": "pypi"
},
{
"name": "openai",
"direct": false,
"version": "2.41.0",
"ecosystem": "pypi"
},
{
"name": "opentelemetry-api",
"direct": false,
"version": "1.41.1",
"ecosystem": "pypi"
},
{
"name": "opentelemetry-api",
"direct": false,
"version": "1.42.1",
"ecosystem": "pypi"
},
{
"name": "opentelemetry-exporter-otlp-proto-common",
"direct": false,
"version": "1.41.1",
"ecosystem": "pypi"
},
{
"name": "opentelemetry-exporter-otlp-proto-http",
"direct": false,
"version": "1.41.1",
"ecosystem": "pypi"
},
{
"name": "opentelemetry-proto",
"direct": false,
"version": "1.41.1",
"ecosystem": "pypi"
},
{
"name": "opentelemetry-sdk",
"direct": false,
"version": "1.41.1",
"ecosystem": "pypi"
},
{
"name": "opentelemetry-semantic-conventions",
"direct": false,
"version": "0.62b1",
"ecosystem": "pypi"
},
{
"name": "orjson",
"direct": false,
"version": "3.11.9",
"ecosystem": "pypi"
},
{
"name": "ormsgpack",
"direct": false,
"version": "1.12.2",
"ecosystem": "pypi"
},
{
"name": "packaging",
"direct": false,
"version": "26.2",
"ecosystem": "pypi"
},
{
"name": "pathspec",
"direct": false,
"version": "1.1.1",
"ecosystem": "pypi"
},
{
"name": "propcache",
"direct": false,
"version": "0.5.2",
"ecosystem": "pypi"
},
{
"name": "protobuf",
"direct": false,
"version": "6.33.6",
"ecosystem": "pypi"
},
{
"name": "protobuf",
"direct": false,
"version": "7.35.0",
"ecosystem": "pypi"
},
{
"name": "pycparser",
"direct": false,
"version": "3.0",
"ecosystem": "pypi"
},
{
"name": "pydantic",
"direct": false,
"version": "2.13.4",
"ecosystem": "pypi"
},
{
"name": "pydantic-core",
"direct": false,
"version": "2.46.4",
"ecosystem": "pypi"
},
{
"name": "pydantic-settings",
"direct": false,
"version": "2.14.2",
"ecosystem": "pypi"
},
{
"name": "pygments",
"direct": false,
"version": "2.20.0",
"ecosystem": "pypi"
},
{
"name": "pyjwt",
"direct": false,
"version": "2.13.0",
"ecosystem": "pypi"
},
{
"name": "pyreadline3",
"direct": false,
"version": "3.5.6",
"ecosystem": "pypi"
},
{
"name": "python-dateutil",
"direct": false,
"version": "2.9.0.post0",
"ecosystem": "pypi"
},
{
"name": "python-dotenv",
"direct": false,
"version": "1.2.2",
"ecosystem": "pypi"
},
{
"name": "python-multipart",
"direct": false,
"version": "0.0.32",
"ecosystem": "pypi"
},
{
"name": "pywin32",
"direct": false,
"version": "312",
"ecosystem": "pypi"
},
{
"name": "pyyaml",
"direct": false,
"version": "6.0.3",
"ecosystem": "pypi"
},
{
"name": "referencing",
"direct": false,
"version": "0.37.0",
"ecosystem": "pypi"
},
{
"name": "regex",
"direct": false,
"version": "2026.5.9",
"ecosystem": "pypi"
},
{
"name": "requests",
"direct": false,
"version": "2.34.2",
"ecosystem": "pypi"
},
{
"name": "requests-toolbelt",
"direct": false,
"version": "1.0.0",
"ecosystem": "pypi"
},
{
"name": "rich",
"direct": false,
"version": "15.0.0",
"ecosystem": "pypi"
},
{
"name": "rpds-py",
"direct": false,
"version": "0.30.0",
"ecosystem": "pypi"
},
{
"name": "rpds-py",
"direct": false,
"version": "2026.5.1",
"ecosystem": "pypi"
},
{
"name": "safetensors",
"direct": false,
"version": "0.8.0",
"ecosystem": "pypi"
},
{
"name": "setuptools",
"direct": false,
"version": "83.0.0",
"ecosystem": "pypi"
},
{
"name": "shellingham",
"direct": false,
"version": "1.5.4",
"ecosystem": "pypi"
},
{
"name": "six",
"direct": false,
"version": "1.17.0",
"ecosystem": "pypi"
},
{
"name": "skillspector",
"direct": false,
"version": "2.0.0",
"ecosystem": "pypi"
},
{
"name": "sniffio",
"direct": false,
"version": "1.3.1",
"ecosystem": "pypi"
},
{
"name": "socket-headroom-pin",
"direct": false,
"version": "0.0.0",
"ecosystem": "pypi"
},
{
"name": "socket-skillspector-pin",
"direct": false,
"version": "0.0.0",
"ecosystem": "pypi"
},
{
"name": "sqlite-vec",
"direct": false,
"version": "0.1.9",
"ecosystem": "pypi"
},
{
"name": "sse-starlette",
"direct": false,
"version": "3.3.4",
"ecosystem": "pypi"
},
{
"name": "sse-starlette",
"direct": false,
"version": "3.4.4",
"ecosystem": "pypi"
},
{
"name": "starlette",
"direct": false,
"version": "1.3.1",
"ecosystem": "pypi"
},
{
"name": "structlog",
"direct": false,
"version": "25.5.0",
"ecosystem": "pypi"
},
{
"name": "sympy",
"direct": false,
"version": "1.14.0",
"ecosystem": "pypi"
},
{
"name": "tenacity",
"direct": false,
"version": "9.1.4",
"ecosystem": "pypi"
},
{
"name": "tiktoken",
"direct": false,
"version": "0.13.0",
"ecosystem": "pypi"
},
{
"name": "tokenizers",
"direct": false,
"version": "0.22.2",
"ecosystem": "pypi"
},
{
"name": "tomli",
"direct": false,
"version": "2.4.1",
"ecosystem": "pypi"
},
{
"name": "tqdm",
"direct": false,
"version": "4.67.3",
"ecosystem": "pypi"
},
{
"name": "tqdm",
"direct": false,
"version": "4.68.2",
"ecosystem": "pypi"
},
{
"name": "transformers",
"direct": false,
"version": "5.10.2",
"ecosystem": "pypi"
},
{
"name": "truststore",
"direct": false,
"version": "0.10.4",
"ecosystem": "pypi"
},
{
"name": "typer",
"direct": false,
"version": "0.23.2",
"ecosystem": "pypi"
},
{
"name": "typer",
"direct": false,
"version": "0.25.1",
"ecosystem": "pypi"
},
{
"name": "typing-extensions",
"direct": false,
"version": "4.15.0",
"ecosystem": "pypi"
},
{
"name": "typing-inspection",
"direct": false,
"version": "0.4.2",
"ecosystem": "pypi"
},
{
"name": "urllib3",
"direct": false,
"version": "2.7.0",
"ecosystem": "pypi"
},
{
"name": "uuid-utils",
"direct": false,
"version": "0.15.0",
"ecosystem": "pypi"
},
{
"name": "uvicorn",
"direct": false,
"version": "0.47.0",
"ecosystem": "pypi"
},
{
"name": "uvicorn",
"direct": false,
"version": "0.49.0",
"ecosystem": "pypi"
},
{
"name": "uvloop",
"direct": false,
"version": "0.22.1",
"ecosystem": "pypi"
},
{
"name": "watchdog",
"direct": false,
"version": "6.0.0",
"ecosystem": "pypi"
},
{
"name": "watchfiles",
"direct": false,
"version": "1.1.1",
"ecosystem": "pypi"
},
{
"name": "websockets",
"direct": false,
"version": "16.0",
"ecosystem": "pypi"
},
{
"name": "xxhash",
"direct": false,
"version": "3.7.0",
"ecosystem": "pypi"
},
{
"name": "yara-python",
"direct": false,
"version": "4.5.4",
"ecosystem": "pypi"
},
{
"name": "yarl",
"direct": false,
"version": "1.24.2",
"ecosystem": "pypi"
},
{
"name": "zipp",
"direct": false,
"version": "3.23.1",
"ecosystem": "pypi"
},
{
"name": "zipp",
"direct": false,
"version": "4.1.0",
"ecosystem": "pypi"
},
{
"name": "zstandard",
"direct": false,
"version": "0.25.0",
"ecosystem": "pypi"
}
],
"collected": true,
"truncated": false,
"total_count": 295,
"direct_count": 6,
"indirect_count": 289
}
},
"maintainership": {
"issues": {
"open_prs": 0,
"merged_prs": 0,
"open_issues": 0,
"closed_ratio": null,
"closed_issues": 0,
"closed_unmerged_prs": 0
},
"bus_factor": 1,
"bot_contributors": 0,
"top_contributors": [
{
"type": "User",
"login": "jdalton",
"commits": 85,
"avatar_url": "https://avatars.githubusercontent.com/u/4303?v=4"
}
],
"contributors_sampled": 1,
"top_contributor_share": 1
},
"quality_signals": {
"has_ci": true,
"has_tests": true,
"ci_workflows": [
"cargo-publish.yml",
"ci.yml",
"get-green.lock.yml",
"get-green.yml",
"github-release.yml",
"npm-publish.yml",
"prune-workflow-runs.yml",
"publish-npm.yml",
"release-reconcile.yml",
"weekly-update.lock.yml"
],
"has_docs_dir": true,
"linter_configs": [],
"has_editorconfig": true,
"has_linter_config": false,
"has_precommit_config": false
},
"security_signals": {
"lockfiles": [
"Cargo.lock",
"pnpm-lock.yaml",
"uv.lock"
],
"scorecard": {
"checks": [
{
"name": "Binary-Artifacts",
"score": 6,
"reason": "binaries present in source code",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#binary-artifacts"
},
{
"name": "Branch-Protection",
"score": 1,
"reason": "branch protection is not maximal on development and all release branches",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#branch-protection"
},
{
"name": "CI-Tests",
"score": null,
"reason": "no pull request found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#ci-tests"
},
{
"name": "CII-Best-Practices",
"score": 0,
"reason": "no effort to earn an OpenSSF best practices badge detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#cii-best-practices"
},
{
"name": "Code-Review",
"score": 0,
"reason": "Found 0/30 approved changesets -- score normalized to 0",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#code-review"
},
{
"name": "Contributors",
"score": 10,
"reason": "project has 10 contributing companies or organizations",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#contributors"
},
{
"name": "Dangerous-Workflow",
"score": 10,
"reason": "no dangerous workflow patterns detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dangerous-workflow"
},
{
"name": "Dependency-Update-Tool",
"score": 10,
"reason": "update tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#dependency-update-tool"
},
{
"name": "Fuzzing",
"score": 0,
"reason": "project is not fuzzed",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#fuzzing"
},
{
"name": "License",
"score": 10,
"reason": "license file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#license"
},
{
"name": "Maintained",
"score": 0,
"reason": "project was created within the last 90 days. Please review its contents carefully",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#maintained"
},
{
"name": "Packaging",
"score": null,
"reason": "packaging workflow not detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#packaging"
},
{
"name": "Pinned-Dependencies",
"score": 8,
"reason": "dependency not pinned by hash detected -- score normalized to 8",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#pinned-dependencies"
},
{
"name": "SAST",
"score": 0,
"reason": "no SAST tool detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#sast"
},
{
"name": "Security-Policy",
"score": 9,
"reason": "security policy file detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#security-policy"
},
{
"name": "Signed-Releases",
"score": null,
"reason": "no releases found",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#signed-releases"
},
{
"name": "Token-Permissions",
"score": 0,
"reason": "detected GitHub workflow tokens with excessive permissions",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#token-permissions"
},
{
"name": "Vulnerabilities",
"score": 10,
"reason": "0 existing vulnerabilities detected",
"documentation_url": "https://github.com/ossf/scorecard/blob/c395761df6afe1a69e476bc60a013a94bcbc153f/docs/checks.md#vulnerabilities"
}
],
"commit": "1c3f01e7f05ff0d3aae9d1af908f3c5c4255ecad",
"ran_at": "2026-07-26T22:49:03Z",
"aggregate_score": 4.9,
"scorecard_version": "v5.5.0"
},
"has_codeql_workflow": false,
"has_security_policy": false,
"has_dependabot_config": true
},
"contribution_flow": {
"collected": true,
"ci_last_run_at": "2026-07-26T22:34:11Z",
"oldest_open_prs": [],
"last_merged_pr_at": null,
"ci_last_conclusion": "SUCCESS",
"oldest_open_issues": []
}
},
"config": {
"disabled_metrics": [],
"disabled_categories": [],
"disabled_components": {}
},
"source": {
"url": "https://github.com/SocketDev/decmpfs",
"host": "github.com",
"name": "decmpfs",
"owner": "SocketDev"
},
"metrics": {
"overall": {
"key": "overall",
"band": "moderate",
"name": "Overall health",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"security": 59,
"vitality": 73,
"community": 40,
"governance": 42,
"engineering": 63
},
"components": []
},
"categories": [
{
"key": "vitality",
"band": "good",
"name": "Vitality",
"value": 73,
"weight": 0.22,
"metrics": [
{
"key": "development_activity",
"band": "moderate",
"name": "Development activity",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"commits_last_year": 81,
"human_commit_share": 1,
"days_since_last_push": 0,
"active_weeks_last_year": 2
},
"components": [
{
"key": "push_recency",
"name": "Push recency",
"detail": "last push 0 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "push_recency",
"params": {
"days": 0
}
}
],
"max_points": 36
},
{
"key": "commit_cadence",
"name": "Commit cadence",
"detail": "2/52 weeks with commits",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "commit_cadence_weeks",
"params": {
"weeks": 2
}
}
],
"max_points": 36
},
{
"key": "commit_volume",
"name": "Commit volume",
"detail": "81 commits in the last year",
"points": 17.2,
"status": "partial",
"details": [
{
"code": "commits_last_year",
"params": {
"count": 81
}
}
],
"max_points": 18
},
{
"key": "openssf_scorecard_maintained",
"name": "OpenSSF Scorecard: Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
},
{
"key": "release_discipline",
"band": "excellent",
"name": "Release discipline",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 100,
"inputs": {
"releases_count": 2,
"latest_release_tag": "v0.1.2",
"releases_from_tags": false,
"days_since_latest_release": 2,
"mean_days_between_releases": 2.8
},
"components": [
{
"key": "ships_releases",
"name": "Ships releases",
"detail": "2 releases published",
"points": 27,
"status": "met",
"details": [
{
"code": "releases_published",
"params": {
"count": 2
}
}
],
"max_points": 27
},
{
"key": "release_recency",
"name": "Release recency",
"detail": "latest release 2 days ago",
"points": 36,
"status": "met",
"details": [
{
"code": "release_recency",
"params": {
"days": 2
}
}
],
"max_points": 36
},
{
"key": "release_cadence",
"name": "Release cadence",
"detail": "a release every ~2.8 days",
"points": 27,
"status": "met",
"details": [
{
"code": "release_cadence",
"params": {
"gap": 2.8
}
}
],
"max_points": 27
},
{
"key": "openssf_scorecard_signed_releases",
"name": "OpenSSF Scorecard: Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 10
}
]
},
{
"key": "abandonment",
"band": "excellent",
"name": "Abandonment",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"cap": null,
"state": "unverified",
"guards": [],
"signals": [],
"red_flag": false,
"multiplier_pct": 100,
"declared_reason": null,
"unverified_reason": "repository_too_young",
"unanswered_open_prs": null,
"unanswered_open_issues": null,
"days_since_last_merged_pr": null,
"days_since_last_human_commit": null,
"days_since_last_human_commit_is_floor": false
},
"components": [
{
"key": "project_is_still_maintained",
"name": "Project is still maintained",
"detail": "maintenance record not established from the collected data",
"points": 100,
"status": "met",
"details": [
{
"code": "abandonment_unverified",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Is the project alive — is code being written and are releases shipping?"
},
{
"key": "community",
"band": "at_risk",
"name": "Community & Adoption",
"value": 40,
"weight": 0.18,
"metrics": [
{
"key": "popularity",
"band": "critical",
"name": "Popularity & adoption",
"note": null,
"notes": [],
"value": 1,
"inputs": {
"forks": 0,
"stars": 0,
"watchers": 0,
"growth_state": "unverified",
"growth_factor_pct": 100,
"growth_unverified_reason": "no_history"
},
"components": [
{
"key": "stars",
"name": "Stars",
"detail": "0 stars",
"points": 0,
"status": "missed",
"details": [
{
"code": "stars",
"params": {
"count": 0
}
}
],
"max_points": 60
},
{
"key": "forks",
"name": "Forks",
"detail": "0 forks",
"points": 0,
"status": "missed",
"details": [
{
"code": "forks",
"params": {
"count": 0
}
}
],
"max_points": 25
},
{
"key": "watchers",
"name": "Watchers",
"detail": "0 watchers",
"points": 0,
"status": "missed",
"details": [
{
"code": "watchers",
"params": {
"count": 0
}
}
],
"max_points": 15
}
]
},
{
"key": "community_health",
"band": "excellent",
"name": "Community health",
"note": null,
"notes": [],
"value": 85,
"inputs": {
"has_readme": true,
"has_license": true,
"has_contributing": true,
"has_issue_template": false,
"has_code_of_conduct": true,
"has_pull_request_template": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 22.5,
"status": "met",
"details": [],
"max_points": 22.5
},
{
"key": "license",
"name": "License",
"detail": "recognized license (MIT)",
"points": 22.5,
"status": "met",
"details": [
{
"code": "license_standard",
"params": {}
},
{
"code": "license_spdx",
"params": {
"spdx": "MIT"
}
}
],
"max_points": 22.5
},
{
"key": "contributing_guide",
"name": "CONTRIBUTING guide",
"detail": null,
"points": 18,
"status": "met",
"details": [],
"max_points": 18
},
{
"key": "code_of_conduct",
"name": "Code of conduct",
"detail": null,
"points": 13.5,
"status": "met",
"details": [],
"max_points": 13.5
},
{
"key": "issue_template",
"name": "Issue template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.2
},
{
"key": "pr_template",
"name": "PR template",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 6.3
}
]
},
{
"key": "ecosystem_adoption",
"band": "at_risk",
"name": "Ecosystem adoption (downloads)",
"note": "Excluded from scoring (no data or not applicable): Registry dependents. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"registry_dependents"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 38,
"inputs": {
"packages": [
"decmpfs"
],
"dependents": null,
"ecosystems": "npm",
"total_downloads": null,
"monthly_downloads": 182
},
"components": [
{
"key": "monthly_downloads",
"name": "Monthly downloads",
"detail": "182 downloads/month across npm",
"points": 30.2,
"status": "partial",
"details": [
{
"code": "downloads_monthly",
"params": {
"count": 182,
"ecosystems": "npm"
}
}
],
"max_points": 80
},
{
"key": "registry_dependents",
"name": "Registry dependents",
"detail": "not reported by this ecosystem",
"points": 0,
"status": "excluded",
"details": [
{
"code": "not_reported_by_this_ecosystem",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Does the project have users, downloads, attention, and a welcoming setup for contributors?"
},
{
"key": "governance",
"band": "at_risk",
"name": "Sustainability & Governance",
"value": 42,
"weight": 0.24,
"metrics": [
{
"key": "maintainer_resilience",
"band": "critical",
"name": "Maintainer resilience (bus factor)",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"bus_factor": 1,
"contributors_sampled": 1,
"top_contributor_share": 1
},
"components": [
{
"key": "bus_factor",
"name": "Bus factor",
"detail": "1 contributor(s) cover half of all commits",
"points": 9,
"status": "partial",
"details": [
{
"code": "bus_factor",
"params": {
"count": 1
}
}
],
"max_points": 54
},
{
"key": "commit_distribution",
"name": "Commit distribution",
"detail": "top contributor authored 100% of commits",
"points": 0,
"status": "missed",
"details": [
{
"code": "top_contributor_share",
"params": {
"share": 100
}
}
],
"max_points": 22.5
},
{
"key": "contributor_breadth",
"name": "Contributor breadth",
"detail": "1 contributors",
"points": 1.4,
"status": "partial",
"details": [
{
"code": "contributors_sampled",
"params": {
"count": 1
}
}
],
"max_points": 13.5
},
{
"key": "openssf_scorecard_contributors",
"name": "OpenSSF Scorecard: Contributors",
"detail": "project has 10 contributing companies or organizations",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
}
]
},
{
"key": "responsiveness",
"band": "critical",
"name": "Issue & PR responsiveness",
"note": "Excluded from scoring (no data or not applicable): Issue resolution, PR acceptance. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"issue_resolution",
"pr_acceptance"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 1,
"inputs": {
"merged_prs": 0,
"open_issues": 0,
"closed_issues": 0,
"issue_closed_ratio": null,
"closed_unmerged_prs": 0
},
"components": [
{
"key": "issue_resolution",
"name": "Issue resolution",
"detail": "no issues or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_issues_or_data",
"params": {}
}
],
"max_points": 46.75
},
{
"key": "pr_acceptance",
"name": "PR acceptance",
"detail": "no decided pull requests or no data",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_decided_prs_or_data",
"params": {}
}
],
"max_points": 38.25
},
{
"key": "openssf_scorecard_code_review",
"name": "OpenSSF Scorecard: Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
}
]
},
{
"key": "stewardship",
"band": "good",
"name": "Ownership & stewardship",
"note": null,
"notes": [],
"value": 75,
"inputs": {
"followers": 784,
"owner_type": "Organization",
"is_verified": null,
"owner_login": "SocketDev",
"public_repos": 50,
"account_age_days": 2180
},
"components": [
{
"key": "ownership_backing",
"name": "Ownership backing",
"detail": "organization-owned",
"points": 30,
"status": "met",
"details": [
{
"code": "owner_organization",
"params": {}
}
],
"max_points": 30
},
{
"key": "verified_domain",
"name": "Verified domain",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 20
},
{
"key": "owner_reach",
"name": "Owner reach",
"detail": "784 followers of SocketDev",
"points": 20.8,
"status": "partial",
"details": [
{
"code": "owner_followers",
"params": {
"count": 784,
"login": "SocketDev"
}
}
],
"max_points": 25
},
{
"key": "track_record",
"name": "Track record",
"detail": "50 public repos, account ~5 yr old",
"points": 24.4,
"status": "partial",
"details": [
{
"code": "public_repos",
"params": {
"count": 50
}
},
{
"code": "account_age_years",
"params": {
"years": 5
}
}
],
"max_points": 25
}
]
},
{
"key": "package_maintenance",
"band": "good",
"name": "Package maintenance",
"note": null,
"notes": [],
"value": 84,
"inputs": {
"packages": [
"decmpfs"
],
"ecosystems": "npm",
"any_deprecated": false,
"min_days_since_publish": 28
},
"components": [
{
"key": "published_resolvable",
"name": "Published & resolvable",
"detail": "1 package(s) on npm",
"points": 25,
"status": "met",
"details": [
{
"code": "packages_published",
"params": {
"count": 1,
"ecosystems": "npm"
}
}
],
"max_points": 25
},
{
"key": "publish_recency",
"name": "Publish recency",
"detail": "latest publish 28 days ago",
"points": 35,
"status": "met",
"details": [
{
"code": "publish_recency",
"params": {
"days": 28
}
}
],
"max_points": 35
},
{
"key": "version_history",
"name": "Version history",
"detail": "1 published versions",
"points": 4,
"status": "partial",
"details": [
{
"code": "published_versions",
"params": {
"count": 1
}
}
],
"max_points": 20
},
{
"key": "not_deprecated",
"name": "Not deprecated",
"detail": "active, not deprecated or yanked",
"points": 20,
"status": "met",
"details": [
{
"code": "package_not_deprecated",
"params": {}
}
],
"max_points": 20
}
]
}
],
"description": "Will the project survive its people — bus factor, responsiveness, who backs it, and package upkeep?"
},
{
"key": "engineering",
"band": "moderate",
"name": "Engineering Quality",
"value": 63,
"weight": 0.2,
"metrics": [
{
"key": "engineering_practices",
"band": "moderate",
"name": "Engineering practices",
"note": "Excluded from scoring (no data or not applicable): OpenSSF Scorecard: CI-Tests. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"openssf_scorecard_ci_tests"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 68,
"inputs": {
"has_ci": true,
"has_tests": true,
"has_editorconfig": true,
"has_linter_config": false,
"has_precommit_config": false
},
"components": [
{
"key": "ci_workflows",
"name": "CI workflows",
"detail": "10 workflow(s)",
"points": 24,
"status": "met",
"details": [
{
"code": "ci_workflows",
"params": {
"count": 10
}
}
],
"max_points": 24
},
{
"key": "tests_present",
"name": "Tests present",
"detail": null,
"points": 24,
"status": "met",
"details": [],
"max_points": 24
},
{
"key": "linter_config",
"name": "Linter config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 16
},
{
"key": "pre_commit_hooks",
"name": "Pre-commit hooks",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 9.6
},
{
"key": "editorconfig",
"name": ".editorconfig",
"detail": null,
"points": 6.4,
"status": "met",
"details": [],
"max_points": 6.4
},
{
"key": "openssf_scorecard_ci_tests",
"name": "OpenSSF Scorecard: CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 20
}
]
},
{
"key": "documentation",
"band": "moderate",
"name": "Documentation",
"note": null,
"notes": [],
"value": 55,
"inputs": {
"topics": [],
"has_wiki": false,
"homepage": null,
"has_readme": true,
"has_docs_dir": true,
"has_description": false
},
"components": [
{
"key": "readme",
"name": "README",
"detail": null,
"points": 30,
"status": "met",
"details": [],
"max_points": 30
},
{
"key": "documentation_directory",
"name": "Documentation directory",
"detail": null,
"points": 25,
"status": "met",
"details": [],
"max_points": 25
},
{
"key": "documentation_homepage_site",
"name": "Documentation / homepage site",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "repository_description",
"name": "Repository description",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "topics",
"name": "Topics",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
},
{
"key": "wiki",
"name": "Wiki",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 10
}
]
}
],
"description": "Are baseline engineering and documentation practices in place?"
},
{
"key": "security",
"band": "moderate",
"name": "Security",
"value": 59,
"weight": 0.16,
"metrics": [
{
"key": "security_posture",
"band": "at_risk",
"name": "Security posture",
"note": "Excluded from scoring (no data or not applicable): CI-Tests, Packaging, Signed-Releases. Remaining weights renormalized.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"ci_tests",
"packaging",
"signed_releases"
]
}
},
{
"code": "weights_renormalized",
"params": {}
}
],
"value": 49,
"inputs": {
"source": "openssf_scorecard",
"checks_evaluated": 15,
"scorecard_version": "v5.5.0",
"checks_inconclusive": 3,
"scorecard_aggregate": 4.9
},
"components": [
{
"key": "binary_artifacts",
"name": "Binary-Artifacts",
"detail": "binaries present in source code",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "branch_protection",
"name": "Branch-Protection",
"detail": "branch protection is not maximal on development and all release branches",
"points": 0.8,
"status": "partial",
"details": [],
"max_points": 7.5
},
{
"key": "ci_tests",
"name": "CI-Tests",
"detail": "no pull request found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 2.5
},
{
"key": "cii_best_practices",
"name": "CII-Best-Practices",
"detail": "no effort to earn an OpenSSF best practices badge detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 2.5
},
{
"key": "code_review",
"name": "Code-Review",
"detail": "Found 0/30 approved changesets -- score normalized to 0",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "contributors",
"name": "Contributors",
"detail": "project has 10 contributing companies or organizations",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "dangerous_workflow",
"name": "Dangerous-Workflow",
"detail": "no dangerous workflow patterns detected",
"points": 10,
"status": "met",
"details": [],
"max_points": 10
},
{
"key": "dependency_update_tool",
"name": "Dependency-Update-Tool",
"detail": "update tool detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
},
{
"key": "fuzzing",
"name": "Fuzzing",
"detail": "project is not fuzzed",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "license",
"name": "License",
"detail": "license file detected",
"points": 2.5,
"status": "met",
"details": [],
"max_points": 2.5
},
{
"key": "maintained",
"name": "Maintained",
"detail": "project was created within the last 90 days. Please review its contents carefully",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "packaging",
"name": "Packaging",
"detail": "packaging workflow not detected",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 5
},
{
"key": "pinned_dependencies",
"name": "Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 8",
"points": 4,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "sast",
"name": "SAST",
"detail": "no SAST tool detected",
"points": 0,
"status": "missed",
"details": [],
"max_points": 5
},
{
"key": "security_policy",
"name": "Security-Policy",
"detail": "security policy file detected",
"points": 4.5,
"status": "partial",
"details": [],
"max_points": 5
},
{
"key": "signed_releases",
"name": "Signed-Releases",
"detail": "no releases found",
"points": 0,
"status": "excluded",
"details": [
{
"code": "no_data",
"params": {}
}
],
"max_points": 7.5
},
{
"key": "token_permissions",
"name": "Token-Permissions",
"detail": "detected GitHub workflow tokens with excessive permissions",
"points": 0,
"status": "missed",
"details": [],
"max_points": 7.5
},
{
"key": "vulnerabilities",
"name": "Vulnerabilities",
"detail": "0 existing vulnerabilities detected",
"points": 7.5,
"status": "met",
"details": [],
"max_points": 7.5
}
]
},
{
"key": "dependency_advisories",
"band": "excellent",
"name": "Dependency advisories",
"note": "Excluded from scoring (no data or not applicable): No advisories left outstanding. Remaining weights renormalized. Matched the crates:decmpfs@0.1.2 runtime dependency closure — what installing the published package pulls in — 62 packages. Reachability is not analyzed.",
"notes": [
{
"code": "excluded_no_data",
"params": {
"components": [
"no_advisories_left_outstanding"
]
}
},
{
"code": "weights_renormalized",
"params": {}
},
{
"code": "advisories_scope_published",
"params": {
"package": "crates:decmpfs@0.1.2",
"assessed": 62
}
},
{
"code": "advisories_reachability",
"params": {}
}
],
"value": 100,
"inputs": {
"source": "osv",
"advisories": 0,
"affected_packages": 0,
"assessed_packages": 62,
"unassessed_packages": 0,
"affected_by_severity": "none",
"direct_affected_packages": 0
},
"components": [
{
"key": "direct_dependencies_free_of_known_advisories",
"name": "Direct dependencies free of known advisories",
"detail": "no direct dependency carries a known advisory",
"points": 35,
"status": "met",
"details": [
{
"code": "no_direct_advisories",
"params": {}
}
],
"max_points": 35
},
{
"key": "indirect_dependencies_free_of_known_advisories",
"name": "Indirect dependencies free of known advisories",
"detail": "no indirect dependency carries a known advisory",
"points": 25,
"status": "met",
"details": [
{
"code": "no_indirect_advisories",
"params": {}
}
],
"max_points": 25
},
{
"key": "no_advisories_left_outstanding",
"name": "No advisories left outstanding",
"detail": "no advisory carries a publication date",
"points": 0,
"status": "excluded",
"details": [
{
"code": "advisories_no_publication_date",
"params": {}
}
],
"max_points": 40
}
]
},
{
"key": "malicious_dependencies",
"band": "excellent",
"name": "Malicious dependencies",
"note": null,
"notes": [],
"value": 100,
"inputs": {
"source": "osv",
"meaning": "reported as a malicious package by the OpenSSF corpus; the remedy is removal or moving off the compromised name, never an upgrade of the same artifact. Versions the registry has since pulled are listed but not scored",
"packages": [],
"red_flag": false,
"assessed_packages": 62,
"malicious_packages": 0,
"direct_malicious_packages": 0,
"withdrawn_malicious_packages": 0,
"installable_malicious_packages": 0
},
"components": [
{
"key": "no_dependency_reported_as_a_malicious_package",
"name": "No dependency reported as a malicious package",
"detail": "no dependency is reported as a malicious package",
"points": 100,
"status": "met",
"details": [
{
"code": "no_malicious_dependencies",
"params": {}
}
],
"max_points": 100
}
]
},
{
"key": "high_risk_jurisdiction_exposure",
"band": "excellent",
"name": "High-Risk Jurisdiction Exposure",
"note": "Only high-confidence self-published location evidence affects this multiplier. Ambiguous matches are review-only; country evidence is not proof of nationality, citizenship, legal registration, malicious intent, or sanctions status.",
"notes": [
{
"code": "jurisdiction_evidence_limits",
"params": {}
}
],
"value": 100,
"inputs": {
"meaning": "self-published location evidence; not nationality or citizenship",
"red_flag": false,
"exposures": [],
"policy_countries": [
"Russia",
"Iran",
"North Korea"
],
"review_only_matches": 0,
"assessed_self_published_locations": 5
},
"components": [
{
"key": "policy_exposure_multiplier",
"name": "Policy exposure multiplier",
"detail": "no confirmed policy-scope location match",
"points": 100,
"status": "met",
"details": [
{
"code": "jurisdiction_no_match",
"params": {}
}
],
"max_points": 100
}
]
}
],
"description": "Are visible security and supply-chain practices strong, with no malicious dependency and no unresolved high-risk jurisdiction exposure?"
},
{
"key": "ai_readiness",
"band": "moderate",
"name": "AI Readiness",
"value": 57,
"weight": 0,
"metrics": [
{
"key": "ai_agent_context",
"band": "at_risk",
"name": "Agent context & guidance",
"note": null,
"notes": [],
"value": 40,
"inputs": {
"has_llms_txt": false,
"legible_history_share": 1,
"agent_instruction_files": [],
"agent_instruction_max_bytes": null
},
"components": [
{
"key": "agent_instructions",
"name": "Agent instructions",
"detail": "no CLAUDE.md / AGENTS.md / editor rules",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_instructions",
"params": {}
}
],
"max_points": 45
},
{
"key": "machine_readable_docs_llms_txt",
"name": "Machine-readable docs (llms.txt)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 15
},
{
"key": "legible_commit_history",
"name": "Legible commit history",
"detail": "85 of 85 human commits state their intent (structured subject or explanatory body)",
"points": 40,
"status": "met",
"details": [
{
"code": "legible_history",
"params": {
"legible": 85,
"sampled": 85
}
}
],
"max_points": 40
}
]
},
{
"key": "ai_verify_loop",
"band": "moderate",
"name": "Verify loop (build / test / typecheck)",
"note": null,
"notes": [],
"value": 69,
"inputs": {
"has_nix": false,
"has_tests": true,
"lockfiles": [
"Cargo.lock",
"pnpm-lock.yaml",
"uv.lock"
],
"has_dockerfile": true,
"typed_language": true,
"bootstrap_files": [],
"has_devcontainer": false,
"has_linter_config": false,
"typecheck_configs": [
".claude/hooks/fleet/actionlint-on-workflow-edit/tsconfig.json",
".claude/hooks/fleet/adversarial-review-nudge/tsconfig.json",
".claude/hooks/fleet/agents-skills-mirror-nudge/tsconfig.json",
".claude/hooks/fleet/ai-config-drift-nudge/tsconfig.json",
".claude/hooks/fleet/ai-config-poisoning-guard/tsconfig.json",
".claude/hooks/fleet/alpha-sort-nudge/tsconfig.json",
".claude/hooks/fleet/answer-questions-nudge/tsconfig.json",
".claude/hooks/fleet/answer-status-requests-nudge/tsconfig.json",
".claude/hooks/fleet/anti-prose-guard/tsconfig.json",
".claude/hooks/fleet/ask-suppression-nudge/tsconfig.json",
".claude/hooks/fleet/auth-rotation-nudge/tsconfig.json",
".claude/hooks/fleet/brew-supply-chain-guard/tsconfig.json",
".claude/hooks/fleet/broken-hook-detector/tsconfig.json",
".claude/hooks/fleet/bundle-flags-guard/tsconfig.json",
".claude/hooks/fleet/c8-ignore-reason-guard/tsconfig.json",
".claude/hooks/fleet/cascade-first-triage-nudge/tsconfig.json",
".claude/hooks/fleet/catch-message-guard/tsconfig.json",
".claude/hooks/fleet/cdn-allowlist-guard/tsconfig.json",
".claude/hooks/fleet/changelog-entry-shape-nudge/tsconfig.json",
".claude/hooks/fleet/changelog-no-empty-guard/tsconfig.json",
".claude/hooks/fleet/check-new-deps/tsconfig.json",
".claude/hooks/fleet/claude-code-action-lockdown-guard/tsconfig.json",
".claude/hooks/fleet/claude-lockdown-guard/tsconfig.json",
".claude/hooks/fleet/claude-md-defer-detail-nudge/tsconfig.json",
".claude/hooks/fleet/claude-md-rule-add-guard/tsconfig.json",
".claude/hooks/fleet/claude-md-section-size-guard/tsconfig.json",
".claude/hooks/fleet/claude-md-size-guard/tsconfig.json",
".claude/hooks/fleet/claude-segmentation-guard/tsconfig.json",
".claude/hooks/fleet/clone-reviewed-repo-nudge/tsconfig.json",
".claude/hooks/fleet/codex-no-write-guard/tsconfig.json",
".claude/hooks/fleet/codex-session-budget-guard/tsconfig.json",
".claude/hooks/fleet/commit-author-guard/tsconfig.json",
".claude/hooks/fleet/commit-cadence-nudge/tsconfig.json",
".claude/hooks/fleet/commit-message-format-guard/tsconfig.json",
".claude/hooks/fleet/commit-pr-nudge/tsconfig.json",
".claude/hooks/fleet/commit-size-nudge/tsconfig.json",
".claude/hooks/fleet/compound-lessons-nudge/tsconfig.json",
".claude/hooks/fleet/concurrent-cargo-build-guard/tsconfig.json",
".claude/hooks/fleet/consumer-grep-nudge/tsconfig.json",
".claude/hooks/fleet/convo-prose-nudge/tsconfig.json",
".claude/hooks/fleet/cross-repo-guard/tsconfig.json",
".claude/hooks/fleet/dated-citation-guard/tsconfig.json",
".claude/hooks/fleet/default-branch-guard/tsconfig.json",
".claude/hooks/fleet/dep-derived-source-nudge/tsconfig.json",
".claude/hooks/fleet/dirty-lockfile-nudge/tsconfig.json",
".claude/hooks/fleet/dirty-worktree-stop-guard/tsconfig.json",
".claude/hooks/fleet/dogfood-cascade-nudge/tsconfig.json",
".claude/hooks/fleet/dont-blame-nudge/tsconfig.json",
".claude/hooks/fleet/dont-stop-mid-queue-nudge/tsconfig.json",
".claude/hooks/fleet/drift-check-nudge/tsconfig.json",
".claude/hooks/fleet/enqueue-dont-pivot-nudge/tsconfig.json",
".claude/hooks/fleet/enterprise-push-nudge/tsconfig.json",
".claude/hooks/fleet/error-message-quality-nudge/tsconfig.json",
".claude/hooks/fleet/excuse-detector/tsconfig.json",
".claude/hooks/fleet/file-size-nudge/tsconfig.json",
".claude/hooks/fleet/fixes-need-tests-nudge/tsconfig.json",
".claude/hooks/fleet/follow-direct-imperative-nudge/tsconfig.json",
".claude/hooks/fleet/gh-token-hygiene-guard/tsconfig.json",
".claude/hooks/fleet/git-config-write-guard/tsconfig.json",
".claude/hooks/fleet/git-identity-drift-nudge/tsconfig.json",
".claude/hooks/fleet/gitmodules-comment-guard/tsconfig.json",
".claude/hooks/fleet/golden-fixture-naming-guard/tsconfig.json",
".claude/hooks/fleet/handoff-command-nudge/tsconfig.json",
".claude/hooks/fleet/headroom-proxy-start/tsconfig.json",
".claude/hooks/fleet/honesty-framing-guard/tsconfig.json",
".claude/hooks/fleet/immutable-release-guard/tsconfig.json",
".claude/hooks/fleet/inline-script-defer-guard/tsconfig.json",
".claude/hooks/fleet/judgment-nudge/tsconfig.json",
".claude/hooks/fleet/keep-working-while-waiting-nudge/tsconfig.json",
".claude/hooks/fleet/land-fast-nudge/tsconfig.json",
".claude/hooks/fleet/lock-step-ref-nudge/tsconfig.json",
".claude/hooks/fleet/logger-guard/tsconfig.json",
".claude/hooks/fleet/markdown-filename-guard/tsconfig.json",
".claude/hooks/fleet/memory-codify-nudge/tsconfig.json",
".claude/hooks/fleet/minimum-release-age-guard/tsconfig.json",
".claude/hooks/fleet/module-noun-name-guard/tsconfig.json",
".claude/hooks/fleet/new-hook-claude-md-guard/tsconfig.json",
".claude/hooks/fleet/no-blanket-file-exclusion-guard/tsconfig.json",
".claude/hooks/fleet/no-blind-keychain-read-guard/tsconfig.json",
".claude/hooks/fleet/no-boolean-trap-guard/tsconfig.json",
".claude/hooks/fleet/no-branch-reuse-nudge/tsconfig.json",
".claude/hooks/fleet/no-corepack-guard/tsconfig.json",
".claude/hooks/fleet/no-direct-linter-guard/tsconfig.json",
".claude/hooks/fleet/no-disable-lint-rule-guard/tsconfig.json",
".claude/hooks/fleet/no-empty-commit-guard/tsconfig.json",
".claude/hooks/fleet/no-env-kill-switch-guard/tsconfig.json",
".claude/hooks/fleet/no-ext-issue-ref-guard/tsconfig.json",
".claude/hooks/fleet/no-file-oxlint-disable-guard/tsconfig.json",
".claude/hooks/fleet/no-fleet-fork-guard/tsconfig.json",
".claude/hooks/fleet/no-force-push-guard/tsconfig.json",
".claude/hooks/fleet/no-github-ai-attribution-guard/tsconfig.json",
".claude/hooks/fleet/no-hook-cmd-regex-guard/tsconfig.json",
".claude/hooks/fleet/no-meta-comments-guard/tsconfig.json",
".claude/hooks/fleet/no-new-config-guard/tsconfig.json",
".claude/hooks/fleet/no-non-fleet-push-guard/tsconfig.json",
".claude/hooks/fleet/no-npm-otp-flag-guard/tsconfig.json",
".claude/hooks/fleet/no-orphaned-staging/tsconfig.json",
".claude/hooks/fleet/no-other-linters-guard/tsconfig.json",
".claude/hooks/fleet/no-pkgjson-pnpm-overrides-guard/tsconfig.json",
".claude/hooks/fleet/no-placeholder-commit-subject-guard/tsconfig.json",
".claude/hooks/fleet/no-platform-import-guard/tsconfig.json",
".claude/hooks/fleet/no-pm-exec-guard/tsconfig.json",
".claude/hooks/fleet/no-pr-from-default-branch-guard/tsconfig.json",
".claude/hooks/fleet/no-pr-from-default-checkout-guard/tsconfig.json",
".claude/hooks/fleet/no-pr-review-verdict-guard/tsconfig.json",
".claude/hooks/fleet/no-premature-commit-kill-guard/tsconfig.json",
".claude/hooks/fleet/no-private-path-in-source-guard/tsconfig.json",
".claude/hooks/fleet/no-private-ref-in-tests-docs-guard/tsconfig.json",
".claude/hooks/fleet/no-registry-mutation-in-repo-script-nudge/tsconfig.json",
".claude/hooks/fleet/no-removal-comment-nudge/tsconfig.json",
".claude/hooks/fleet/no-repo-scope-in-fleet-config-guard/tsconfig.json",
".claude/hooks/fleet/no-revert-guard/tsconfig.json",
".claude/hooks/fleet/no-strip-types-guard/tsconfig.json",
".claude/hooks/fleet/no-subagent-commit-guard/tsconfig.json",
".claude/hooks/fleet/no-tail-install-out-guard/tsconfig.json",
".claude/hooks/fleet/no-test-in-scripts-guard/tsconfig.json",
".claude/hooks/fleet/no-token-in-dotenv-guard/tsconfig.json",
".claude/hooks/fleet/no-total-squash-guard/tsconfig.json",
".claude/hooks/fleet/no-tsx-guard/tsconfig.json",
".claude/hooks/fleet/no-underscore-ident-guard/tsconfig.json",
".claude/hooks/fleet/no-unisolated-git-fixture-guard/tsconfig.json",
".claude/hooks/fleet/no-unmocked-net-guard/tsconfig.json",
".claude/hooks/fleet/no-upstream-gitlink-guard/tsconfig.json",
".claude/hooks/fleet/no-verify-format-nudge/tsconfig.json",
".claude/hooks/fleet/node-modules-staging-guard/tsconfig.json",
".claude/hooks/fleet/non-fleet-pr-issue-ask-guard/tsconfig.json",
".claude/hooks/fleet/npm-otp-flow-nudge/tsconfig.json",
".claude/hooks/fleet/npmrc-trust-optout-guard/tsconfig.json",
".claude/hooks/fleet/options-param-naming-guard/tsconfig.json",
".claude/hooks/fleet/overeager-staging-guard/tsconfig.json",
".claude/hooks/fleet/oxlint-plugin-load-nudge/tsconfig.json",
".claude/hooks/fleet/package-manager-auto-update-guard/tsconfig.json",
".claude/hooks/fleet/parallel-agent-edit-guard/tsconfig.json",
".claude/hooks/fleet/parallel-agent-on-stop-nudge/tsconfig.json",
".claude/hooks/fleet/parallel-agent-removal-nudge/tsconfig.json",
".claude/hooks/fleet/parallel-agent-staging-guard/tsconfig.json",
".claude/hooks/fleet/path-guard/tsconfig.json",
".claude/hooks/fleet/path-regex-normalize-nudge/tsconfig.json",
".claude/hooks/fleet/paths-mts-inherit-guard/tsconfig.json",
".claude/hooks/fleet/personal-path-guard/tsconfig.json",
".claude/hooks/fleet/plan-location-guard/tsconfig.json",
".claude/hooks/fleet/plan-review-nudge/tsconfig.json",
".claude/hooks/fleet/pnpm-filter-zero-match-nudge/tsconfig.json",
".claude/hooks/fleet/pointer-comment-nudge/tsconfig.json",
".claude/hooks/fleet/post-push-ci-monitor-nudge/tsconfig.json",
".claude/hooks/fleet/pr-vs-push-default-nudge/tsconfig.json",
".claude/hooks/fleet/pre-commit-race-nudge/tsconfig.json",
".claude/hooks/fleet/prefer-async-spawn-guard/tsconfig.json",
".claude/hooks/fleet/prefer-evergreen-target-nudge/tsconfig.json",
".claude/hooks/fleet/prefer-fn-decl-guard/tsconfig.json",
".claude/hooks/fleet/prefer-json-clone-guard/tsconfig.json",
".claude/hooks/fleet/prefer-pipx-over-pip-guard/tsconfig.json",
".claude/hooks/fleet/prefer-rebase-over-revert-nudge/tsconfig.json",
".claude/hooks/fleet/prefer-type-import-guard/tsconfig.json",
".claude/hooks/fleet/prefer-vitest-guard/tsconfig.json",
".claude/hooks/fleet/primary-checkout-branch-guard/tsconfig.json",
".claude/hooks/fleet/primary-checkout-on-default-stop-guard/tsconfig.json",
".claude/hooks/fleet/private-name-nudge/tsconfig.json",
".claude/hooks/fleet/proc-environ-exfil-guard/tsconfig.json",
".claude/hooks/fleet/prompt-injection-guard/tsconfig.json",
".claude/hooks/fleet/provenance-publish-nudge/tsconfig.json",
".claude/hooks/fleet/public-surface-nudge/tsconfig.json",
".claude/hooks/fleet/pull-request-target-guard/tsconfig.json",
".claude/hooks/fleet/push-protected-branch-guard/tsconfig.json",
".claude/hooks/fleet/readme-fleet-shape-guard/tsconfig.json",
".claude/hooks/fleet/release-tag-tied-guard/tsconfig.json",
".claude/hooks/fleet/release-workflow-guard/tsconfig.json",
".claude/hooks/fleet/reply-prose-nudge/tsconfig.json",
".claude/hooks/fleet/report-location-guard/tsconfig.json",
".claude/hooks/fleet/reserved-script-dir-guard/tsconfig.json",
".claude/hooks/fleet/rg-replace-flag-nudge/tsconfig.json",
".claude/hooks/fleet/scan-label-in-commit-guard/tsconfig.json",
".claude/hooks/fleet/secret-content-guard/tsconfig.json",
".claude/hooks/fleet/session-handoff-nudge/tsconfig.json",
".claude/hooks/fleet/setup-basics-tools/tsconfig.json",
".claude/hooks/fleet/setup-claude-scanners/tsconfig.json",
".claude/hooks/fleet/setup-firewall/tsconfig.json",
".claude/hooks/fleet/setup-misc-tools/tsconfig.json",
".claude/hooks/fleet/setup-security-tools/tsconfig.json",
".claude/hooks/fleet/setup-signing/tsconfig.json",
".claude/hooks/fleet/shallow-clone-guard/tsconfig.json",
".claude/hooks/fleet/skill-usage-logger/tsconfig.json",
".claude/hooks/fleet/small-pr-nudge/tsconfig.json",
".claude/hooks/fleet/soak-exclude-date-guard/tsconfig.json",
".claude/hooks/fleet/soak-exclude-scope-guard/tsconfig.json",
".claude/hooks/fleet/soak-pin-needs-annotation-guard/tsconfig.json",
".claude/hooks/fleet/squash-history-nudge/tsconfig.json",
".claude/hooks/fleet/stale-process-sweeper/tsconfig.json",
".claude/hooks/fleet/stop-claim-verify-nudge/tsconfig.json",
".claude/hooks/fleet/sweep-ds-store/tsconfig.json",
".claude/hooks/fleet/target-arch-env-guard/tsconfig.json",
".claude/hooks/fleet/test-script-defers-guard/tsconfig.json",
".claude/hooks/fleet/token-guard/tsconfig.json",
".claude/hooks/fleet/token-spend-guard/tsconfig.json",
".claude/hooks/fleet/trust-downgrade-guard/tsconfig.json",
".claude/hooks/fleet/unbacked-claim-commit-guard/tsconfig.json",
".claude/hooks/fleet/uncodified-lesson-nudge/tsconfig.json",
".claude/hooks/fleet/unpushed-main-nudge/tsconfig.json",
".claude/hooks/fleet/untrusted-coauthor-guard/tsconfig.json",
".claude/hooks/fleet/uses-sha-verify-guard/tsconfig.json",
".claude/hooks/fleet/variant-analysis-nudge/tsconfig.json",
".claude/hooks/fleet/verify-absence-claims-nudge/tsconfig.json",
".claude/hooks/fleet/verify-render-pre-commit-nudge/tsconfig.json",
".claude/hooks/fleet/version-bump-order-guard/tsconfig.json",
".claude/hooks/fleet/vitest-vs-node-test-guard/tsconfig.json",
".claude/hooks/fleet/wheelhouse-drift-guard/tsconfig.json",
".claude/hooks/fleet/workflow-multiline-body-guard/tsconfig.json",
".claude/hooks/fleet/workflow-uses-comment-guard/tsconfig.json",
".claude/hooks/fleet/worktree-remove-relink-nudge/tsconfig.json",
"napi/decmpfs/tsconfig.json",
"tsconfig.json"
],
"agent_commit_share": 0,
"toolchain_manifests": [
"Cargo.toml",
"crates/decmpfs/Cargo.toml",
"fuzz/Cargo.toml",
"napi/decmpfs/Cargo.toml"
],
"dependency_bot_commit_share": 0
},
"components": [
{
"key": "one_command_bootstrap",
"name": "One-command bootstrap",
"detail": "Cargo.toml, crates/decmpfs/Cargo.toml, fuzz/Cargo.toml (toolchain convention, no task runner)",
"points": 12.6,
"status": "partial",
"details": [
{
"code": "toolchain_convention",
"params": {
"files": "Cargo.toml, crates/decmpfs/Cargo.toml, fuzz/Cargo.toml"
}
}
],
"max_points": 18
},
{
"key": "automated_tests",
"name": "Automated tests",
"detail": null,
"points": 22,
"status": "met",
"details": [],
"max_points": 22
},
{
"key": "lint_format_config",
"name": "Lint / format config",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 11
},
{
"key": "static_type_checking",
"name": "Static type checking",
"detail": ".claude/hooks/fleet/actionlint-on-workflow-edit/tsconfig.json, .claude/hooks/fleet/adversarial-review-nudge/tsconfig.json, .claude/hooks/fleet/agents-skills-mirror-nudge/tsconfig.json, .claude/hooks/fleet/ai-config-drift-nudge/tsconfig.json, .claude/hooks/fleet/ai-config-poisoning-guard/tsconfig.json, .claude/hooks/fleet/alpha-sort-nudge/tsconfig.json, .claude/hooks/fleet/answer-questions-nudge/tsconfig.json, .claude/hooks/fleet/answer-status-requests-nudge/tsconfig.json, .claude/hooks/fleet/anti-prose-guard/tsconfig.json, .claude/hooks/fleet/ask-suppression-nudge/tsconfig.json, .claude/hooks/fleet/auth-rotation-nudge/tsconfig.json, .claude/hooks/fleet/brew-supply-chain-guard/tsconfig.json, .claude/hooks/fleet/broken-hook-detector/tsconfig.json, .claude/hooks/fleet/bundle-flags-guard/tsconfig.json, .claude/hooks/fleet/c8-ignore-reason-guard/tsconfig.json, .claude/hooks/fleet/cascade-first-triage-nudge/tsconfig.json, .claude/hooks/fleet/catch-message-guard/tsconfig.json, .claude/hooks/fleet/cdn-allowlist-guard/tsconfig.json, .claude/hooks/fleet/changelog-entry-shape-nudge/tsconfig.json, .claude/hooks/fleet/changelog-no-empty-guard/tsconfig.json, .claude/hooks/fleet/check-new-deps/tsconfig.json, .claude/hooks/fleet/claude-code-action-lockdown-guard/tsconfig.json, .claude/hooks/fleet/claude-lockdown-guard/tsconfig.json, .claude/hooks/fleet/claude-md-defer-detail-nudge/tsconfig.json, .claude/hooks/fleet/claude-md-rule-add-guard/tsconfig.json, .claude/hooks/fleet/claude-md-section-size-guard/tsconfig.json, .claude/hooks/fleet/claude-md-size-guard/tsconfig.json, .claude/hooks/fleet/claude-segmentation-guard/tsconfig.json, .claude/hooks/fleet/clone-reviewed-repo-nudge/tsconfig.json, .claude/hooks/fleet/codex-no-write-guard/tsconfig.json, .claude/hooks/fleet/codex-session-budget-guard/tsconfig.json, .claude/hooks/fleet/commit-author-guard/tsconfig.json, .claude/hooks/fleet/commit-cadence-nudge/tsconfig.json, .claude/hooks/fleet/commit-message-format-guard/tsconfig.json, .claude/hooks/fleet/commit-pr-nudge/tsconfig.json, .claude/hooks/fleet/commit-size-nudge/tsconfig.json, .claude/hooks/fleet/compound-lessons-nudge/tsconfig.json, .claude/hooks/fleet/concurrent-cargo-build-guard/tsconfig.json, .claude/hooks/fleet/consumer-grep-nudge/tsconfig.json, .claude/hooks/fleet/convo-prose-nudge/tsconfig.json, .claude/hooks/fleet/cross-repo-guard/tsconfig.json, .claude/hooks/fleet/dated-citation-guard/tsconfig.json, .claude/hooks/fleet/default-branch-guard/tsconfig.json, .claude/hooks/fleet/dep-derived-source-nudge/tsconfig.json, .claude/hooks/fleet/dirty-lockfile-nudge/tsconfig.json, .claude/hooks/fleet/dirty-worktree-stop-guard/tsconfig.json, .claude/hooks/fleet/dogfood-cascade-nudge/tsconfig.json, .claude/hooks/fleet/dont-blame-nudge/tsconfig.json, .claude/hooks/fleet/dont-stop-mid-queue-nudge/tsconfig.json, .claude/hooks/fleet/drift-check-nudge/tsconfig.json, .claude/hooks/fleet/enqueue-dont-pivot-nudge/tsconfig.json, .claude/hooks/fleet/enterprise-push-nudge/tsconfig.json, .claude/hooks/fleet/error-message-quality-nudge/tsconfig.json, .claude/hooks/fleet/excuse-detector/tsconfig.json, .claude/hooks/fleet/file-size-nudge/tsconfig.json, .claude/hooks/fleet/fixes-need-tests-nudge/tsconfig.json, .claude/hooks/fleet/follow-direct-imperative-nudge/tsconfig.json, .claude/hooks/fleet/gh-token-hygiene-guard/tsconfig.json, .claude/hooks/fleet/git-config-write-guard/tsconfig.json, .claude/hooks/fleet/git-identity-drift-nudge/tsconfig.json, .claude/hooks/fleet/gitmodules-comment-guard/tsconfig.json, .claude/hooks/fleet/golden-fixture-naming-guard/tsconfig.json, .claude/hooks/fleet/handoff-command-nudge/tsconfig.json, .claude/hooks/fleet/headroom-proxy-start/tsconfig.json, .claude/hooks/fleet/honesty-framing-guard/tsconfig.json, .claude/hooks/fleet/immutable-release-guard/tsconfig.json, .claude/hooks/fleet/inline-script-defer-guard/tsconfig.json, .claude/hooks/fleet/judgment-nudge/tsconfig.json, .claude/hooks/fleet/keep-working-while-waiting-nudge/tsconfig.json, .claude/hooks/fleet/land-fast-nudge/tsconfig.json, .claude/hooks/fleet/lock-step-ref-nudge/tsconfig.json, .claude/hooks/fleet/logger-guard/tsconfig.json, .claude/hooks/fleet/markdown-filename-guard/tsconfig.json, .claude/hooks/fleet/memory-codify-nudge/tsconfig.json, .claude/hooks/fleet/minimum-release-age-guard/tsconfig.json, .claude/hooks/fleet/module-noun-name-guard/tsconfig.json, .claude/hooks/fleet/new-hook-claude-md-guard/tsconfig.json, .claude/hooks/fleet/no-blanket-file-exclusion-guard/tsconfig.json, .claude/hooks/fleet/no-blind-keychain-read-guard/tsconfig.json, .claude/hooks/fleet/no-boolean-trap-guard/tsconfig.json, .claude/hooks/fleet/no-branch-reuse-nudge/tsconfig.json, .claude/hooks/fleet/no-corepack-guard/tsconfig.json, .claude/hooks/fleet/no-direct-linter-guard/tsconfig.json, .claude/hooks/fleet/no-disable-lint-rule-guard/tsconfig.json, .claude/hooks/fleet/no-empty-commit-guard/tsconfig.json, .claude/hooks/fleet/no-env-kill-switch-guard/tsconfig.json, .claude/hooks/fleet/no-ext-issue-ref-guard/tsconfig.json, .claude/hooks/fleet/no-file-oxlint-disable-guard/tsconfig.json, .claude/hooks/fleet/no-fleet-fork-guard/tsconfig.json, .claude/hooks/fleet/no-force-push-guard/tsconfig.json, .claude/hooks/fleet/no-github-ai-attribution-guard/tsconfig.json, .claude/hooks/fleet/no-hook-cmd-regex-guard/tsconfig.json, .claude/hooks/fleet/no-meta-comments-guard/tsconfig.json, .claude/hooks/fleet/no-new-config-guard/tsconfig.json, .claude/hooks/fleet/no-non-fleet-push-guard/tsconfig.json, .claude/hooks/fleet/no-npm-otp-flag-guard/tsconfig.json, .claude/hooks/fleet/no-orphaned-staging/tsconfig.json, .claude/hooks/fleet/no-other-linters-guard/tsconfig.json, .claude/hooks/fleet/no-pkgjson-pnpm-overrides-guard/tsconfig.json, .claude/hooks/fleet/no-placeholder-commit-subject-guard/tsconfig.json, .claude/hooks/fleet/no-platform-import-guard/tsconfig.json, .claude/hooks/fleet/no-pm-exec-guard/tsconfig.json, .claude/hooks/fleet/no-pr-from-default-branch-guard/tsconfig.json, .claude/hooks/fleet/no-pr-from-default-checkout-guard/tsconfig.json, .claude/hooks/fleet/no-pr-review-verdict-guard/tsconfig.json, .claude/hooks/fleet/no-premature-commit-kill-guard/tsconfig.json, .claude/hooks/fleet/no-private-path-in-source-guard/tsconfig.json, .claude/hooks/fleet/no-private-ref-in-tests-docs-guard/tsconfig.json, .claude/hooks/fleet/no-registry-mutation-in-repo-script-nudge/tsconfig.json, .claude/hooks/fleet/no-removal-comment-nudge/tsconfig.json, .claude/hooks/fleet/no-repo-scope-in-fleet-config-guard/tsconfig.json, .claude/hooks/fleet/no-revert-guard/tsconfig.json, .claude/hooks/fleet/no-strip-types-guard/tsconfig.json, .claude/hooks/fleet/no-subagent-commit-guard/tsconfig.json, .claude/hooks/fleet/no-tail-install-out-guard/tsconfig.json, .claude/hooks/fleet/no-test-in-scripts-guard/tsconfig.json, .claude/hooks/fleet/no-token-in-dotenv-guard/tsconfig.json, .claude/hooks/fleet/no-total-squash-guard/tsconfig.json, .claude/hooks/fleet/no-tsx-guard/tsconfig.json, .claude/hooks/fleet/no-underscore-ident-guard/tsconfig.json, .claude/hooks/fleet/no-unisolated-git-fixture-guard/tsconfig.json, .claude/hooks/fleet/no-unmocked-net-guard/tsconfig.json, .claude/hooks/fleet/no-upstream-gitlink-guard/tsconfig.json, .claude/hooks/fleet/no-verify-format-nudge/tsconfig.json, .claude/hooks/fleet/node-modules-staging-guard/tsconfig.json, .claude/hooks/fleet/non-fleet-pr-issue-ask-guard/tsconfig.json, .claude/hooks/fleet/npm-otp-flow-nudge/tsconfig.json, .claude/hooks/fleet/npmrc-trust-optout-guard/tsconfig.json, .claude/hooks/fleet/options-param-naming-guard/tsconfig.json, .claude/hooks/fleet/overeager-staging-guard/tsconfig.json, .claude/hooks/fleet/oxlint-plugin-load-nudge/tsconfig.json, .claude/hooks/fleet/package-manager-auto-update-guard/tsconfig.json, .claude/hooks/fleet/parallel-agent-edit-guard/tsconfig.json, .claude/hooks/fleet/parallel-agent-on-stop-nudge/tsconfig.json, .claude/hooks/fleet/parallel-agent-removal-nudge/tsconfig.json, .claude/hooks/fleet/parallel-agent-staging-guard/tsconfig.json, .claude/hooks/fleet/path-guard/tsconfig.json, .claude/hooks/fleet/path-regex-normalize-nudge/tsconfig.json, .claude/hooks/fleet/paths-mts-inherit-guard/tsconfig.json, .claude/hooks/fleet/personal-path-guard/tsconfig.json, .claude/hooks/fleet/plan-location-guard/tsconfig.json, .claude/hooks/fleet/plan-review-nudge/tsconfig.json, .claude/hooks/fleet/pnpm-filter-zero-match-nudge/tsconfig.json, .claude/hooks/fleet/pointer-comment-nudge/tsconfig.json, .claude/hooks/fleet/post-push-ci-monitor-nudge/tsconfig.json, .claude/hooks/fleet/pr-vs-push-default-nudge/tsconfig.json, .claude/hooks/fleet/pre-commit-race-nudge/tsconfig.json, .claude/hooks/fleet/prefer-async-spawn-guard/tsconfig.json, .claude/hooks/fleet/prefer-evergreen-target-nudge/tsconfig.json, .claude/hooks/fleet/prefer-fn-decl-guard/tsconfig.json, .claude/hooks/fleet/prefer-json-clone-guard/tsconfig.json, .claude/hooks/fleet/prefer-pipx-over-pip-guard/tsconfig.json, .claude/hooks/fleet/prefer-rebase-over-revert-nudge/tsconfig.json, .claude/hooks/fleet/prefer-type-import-guard/tsconfig.json, .claude/hooks/fleet/prefer-vitest-guard/tsconfig.json, .claude/hooks/fleet/primary-checkout-branch-guard/tsconfig.json, .claude/hooks/fleet/primary-checkout-on-default-stop-guard/tsconfig.json, .claude/hooks/fleet/private-name-nudge/tsconfig.json, .claude/hooks/fleet/proc-environ-exfil-guard/tsconfig.json, .claude/hooks/fleet/prompt-injection-guard/tsconfig.json, .claude/hooks/fleet/provenance-publish-nudge/tsconfig.json, .claude/hooks/fleet/public-surface-nudge/tsconfig.json, .claude/hooks/fleet/pull-request-target-guard/tsconfig.json, .claude/hooks/fleet/push-protected-branch-guard/tsconfig.json, .claude/hooks/fleet/readme-fleet-shape-guard/tsconfig.json, .claude/hooks/fleet/release-tag-tied-guard/tsconfig.json, .claude/hooks/fleet/release-workflow-guard/tsconfig.json, .claude/hooks/fleet/reply-prose-nudge/tsconfig.json, .claude/hooks/fleet/report-location-guard/tsconfig.json, .claude/hooks/fleet/reserved-script-dir-guard/tsconfig.json, .claude/hooks/fleet/rg-replace-flag-nudge/tsconfig.json, .claude/hooks/fleet/scan-label-in-commit-guard/tsconfig.json, .claude/hooks/fleet/secret-content-guard/tsconfig.json, .claude/hooks/fleet/session-handoff-nudge/tsconfig.json, .claude/hooks/fleet/setup-basics-tools/tsconfig.json, .claude/hooks/fleet/setup-claude-scanners/tsconfig.json, .claude/hooks/fleet/setup-firewall/tsconfig.json, .claude/hooks/fleet/setup-misc-tools/tsconfig.json, .claude/hooks/fleet/setup-security-tools/tsconfig.json, .claude/hooks/fleet/setup-signing/tsconfig.json, .claude/hooks/fleet/shallow-clone-guard/tsconfig.json, .claude/hooks/fleet/skill-usage-logger/tsconfig.json, .claude/hooks/fleet/small-pr-nudge/tsconfig.json, .claude/hooks/fleet/soak-exclude-date-guard/tsconfig.json, .claude/hooks/fleet/soak-exclude-scope-guard/tsconfig.json, .claude/hooks/fleet/soak-pin-needs-annotation-guard/tsconfig.json, .claude/hooks/fleet/squash-history-nudge/tsconfig.json, .claude/hooks/fleet/stale-process-sweeper/tsconfig.json, .claude/hooks/fleet/stop-claim-verify-nudge/tsconfig.json, .claude/hooks/fleet/sweep-ds-store/tsconfig.json, .claude/hooks/fleet/target-arch-env-guard/tsconfig.json, .claude/hooks/fleet/test-script-defers-guard/tsconfig.json, .claude/hooks/fleet/token-guard/tsconfig.json, .claude/hooks/fleet/token-spend-guard/tsconfig.json, .claude/hooks/fleet/trust-downgrade-guard/tsconfig.json, .claude/hooks/fleet/unbacked-claim-commit-guard/tsconfig.json, .claude/hooks/fleet/uncodified-lesson-nudge/tsconfig.json, .claude/hooks/fleet/unpushed-main-nudge/tsconfig.json, .claude/hooks/fleet/untrusted-coauthor-guard/tsconfig.json, .claude/hooks/fleet/uses-sha-verify-guard/tsconfig.json, .claude/hooks/fleet/variant-analysis-nudge/tsconfig.json, .claude/hooks/fleet/verify-absence-claims-nudge/tsconfig.json, .claude/hooks/fleet/verify-render-pre-commit-nudge/tsconfig.json, .claude/hooks/fleet/version-bump-order-guard/tsconfig.json, .claude/hooks/fleet/vitest-vs-node-test-guard/tsconfig.json, .claude/hooks/fleet/wheelhouse-drift-guard/tsconfig.json, .claude/hooks/fleet/workflow-multiline-body-guard/tsconfig.json, .claude/hooks/fleet/workflow-uses-comment-guard/tsconfig.json, .claude/hooks/fleet/worktree-remove-relink-nudge/tsconfig.json, napi/decmpfs/tsconfig.json, tsconfig.json",
"points": 11,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": ".claude/hooks/fleet/actionlint-on-workflow-edit/tsconfig.json, .claude/hooks/fleet/adversarial-review-nudge/tsconfig.json, .claude/hooks/fleet/agents-skills-mirror-nudge/tsconfig.json, .claude/hooks/fleet/ai-config-drift-nudge/tsconfig.json, .claude/hooks/fleet/ai-config-poisoning-guard/tsconfig.json, .claude/hooks/fleet/alpha-sort-nudge/tsconfig.json, .claude/hooks/fleet/answer-questions-nudge/tsconfig.json, .claude/hooks/fleet/answer-status-requests-nudge/tsconfig.json, .claude/hooks/fleet/anti-prose-guard/tsconfig.json, .claude/hooks/fleet/ask-suppression-nudge/tsconfig.json, .claude/hooks/fleet/auth-rotation-nudge/tsconfig.json, .claude/hooks/fleet/brew-supply-chain-guard/tsconfig.json, .claude/hooks/fleet/broken-hook-detector/tsconfig.json, .claude/hooks/fleet/bundle-flags-guard/tsconfig.json, .claude/hooks/fleet/c8-ignore-reason-guard/tsconfig.json, .claude/hooks/fleet/cascade-first-triage-nudge/tsconfig.json, .claude/hooks/fleet/catch-message-guard/tsconfig.json, .claude/hooks/fleet/cdn-allowlist-guard/tsconfig.json, .claude/hooks/fleet/changelog-entry-shape-nudge/tsconfig.json, .claude/hooks/fleet/changelog-no-empty-guard/tsconfig.json, .claude/hooks/fleet/check-new-deps/tsconfig.json, .claude/hooks/fleet/claude-code-action-lockdown-guard/tsconfig.json, .claude/hooks/fleet/claude-lockdown-guard/tsconfig.json, .claude/hooks/fleet/claude-md-defer-detail-nudge/tsconfig.json, .claude/hooks/fleet/claude-md-rule-add-guard/tsconfig.json, .claude/hooks/fleet/claude-md-section-size-guard/tsconfig.json, .claude/hooks/fleet/claude-md-size-guard/tsconfig.json, .claude/hooks/fleet/claude-segmentation-guard/tsconfig.json, .claude/hooks/fleet/clone-reviewed-repo-nudge/tsconfig.json, .claude/hooks/fleet/codex-no-write-guard/tsconfig.json, .claude/hooks/fleet/codex-session-budget-guard/tsconfig.json, .claude/hooks/fleet/commit-author-guard/tsconfig.json, .claude/hooks/fleet/commit-cadence-nudge/tsconfig.json, .claude/hooks/fleet/commit-message-format-guard/tsconfig.json, .claude/hooks/fleet/commit-pr-nudge/tsconfig.json, .claude/hooks/fleet/commit-size-nudge/tsconfig.json, .claude/hooks/fleet/compound-lessons-nudge/tsconfig.json, .claude/hooks/fleet/concurrent-cargo-build-guard/tsconfig.json, .claude/hooks/fleet/consumer-grep-nudge/tsconfig.json, .claude/hooks/fleet/convo-prose-nudge/tsconfig.json, .claude/hooks/fleet/cross-repo-guard/tsconfig.json, .claude/hooks/fleet/dated-citation-guard/tsconfig.json, .claude/hooks/fleet/default-branch-guard/tsconfig.json, .claude/hooks/fleet/dep-derived-source-nudge/tsconfig.json, .claude/hooks/fleet/dirty-lockfile-nudge/tsconfig.json, .claude/hooks/fleet/dirty-worktree-stop-guard/tsconfig.json, .claude/hooks/fleet/dogfood-cascade-nudge/tsconfig.json, .claude/hooks/fleet/dont-blame-nudge/tsconfig.json, .claude/hooks/fleet/dont-stop-mid-queue-nudge/tsconfig.json, .claude/hooks/fleet/drift-check-nudge/tsconfig.json, .claude/hooks/fleet/enqueue-dont-pivot-nudge/tsconfig.json, .claude/hooks/fleet/enterprise-push-nudge/tsconfig.json, .claude/hooks/fleet/error-message-quality-nudge/tsconfig.json, .claude/hooks/fleet/excuse-detector/tsconfig.json, .claude/hooks/fleet/file-size-nudge/tsconfig.json, .claude/hooks/fleet/fixes-need-tests-nudge/tsconfig.json, .claude/hooks/fleet/follow-direct-imperative-nudge/tsconfig.json, .claude/hooks/fleet/gh-token-hygiene-guard/tsconfig.json, .claude/hooks/fleet/git-config-write-guard/tsconfig.json, .claude/hooks/fleet/git-identity-drift-nudge/tsconfig.json, .claude/hooks/fleet/gitmodules-comment-guard/tsconfig.json, .claude/hooks/fleet/golden-fixture-naming-guard/tsconfig.json, .claude/hooks/fleet/handoff-command-nudge/tsconfig.json, .claude/hooks/fleet/headroom-proxy-start/tsconfig.json, .claude/hooks/fleet/honesty-framing-guard/tsconfig.json, .claude/hooks/fleet/immutable-release-guard/tsconfig.json, .claude/hooks/fleet/inline-script-defer-guard/tsconfig.json, .claude/hooks/fleet/judgment-nudge/tsconfig.json, .claude/hooks/fleet/keep-working-while-waiting-nudge/tsconfig.json, .claude/hooks/fleet/land-fast-nudge/tsconfig.json, .claude/hooks/fleet/lock-step-ref-nudge/tsconfig.json, .claude/hooks/fleet/logger-guard/tsconfig.json, .claude/hooks/fleet/markdown-filename-guard/tsconfig.json, .claude/hooks/fleet/memory-codify-nudge/tsconfig.json, .claude/hooks/fleet/minimum-release-age-guard/tsconfig.json, .claude/hooks/fleet/module-noun-name-guard/tsconfig.json, .claude/hooks/fleet/new-hook-claude-md-guard/tsconfig.json, .claude/hooks/fleet/no-blanket-file-exclusion-guard/tsconfig.json, .claude/hooks/fleet/no-blind-keychain-read-guard/tsconfig.json, .claude/hooks/fleet/no-boolean-trap-guard/tsconfig.json, .claude/hooks/fleet/no-branch-reuse-nudge/tsconfig.json, .claude/hooks/fleet/no-corepack-guard/tsconfig.json, .claude/hooks/fleet/no-direct-linter-guard/tsconfig.json, .claude/hooks/fleet/no-disable-lint-rule-guard/tsconfig.json, .claude/hooks/fleet/no-empty-commit-guard/tsconfig.json, .claude/hooks/fleet/no-env-kill-switch-guard/tsconfig.json, .claude/hooks/fleet/no-ext-issue-ref-guard/tsconfig.json, .claude/hooks/fleet/no-file-oxlint-disable-guard/tsconfig.json, .claude/hooks/fleet/no-fleet-fork-guard/tsconfig.json, .claude/hooks/fleet/no-force-push-guard/tsconfig.json, .claude/hooks/fleet/no-github-ai-attribution-guard/tsconfig.json, .claude/hooks/fleet/no-hook-cmd-regex-guard/tsconfig.json, .claude/hooks/fleet/no-meta-comments-guard/tsconfig.json, .claude/hooks/fleet/no-new-config-guard/tsconfig.json, .claude/hooks/fleet/no-non-fleet-push-guard/tsconfig.json, .claude/hooks/fleet/no-npm-otp-flag-guard/tsconfig.json, .claude/hooks/fleet/no-orphaned-staging/tsconfig.json, .claude/hooks/fleet/no-other-linters-guard/tsconfig.json, .claude/hooks/fleet/no-pkgjson-pnpm-overrides-guard/tsconfig.json, .claude/hooks/fleet/no-placeholder-commit-subject-guard/tsconfig.json, .claude/hooks/fleet/no-platform-import-guard/tsconfig.json, .claude/hooks/fleet/no-pm-exec-guard/tsconfig.json, .claude/hooks/fleet/no-pr-from-default-branch-guard/tsconfig.json, .claude/hooks/fleet/no-pr-from-default-checkout-guard/tsconfig.json, .claude/hooks/fleet/no-pr-review-verdict-guard/tsconfig.json, .claude/hooks/fleet/no-premature-commit-kill-guard/tsconfig.json, .claude/hooks/fleet/no-private-path-in-source-guard/tsconfig.json, .claude/hooks/fleet/no-private-ref-in-tests-docs-guard/tsconfig.json, .claude/hooks/fleet/no-registry-mutation-in-repo-script-nudge/tsconfig.json, .claude/hooks/fleet/no-removal-comment-nudge/tsconfig.json, .claude/hooks/fleet/no-repo-scope-in-fleet-config-guard/tsconfig.json, .claude/hooks/fleet/no-revert-guard/tsconfig.json, .claude/hooks/fleet/no-strip-types-guard/tsconfig.json, .claude/hooks/fleet/no-subagent-commit-guard/tsconfig.json, .claude/hooks/fleet/no-tail-install-out-guard/tsconfig.json, .claude/hooks/fleet/no-test-in-scripts-guard/tsconfig.json, .claude/hooks/fleet/no-token-in-dotenv-guard/tsconfig.json, .claude/hooks/fleet/no-total-squash-guard/tsconfig.json, .claude/hooks/fleet/no-tsx-guard/tsconfig.json, .claude/hooks/fleet/no-underscore-ident-guard/tsconfig.json, .claude/hooks/fleet/no-unisolated-git-fixture-guard/tsconfig.json, .claude/hooks/fleet/no-unmocked-net-guard/tsconfig.json, .claude/hooks/fleet/no-upstream-gitlink-guard/tsconfig.json, .claude/hooks/fleet/no-verify-format-nudge/tsconfig.json, .claude/hooks/fleet/node-modules-staging-guard/tsconfig.json, .claude/hooks/fleet/non-fleet-pr-issue-ask-guard/tsconfig.json, .claude/hooks/fleet/npm-otp-flow-nudge/tsconfig.json, .claude/hooks/fleet/npmrc-trust-optout-guard/tsconfig.json, .claude/hooks/fleet/options-param-naming-guard/tsconfig.json, .claude/hooks/fleet/overeager-staging-guard/tsconfig.json, .claude/hooks/fleet/oxlint-plugin-load-nudge/tsconfig.json, .claude/hooks/fleet/package-manager-auto-update-guard/tsconfig.json, .claude/hooks/fleet/parallel-agent-edit-guard/tsconfig.json, .claude/hooks/fleet/parallel-agent-on-stop-nudge/tsconfig.json, .claude/hooks/fleet/parallel-agent-removal-nudge/tsconfig.json, .claude/hooks/fleet/parallel-agent-staging-guard/tsconfig.json, .claude/hooks/fleet/path-guard/tsconfig.json, .claude/hooks/fleet/path-regex-normalize-nudge/tsconfig.json, .claude/hooks/fleet/paths-mts-inherit-guard/tsconfig.json, .claude/hooks/fleet/personal-path-guard/tsconfig.json, .claude/hooks/fleet/plan-location-guard/tsconfig.json, .claude/hooks/fleet/plan-review-nudge/tsconfig.json, .claude/hooks/fleet/pnpm-filter-zero-match-nudge/tsconfig.json, .claude/hooks/fleet/pointer-comment-nudge/tsconfig.json, .claude/hooks/fleet/post-push-ci-monitor-nudge/tsconfig.json, .claude/hooks/fleet/pr-vs-push-default-nudge/tsconfig.json, .claude/hooks/fleet/pre-commit-race-nudge/tsconfig.json, .claude/hooks/fleet/prefer-async-spawn-guard/tsconfig.json, .claude/hooks/fleet/prefer-evergreen-target-nudge/tsconfig.json, .claude/hooks/fleet/prefer-fn-decl-guard/tsconfig.json, .claude/hooks/fleet/prefer-json-clone-guard/tsconfig.json, .claude/hooks/fleet/prefer-pipx-over-pip-guard/tsconfig.json, .claude/hooks/fleet/prefer-rebase-over-revert-nudge/tsconfig.json, .claude/hooks/fleet/prefer-type-import-guard/tsconfig.json, .claude/hooks/fleet/prefer-vitest-guard/tsconfig.json, .claude/hooks/fleet/primary-checkout-branch-guard/tsconfig.json, .claude/hooks/fleet/primary-checkout-on-default-stop-guard/tsconfig.json, .claude/hooks/fleet/private-name-nudge/tsconfig.json, .claude/hooks/fleet/proc-environ-exfil-guard/tsconfig.json, .claude/hooks/fleet/prompt-injection-guard/tsconfig.json, .claude/hooks/fleet/provenance-publish-nudge/tsconfig.json, .claude/hooks/fleet/public-surface-nudge/tsconfig.json, .claude/hooks/fleet/pull-request-target-guard/tsconfig.json, .claude/hooks/fleet/push-protected-branch-guard/tsconfig.json, .claude/hooks/fleet/readme-fleet-shape-guard/tsconfig.json, .claude/hooks/fleet/release-tag-tied-guard/tsconfig.json, .claude/hooks/fleet/release-workflow-guard/tsconfig.json, .claude/hooks/fleet/reply-prose-nudge/tsconfig.json, .claude/hooks/fleet/report-location-guard/tsconfig.json, .claude/hooks/fleet/reserved-script-dir-guard/tsconfig.json, .claude/hooks/fleet/rg-replace-flag-nudge/tsconfig.json, .claude/hooks/fleet/scan-label-in-commit-guard/tsconfig.json, .claude/hooks/fleet/secret-content-guard/tsconfig.json, .claude/hooks/fleet/session-handoff-nudge/tsconfig.json, .claude/hooks/fleet/setup-basics-tools/tsconfig.json, .claude/hooks/fleet/setup-claude-scanners/tsconfig.json, .claude/hooks/fleet/setup-firewall/tsconfig.json, .claude/hooks/fleet/setup-misc-tools/tsconfig.json, .claude/hooks/fleet/setup-security-tools/tsconfig.json, .claude/hooks/fleet/setup-signing/tsconfig.json, .claude/hooks/fleet/shallow-clone-guard/tsconfig.json, .claude/hooks/fleet/skill-usage-logger/tsconfig.json, .claude/hooks/fleet/small-pr-nudge/tsconfig.json, .claude/hooks/fleet/soak-exclude-date-guard/tsconfig.json, .claude/hooks/fleet/soak-exclude-scope-guard/tsconfig.json, .claude/hooks/fleet/soak-pin-needs-annotation-guard/tsconfig.json, .claude/hooks/fleet/squash-history-nudge/tsconfig.json, .claude/hooks/fleet/stale-process-sweeper/tsconfig.json, .claude/hooks/fleet/stop-claim-verify-nudge/tsconfig.json, .claude/hooks/fleet/sweep-ds-store/tsconfig.json, .claude/hooks/fleet/target-arch-env-guard/tsconfig.json, .claude/hooks/fleet/test-script-defers-guard/tsconfig.json, .claude/hooks/fleet/token-guard/tsconfig.json, .claude/hooks/fleet/token-spend-guard/tsconfig.json, .claude/hooks/fleet/trust-downgrade-guard/tsconfig.json, .claude/hooks/fleet/unbacked-claim-commit-guard/tsconfig.json, .claude/hooks/fleet/uncodified-lesson-nudge/tsconfig.json, .claude/hooks/fleet/unpushed-main-nudge/tsconfig.json, .claude/hooks/fleet/untrusted-coauthor-guard/tsconfig.json, .claude/hooks/fleet/uses-sha-verify-guard/tsconfig.json, .claude/hooks/fleet/variant-analysis-nudge/tsconfig.json, .claude/hooks/fleet/verify-absence-claims-nudge/tsconfig.json, .claude/hooks/fleet/verify-render-pre-commit-nudge/tsconfig.json, .claude/hooks/fleet/version-bump-order-guard/tsconfig.json, .claude/hooks/fleet/vitest-vs-node-test-guard/tsconfig.json, .claude/hooks/fleet/wheelhouse-drift-guard/tsconfig.json, .claude/hooks/fleet/workflow-multiline-body-guard/tsconfig.json, .claude/hooks/fleet/workflow-uses-comment-guard/tsconfig.json, .claude/hooks/fleet/worktree-remove-relink-nudge/tsconfig.json, napi/decmpfs/tsconfig.json, tsconfig.json"
}
}
],
"max_points": 11
},
{
"key": "reproducible_environment",
"name": "Reproducible environment",
"detail": "Dockerfile, lockfile",
"points": 10,
"status": "met",
"details": [
{
"code": "file_list",
"params": {
"files": "Dockerfile, lockfile"
}
}
],
"max_points": 10
},
{
"key": "demonstrated_agent_practice",
"name": "Demonstrated agent practice",
"detail": "no agent-authored commits among the last 85",
"points": 0,
"status": "missed",
"details": [
{
"code": "no_agent_authored_commits",
"params": {
"sampled": 85
}
}
],
"max_points": 10
},
{
"key": "automated_maintenance",
"name": "Automated maintenance",
"detail": "dependency automation configured, none observed in the sampled commits",
"points": 5,
"status": "partial",
"details": [
{
"code": "dependency_bot_config_only",
"params": {}
}
],
"max_points": 8
},
{
"key": "openssf_scorecard_pinned_dependencies",
"name": "OpenSSF Scorecard: Pinned-Dependencies",
"detail": "dependency not pinned by hash detected -- score normalized to 8",
"points": 8,
"status": "partial",
"details": [],
"max_points": 10
}
]
},
{
"key": "ai_code_legibility",
"band": "excellent",
"name": "Code legibility for models",
"note": null,
"notes": [],
"value": 99,
"inputs": {
"primary_language": "TypeScript",
"largest_source_bytes": 60023,
"source_files_sampled": 63,
"oversized_source_files": 1
},
"components": [
{
"key": "type_checkable_code",
"name": "Type-checkable code",
"detail": "TypeScript (statically typed)",
"points": 45,
"status": "met",
"details": [
{
"code": "statically_typed_language",
"params": {
"language": "TypeScript"
}
}
],
"max_points": 45
},
{
"key": "manageable_file_sizes",
"name": "Manageable file sizes",
"detail": "1/63 source files over 60KB",
"points": 54.1,
"status": "partial",
"details": [
{
"code": "oversized_source_files",
"params": {
"kb": 60,
"sampled": 63,
"oversized": 1
}
}
],
"max_points": 55
}
]
},
{
"key": "ai_interfaces",
"band": "critical",
"name": "Machine-readable interfaces",
"note": null,
"notes": [],
"value": 20,
"inputs": {
"example_dirs": [],
"has_mcp_signal": true,
"api_schema_files": []
},
"components": [
{
"key": "api_schema_openapi_graphql_proto",
"name": "API schema (OpenAPI/GraphQL/proto)",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
},
{
"key": "mcp_server",
"name": "MCP server",
"detail": null,
"points": 20,
"status": "met",
"details": [],
"max_points": 20
},
{
"key": "runnable_examples",
"name": "Runnable examples",
"detail": null,
"points": 0,
"status": "missed",
"details": [],
"max_points": 40
}
]
}
],
"description": "How well is the repo equipped to be developed and maintained with AI coding agents? An independent, experimental badge — weight 0.0, so it is surfaced on its own and does not affect the overall health score."
}
],
"metrics_version": "1.13.0"
},
"warnings": [
"Could not fetch crates package 'decmpfs-node' from its registry",
"crates package 'decmpfs' points at a different repository (https://github.com/decmpfs/decmpfs); excluded from ecosystem scoring"
],
"report_type": "repository",
"generated_at": "2026-07-26T22:49:09.991474Z",
"schema_version": "0.27.0",
"badge_url": "https://raw.githubusercontent.com/inspect-software/badges/main/v1/s/SocketDev/decmpfs.svg",
"full_name": "SocketDev/decmpfs",
"license_state": "standard",
"license_spdx": "MIT"
}